Skip to content
v2.273.0

DatabaseClusterProps Struct ​

Properties for a new database cluster.

Example ​

ts
declare const vpc: ec2.Vpc;
const cluster = new docdb.DatabaseCluster(this, 'Database', {
  masterUser: {
    username: 'myuser',
  },
  instanceType: ec2.InstanceType.of(ec2.InstanceClass.MEMORY5, ec2.InstanceSize.LARGE),
  vpcSubnets: {
    subnetType: ec2.SubnetType.PUBLIC,
  },
  vpc,
  deletionProtection: true, // Enable deletion protection.
});

Properties ​

backupBackupPropsbackupBackupPropsbackupBackupPropsBackupBackupPropsBackupBackupProps= Backup retention period for auto…#
Backup settings.
default

Default: Backup retention period for automated backups is 1 day. Backup preferred window is set to a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.

caCertificateCaCertificateca_certificateCaCertificatecaCertificateCaCertificateCaCertificateCaCertificateCaCertificateCaCertificate= DocumentDB will choose a certifi…#
The identifier of the CA certificate used for the instances.

Specifying or updating this property triggers a reboot.

default

Default: DocumentDB will choose a certificate authority

cloudWatchLogsRetentionRetentionDayscloud_watch_logs_retentionRetentionDayscloudWatchLogsRetentionRetentionDaysCloudWatchLogsRetentionRetentionDaysCloudWatchLogsRetentionRetentionDays= logs never expire#
The number of days log events are kept in CloudWatch Logs.

When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to Infinity.

cloudWatchLogsRetentionRoleIRolecloud_watch_logs_retention_roleIRolecloudWatchLogsRetentionRoleIRoleCloudWatchLogsRetentionRoleIRoleCloudWatchLogsRetentionRoleIRole= a new role is created.#
The IAM role for the Lambda function associated with the custom resource that sets the retention policy.
copyTagsToSnapshotbooleancopy_tags_to_snapshotboolcopyTagsToSnapshotBooleanCopyTagsToSnapshotboolCopyTagsToSnapshot*bool= false#
Whether to copy tags to the snapshot when a snapshot is created.
dbClusterNamestringdb_cluster_namestrdbClusterNameStringDbClusterNamestringDbClusterName*string= A name is automatically generate…#
An optional identifier for the cluster.
default

Default: A name is automatically generated.

deletionProtectionbooleandeletion_protectionbooldeletionProtectionBooleanDeletionProtectionboolDeletionProtection*bool= false#
Specifies whether this cluster can be deleted.

If deletionProtection is enabled, the cluster cannot be deleted unless it is modified and deletionProtection is disabled. deletionProtection protects clusters from being accidentally deleted.

enablePerformanceInsightsbooleanenable_performance_insightsboolenablePerformanceInsightsBooleanEnablePerformanceInsightsboolEnablePerformanceInsights*bool= false#
A value that indicates whether to enable Performance Insights for the instances in the DB Cluster.
engineVersionstringengine_versionstrengineVersionStringEngineVersionstringEngineVersion*string= the latest major version#
What version of the database to start.
exportAuditLogsToCloudWatchbooleanexport_audit_logs_to_cloud_watchboolexportAuditLogsToCloudWatchBooleanExportAuditLogsToCloudWatchboolExportAuditLogsToCloudWatch*bool= false#
Whether the audit logs should be exported to CloudWatch.

Note that you also have to configure the audit log export in the Cluster's Parameter Group.

exportProfilerLogsToCloudWatchbooleanexport_profiler_logs_to_cloud_watchboolexportProfilerLogsToCloudWatchBooleanExportProfilerLogsToCloudWatchboolExportProfilerLogsToCloudWatch*bool= false#
Whether the profiler logs should be exported to CloudWatch.

Note that you also have to configure the profiler log export in the Cluster's Parameter Group.

instanceIdentifierBasestringinstance_identifier_basestrinstanceIdentifierBaseStringInstanceIdentifierBasestringInstanceIdentifierBase*string= `dbClusterName` is used with the…#
Base identifier for instances.

Every replica is named by appending the replica number to this string, 1-based. Only applicable for provisioned clusters.

default

Default: dbClusterName is used with the word "Instance" appended. If dbClusterName is not provided, the identifier is automatically generated.

instanceMaintenanceWindowstringinstance_maintenance_windowstrinstanceMaintenanceWindowStringInstanceMaintenanceWindowstringInstanceMaintenanceWindow*string= a 30-minute window selected at r…#
The weekly time range during which system maintenance can occur on the cluster's instances.
notes · default

The cluster-level preferredMaintenanceWindow applies to cluster-wide maintenance events; this prop applies to each auto-created instance independently. To use the same window for both, set this prop to the same value as preferredMaintenanceWindow.

Format: ddd:hh24:mi-ddd:hh24:mi. Must be at least 30 minutes long. Example: 'sat:09:00-sat:09:30'

Only applicable to provisioned clusters; has no effect on serverless clusters because they do not create instances.

Default: a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.

instanceRemovalPolicyRemovalPolicyinstance_removal_policyRemovalPolicyinstanceRemovalPolicyRemovalPolicyInstanceRemovalPolicyRemovalPolicyInstanceRemovalPolicyRemovalPolicy= `RemovalPolicy.DESTROY` when `re…#
The removal policy to apply to the cluster's instances.

Cannot be set to SNAPSHOT.

default

Default: RemovalPolicy.DESTROY when removalPolicy is set to SNAPSHOT, removalPolicy otherwise.

instancesnumberinstancesint | floatinstancesNumberInstancesdoubleInstances*float64= 1#
Number of DocDB compute instances.
instanceTypeInstanceTypeinstance_typeInstanceTypeinstanceTypeInstanceTypeInstanceTypeInstanceTypeInstanceTypeInstanceType= None#
What type of instance to start for the replicas.

Required for provisioned clusters, not applicable for serverless clusters.

kmsKeyIKeykms_keyIKeykmsKeyIKeyKmsKeyIKeyKmsKeyIKey= default master key.#
The KMS key for storage encryption.
manageMasterUserPasswordbooleanmanage_master_user_passwordboolmanageMasterUserPasswordBooleanManageMasterUserPasswordboolManageMasterUserPassword*bool= false#
Specifies whether to manage the master user password with AWS Secrets Manager.
notes

When set to true, Amazon DocumentDB will automatically generate and manage the master user password in AWS Secrets Manager. This provides enhanced security and automatic password rotation capabilities.

Constraint: You can't manage the master user password with AWS Secrets Manager if masterUser.password is specified.

The secret property of the cluster is not set when using this option. See the module README for how to access the managed secret.

masterUserLoginmaster_userLoginmasterUserLoginMasterUserLoginMasterUserLoginrequired#
Username and password for the administrative user.
masterUserSecretKmsKeyIKeymaster_user_secret_kms_keyIKeymasterUserSecretKmsKeyIKeyMasterUserSecretKmsKeyIKeyMasterUserSecretKmsKeyIKey= default AWS managed key `aws/sec…#
The AWS KMS key to encrypt a secret that is automatically generated and managed in AWS Secrets Manager.
notes · default

This setting is valid only if the master user password is managed by Amazon DocumentDB in AWS Secrets Manager for the DB cluster (i.e. when manageMasterUserPassword is true). If you don't specify this property, then the aws/secretsmanager KMS key is used to encrypt the secret.

Default: default AWS managed key aws/secretsmanager

parameterGroupIDBClusterParameterGroupRefparameter_groupIDBClusterParameterGroupRefparameterGroupIDBClusterParameterGroupRefParameterGroupIDBClusterParameterGroupRefParameterGroupIDBClusterParameterGroupRef= no parameter group#
The DB parameter group to associate with the instance.
portnumberportint | floatportNumberPortdoublePort*float64= DatabaseCluster.DEFAULT_PORT#
The port the DocumentDB cluster will listen on.
preferredMaintenanceWindowstringpreferred_maintenance_windowstrpreferredMaintenanceWindowStringPreferredMaintenanceWindowstringPreferredMaintenanceWindow*string= 30-minute window selected at ran…#
A weekly time range in which maintenance should preferably execute.

Must be at least 30 minutes long.

Example: 'tue:04:17-tue:04:47'

default

Default: 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.

removalPolicyRemovalPolicyremoval_policyRemovalPolicyremovalPolicyRemovalPolicyRemovalPolicyRemovalPolicyRemovalPolicyRemovalPolicy= Retain cluster.#
The removal policy to apply when the cluster and its instances are removed or replaced during a stack update, or when the stack is deleted.
notes

This removal policy also applies to the implicit security group created for the cluster if one is not supplied as a parameter.

When set to SNAPSHOT, the removal policy for the instances and the security group will default to DESTROY as those resources do not support the policy.

Use the instanceRemovalPolicy and securityGroupRemovalPolicy to change the behavior.

securityGroupISecurityGroupsecurity_groupISecurityGroupsecurityGroupISecurityGroupSecurityGroupISecurityGroupSecurityGroupISecurityGroup= a new security group is created.#
Security group.
securityGroupRemovalPolicyRemovalPolicysecurity_group_removal_policyRemovalPolicysecurityGroupRemovalPolicyRemovalPolicySecurityGroupRemovalPolicyRemovalPolicySecurityGroupRemovalPolicyRemovalPolicy= `RemovalPolicy.DESTROY` when `re…#
The removal policy to apply to the cluster's security group.

Cannot be set to SNAPSHOT.

default

Default: RemovalPolicy.DESTROY when removalPolicy is set to SNAPSHOT, removalPolicy otherwise.

serverlessV2ScalingConfigurationServerlessV2ScalingConfigurationserverless_v2_scaling_configurationServerlessV2ScalingConfigurationserverlessV2ScalingConfigurationServerlessV2ScalingConfigurationServerlessV2ScalingConfigurationServerlessV2ScalingConfigurationServerlessV2ScalingConfigurationServerlessV2ScalingConfiguration= None#
ServerlessV2 scaling configuration.

When specified, the cluster will be created as a serverless cluster.

storageEncryptedbooleanstorage_encryptedboolstorageEncryptedBooleanStorageEncryptedboolStorageEncrypted*bool= true#
Whether to enable storage encryption.
storageTypeStorageTypestorage_typeStorageTypestorageTypeStorageTypeStorageTypeStorageTypeStorageTypeStorageType= StorageType.STANDARD#
The storage type of the DocDB cluster.

I/O-optimized storage is supported starting with engine version 5.0.0.

vpcIVpcvpcIVpcvpcIVpcVpcIVpcVpcIVpcrequired#
What subnets to run the DocumentDB instances in.

Must be at least 2 subnets in two different AZs.

vpcSubnetsSubnetSelectionvpc_subnetsSubnetSelectionvpcSubnetsSubnetSelectionVpcSubnetsSubnetSelectionVpcSubnetsSubnetSelection= private subnets#
Where to place the instances within the VPC.

Used as props by ​