Describe the bug

The IAM OIDC and EC2 VPC restrict default security group custom resources still use Node16 and SdkV2. These weren't changed because they didn't use the builtInCustomResourceNodeRuntime mechanisms.

Expected Behavior

Use Node18 as the custom resources runtime which necessitates also using sdkv3 in the handler.

Current Behavior

Node16 is used.

Reproduction Steps

Provision these custom resources.

Possible Solution

No response

Additional Information/Context

No response

CDK CLI Version

2.90.0

Framework Version

No response

Node.js Version

18

OS

MacOS

Language

Typescript

Language Version

No response

Other information

No response