feat: add lambda:InvokeFunction permission to CloudFormation template

[TheUnderScorer]

No description provided.

[github-actions]

🚀 Following releases will be created using changesets from this PR:

@fingerprint/aws-cloudfront-proxy@2.2.0

Minor Changes

• Add support for API V4.

  Docs:

  • CloudFront JavaScript Agent V4 Migration Guide
  • CloudFront Terraform guide (ff1b644)

• Introduce TTL for secret caching (fd2eef5)

• Add FPJS_INTEGRATION_PATH_DEPTH header to CloudFormation template (7b93386)

• Add lambda:InvokeFunction to the management function.

  Starting from October 2025, AWS requires new function URLs to have this permissions alongside the lambda:InvokeFunctionUrl.
  See https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html to learn more. (79c008f)

• Skip creation of V3-related routes if related variables are empty (dc29d6c)

[github-actions]

Coverage report

St.❔	Category	Percentage	Covered / Total
🟢	Statements	92.35%	724/784
🟢	Branches	85.52%	189/221
🟢	Functions	91.28%	136/149
🟢	Lines	92.5%	691/747

Test suite run success

214 tests passing in 22 suites.

Report generated by 🧪jest coverage report action from 79c008f

Show full coverage report

St	File	% Stmts	% Branch	% Funcs	% Lines	Uncovered Line #s
🟢	All files	92.34	85.52	91.27	92.5
🟢	mgmt-lambda	98.93	93.33	100	98.93
🟢	DefaultSettings.ts	100	100	100	100
🟢	app.ts	97.91	95	100	97.91	26
🟢	auth.ts	100	100	100	100
🟢	exceptions.ts	100	66.66	100	100	20
🟢	routing.ts	100	100	100	100
🟢	mgmt-lambda/handlers	87.22	72.5	93.33	87.15
🟢	errorHandlers.ts	100	71.42	100	100	22,41
🟡	statusHandler.ts	80	50	100	80	76-80,84-89
🟢	updateHandler.ts	87.21	75.86	87.5	87.12	50-51,67-68,139-142,214,219-228,290-291,319
🟢	mgmt-lambda/utils	81.25	88.88	66.66	100
🟢	cloudfrontUtils.ts	100	88.88	100	100	6
🔴	delay.ts	40	100	0	100
🟢	proxy/handlers	98.48	91.89	100	98.48
🟢	handleIngress.ts	97.43	92.3	100	97.43	62
🟢	handleStatus.ts	100	91.66	100	100	57,71
🟡	proxy/test	77.77	100	50	71.42
🟡	aws.ts	77.77	100	50	71.42	4-5
🟢	proxy/test/utils/customer-variables	100	100	100	100
🟢	in-memory-customer-variables.ts	100	100	100	100
🟢	proxy/utils	89.72	78.26	89.65	89.53
🟢	buffer.ts	100	100	100	100
🟢	cache-control.ts	100	100	100	100
🟢	cache.ts	100	83.33	100	100	17
🟢	cookie.ts	100	100	100	100
🔴	generateErrorResponse.ts	23.07	100	25	25	15-30
🟢	headers.ts	96.15	92.59	100	95.89	240-242
🔴	is-blob.ts	0	0	0	0	6-7
🟢	log.ts	85.71	33.33	100	83.33	11
🟢	paths.ts	100	87.5	100	100	19
🟢	request.ts	93.54	66.66	85.71	91.66	7-8
🟢	routing.ts	100	100	100	100
🔴	string.ts	14.28	100	0	14.28	2-8
🟢	traffic.ts	100	100	100	100
🟢	transport.ts	93.1	62.5	100	93.1	33,58
🟢	validation.ts	100	100	100	100
🟢	proxy/utils/customer-variables	98.86	100	95.45	98.66
🟢	customer-variables.ts	100	100	100	100
🟢	defaults.ts	100	100	100	100
🟢	header-customer-variables.ts	100	100	100	100
🟢	maybe-obfuscate-variable.ts	100	100	100	100
🟢	selectors.ts	96.87	100	90	95.23	30
🟢	types.ts	100	100	100	100
🟢	proxy/utils/customer-variables/secrets-manager	95.71	100	100	95.65
🟢	normalize-secret.ts	100	100	100	100
🟢	retrieve-secret.ts	100	100	100	100
🟢	secrets-manager-variables.ts	87.5	100	100	87.5	31,53-58
🟢	validate-secret.ts	100	100	100	100