Production EKS AMI patch

[notify-pr-bot]

Summary | Résumé

Update the production EKS AMI version to 1.35.5-20260520

Related Issues | Cartes liées

• https://app.zenhub.com/workspaces/notify-planning-core-6411dfb7c95fb80014e0cab0/issues/gh/cds-snc/notification-planning-core/495

Test instructions | Instructions pour tester la modification

• Verify that the dev and staging PR is merged first and working
• Verify that all nodes are ready in production
• Verify that Notify pods are all running in production
• Run a smoke test against production

Release Instructions | Instructions pour le déploiement

None.

Reviewer checklist | Liste de vérification du réviseur

• This PR does not break existing functionality.
• This PR does not violate GCNotify's privacy policies.
• This PR does not raise new security concerns. Refer to our GC Notify Risk Register document on our Google drive.
• This PR does not significantly alter performance.
• Additional required documentation resulting of these changes is covered (such as the README, setup instructions, a related ADR or the technical documentation).

⚠ If boxes cannot be checked off before merging the PR, they should be moved to the "Release Instructions" section with appropriate steps required to verify before release. For example, changes to celery code may require tests on staging to verify that performance has not been affected.

[github-actions]

staging/ses_to_sqs_email_callbacks Terragrunt Plan:

Terraform will perform the following actions:
  # module.ses_to_sqs_email_callbacks.aws_lambda_function.this will be updated in-place
  ~ resource "aws_lambda_function" "this" {
      - description                    = "2026-05-22T21:18:17Z" -> null
        id                             = "ses_to_sqs_email_callbacks"
        tags                           = {
            "CostCentre" = "notification-canada-ca-staging"
            "Terraform"  = "true"
        }
        # (29 unchanged attributes hidden)
        # (3 unchanged blocks hidden)
    }
Plan: 0 to add, 1 to change, 0 to destroy.

# --- End of Plan 1 ---

[github-actions]

staging/heartbeat Terragrunt Plan:

Terraform will perform the following actions:
  # module.heartbeat.aws_lambda_function.this will be updated in-place
  ~ resource "aws_lambda_function" "this" {
      - description                    = "2026-05-22T21:17:58Z" -> null
        id                             = "heartbeat"
        tags                           = {
            "CostCentre" = "notification-canada-ca-staging"
            "Terraform"  = "true"
        }
        # (29 unchanged attributes hidden)
        # (4 unchanged blocks hidden)
    }
Plan: 0 to add, 1 to change, 0 to destroy.

# --- End of Plan 1 ---

[github-actions]

staging/system_status Terragrunt Plan:

Terraform will perform the following actions:
  # module.system_status.aws_lambda_function.this will be updated in-place
  ~ resource "aws_lambda_function" "this" {
      - description                    = "2026-05-22T21:18:07Z" -> null
        id                             = "system_status"
        tags                           = {
            "CostCentre" = "notification-canada-ca-staging"
            "Terraform"  = "true"
        }
        # (29 unchanged attributes hidden)
        # (5 unchanged blocks hidden)
    }
Plan: 0 to add, 1 to change, 0 to destroy.

# --- End of Plan 1 ---

[github-actions]

staging/lambda-api Terragrunt Plan:

Terraform will perform the following actions:
  # null_resource.api_gateway_cloudwatch_logging[0] must be replaced
-/+ resource "null_resource" "api_gateway_cloudwatch_logging" {
      ~ id       = "2802877753606495534" -> (known after apply)
      ~ triggers = { # forces replacement
          ~ "always_run" = "2026-05-22T18:40:56Z" -> (known after apply)
        }
    }
Plan: 1 to add, 0 to change, 1 to destroy.

# --- End of Plan 1 ---

[notify-pr-bot]

Superseded by a newer AMI update.