Repository: data-mermaid/mermaid-api
Pull request #562: 165 gh actions
Author: login: ms280690
Created: 2025-03-05T23:32:07Z | Merged: 2025-03-31T16:52:01Z


<!-- This is an auto-generated comment: release notes by coderabbit.ai -->
## Summary by CodeRabbit

## Summary by CodeRabbit

- **New Features**
	- Enhanced continuous deployment with dedicated steps for both development and production environments.
	- Updated automation for improved version management, permissions, and AWS credentials configuration.
	- Introduced a secure access feature for GitHub integration, streamlining identity and role management for enhanced security.
	- Added a new stack for GitHub access, facilitating OpenID Connect provider integration.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Last Action run: https://github.com/data-mermaid/mermaid-api/actions/runs/13687674636


Diff:
diff --git a/.github/workflows/deploy-cdk.yml b/.github/workflows/deploy-cdk.yml
index e1b2f7fb..5b47e430 100644
--- a/.github/workflows/deploy-cdk.yml
+++ b/.github/workflows/deploy-cdk.yml
@@ -16,6 +16,10 @@ on:
 concurrency:
   group: api-deployment-${{ github.ref }}
 
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read  # This is required for actions/checkout
+
 jobs:
   call-test:
     uses: ./.github/workflows/_test.yml
@@ -24,47 +28,65 @@ jobs:
     needs: [call-test]
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4.2.0
         with:
           node-version: '18'
-      
+
       - name: Setup Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5.4.0
         with:
           python-version: "3.10"
 
-      - uses: actions/checkout@v3
-      
+      - uses: actions/checkout@v4.2.2
+
       - name: Install CDK
         run: |
           iac/install_cdk.sh
 
-      - name: Set target and version for dev
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4.1.0
+        env:
+          CDK_DEFAULT_ACCOUNT: ${{ secrets.CDK_DEFAULT_ACCOUNT }}
+          DEPLOY_AWS_ROLE: ${{ secrets.DEPLOY_AWS_ROLE }}
+        with:
+          role-to-assume: arn:aws:iam::${{ secrets.CDK_DEFAULT_ACCOUNT }}:role/${{ secrets.DEPLOY_AWS_ROLE }}
+          aws-region: us-east-1
+          role-skip-session-tagging: true
+      - name: CDK Deploy DEV
         if: startsWith(github.ref, 'refs/heads/dev')
+        env:
+          DEPLOY_AWS_ROLE: ${{ secrets.DEPLOY_AWS_ROLE }}
+          SYS_EMAIL: ${{ secrets.SYS_EMAIL }}
+          PYTHONPATH: ${{ github.workspace }}
+          CDK_DEFAULT_ACCOUNT: ${{ secrets.CDK_DEFAULT_ACCOUNT }}
+          CDK_DEFAULT_REGION: us-east-1
         run: |
-          echo "TARGET=dev" >> "$GITHUB_ENV"
-          short_sha=$(git rev-parse --short ${{ github.sha }})
-          echo "$short_sha" > src/VERSION.txt
-          cat src/VERSION.txt
-
-      - name: Set target and version for prod
+          short_sha=$(git rev-parse --short ${{ github.sha }}) && \
+          echo "$short_sha" > src/VERSION.txt && \
+          cat src/VERSION.txt && \
+          cd iac && cdk deploy \
+            --require-approval never \
+            GithubAccess \
+            mermaid-api-infra-common \
+            dev-mermaid-api-django \
+            dev-mermaid-static-site
+      - name: CDK Deploy PROD
         if: startsWith(github.ref, 'refs/tags')
-        run: |
-          echo "TARGET=prod" >> "$GITHUB_ENV"
-          echo "${{ github.ref_name }}" > src/VERSION.txt
-          cat src/VERSION.txt
-
-      - name: CDK Deploy
         env:
-          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_CDK }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_CDK }}
+          DEPLOY_AWS_ROLE: ${{ secrets.DEPLOY_AWS_ROLE }}
           SYS_EMAIL: ${{ secrets.SYS_EMAIL }}
           PYTHONPATH: ${{ github.workspace }}
-          DEPLOY_AWS_ACCT: ${{ secrets.DEPLOY_AWS_ACCT }}
+          CDK_DEFAULT_ACCOUNT: ${{ secrets.CDK_DEFAULT_ACCOUNT }}
+          CDK_DEFAULT_REGION: us-east-1
         run: |
+          echo "${{ github.ref_name }}" > src/VERSION.txt && \
+          cat src/VERSION.txt && \
           cd iac && cdk deploy \
             --require-approval never \
-            "${{ env.TARGET }}"-mermaid-api-django \
-            "${{ env.TARGET }}"-mermaid-static-site
+            GithubAccess \
+            mermaid-api-infra-common \
+            prod-mermaid-api-django \
+            prod-mermaid-static-site
+
+
 
-      
diff --git a/iac/app.py b/iac/app.py
index 033bdd5e..e5d488f7 100644
--- a/iac/app.py
+++ b/iac/app.py
@@ -5,6 +5,7 @@
 from settings.prod import PROD_SETTINGS
 from stacks.api import ApiStack
 from stacks.common import CommonStack
+from stacks.github_access import GithubAccessStack
 from stacks.static_site import StaticSiteStack
 
 tags = {
@@ -21,6 +22,15 @@
     region=os.getenv("CDK_DEFAULT_REGION", "us-east-1"),
 )
 
+gh_access_stack = GithubAccessStack(
+    app,
+    "GithubAccess",
+    env=cdk_env,
+    tags={"Env": "Common"},
+    cross_region_references=True,
+)
+
+
 common_stack = CommonStack(
     app,
     "mermaid-api-infra-common",
diff --git a/iac/stacks/github_access.py b/iac/stacks/github_access.py
new file mode 100644
index 00000000..127cd574
--- /dev/null
+++ b/iac/stacks/github_access.py
@@ -0,0 +1,35 @@
+from aws_cdk import Duration, Stack, aws_iam as iam
+from constructs import Construct
+
+
+class GithubAccessStack(Stack):
+    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+        super().__init__(scope, construct_id, **kwargs)
+
+        externalOidcProvider = iam.OpenIdConnectProvider(
+            self,
+            "GithubOIDCProvider",
+            url="https://token.actions.githubusercontent.com",
+            client_ids=["sts.amazonaws.com"],
+        )
+
+        self.github_access_role = iam.Role(
+            self,
+            "GithubAccessRole",
+            assumed_by=iam.WebIdentityPrincipal(
+                identity_provider=externalOidcProvider.open_id_connect_provider_arn,
+                conditions={
+                    "StringEquals": {
+                        "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
+                    },
+                    "StringLike": {
+                        "token.actions.githubusercontent.com:sub": "repo:data-mermaid/mermaid-*"
+                    },
+                },
+            ),
+            max_session_duration=Duration.hours(3),
+        )
+
+        self.github_access_role.add_managed_policy(
+            iam.ManagedPolicy.from_aws_managed_policy_name("AdministratorAccess")
+        )
\ No newline at end of file


Reviews:
user: login: coderabbitai[bot]
body: **Actionable comments posted: 2**

<details>
<summary>🧹 Nitpick comments (3)</summary><blockquote>

<details>
<summary>iac/stacks/github_access.py (2)</summary><blockquote>

`16-31`: **Consider restricting the GitHub repository pattern for enhanced security.**

The current pattern `"repo:data-mermaid/mermaid-*"` allows access from any repository matching that pattern. For better security, consider restricting this to only specific repositories that need deployment access.


```diff
-                        "token.actions.githubusercontent.com:sub": "repo:data-mermaid/mermaid-*"
+                        "token.actions.githubusercontent.com:sub": "repo:data-mermaid/mermaid-api"
```

Alternatively, if multiple repositories need access, you could list them explicitly:

```diff
-                        "token.actions.githubusercontent.com:sub": "repo:data-mermaid/mermaid-*"
+                        "token.actions.githubusercontent.com:sub": [
+                            "repo:data-mermaid/mermaid-api",
+                            "repo:data-mermaid/mermaid-web"
+                        ]
```

---

`1-35`: **Add documentation comments to explain the purpose and security implications.**

This stack creates sensitive IAM resources. Consider adding class and method documentation to explain its purpose, security implications, and usage requirements.


```diff
 from aws_cdk import Duration, Stack, aws_iam as iam
 from constructs import Construct
 
 
+"""
+This module defines the GithubAccessStack, which creates the necessary
+AWS resources to allow GitHub Actions workflows to deploy CDK stacks.
+
+The stack creates an OIDC provider for GitHub Actions and an IAM role
+that can be assumed by GitHub Actions workflows from specified repositories.
+"""
+
 class GithubAccessStack(Stack):
+    """
+    Stack that creates the infrastructure needed for GitHub Actions to deploy CDK stacks.
+    
+    This stack creates:
+    - An OIDC provider for GitHub Actions
+    - An IAM role that can be assumed by GitHub Actions workflows
+    
+    Security considerations:
+    - The role is restricted to specific GitHub repositories
+    - Session duration is limited to 3 hours
+    - Access permissions should follow least privilege principle
+    """
     def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
         super().__init__(scope, construct_id, **kwargs)
```

</blockquote></details>
<details>
<summary>.github/workflows/deploy-cdk.yml (1)</summary><blockquote>

`76-76`: **Consider conditional deployment of GithubAccess stack.**

The GithubAccess stack is deployed in both DEV and PROD jobs, which may create duplicate resources if run sequentially. Since this appears to be a shared resource (based on the "Common" tag), consider deploying it only once or checking if it already exists.


You could add a condition to check if the stack already exists before deploying:

```diff
          cd iac && cdk deploy \
            --require-approval never \
-           GithubAccess \
+           $(aws cloudformation describe-stacks --stack-name GithubAccess >/dev/null 2>&1 || echo "GithubAccess") \
            mermaid-api-infra-common \
```

Alternatively, you could create a separate job just for the GithubAccess stack that runs before both DEV and PROD deployments:

```yaml
      - name: CDK Deploy Shared Resources
        if: startsWith(github.ref, 'refs/heads/dev') || startsWith(github.ref, 'refs/tags')
        env:
          DEPLOY_AWS_ROLE: ${{ secrets.DEPLOY_AWS_ROLE }}
          SYS_EMAIL: ${{ secrets.SYS_EMAIL }}
          PYTHONPATH: ${{ github.workspace }}
          CDK_DEFAULT_ACCOUNT: ${{ secrets.CDK_DEFAULT_ACCOUNT }}
          CDK_DEFAULT_REGION: us-east-1
        run: |
          cd iac && cdk deploy \
            --require-approval never \
            GithubAccess
```


Also applies to: 93-93

</blockquote></details>

</blockquote></details>

<details>
<summary>📜 Review details</summary>

**Configuration used: .coderabbit.yaml**
**Review profile: CHILL**
**Plan: Pro**

<details>
<summary>📥 Commits</summary>

Reviewing files that changed from the base of the PR and between eb3e5b3d09822d4e5ff25d80ffbeb69a478c3c2d and 1d4112584b8a07d6d412a299198b5c8aa35a3d18.

</details>

<details>
<summary>📒 Files selected for processing (3)</summary>

* `.github/workflows/deploy-cdk.yml` (3 hunks)
* `iac/app.py` (2 hunks)
* `iac/stacks/github_access.py` (1 hunks)

</details>

<details>
<summary>🔇 Additional comments (8)</summary><blockquote>

<details>
<summary>iac/app.py (2)</summary>

`8-8`: **Import statement is correctly added.**

The import for the new `GithubAccessStack` follows the project's import style and is appropriately placed with other stack imports.

---

`25-31`: **GitHub Access stack initialization looks good.**

The new `GithubAccessStack` is initialized with appropriate parameters and follows the same pattern as other stacks in the file. The tag `"Env": "Common"` appropriately marks this as a shared resource, and enabling `cross_region_references` is suitable for a centralized access management stack.

</details>
<details>
<summary>iac/stacks/github_access.py (1)</summary>

`9-14`: **OIDC provider configuration is properly set up for GitHub Actions.**

The OpenID Connect provider configuration uses the correct URL for GitHub Actions and appropriate client ID.

</details>
<details>
<summary>.github/workflows/deploy-cdk.yml (5)</summary>

`20-23`: **Well-configured permissions for OIDC authentication.**

The permissions are correctly set to the minimum required for OIDC authentication with AWS: write access to `id-token` for JWT requests and read access to `contents` for checkout.

---

`37-37`: **Good practice updating GitHub Actions to latest versions.**

Updating to the latest versions of GitHub Actions (`actions/setup-python@v5.4.0` and `actions/checkout@v4.2.2`) is a good security practice and ensures you have the latest features and bug fixes.



Also applies to: 41-41

---

`53-61`: **Securely configured AWS credentials using OIDC.**

Using OIDC federation with `aws-actions/configure-aws-credentials` is a security best practice as it avoids storing long-lived AWS credentials in GitHub secrets.

---

`62-80`: **Well-structured DEV deployment job with explicit stack names.**

The deployment process is now more explicit about which stacks are being deployed and better organized with specific version generation based on the git SHA.

---

`80-97`: **PROD deployment job has appropriate configuration.**

The production deployment job is correctly configured to deploy only on tag triggers and correctly sets the version based on the tag.

</details>

</blockquote></details>

</details>

<!-- This is an auto-generated comment by CodeRabbit for review status -->
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-03-05T23:35:37Z
user: login: coderabbitai[bot]
body: **Actionable comments posted: 0**

<details>
<summary>🧹 Nitpick comments (1)</summary><blockquote>

<details>
<summary>.github/workflows/deploy-cdk.yml (1)</summary><blockquote>

`11-14`: **Reminder: Remove Temporary Tag Triggers After Migration.**

The workflow still includes additional prod triggers (e.g. tags matching `w[0-9]+.[0-9]+` patterns) along with a TODO comment. Please ensure there’s a plan or an associated issue to remove these temporary triggers once the migration is complete.

</blockquote></details>

</blockquote></details>

<details>
<summary>📜 Review details</summary>

**Configuration used: .coderabbit.yaml**
**Review profile: CHILL**
**Plan: Pro**

<details>
<summary>📥 Commits</summary>

Reviewing files that changed from the base of the PR and between 82c4d980db20836883aed122985678494f2b8350 and 69ae284342ffb874c9b1005c5f36820c7097f138.

</details>

<details>
<summary>📒 Files selected for processing (1)</summary>

* `.github/workflows/deploy-cdk.yml` (2 hunks)

</details>

<details>
<summary>🔇 Additional comments (7)</summary><blockquote>

<details>
<summary>.github/workflows/deploy-cdk.yml (7)</summary>

`19-22`: **Appropriate Permissions Configuration.**

The newly added permissions block specifying `id-token: write` and `contents: read` is well configured to support the JWT requests and the checkout action. Confirm that these permissions align with the intended role-assumption strategy.

---

`31-34`: **Updated Node Setup Action Version.**

Switching to `actions/setup-node@v4.2.0` is appropriate and should work well with Node 18. Please verify that no downstream tasks are affected by this update.

---

`35-39`: **Updated Python Setup Action.**

The update to `actions/setup-python@v5.4.0` reflects current best practices. Be sure to test your Python environment as these newer versions sometimes bring subtle changes.

---

`40-41`: **Checkout Action Version Update Confirmed.**

Upgrading to `actions/checkout@v4.2.2` helps keep the repository checkout process secure and efficient.

---

`46-55`: **AWS Credentials Configuration for Role-based Access.**

The new step using `aws-actions/configure-aws-credentials@v4.1.0` is a well-structured addition. Verify that the secrets (`CDK_DEFAULT_ACCOUNT` and `DEPLOY_AWS_ROLE`) are correctly set up in your repository settings so the role assumption works as expected.

---

`55-72`: **Deployment for Development Environment.**

The CDK Deploy DEV step writes the commit’s short SHA to `src/VERSION.txt` before deployment, which is an effective way to track versions. Ensure that the version information is consistently utilized by the deployed stacks (`GithubAccess`, `mermaid-api-infra-common`, `dev-mermaid-api-django`, and `dev-mermaid-static-site`).

---

`73-90`: **Deployment for Production Environment.**

The PROD deployment step uses the Git tag name for versioning and deploys the production stacks accordingly. Please double-check that these stacks (including both `prod-mermaid-api-django` and `prod-mermaid-static-site`) are properly configured to consume the version changes.

</details>

</blockquote></details>

</details>

<!-- This is an auto-generated comment by CodeRabbit for review status -->
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-03-06T00:30:08Z
user: login: michaelconnor00
body: LGTM
state: APPROVED
author_association: COLLABORATOR
submitted_at: 2025-03-06T17:24:22Z

Review comments:
diff_hunk: @@ -0,0 +1,35 @@
+from aws_cdk import Duration, Stack, aws_iam as iam
+from constructs import Construct
+
+
+class GithubAccessStack(Stack):
+    def __init__(self, scope: Construct, construct_id: str, **kwargs) -> None:
+        super().__init__(scope, construct_id, **kwargs)
+
+        externalOidcProvider = iam.OpenIdConnectProvider(
+            self,
+            "GithubOIDCProvider",
+            url="https://token.actions.githubusercontent.com",
+            client_ids=["sts.amazonaws.com"],
+        )
+
+        self.github_access_role = iam.Role(
+            self,
+            "GithubAccessRole",
+            assumed_by=iam.WebIdentityPrincipal(
+                identity_provider=externalOidcProvider.open_id_connect_provider_arn,
+                conditions={
+                    "StringEquals": {
+                        "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
+                    },
+                    "StringLike": {
+                        "token.actions.githubusercontent.com:sub": "repo:data-mermaid/mermaid-*"
+                    },
+                },
+            ),
+            max_session_duration=Duration.hours(3),
+        )
+
+        self.github_access_role.add_managed_policy(
+            iam.ManagedPolicy.from_aws_managed_policy_name("AdministratorAccess")
+        )
path: iac/stacks/github_access.py
user: login: coderabbitai[bot]
body: _⚠️ Potential issue_

**Restrict permissions to follow the principle of least privilege.**

Granting `AdministratorAccess` to the GitHub Actions role is excessive and creates a security risk. It's best practice to provide only the specific permissions needed for the deployment process.

Consider creating a custom policy that grants only the permissions needed for CDK deployment, such as CloudFormation, S3, IAM for service roles, and specific service permissions relevant to your stacks.


```diff
- self.github_access_role.add_managed_policy(
-     iam.ManagedPolicy.from_aws_managed_policy_name("AdministratorAccess")
- )
+ # Create a custom policy with only the necessary permissions
+ deploy_policy = iam.ManagedPolicy(
+     self,
+     "GithubActionsCdkDeployPolicy",
+     statements=[
+         iam.PolicyStatement(
+             effect=iam.Effect.ALLOW,
+             actions=[
+                 "cloudformation:*",
+                 "s3:*",
+                 "iam:PassRole",
+                 "iam:GetRole",
+                 "iam:CreateRole",
+                 "iam:AttachRolePolicy",
+                 # Add other specific permissions needed for your CDK stacks
+             ],
+             resources=["*"],  # Further restrict to specific resources if possible
+         )
+     ],
+ )
+ 
+ self.github_access_role.add_managed_policy(deploy_policy)
```


<!-- suggestion_start -->

<details>
<summary>📝 Committable suggestion</summary>

> ‼️ **IMPORTANT**
> Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

`````suggestion
        # Create a custom policy with only the necessary permissions
        deploy_policy = iam.ManagedPolicy(
            self,
            "GithubActionsCdkDeployPolicy",
            statements=[
                iam.PolicyStatement(
                    effect=iam.Effect.ALLOW,
                    actions=[
                        "cloudformation:*",
                        "s3:*",
                        "iam:PassRole",
                        "iam:GetRole",
                        "iam:CreateRole",
                        "iam:AttachRolePolicy",
                        # Add other specific permissions needed for your CDK stacks
                    ],
                    resources=["*"],  # Further restrict to specific resources if possible
                )
            ],
        )
        
        self.github_access_role.add_managed_policy(deploy_policy)
`````

</details>

<!-- suggestion_end -->

<!-- This is an auto-generated comment by CodeRabbit -->
created_at: 2025-03-05T23:35:37Z
author_association: CONTRIBUTOR
diff_hunk: @@ -4,6 +4,7 @@ on:
   push:
     branches:
       - dev
+      - 165-gh-actions
path: .github/workflows/deploy-cdk.yml
user: login: coderabbitai[bot]
body: _⚠️ Potential issue_

**Remove development branch from triggers before merging.**

The branch `165-gh-actions` appears to be a development branch for this PR. Remove it from the triggers before merging to prevent unintended deployments.


```diff
      - dev
-      - 165-gh-actions
```


<!-- suggestion_start -->

<details>
<summary>📝 Committable suggestion</summary>

> ‼️ **IMPORTANT**
> Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

`````suggestion
      - dev
`````

</details>

<!-- suggestion_end -->

<!-- This is an auto-generated comment by CodeRabbit -->
created_at: 2025-03-05T23:35:37Z
author_association: CONTRIBUTOR

PR comments:
user: login: coderabbitai[bot]
created_at: 2025-03-05T23:32:14Z
body: <!-- This is an auto-generated comment: summarize by coderabbit.ai -->
<!-- walkthrough_start -->

## Walkthrough

The pull request updates the GitHub Actions workflow for deploying CDK stacks by adding a new permissions section, updating action versions, and revising deployment jobs for both development and production environments. Additionally, a new CDK stack—`GithubAccessStack`—is introduced, which initializes a GitHub OpenID Connect provider and an IAM role with AdministratorAccess. These changes clarify the deployment process and integrate GitHub Actions access management directly into the CDK application.

## Changes

| Files                                         | Change Summary                                                                                                                                                                                                                                                                     |
|-----------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| `.github/workflows/deploy-cdk.yml`            | Modified the deployment workflow by adding explicit job permissions (`id-token: write`, `contents: read`), updating action versions (setup-node from v3 to v4.2.0, setup-python from v2 to v5.4.0, checkout from v3 to v4.2.2), removing a legacy job, and adding new AWS credentials configuration alongside distinct deployment jobs for DEV and PROD. |
| `iac/app.py`                                  | Introduced the `GithubAccessStack` feature by instantiating it with specific environment parameters.                                                                                                                                                                               |
| `iac/stacks/github_access.py`                 | Added a new file defining the `GithubAccessStack` class, which initializes a GitHub OpenID Connect provider and creates an IAM role with AdministratorAccess for GitHub Actions integration.                                                                                     |

## Sequence Diagram(s)

```mermaid
sequenceDiagram
    participant Commit
    participant Workflow
    participant AWS
    participant DeployDev
    participant DeployProd

    Note over Commit, Workflow: Push to branch or tag event
    Commit->>Workflow: Trigger deployment workflow
    Workflow->>Workflow: Checkout code, run setup-python, update steps
    Workflow->>AWS: Configure AWS credentials
    alt On dev branch
      Workflow->>DeployDev: Execute "CDK Deploy DEV" (set version, deploy dev stacks)
    else On tag for production
      Workflow->>DeployProd: Execute "CDK Deploy PROD" (set version, deploy prod stacks)
    end
```

```mermaid
sequenceDiagram
    participant CDKApp
    participant GithubAccessStack
    participant OIDCProvider
    participant IAMRole

    CDKApp->>GithubAccessStack: Instantiate GithubAccessStack
    GithubAccessStack->>OIDCProvider: Initialize GitHub OIDC provider (URL, client IDs)
    GithubAccessStack->>IAMRole: Create IAM role with web identity principal
    Note over IAMRole: Role configured with AdministratorAccess and specific conditions
```

<!-- walkthrough_end -->
<!-- internal state start -->


<!-- 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 -->

<!-- internal state end -->
<!-- tips_start -->

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

<details>
<summary>❤️ Share</summary>

- [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai)
- [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai)
- [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai)
- [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)

</details>

<details>
<summary>🪧 Tips</summary>

### Chat

There are 3 ways to chat with [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=data-mermaid/mermaid-api&utm_content=562):

- Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  - `I pushed a fix in commit <commit_id>, please review it.`
  - `Generate unit testing code for this file.`
  - `Open a follow-up GitHub issue for this discussion.`
- Files and specific lines of code (under the "Files changed" tab): Tag `@coderabbitai` in a new review comment at the desired location with your query. Examples:
  - `@coderabbitai generate unit testing code for this file.`
  -	`@coderabbitai modularize this function.`
- PR comments: Tag `@coderabbitai` in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  - `@coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.`
  - `@coderabbitai read src/utils.ts and generate unit testing code.`
  - `@coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.`
  - `@coderabbitai help me debug CodeRabbit configuration file.`

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

### CodeRabbit Commands (Invoked using PR comments)

- `@coderabbitai pause` to pause the reviews on a PR.
- `@coderabbitai resume` to resume the paused reviews.
- `@coderabbitai review` to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
- `@coderabbitai full review` to do a full review from scratch and review all the files again.
- `@coderabbitai summary` to regenerate the summary of the PR.
- `@coderabbitai generate docstrings` to [generate docstrings](https://docs.coderabbit.ai/finishing-touches/docstrings) for this PR.
- `@coderabbitai resolve` resolve all the CodeRabbit review comments.
- `@coderabbitai configuration` to show the current CodeRabbit configuration for the repository.
- `@coderabbitai help` to get help.

### Other keywords and placeholders

- Add `@coderabbitai ignore` anywhere in the PR description to prevent this PR from being reviewed.
- Add `@coderabbitai summary` to generate the high-level summary at a specific location in the PR description.
- Add `@coderabbitai` anywhere in the PR title to generate the title automatically.

### Documentation and Community

- Visit our [Documentation](https://docs.coderabbit.ai) for detailed information on how to use CodeRabbit.
- Join our [Discord Community](http://discord.gg/coderabbit) to get help, request features, and share feedback.
- Follow us on [X/Twitter](https://twitter.com/coderabbitai) for updates and announcements.

</details>

<!-- tips_end -->
author_association: CONTRIBUTOR
user: login: github-actions[bot]
created_at: 2025-03-05T23:33:28Z
body: #### `cdk diff` Success
<details><summary>Show Output</summary>

```
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
start: Building d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Built d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
start: Publishing d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Published d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack GithubAccess
There were no differences
start: Building 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Built 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
start: Publishing 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Published 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack mermaid-api-infra-common
There were no differences
start: Building 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Built 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
start: Publishing 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Published 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-static-site
There were no differences
start: Building 4284ca8eb16c871ae05947e304b382e786fec9e09fa09b66bda01e32640f5a7a:554812291621-us-east-1
success: Built 4284ca8eb16c871ae05947e304b382e786fec9e09fa09b66bda01e32640f5a7a:554812291621-us-east-1
start: Publishing 4284ca8eb16c871ae05947e304b382e786fec9e09fa09b66bda01e32640f5a7a:554812291621-us-east-1
success: Published 4284ca8eb16c871ae05947e304b382e786fec9e09fa09b66bda01e32640f5a7a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:16280ef6eb2b7957137a6d02e146c1dcb9578ce349b0d53d43377e1e5f473194"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:16280ef6eb2b7957137a6d02e146c1dcb9578ce349b0d53d43377e1e5f473194"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:16280ef6eb2b7957137a6d02e146c1dcb9578ce349b0d53d43377e1e5f473194"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:16280ef6eb2b7957137a6d02e146c1dcb9578ce349b0d53d43377e1e5f473194"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:16280ef6eb2b7957137a6d02e146c1dcb9578ce349b0d53d43377e1e5f473194"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",

start: Building fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Built fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
start: Publishing fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Published fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-static-site
There were no differences
start: Building a94ab8337c0db8e5b4eafa518d803d773247a4676a0d30801005058998e0f64d:554812291621-us-east-1
success: Built a94ab8337c0db8e5b4eafa518d803d773247a4676a0d30801005058998e0f64d:554812291621-us-east-1
start: Publishing a94ab8337c0db8e5b4eafa518d803d773247a4676a0d30801005058998e0f64d:554812291621-us-east-1
success: Published a94ab8337c0db8e5b4eafa518d803d773247a4676a0d30801005058998e0f64d:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:93b0fea501a30b791119cf89771964db53a4c3afb4ee787231babf82a50ad708"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",


✨  Number of stacks with differences: 2

NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)

32775	(cli): CLI versions and CDK library versions have diverged

	Overview: Starting in CDK 2.179.0, CLI versions will no longer be in
	          lockstep with CDK library versions. CLI versions will now be
	          released as 2.1000.0 and continue with 2.1001.0, etc.

	Affected versions: cli: >=2.0.0 <=2.1005.0

	More information at: https://github.com/aws/aws-cdk/issues/32775


If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 32775".
```

</details>

*Workflow: `pr`*


author_association: NONE
user: login: ms280690
created_at: 2025-03-05T23:33:43Z
body: ![](https://github.trello.services/images/mini-trello-icon.png) [Configure GH Actions to use roles instead of User creds](https://trello.com/c/DPo8PaFU/165-configure-gh-actions-to-use-roles-instead-of-user-creds)
author_association: COLLABORATOR
user: login: github-actions[bot]
created_at: 2025-03-05T23:40:58Z
body: #### `cdk diff` Success
<details><summary>Show Output</summary>

```
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
start: Building d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Built d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
start: Publishing d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Published d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack GithubAccess
There were no differences
start: Building 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Built 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
start: Publishing 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Published 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack mermaid-api-infra-common
There were no differences
start: Building 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Built 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
start: Publishing 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Published 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-static-site
There were no differences
start: Building 2599135ac9b0703ea67cff1623f50508e33795f112893671fd6d1951201b2c46:554812291621-us-east-1
success: Built 2599135ac9b0703ea67cff1623f50508e33795f112893671fd6d1951201b2c46:554812291621-us-east-1
start: Publishing 2599135ac9b0703ea67cff1623f50508e33795f112893671fd6d1951201b2c46:554812291621-us-east-1
success: Published 2599135ac9b0703ea67cff1623f50508e33795f112893671fd6d1951201b2c46:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",

start: Building fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Built fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
start: Publishing fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Published fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-static-site
There were no differences
start: Building 64dc381be59dfff9502bf49640b4824f798db377f1a5aaed3a6edc82dbeeba3b:554812291621-us-east-1
success: Built 64dc381be59dfff9502bf49640b4824f798db377f1a5aaed3a6edc82dbeeba3b:554812291621-us-east-1
start: Publishing 64dc381be59dfff9502bf49640b4824f798db377f1a5aaed3a6edc82dbeeba3b:554812291621-us-east-1
success: Published 64dc381be59dfff9502bf49640b4824f798db377f1a5aaed3a6edc82dbeeba3b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ca184c0df5634a4dc319acbfdf6ce16957028058d5ab30de71aaeb56c7ab32b3"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",


✨  Number of stacks with differences: 2

NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)

32775	(cli): CLI versions and CDK library versions have diverged

	Overview: Starting in CDK 2.179.0, CLI versions will no longer be in
	          lockstep with CDK library versions. CLI versions will now be
	          released as 2.1000.0 and continue with 2.1001.0, etc.

	Affected versions: cli: >=2.0.0 <=2.1005.0

	More information at: https://github.com/aws/aws-cdk/issues/32775


If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 32775".
```

</details>

*Workflow: `pr`*


author_association: NONE
user: login: github-actions[bot]
created_at: 2025-03-05T23:49:33Z
body: #### `cdk diff` Success
<details><summary>Show Output</summary>

```
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
start: Building d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Built d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
start: Publishing d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Published d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack GithubAccess
There were no differences
start: Building 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Built 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
start: Publishing 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Published 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack mermaid-api-infra-common
There were no differences
start: Building 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Built 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
start: Publishing 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Published 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-static-site
There were no differences
start: Building 1eab3fba348f748148cf54c9d1048bc354707f7c348fa8303bb9592c11f12d5f:554812291621-us-east-1
success: Built 1eab3fba348f748148cf54c9d1048bc354707f7c348fa8303bb9592c11f12d5f:554812291621-us-east-1
start: Publishing 1eab3fba348f748148cf54c9d1048bc354707f7c348fa8303bb9592c11f12d5f:554812291621-us-east-1
success: Published 1eab3fba348f748148cf54c9d1048bc354707f7c348fa8303bb9592c11f12d5f:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",

start: Building fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Built fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
start: Publishing fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Published fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-static-site
There were no differences
start: Building ce36716c5dfc812df80bc7cbc9fe999d064d627cbf1e6574174538d502cf774a:554812291621-us-east-1
success: Built ce36716c5dfc812df80bc7cbc9fe999d064d627cbf1e6574174538d502cf774a:554812291621-us-east-1
start: Publishing ce36716c5dfc812df80bc7cbc9fe999d064d627cbf1e6574174538d502cf774a:554812291621-us-east-1
success: Published ce36716c5dfc812df80bc7cbc9fe999d064d627cbf1e6574174538d502cf774a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:99f2ae9d3852f7bcd78e8135d35809553a12bd871609dccd8be2b09b80bf4666"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",


✨  Number of stacks with differences: 2

NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)

32775	(cli): CLI versions and CDK library versions have diverged

	Overview: Starting in CDK 2.179.0, CLI versions will no longer be in
	          lockstep with CDK library versions. CLI versions will now be
	          released as 2.1000.0 and continue with 2.1001.0, etc.

	Affected versions: cli: >=2.0.0 <=2.1005.0

	More information at: https://github.com/aws/aws-cdk/issues/32775


If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 32775".
```

</details>

*Workflow: `pr`*


author_association: NONE
user: login: github-actions[bot]
created_at: 2025-03-06T00:28:47Z
body: #### `cdk diff` Success
<details><summary>Show Output</summary>

```
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
start: Building d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Built d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
start: Publishing d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Published d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack GithubAccess
There were no differences
start: Building 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Built 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
start: Publishing 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Published 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack mermaid-api-infra-common
There were no differences
start: Building 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Built 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
start: Publishing 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Published 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-static-site
There were no differences
start: Building c2039c57ec4a76cdadd631c4a08c10445169b2fe72bd78986f872a87bd25c994:554812291621-us-east-1
success: Built c2039c57ec4a76cdadd631c4a08c10445169b2fe72bd78986f872a87bd25c994:554812291621-us-east-1
start: Publishing c2039c57ec4a76cdadd631c4a08c10445169b2fe72bd78986f872a87bd25c994:554812291621-us-east-1
success: Published c2039c57ec4a76cdadd631c4a08c10445169b2fe72bd78986f872a87bd25c994:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:2f35106ea86a0e8fc6d9b555b0d6d0740636dabb972742ae28df44a60ed4634b"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",

start: Building fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Built fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
start: Publishing fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Published fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-static-site
There were no differences
start: Building f6460175a0d25d21a0e15a091d0446486959dd8c62100f5c9e7761f823d09bf0:554812291621-us-east-1
success: Built f6460175a0d25d21a0e15a091d0446486959dd8c62100f5c9e7761f823d09bf0:554812291621-us-east-1
start: Publishing f6460175a0d25d21a0e15a091d0446486959dd8c62100f5c9e7761f823d09bf0:554812291621-us-east-1
success: Published f6460175a0d25d21a0e15a091d0446486959dd8c62100f5c9e7761f823d09bf0:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:5d22e400f2a831e07effc07ab6f5d974abe9d7f546d36084b60b40f4f2515596"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a6611de81a97a859f0ea8035a25ce427e909fe3eec8a9c6cca4016145739c489"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",


✨  Number of stacks with differences: 2

NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)

32775	(cli): CLI versions and CDK library versions have diverged

	Overview: Starting in CDK 2.179.0, CLI versions will no longer be in
	          lockstep with CDK library versions. CLI versions will now be
	          released as 2.1000.0 and continue with 2.1001.0, etc.

	Affected versions: cli: >=2.0.0 <=2.1005.0

	More information at: https://github.com/aws/aws-cdk/issues/32775


If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 32775".
```

</details>

*Workflow: `pr`*


author_association: NONE
user: login: github-actions[bot]
created_at: 2025-03-27T00:20:42Z
body: #### `cdk diff` Success
<details><summary>Show Output</summary>

```
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
start: Building d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Built d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
start: Publishing d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Published d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack GithubAccess
There were no differences
start: Building 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Built 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
start: Publishing 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Published 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack mermaid-api-infra-common
There were no differences
start: Building 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Built 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
start: Publishing 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Published 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-static-site
There were no differences
start: Building 03608b5be8ac90b785044a2cd49b4436d9ece38823e05acfb6197cafe009a34c:554812291621-us-east-1
success: Built 03608b5be8ac90b785044a2cd49b4436d9ece38823e05acfb6197cafe009a34c:554812291621-us-east-1
start: Publishing 03608b5be8ac90b785044a2cd49b4436d9ece38823e05acfb6197cafe009a34c:554812291621-us-east-1
success: Published 03608b5be8ac90b785044a2cd49b4436d9ece38823e05acfb6197cafe009a34c:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a78cd76a75162c4438c7f8c269b62ecd4a7f9adb874a571602e619750d5d4579"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a78cd76a75162c4438c7f8c269b62ecd4a7f9adb874a571602e619750d5d4579"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a78cd76a75162c4438c7f8c269b62ecd4a7f9adb874a571602e619750d5d4579"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a78cd76a75162c4438c7f8c269b62ecd4a7f9adb874a571602e619750d5d4579"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:a78cd76a75162c4438c7f8c269b62ecd4a7f9adb874a571602e619750d5d4579"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",

start: Building fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Built fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
start: Publishing fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Published fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-static-site
There were no differences
start: Building 981909381e9a862febbbbb8fbfd5a6902dab168f631312510e4ab43a5f91b5d6:554812291621-us-east-1
success: Built 981909381e9a862febbbbb8fbfd5a6902dab168f631312510e4ab43a5f91b5d6:554812291621-us-east-1
start: Publishing 981909381e9a862febbbbb8fbfd5a6902dab168f631312510e4ab43a5f91b5d6:554812291621-us-east-1
success: Published 981909381e9a862febbbbb8fbfd5a6902dab168f631312510e4ab43a5f91b5d6:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:56833ef8fec0d5ec3466b203c3f20c7c65db1aa5897236cf55ecb39800aad37e"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",


✨  Number of stacks with differences: 2

NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)

32775	(cli): CLI versions and CDK library versions have diverged

	Overview: Starting in CDK 2.179.0, CLI versions will no longer be in
	          lockstep with CDK library versions. CLI versions will now be
	          released as 2.1000.0 and continue with 2.1001.0, etc.

	Affected versions: cli: >=2.0.0 <=2.1005.0

	More information at: https://github.com/aws/aws-cdk/issues/32775


If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 32775".
```

</details>

*Workflow: `pr`*


author_association: NONE
user: login: github-actions[bot]
created_at: 2025-03-31T16:32:58Z
body: #### `cdk diff` Success
<details><summary>Show Output</summary>

```
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!                                                                                                                  !!
!!  Node 18 is approaching end-of-life and will no longer be supported in new releases after 2025-04-30.            !!
!!  Please upgrade to a supported node version as soon as possible.                                                 !!
!!                                                                                                                  !!
!!  This software is currently running on node v18.20.7.                                                            !!
!!  As of the current release of this software, supported node releases are:                                        !!
!!  - ^22.0.0 (Planned end-of-life: 2027-04-30)                                                                     !!
!!  - ^20.0.0 (Planned end-of-life: 2026-04-30)                                                                     !!
!!  - ^18.0.0 (Planned end-of-life: 2025-04-30) [DEPRECATED]                                                        !!
!!                                                                                                                  !!
!!  This warning can be silenced by setting the JSII_SILENCE_WARNING_DEPRECATED_NODE_VERSION environment variable.  !!
!!                                                                                                                  !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
b'!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n'
b'!!                                                                                                                  !!\n'
b'!!  Node 18 is approaching end-of-life and will no longer be supported in new releases after 2025-04-30.            !!\n'
b'!!  Please upgrade to a supported node version as soon as possible.                                                 !!\n'
b'!!                                                                                                                  !!\n'
b'!!  This software is currently running on node v18.20.7.                                                            !!\n'
b'!!  As of the current release of this software, supported node releases are:                                        !!\n'
b'!!  - ^22.0.0 (Planned end-of-life: 2027-04-30)                                                                     !!\n'
b'!!  - ^20.0.0 (Planned end-of-life: 2026-04-30)                                                                     !!\n'
b'!!  - ^18.0.0 (Planned end-of-life: 2025-04-30) [DEPRECATED]                                                        !!\n'
b'!!                                                                                                                  !!\n'
b'!!  This warning can be silenced by setting the JSII_SILENCE_WARNING_DEPRECATED_NODE_VERSION environment variable.  !!\n'
b'!!                                                                                                                  !!\n'
b'!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n'
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
b'!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n'
b'!!                                                                                                                  !!\n'
b'!!  Node 18 is approaching end-of-life and will no longer be supported in new releases after 2025-04-30.            !!\n'
b'!!  Please upgrade to a supported node version as soon as possible.                                                 !!\n'
b'!!                                                                                                                  !!\n'
b'!!  This software is currently running on node v18.20.7.                                                            !!\n'
b'!!  As of the current release of this software, supported node releases are:                                        !!\n'
b'!!  - ^22.0.0 (Planned end-of-life: 2027-04-30)                                                                     !!\n'
b'!!  - ^20.0.0 (Planned end-of-life: 2026-04-30)                                                                     !!\n'
b'!!  - ^18.0.0 (Planned end-of-life: 2025-04-30) [DEPRECATED]                                                        !!\n'
b'!!                                                                                                                  !!\n'
b'!!  This warning can be silenced by setting the JSII_SILENCE_WARNING_DEPRECATED_NODE_VERSION environment variable.  !!\n'
b'!!                                                                                                                  !!\n'
b'!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n'
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cloudfront_origins.S3Origin#bind is deprecated.
  Use `S3BucketOrigin` or `S3StaticWebsiteOrigin` instead.
  This API will be removed in the next major release.
start: Building d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Built d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
start: Publishing d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
success: Published d16a4a7e85a028ce5a23207c35be21e40770c24ed7910afb051216dc3e75d85b:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack GithubAccess
There were no differences
start: Building 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Built 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
start: Publishing 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
success: Published 8cc542105b4018a9dd39091c988290e762a8020d13221a9f0fdad65c64a9179a:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack mermaid-api-infra-common
There were no differences
start: Building 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Built 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
start: Publishing 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
success: Published 20f0ea1e47d11e86e87f49fc00d4e5729524413f86141472fbb6d7f598729b14:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-static-site
There were no differences
start: Building 5d6a291b0350536737eaedb85d1835c484b6f159617e0954c31234568233c1a3:554812291621-us-east-1
success: Built 5d6a291b0350536737eaedb85d1835c484b6f159617e0954c31234568233c1a3:554812291621-us-east-1
start: Publishing 5d6a291b0350536737eaedb85d1835c484b6f159617e0954c31234568233c1a3:554812291621-us-east-1
success: Published 5d6a291b0350536737eaedb85d1835c484b6f159617e0954c31234568233c1a3:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack dev-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:80ead458285b13c24630e5daad3b7a6f049c846f2ecebc193173569229c72b93"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:80ead458285b13c24630e5daad3b7a6f049c846f2ecebc193173569229c72b93"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:80ead458285b13c24630e5daad3b7a6f049c846f2ecebc193173569229c72b93"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:80ead458285b13c24630e5daad3b7a6f049c846f2ecebc193173569229c72b93"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:80ead458285b13c24630e5daad3b7a6f049c846f2ecebc193173569229c72b93"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",

start: Building fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Built fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
start: Publishing fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
success: Published fd65879b47b028fd91d9f1395a2fe744750675ac4e4af81009ecf991697d02ad:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-static-site
There were no differences
start: Building 74d42030f921c1ce26402ae74f7b56d884cb07e11436f67df0398e0c52bd6769:554812291621-us-east-1
success: Built 74d42030f921c1ce26402ae74f7b56d884cb07e11436f67df0398e0c52bd6769:554812291621-us-east-1
start: Publishing 74d42030f921c1ce26402ae74f7b56d884cb07e11436f67df0398e0c52bd6769:554812291621-us-east-1
success: Published 74d42030f921c1ce26402ae74f7b56d884cb07e11436f67df0398e0c52bd6769:554812291621-us-east-1
Could not create a change set, will base the diff on template differences (run again with -v to see the reason)
Stack prod-mermaid-api-django
Resources
[~] AWS::ECS::TaskDefinition ScheduledBackupTaskDef ScheduledBackupTaskDef48789D5A replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition SummaryCacheTaskDef SummaryCacheTaskDefFAAC683D replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -118,7 +118,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ApiTaskDefinition ApiTaskDefinition51EA709E replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -113,7 +113,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition General/Worker/QueueProcessingTaskDef GeneralWorkerQueueProcessingTaskDef1C2A1522 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",
[~] AWS::ECS::TaskDefinition ImageProcess/Worker/QueueProcessingTaskDef ImageProcessWorkerQueueProcessingTaskDefACA5B138 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -125,7 +125,7 @@
        [ ] ],
        [ ] "Essential": true,
        [ ] "Image": {
        [-]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:f1d2f75a587281d50afd46e84838cebc2e5ed1db3e1cde9a1568d86a0bd7ffb9"
        [+]   "Fn::Sub": "554812291621.dkr.ecr.us-east-1.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-554812291621-us-east-1:ff29f7c662b84f43ae34ebbf64ddd266c67329fa08ca93a88bb258636c369abf"
        [ ] },
        [ ] "LogConfiguration": {
        [ ]   "LogDriver": "awslogs",


✨  Number of stacks with differences: 2

NOTICES         (What's this? https://github.com/aws/aws-cdk/wiki/CLI-Notices)

32775	(cli): CLI versions and CDK library versions have diverged

	Overview: Starting in CDK 2.179.0, CLI versions will no longer be in
	          lockstep with CDK library versions. CLI versions will now be
	          released as 2.1000.0 and continue with 2.1001.0, etc.

	Affected versions: cli: >=2.0.0 <=2.1005.0

	More information at: https://github.com/aws/aws-cdk/issues/32775


If you don’t want to see a notice anymore, use "cdk acknowledge <id>". For example, "cdk acknowledge 32775".
```

</details>

*Workflow: `pr`*


author_association: NONE