Skip to content

Conversation

@dwbcodes
Copy link

@dwbcodes dwbcodes commented Nov 11, 2025

Issue

Updates the GovCloud (aws-us-gov) SAR version for SecretsManagerRDSMySQLRotationSingleUser from 1.1.213 to 1.1.319.

Closes # N/A

Reason for this change

The current SAR version (1.1.213) in CDK for GovCloud uses Python 3.9, which will be Deprecated Dec 15th. The newer SAR version 1.1.319 uses Python 3.10, which is supported until October 31, 2027.

  • 1.1.213 uses Python 3.9
  • 1.1.319 uses Python 3.10

Description of changes

  • Updated SecretRotationApplication to return 1.1.319 for aws-us-gov partition.

Describe any new or updated permissions being added

N/A

Description of how you validated changes

Linked my CDK app to the aws-cdk-lib and upgrade my secretsRotationLambda which is now on 3.10.

diff AuroraDb.template.json cdk.out/AuroraDb.template.json
965c965
<     "semanticVersion": "1.1.213"
---
>     "semanticVersion": "1.1.319"

From


Screenshot 2025-11-11 141603

To


image

Checklist


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@github-actions github-actions bot added the beginning-contributor [Pilot] contributed between 0-2 PRs to the CDK label Nov 11, 2025
@aws-cdk-automation aws-cdk-automation requested a review from a team November 11, 2025 22:47
@github-actions github-actions bot added the p2 label Nov 11, 2025
Copy link
Collaborator

@aws-cdk-automation aws-cdk-automation left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(This review is outdated)

@dwbcodes dwbcodes changed the title fix(aws-secretsmanager): update GovCloud SAR version to 1.1.319 fix(secretsmanager): update GovCloud SAR version to 1.1.319 Nov 11, 2025
 PASS  aws-secretsmanager/test/secret-rotation.test.ts (5.892 s)
  ✓ secret rotation single user (386 ms)
  ✓ secret rotation multi user (147 ms)
  ✓ secret rotation allows passing an empty string for excludeCharacters (141 ms)
  ✓ secret rotation without immediate rotation (107 ms)
  ✓ throws when connections object has no default port range (53 ms)
  ✓ throws when master secret is missing for a multi user application (14 ms)
  ✓ rotation function name does not exceed 64 chars (106 ms)
  ✓ with interface vpc endpoint (100 ms)
  SecretRotationApplication partition version
    ✓ returns correct version for aws partition (25 ms)
    ✓ returns correct version for aws-cn partition (10 ms)
    ✓ returns correct version for aws-us-gov partition (9 ms)
    ✓ throws for unsupported partition (31 ms)
    ✓ returns correct ARN for aws-us-gov partition (12 ms)
  CloudFormation mapping for all partitions
    ✓ includes correct versions for all cloud types (129 ms)
    ✓ includes correct mapping for all rotation applications (388 ms)
@dwbcodes
Copy link
Author

Clarification Request: I am not sure if this PR needs an integration test for a simple version modification.

@aws-cdk-automation aws-cdk-automation added the pr/reviewer-clarification-requested The contributor has requested clarification on feedback, a failing build, or a failing PR Linter run label Nov 12, 2025
@dwbcodes dwbcodes changed the title fix(secretsmanager): update GovCloud SAR version to 1.1.319 chore(secretsmanager): update GovCloud SAR version to 1.1.319 Nov 14, 2025
@aws-cdk-automation aws-cdk-automation dismissed their stale review November 14, 2025 18:14

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

beginning-contributor [Pilot] contributed between 0-2 PRs to the CDK p2 pr/reviewer-clarification-requested The contributor has requested clarification on feedback, a failing build, or a failing PR Linter run

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants