aws cdk diff with read only OIDC role suddenly very slow to generate a change set.

[jaycapps]

we have a aws cdk typescript project and a couple of weeks ago, the change set diff from standard github hosted runner began diffing very very slowly. IOW, in the dev/test environment we went from a few minutes to almost 100 minutes. anyone else experiencing this?

diff:
    name: Generate CDK Changesets
    runs-on: ubuntu-latest
    needs: [detect-aws-enviroment]
    strategy:
      matrix:
        target-env: ${{ fromJson(needs.detect-aws-enviroment.outputs.target-env) }}
    environment: ${{ matrix.target-env }}-readonly
    defaults:
      run:
        working-directory: 'aws/manager-infrastructure'
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup node
        uses: actions/setup-node@v4
        with:
          registry-url: 'https://npm.pkg.github.com'
          node-version: ${{ env.NODE_VERSION }}
          cache-dependency-path: aws/manager-infrastructure/package-lock.json
          cache: 'npm'

      - name: Install node dependencies
        run: npm ci

      # Here, we are using short-lived credentials with GitHub OIDC authentication
      # and assuming a role in AWS. The role to assume is determined by the
      # environment (prod or test) and the branch (main or dev).
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_ARN_READ }}
          role-duration-seconds: 28800 # 8 hours
          aws-region: us-east-1

      - name: Generate CDK Changesets
        run: npm run diff
        env:
          ENVIRONMENT: ${{ matrix.target-env }}```