diff --git a/cdk/package.json b/cdk/package.json
index 795fa6629..5bd5ba0e9 100644
--- a/cdk/package.json
+++ b/cdk/package.json
@@ -21,7 +21,7 @@
 		"@types/node": "25.5.2",
 		"aws-cdk": "2.1005.0",
 		"aws-cdk-lib": "2.189.1",
-		"constructs": "10.5.1",
+		"constructs": "10.6.0",
 		"eslint": "^9.39.4",
 		"globals": "^17.4.0",
 		"jest": "^30.3.0",
diff --git a/cdk/pnpm-lock.yaml b/cdk/pnpm-lock.yaml
index 18be9eaea..c2e786749 100644
--- a/cdk/pnpm-lock.yaml
+++ b/cdk/pnpm-lock.yaml
@@ -18,7 +18,7 @@ importers:
     devDependencies:
       '@guardian/cdk':
         specifier: 61.3.2
-        version: 61.3.2(aws-cdk-lib@2.189.1(constructs@10.5.1))(aws-cdk@2.1005.0)(constructs@10.5.1)
+        version: 61.3.2(aws-cdk-lib@2.189.1(constructs@10.6.0))(aws-cdk@2.1005.0)(constructs@10.6.0)
       '@guardian/eslint-config':
         specifier: ^14.0.1
         version: 14.0.1(@typescript-eslint/utils@8.57.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint-plugin-import@2.29.0(@typescript-eslint/parser@8.57.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4)(typescript@5.9.3)
@@ -36,10 +36,10 @@ importers:
         version: 2.1005.0
       aws-cdk-lib:
         specifier: 2.189.1
-        version: 2.189.1(constructs@10.5.1)
+        version: 2.189.1(constructs@10.6.0)
       constructs:
-        specifier: 10.5.1
-        version: 10.5.1
+        specifier: 10.6.0
+        version: 10.6.0
       eslint:
         specifier: ^9.39.4
         version: 9.39.4
@@ -1068,8 +1068,8 @@ packages:
   concat-map@0.0.1:
     resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
 
-  constructs@10.5.1:
-    resolution: {integrity: sha512-f/TfFXiS3G/yVIXDjOQn9oTlyu9Wo7Fxyjj7lb8r92iO81jR2uST+9MstxZTmDGx/CgIbxCXkFXgupnLTNxQZg==}
+  constructs@10.6.0:
+    resolution: {integrity: sha512-TxHOnBO5zMo/G76ykzGF/wMpEHu257TbWiIxP9K0Yv/+t70UzgBQiTqjkAsWOPC6jW91DzJI0+ehQV6xDRNBuQ==}
 
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
@@ -2438,6 +2438,11 @@ packages:
     engines: {node: '>= 0.4'}
     hasBin: true
 
+  resolve@1.22.12:
+    resolution: {integrity: sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA==}
+    engines: {node: '>= 0.4'}
+    hasBin: true
+
   resolve@2.0.0-next.6:
     resolution: {integrity: sha512-3JmVl5hMGtJ3kMmB3zi3DL25KfkCEyy3Tw7Gmw7z5w8M9WlwoPFnIvwChzu1+cF3iaK3sp18hhPz8ANeimdJfA==}
     engines: {node: '>= 0.4'}
@@ -3200,15 +3205,15 @@ snapshots:
       '@eslint/core': 0.17.0
       levn: 0.4.1
 
-  '@guardian/cdk@61.3.2(aws-cdk-lib@2.189.1(constructs@10.5.1))(aws-cdk@2.1005.0)(constructs@10.5.1)':
+  '@guardian/cdk@61.3.2(aws-cdk-lib@2.189.1(constructs@10.6.0))(aws-cdk@2.1005.0)(constructs@10.6.0)':
     dependencies:
       '@oclif/core': 3.26.6
       aws-cdk: 2.1005.0
-      aws-cdk-lib: 2.189.1(constructs@10.5.1)
+      aws-cdk-lib: 2.189.1(constructs@10.6.0)
       aws-sdk: 2.1693.0
       chalk: 4.1.2
       codemaker: 1.125.0
-      constructs: 10.5.1
+      constructs: 10.6.0
       git-url-parse: 16.1.0
       js-yaml: 4.1.1
       lodash.camelcase: 4.3.0
@@ -3930,12 +3935,12 @@ snapshots:
     dependencies:
       possible-typed-array-names: 1.1.0
 
-  aws-cdk-lib@2.189.1(constructs@10.5.1):
+  aws-cdk-lib@2.189.1(constructs@10.6.0):
     dependencies:
       '@aws-cdk/asset-awscli-v1': 2.2.263
       '@aws-cdk/asset-node-proxy-agent-v6': 2.1.0
       '@aws-cdk/cloud-assembly-schema': 41.2.0
-      constructs: 10.5.1
+      constructs: 10.6.0
 
   aws-cdk@2.1005.0:
     optionalDependencies:
@@ -4156,7 +4161,7 @@ snapshots:
 
   concat-map@0.0.1: {}
 
-  constructs@10.5.1: {}
+  constructs@10.6.0: {}
 
   convert-source-map@2.0.0: {}
 
@@ -4436,7 +4441,7 @@ snapshots:
     dependencies:
       debug: 3.2.7
       is-core-module: 2.16.1
-      resolve: 1.22.11
+      resolve: 1.22.12
     transitivePeerDependencies:
       - supports-color
     optional: true
@@ -5923,6 +5928,14 @@ snapshots:
       path-parse: 1.0.7
       supports-preserve-symlinks-flag: 1.0.0
 
+  resolve@1.22.12:
+    dependencies:
+      es-errors: 1.3.0
+      is-core-module: 2.16.1
+      path-parse: 1.0.7
+      supports-preserve-symlinks-flag: 1.0.0
+    optional: true
+
   resolve@2.0.0-next.6:
     dependencies:
       es-errors: 1.3.0