(documentDB): (Expose CACertificateIdentifier in L2 Construct)

[HaaLeo]

Describe the feature

Pls expose the CloudFormation CACertificateIdentifier property on the L2 construct docDb.DatabaseCluster

Use Case

With that one does not have to use Aspects to set the ca certificate

Proposed Solution

If one can guide me I might be able to submit a PR myself.

Other Information

Right now one can use Aspects as a workaround:

import * as docDb from 'aws-cdk-lib/aws-docdb';

let database: docDb.DatabaseCluster;

// ... 

cdk.Aspects.of(database).add({
    visit: (node) => {
        if (node instanceof docDb.CfnDBInstance) {
            node.addPropertyOverride('CACertificateIdentifier', 'rds-ca-rsa2048-g1');
        }
    }
});

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.100.0

Environment details (OS name and version, etc.)

macOS 14.2

[pahud]

Yeah it would be great to expose that as an optional property.

Aside from Aspects, another option is like this:

export class DemoStack extends Stack {
  readonly fn: lambda.IFunction;
  constructor(scope: Construct, id: string, props: StackProps) {
    super(scope, id, props);

    const cluster = new docdb.DatabaseCluster(this, 'Database', {
      masterUser: {
        username: 'myuser', // NOTE: 'admin' is reserved by DocumentDB
        excludeCharacters: '\"@/:', // optional, defaults to the set "\"@/" and is also used for eventually created rotations
        secretName: '/myapp/mydocdb/masteruser', // optional, if you prefer to specify the secret name
      },
      instanceType: ec2.InstanceType.of(ec2.InstanceClass.MEMORY5, ec2.InstanceSize.LARGE),
      instances: 3,
      vpcSubnets: {
        subnetType: ec2.SubnetType.PUBLIC,
      },
      vpc: getDefaultVpc(this),
    });

   this.overrideCustomProperty('AWS::DocDB::DBInstance', 'CACertificateIdentifier', 'rds-ca-rsa2048-g1', [cluster]);

  }
  private overrideCustomProperty(resourceType: string, overrideKey: string, overrideValue: string, children?: IConstruct[]) {
    (children ?? this.node.children).forEach((child) => {
      if(CfnResource.isCfnResource(child) && child.cfnResourceType == resourceType ) {
        child.addPropertyOverride(overrideKey, overrideValue)
      } else {
        this.overrideCustomProperty(resourceType, overrideKey, overrideValue, child.node.children)
      }
    })
  }
}

And you can run multiple this.overrideCustomProperty() to override multiple properties.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.