# DatabaseClusterFromSnapshot

A database cluster restored from a snapshot.

Extends: Construct › Resource › DatabaseClusterBase › DatabaseClusterFromSnapshot
Implements: IResource, IConnectable, IDatabaseCluster, ISecretAttachmentTarget, IEnvironmentAware, IDBClusterRef, IConstruct, IDependable

- CloudFormation: [`AWS::RDS::DBCluster`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbcluster.html)
- L1 type: [`CfnDBCluster`](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.CfnDBCluster.html)
- Source: [`aws-rds/lib/cluster.ts`](https://github.com/aws/aws-cdk/blob/v2.273.0/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L1734)
- Type last changed: v2.261.0 · 2 Jul 2026

## Example

```ts
declare const vpc: ec2.Vpc;
new rds.DatabaseClusterFromSnapshot(this, 'Database', {
  engine: rds.DatabaseClusterEngine.aurora({ version: rds.AuroraEngineVersion.VER_1_22_2 }),
  writer: rds.ClusterInstance.provisioned('writer'),
  vpc,
  snapshotIdentifier: 'mySnapshot',
});
```

## Initializer

```ts
new DatabaseClusterFromSnapshot(scope: Construct, id: string, props: DatabaseClusterFromSnapshotProps)
```

## Construct Props

- `autoMinorVersionUpgrade`: boolean = true — Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window.

- `backtrackWindow`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) = 0 seconds (no backtrack) — The number of seconds to set a cluster's target backtrack window to.

  This feature is only supported by the Aurora MySQL database engine and
  cannot be enabled on existing clusters.

- `backup`: [BackupProps](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.BackupProps.html) = Backup retention period for automated backups is 1 day. Backup preferred window is set to a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. — Backup settings.

  **Default:** Backup retention period for automated backups is 1 day. Backup preferred window is set to a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.

- `cloudwatchLogsExports`: string[] = no log exports — The list of log types that need to be enabled for exporting to CloudWatch Logs.

- `cloudwatchLogsRetention`: [RetentionDays](/cdk/api/v2/docs/aws-cdk-lib.aws_logs.RetentionDays.html) = logs never expire — The number of days log events are kept in CloudWatch Logs.

  When updating
  this property, unsetting it doesn't remove the log retention policy. To
  remove the retention policy, set the value to `Infinity`.

- `cloudwatchLogsRetentionRole`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) = a new role is created. — The IAM role for the Lambda function associated with the custom resource that sets the retention policy.

- `clusterIdentifier`: string = A name is automatically generated. — An optional identifier for the cluster.

  **Default:** A name is automatically generated.

- `clusterScailabilityType`: [ClusterScailabilityType](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.ClusterScailabilityType.html) = ClusterScailabilityType.STANDARD — Use clusterScalabilityType instead. This will be removed in the next major version.

  Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD.

- `clusterScalabilityType`: [ClusterScalabilityType](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.ClusterScalabilityType.html) = ClusterScalabilityType.STANDARD — Specifies the scalability mode of the Aurora DB cluster.

  Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD.

- `copyTagsToSnapshot`: boolean = true — Whether to copy tags to the snapshot when a snapshot is created.

- `credentials`: [Credentials](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.Credentials.html) = A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use `snapshotCredentials` for the correct behavior. — use `snapshotCredentials` which allows to generate a new password

  Note - using this prop only works with `Credentials.fromPassword()` with the
  username of the snapshot, `Credentials.fromUsername()` with the username and
  password of the snapshot or `Credentials.fromSecret()` with a secret containing
  the username and password of the snapshot.

  **Default:** A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use `snapshotCredentials` for the correct behavior.

- `databaseInsightsMode`: [DatabaseInsightsMode](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.DatabaseInsightsMode.html) = DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set. — The database insights mode.

  **Default:** DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.

- `defaultDatabaseName`: string = Database is not created in cluster. — Name of a database which is automatically created inside the cluster.

  **Default:** Database is not created in cluster.

- `deleteAutomatedBackups`: boolean = undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule. — Specifies whether to remove automated backups immediately after the DB cluster is deleted.

  **Default:** undefined - AWS RDS default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule.

- `deletionProtection`: boolean = true if `removalPolicy` is RETAIN, `undefined` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to `false`. — Indicates whether the DB cluster should have deletion protection enabled.

  **Default:** true if `removalPolicy` is RETAIN, `undefined` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to `false`.

- `domain`: string = DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled. — Directory ID for associating the DB cluster with a specific Active Directory.

  Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication.
  If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled.

  **Default:** DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.

- `domainRole`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) = If `DatabaseClusterBaseProps.domain` is specified, a role with the `AmazonRDSDirectoryServiceAccess` policy is automatically created. — The IAM role to be used when making API calls to the Directory Service.

  The role needs the AWS-managed policy
  `AmazonRDSDirectoryServiceAccess` or equivalent.

  **Default:** If `DatabaseClusterBaseProps.domain` is specified, a role with the `AmazonRDSDirectoryServiceAccess` policy is automatically created.

- `enableClusterLevelEnhancedMonitoring`: boolean = When the `monitoringInterval` is set, enhanced monitoring is enabled for each instance. — Whether to enable enhanced monitoring at the cluster level.

  If set to true, `monitoringInterval` and `monitoringRole` are applied to not the instances, but the cluster.
  `monitoringInterval` is required to be set if `enableClusterLevelEnhancedMonitoring` is set to true.

  **Default:** When the `monitoringInterval` is set, enhanced monitoring is enabled for each instance.

- `enableDataApi`: boolean = false — Whether to enable the Data API for the cluster.

- `enableLocalWriteForwarding`: boolean = false — Whether read replicas can forward write operations to the writer DB instance in the DB cluster.

  This setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4
  or higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14).

- `enablePerformanceInsights`: boolean = false, unless `performanceInsightRetention` or `performanceInsightEncryptionKey` is set, or `databaseInsightsMode` is set to `DatabaseInsightsMode.ADVANCED`. — Whether to enable Performance Insights for the DB cluster.

  **Default:** false, unless `performanceInsightRetention` or `performanceInsightEncryptionKey` is set, or `databaseInsightsMode` is set to `DatabaseInsightsMode.ADVANCED`.

- `engine`: [IClusterEngine](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.IClusterEngine.html) (required) — What kind of database to start.

- `engineLifecycleSupport`: [EngineLifecycleSupport](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.EngineLifecycleSupport.html) = undefined - AWS RDS default setting is `EngineLifecycleSupport.OPEN_SOURCE_RDS_EXTENDED_SUPPORT` — The life cycle type for this DB cluster.

  **Default:** undefined - AWS RDS default setting is `EngineLifecycleSupport.OPEN_SOURCE_RDS_EXTENDED_SUPPORT`

- `iamAuthentication`: boolean = false — Whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts.

- `instanceIdentifierBase`: string = clusterIdentifier is used with the word "Instance" appended. If clusterIdentifier is not provided, the identifier is automatically generated. — Base identifier for instances.

  Every replica is named by appending the replica number to this string, 1-based.

  **Default:** clusterIdentifier is used with the word "Instance" appended. If clusterIdentifier is not provided, the identifier is automatically generated.

- `instanceProps`: [InstanceProps](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.InstanceProps.html) — - use writer and readers instead

- `instances`: number = 2 — - use writer and readers instead

  Has to be at least 1.

- `instanceUpdateBehaviour`: [InstanceUpdateBehaviour](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.InstanceUpdateBehaviour.html) = InstanceUpdateBehaviour.BULK — The ordering of updates for instances.

- `manageMasterUserPassword`: boolean = false — Whether to use RDS native integration with AWS Secrets Manager for master user password management.

  When enabled, RDS generates and manages the master user password in Secrets Manager.
  This is supported when restoring from snapshots, allowing migration to RDS-managed passwords.

- `monitoringInterval`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) = no enhanced monitoring — The interval between points when Amazon RDS collects enhanced monitoring metrics.

  If you enable `enableClusterLevelEnhancedMonitoring`, this property is applied to the cluster,
  otherwise it is applied to the instances.

- `monitoringRole`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) = A role is automatically created for you — Role that will be used to manage DB monitoring.

  If you enable `enableClusterLevelEnhancedMonitoring`, this property is applied to the cluster,
  otherwise it is applied to the instances.

  **Default:** A role is automatically created for you

- `networkType`: [NetworkType](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.NetworkType.html) = IPV4 — The network type of the DB instance.

- `parameterGroup`: [IParameterGroup](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.IParameterGroup.html) = No parameter group. — Additional parameters to pass to the database engine.

- `parameters`: { [key: string]: string } = None — The parameters in the DBClusterParameterGroup to create automatically.

  You can only specify parameterGroup or parameters but not both.
  You need to use a versioned engine to auto-generate a DBClusterParameterGroup.

- `performanceInsightEncryptionKey`: [IKey](/cdk/api/v2/docs/aws-cdk-lib.aws_kms.IKey.html) = default master key — The AWS KMS key for encryption of Performance Insights data.

- `performanceInsightRetention`: [PerformanceInsightRetention](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.PerformanceInsightRetention.html) = 7 — The amount of time, in days, to retain Performance Insights data.

  If you set `databaseInsightsMode` to `DatabaseInsightsMode.ADVANCED`, you must set this property to `PerformanceInsightRetention.MONTHS_15`.

- `port`: number = The default for the engine is used. — What port to listen on.

  **Default:** The default for the engine is used.

- `preferredMaintenanceWindow`: string = 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. — A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC).

  Example: 'Sun:23:45-Mon:00:15'

  **Default:** 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.

- `readers`: [IClusterInstance](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.IClusterInstance.html)[] = no readers are created. The cluster will have a single writer/reader — A list of instances to create as cluster reader instances.

  **Default:** no readers are created. The cluster will have a single writer/reader

- `removalPolicy`: [RemovalPolicy](/cdk/api/v2/docs/aws-cdk-lib.RemovalPolicy.html) = RemovalPolicy.SNAPSHOT (remove the cluster and instances, but retain a snapshot of the data) — The removal policy to apply when the cluster and its instances are removed from the stack or replaced during an update.

  **Default:** RemovalPolicy.SNAPSHOT (remove the cluster and instances, but retain a snapshot of the data)

- `s3ExportBuckets`: [IBucket](/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html)[] = None — S3 buckets that you want to load data into. This feature is only supported by the Aurora database engine.

  This property must not be used if `s3ExportRole` is used.

  For MySQL:

- `s3ExportRole`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) = New role is created if `s3ExportBuckets` is set, no role is defined otherwise — Role that will be associated with this DB cluster to enable S3 export.

  This feature is only supported by the Aurora database engine.

  This property must not be used if `s3ExportBuckets` is used.
  To use this property with Aurora PostgreSQL, it must be configured with the S3 export feature enabled when creating the DatabaseClusterEngine
  For MySQL:

  **Default:** New role is created if `s3ExportBuckets` is set, no role is defined otherwise

- `s3ImportBuckets`: [IBucket](/cdk/api/v2/docs/aws-cdk-lib.aws_s3.IBucket.html)[] = None — S3 buckets that you want to load data from. This feature is only supported by the Aurora database engine.

  This property must not be used if `s3ImportRole` is used.

  For MySQL:

- `s3ImportRole`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) = New role is created if `s3ImportBuckets` is set, no role is defined otherwise — Role that will be associated with this DB cluster to enable S3 import.

  This feature is only supported by the Aurora database engine.

  This property must not be used if `s3ImportBuckets` is used.
  To use this property with Aurora PostgreSQL, it must be configured with the S3 import feature enabled when creating the DatabaseClusterEngine
  For MySQL:

  **Default:** New role is created if `s3ImportBuckets` is set, no role is defined otherwise

- `securityGroups`: [ISecurityGroup](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.ISecurityGroup.html)[] = a new security group is created. — Security group.

- `serverlessV2AutoPauseDuration`: [Duration](/cdk/api/v2/docs/aws-cdk-lib.Duration.html) = The default is 300 seconds (5 minutes). — Specifies the duration an Aurora Serverless v2 DB instance must be idle before Aurora attempts to automatically pause it.

  The duration must be between 300 seconds (5 minutes) and 86,400 seconds (24 hours).

  **Default:** The default is 300 seconds (5 minutes).

- `serverlessV2MaxCapacity`: number = 2 — The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.

  You can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on.
  The largest value that you can use is 256.

  The maximum capacity must be higher than 0.5 ACUs.

- `serverlessV2MinCapacity`: number = 0.5 — The minimum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster.

  You can specify ACU values in half-step increments, such as 8, 8.5, 9, and so on.
  The smallest value that you can use is 0.

  For Aurora versions that support the Aurora Serverless v2 auto-pause feature, the smallest value that you can use is 0.
  For versions that don't support Aurora Serverless v2 auto-pause, the smallest value that you can use is 0.5.

- `snapshotCredentials`: [SnapshotCredentials](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.SnapshotCredentials.html) = The existing username and password from the snapshot will be used. — Master user credentials.

  Note - It is not possible to change the master username for a snapshot;
  however, it is possible to provide (or generate) a new password.

  **Default:** The existing username and password from the snapshot will be used.

- `snapshotIdentifier`: string (required) — The identifier for the DB instance snapshot or DB cluster snapshot to restore from.

  You can use either the name or the Amazon Resource Name (ARN) to specify a DB cluster snapshot.
  However, you can use only the ARN to specify a DB instance snapshot.

- `storageEncrypted`: boolean = true if storageEncryptionKey is provided, false otherwise — Whether to enable storage encryption.

  **Default:** true if storageEncryptionKey is provided, false otherwise

- `storageEncryptionKey`: [IKeyRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_kms.IKeyRef.html) = if storageEncrypted is true then the default master key, no key otherwise — The KMS key for storage encryption.

  If specified, `storageEncrypted` will be set to `true`.

  **Default:** if storageEncrypted is true then the default master key, no key otherwise

- `storageType`: [DBClusterStorageType](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.DBClusterStorageType.html) = DBClusterStorageType.AURORA — The storage type to be associated with the DB cluster.

- `subnetGroup`: [IDBSubnetGroupRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_rds.IDBSubnetGroupRef.html) = a new subnet group will be created. — Existing subnet group for the cluster.

  **Default:** a new subnet group will be created.

- `vpc`: [IVpc](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html) — What subnets to run the RDS instances in.

  Must be at least 2 subnets in two different AZs.

- `vpcSubnets`: [SubnetSelection](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.SubnetSelection.html) = the Vpc default strategy if not specified. — Where to place the instances within the VPC.

  **Default:** the Vpc default strategy if not specified.

- `writer`: [IClusterInstance](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.IClusterInstance.html) = required if instanceProps is not provided — The instance to use for the cluster writer.

  **Default:** required if instanceProps is not provided

## Properties

- `cloudwatchLogGroups`: { [key: string]: [ILogGroup](/cdk/api/v2/docs/aws-cdk-lib.aws_logs.ILogGroup.html) } (required) — The log group is created when `cloudwatchLogsExports` is set.

  Each export value will create a separate log group.

- `clusterArn`: string (required) — The ARN of the cluster.

- `clusterEndpoint`: [Endpoint](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.Endpoint.html) (required) — The endpoint to use for read/write operations.

- `clusterIdentifier`: string (required) — Identifier of the cluster.

- `clusterReadEndpoint`: [Endpoint](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.Endpoint.html) (required) — Endpoint to use for load-balanced read-only operations.

- `clusterResourceIdentifier`: string (required) — The immutable identifier for the cluster; for example: cluster-ABCD1234EFGH5678IJKL90MNOP.

  This AWS Region-unique identifier is used in things like IAM authentication policies.

- `connections`: [Connections](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Connections.html) (required) — Access to the network connections.

- `databaseInsightsMode`: [DatabaseInsightsMode](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.DatabaseInsightsMode.html) — The database insights mode.

- `dbClusterRef`: [DBClusterReference](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_rds.DBClusterReference.html) (required) — A reference to this database cluster.

- `engine`: [IClusterEngine](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.IClusterEngine.html) — The engine for this Cluster.

  Never undefined.

- `env`: [ResourceEnvironment](/cdk/api/v2/docs/aws-cdk-lib.interfaces.ResourceEnvironment.html) (required) — The environment this resource belongs to.

  For resources that are created and managed in a Stack (those created by
  creating new class instances like `new Role()`, `new Bucket()`, etc.), this
  is always the same as the environment of the stack they belong to.

  For referenced resources (those obtained from referencing methods like
  `Role.fromRoleArn()`, `Bucket.fromBucketName()`, etc.), they might be
  different than the stack they were imported into.

- `instanceEndpoints`: [Endpoint](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.Endpoint.html)[] (required) — Endpoints which address each individual replica.

- `instanceIdentifiers`: string[] (required) — Identifiers of the replicas.

- `monitoringRole`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) — The IAM role for the enhanced monitoring.

- `multiUserRotationApplication`: [SecretRotationApplication](/cdk/api/v2/docs/aws-cdk-lib.aws_secretsmanager.SecretRotationApplication.html) (required) — Application for multi user rotation to this cluster.

- `node`: [Node](/cdk/api/v2/docs/constructs.Node.html) (required) — The tree node.

- `performanceInsightEncryptionKey`: [IKey](/cdk/api/v2/docs/aws-cdk-lib.aws_kms.IKey.html) — The AWS KMS key for encryption of Performance Insights data.

- `performanceInsightRetention`: [PerformanceInsightRetention](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.PerformanceInsightRetention.html) — The amount of time, in days, to retain Performance Insights data.

- `performanceInsightsEnabled`: boolean (required) — Whether Performance Insights is enabled at cluster level.

- `PROPERTY_INJECTION_ID`: string (required) (static) — Uniquely identifies this class.

- `secret`: [ISecret](/cdk/api/v2/docs/aws-cdk-lib.aws_secretsmanager.ISecret.html) — The secret attached to this cluster.

- `singleUserRotationApplication`: [SecretRotationApplication](/cdk/api/v2/docs/aws-cdk-lib.aws_secretsmanager.SecretRotationApplication.html) (required) — Application for single user rotation of the master password to this cluster.

- `stack`: [Stack](/cdk/api/v2/docs/aws-cdk-lib.Stack.html) (required) — The stack in which this resource is defined.

- `vpc`: [IVpc](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html) (required) — The VPC network to place the cluster in.

- `vpcSubnets`: [SubnetSelection](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.SubnetSelection.html) — The cluster's subnets.

## Methods

- `addProxy(id: string, options: DatabaseProxyOptions): DatabaseProxy` — Add a new db proxy to this cluster.

- `addRotationMultiUser(id: string, options: RotationMultiUserOptions): SecretRotation` — Adds the multi user rotation to this cluster.

  See [Alternating users rotation strategy](https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets_strategies.html#rotating-secrets-two-users)

- `addRotationSingleUser(options?: RotationSingleUserOptions): SecretRotation` — Adds the single user rotation of the master password to this cluster.

  See [Single user rotation strategy](https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets_strategies.html#rotating-secrets-one-user-one-password)

- `applyCrossStackReferenceStrength(strength: ReferenceStrength): void` — Override the cross-stack reference strength for this resource.

  When set, any cross-stack reference to this resource will use the specified
  mechanism instead of the global default determined by the
  `@aws-cdk/core:defaultCrossStackReferences` context key. This is useful for
  selectively weakening specific references to avoid the "deadly embrace" problem
  without changing the app-wide default.

  **Parameters**

  - `strength` — - The reference strength to use for this resource.

- `applyRemovalPolicy(policy: RemovalPolicy): void` — Apply the given removal policy to this resource.

  The Removal Policy controls what happens to this resource when it stops
  being managed by CloudFormation, either because you've removed it from the
  CDK application or because you've made a change that requires the resource
  to be replaced.

  The resource can be deleted (`RemovalPolicy.DESTROY`), or left in your AWS
  account for data recovery and cleanup later (`RemovalPolicy.RETAIN`).

- `asSecretAttachmentTarget(): SecretAttachmentTargetProps` — Renders the secret attachment target specifications.

- `grantConnect(grantee: IGrantable, dbUser: string): Grant` — [disable-awslint:no-grants].

- `grantDataApiAccess(grantee: IGrantable): Grant` — Grant the given identity to access the Data API.

  [disable-awslint:no-grants]

- `isConstruct(x: any): boolean` (static) — Checks if `x` is a construct.

  Use this method instead of `instanceof` to properly detect `Construct`
  instances, even when the construct library is symlinked.

  Explanation: in JavaScript, multiple copies of the `constructs` library on
  disk are seen as independent, completely different libraries. As a
  consequence, the class `Construct` in each copy of the `constructs` library
  is seen as a different class, and an instance of one class will not test as
  `instanceof` the other class. `npm install` will not create installations
  like this, but users may manually symlink construct libraries together or
  use a monorepo tool: in those cases, multiple copies of the `constructs`
  library can be accidentally installed, and `instanceof` will behave
  unpredictably. It is safest to avoid using `instanceof`, and using
  this type-testing method instead.

  **Parameters**

  - `x` — Any object.

  **Returns:** true if `x` is an object created from a class which extends `Construct`.

- `isOwnedResource(construct: IConstruct): boolean` (static) — Returns true if the construct was created by CDK, and false otherwise.

- `isResource(construct: IConstruct): boolean` (static) — Check whether the given construct is a Resource.

- `metric(metricName: string, props?: MetricOptions): Metric` — Return the given named metric for this DBCluster.

- `metricACUUtilization(props?: MetricOptions): Metric` — This value is represented as a percentage.

  It's calculated as the value of the
  ServerlessDatabaseCapacity metric divided by the maximum ACU value of the DB cluster.

  If this metric approaches a value of 100.0, the DB instance has scaled up as high as it can.
  Consider increasing the maximum ACU setting for the cluster.

- `metricCPUUtilization(props?: MetricOptions): Metric` — The percentage of CPU utilization.

  Average over 5 minutes

- `metricDatabaseConnections(props?: MetricOptions): Metric` — The number of database connections in use.

  Average over 5 minutes

- `metricDeadlocks(props?: MetricOptions): Metric` — The average number of deadlocks in the database per second.

  Average over 5 minutes

- `metricEngineUptime(props?: MetricOptions): Metric` — The amount of time that the instance has been running, in seconds.

  Average over 5 minutes

- `metricFreeableMemory(props?: MetricOptions): Metric` — The amount of available random access memory, in bytes.

  Average over 5 minutes

- `metricFreeLocalStorage(props?: MetricOptions): Metric` — The amount of local storage available, in bytes.

  Average over 5 minutes

- `metricNetworkReceiveThroughput(props?: MetricOptions): Metric` — The amount of network throughput received from clients by each instance, in bytes per second.

  Average over 5 minutes

- `metricNetworkThroughput(props?: MetricOptions): Metric` — The amount of network throughput both received from and transmitted to clients by each instance, in bytes per second.

  Average over 5 minutes

- `metricNetworkTransmitThroughput(props?: MetricOptions): Metric` — The amount of network throughput sent to clients by each instance, in bytes per second.

  Average over 5 minutes

- `metricServerlessDatabaseCapacity(props?: MetricOptions): Metric` — As a cluster-level metric, it represents the average of the ServerlessDatabaseCapacity values of all the Aurora Serverless v2 DB instances in the cluster.

- `metricSnapshotStorageUsed(props?: MetricOptions): Metric` — The total amount of backup storage in bytes consumed by all Aurora snapshots outside its backup retention window.

  Average over 5 minutes

- `metricTotalBackupStorageBilled(props?: MetricOptions): Metric` — The total amount of backup storage in bytes for which you are billed.

  Average over 5 minutes

- `metricVolumeBytesUsed(props?: MetricOptions): Metric` — The amount of storage used by your Aurora DB instance, in bytes.

  Average over 5 minutes

- `metricVolumeReadIOPs(props?: MetricOptions): Metric` — The average number of disk read I/O operations per second.

  This metric is only available for Aurora database clusters.
  For non-Aurora RDS clusters, this metric will not return any data
  in CloudWatch.

- `metricVolumeWriteIOPs(props?: MetricOptions): Metric` — The average number of disk write I/O operations per second.

  This metric is only available for Aurora database clusters.
  For non-Aurora RDS clusters, this metric will not return any data
  in CloudWatch.

- `toString(): string` — Returns a string representation of this construct.

- `with(...mixins: IMixin[]): IConstruct` — Applies one or more mixins to this construct.

  Mixins are applied in order. The list of constructs is captured at the
  start of the call, so constructs added by a mixin will not be visited.
  Use multiple `with()` calls if subsequent mixins should apply to added
  constructs.