diff --git a/.changeset/aws-cdk-update-v2.172.0.md b/.changeset/aws-cdk-update-v2.172.0.md
new file mode 100644
index 0000000000..ad53fc5fb8
--- /dev/null
+++ b/.changeset/aws-cdk-update-v2.172.0.md
@@ -0,0 +1,6 @@
+---
+"@guardian/cdk": patch
+---
+
+Update aws-cdk to 2.172.0, aws-cdk-lib to 2.172.0, constructs to 10.4.2
+
diff --git a/package-lock.json b/package-lock.json
index 838bce2b7a..693d569dbc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -36,8 +36,8 @@
         "@types/lodash.upperfirst": "^4.3.9",
         "@types/node": "22.10.0",
         "@types/yargs": "^17.0.33",
-        "aws-cdk": "2.170.0",
-        "aws-cdk-lib": "2.170.0",
+        "aws-cdk": "2.172.0",
+        "aws-cdk-lib": "2.172.0",
         "constructs": "10.4.2",
         "eslint": "^8.57.1",
         "eslint-plugin-custom-rules": "file:tools/eslint",
@@ -51,8 +51,8 @@
         "typescript": "5.1.6"
       },
       "peerDependencies": {
-        "aws-cdk": "2.170.0",
-        "aws-cdk-lib": "2.170.0",
+        "aws-cdk": "2.172.0",
+        "aws-cdk-lib": "2.172.0",
         "constructs": "10.4.2"
       }
     },
@@ -2861,9 +2861,9 @@
       }
     },
     "node_modules/aws-cdk": {
-      "version": "2.170.0",
-      "resolved": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.170.0.tgz",
-      "integrity": "sha512-gjQZnJIBtm5rd2k/s9BLSFeLxiFbHgr4wgNuEajf0dxLwHvZeafZiSTz86SSh03BEU1fB74IV73ozE4RoMTijQ==",
+      "version": "2.172.0",
+      "resolved": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.172.0.tgz",
+      "integrity": "sha512-kacztcAl12F6zlBqKCuzCZmj4vrbMhzgDAxBB4T7fXR2amQyuu6W0nWcGWWvASXeBJcw2DJ6ulpfV4wuc9dksw==",
       "dev": true,
       "bin": {
         "cdk": "bin/cdk"
@@ -2876,9 +2876,9 @@
       }
     },
     "node_modules/aws-cdk-lib": {
-      "version": "2.170.0",
-      "resolved": "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.170.0.tgz",
-      "integrity": "sha512-hlfoOJUZmAY3TjOXjWhAYKlrPcfGNTXA24NirwkEYOX+t1HD8OLSrYZvluMc7nWgIZf1Mq1g6M0xNEZJqykPrA==",
+      "version": "2.172.0",
+      "resolved": "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.172.0.tgz",
+      "integrity": "sha512-SbFn2FyKhsHQpS7M3qeMWnRKtBHELkY3rmejk07cPlJ/BCJk/af8eKyeiNEEB0AZSfIeP4ImZCLNy9JS34mlPw==",
       "bundleDependencies": [
         "@balena/dockerignore",
         "case",
diff --git a/package.json b/package.json
index 619b8f4a88..dad1ec9edb 100644
--- a/package.json
+++ b/package.json
@@ -40,8 +40,8 @@
     "@types/lodash.upperfirst": "^4.3.9",
     "@types/node": "22.10.0",
     "@types/yargs": "^17.0.33",
-    "aws-cdk": "2.170.0",
-    "aws-cdk-lib": "2.170.0",
+    "aws-cdk": "2.172.0",
+    "aws-cdk-lib": "2.172.0",
     "constructs": "10.4.2",
     "eslint": "^8.57.1",
     "eslint-plugin-custom-rules": "file:tools/eslint",
@@ -68,8 +68,8 @@
     "yargs": "^17.7.2"
   },
   "peerDependencies": {
-    "aws-cdk": "2.170.0",
-    "aws-cdk-lib": "2.170.0",
+    "aws-cdk": "2.172.0",
+    "aws-cdk-lib": "2.172.0",
     "constructs": "10.4.2"
   }
 }
diff --git a/tools/integration-test/package.json b/tools/integration-test/package.json
index c19a1bf4a3..cddf2543a8 100644
--- a/tools/integration-test/package.json
+++ b/tools/integration-test/package.json
@@ -20,8 +20,8 @@
     "@guardian/tsconfig": "^0.2.0",
     "@types/jest": "^29.1.2",
     "@types/node": "20.8.7",
-    "aws-cdk": "2.170.0",
-    "aws-cdk-lib": "2.170.0",
+    "aws-cdk": "2.172.0",
+    "aws-cdk-lib": "2.172.0",
     "constructs": "10.4.2",
     "eslint": "^8.8.0",
     "eslint-plugin-custom-rules": "file:../eslint",