diff --git a/lambda/go.mod b/lambda/go.mod
index a75a1fb1..0658cca8 100644
--- a/lambda/go.mod
+++ b/lambda/go.mod
@@ -4,7 +4,7 @@ go 1.22.0
 
 require (
 	github.com/aws/aws-lambda-go v1.47.0
-	github.com/aws/aws-sdk-go v1.53.8
+	github.com/aws/aws-sdk-go v1.53.10
 	github.com/getsops/sops/v3 v3.8.1
 	github.com/gkampitakis/go-snaps v0.5.4
 	github.com/go-test/deep v1.1.0
diff --git a/lambda/go.sum b/lambda/go.sum
index 9e08eec8..ea602ad8 100644
--- a/lambda/go.sum
+++ b/lambda/go.sum
@@ -36,8 +36,8 @@ github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c/go.mod h1:EjA
 github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
 github.com/aws/aws-lambda-go v1.47.0 h1:0H8s0vumYx/YKs4sE7YM0ktwL2eWse+kfopsRI1sXVI=
 github.com/aws/aws-lambda-go v1.47.0/go.mod h1:dpMpZgvWx5vuQJfBt0zqBha60q7Dd7RfgJv23DymV8A=
-github.com/aws/aws-sdk-go v1.53.8 h1:eoqGb1WOHIrCFKo1d51cMcnt1ralfLFaEqRkC5Zzv8k=
-github.com/aws/aws-sdk-go v1.53.8/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.53.10 h1:3enP5l5WtezT9Ql+XZqs56JBf5YUd/FEzTCg///OIGY=
+github.com/aws/aws-sdk-go v1.53.10/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v1.21.1 h1:wjHYshtPpYOZm+/mu3NhVgRRc0baM6LJZOmxPZ5Cwzs=
 github.com/aws/aws-sdk-go-v2 v1.21.1/go.mod h1:ErQhvNuEMhJjweavOYhxVkn2RUx7kQXVATHrjKtxIpM=
 github.com/aws/aws-sdk-go-v2/config v1.18.44 h1:U10NQ3OxiY0dGGozmVIENIDnCT0W432PWxk2VO8wGnY=
diff --git a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json
index df9426dd..02bb4c3a 100644
--- a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json
+++ b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json
@@ -1,15 +1,15 @@
 {
   "version": "15.0.0",
   "files": {
-    "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d": {
+    "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31": {
       "source": {
-        "path": "asset.adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+        "path": "asset.e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+          "objectKey": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
@@ -66,7 +66,7 @@
         }
       }
     },
-    "584bb4cea5d887048a9dae6bbe08ccff60f67bb70eae244ce530e41f86e78844": {
+    "62922f1bee61923ebed16305ea551397c687891da0c0ed917813a9915d6e1404": {
       "source": {
         "path": "SecretIntegrationAsset.template.json",
         "packaging": "file"
@@ -74,7 +74,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "584bb4cea5d887048a9dae6bbe08ccff60f67bb70eae244ce530e41f86e78844.json",
+          "objectKey": "62922f1bee61923ebed16305ea551397c687891da0c0ed917813a9915d6e1404.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json
index cc9893cd..4729d81d 100644
--- a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json
+++ b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json
@@ -219,7 +219,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip"
+          "S3Key": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip"
         },
         "Role": {
           "Fn::GetAtt": [
diff --git a/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json b/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json
index 543bc55f..78c70052 100644
--- a/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json
+++ b/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json
@@ -1,20 +1,20 @@
 {
   "version": "15.0.0",
   "files": {
-    "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d": {
+    "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31": {
       "source": {
-        "path": "asset.adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+        "path": "asset.e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+          "objectKey": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "05c71ba026ed62d1e29d18b1ab25b0a4ffa34d7c5bf0fa8b224343984dd2ef92": {
+    "df7c69647b8ad28b95f15d18f8e25bc37fa3a02bdb15866d05127aefeac1f9f2": {
       "source": {
         "path": "SecretIntegrationInline.template.json",
         "packaging": "file"
@@ -22,7 +22,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "05c71ba026ed62d1e29d18b1ab25b0a4ffa34d7c5bf0fa8b224343984dd2ef92.json",
+          "objectKey": "df7c69647b8ad28b95f15d18f8e25bc37fa3a02bdb15866d05127aefeac1f9f2.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json b/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json
index 7fb6508b..7b3115c5 100644
--- a/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json
+++ b/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json
@@ -196,7 +196,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip"
+          "S3Key": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip"
         },
         "Role": {
           "Fn::GetAtt": [
diff --git a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json
index 19f4a26a..a2ba9348 100644
--- a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json
+++ b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json
@@ -1,20 +1,20 @@
 {
   "version": "15.0.0",
   "files": {
-    "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d": {
+    "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31": {
       "source": {
-        "path": "asset.adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+        "path": "asset.e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+          "objectKey": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "b76417e33a84e1965220c1fec9f5bf5b076aed5ffebe81ce69b67c9d0e30d6c6": {
+    "c82d1d90cf7a37a8355a23b1c3981f454dd9c179f54a8efe6541af5c07ac1f83": {
       "source": {
         "path": "SecretIntegrationAsset.template.json",
         "packaging": "file"
@@ -22,7 +22,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "b76417e33a84e1965220c1fec9f5bf5b076aed5ffebe81ce69b67c9d0e30d6c6.json",
+          "objectKey": "c82d1d90cf7a37a8355a23b1c3981f454dd9c179f54a8efe6541af5c07ac1f83.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json
index 873d7109..eb406c93 100644
--- a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json
+++ b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json
@@ -70,7 +70,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip"
+          "S3Key": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip"
         },
         "Role": {
           "Fn::GetAtt": [
diff --git a/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json b/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json
index 26126c63..e0497caf 100644
--- a/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json
+++ b/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json
@@ -1,20 +1,20 @@
 {
   "version": "15.0.0",
   "files": {
-    "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d": {
+    "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31": {
       "source": {
-        "path": "asset.adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+        "path": "asset.e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip",
+          "objectKey": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "d58eb210117686682bae0e5dd3d1a9984572955daf2387d02cfcb4949c9f3bb2": {
+    "4799b27c5abedb9075b8ace6a212ee96d444185e66dfbad1ca8039b68f9838b9": {
       "source": {
         "path": "SecretMultiKms.template.json",
         "packaging": "file"
@@ -22,7 +22,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "d58eb210117686682bae0e5dd3d1a9984572955daf2387d02cfcb4949c9f3bb2.json",
+          "objectKey": "4799b27c5abedb9075b8ace6a212ee96d444185e66dfbad1ca8039b68f9838b9.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json b/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json
index 5f3ba111..aa105e25 100644
--- a/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json
+++ b/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json
@@ -116,7 +116,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "adc52dd3b4fe78a547431ca65c8e65e8e88473c30e6f11d2cdf59f95eace2d6d.zip"
+          "S3Key": "e787fe59d1faa3fe8a9c5a8cc105601ac732f7c038b187dded6fbd4b9fac4a31.zip"
         },
         "Role": {
           "Fn::GetAtt": [