fix(glue): rename the Crawler DynamoDB scan members and the Iceberg table input to their SDK spellings

docs/_generated/cli-flag-coverage.json

@@ -1231,6 +1231,7 @@
     "--apply-immediately",
     "--archive-name",
     "--arg",
+    "--argjson",
     "--asset-bucket",
     "--assume-role",
     "--attribute",

docs/_generated/integ-coverage.json

@@ -868,6 +868,7 @@
         "dynamodb-ttl-attr-change",
         "fifo-sqs-event-source",
         "full-stack-demo",
+        "glue-update-hardening",
         "lambda",
         "local-invoke-from-cfn-stack",
         "local-run-task-from-state",
@@ -928,6 +929,9 @@
         "full-stack-demo": [
           "l2"
         ],
+        "glue-update-hardening": [
+          "l2"
+        ],
         "lambda": [
           "l2"
         ],

docs/_generated/integ-last-run.tsv

@@ -119,7 +119,7 @@ gc-custom-asset-names	2026-07-31T06:41:35Z	PASS	120	verify.sh	TTL-refresh sweep
 getatt-fallback-guard	2026-08-01T10:07:21Z	PASS	84	verify.sh	0801 regression sweep; strict-getatt paths ok, 0 orphans
 getstackoutput-crossregion	2026-07-26T19:05:27Z	PASS	79	verify.sh	0727b sweep-b8 staleness re-run (rc=0); account clean
 glue-securityconfig-replace	2026-07-26T18:20:27Z	PASS	59	verify.sh	0727b sweep-b3 staleness re-run (rc=0); account clean
-glue-update-hardening	2026-07-26T20:00:52Z	PASS	75	verify.sh	0727b sweep-b13 staleness re-run (rc=0); account clean
+glue-update-hardening	2026-08-09T06:55:05Z	PASS	71	verify.sh	#1391 scanAll/scanRate create+update; 3 Glue IAM-propagation retry gaps found and patterned; clean destroy, 0 orphans
 iam-access-key	2026-07-31T07:18:11Z	PASS	210	verify.sh	new fixture #1323: create+status-flip+secret-preservation+destroy clean (1st run false-FAIL on async DeleteSecret probe, poll added)
 iam-managed-policy	2026-07-27T16:40:50Z	PASS	32	verify.sh	issue #1272 IAM pass-through guard; clean destroy 0 orphans
 iam-oidc-provider	2026-07-31T06:25:46Z	PASS	82	verify.sh	TTL-refresh sweep re-run; 3 phases clean, orph clean

docs/cli-flag-coverage.md

@@ -62,7 +62,7 @@ Reviewer judgment required per flag — many of these are pure-logic flags adequ
 | `--verbose` | [`cache-streaming`](../tests/integration/cache-streaming/)<br>[`conditions`](../tests/integration/conditions/)<br>[`cross-region-state-bucket`](../tests/integration/cross-region-state-bucket/)<br>[`deletion-ordering-complex`](../tests/integration/deletion-ordering-complex/)<br>[`destroy-interrupt`](../tests/integration/destroy-interrupt/)<br>[`docdb-neptune`](../tests/integration/docdb-neptune/)<br>[`drift-revert`](../tests/integration/drift-revert/)<br>[`drift-revert-arrays`](../tests/integration/drift-revert-arrays/)<br>[`drift-revert-vpc`](../tests/integration/drift-revert-vpc/)<br>[`dynamodb-globaltable`](../tests/integration/dynamodb-globaltable/)<br>[`ec2-instance-fanout`](../tests/integration/ec2-instance-fanout/)<br>[`elasticache-replicationgroup-getatt`](../tests/integration/elasticache-replicationgroup-getatt/)<br>[`export`](../tests/integration/export/)<br>[`export-nested-stack`](../tests/integration/export-nested-stack/)<br>[`iam-managed-policy`](../tests/integration/iam-managed-policy/)<br>[`import-attributes`](../tests/integration/import-attributes/)<br>[`import-auto-mode`](../tests/integration/import-auto-mode/)<br>[`import-nested-stack`](../tests/integration/import-nested-stack/)<br>[`local-invoke-agentcore-from-state`](../tests/integration/local-invoke-agentcore-from-state/)<br>[`local-start-alb-from-state`](../tests/integration/local-start-alb-from-state/)<br>[`macro-expansion`](../tests/integration/macro-expansion/)<br>[`migrate-from-bare-cfn`](../tests/integration/migrate-from-bare-cfn/)<br>[`opensearch-domain-getatt`](../tests/integration/opensearch-domain-getatt/)<br>[`redshift-cluster-getatt`](../tests/integration/redshift-cluster-getatt/)<br>[`remove-protection`](../tests/integration/remove-protection/)<br>[`rollback-sqs-cooldown`](../tests/integration/rollback-sqs-cooldown/)<br>[`stepfunctions`](../tests/integration/stepfunctions/)<br>[`tags-propagation`](../tests/integration/tags-propagation/)<br>[`throttle-wide-dag`](../tests/integration/throttle-wide-dag/) |
 | `--yes` | [`agentcore-tools`](../tests/integration/agentcore-tools/)<br>[`apigateway`](../tests/integration/apigateway/)<br>[`apigatewayv2-update-removal`](../tests/integration/apigatewayv2-update-removal/)<br>[`apigw-gateway-response`](../tests/integration/apigw-gateway-response/)<br>[`apigw-stage-throttling`](../tests/integration/apigw-stage-throttling/)<br>[`apigw-usage-plan-key`](../tests/integration/apigw-usage-plan-key/)<br>[`appconfig`](../tests/integration/appconfig/)<br>[`asset-auto-create`](../tests/integration/asset-auto-create/)<br>[`asset-bootstrap`](../tests/integration/asset-bootstrap/)<br>[`asset-migration`](../tests/integration/asset-migration/)<br>[`aws-custom-resource`](../tests/integration/aws-custom-resource/)<br>[`backup`](../tests/integration/backup/)<br>[`bootstrap-free-region`](../tests/integration/bootstrap-free-region/)<br>[`bucket-deployment`](../tests/integration/bucket-deployment/)<br>[`budgets`](../tests/integration/budgets/)<br>[`cache-streaming`](../tests/integration/cache-streaming/)<br>[`cc-api-fallback`](../tests/integration/cc-api-fallback/)<br>[`cc-api-fallback-transitions`](../tests/integration/cc-api-fallback-transitions/)<br>[`cc-getatt-readback`](../tests/integration/cc-getatt-readback/)<br>[`cc-protection-flip`](../tests/integration/cc-protection-flip/)<br>[`cc-protection-flip-eks`](../tests/integration/cc-protection-flip-eks/)<br>[`ci-cd`](../tests/integration/ci-cd/)<br>[`cloudfront-function-url`](../tests/integration/cloudfront-function-url/)<br>[`cloudwatch-anomaly-detector`](../tests/integration/cloudwatch-anomaly-detector/)<br>[`codecommit`](../tests/integration/codecommit/)<br>[`codedeploy-lambda-deployment-group`](../tests/integration/codedeploy-lambda-deployment-group/)<br>[`cognito`](../tests/integration/cognito/)<br>[`cognito-custom-attribute-add`](../tests/integration/cognito-custom-attribute-add/)<br>[`cognito-identity-pool`](../tests/integration/cognito-identity-pool/)<br>[`cognito-lambda-triggers`](../tests/integration/cognito-lambda-triggers/)<br>[`cognito-resource-server`](../tests/integration/cognito-resource-server/)<br>[`cognito-userpool-user-ref`](../tests/integration/cognito-userpool-user-ref/)<br>[`conditions`](../tests/integration/conditions/)<br>[`conditions-and-if`](../tests/integration/conditions-and-if/)<br>[`conditions-update-2`](../tests/integration/conditions-update-2/)<br>[`custom-resource-getatt-data`](../tests/integration/custom-resource-getatt-data/)<br>[`data-analytics`](../tests/integration/data-analytics/)<br>[`deep-getatt-chains`](../tests/integration/deep-getatt-chains/)<br>[`deletion-ordering-complex`](../tests/integration/deletion-ordering-complex/)<br>[`deletion-policy-snapshot`](../tests/integration/deletion-policy-snapshot/)<br>[`deletion-policy-snapshot-heavy`](../tests/integration/deletion-policy-snapshot-heavy/)<br>[`destroy-data-guard`](../tests/integration/destroy-data-guard/)<br>[`destroy-interrupt`](../tests/integration/destroy-interrupt/)<br>[`diff-intrinsic-target-change`](../tests/integration/diff-intrinsic-target-change/)<br>[`dlm-lifecycle-policy`](../tests/integration/dlm-lifecycle-policy/)<br>[`docker-image-asset`](../tests/integration/docker-image-asset/)<br>[`dsql`](../tests/integration/dsql/)<br>[`dynamodb-autoscaling`](../tests/integration/dynamodb-autoscaling/)<br>[`dynamodb-gsi-update`](../tests/integration/dynamodb-gsi-update/)<br>[`dynamodb-ondemand`](../tests/integration/dynamodb-ondemand/)<br>[`dynamodb-sse`](../tests/integration/dynamodb-sse/)<br>[`dynamodb-stream-filter`](../tests/integration/dynamodb-stream-filter/)<br>[`dynamodb-streams`](../tests/integration/dynamodb-streams/)<br>[`dynamodb-tableclass-switch`](../tests/integration/dynamodb-tableclass-switch/)<br>[`dynamodb-ttl-attr-change`](../tests/integration/dynamodb-ttl-attr-change/)<br>[`ec2-instance`](../tests/integration/ec2-instance/)<br>[`ec2-instance-fanout`](../tests/integration/ec2-instance-fanout/)<br>[`ecr-scanning`](../tests/integration/ecr-scanning/)<br>[`ecs-fargate`](../tests/integration/ecs-fargate/)<br>[`ecs-schedule-targets`](../tests/integration/ecs-schedule-targets/)<br>[`ecs-service-update-props`](../tests/integration/ecs-service-update-props/)<br>[`efs-immutable-replacement`](../tests/integration/efs-immutable-replacement/)<br>[`efs-standalone`](../tests/integration/efs-standalone/)<br>[`elasticache-replicationgroup-getatt`](../tests/integration/elasticache-replicationgroup-getatt/)<br>[`emr-cluster`](../tests/integration/emr-cluster/)<br>[`emr-instance-configs`](../tests/integration/emr-instance-configs/)<br>[`eventbridge`](../tests/integration/eventbridge/)<br>[`eventbridge-api-destination`](../tests/integration/eventbridge-api-destination/)<br>[`eventbridge-archive`](../tests/integration/eventbridge-archive/)<br>[`eventbridge-input-transformer`](../tests/integration/eventbridge-input-transformer/)<br>[`eventbridge-pipes`](../tests/integration/eventbridge-pipes/)<br>[`eventbridge-scheduler`](../tests/integration/eventbridge-scheduler/)<br>[`eventsourcemapping-race`](../tests/integration/eventsourcemapping-race/)<br>[`export`](../tests/integration/export/)<br>[`export-nested-stack`](../tests/integration/export-nested-stack/)<br>[`fifo-sqs-event-source`](../tests/integration/fifo-sqs-event-source/)<br>[`fsx-lustre`](../tests/integration/fsx-lustre/)<br>[`fsx-ontap`](../tests/integration/fsx-ontap/)<br>[`fsx-openzfs`](../tests/integration/fsx-openzfs/)<br>[`fsx-windows`](../tests/integration/fsx-windows/)<br>[`gc-custom-asset-names`](../tests/integration/gc-custom-asset-names/)<br>[`getatt-fallback-guard`](../tests/integration/getatt-fallback-guard/)<br>[`getstackoutput-crossregion`](../tests/integration/getstackoutput-crossregion/)<br>[`glue-securityconfig-replace`](../tests/integration/glue-securityconfig-replace/)<br>[`glue-update-hardening`](../tests/integration/glue-update-hardening/)<br>[`iam-access-key`](../tests/integration/iam-access-key/)<br>[`iam-managed-policy`](../tests/integration/iam-managed-policy/)<br>[`iam-oidc-provider`](../tests/integration/iam-oidc-provider/)<br>[`iam-propagation-stress`](../tests/integration/iam-propagation-stress/)<br>[`iam-role-policies-drift-clean`](../tests/integration/iam-role-policies-drift-clean/)<br>[`iam-role-prefixed-name-update`](../tests/integration/iam-role-prefixed-name-update/)<br>[`import-attributes`](../tests/integration/import-attributes/)<br>[`import-auto-mode`](../tests/integration/import-auto-mode/)<br>[`import-nested-stack`](../tests/integration/import-nested-stack/)<br>[`inplace-attr-propagation`](../tests/integration/inplace-attr-propagation/)<br>[`kinesis-esm-filter`](../tests/integration/kinesis-esm-filter/)<br>[`kinesis-stream-mode-switch`](../tests/integration/kinesis-stream-mode-switch/)<br>[`lambda`](../tests/integration/lambda/)<br>[`lambda-alias-provisioned-concurrency`](../tests/integration/lambda-alias-provisioned-concurrency/)<br>[`lambda-arch-switch`](../tests/integration/lambda-arch-switch/)<br>[`lambda-config-field-removal`](../tests/integration/lambda-config-field-removal/)<br>[`lambda-destinations`](../tests/integration/lambda-destinations/)<br>[`lambda-env-removal`](../tests/integration/lambda-env-removal/)<br>[`lambda-esm-self-managed-kafka`](../tests/integration/lambda-esm-self-managed-kafka/)<br>[`lambda-event-invoke-config-update`](../tests/integration/lambda-event-invoke-config-update/)<br>[`lambda-layer-version-update`](../tests/integration/lambda-layer-version-update/)<br>[`lambda-log-retention`](../tests/integration/lambda-log-retention/)<br>[`lambda-microvm-image`](../tests/integration/lambda-microvm-image/)<br>[`lambda-reserved-concurrency`](../tests/integration/lambda-reserved-concurrency/)<br>[`lambda-snapstart`](../tests/integration/lambda-snapstart/)<br>[`launchtemplate-asg-inplace`](../tests/integration/launchtemplate-asg-inplace/)<br>[`loggroup-class-guard`](../tests/integration/loggroup-class-guard/)<br>[`loggroup-kms-associate`](../tests/integration/loggroup-kms-associate/)<br>[`migrate-from-bare-cfn`](../tests/integration/migrate-from-bare-cfn/)<br>[`migrate-from-cfn`](../tests/integration/migrate-from-cfn/)<br>[`multi-asset`](../tests/integration/multi-asset/)<br>[`nested-stack-3level`](../tests/integration/nested-stack-3level/)<br>[`nested-stack-deep`](../tests/integration/nested-stack-deep/)<br>[`nodejs-function`](../tests/integration/nodejs-function/)<br>[`opensearch-domain-getatt`](../tests/integration/opensearch-domain-getatt/)<br>[`propagation-races-2`](../tests/integration/propagation-races-2/)<br>[`raw-cfn-conditions-params`](../tests/integration/raw-cfn-conditions-params/)<br>[`rds-aurora`](../tests/integration/rds-aurora/)<br>[`rds-dbinstance-backfill`](../tests/integration/rds-dbinstance-backfill/)<br>[`rds-full-stack`](../tests/integration/rds-full-stack/)<br>[`recreate-mixed-direction`](../tests/integration/recreate-mixed-direction/)<br>[`recreate-via-cc-api`](../tests/integration/recreate-via-cc-api/)<br>[`recreate-via-sdk-provider`](../tests/integration/recreate-via-sdk-provider/)<br>[`redshift-cluster-getatt`](../tests/integration/redshift-cluster-getatt/)<br>[`rename-refactor`](../tests/integration/rename-refactor/)<br>[`replacement-fanout`](../tests/integration/replacement-fanout/)<br>[`replacement-immutable-name`](../tests/integration/replacement-immutable-name/)<br>[`rollback-deletion-policy-snapshot`](../tests/integration/rollback-deletion-policy-snapshot/)<br>[`route53`](../tests/integration/route53/)<br>[`s3-asset-deploy`](../tests/integration/s3-asset-deploy/)<br>[`s3-cloudfront`](../tests/integration/s3-cloudfront/)<br>[`s3-directory-bucket`](../tests/integration/s3-directory-bucket/)<br>[`s3-event-notification`](../tests/integration/s3-event-notification/)<br>[`s3-lifecycle`](../tests/integration/s3-lifecycle/)<br>[`s3-object-lock`](../tests/integration/s3-object-lock/)<br>[`s3-replication-and-filter`](../tests/integration/s3-replication-and-filter/)<br>[`s3-tables`](../tests/integration/s3-tables/)<br>[`s3-vectors`](../tests/integration/s3-vectors/)<br>[`scheduler-custom-group`](../tests/integration/scheduler-custom-group/)<br>[`schema-v5-to-v6-migration`](../tests/integration/schema-v5-to-v6-migration/)<br>[`schema-v6-to-v7-migration`](../tests/integration/schema-v6-to-v7-migration/)<br>[`schema-v7-to-v8-migration`](../tests/integration/schema-v7-to-v8-migration/)<br>[`sdk-ccapi-crossref`](../tests/integration/sdk-ccapi-crossref/)<br>[`secrets-dynamic-ref`](../tests/integration/secrets-dynamic-ref/)<br>[`secrets-rotation-schedule`](../tests/integration/secrets-rotation-schedule/)<br>[`serverless-api`](../tests/integration/serverless-api/)<br>[`servicediscovery`](../tests/integration/servicediscovery/)<br>[`servicediscovery-namespaces`](../tests/integration/servicediscovery-namespaces/)<br>[`ses-identity`](../tests/integration/ses-identity/)<br>[`sg-circular-dependency`](../tests/integration/sg-circular-dependency/)<br>[`sns-event-source`](../tests/integration/sns-event-source/)<br>[`sns-inline-subscription`](../tests/integration/sns-inline-subscription/)<br>[`sns-pending-subscription`](../tests/integration/sns-pending-subscription/)<br>[`sns-sqs-event`](../tests/integration/sns-sqs-event/)<br>[`sns-subscription-filter`](../tests/integration/sns-subscription-filter/)<br>[`sqs-esm-max-concurrency`](../tests/integration/sqs-esm-max-concurrency/)<br>[`stepfunctions`](../tests/integration/stepfunctions/)<br>[`stepfunctions-logging`](../tests/integration/stepfunctions-logging/)<br>[`stepfunctions-s3-definition`](../tests/integration/stepfunctions-s3-definition/)<br>[`synthetics-canary`](../tests/integration/synthetics-canary/)<br>[`throttle-wide-dag`](../tests/integration/throttle-wide-dag/)<br>[`update-replace`](../tests/integration/update-replace/)<br>[`wait-condition-handle`](../tests/integration/wait-condition-handle/) |
 
-## Long-form flags referenced in integs but NOT declared in src/cli/options.ts (279)
+## Long-form flags referenced in integs but NOT declared in src/cli/options.ts (280)
 
 These are mostly third-party CLI flags (`--query` for `aws` / `--region` for `aws s3 ls` / `--no-paginate` / etc.) OR typos of cdkd flag names. Listed here for visibility — review only if a row matches a cdkd flag with a misspelling.
 
@@ -83,6 +83,7 @@ These are mostly third-party CLI flags (`--query` for `aws` / `--region` for `aw
 - `--apply-immediately`
 - `--archive-name`
 - `--arg`
+- `--argjson`
 - `--asset-bucket`
 - `--assume-role`
 - `--attribute`
@@ -265,6 +266,5 @@ These are mostly third-party CLI flags (`--query` for `aws` / `--region` for `aw
 - `--receipt-handle`
 - `--recursive`
 - `--replication-group-id`
-- `--repository-description`
 
-_(79 more entries truncated — see `docs/_generated/cli-flag-coverage.json` for the full list.)_
+_(80 more entries truncated — see `docs/_generated/cli-flag-coverage.json` for the full list.)_