aws-rds: Add manageMasterUserPassword support to DatabaseCluster L2 construct #35895
Description
Describe the feature
I would like to add support for the manageMasterUserPassword property to the RDS DatabaseCluster L2 construct. This property enables automatic password management with AWS Secrets Manager for Aurora clusters, which is currently only available through L1 constructs or escape hatches.
Use Case
I often rely on escape hatches to enable automatic password rotation for Aurora clusters, but I would prefer to handle everything within the L2 construct if possible.
Having this feature supported natively in L2 would make the codebase cleaner and more consistent.
Proposed Solution
I think it might be a good idea to add the following property to the DatabaseClusterProps interface in aws-cdk/packages/aws-cdk-lib/aws-rds/lib/cluster.ts, although I’m not entirely sure if this is the correct approach:
// Add to DatabaseClusterProps interface
export interface DatabaseClusterProps {
// ... existing properties
/**
* Whether to manage the master user password with AWS Secrets Manager.
*
* @default false
*/
readonly manageMasterUserPassword?: boolean;
}
Other Information
No response
Acknowledgements
- I may be able to implement this feature request
- This feature might incur a breaking change
AWS CDK Library version (aws-cdk-lib)
2.219.0
AWS CDK CLI version
2.1029.4
Environment details (OS name and version, etc.)
Ubuntu 24.04.3 LTS