diff --git a/lambda/go.mod b/lambda/go.mod
index 18e87744..037032fe 100644
--- a/lambda/go.mod
+++ b/lambda/go.mod
@@ -4,7 +4,7 @@ go 1.22.0
 
 require (
 	github.com/aws/aws-lambda-go v1.47.0
-	github.com/aws/aws-sdk-go v1.53.4
+	github.com/aws/aws-sdk-go v1.53.5
 	github.com/getsops/sops/v3 v3.8.1
 	github.com/gkampitakis/go-snaps v0.5.4
 	github.com/go-test/deep v1.1.0
diff --git a/lambda/go.sum b/lambda/go.sum
index 6e55196b..54e4c690 100644
--- a/lambda/go.sum
+++ b/lambda/go.sum
@@ -36,8 +36,8 @@ github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c/go.mod h1:EjA
 github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
 github.com/aws/aws-lambda-go v1.47.0 h1:0H8s0vumYx/YKs4sE7YM0ktwL2eWse+kfopsRI1sXVI=
 github.com/aws/aws-lambda-go v1.47.0/go.mod h1:dpMpZgvWx5vuQJfBt0zqBha60q7Dd7RfgJv23DymV8A=
-github.com/aws/aws-sdk-go v1.53.4 h1:SNCHaUqS3KMNl6fzwUv+iNl3VT9Y5ULfbbk6z4EMSnY=
-github.com/aws/aws-sdk-go v1.53.4/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.53.5 h1:1OcVWMjGlwt7EU5OWmmEEXqaYfmX581EK317QJZXItM=
+github.com/aws/aws-sdk-go v1.53.5/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v1.21.1 h1:wjHYshtPpYOZm+/mu3NhVgRRc0baM6LJZOmxPZ5Cwzs=
 github.com/aws/aws-sdk-go-v2 v1.21.1/go.mod h1:ErQhvNuEMhJjweavOYhxVkn2RUx7kQXVATHrjKtxIpM=
 github.com/aws/aws-sdk-go-v2/config v1.18.44 h1:U10NQ3OxiY0dGGozmVIENIDnCT0W432PWxk2VO8wGnY=
diff --git a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json
index 26be4728..546fbfdd 100644
--- a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json
+++ b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.assets.json
@@ -1,15 +1,15 @@
 {
   "version": "15.0.0",
   "files": {
-    "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9": {
+    "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a": {
       "source": {
-        "path": "asset.c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+        "path": "asset.e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+          "objectKey": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
@@ -66,7 +66,7 @@
         }
       }
     },
-    "a01b7020dd1adf18cafd333a477e62fa9b8b0c7f9c94ff6fc6e138e676390309": {
+    "ae758a7c8a135738cb53be5a20404cc2dff188adcc72efb7f5f80114ca0891be": {
       "source": {
         "path": "SecretIntegrationAsset.template.json",
         "packaging": "file"
@@ -74,7 +74,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "a01b7020dd1adf18cafd333a477e62fa9b8b0c7f9c94ff6fc6e138e676390309.json",
+          "objectKey": "ae758a7c8a135738cb53be5a20404cc2dff188adcc72efb7f5f80114ca0891be.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json
index fec9ad49..a031eae9 100644
--- a/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json
+++ b/test/secret-asset.integ.snapshot/SecretIntegrationAsset.template.json
@@ -219,7 +219,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip"
+          "S3Key": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip"
         },
         "Role": {
           "Fn::GetAtt": [
diff --git a/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json b/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json
index 7761c020..c440d134 100644
--- a/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json
+++ b/test/secret-inline.integ.snapshot/SecretIntegrationInline.assets.json
@@ -1,20 +1,20 @@
 {
   "version": "15.0.0",
   "files": {
-    "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9": {
+    "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a": {
       "source": {
-        "path": "asset.c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+        "path": "asset.e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+          "objectKey": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "74208eec25027a7065415c0f42314a796eec6c839cb78169618040fa804cc5ab": {
+    "69e3de5cff81a63c3c6556fe9a7a3ca36237d6653fb19e45873a12b66810234c": {
       "source": {
         "path": "SecretIntegrationInline.template.json",
         "packaging": "file"
@@ -22,7 +22,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "74208eec25027a7065415c0f42314a796eec6c839cb78169618040fa804cc5ab.json",
+          "objectKey": "69e3de5cff81a63c3c6556fe9a7a3ca36237d6653fb19e45873a12b66810234c.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json b/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json
index 1bed5c43..7b7f1a56 100644
--- a/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json
+++ b/test/secret-inline.integ.snapshot/SecretIntegrationInline.template.json
@@ -196,7 +196,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip"
+          "S3Key": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip"
         },
         "Role": {
           "Fn::GetAtt": [
diff --git a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json
index b2dd3615..eb6c3619 100644
--- a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json
+++ b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.assets.json
@@ -1,20 +1,20 @@
 {
   "version": "15.0.0",
   "files": {
-    "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9": {
+    "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a": {
       "source": {
-        "path": "asset.c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+        "path": "asset.e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+          "objectKey": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "75ef4773944761fd92541d6a2c96e190c915fb4831417554bed18cfa00e2aeb4": {
+    "2ddb0eae0f20fca8d86c0ef7b8c52b51ab39a2fa3b5990bc14a5abeb6aae56e3": {
       "source": {
         "path": "SecretIntegrationAsset.template.json",
         "packaging": "file"
@@ -22,7 +22,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "75ef4773944761fd92541d6a2c96e190c915fb4831417554bed18cfa00e2aeb4.json",
+          "objectKey": "2ddb0eae0f20fca8d86c0ef7b8c52b51ab39a2fa3b5990bc14a5abeb6aae56e3.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json
index 410fc3c8..1bea02a1 100644
--- a/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json
+++ b/test/secret-manual.integ.snapshot/SecretIntegrationAsset.template.json
@@ -70,7 +70,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip"
+          "S3Key": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip"
         },
         "Role": {
           "Fn::GetAtt": [
diff --git a/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json b/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json
index d0a3da8a..4f0df79c 100644
--- a/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json
+++ b/test/secret-multikms.integ.snapshot/SecretMultiKms.assets.json
@@ -1,20 +1,20 @@
 {
   "version": "15.0.0",
   "files": {
-    "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9": {
+    "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a": {
       "source": {
-        "path": "asset.c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+        "path": "asset.e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
         "packaging": "file"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip",
+          "objectKey": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "a8f3f898e93ed8d6107a5180f81d632974dedb2995604bd7437584c242356b3c": {
+    "393f01b35851f80eeb4098deb90e2054c25458baf0e46a3877b9f24a8845110f": {
       "source": {
         "path": "SecretMultiKms.template.json",
         "packaging": "file"
@@ -22,7 +22,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "a8f3f898e93ed8d6107a5180f81d632974dedb2995604bd7437584c242356b3c.json",
+          "objectKey": "393f01b35851f80eeb4098deb90e2054c25458baf0e46a3877b9f24a8845110f.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
diff --git a/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json b/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json
index 01053bee..0795a947 100644
--- a/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json
+++ b/test/secret-multikms.integ.snapshot/SecretMultiKms.template.json
@@ -116,7 +116,7 @@
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
           },
-          "S3Key": "c6b2115dfccf0232e1162ca4693a26d744e2cdbf1247623e5f97b8cbe85e09f9.zip"
+          "S3Key": "e22bf495d2989deec6c9edd2da3e298b30be066192c1440d6cb00d573796284a.zip"
         },
         "Role": {
           "Fn::GetAtt": [