@btc-embedded/cdk-extensions 0.22.22 → 0.22.23

package/.jsii

@@ -8542,7 +8542,7 @@
         },
         "locationInModule": {
           "filename": "src/platform/ApiGateway.ts",
-          "line": 80
+          "line": 134
         },
         "parameters": [
           {
@@ -8565,12 +8565,99 @@
           }
         ]
       },
+      "interfaces": [
+        "@btc-embedded/cdk-extensions.IApiGateway"
+      ],
       "kind": "class",
       "locationInModule": {
         "filename": "src/platform/ApiGateway.ts",
-        "line": 73
+        "line": 86
       },
+      "methods": [
+        {
+          "docs": {
+            "stability": "deprecated",
+            "summary": "Reconstructs an {@link IApiGateway} from CloudFormation exports produced by a V1 {@link ApiGateway} in a different stack."
+          },
+          "locationInModule": {
+            "filename": "src/platform/ApiGateway.ts",
+            "line": 96
+          },
+          "name": "fromBasePlatform",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The CDK scope in which to create the import construct."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- The CDK construct identifier."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "When omitted the stack name is resolved via {@link BasePlatformStackResolver }.",
+                "summary": "- Override the stack name to import from."
+              },
+              "name": "basePlatformStackName",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@btc-embedded/cdk-extensions.IApiGateway"
+            }
+          },
+          "static": true
+        }
+      ],
       "name": "ApiGateway",
+      "properties": [
+        {
+          "docs": {
+            "stability": "deprecated",
+            "summary": "The ID of the underlying HTTP API."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/ApiGateway.ts",
+            "line": 126
+          },
+          "name": "apiId",
+          "overrides": "@btc-embedded/cdk-extensions.IApiGateway",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "deprecated",
+            "summary": "The ID of the VPC Link created for this API Gateway."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/ApiGateway.ts",
+            "line": 124
+          },
+          "name": "vpcLinkId",
+          "overrides": "@btc-embedded/cdk-extensions.IApiGateway",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
       "symbolId": "src/platform/ApiGateway:ApiGateway"
     },
     "@btc-embedded/cdk-extensions.ApiGatewayExtension": {
@@ -8588,7 +8675,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/ApiGatewayExtension.ts",
-          "line": 49
+          "line": 69
         },
         "parameters": [
           {
@@ -8602,7 +8689,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/ApiGatewayExtension.ts",
-        "line": 42
+        "line": 62
       },
       "methods": [
         {
@@ -8613,7 +8700,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApiGatewayExtension.ts",
-            "line": 54
+            "line": 74
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -8645,7 +8732,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApiGatewayExtension.ts",
-            "line": 43
+            "line": 63
           },
           "name": "props",
           "type": {
@@ -8665,7 +8752,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/extensions/ApiGatewayExtension.ts",
-        "line": 21
+        "line": 23
       },
       "name": "ApiGatewayExtensionProps",
       "properties": [
@@ -8678,7 +8765,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApiGatewayExtension.ts",
-            "line": 25
+            "line": 27
           },
           "name": "prefix",
           "type": {
@@ -8694,13 +8781,31 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApiGatewayExtension.ts",
-            "line": 35
+            "line": 37
           },
           "name": "securityGroupId",
           "type": {
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When omitted the VPC link ID and API ID are imported from the base platform stack.",
+            "stability": "experimental",
+            "summary": "Provide a direct {@link IApiGateway} reference for same-stack usage."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/ApiGatewayExtension.ts",
+            "line": 43
+          },
+          "name": "apiGateway",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.IApiGateway"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -8710,13 +8815,49 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApiGatewayExtension.ts",
-            "line": 30
+            "line": 32
           },
           "name": "basePlatformStackName",
           "optional": true,
           "type": {
             "primitive": "string"
           }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When omitted the user pool attributes are imported from the base platform stack.",
+            "stability": "experimental",
+            "summary": "Provide a direct Cognito user pool reference for same-stack usage."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/ApiGatewayExtension.ts",
+            "line": 49
+          },
+          "name": "cognitoUserPool",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.ICognitoUserPool"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When omitted the FQDN is imported from the base platform stack.",
+            "stability": "experimental",
+            "summary": "Provide the FQDN directly for same-stack usage."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/ApiGatewayExtension.ts",
+            "line": 55
+          },
+          "name": "fqdn",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
         }
       ],
       "symbolId": "src/extensions/ApiGatewayExtension:ApiGatewayExtensionProps"
@@ -8731,7 +8872,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/platform/ApiGateway.ts",
-        "line": 22
+        "line": 35
       },
       "name": "ApiGatewayProps",
       "properties": [
@@ -8744,7 +8885,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 46
+            "line": 59
           },
           "name": "domainPrefix",
           "type": {
@@ -8760,7 +8901,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 51
+            "line": 64
           },
           "name": "hostedZone",
           "type": {
@@ -8776,7 +8917,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 26
+            "line": 39
           },
           "name": "stackName",
           "type": {
@@ -8792,7 +8933,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 36
+            "line": 49
           },
           "name": "userPool",
           "type": {
@@ -8808,7 +8949,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 41
+            "line": 54
           },
           "name": "userPoolClients",
           "type": {
@@ -8829,7 +8970,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 31
+            "line": 44
           },
           "name": "vpc",
           "type": {
@@ -8845,7 +8986,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/ApiGateway.ts",
-            "line": 57
+            "line": 70
           },
           "name": "logGroup",
           "optional": true,
@@ -10133,7 +10274,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-          "line": 89
+          "line": 105
         },
         "parameters": [
           {
@@ -10147,7 +10288,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-        "line": 80
+        "line": 96
       },
       "methods": [
         {
@@ -10157,7 +10298,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 94
+            "line": 110
           },
           "name": "addHooks",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension"
@@ -10169,7 +10310,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 193
+            "line": 200
           },
           "name": "modifyServiceProps",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -10194,7 +10335,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 116
+            "line": 132
           },
           "name": "prehook",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -10221,7 +10362,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 200
+            "line": 207
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -10252,7 +10393,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 87
+            "line": 103
           },
           "name": "fqdn",
           "type": {
@@ -10265,7 +10406,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 84
+            "line": 100
           },
           "name": "userPool",
           "type": {
@@ -10278,7 +10419,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 85
+            "line": 101
           },
           "name": "userPoolClient",
           "type": {
@@ -10291,7 +10432,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 86
+            "line": 102
           },
           "name": "userPoolDomain",
           "type": {
@@ -10311,7 +10452,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-        "line": 36
+        "line": 37
       },
       "name": "ApplicationLoadBalancerExtensionProps",
       "properties": [
@@ -10323,7 +10464,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 40
+            "line": 41
           },
           "name": "clientScope",
           "type": {
@@ -10338,7 +10479,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 39
+            "line": 40
           },
           "name": "securityGroupId",
           "type": {
@@ -10353,7 +10494,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 38
+            "line": 39
           },
           "name": "userPoolClientSecret",
           "type": {
@@ -10368,7 +10509,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 37
+            "line": 38
           },
           "name": "basePlatformStackName",
           "optional": true,
@@ -10376,6 +10517,42 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When omitted the user pool attributes are imported from the base platform stack.",
+            "stability": "experimental",
+            "summary": "Provide a direct Cognito user pool reference for same-stack usage."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
+            "line": 54
+          },
+          "name": "cognitoUserPool",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.ICognitoUserPool"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When omitted the FQDN is imported from the base platform stack.",
+            "stability": "experimental",
+            "summary": "Provide the FQDN directly for same-stack usage."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
+            "line": 59
+          },
+          "name": "fqdn",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -10384,7 +10561,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 41
+            "line": 42
           },
           "name": "healtCheckPath",
           "optional": true,
@@ -10395,12 +10572,14 @@
         {
           "abstract": true,
           "docs": {
-            "stability": "experimental"
+            "remarks": "When omitted the listener ARN is imported from the base platform stack.",
+            "stability": "experimental",
+            "summary": "Provide a direct ALB listener reference for same-stack usage."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 43
+            "line": 49
           },
           "name": "listener",
           "optional": true,
@@ -10411,12 +10590,13 @@
         {
           "abstract": true,
           "docs": {
-            "stability": "experimental"
+            "stability": "experimental",
+            "summary": "Path to redirect the client after successful authentication."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtension.ts",
-            "line": 42
+            "line": 44
           },
           "name": "path",
           "optional": true,
@@ -10438,21 +10618,21 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-        "line": 15
+        "line": 18
       },
       "name": "ApplicationLoadBalancerExtensionPropsV2",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "remarks": "Either this or `loadBalancer` must be provided.",
+            "remarks": "Used when {@link ApplicationLoadBalancerExtensionPropsV2.loadBalancer} is not provided. Falls back to\n`BasePlatformStackResolver` (CDK context) when also omitted.",
             "stability": "experimental",
             "summary": "The name of the platform stack to use for the load balancer."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-            "line": 20
+            "line": 25
           },
           "name": "basePlatformStackName",
           "optional": true,
@@ -10463,19 +10643,19 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Either this or `platformStackName` must be provided.",
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link ApplicationLoadBalancerV2.fromBasePlatform} is performed.\nUse this when the ALB resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the ALB from the base platform stack\nidentified by {@link ApplicationLoadBalancerExtensionPropsV2.basePlatformStackName}.",
             "stability": "experimental",
-            "summary": "The Application Load Balancer to use."
+            "summary": "The Application Load Balancer to use directly."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-            "line": 26
+            "line": 37
           },
           "name": "loadBalancer",
           "optional": true,
           "type": {
-            "fqn": "@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2"
+            "fqn": "@btc-embedded/cdk-extensions.IApplicationLoadBalancerV2"
           }
         }
       ],
@@ -10491,21 +10671,16 @@
       "fqn": "@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionV2",
       "initializer": {
         "docs": {
-          "custom": {
-            "throws": "Error if neither platformStackName nor loadBalancer is provided."
-          },
+          "remarks": "At least one of {@link ApplicationLoadBalancerExtensionPropsV2.basePlatformStackName}\nor {@link ApplicationLoadBalancerExtensionPropsV2.loadBalancer} must be\nprovided. If neither is given, CDK context\n(`cdk-extensions:basePlatformStackName`) is used as a final fallback;\nsynthesis will fail if that is also absent.",
           "stability": "experimental",
           "summary": "Creates a new ApplicationLoadBalancerExtensionV2."
         },
         "locationInModule": {
           "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-          "line": 40
+          "line": 55
         },
         "parameters": [
           {
-            "docs": {
-              "summary": "- The properties for configuring the load balancer extension."
-            },
             "name": "props",
             "type": {
               "fqn": "@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2"
@@ -10516,7 +10691,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-        "line": 32
+        "line": 43
       },
       "methods": [
         {
@@ -10526,7 +10701,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-            "line": 56
+            "line": 64
           },
           "name": "modifyServiceProps",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -10551,7 +10726,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-            "line": 52
+            "line": 60
           },
           "name": "prehook",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -10572,13 +10747,13 @@
         },
         {
           "docs": {
-            "remarks": "It is generally used to\ncreate any final resources which might depend on the service itself.",
+            "remarks": "Uses the directly injected {@link ApplicationLoadBalancerExtensionPropsV2.loadBalancer}\nwhen available (same-stack), otherwise imports from the base platform stack. Falls back to\n`BasePlatformStackResolver` (CDK context) when\n{@link ApplicationLoadBalancerExtensionPropsV2.basePlatformStackName} is also absent.",
             "stability": "experimental",
-            "summary": "When this hook is implemented by extension, it allows the extension to use the service which has been created."
+            "summary": "Wires the ECS service to the Application Load Balancer."
           },
           "locationInModule": {
             "filename": "src/extensions/ApplicationLoadBalancerExtensionV2.ts",
-            "line": 63
+            "line": 79
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -11162,7 +11337,7 @@
     },
     "@btc-embedded/cdk-extensions.AuroraPostgresCluster": {
       "assembly": "@btc-embedded/cdk-extensions",
-      "base": "constructs.Construct",
+      "base": "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase",
       "docs": {
         "remarks": "Exports:\n- `aurora-postgres-db:secret-arn`\n- `aurora-postgres-db:credentials-secret-arn`\n- `aurora-postgres-db:cluster-endpoint`\n- `aurora-postgres-db:security-group-id`\n- `aurora-postgres-db:tunnel-instance-id` (only when tunnel host is enabled)",
         "stability": "experimental",
@@ -11175,7 +11350,7 @@
         },
         "locationInModule": {
           "filename": "src/platform/AuroraPostgresDB.ts",
-          "line": 165
+          "line": 276
         },
         "parameters": [
           {
@@ -11201,36 +11376,136 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/platform/AuroraPostgresDB.ts",
-        "line": 128
+        "line": 176
       },
-      "name": "AuroraPostgresCluster",
-      "properties": [
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Aurora database cluster."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 160
-          },
-          "name": "cluster",
-          "type": {
-            "fqn": "aws-cdk-lib.aws_rds.DatabaseCluster"
-          }
-        },
+      "methods": [
         {
           "docs": {
+            "remarks": "Use this for cross-stack access. For same-stack usage, pass the\n{@link AuroraPostgresCluster} construct directly where {@link IAuroraPostgresDB}\nis expected.",
             "stability": "experimental",
-            "summary": "Security group attached to the Aurora cluster."
+            "summary": "Imports an {@link IAuroraPostgresDB} instance from a base platform stack."
           },
-          "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 163
+            "line": 189
           },
-          "name": "securityGroup",
+          "name": "fromBasePlatform",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "Construct scope to attach the imported component to."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Construct id for the imported component."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "Falls back to\n`BasePlatformStackResolver` (CDK context) when omitted.",
+                "summary": "Base platform stack name."
+              },
+              "name": "basePlatformStackName",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@btc-embedded/cdk-extensions.IAuroraPostgresDB"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "AuroraPostgresCluster",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Aurora database cluster."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 259
+          },
+          "name": "cluster",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_rds.DatabaseCluster"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secret containing the postgres connection string prefix in the form `postgresql://user:pass@host:port/`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 271
+          },
+          "name": "connectionSecret",
+          "overrides": "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secret containing postgres credentials (username and password)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 265
+          },
+          "name": "credentialsSecret",
+          "overrides": "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Cluster endpoint in the form `host:port`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 274
+          },
+          "name": "endpoint",
+          "overrides": "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group attached to the Aurora cluster."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 262
+          },
+          "name": "securityGroup",
+          "overrides": "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase",
           "type": {
             "fqn": "aws-cdk-lib.aws_ec2.SecurityGroup"
           }
@@ -11238,6 +11513,127 @@
       ],
       "symbolId": "src/platform/AuroraPostgresDB:AuroraPostgresCluster"
     },
+    "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase": {
+      "abstract": true,
+      "assembly": "@btc-embedded/cdk-extensions",
+      "base": "constructs.Construct",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Abstract base class shared by the concrete {@link AuroraPostgresCluster} and the import class created by {@link AuroraPostgresCluster.fromBasePlatform}."
+      },
+      "fqn": "@btc-embedded/cdk-extensions.AuroraPostgresClusterBase",
+      "initializer": {
+        "docs": {
+          "stability": "stable",
+          "summary": "Creates a new construct node."
+        },
+        "locationInModule": {
+          "filename": "src/construct.ts",
+          "line": 448
+        },
+        "parameters": [
+          {
+            "docs": {
+              "summary": "The scope in which to define this construct."
+            },
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "docs": {
+              "remarks": "Must be unique amongst siblings. If\nthe ID includes a path separator (`/`), then it will be replaced by double\ndash `--`.",
+              "summary": "The scoped construct ID."
+            },
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@btc-embedded/cdk-extensions.IAuroraPostgresDB"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/platform/AuroraPostgresDB.ts",
+        "line": 156
+      },
+      "name": "AuroraPostgresClusterBase",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secret containing the postgres connection string prefix in the form `postgresql://user:pass@host:port/`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 161
+          },
+          "name": "connectionSecret",
+          "overrides": "@btc-embedded/cdk-extensions.IAuroraPostgresDB",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secret containing postgres credentials (username and password)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 160
+          },
+          "name": "credentialsSecret",
+          "overrides": "@btc-embedded/cdk-extensions.IAuroraPostgresDB",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Cluster endpoint in the form `host:port`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 162
+          },
+          "name": "endpoint",
+          "overrides": "@btc-embedded/cdk-extensions.IAuroraPostgresDB",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group attached to the Aurora cluster."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 163
+          },
+          "name": "securityGroup",
+          "overrides": "@btc-embedded/cdk-extensions.IAuroraPostgresDB",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        }
+      ],
+      "symbolId": "src/platform/AuroraPostgresDB:AuroraPostgresClusterBase"
+    },
     "@btc-embedded/cdk-extensions.AuroraPostgresClusterOverrides": {
       "assembly": "@btc-embedded/cdk-extensions",
       "datatype": true,
@@ -11249,7 +11645,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/platform/AuroraPostgresDB.ts",
-        "line": 81
+        "line": 90
       },
       "name": "AuroraPostgresClusterOverrides",
       "properties": [
@@ -11263,7 +11659,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 87
+            "line": 96
           },
           "name": "clusterIdentifier",
           "optional": true,
@@ -11281,7 +11677,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 108
+            "line": 117
           },
           "name": "serverlessV2MaxCapacity",
           "optional": true,
@@ -11299,7 +11695,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 101
+            "line": 110
           },
           "name": "serverlessV2MinCapacity",
           "optional": true,
@@ -11317,7 +11713,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 115
+            "line": 124
           },
           "name": "storageEncrypted",
           "optional": true,
@@ -11335,7 +11731,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 94
+            "line": 103
           },
           "name": "vpcSubnets",
           "optional": true,
@@ -11357,7 +11753,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/platform/AuroraPostgresDB.ts",
-        "line": 58
+        "line": 67
       },
       "name": "AuroraPostgresClusterProps",
       "properties": [
@@ -11370,7 +11766,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 65
+            "line": 74
           },
           "name": "instanceName",
           "type": {
@@ -11386,7 +11782,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 60
+            "line": 69
           },
           "name": "vpc",
           "type": {
@@ -11402,7 +11798,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 70
+            "line": 79
           },
           "name": "clusterProps",
           "optional": true,
@@ -11419,7 +11815,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 75
+            "line": 84
           },
           "name": "tunnelHost",
           "optional": true,
@@ -11441,10 +11837,29 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/platform/AuroraPostgresDB.ts",
-        "line": 23
+        "line": 25
       },
       "name": "AuroraPostgresTunnelHostProps",
       "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "AmazonLinuxCpuType.ARM_64",
+            "remarks": "Set it to match the {@link AuroraPostgresTunnelHostProps.instanceType}.",
+            "stability": "experimental",
+            "summary": "The CPU type for the tunnel host."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 61
+          },
+          "name": "cpuType",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.AmazonLinuxCpuType"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -11456,7 +11871,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 52
+            "line": 54
           },
           "name": "createSsmVpcEndpoints",
           "optional": true,
@@ -11474,7 +11889,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 29
+            "line": 31
           },
           "name": "enabled",
           "optional": true,
@@ -11485,14 +11900,14 @@
         {
           "abstract": true,
           "docs": {
-            "default": "t3.nano",
+            "default": "t4g.nano",
             "stability": "experimental",
             "summary": "Instance type used for the tunnel host."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 36
+            "line": 38
           },
           "name": "instanceType",
           "optional": true,
@@ -11510,7 +11925,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/platform/AuroraPostgresDB.ts",
-            "line": 43
+            "line": 45
           },
           "name": "subnetType",
           "optional": true,
@@ -11870,7 +12285,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/CloudMapExtension.ts",
-          "line": 45
+          "line": 60
         },
         "parameters": [
           {
@@ -11884,7 +12299,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/CloudMapExtension.ts",
-        "line": 34
+        "line": 49
       },
       "methods": [
         {
@@ -11894,7 +12309,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 135
+            "line": 155
           },
           "name": "connectToService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -11921,7 +12336,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 51
+            "line": 66
           },
           "name": "modifyServiceProps",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -11947,7 +12362,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 80
+            "line": 100
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -11978,7 +12393,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 35
+            "line": 50
           },
           "name": "props",
           "type": {
@@ -11991,7 +12406,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 37
+            "line": 52
           },
           "name": "serviceName",
           "type": {
@@ -12006,7 +12421,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 43
+            "line": 58
           },
           "name": "exportedServiceConstruct",
           "optional": true,
@@ -12034,13 +12449,14 @@
         {
           "abstract": true,
           "docs": {
+            "remarks": "Used when {@link privateDnsNamespace} is not provided. Falls back to\n`BasePlatformStackResolver` (CDK context) when also omitted.",
             "stability": "experimental",
             "summary": "The name of the platform stack to import the namespace parameter details from."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 20
+            "line": 23
           },
           "name": "basePlatformStackName",
           "optional": true,
@@ -12059,13 +12475,31 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/CloudMapExtension.ts",
-            "line": 31
+            "line": 34
           },
           "name": "exportService",
           "optional": true,
           "type": {
             "primitive": "boolean"
           }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link PrivateDnsNamespace.fromBasePlatform} is performed. Use\nthis when the namespace resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the namespace from the base platform\nstack identified by {@link basePlatformStackName}.",
+            "stability": "experimental",
+            "summary": "Private DNS namespace to use directly."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/CloudMapExtension.ts",
+            "line": 46
+          },
+          "name": "privateDnsNamespace",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.IPrivateDnsNamespace"
+          }
         }
       ],
       "symbolId": "src/extensions/CloudMapExtension:CloudMapExtensionProps"
@@ -13306,9 +13740,9 @@
     },
     "@btc-embedded/cdk-extensions.DocumentDB": {
       "assembly": "@btc-embedded/cdk-extensions",
-      "base": "constructs.Construct",
+      "base": "@btc-embedded/cdk-extensions.DocumentDBBase",
       "docs": {
-        "remarks": "Cross-stack access is supported via {@link fromBasePlatform}, which imports:\n- the MongoDB connection URL secret ARN\n- the DocumentDB security group ID",
+        "remarks": "Implements {@link IDocumentDB} directly so that it can be passed to extensions\n(e.g. {@link DocumentDbAccessExtension }) when platform and application share the\nsame stack, avoiding the need for cross-stack {@link fromBasePlatform} imports.\n\nCross-stack access is still supported via {@link fromBasePlatform}, which imports:\n- the MongoDB connection URL secret ARN\n- the DocumentDB security group ID",
         "stability": "experimental",
         "summary": "Platform component that provisions an Amazon DocumentDB cluster and exports the required outputs for application stacks."
       },
@@ -13320,7 +13754,7 @@
         },
         "locationInModule": {
           "filename": "src/platform/DocumentDB.ts",
-          "line": 116
+          "line": 126
         },
         "parameters": [
           {
@@ -13346,7 +13780,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/platform/DocumentDB.ts",
-        "line": 69
+        "line": 73
       },
       "methods": [
         {
@@ -13356,7 +13790,7 @@
           },
           "locationInModule": {
             "filename": "src/platform/DocumentDB.ts",
-            "line": 77
+            "line": 81
           },
           "name": "fromBasePlatform",
           "parameters": [
@@ -13398,6 +13832,40 @@
         }
       ],
       "name": "DocumentDB",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "MongoDB connection URL secret for this cluster."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/DocumentDB.ts",
+            "line": 117
+          },
+          "name": "secret",
+          "overrides": "@btc-embedded/cdk-extensions.DocumentDBBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group attached to this DocumentDB cluster."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/DocumentDB.ts",
+            "line": 120
+          },
+          "name": "securityGroup",
+          "overrides": "@btc-embedded/cdk-extensions.DocumentDBBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        }
+      ],
       "symbolId": "src/platform/DocumentDB:DocumentDB"
     },
     "@btc-embedded/cdk-extensions.DocumentDBBase": {
@@ -13603,7 +14071,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/DocumentDbAccessExtension.ts",
-          "line": 69
+          "line": 82
         },
         "parameters": [
           {
@@ -13617,7 +14085,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/DocumentDbAccessExtension.ts",
-        "line": 64
+        "line": 77
       },
       "methods": [
         {
@@ -13627,7 +14095,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 84
+            "line": 103
           },
           "name": "addHooks",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension"
@@ -13639,7 +14107,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 74
+            "line": 87
           },
           "name": "prehook",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -13666,7 +14134,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 92
+            "line": 111
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -13698,7 +14166,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 65
+            "line": 78
           },
           "name": "props",
           "type": {
@@ -13711,7 +14179,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 67
+            "line": 80
           },
           "name": "documentDb",
           "type": {
@@ -13739,33 +14207,52 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Note: This property is currently not referenced directly by this extension's\nimplementation, but is kept as part of the public contract.",
+            "remarks": "Used when {@link documentDb} is not provided. Falls back to\n`BasePlatformStackResolver` (CDK context) when also omitted.",
+            "stability": "experimental",
+            "summary": "Name of the base platform stack to import the shared DocumentDB instance from."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/DocumentDbAccessExtension.ts",
+            "line": 22
+          },
+          "name": "basePlatformStackName",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link DocumentDB.fromBasePlatform} is performed. Use this when\nthe DocumentDB resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the DocumentDB from the base platform\nstack identified by {@link basePlatformStackName}.",
             "stability": "experimental",
-            "summary": "ID of the security group associated with the database access path."
+            "summary": "DocumentDB instance to use directly."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 29
+            "line": 42
           },
-          "name": "securityGroupId",
+          "name": "documentDb",
+          "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@btc-embedded/cdk-extensions.IDocumentDB"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "remarks": "This is passed to {@link DocumentDB.fromBasePlatform}.",
+            "remarks": "Note: This property is currently not referenced directly by this extension's\nimplementation, but is kept as part of the public contract.",
             "stability": "experimental",
-            "summary": "Name of the base platform stack to import the shared DocumentDB instance from."
+            "summary": "ID of the security group associated with the database access path."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/DocumentDbAccessExtension.ts",
-            "line": 21
+            "line": 30
           },
-          "name": "basePlatformStackName",
+          "name": "securityGroupId",
           "optional": true,
           "type": {
             "primitive": "string"
@@ -15001,7 +15488,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/extensions/PostgresDbAccessExtension.ts",
-        "line": 20
+        "line": 21
       },
       "name": "EnvironmentVariableNames",
       "properties": [
@@ -15015,7 +15502,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 26
+            "line": 27
           },
           "name": "databaseUrl",
           "optional": true,
@@ -15033,7 +15520,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 40
+            "line": 41
           },
           "name": "postgresDatabase",
           "optional": true,
@@ -15051,7 +15538,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 33
+            "line": 34
           },
           "name": "postgresEndpoint",
           "optional": true,
@@ -15069,7 +15556,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 54
+            "line": 55
           },
           "name": "postgresPassword",
           "optional": true,
@@ -15087,7 +15574,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 47
+            "line": 48
           },
           "name": "postgresUsername",
           "optional": true,
@@ -15975,7 +16462,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/HTTPApiExtension.ts",
-          "line": 74
+          "line": 110
         },
         "parameters": [
           {
@@ -15989,7 +16476,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/HTTPApiExtension.ts",
-        "line": 67
+        "line": 103
       },
       "methods": [
         {
@@ -16000,7 +16487,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 79
+            "line": 115
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -16032,7 +16519,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 68
+            "line": 104
           },
           "name": "props",
           "type": {
@@ -16052,20 +16539,39 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/extensions/HTTPApiExtension.ts",
-        "line": 27
+        "line": 33
       },
       "name": "HTTPApiExtensionProps",
       "properties": [
         {
           "abstract": true,
           "docs": {
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link ApiGatewayVpcLink.fromBasePlatform} is performed. Use\nthis when the VPC Link resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the VPC Link from the base platform\nstack identified by {@link basePlatformStackName}.",
+            "stability": "experimental",
+            "summary": "API Gateway VPC Link to use directly."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/HTTPApiExtension.ts",
+            "line": 97
+          },
+          "name": "apiGatewayVpcLink",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.IApiGatewayVpcLink"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Used when {@link cognitoUserPool}, {@link apiGatewayVpcLink}, or\n{@link hostedZone} are not provided. Falls back to\n`BasePlatformStackResolver` (CDK context) when also omitted.",
             "stability": "experimental",
             "summary": "The name of the base platform stack."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 36
+            "line": 46
           },
           "name": "basePlatformStackName",
           "optional": true,
@@ -16073,6 +16579,24 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link CognitoUserPool.fromBasePlatform} is performed. Use this\nwhen the user pool resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the user pool from the base platform\nstack identified by {@link basePlatformStackName}.",
+            "stability": "experimental",
+            "summary": "Cognito User Pool to use directly for HTTP API authorization."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/HTTPApiExtension.ts",
+            "line": 85
+          },
+          "name": "cognitoUserPool",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.ICognitoUserPool"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -16082,7 +16606,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 41
+            "line": 51
           },
           "name": "domainPrefix",
           "optional": true,
@@ -16100,7 +16624,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 56
+            "line": 68
           },
           "name": "enableAccessLogs",
           "optional": true,
@@ -16117,7 +16641,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 31
+            "line": 37
           },
           "name": "endpointPrefix",
           "optional": true,
@@ -16134,7 +16658,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 61
+            "line": 73
           },
           "name": "extraHttpApiAttributes",
           "optional": true,
@@ -16146,14 +16670,14 @@
           "abstract": true,
           "docs": {
             "default": "- Imported from base platform using HostedZone.fromBasePlatform()",
-            "deprecated": "Provide only platformStackName. The hosted zone will be imported automatically.",
-            "stability": "deprecated",
+            "remarks": "When omitted, the hosted zone is imported from the base platform stack\nvia {@link HostedZone.fromBasePlatform}.",
+            "stability": "experimental",
             "summary": "Hosted Zone to create the gateway domain A record."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/HTTPApiExtension.ts",
-            "line": 49
+            "line": 61
           },
           "name": "hostedZone",
           "optional": true,
@@ -16466,6 +16990,57 @@
       ],
       "symbolId": "src/platform/HostedZone:HostedZoneProps"
     },
+    "@btc-embedded/cdk-extensions.IApiGateway": {
+      "assembly": "@btc-embedded/cdk-extensions",
+      "docs": {
+        "deprecated": "Use {@link ApiGatewayVpcLink } together with {@link HTTPApiExtension } instead.",
+        "remarks": "Implementations expose the VPC Link and HTTP API identifiers so\nthat {@link ApiGatewayExtension } can be used in the same stack.",
+        "stability": "deprecated",
+        "summary": "Public contract for the V1 `ApiGateway` platform construct."
+      },
+      "fqn": "@btc-embedded/cdk-extensions.IApiGateway",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/platform/ApiGateway.ts",
+        "line": 28
+      },
+      "name": "IApiGateway",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "deprecated",
+            "summary": "The ID of the underlying HTTP API."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/ApiGateway.ts",
+            "line": 32
+          },
+          "name": "apiId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "deprecated",
+            "summary": "The ID of the VPC Link used by the API Gateway."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/ApiGateway.ts",
+            "line": 30
+          },
+          "name": "vpcLinkId",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/platform/ApiGateway:IApiGateway"
+    },
     "@btc-embedded/cdk-extensions.IApiGatewayVpcLink": {
       "assembly": "@btc-embedded/cdk-extensions",
       "docs": {
@@ -16613,6 +17188,88 @@
       ],
       "symbolId": "src/platform/ApplicationLoadBalancerV2:IApplicationLoadBalancerV2"
     },
+    "@btc-embedded/cdk-extensions.IAuroraPostgresDB": {
+      "assembly": "@btc-embedded/cdk-extensions",
+      "docs": {
+        "remarks": "Implemented by both the concrete {@link AuroraPostgresCluster} (same-stack usage) and\nthe import returned by {@link AuroraPostgresCluster.fromBasePlatform} (cross-stack usage).\nExtensions such as {@link PostgresDbAccessExtension } accept this interface so they work\nin either deployment topology.",
+        "stability": "experimental",
+        "summary": "Public interface for an Aurora PostgreSQL database component."
+      },
+      "fqn": "@btc-embedded/cdk-extensions.IAuroraPostgresDB",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/platform/AuroraPostgresDB.ts",
+        "line": 135
+      },
+      "name": "IAuroraPostgresDB",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secret containing the postgres connection string prefix in the form `postgresql://user:pass@host:port/`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 143
+          },
+          "name": "connectionSecret",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secret containing postgres credentials (username and password)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 137
+          },
+          "name": "credentialsSecret",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.ISecret"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Cluster endpoint in the form `host:port`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 146
+          },
+          "name": "endpoint",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group attached to the Aurora cluster."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/platform/AuroraPostgresDB.ts",
+            "line": 149
+          },
+          "name": "securityGroup",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        }
+      ],
+      "symbolId": "src/platform/AuroraPostgresDB:IAuroraPostgresDB"
+    },
     "@btc-embedded/cdk-extensions.ICognitoUserPool": {
       "assembly": "@btc-embedded/cdk-extensions",
       "docs": {
@@ -17540,7 +18197,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/OpenIdExtension.ts",
-          "line": 110
+          "line": 125
         },
         "parameters": [
           {
@@ -17554,7 +18211,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/OpenIdExtension.ts",
-        "line": 100
+        "line": 115
       },
       "methods": [
         {
@@ -17565,7 +18222,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/OpenIdExtension.ts",
-            "line": 121
+            "line": 136
           },
           "name": "addHooks",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension"
@@ -17578,7 +18235,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/OpenIdExtension.ts",
-            "line": 142
+            "line": 157
           },
           "name": "prehook",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -17608,7 +18265,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/OpenIdExtension.ts",
-            "line": 108
+            "line": 123
           },
           "name": "cognitoUserPool",
           "type": {
@@ -17635,13 +18292,14 @@
         {
           "abstract": true,
           "docs": {
+            "remarks": "Used when {@link cognitoUserPool} is not provided. Falls back to\n`BasePlatformStackResolver` (CDK context) when also omitted.",
             "stability": "experimental",
             "summary": "The name of the base platform stack."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/OpenIdExtension.ts",
-            "line": 81
+            "line": 84
           },
           "name": "basePlatformStackName",
           "optional": true,
@@ -17649,6 +18307,24 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link CognitoUserPool.fromBasePlatform} is performed. Use this\nwhen the user pool resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the user pool from the base platform\nstack identified by {@link basePlatformStackName}.",
+            "stability": "experimental",
+            "summary": "Cognito User Pool to use directly."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/OpenIdExtension.ts",
+            "line": 101
+          },
+          "name": "cognitoUserPool",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.ICognitoUserPool"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -17658,7 +18334,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/OpenIdExtension.ts",
-            "line": 86
+            "line": 89
           },
           "name": "redirectUri",
           "optional": true,
@@ -17847,7 +18523,7 @@
       "assembly": "@btc-embedded/cdk-extensions",
       "base": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
       "docs": {
-        "remarks": "What it does:\n- Imports DB endpoint, secrets and security group IDs from the base platform stack outputs.\n- Allows the service SG to connect to the DB SG on port 5432.\n- Injects connection details into selected containers via container hooks.\n- Optionally adds a one-shot migration container and wires dependencies so the\n  main container starts only after migrations succeed.",
+        "remarks": "What it does:\n- Resolves DB endpoint, secrets and security group from either a directly\n  injected {@link IAuroraPostgresDB} (same-stack) or from the base platform\n  stack outputs via {@link AuroraPostgresCluster.fromBasePlatform} (cross-stack).\n- Allows the service SG to connect to the DB SG on port 5432.\n- Injects connection details into selected containers via container hooks.\n- Optionally adds a one-shot migration container and wires dependencies so the\n  main container starts only after migrations succeed.",
         "stability": "experimental",
         "summary": "ECS service extension that grants an ECS service access to an Aurora Postgres database created by the base platform."
       },
@@ -17858,7 +18534,7 @@
         },
         "locationInModule": {
           "filename": "src/extensions/PostgresDbAccessExtension.ts",
-          "line": 200
+          "line": 219
         },
         "parameters": [
           {
@@ -17872,7 +18548,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/extensions/PostgresDbAccessExtension.ts",
-        "line": 188
+        "line": 204
       },
       "methods": [
         {
@@ -17883,7 +18559,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 274
+            "line": 273
           },
           "name": "addHooks",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension"
@@ -17895,7 +18571,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 370
+            "line": 358
           },
           "name": "modifyServiceProps",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -17915,12 +18591,13 @@
         },
         {
           "docs": {
+            "remarks": "Uses the directly injected {@link IAuroraPostgresDB} when available (same-stack),\notherwise imports from the base platform stack via\n{@link AuroraPostgresCluster.fromBasePlatform}. Falls back to\n`BasePlatformStackResolver` (CDK context) when\n{@link PostgresDbAccessExtensionProps.basePlatformStackName} is also absent.",
             "stability": "experimental",
-            "summary": "Resolves base-platform outputs (endpoint, secret ARNs) and prepares a service-specific connection-string secret."
+            "summary": "Resolves Aurora cluster outputs (endpoint, secret ARNs, security group) and prepares a service-specific connection-string secret."
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 209
+            "line": 234
           },
           "name": "prehook",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -17946,7 +18623,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 294
+            "line": 293
           },
           "name": "useService",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -17976,7 +18653,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 319
+            "line": 307
           },
           "name": "useTaskDefinition",
           "overrides": "@aws-cdk-containers/ecs-service-extensions.ServiceExtension",
@@ -17999,7 +18676,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 189
+            "line": 205
           },
           "name": "props",
           "type": {
@@ -18013,7 +18690,7 @@
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 192
+            "line": 208
           },
           "name": "connectionString",
           "type": {
@@ -18023,11 +18700,11 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Credentials secret imported from base platform (populated in {@link prehook})."
+            "summary": "Credentials secret resolved from the Aurora cluster (populated in {@link prehook})."
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 195
+            "line": 211
           },
           "name": "credentialsSecret",
           "type": {
@@ -18037,11 +18714,11 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Database endpoint imported from base platform (populated in {@link prehook})."
+            "summary": "Database endpoint resolved from the Aurora cluster (populated in {@link prehook})."
           },
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 198
+            "line": 214
           },
           "name": "endpoint",
           "type": {
@@ -18061,7 +18738,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/extensions/PostgresDbAccessExtension.ts",
-        "line": 57
+        "line": 58
       },
       "name": "PostgresDbAccessExtensionProps",
       "properties": [
@@ -18074,7 +18751,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 67
+            "line": 69
           },
           "name": "dbName",
           "type": {
@@ -18084,14 +18761,32 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "This name is used to look up output\nparameters.",
+            "remarks": "When provided, the extension uses this construct as-is and no cross-stack\nimport via {@link AuroraPostgresCluster.fromBasePlatform} is performed. Use\nthis when the Aurora cluster resides in the same CDK stack as the ECS service.\n\nWhen omitted, the extension imports the cluster from the base platform stack\nidentified by {@link PostgresDbAccessExtensionProps.basePlatformStackName}.",
+            "stability": "experimental",
+            "summary": "Aurora PostgreSQL cluster to use directly."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/extensions/PostgresDbAccessExtension.ts",
+            "line": 121
+          },
+          "name": "auroraPostgresDB",
+          "optional": true,
+          "type": {
+            "fqn": "@btc-embedded/cdk-extensions.IAuroraPostgresDB"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Used to look up output parameters when\n{@link PostgresDbAccessExtensionProps.auroraPostgresDB} is not provided. Falls back to\n`BasePlatformStackResolver` (CDK context) when also omitted.",
             "stability": "experimental",
             "summary": "The name of the base platform stack."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 62
+            "line": 64
           },
           "name": "basePlatformStackName",
           "optional": true,
@@ -18109,7 +18804,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 84
+            "line": 86
           },
           "name": "dbConnectionProperties",
           "optional": true,
@@ -18133,7 +18828,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 100
+            "line": 102
           },
           "name": "enableMigration",
           "optional": true,
@@ -18151,7 +18846,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 91
+            "line": 93
           },
           "name": "environmentVariableNames",
           "optional": true,
@@ -18170,7 +18865,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 76
+            "line": 78
           },
           "name": "logGroup",
           "optional": true,
@@ -18188,7 +18883,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/extensions/PostgresDbAccessExtension.ts",
-            "line": 107
+            "line": 109
           },
           "name": "migrationParameter",
           "optional": true,
@@ -20244,6 +20939,9 @@
       "symbolId": "src/platform/VpcV2:VpcV2Props"
     }
   },
-  "version": "0.22.22",
-  "fingerprint": "MT0U+0rZvp5+IwVeklrSYg854N7WRspuhlicBlhV0Lc="
+  "usedFeatures": [
+    "class-covariant-overrides"
+  ],
+  "version": "0.22.23",
+  "fingerprint": "H0sBOsk0cgnXhy9C+mvWkWOVIMGf3LjvR1qF/2r0UjM="
 }