feat(secretsmanager): add support for rotateImmediatelyOnUpdate for secret rotation schedule (#25652)

colifran · web-flow · commit cdafcc52ad4a · 2023-05-23T13:37:21.000Z
When adding a rotation schedule to a secret, you can specify whether or not the secret should be rotated immediately. This is optional, and by default, the secret will be rotated immediately if rotateImmediatelyOnUpdate is undefined. This PR exposes the rotateImmediatelyOnUpdate property enabling the user to configure this as false if they do not want the secret to be rotated immediately. Configuring this property as being explicitly true will result in the secret being rotated immediately, which is the default behavior. Closes #25365 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk-integ-secret-hosted-rotation.assets.json b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk-integ-secret-hosted-rotation.assets.json
@@ -1,15 +1,15 @@
 {
-  "version": "20.0.0",
+  "version": "31.0.0",
   "files": {
-    "80e7147ae17e29a7810c1890b8caa90a140f0089dcb2dce470bd13d88e5acc41": {
+    "68111103cf6a45cb34025acaab5488606270170cf3e4bccee5883433fe58e704": {
       "source": {
         "path": "cdk-integ-secret-hosted-rotation.template.json",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "80e7147ae17e29a7810c1890b8caa90a140f0089dcb2dce470bd13d88e5acc41.json",
+          "objectKey": "68111103cf6a45cb34025acaab5488606270170cf3e4bccee5883433fe58e704.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk-integ-secret-hosted-rotation.template.json b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk-integ-secret-hosted-rotation.template.json
@@ -82,6 +82,7 @@
      "ExcludeCharacters": "&@/",
      "RotationType": "MySQLSingleUser"
     },
+    "RotateImmediatelyOnUpdate": false,
     "RotationRules": {
      "AutomaticallyAfterDays": 30
     }
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk.out b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk.out
@@ -1 +1 @@
-{"version":"20.0.0"}
+{"version":"31.0.0"}
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/integ.json b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/integ.json
@@ -1,5 +1,5 @@
 {
-  "version": "20.0.0",
+  "version": "31.0.0",
   "testCases": {
     "integ.hosted-rotation": {
       "stacks": [
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/manifest.json b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/manifest.json
@@ -1,12 +1,6 @@
 {
-  "version": "20.0.0",
+  "version": "31.0.0",
   "artifacts": {
-    "Tree": {
-      "type": "cdk:tree",
-      "properties": {
-        "file": "tree.json"
-      }
-    },
     "cdk-integ-secret-hosted-rotation.assets": {
       "type": "cdk:asset-manifest",
       "properties": {
@@ -23,7 +17,7 @@
         "validateOnSynth": false,
         "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
         "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
-        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/80e7147ae17e29a7810c1890b8caa90a140f0089dcb2dce470bd13d88e5acc41.json",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/68111103cf6a45cb34025acaab5488606270170cf3e4bccee5883433fe58e704.json",
         "requiresBootstrapStackVersion": 6,
         "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
         "additionalDependencies": [
@@ -89,6 +83,12 @@
         ]
       },
       "displayName": "cdk-integ-secret-hosted-rotation"
+    },
+    "Tree": {
+      "type": "cdk:tree",
+      "properties": {
+        "file": "tree.json"
+      }
     }
   }
 }
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/tree.json b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/tree.json
@@ -4,14 +4,6 @@
     "id": "App",
     "path": "",
     "children": {
-      "Tree": {
-        "id": "Tree",
-        "path": "Tree",
-        "constructInfo": {
-          "fqn": "constructs.Construct",
-          "version": "10.1.85"
-        }
-      },
       "cdk-integ-secret-hosted-rotation": {
         "id": "cdk-integ-secret-hosted-rotation",
         "path": "cdk-integ-secret-hosted-rotation",
@@ -30,7 +22,7 @@
                   }
                 },
                 "constructInfo": {
-                  "fqn": "@aws-cdk/aws-secretsmanager.CfnSecret",
+                  "fqn": "aws-cdk-lib.aws_secretsmanager.CfnSecret",
                   "version": "0.0.0"
                 }
               },
@@ -57,13 +49,13 @@
                       }
                     },
                     "constructInfo": {
-                      "fqn": "@aws-cdk/aws-secretsmanager.CfnRotationSchedule",
+                      "fqn": "aws-cdk-lib.aws_secretsmanager.CfnRotationSchedule",
                       "version": "0.0.0"
                     }
                   }
                 },
                 "constructInfo": {
-                  "fqn": "@aws-cdk/aws-secretsmanager.RotationSchedule",
+                  "fqn": "aws-cdk-lib.aws_secretsmanager.RotationSchedule",
                   "version": "0.0.0"
                 }
               },
@@ -111,19 +103,19 @@
                       }
                     },
                     "constructInfo": {
-                      "fqn": "@aws-cdk/aws-secretsmanager.CfnResourcePolicy",
+                      "fqn": "aws-cdk-lib.aws_secretsmanager.CfnResourcePolicy",
                       "version": "0.0.0"
                     }
                   }
                 },
                 "constructInfo": {
-                  "fqn": "@aws-cdk/aws-secretsmanager.ResourcePolicy",
+                  "fqn": "aws-cdk-lib.aws_secretsmanager.ResourcePolicy",
                   "version": "0.0.0"
                 }
               }
             },
             "constructInfo": {
-              "fqn": "@aws-cdk/aws-secretsmanager.Secret",
+              "fqn": "aws-cdk-lib.aws_secretsmanager.Secret",
               "version": "0.0.0"
             }
           },
@@ -143,7 +135,7 @@
                   }
                 },
                 "constructInfo": {
-                  "fqn": "@aws-cdk/aws-secretsmanager.CfnSecret",
+                  "fqn": "aws-cdk-lib.aws_secretsmanager.CfnSecret",
                   "version": "0.0.0"
                 }
               },
@@ -164,19 +156,20 @@
                           "rotationType": "MySQLSingleUser",
                           "excludeCharacters": "&@/"
                         },
+                        "rotateImmediatelyOnUpdate": false,
                         "rotationRules": {
                           "automaticallyAfterDays": 30
                         }
                       }
                     },
                     "constructInfo": {
-                      "fqn": "@aws-cdk/aws-secretsmanager.CfnRotationSchedule",
+                      "fqn": "aws-cdk-lib.aws_secretsmanager.CfnRotationSchedule",
                       "version": "0.0.0"
                     }
                   }
                 },
                 "constructInfo": {
-                  "fqn": "@aws-cdk/aws-secretsmanager.RotationSchedule",
+                  "fqn": "aws-cdk-lib.aws_secretsmanager.RotationSchedule",
                   "version": "0.0.0"
                 }
               },
@@ -224,32 +217,56 @@
                       }
                     },
                     "constructInfo": {
-                      "fqn": "@aws-cdk/aws-secretsmanager.CfnResourcePolicy",
+                      "fqn": "aws-cdk-lib.aws_secretsmanager.CfnResourcePolicy",
                       "version": "0.0.0"
                     }
                   }
                 },
                 "constructInfo": {
-                  "fqn": "@aws-cdk/aws-secretsmanager.ResourcePolicy",
+                  "fqn": "aws-cdk-lib.aws_secretsmanager.ResourcePolicy",
                   "version": "0.0.0"
                 }
               }
             },
             "constructInfo": {
-              "fqn": "@aws-cdk/aws-secretsmanager.Secret",
+              "fqn": "aws-cdk-lib.aws_secretsmanager.Secret",
+              "version": "0.0.0"
+            }
+          },
+          "BootstrapVersion": {
+            "id": "BootstrapVersion",
+            "path": "cdk-integ-secret-hosted-rotation/BootstrapVersion",
+            "constructInfo": {
+              "fqn": "aws-cdk-lib.CfnParameter",
+              "version": "0.0.0"
+            }
+          },
+          "CheckBootstrapVersion": {
+            "id": "CheckBootstrapVersion",
+            "path": "cdk-integ-secret-hosted-rotation/CheckBootstrapVersion",
+            "constructInfo": {
+              "fqn": "aws-cdk-lib.CfnRule",
               "version": "0.0.0"
             }
           }
         },
+        "constructInfo": {
+          "fqn": "aws-cdk-lib.Stack",
+          "version": "0.0.0"
+        }
+      },
+      "Tree": {
+        "id": "Tree",
+        "path": "Tree",
         "constructInfo": {
           "fqn": "constructs.Construct",
-          "version": "10.1.85"
+          "version": "10.2.26"
         }
       }
     },
     "constructInfo": {
-      "fqn": "constructs.Construct",
-      "version": "10.1.85"
+      "fqn": "aws-cdk-lib.App",
+      "version": "0.0.0"
     }
   }
 }
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.ts b/packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.ts
@@ -17,6 +17,7 @@ class TestStack extends cdk.Stack {
     });
     customSecret.addRotationSchedule('Schedule', {
       hostedRotation: secretsmanager.HostedRotation.mysqlSingleUser(),
+      rotateImmediatelyOnUpdate: false,
     });
   }
 }
diff --git a/packages/aws-cdk-lib/aws-secretsmanager/README.md b/packages/aws-cdk-lib/aws-secretsmanager/README.md
@@ -124,6 +124,7 @@ const secret = new secretsmanager.Secret(this, 'Secret');
 
 secret.addRotationSchedule('RotationSchedule', {
   hostedRotation: secretsmanager.HostedRotation.mysqlSingleUser(),
+  rotateImmediatelyOnUpdate: false, // by default, Secrets Manager rotates the secret immediately
 });
 ```
 
diff --git a/packages/aws-cdk-lib/aws-secretsmanager/lib/rotation-schedule.ts b/packages/aws-cdk-lib/aws-secretsmanager/lib/rotation-schedule.ts
@@ -42,6 +42,14 @@ export interface RotationScheduleOptions {
    * @default Duration.days(30)
    */
   readonly automaticallyAfter?: Duration;
+
+  /**
+   * Specifies whether to rotate the secret immediately or wait until the next
+   * scheduled rotation window.
+   *
+   * @default - secret is rotated immediately
+   */
+  readonly rotateImmediatelyOnUpdate?: boolean;
 }
 
 /**
@@ -132,6 +140,7 @@ export class RotationSchedule extends Resource {
       rotationLambdaArn: props.rotationLambda?.functionArn,
       hostedRotationLambda: props.hostedRotation?.bind(props.secret, this),
       rotationRules,
+      rotateImmediatelyOnUpdate: props.rotateImmediatelyOnUpdate,
     });
 
     // Prevent secrets deletions when rotation is in place
diff --git a/packages/aws-cdk-lib/aws-secretsmanager/test/rotation-schedule.test.ts b/packages/aws-cdk-lib/aws-secretsmanager/test/rotation-schedule.test.ts
@@ -43,6 +43,34 @@ test('create a rotation schedule with a rotation Lambda', () => {
   });
 });
 
+test('create a rotation schedule without immediate rotation', () => {
+  // GIVEN
+  const secret = new secretsmanager.Secret(stack, 'Secret');
+  const rotationLambda = new lambda.Function(stack, 'Lambda', {
+    runtime: lambda.Runtime.NODEJS_14_X,
+    code: lambda.Code.fromInline('export.handler = event => event;'),
+    handler: 'index.handler',
+  });
+
+  // WHEN
+  new secretsmanager.RotationSchedule(stack, 'RotationSchedule', {
+    secret,
+    rotationLambda,
+    rotateImmediatelyOnUpdate: false,
+  });
+
+  // THEN
+  Template.fromStack(stack).hasResourceProperties('AWS::SecretsManager::RotationSchedule', {
+    SecretId: {
+      Ref: 'SecretA720EF05',
+    },
+    RotationRules: {
+      AutomaticallyAfterDays: 30,
+    },
+    RotateImmediatelyOnUpdate: false,
+  });
+});
+
 test('assign permissions for rotation schedule with a rotation Lambda', () => {
   // GIVEN
   const secret = new secretsmanager.Secret(stack, 'Secret');

Original file line number	Diff line number	Diff line change
`@@ -1,15 +1,15 @@`
`1`	`1`	`{`
`2`		`- "version": "20.0.0",`
	`2`	`+ "version": "31.0.0",`
`3`	`3`	`"files": {`
`4`		`- "80e7147ae17e29a7810c1890b8caa90a140f0089dcb2dce470bd13d88e5acc41": {`
	`4`	`+ "68111103cf6a45cb34025acaab5488606270170cf3e4bccee5883433fe58e704": {`
`5`	`5`	`"source": {`
`6`	`6`	`"path": "cdk-integ-secret-hosted-rotation.template.json",`
`7`	`7`	`"packaging": "file"`
`8`	`8`	`},`
`9`	`9`	`"destinations": {`
`10`	`10`	`"current_account-current_region": {`
`11`	`11`	`"bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",`
`12`		`- "objectKey": "80e7147ae17e29a7810c1890b8caa90a140f0089dcb2dce470bd13d88e5acc41.json",`
	`12`	`+ "objectKey": "68111103cf6a45cb34025acaab5488606270170cf3e4bccee5883433fe58e704.json",`
`13`	`13`	`"assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"`
`14`	`14`	`}`
`15`	`15`	`}`
Original file line number	Diff line number	Diff line change
`@@ -82,6 +82,7 @@`
`82`	`82`	`"ExcludeCharacters": "&@/",`
`83`	`83`	`"RotationType": "MySQLSingleUser"`
`84`	`84`	`},`
	`85`	`+ "RotateImmediatelyOnUpdate": false,`
`85`	`86`	`"RotationRules": {`
`86`	`87`	`"AutomaticallyAfterDays": 30`
`87`	`88`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-{"version":"20.0.0"}`
	`1`	`+{"version":"31.0.0"}`
Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`{`
`2`		`- "version": "20.0.0",`
	`2`	`+ "version": "31.0.0",`
`3`	`3`	`"testCases": {`
`4`	`4`	`"integ.hosted-rotation": {`
`5`	`5`	`"stacks": [`
Original file line number	Diff line number	Diff line change
`@@ -4,14 +4,6 @@`
`4`	`4`	`"id": "App",`
`5`	`5`	`"path": "",`
`6`	`6`	`"children": {`
`7`		`- "Tree": {`
`8`		`- "id": "Tree",`
`9`		`- "path": "Tree",`
`10`		`- "constructInfo": {`
`11`		`- "fqn": "constructs.Construct",`
`12`		`- "version": "10.1.85"`
`13`		`- }`
`14`		`- },`
`15`	`7`	`"cdk-integ-secret-hosted-rotation": {`
`16`	`8`	`"id": "cdk-integ-secret-hosted-rotation",`
`17`	`9`	`"path": "cdk-integ-secret-hosted-rotation",`
`@@ -30,7 +22,7 @@`
`30`	`22`	`}`
`31`	`23`	`},`
`32`	`24`	`"constructInfo": {`
`33`		`- "fqn": "@aws-cdk/aws-secretsmanager.CfnSecret",`
	`25`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.CfnSecret",`
`34`	`26`	`"version": "0.0.0"`
`35`	`27`	`}`
`36`	`28`	`},`
`@@ -57,13 +49,13 @@`
`57`	`49`	`}`
`58`	`50`	`},`
`59`	`51`	`"constructInfo": {`
`60`		`- "fqn": "@aws-cdk/aws-secretsmanager.CfnRotationSchedule",`
	`52`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.CfnRotationSchedule",`
`61`	`53`	`"version": "0.0.0"`
`62`	`54`	`}`
`63`	`55`	`}`
`64`	`56`	`},`
`65`	`57`	`"constructInfo": {`
`66`		`- "fqn": "@aws-cdk/aws-secretsmanager.RotationSchedule",`
	`58`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.RotationSchedule",`
`67`	`59`	`"version": "0.0.0"`
`68`	`60`	`}`
`69`	`61`	`},`
`@@ -111,19 +103,19 @@`
`111`	`103`	`}`
`112`	`104`	`},`
`113`	`105`	`"constructInfo": {`
`114`		`- "fqn": "@aws-cdk/aws-secretsmanager.CfnResourcePolicy",`
	`106`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.CfnResourcePolicy",`
`115`	`107`	`"version": "0.0.0"`
`116`	`108`	`}`
`117`	`109`	`}`
`118`	`110`	`},`
`119`	`111`	`"constructInfo": {`
`120`		`- "fqn": "@aws-cdk/aws-secretsmanager.ResourcePolicy",`
	`112`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.ResourcePolicy",`
`121`	`113`	`"version": "0.0.0"`
`122`	`114`	`}`
`123`	`115`	`}`
`124`	`116`	`},`
`125`	`117`	`"constructInfo": {`
`126`		`- "fqn": "@aws-cdk/aws-secretsmanager.Secret",`
	`118`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.Secret",`
`127`	`119`	`"version": "0.0.0"`
`128`	`120`	`}`
`129`	`121`	`},`
`@@ -143,7 +135,7 @@`
`143`	`135`	`}`
`144`	`136`	`},`
`145`	`137`	`"constructInfo": {`
`146`		`- "fqn": "@aws-cdk/aws-secretsmanager.CfnSecret",`
	`138`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.CfnSecret",`
`147`	`139`	`"version": "0.0.0"`
`148`	`140`	`}`
`149`	`141`	`},`
`@@ -164,19 +156,20 @@`
`164`	`156`	`"rotationType": "MySQLSingleUser",`
`165`	`157`	`"excludeCharacters": "&@/"`
`166`	`158`	`},`
	`159`	`+ "rotateImmediatelyOnUpdate": false,`
`167`	`160`	`"rotationRules": {`
`168`	`161`	`"automaticallyAfterDays": 30`
`169`	`162`	`}`
`170`	`163`	`}`
`171`	`164`	`},`
`172`	`165`	`"constructInfo": {`
`173`		`- "fqn": "@aws-cdk/aws-secretsmanager.CfnRotationSchedule",`
	`166`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.CfnRotationSchedule",`
`174`	`167`	`"version": "0.0.0"`
`175`	`168`	`}`
`176`	`169`	`}`
`177`	`170`	`},`
`178`	`171`	`"constructInfo": {`
`179`		`- "fqn": "@aws-cdk/aws-secretsmanager.RotationSchedule",`
	`172`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.RotationSchedule",`
`180`	`173`	`"version": "0.0.0"`
`181`	`174`	`}`
`182`	`175`	`},`
`@@ -224,32 +217,56 @@`
`224`	`217`	`}`
`225`	`218`	`},`
`226`	`219`	`"constructInfo": {`
`227`		`- "fqn": "@aws-cdk/aws-secretsmanager.CfnResourcePolicy",`
	`220`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.CfnResourcePolicy",`
`228`	`221`	`"version": "0.0.0"`
`229`	`222`	`}`
`230`	`223`	`}`
`231`	`224`	`},`
`232`	`225`	`"constructInfo": {`
`233`		`- "fqn": "@aws-cdk/aws-secretsmanager.ResourcePolicy",`
	`226`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.ResourcePolicy",`
`234`	`227`	`"version": "0.0.0"`
`235`	`228`	`}`
`236`	`229`	`}`
`237`	`230`	`},`
`238`	`231`	`"constructInfo": {`
`239`		`- "fqn": "@aws-cdk/aws-secretsmanager.Secret",`
	`232`	`+ "fqn": "aws-cdk-lib.aws_secretsmanager.Secret",`
	`233`	`+ "version": "0.0.0"`
	`234`	`+ }`
	`235`	`+ },`
	`236`	`+ "BootstrapVersion": {`
	`237`	`+ "id": "BootstrapVersion",`
	`238`	`+ "path": "cdk-integ-secret-hosted-rotation/BootstrapVersion",`
	`239`	`+ "constructInfo": {`
	`240`	`+ "fqn": "aws-cdk-lib.CfnParameter",`
	`241`	`+ "version": "0.0.0"`
	`242`	`+ }`
	`243`	`+ },`
	`244`	`+ "CheckBootstrapVersion": {`
	`245`	`+ "id": "CheckBootstrapVersion",`
	`246`	`+ "path": "cdk-integ-secret-hosted-rotation/CheckBootstrapVersion",`
	`247`	`+ "constructInfo": {`
	`248`	`+ "fqn": "aws-cdk-lib.CfnRule",`
`240`	`249`	`"version": "0.0.0"`
`241`	`250`	`}`
`242`	`251`	`}`
`243`	`252`	`},`
	`253`	`+ "constructInfo": {`
	`254`	`+ "fqn": "aws-cdk-lib.Stack",`
	`255`	`+ "version": "0.0.0"`
	`256`	`+ }`
	`257`	`+ },`
	`258`	`+ "Tree": {`
	`259`	`+ "id": "Tree",`
	`260`	`+ "path": "Tree",`
`244`	`261`	`"constructInfo": {`
`245`	`262`	`"fqn": "constructs.Construct",`
`246`		`- "version": "10.1.85"`
	`263`	`+ "version": "10.2.26"`
`247`	`264`	`}`
`248`	`265`	`}`
`249`	`266`	`},`
`250`	`267`	`"constructInfo": {`
`251`		`- "fqn": "constructs.Construct",`
`252`		`- "version": "10.1.85"`
	`268`	`+ "fqn": "aws-cdk-lib.App",`
	`269`	`+ "version": "0.0.0"`
`253`	`270`	`}`
`254`	`271`	`}`
`255`	`272`	`}`
Original file line number	Diff line number	Diff line change
`@@ -17,6 +17,7 @@ class TestStack extends cdk.Stack {`
`17`	`17`	`});`
`18`	`18`	`customSecret.addRotationSchedule('Schedule', {`
`19`	`19`	`hostedRotation: secretsmanager.HostedRotation.mysqlSingleUser(),`
	`20`	`+ rotateImmediatelyOnUpdate: false,`
`20`	`21`	`});`
`21`	`22`	`}`
`22`	`23`	`}`