Chore: [AEA-0000] - add exclude array for python lambdas (#602)

## Summary

- Routine Change

### Details

- add exclude array for python lambdas

Author: anthony-nhs

.gitignore

@@ -25,4 +25,5 @@ _site/
 .sass-cache
 .jekyll-cache
 .jekyll-metadata
-vendor
+vendor
+.trivy_out/

.trivy_out/license_scan.txt

@@ -71,3 +71,9 @@ vulnerabilities:
   - id: CVE-2026-27142
     statement: asdf go stdlib
     expired_at: 2026-06-01
+  - id: CVE-2026-27142
+    statement: asdf go stdlib
+    expired_at: 2026-06-01
+  - id: CVE-2026-32141
+    statement: flatted
+    expired_at: 2026-06-01

.trivyignore.yaml

@@ -80,6 +80,17 @@ export interface PythonLambdaFunctionProps {
    * @default Architecture.X86_64
    */
   readonly architecture?: Architecture
+   /**
+   * Any files to exclude from the Lambda asset bundle.
+   * Defaults to these files
+   * "tests",
+   * "pytest.ini",
+   * ".vscode",
+   * "__pycache__",
+   * "*.pyc"
+   */
+  readonly excludeFromAsset?: Array<string>
+
 }
 
 export class PythonLambdaFunction extends Construct {
@@ -167,7 +178,14 @@ export class PythonLambdaFunction extends Construct {
       layers = [], // Default to empty array
       timeoutInSeconds = 50,
       runtime = Runtime.PYTHON_3_14,
-      architecture = Architecture.X86_64
+      architecture = Architecture.X86_64,
+      excludeFromAsset = [
+        "tests",
+        "pytest.ini",
+        ".vscode",
+        "__pycache__",
+        "*.pyc"
+      ]
     } = props
 
     const {logGroup, role, insightsLayer} = createSharedLambdaResources(this, {
@@ -196,7 +214,9 @@ export class PythonLambdaFunction extends Construct {
       functionName: functionName,
       architecture,
       handler: handler,
-      code: Code.fromAsset(join(projectBaseDir, packageBasePath)),
+      code: Code.fromAsset(join(projectBaseDir, packageBasePath), {
+        exclude: excludeFromAsset
+      }),
       role,
       environment: {
         ...environmentVariables,