fix(secretsmanager): secret transformation (#35202)

* Use new transform to update from deprecated python 3.9 lambda runtime

### Issue # (if applicable)

Closes #34168

### Reason for this change

* Lambda runtime python 3.9 is marked for deprecation and therefore should be updated

### Description of changes

* Use new serverless transformation

### Describe any new or updated permissions being added

none

### Description of how you validated changes

existing unit tests

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: alexandersperling

packages/@aws-cdk-testing/framework-integ/test/aws-rds/test/integ.serverless-cluster-secret-rotation-custom-names.js.snapshot/aws-cdk-rds-integ-secret-rotation.template.json

@@ -1,5 +1,5 @@
 {
- "Transform": "AWS::SecretsManager-2020-07-23",
+ "Transform": "AWS::SecretsManager-2024-09-16",
  "Resources": {
   "DbSecurity381C2C15": {
    "Type": "AWS::KMS::Key",

packages/@aws-cdk-testing/framework-integ/test/aws-rds/test/integ.serverless-cluster-secret-rotation.js.snapshot/aws-cdk-rds-integ-secret-rotation.template.json

@@ -1,5 +1,5 @@
 {
- "Transform": "AWS::SecretsManager-2020-07-23",
+ "Transform": "AWS::SecretsManager-2024-09-16",
  "Resources": {
   "DbSecurity381C2C15": {
    "Type": "AWS::KMS::Key",

packages/@aws-cdk-testing/framework-integ/test/aws-secretsmanager/test/integ.hosted-rotation.js.snapshot/cdk-integ-secret-hosted-rotation.template.json

@@ -1,6 +1,6 @@
 {
  "Transform": [
-  "AWS::SecretsManager-2020-07-23"
+  "AWS::SecretsManager-2024-09-16"
  ],
  "Resources": {
   "SecretA720EF05": {

packages/aws-cdk-lib/aws-secretsmanager/lib/rotation-schedule.ts

@@ -314,7 +314,7 @@ export class HostedRotation implements ec2.IConnectable {
    */
   public bind(secret: ISecret, scope: Construct): CfnRotationSchedule.HostedRotationLambdaProperty {
     // https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-secretsmanager-rotationschedule-hostedrotationlambda.html
-    Stack.of(scope).addTransform('AWS::SecretsManager-2020-07-23');
+    Stack.of(scope).addTransform('AWS::SecretsManager-2024-09-16');
 
     if (!this.props.vpc && this.props.securityGroups) {
       throw new ValidationError('`vpc` must be specified when specifying `securityGroups`.', secret);

packages/aws-cdk-lib/aws-secretsmanager/test/rotation-schedule.test.ts

@@ -159,7 +159,7 @@ describe('default tests', () => {
       });
 
       expect(app.synth().getStackByName(stack.stackName).template).toEqual(expect.objectContaining({
-        Transform: 'AWS::SecretsManager-2020-07-23',
+        Transform: 'AWS::SecretsManager-2024-09-16',
       }));
 
       Template.fromStack(stack).hasResourceProperties('AWS::SecretsManager::ResourcePolicy', {