fix: replace deprecated CDK constructs

- Replace `advancedSecurityMode` with `standardThreatProtectionMode: FULL_FUNCTION` on Cognito UserPool
- Replace `pointInTimeRecovery: true` with `pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true }` on 6 DynamoDB tables
- Replace `logRetention` with explicit `logGroup` creation in Lambda constructs

Author: StevenAskwith

lib/constructs/cars-manager.ts

@@ -54,7 +54,7 @@ export class CarManager extends Construct {
       billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
       encryption: dynamodb.TableEncryption.AWS_MANAGED,
       removalPolicy: RemovalPolicy.DESTROY,
-      pointInTimeRecovery: true,
+      pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
     });
 
     const carsTable_ping_state_index_name = 'pingStatus';

lib/constructs/events-manager.ts

@@ -60,7 +60,7 @@ export class EventsManager extends Construct {
       encryption: dynamodb.TableEncryption.AWS_MANAGED,
       removalPolicy: RemovalPolicy.DESTROY,
       stream: dynamodb.StreamViewType.NEW_IMAGE,
-      pointInTimeRecovery: true,
+      pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
     });
 
     const ddbstreamToEventBridgeFunction = new StandardLambdaPythonFunction(this, 'ddbStreamToEvbFunction', {

lib/constructs/fleets-manager.ts

@@ -42,7 +42,7 @@ export class FleetsManager extends Construct {
       billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
       encryption: dynamodb.TableEncryption.AWS_MANAGED,
       removalPolicy: RemovalPolicy.DESTROY,
-      pointInTimeRecovery: true,
+      pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
     });
 
     const fleets_handler = new StandardLambdaPythonFunction(this, 'fleetsFunction', {

lib/constructs/idp.ts

@@ -92,7 +92,7 @@ export class Idp extends Construct {
       },
       featurePlan: cognito.FeaturePlan.PLUS,
       mfa: cognito.Mfa.OPTIONAL,
-      advancedSecurityMode: cognito.AdvancedSecurityMode.ENFORCED,
+      standardThreatProtectionMode: cognito.StandardThreatProtectionMode.FULL_FUNCTION,
       selfSignUpEnabled: true,
       autoVerify: { email: true },
       removalPolicy: RemovalPolicy.DESTROY,

lib/constructs/landing-page.ts

@@ -55,7 +55,7 @@ export class LandingPageManager extends Construct {
             encryption: dynamodb.TableEncryption.AWS_MANAGED,
             removalPolicy: RemovalPolicy.DESTROY,
             stream: dynamodb.StreamViewType.NEW_IMAGE,
-            pointInTimeRecovery: true,
+            pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
         });
 
         const landingPageConfigDataSourceDdb = props.appsyncApi.api.addDynamoDbDataSource(

lib/constructs/leaderboard.ts

@@ -59,7 +59,7 @@ export class Leaderboard extends Construct {
       billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
       encryption: dynamodb.TableEncryption.AWS_MANAGED,
       removalPolicy: RemovalPolicy.DESTROY,
-      pointInTimeRecovery: true,
+      pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
     });
 
     // WEBSITE

lib/constructs/race-manager.ts

@@ -56,7 +56,7 @@ export class RaceManager extends Construct {
       sortKey: { name: 'sk', type: dynamodb.AttributeType.STRING },
       billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
       encryption: dynamodb.TableEncryption.AWS_MANAGED,
-      pointInTimeRecovery: true,
+      pointInTimeRecoverySpecification: { pointInTimeRecoveryEnabled: true },
     });
 
     // BACKEND