test: cdk-diff smoke test (do not merge)

[timpugh]

Throwaway PR to verify the new cdk-diff CI job end-to-end. It bumps the KMS key description in all five stacks, so the diff comment should show a clean one-line [~] AWS::KMS::Key Description modify per stack. Will be closed without merging.

[github-actions]

🏗️ CDK infra diff — PR vs main

HelloWorld-us-east-1-stage/HelloWorld-us-east-1

Stack HelloWorld-us-east-1-stage/HelloWorld-us-east-1 (HelloWorld-us-east-1)
Resources
[~] AWS::KMS::Key HelloWorld-us-east-1/App/EncryptionKey AppEncryptionKey7F644894
 └─ [~] Description
     ├─ [-] KMS key for HelloWorld-us-east-1 log groups, Lambda env, AppConfig, and SNS
     └─ [+] KMS key for HelloWorld-us-east-1 log groups, Lambda env, AppConfig, and SNS [cdk-diff smoke test]



✨  Number of stacks with differences: 1

HelloWorld-us-east-1-stage/HelloWorldAudit-us-east-1

Stack HelloWorld-us-east-1-stage/HelloWorldAudit-us-east-1 (HelloWorldAudit-us-east-1)
Resources
[~] AWS::KMS::Key HelloWorldAudit-us-east-1/AuditEncryptionKey AuditEncryptionKey78640FBD
 └─ [~] Description
     ├─ [-] KMS key for HelloWorldAudit-us-east-1 CloudTrail audit logs
     └─ [+] KMS key for HelloWorldAudit-us-east-1 CloudTrail audit logs [cdk-diff smoke test]



✨  Number of stacks with differences: 1

HelloWorld-us-east-1-stage/HelloWorldData-us-east-1

Stack HelloWorld-us-east-1-stage/HelloWorldData-us-east-1 (HelloWorldData-us-east-1)
Resources
[~] AWS::KMS::Key HelloWorldData-us-east-1/DataEncryptionKey DataEncryptionKey101796EE
 └─ [~] Description
     ├─ [-] KMS key for HelloWorldData-us-east-1 DynamoDB
     └─ [+] KMS key for HelloWorldData-us-east-1 DynamoDB [cdk-diff smoke test]



✨  Number of stacks with differences: 1

HelloWorld-us-east-1-stage/HelloWorldFrontend-us-east-1

Stack HelloWorld-us-east-1-stage/HelloWorldFrontend-us-east-1 (HelloWorldFrontend-us-east-1)
Resources
[~] AWS::KMS::Key HelloWorldFrontend-us-east-1/FrontendEncryptionKey FrontendEncryptionKey272BB0CA
 └─ [~] Description
     ├─ [-] KMS key for HelloWorldFrontend-us-east-1 S3 bucket and log groups
     └─ [+] KMS key for HelloWorldFrontend-us-east-1 S3 bucket and log groups [cdk-diff smoke test]



✨  Number of stacks with differences: 1

HelloWorld-us-east-1-stage/HelloWorldWaf-us-east-1

Stack HelloWorld-us-east-1-stage/HelloWorldWaf-us-east-1 (HelloWorldWaf-us-east-1)
Resources
[~] AWS::KMS::Key HelloWorldWaf-us-east-1/WafEncryptionKey WafEncryptionKeyB025E51A
 └─ [~] Description
     ├─ [-] KMS key for HelloWorldWaf-us-east-1 provider log group encryption
     └─ [+] KMS key for HelloWorldWaf-us-east-1 provider log group encryption [cdk-diff smoke test]



✨  Number of stacks with differences: 1

[timpugh]

Verified ✅ — cdk-diff posted the per-stack CloudFormation diff for all five stacks. Closing without merging (throwaway smoke test).