CI pending maintainer action: week 2026-September7-W37

Beginning-contributor PRs that entered pending maintainer CI action during week **2026-September7-W37**.

_Last updated: 2026-09-13T21:07:31.067Z (refreshed daily by the [Pending Maintainer Action Check workflow](https://github.com/aws/aws-cdk/blob/main/.github/workflows/pending-maintainer-action-check.yml))_

**21 PR(s)** — 🔒 Pending CI approval: 21

### 🔒 Pending CI approval (21)

| PR | Title | Author | Pending since |
|----|-------|--------|---------------|
| [#38782](https://github.com/aws/aws-cdk/pull/38782) | fix(eks): allow access policies on AccessEntryType.EC2 access entries | @krantboy | 2026-09-07 (6d) |
| [#38783](https://github.com/aws/aws-cdk/pull/38783) | chore(lambda): insights add version 1.0.660.0, 1.0.776.0 | @AnimeAllstar | 2026-09-07 (6d) |
| [#38701](https://github.com/aws/aws-cdk/pull/38701) | test(autoscaling-hooktargets): cover imported resources, role-preserving encryption, and createRole helper | @yooncandooit | 2026-09-07 (6d) |
| [#38792](https://github.com/aws/aws-cdk/pull/38792) | feat(lambda-nodejs): look for entry file relative to project root | @ajbw | 2026-09-08 (5d) |
| [#38756](https://github.com/aws/aws-cdk/pull/38756) | docs(internal): improve DX | @vedanshshetti | 2026-09-08 (5d) |
| [#38750](https://github.com/aws/aws-cdk/pull/38750) | feat(synthetics): support KMS key for canary environment variable enc… | @shukrash | 2026-09-08 (5d) |
| [#38774](https://github.com/aws/aws-cdk/pull/38774) | feat(cloudwatch): support the visible property on MathExpression and SearchExpression | @ketsugi | 2026-09-09 (4d) |
| [#38798](https://github.com/aws/aws-cdk/pull/38798) | fix(eks): reuse existing eks-pod-identity-agent addon for pod identity | @KR-Ravindra | 2026-09-09 (4d) |
| [#35472](https://github.com/aws/aws-cdk/pull/35472) | feat(stepfunctions-tasks): add awsSdkCredentials to CallAwsServiceCrossRegion for cross-account scenarios | @t3yamoto | 2026-09-09 (4d) |
| [#38802](https://github.com/aws/aws-cdk/pull/38802) | fix(region-info): correct Elastic Beanstalk hosted zone IDs for two regions | @MohammedAlkindi | 2026-09-09 (3d) |
| [#38331](https://github.com/aws/aws-cdk/pull/38331) | fix(rds): properly handle RETAIN_ON_UPDATE_OR_DELETE in subresources | @wasim-builds | 2026-09-10 (3d) |
| [#36309](https://github.com/aws/aws-cdk/pull/36309) | fix(ecs): enableDeploymentAlarms should mutate the alarmNames property | @vito-laurenza-zocdoc | 2026-09-10 (3d) |
| [#38259](https://github.com/aws/aws-cdk/pull/38259) | feat(ecs): support configurable deployment circuit breaker settings | @SIDDHESH1564 | 2026-09-10 (3d) |
| [#38770](https://github.com/aws/aws-cdk/pull/38770) | fix(bedrock-agentcore): make Runtime annotations acknowledgeable | @zessx | 2026-09-10 (3d) |
| [#38805](https://github.com/aws/aws-cdk/pull/38805) | fix(logs): validate field index name length in FieldIndexPolicy | @suletetes | 2026-09-10 (2d) |
| [#38499](https://github.com/aws/aws-cdk/pull/38499) | feat(opensearchservice): add useLatestServiceSoftwareForBlueGreen support | @Swathi-Karanth | 2026-09-11 (2d) |
| [#38551](https://github.com/aws/aws-cdk/pull/38551) | chore(rds): sqlserver 14.00.3530.2.v1,15.00.4470.1.v1,16.00.4245.2.v1,16.00.4250.1.v1,16.00.4255.1.v1 | @alpin87 | 2026-09-11 (2d) |
| [#38814](https://github.com/aws/aws-cdk/pull/38814) | feat(appsync): support adding an auth provider to an Event API after creation | @gauranshahuja | 2026-09-11 (2d) |
| [#38810](https://github.com/aws/aws-cdk/pull/38810) | feat(ec2): support IPAM CIDR allocation for Subnet | @gauranshahuja | 2026-09-11 (2d) |
| [#38816](https://github.com/aws/aws-cdk/pull/38816) | fix(apigateway): log group destination ARN causes permanent Stage drift | @Punisheroot | 2026-09-12 (1d) |
| [#38790](https://github.com/aws/aws-cdk/pull/38790) | chore(rds): add AuroraPostgresEngineVersion.VER_18_4 | @blakaut | 2026-09-13 (0d) |

Close this issue once all listed PRs have been handled.