How to do a StepFunction cleanup post deploy

cleanup.ts

const taskWaitThreeHours = new sfn.Wait(this, "Wait 3 hours for tasks to have executed.", {
  time: sfn.WaitTime.duration(cdk.Duration.hours(3))
});

const deprovisionLambda = new nodeLambda.NodejsFunction(this, "deprovisionFn", {
  runtime: lambda.Runtime.NODEJS_14_X,
  entry: "workflow/deprovision.ts",
  handler: "main",
  timeout: cdk.Duration.seconds(30),
  logRetention: logs.RetentionDays.ONE_MONTH,
  memorySize: 256,
});
allowManageProvisionTables(deprovisionLambda);

const deprovisionDefinition = sfn.Chain.start(taskWaitThreeHours).next(
  new tasks.LambdaInvoke(
    this,
    "Ensure highly provisioned tables have been switched to PAY_PER_REQUEST",
    {
      lambdaFunction: deprovisionLambda
    }
  )
);

const deprovisionStateMachine = new sfn.StateMachine(this, "deprovisioner", {
  definition: deprovisionDefinition,
  stateMachineName: `${props.serviceName}-deprovision-wf`,
  timeout: cdk.Duration.minutes(180),
  tracingEnabled: true
});

new cr.AwsCustomResource(this, "InvokeDeprovisioner", {
  onCreate: {
    service: "StepFunctions",
    action: "startExecution",
    parameters: {
      stateMachineArn: deprovisionStateMachine.stateMachineArn,
      input: JSON.stringify("{}")
    },
    physicalResourceId: cr.PhysicalResourceId.of(
      `${props.listenerName}-deprovision-wf-execute`
    )
  },
  policy: cr.AwsCustomResourcePolicy.fromSdkCalls({
    resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE
  })
});