diff --git a/cdk.schema.json b/cdk.schema.json
index ebf01561..a026f3fe 100644
--- a/cdk.schema.json
+++ b/cdk.schema.json
@@ -7628,6 +7628,43 @@
       },
       "comment": "aws-cdk-lib.aws_iam.SamlPrincipal.<initializer>"
     },
+    "aws-cdk-lib.aws_iam.ServicePrincipal.fromStaticServicePrincipleName": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "aws-cdk-lib.aws_iam.ServicePrincipal.fromStaticServicePrincipleName": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": [
+                {
+                  "anyOf": [
+                    {
+                      "$ref": "#/definitions/StringExpression"
+                    },
+                    {
+                      "$ref": "#/definitions/IntrinsicExpression"
+                    }
+                  ]
+                }
+              ],
+              "maxItems": 1
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/StringExpression"
+                },
+                {
+                  "$ref": "#/definitions/IntrinsicExpression"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "comment": "aws-cdk-lib.aws_iam.ServicePrincipal.fromStaticServicePrincipleName"
+    },
     "aws-cdk-lib.aws_iam.ServicePrincipalOpts": {
       "type": "object",
       "title": "ServicePrincipalOpts",
@@ -7660,6 +7697,54 @@
       },
       "comment": "aws-cdk-lib.aws_iam.ServicePrincipalOpts"
     },
+    "aws-cdk-lib.aws_iam.ServicePrincipal": {
+      "anyOf": [
+        {
+          "$ref": "#/definitions/aws-cdk-lib.aws_iam.ServicePrincipal.fromStaticServicePrincipleName"
+        },
+        {
+          "additionalProperties": false,
+          "type": "object",
+          "properties": {
+            "Type": {
+              "type": "string",
+              "enum": [
+                "aws-cdk-lib.aws_iam.ServicePrincipal"
+              ]
+            },
+            "Call": {
+              "$ref": "#/definitions/Call"
+            }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "aws-cdk-lib.aws_iam.ServicePrincipal": {
+              "anyOf": [
+                {
+                  "type": "array",
+                  "maxItems": 2,
+                  "items": [
+                    {
+                      "$ref": "#/definitions/StringExpression"
+                    },
+                    {
+                      "$ref": "#/definitions/aws-cdk-lib.aws_iam.ServicePrincipalOpts"
+                    }
+                  ]
+                },
+                {
+                  "$ref": "#/definitions/StringExpression"
+                }
+              ]
+            }
+          }
+        }
+      ],
+      "comment": "aws-cdk-lib.aws_iam.ServicePrincipal"
+    },
     "aws-cdk-lib.aws_iam.ServicePrincipal.<initializer>": {
       "type": "object",
       "additionalProperties": false,
@@ -10746,6 +10831,9 @@
         {
           "$ref": "#/definitions/aws-cdk-lib.aws_iam.SamlPrincipal.<initializer>"
         },
+        {
+          "$ref": "#/definitions/aws-cdk-lib.aws_iam.ServicePrincipal"
+        },
         {
           "$ref": "#/definitions/aws-cdk-lib.aws_iam.ServicePrincipal.<initializer>"
         },
@@ -21847,7 +21935,7 @@
           "anyOf": [
             {
               "$ref": "#/definitions/BooleanExpression",
-              "description": "Specifies whether clients can invoke your API using the default endpoint.\n\nBy default, clients can invoke your API with the default\n`https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. Enable\nthis if you would like clients to use your custom domain name."
+              "description": "Specifies whether clients can invoke your API using the default endpoint.\n\nBy default, clients can invoke your API with the default\n`https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. Set this to\ntrue if you would like clients to use your custom domain name."
             },
             {
               "anyOf": [
@@ -21858,7 +21946,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "Specifies whether clients can invoke your API using the default endpoint.\n\nBy default, clients can invoke your API with the default\n`https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. Enable\nthis if you would like clients to use your custom domain name."
+              "description": "Specifies whether clients can invoke your API using the default endpoint.\n\nBy default, clients can invoke your API with the default\n`https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. Set this to\ntrue if you would like clients to use your custom domain name."
             }
           ]
         },
@@ -119428,6 +119516,7 @@
             "AMAZON_POSTAL_CODE",
             "AMAZON_USER_ID",
             "APPLE_EMAIL",
+            "APPLE_EMAIL_VERIFIED",
             "APPLE_FIRST_NAME",
             "APPLE_LAST_NAME",
             "APPLE_NAME",
@@ -119442,6 +119531,7 @@
             "FACEBOOK_NAME",
             "GOOGLE_BIRTHDAYS",
             "GOOGLE_EMAIL",
+            "GOOGLE_EMAIL_VERIFIED",
             "GOOGLE_FAMILY_NAME",
             "GOOGLE_GENDER",
             "GOOGLE_GIVEN_NAME",
@@ -119541,6 +119631,25 @@
             }
           ]
         },
+        "emailVerified": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/aws-cdk-lib.aws_cognito.ProviderAttribute",
+              "description": "The user's e-mail address is verification."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "The user's e-mail address is verification."
+            }
+          ]
+        },
         "familyName": {
           "anyOf": [
             {
@@ -127105,6 +127214,25 @@
               "description": "Select the subnets to run the bastion host in.\n\nSet this to PUBLIC if you need to connect to this instance via the internet and cannot use SSM.\nYou have to allow port 22 manually by using the connections field"
             }
           ]
+        },
+        "userDataCausesReplacement": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/BooleanExpression",
+              "description": "Determines whether changes to the UserData will force instance replacement.\n\nDepending on the EC2 instance type, modifying the UserData may either restart\nor replace the instance:\n\n- Instance store-backed instances are replaced.\n- EBS-backed instances are restarted.\n\nNote that by default, restarting does not execute the updated UserData, so an alternative\nmechanism is needed to ensure the instance re-executes the UserData.\n\nWhen set to `true`, the instance's Logical ID will depend on the UserData, causing\nCloudFormation to replace the instance if the UserData changes."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "Determines whether changes to the UserData will force instance replacement.\n\nDepending on the EC2 instance type, modifying the UserData may either restart\nor replace the instance:\n\n- Instance store-backed instances are replaced.\n- EBS-backed instances are restarted.\n\nNote that by default, restarting does not execute the updated UserData, so an alternative\nmechanism is needed to ensure the instance re-executes the UserData.\n\nWhen set to `true`, the instance's Logical ID will depend on the UserData, causing\nCloudFormation to replace the instance if the UserData changes."
+            }
+          ]
         }
       },
       "required": [
@@ -129130,6 +129258,25 @@
             }
           ]
         },
+        "disableApiTermination": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/BooleanExpression",
+              "description": "If true, the instance will not be able to be terminated using the Amazon EC2 console, CLI, or API.\n\nTo change this attribute after launch, use [ModifyInstanceAttribute](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyInstanceAttribute.html).\nAlternatively, if you set InstanceInitiatedShutdownBehavior to terminate, you can terminate the instance\nby running the shutdown command from the instance."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "If true, the instance will not be able to be terminated using the Amazon EC2 console, CLI, or API.\n\nTo change this attribute after launch, use [ModifyInstanceAttribute](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyInstanceAttribute.html).\nAlternatively, if you set InstanceInitiatedShutdownBehavior to terminate, you can terminate the instance\nby running the shutdown command from the instance."
+            }
+          ]
+        },
         "ebsOptimized": {
           "anyOf": [
             {
@@ -145528,6 +145675,36 @@
       ],
       "comment": "aws-cdk-lib.aws_ecs_patterns.ApplicationMultipleTargetGroupsFargateService"
     },
+    "aws-cdk-lib.aws_elasticloadbalancingv2.IListenerCertificate": {
+      "type": "object",
+      "title": "IListenerCertificate",
+      "additionalProperties": false,
+      "properties": {
+        "certificateArn": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/StringExpression",
+              "description": "The ARN of the certificate to use."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "The ARN of the certificate to use."
+            }
+          ]
+        }
+      },
+      "required": [
+        "certificateArn"
+      ],
+      "comment": "aws-cdk-lib.aws_elasticloadbalancingv2.IListenerCertificate"
+    },
     "aws-cdk-lib.aws_ecs_patterns.NetworkLoadBalancedTaskImageOptions": {
       "type": "object",
       "title": "NetworkLoadBalancedTaskImageOptions",
@@ -145962,6 +146139,25 @@
           ],
           "description": "The type of IP addresses to use.\n\nIf you want to add a UDP or TCP_UDP listener to the load balancer,\nyou must choose IPv4."
         },
+        "listenerCertificate": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/aws-cdk-lib.aws_elasticloadbalancingv2.IListenerCertificate",
+              "description": "Listener certificate list of ACM cert ARNs.\n\nIf you provide a certificate, the listener's protocol will be TLS.\nIf not, the listener's protocol will be TCP."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "Listener certificate list of ACM cert ARNs.\n\nIf you provide a certificate, the listener's protocol will be TLS.\nIf not, the listener's protocol will be TCP."
+            }
+          ]
+        },
         "listenerPort": {
           "anyOf": [
             {
@@ -146483,6 +146679,25 @@
           ],
           "description": "The type of IP addresses to use.\n\nIf you want to add a UDP or TCP_UDP listener to the load balancer,\nyou must choose IPv4."
         },
+        "listenerCertificate": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/aws-cdk-lib.aws_elasticloadbalancingv2.IListenerCertificate",
+              "description": "Listener certificate list of ACM cert ARNs.\n\nIf you provide a certificate, the listener's protocol will be TLS.\nIf not, the listener's protocol will be TCP."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "Listener certificate list of ACM cert ARNs.\n\nIf you provide a certificate, the listener's protocol will be TLS.\nIf not, the listener's protocol will be TCP."
+            }
+          ]
+        },
         "listenerPort": {
           "anyOf": [
             {
@@ -150736,6 +150951,25 @@
       "title": "AccessPointProps",
       "additionalProperties": false,
       "properties": {
+        "clientToken": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/StringExpression",
+              "description": "The opaque string specified in the request to ensure idempotent creation."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "The opaque string specified in the request to ensure idempotent creation."
+            }
+          ]
+        },
         "createAcl": {
           "anyOf": [
             {
@@ -158275,36 +158509,6 @@
       ],
       "comment": "aws-cdk-lib.aws_elasticloadbalancing.LoadBalancer"
     },
-    "aws-cdk-lib.aws_elasticloadbalancingv2.IListenerCertificate": {
-      "type": "object",
-      "title": "IListenerCertificate",
-      "additionalProperties": false,
-      "properties": {
-        "certificateArn": {
-          "anyOf": [
-            {
-              "$ref": "#/definitions/StringExpression",
-              "description": "The ARN of the certificate to use."
-            },
-            {
-              "anyOf": [
-                {
-                  "$ref": "#/definitions/FnRef"
-                },
-                {
-                  "$ref": "#/definitions/FnGetProp"
-                }
-              ],
-              "description": "The ARN of the certificate to use."
-            }
-          ]
-        }
-      },
-      "required": [
-        "certificateArn"
-      ],
-      "comment": "aws-cdk-lib.aws_elasticloadbalancingv2.IListenerCertificate"
-    },
     "aws-cdk-lib.aws_elasticloadbalancingv2.FixedResponseOptions": {
       "type": "object",
       "title": "FixedResponseOptions",
@@ -165250,6 +165454,23 @@
       "title": "EventBusProps",
       "additionalProperties": false,
       "properties": {
+        "deadLetterQueue": {
+          "anyOf": [
+            {
+              "aws-cdk-lib.aws_sqs.Queue.fromQueueArn": {}
+            },
+            {
+              "aws-cdk-lib.aws_sqs.Queue.fromQueueAttributes": {}
+            },
+            {
+              "$ref": "#/definitions/FnRef"
+            },
+            {
+              "$ref": "#/definitions/FnGetProp"
+            }
+          ],
+          "description": "Dead-letter queue for the event bus."
+        },
         "description": {
           "anyOf": [
             {
@@ -166587,6 +166808,13 @@
           ],
           "description": "Sets the data compression configuration for the file system.\n\nFor more information, see [Lustre data compression](https://docs.aws.amazon.com/fsx/latest/LustreGuide/data-compression.html) in the *Amazon FSx for Lustre User Guide* ."
         },
+        "driveCacheType": {
+          "enum": [
+            "NONE",
+            "READ"
+          ],
+          "description": "The type of drive cache used by PERSISTENT_1 file systems that are provisioned with HDD storage devices."
+        },
         "exportPath": {
           "anyOf": [
             {
@@ -166648,7 +166876,7 @@
           "anyOf": [
             {
               "$ref": "#/definitions/NumberExpression",
-              "description": "Required for the PERSISTENT_1 deployment type, describes the amount of read and write throughput for each 1 tebibyte of storage, in MB/s/TiB.\n\nValid values are 50, 100, 200."
+              "description": "Provisions the amount of read and write throughput for each 1 tebibyte (TiB) of file system storage capacity, in MB/s/TiB.\n\nRequired with PERSISTENT_1 and PERSISTENT_2 deployment types.\n\nValid values:\n- For PERSISTENT_1 SSD storage: 50, 100, 200 MB/s/TiB.\n- For PERSISTENT_1 HDD storage: 12, 40 MB/s/TiB.\n- For PERSISTENT_2 SSD storage: 125, 250, 500, 1000 MB/s/TiB."
             },
             {
               "anyOf": [
@@ -166659,7 +166887,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "Required for the PERSISTENT_1 deployment type, describes the amount of read and write throughput for each 1 tebibyte of storage, in MB/s/TiB.\n\nValid values are 50, 100, 200."
+              "description": "Provisions the amount of read and write throughput for each 1 tebibyte (TiB) of file system storage capacity, in MB/s/TiB.\n\nRequired with PERSISTENT_1 and PERSISTENT_2 deployment types.\n\nValid values:\n- For PERSISTENT_1 SSD storage: 50, 100, 200 MB/s/TiB.\n- For PERSISTENT_1 HDD storage: 12, 40 MB/s/TiB.\n- For PERSISTENT_2 SSD storage: 125, 250, 500, 1000 MB/s/TiB."
             }
           ]
         },
@@ -166697,7 +166925,7 @@
           "anyOf": [
             {
               "$ref": "#/definitions/NumberExpression",
-              "description": "The storage capacity of the file system being created.\n\nFor Windows file systems, valid values are 32 GiB to 65,536 GiB.\nFor SCRATCH_1 deployment types, valid values are 1,200, 2,400, 3,600, then continuing in increments of 3,600 GiB.\nFor SCRATCH_2 and PERSISTENT_1 types, valid values are 1,200, 2,400, then continuing in increments of 2,400 GiB."
+              "description": "The storage capacity of the file system being created.\n\nFor Windows file systems, valid values are 32 GiB to 65,536 GiB.\nFor SCRATCH_1 deployment types, valid values are 1,200, 2,400, 3,600, then continuing in increments of 3,600 GiB.\nFor SCRATCH_2, PERSISTENT_2 and PERSISTENT_1 deployment types using SSD storage type, the valid values are 1200 GiB, 2400 GiB, and increments of 2400 GiB.\nFor PERSISTENT_1 HDD file systems, valid values are increments of 6000 GiB for 12 MB/s/TiB file systems and increments of 1800 GiB for 40 MB/s/TiB file systems."
             },
             {
               "anyOf": [
@@ -166708,7 +166936,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "The storage capacity of the file system being created.\n\nFor Windows file systems, valid values are 32 GiB to 65,536 GiB.\nFor SCRATCH_1 deployment types, valid values are 1,200, 2,400, 3,600, then continuing in increments of 3,600 GiB.\nFor SCRATCH_2 and PERSISTENT_1 types, valid values are 1,200, 2,400, then continuing in increments of 2,400 GiB."
+              "description": "The storage capacity of the file system being created.\n\nFor Windows file systems, valid values are 32 GiB to 65,536 GiB.\nFor SCRATCH_1 deployment types, valid values are 1,200, 2,400, 3,600, then continuing in increments of 3,600 GiB.\nFor SCRATCH_2, PERSISTENT_2 and PERSISTENT_1 deployment types using SSD storage type, the valid values are 1200 GiB, 2400 GiB, and increments of 2400 GiB.\nFor PERSISTENT_1 HDD file systems, valid values are increments of 6000 GiB for 12 MB/s/TiB file systems and increments of 1800 GiB for 40 MB/s/TiB file systems."
             }
           ]
         },
@@ -166809,6 +167037,13 @@
           ],
           "description": "Security Group to assign to this file system."
         },
+        "storageType": {
+          "enum": [
+            "SSD",
+            "HDD"
+          ],
+          "description": "The storage type for the file system that you're creating."
+        },
         "lustreConfiguration": {
           "anyOf": [
             {
@@ -166850,6 +167085,14 @@
             }
           ],
           "description": "The subnet that the file system will be accessible from."
+        },
+        "fileSystemTypeVersion": {
+          "enum": [
+            "V_2_10",
+            "V_2_12",
+            "V_2_15"
+          ],
+          "description": "The Lustre version for the file system."
         }
       },
       "required": [
@@ -182436,7 +182679,26 @@
           "anyOf": [
             {
               "$ref": "#/definitions/BooleanExpression",
-              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 and higher clusters."
+              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4\nor higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14)."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4\nor higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14)."
+            }
+          ]
+        },
+        "enablePerformanceInsights": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/BooleanExpression",
+              "description": "Whether to enable Performance Insights for the DB cluster."
             },
             {
               "anyOf": [
@@ -182447,7 +182709,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 and higher clusters."
+              "description": "Whether to enable Performance Insights for the DB cluster."
             }
           ]
         },
@@ -182607,6 +182869,68 @@
           },
           "description": "The parameters in the DBClusterParameterGroup to create automatically.\n\nYou can only specify parameterGroup or parameters but not both.\nYou need to use a versioned engine to auto-generate a DBClusterParameterGroup."
         },
+        "performanceInsightEncryptionKey": {
+          "anyOf": [
+            {
+              "aws-cdk-lib.aws_kms.Alias.fromAliasAttributes": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Alias.fromAliasName": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Alias.addAlias": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.fromCfnKey": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.fromKeyArn": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.fromLookup": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.addAlias": {}
+            },
+            {
+              "$ref": "#/definitions/FnRef"
+            },
+            {
+              "$ref": "#/definitions/FnGetProp"
+            }
+          ],
+          "description": "The AWS KMS key for encryption of Performance Insights data."
+        },
+        "performanceInsightRetention": {
+          "enum": [
+            "DEFAULT",
+            "MONTHS_1",
+            "MONTHS_2",
+            "MONTHS_3",
+            "MONTHS_4",
+            "MONTHS_5",
+            "MONTHS_6",
+            "MONTHS_7",
+            "MONTHS_8",
+            "MONTHS_9",
+            "MONTHS_10",
+            "MONTHS_11",
+            "MONTHS_12",
+            "MONTHS_13",
+            "MONTHS_14",
+            "MONTHS_15",
+            "MONTHS_16",
+            "MONTHS_17",
+            "MONTHS_18",
+            "MONTHS_19",
+            "MONTHS_20",
+            "MONTHS_21",
+            "MONTHS_22",
+            "MONTHS_23",
+            "LONG_TERM"
+          ],
+          "description": "The amount of time, in days, to retain Performance Insights data."
+        },
         "port": {
           "anyOf": [
             {
@@ -182792,7 +183116,7 @@
           "anyOf": [
             {
               "$ref": "#/definitions/NumberExpression",
-              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 128 (256GB).\n\nThe maximum capacity must be higher than 0.5 ACUs."
+              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 256.\n\nThe maximum capacity must be higher than 0.5 ACUs."
             },
             {
               "anyOf": [
@@ -182803,7 +183127,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 128 (256GB).\n\nThe maximum capacity must be higher than 0.5 ACUs."
+              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 256.\n\nThe maximum capacity must be higher than 0.5 ACUs."
             }
           ]
         },
@@ -183632,7 +183956,26 @@
           "anyOf": [
             {
               "$ref": "#/definitions/BooleanExpression",
-              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 and higher clusters."
+              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4\nor higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14)."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4\nor higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14)."
+            }
+          ]
+        },
+        "enablePerformanceInsights": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/BooleanExpression",
+              "description": "Whether to enable Performance Insights for the DB cluster."
             },
             {
               "anyOf": [
@@ -183643,7 +183986,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "Whether read replicas can forward write operations to the writer DB instance in the DB cluster.\n\nThis setting can only be enabled for Aurora MySQL 3.04 and higher clusters."
+              "description": "Whether to enable Performance Insights for the DB cluster."
             }
           ]
         },
@@ -183803,6 +184146,68 @@
           },
           "description": "The parameters in the DBClusterParameterGroup to create automatically.\n\nYou can only specify parameterGroup or parameters but not both.\nYou need to use a versioned engine to auto-generate a DBClusterParameterGroup."
         },
+        "performanceInsightEncryptionKey": {
+          "anyOf": [
+            {
+              "aws-cdk-lib.aws_kms.Alias.fromAliasAttributes": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Alias.fromAliasName": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Alias.addAlias": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.fromCfnKey": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.fromKeyArn": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.fromLookup": {}
+            },
+            {
+              "aws-cdk-lib.aws_kms.Key.addAlias": {}
+            },
+            {
+              "$ref": "#/definitions/FnRef"
+            },
+            {
+              "$ref": "#/definitions/FnGetProp"
+            }
+          ],
+          "description": "The AWS KMS key for encryption of Performance Insights data."
+        },
+        "performanceInsightRetention": {
+          "enum": [
+            "DEFAULT",
+            "MONTHS_1",
+            "MONTHS_2",
+            "MONTHS_3",
+            "MONTHS_4",
+            "MONTHS_5",
+            "MONTHS_6",
+            "MONTHS_7",
+            "MONTHS_8",
+            "MONTHS_9",
+            "MONTHS_10",
+            "MONTHS_11",
+            "MONTHS_12",
+            "MONTHS_13",
+            "MONTHS_14",
+            "MONTHS_15",
+            "MONTHS_16",
+            "MONTHS_17",
+            "MONTHS_18",
+            "MONTHS_19",
+            "MONTHS_20",
+            "MONTHS_21",
+            "MONTHS_22",
+            "MONTHS_23",
+            "LONG_TERM"
+          ],
+          "description": "The amount of time, in days, to retain Performance Insights data."
+        },
         "port": {
           "anyOf": [
             {
@@ -183988,7 +184393,7 @@
           "anyOf": [
             {
               "$ref": "#/definitions/NumberExpression",
-              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 128 (256GB).\n\nThe maximum capacity must be higher than 0.5 ACUs."
+              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 256.\n\nThe maximum capacity must be higher than 0.5 ACUs."
             },
             {
               "anyOf": [
@@ -183999,7 +184404,7 @@
                   "$ref": "#/definitions/FnGetProp"
                 }
               ],
-              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 128 (256GB).\n\nThe maximum capacity must be higher than 0.5 ACUs."
+              "description": "The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.\n\nYou can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.\nThe largest value that you can use is 256.\n\nThe maximum capacity must be higher than 0.5 ACUs."
             }
           ]
         },
@@ -184374,7 +184779,8 @@
             "VER_10_6_19",
             "VER_10_6_5",
             "VER_10_6_7",
-            "VER_10_6_8"
+            "VER_10_6_8",
+            "VER_11_4_3"
           ]
         },
         {
@@ -198333,6 +198739,13 @@
             }
           ]
         },
+        "transitionDefaultMinimumObjectSize": {
+          "enum": [
+            "ALL_STORAGE_CLASSES_128_K",
+            "VARIES_BY_STORAGE_CLASS"
+          ],
+          "description": "Indicates which default minimum object size behavior is applied to the lifecycle configuration.\n\nTo customize the minimum object size for any transition you can add a filter that specifies a custom\n`objectSizeGreaterThan` or `objectSizeLessThan` for `lifecycleRules` property. Custom filters always\ntake precedence over the default transition behavior."
+        },
         "versioned": {
           "anyOf": [
             {
@@ -214518,6 +214931,25 @@
           ],
           "description": "S3 Bucket containing objects to iterate over or a file with a list to iterate over."
         },
+        "bucketNamePath": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/StringExpression",
+              "description": "S3 bucket name containing objects to iterate over or a file with a list to iterate over, as JsonPath."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "S3 bucket name containing objects to iterate over or a file with a list to iterate over, as JsonPath."
+            }
+          ]
+        },
         "maxItems": {
           "anyOf": [
             {
@@ -214577,7 +215009,6 @@
         }
       },
       "required": [
-        "bucket",
         "key"
       ],
       "comment": "aws-cdk-lib.aws_stepfunctions.S3CsvItemReaderProps"
@@ -214647,6 +215078,25 @@
           ],
           "description": "S3 Bucket containing objects to iterate over or a file with a list to iterate over."
         },
+        "bucketNamePath": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/StringExpression",
+              "description": "S3 bucket name containing objects to iterate over or a file with a list to iterate over, as JsonPath."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "S3 bucket name containing objects to iterate over or a file with a list to iterate over, as JsonPath."
+            }
+          ]
+        },
         "maxItems": {
           "anyOf": [
             {
@@ -214687,7 +215137,6 @@
         }
       },
       "required": [
-        "bucket",
         "key"
       ],
       "comment": "aws-cdk-lib.aws_stepfunctions.S3FileItemReaderProps"
@@ -214794,6 +215243,25 @@
           ],
           "description": "S3 Bucket containing objects to iterate over or a file with a list to iterate over."
         },
+        "bucketNamePath": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/StringExpression",
+              "description": "S3 bucket name containing objects to iterate over or a file with a list to iterate over, as JsonPath."
+            },
+            {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/FnRef"
+                },
+                {
+                  "$ref": "#/definitions/FnGetProp"
+                }
+              ],
+              "description": "S3 bucket name containing objects to iterate over or a file with a list to iterate over, as JsonPath."
+            }
+          ]
+        },
         "maxItems": {
           "anyOf": [
             {
@@ -214833,9 +215301,6 @@
           ]
         }
       },
-      "required": [
-        "bucket"
-      ],
       "comment": "aws-cdk-lib.aws_stepfunctions.S3ObjectsItemReaderProps"
     },
     "aws-cdk-lib.aws_stepfunctions.S3ObjectsItemReader.<initializer>": {
@@ -346689,6 +347154,9 @@
             {
               "$ref": "#/definitions/aws-cdk-lib.aws_iam.SamlMetadataDocument"
             },
+            {
+              "$ref": "#/definitions/aws-cdk-lib.aws_iam.ServicePrincipal"
+            },
             {
               "$ref": "#/definitions/aws-cdk-lib.aws_lambda.AdotLambdaLayerGenericVersion"
             },
diff --git a/decdk.specs.json b/decdk.specs.json
index c55d7f76..65313868 100644
--- a/decdk.specs.json
+++ b/decdk.specs.json
@@ -6357,7 +6357,7 @@
               "Summary": "Null comparison operator.",
               "Remarks": "",
               "Static": true,
-              "ReturnType": "List"
+              "ReturnType": "Any"
             },
             "aws-cdk-lib.aws_lambda.FilterRule.or": {
               "Parameters": {