@go-to-k/cdkd 0.296.14 → 0.296.16

package/dist/{provider-classes-Dz2gVtOZ.js → provider-classes-Bng0RFVo.js}

@@ -2,12 +2,12 @@ import { r as getAwsClients } from "./aws-clients-CnmtbrxD.js";
 import { F as displayStackName, I as isPasteableIdent, N as displayIdent, O as SECRET_REF_MAX_CODE_POINTS, P as displaySafe, R as plainIdentOr, a as getLogger, b as generateResourceNameWithFallback, n as isAwsAuthoredFailure, r as safeStringify, t as describeAwsFailure, y as generateResourceName, z as safeMsg } from "./aws-failure-text-BaWeCWRz.js";
 import { $ as protectedReplacementAdvice, $t as AccountIdUnavailableError, A as isQuotableImportValue, An as commandHole, B as isTerminalDeleteFailure, C as setBounded, D as VALUE_NOT_SHOWN, E as assertRegionMatch, F as resolveExplicitPhysicalId, Fn as plainOrDescribed, H as observeThenDisableProtection, Jn as markNameCollision, Jt as withPasteableAwsProfile, L as ProtectionFlipRegistry, M as quotedRemedyLogicalId, Mn as isInertUnquoted, Mt as markCreatedBeforeFailure, N as refusalTypeShown, Nn as pasteableCommand, O as isPlainImportJson, P as remedyLogicalId, Q as pasteableAwsCommand, Qn as isAmbiguousOutcomeError, Qt as credentialFingerprint, Rn as shellQuote, S as replayedSendWindow, St as withDerivedNameMasks, T as RESOURCE_NOT_FOUND, Tt as clearCreatedBeforeFailure, U as protectionFlipKey, Ut as injectiveKey, V as logGroupProtectionSite, W as rdsFamilyProtectionSite, Wt as injectiveKeyPrefix, X as WITHHELD_AWS_COMMAND, Xt as ambientCredentialConfig, Y as UNNAMEABLE_ID_CLAUSE, Yn as markReplayMayCollide, Yt as ambientClientDefaults, Z as isAwsCliLiteral, Zt as clientDefaultsFor, _ as RecentIdSet, _n as ResourceUpdateNotSupportedError, _t as createMaskedLogSinks, a as onlySecretDerived, ar as isThrottlingError, at as startInterruptWatch, b as isInsideWindow, bt as maskDeep, c as recordedPrincipalsRepair, cr as wrapMaskedAwsError, ct as canonicalizeRoute53QueryName, dt as compositeIdSkipResult, er as isRetryableTransientError, et as renderDisableCommand, ft as logicalIdShown, g as AmbiguousCreateLatch, gt as stateOrphanRecordRemedy, h as AMBIGUOUS_LATCH_TTL_MS, hn as ProvisioningError, ht as segmentAfterAnchor, i as holdsSecretDerivedEntry, ir as isMarkedNonRetryable, it as isInterruptedWaitError, j as normalizeAwsTagsToCfn, jn as hasClauseBreak, jt as markAuxiliaryFailure, k as isPlainImportValue, lt as compositeIdFormatMessage, o as readPrincipalLists, or as markNonRetryable, ot as ElapsedBudgetRegistry, p as withRemovalDefaults, pt as packCompositeId, q as userPoolProtectionSite, r as SECRET_DERIVED_READ_LIVE, rr as THROTTLING_ERROR_NAMES, sr as markRedactedCause, tn as CdkdError, tr as isTransientServerError, u as clearOnUpdateRemoval, ut as compositeIdSeparatorRefusal, v as ambiguousAttemptLead, vt as createMaskedRetryLogger, w as withoutServerErrorRetries, x as replayFollowedAmbiguousAttempt, xt as maskerOrIdentity, y as createAttemptKey, yt as isSecretDerivedValue, z as deleteWithProtectionCompensation, zn as withheldTargetClause } from "./iam-policy-targets-BoZuWtxK.js";
 import { s as ambientRegion } from "./aws-client-defaults-D0q0z4dG.js";
-import { $n as getCurrentResourceSecrets, Aa as toFiniteNumber, Ba as requireConfigString, Bn as planTagDiff, Ct as INDEX_SETTLE_POLL_INTERVAL_MS, Da as coerceWarmThroughput$1, Dc as displayAssemblyPath, Do as recoverMaskedOutput, Dt as S3_AUTO_DELETE_OBJECTS_TAG, Ea as WARM_THROUGHPUT_MEMBERS, Ec as describeFileReadFailure, Et as ECR_AUTO_DELETE_IMAGES_TAG, Fa as configStringRefusal, Fi as refuseMalformedNestedChildOutputs, Fn as reserveStackCreateToken, Fr as s3BucketDualStackDomainName, Ga as canonicalLambdaFunctionName, Gn as definedAttributes, Gt as redactedDeleteAddressFields, Hn as refuseMalformedDesiredTags, Ia as readConfigString, Ir as s3BucketRegionalDomainName, Ka as lambdaFunctionNameForMask, Kn as stringifyIfAssigned, Kt as redactedDeleteAddressSkip, La as replayWarn, Ln as acquireIdempotencyToken, Lr as s3BucketWebsiteUrl, Ma as coerceCfnInteger, Mr as isSettledInstanceState, Na as configBooleanRefusal, Nn as earliestDefined, Nr as s3BucketArn, Oa as isWarmThroughputDecrease, Oc as renderAssemblyPathEscape, Ot as hasCdkAutoDeleteTag, Pa as configIntegerRefusal, Pr as s3BucketDomainName, Ra as requireConfigArray, Rn as DBPROXY_TAGS_WHAT, So as dynamicReferenceTokens, St as DELETE_INDEX_WAIT_PROCEED_NOTE, T as markRefusedBeforeApplying, Tt as waitForIndexesSettled, Un as tagMapAsList, Ut as REDACTED_DELETE_ADDRESS_SKIP_REASON, Vn as readTagList, Vr as getAccountInfo, Vt as getCurrentProducerRegions, W as getNestedRevertRun, Wa as withRetry, Wn as tagPlanWarning, Wt as isRedactedRecordedValue, X as getCurrentNestedStackContext, Z as withNestedStackContext, Zr as parseWebACLArn, _a as withoutSilentDropProperties, _t as beginDeleteWait, a as findNestedTemplateTreeDefect, bt as resolveDynamoDbDeleteBudgetClock, c as renderNestedTemplateTreeDefect, cr as isWaitAbandonedError, dr as ec2InstanceProtectionSite, ei as passedParameterClassesOf, fc as decodeListingKey, fr as isTerminationProtectionPropagationError, fs as rewriteTemplateAssetReferences, gc as derivePartitionAndUrlSuffix, gt as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, ha as findSilentDropProperties, hc as canonicalizeRegion, hr as reEnableInstanceApiTermination, ht as DynamoDBGlobalTableProvider, ja as coerceCfnBoolean, ka as toCfnInteger, kc as resolveAssemblyPath, ko as carriesSecretMask, kt as isTruthyCfnBoolean, lr as markWaitAbandoned, lt as getStackRecords, mr as reDisableInstanceApiTermination, no as passedNoEchoParametersOf, nr as slowCcOperationTimeoutMs, o as isAbsoluteAssetPath, oi as accountArgs, or as deleteSkipReason, pa as withheldAccountClause, pr as observeThenDisableInstanceApiTermination, q as revertNestedChildFromJournal, qa as sameLambdaFunctionAddress, rr as unchangedBehindSecretReference, s as listNestedTemplateRows, so as hasMaskableValues, sr as withIndeterminateGuard, ss as stringifyValue, st as awaitInFlightSibling, t as DeployEngine, ta as refuseMalformedResourcesForDestroy, vo as markSameGenerationBag, vt as compensateRemovedDeletionProtection, w as getPriorAttempts, wt as deleteTableWithIndexBusyRetry, xt as resolveDynamoDbDeleteBudgetMs, yo as redactSecretsForState, yt as deleteBudgetKey, za as requireConfigObject, zn as DBPROXY_TAG_OPTIONS } from "./deploy-engine-Z_zHC0jz.js";
-import { n as collectInlinePolicyNamesManagedBySiblings, r as IamCreateClientCache, t as IAMRoleProvider } from "./iam-role-provider-BTYPRrDe.js";
-import { a as canonicalizeIpProtocolValue, i as resolveSecretDerivedPrincipals, n as runDestroyForStack, o as resolvedResourceTimeoutMs, r as isResolvableSecretPrincipalList, t as canonicalizeIpv4Cidr } from "./program-CKV6Kn8Q.js";
-import { RDSProvider } from "./rds-provider-6YeZRRfW.js";
-import { NeptuneProvider } from "./neptune-provider-ZYVwKq6K.js";
-import { ASGProvider } from "./asg-provider-eXsnCQh2.js";
+import { Aa as coerceWarmThroughput$1, Ac as displayAssemblyPath, Ba as replayWarn, Bn as DBPROXY_TAGS_WHAT, Br as s3BucketWebsiteUrl, Ct as INDEX_SETTLE_POLL_INTERVAL_MS, Dt as S3_AUTO_DELETE_OBJECTS_TAG, Et as ECR_AUTO_DELETE_IMAGES_TAG, Fa as coerceCfnInteger, Fn as earliestDefined, Fr as isSettledInstanceState, Gn as tagMapAsList, Gt as redactedDeleteAddressFields, Ha as requireConfigObject, Hn as planTagDiff, Ia as configBooleanRefusal, Ir as s3BucketArn, Ja as canonicalLambdaFunctionName, Jn as stringifyIfAssigned, Kn as tagPlanWarning, Kt as redactedDeleteAddressSkip, La as configIntegerRefusal, Ln as reserveStackCreateToken, Lr as s3BucketDomainName, Ma as toCfnInteger, Mc as resolveAssemblyPath, Mo as carriesSecretMask, Na as toFiniteNumber, Ot as hasCdkAutoDeleteTag, Pa as coerceCfnBoolean, Ra as configStringRefusal, Ri as refuseMalformedNestedChildOutputs, Rr as s3BucketDualStackDomainName, So as redactSecretsForState, St as DELETE_INDEX_WAIT_PROCEED_NOTE, T as markRefusedBeforeApplying, To as dynamicReferenceTokens, Tt as waitForIndexesSettled, Ua as requireConfigString, Un as readTagList, Ut as REDACTED_DELETE_ADDRESS_SKIP_REASON, Va as requireConfigArray, Vn as DBPROXY_TAG_OPTIONS, Vt as getCurrentProducerRegions, W as getNestedRevertRun, Wn as refuseMalformedDesiredTags, Wr as getAccountInfo, Wt as isRedactedRecordedValue, X as getCurrentNestedStackContext, Xa as sameLambdaFunctionAddress, Ya as lambdaFunctionNameForMask, Z as withNestedStackContext, _r as reEnableInstanceApiTermination, _t as beginDeleteWait, a as findNestedTemplateTreeDefect, ao as passedNoEchoParametersOf, ar as unchangedBehindSecretReference, ba as withoutSilentDropProperties, bt as resolveDynamoDbDeleteBudgetClock, c as renderNestedTemplateTreeDefect, cr as deleteSkipReason, dr as markWaitAbandoned, ei as parseWebACLArn, ga as withheldAccountClause, gr as reDisableInstanceApiTermination, gt as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, hc as decodeListingKey, hr as observeThenDisableInstanceApiTermination, hs as rewriteTemplateAssetReferences, ht as DynamoDBGlobalTableProvider, ia as refuseMalformedResourcesForDestroy, ir as slowCcOperationTimeoutMs, ja as isWarmThroughputDecrease, jc as renderAssemblyPathEscape, jo as recoverMaskedOutput, ka as WARM_THROUGHPUT_MEMBERS, kc as describeFileReadFailure, kt as isTruthyCfnBoolean, li as accountArgs, lr as withIndeterminateGuard, lt as getStackRecords, mr as isTerminationProtectionPropagationError, o as isAbsoluteAssetPath, pr as ec2InstanceProtectionSite, q as revertNestedChildFromJournal, qa as withRetry, qn as definedAttributes, ri as passedParameterClassesOf, s as listNestedTemplateRows, st as awaitInFlightSibling, t as DeployEngine, tr as getCurrentResourceSecrets, uo as hasMaskableValues, ur as isWaitAbandonedError, us as stringifyValue, va as findSilentDropProperties, vc as canonicalizeRegion, vt as compensateRemovedDeletionProtection, w as getPriorAttempts, wt as deleteTableWithIndexBusyRetry, xo as markSameGenerationBag, xt as resolveDynamoDbDeleteBudgetMs, yc as derivePartitionAndUrlSuffix, yt as deleteBudgetKey, za as readConfigString, zn as acquireIdempotencyToken, zr as s3BucketRegionalDomainName } from "./deploy-engine-DYAAwd0u.js";
+import { n as collectInlinePolicyNamesManagedBySiblings, r as IamCreateClientCache, t as IAMRoleProvider } from "./iam-role-provider-B31gkUPy.js";
+import { a as canonicalizeIpProtocolValue, i as resolveSecretDerivedPrincipals, n as runDestroyForStack, o as resolvedResourceTimeoutMs, r as isResolvableSecretPrincipalList, t as canonicalizeIpv4Cidr } from "./program-D0Q9DbSa.js";
+import { RDSProvider } from "./rds-provider-Cbeq5OY8.js";
+import { NeptuneProvider } from "./neptune-provider-X5T1Zamt.js";
+import { ASGProvider } from "./asg-provider-D2eHqx5L.js";
 import { createHash, randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client } from "@aws-sdk/client-s3";
 import { AddRoleToInstanceProfileCommand, AddUserToGroupCommand, AttachGroupPolicyCommand, AttachRolePolicyCommand, AttachUserPolicyCommand, CreateAccessKeyCommand, CreateGroupCommand, CreateInstanceProfileCommand, CreateLoginProfileCommand, CreatePolicyCommand, CreatePolicyVersionCommand, CreateUserCommand, DeleteAccessKeyCommand, DeleteGroupCommand, DeleteGroupPolicyCommand, DeleteInstanceProfileCommand, DeleteLoginProfileCommand, DeletePolicyCommand, DeletePolicyVersionCommand, DeleteRolePolicyCommand, DeleteUserCommand, DeleteUserPermissionsBoundaryCommand, DeleteUserPolicyCommand, DetachGroupPolicyCommand, DetachRolePolicyCommand, DetachUserPolicyCommand, GetAccessKeyLastUsedCommand, GetGroupCommand, GetGroupPolicyCommand, GetInstanceProfileCommand, GetPolicyCommand, GetPolicyVersionCommand, GetRolePolicyCommand, GetUserCommand, GetUserPolicyCommand, IAMClient, ListAccessKeysCommand, ListAttachedGroupPoliciesCommand, ListAttachedUserPoliciesCommand, ListEntitiesForPolicyCommand, ListGroupPoliciesCommand, ListGroupsForUserCommand, ListPoliciesCommand, ListPolicyTagsCommand, ListPolicyVersionsCommand, ListUserPoliciesCommand, NoSuchEntityException, PutGroupPolicyCommand, PutRolePolicyCommand, PutUserPermissionsBoundaryCommand, PutUserPolicyCommand, RemoveRoleFromInstanceProfileCommand, RemoveUserFromGroupCommand, TagPolicyCommand, TagUserCommand, UntagPolicyCommand, UntagUserCommand, UpdateAccessKeyCommand, UpdateLoginProfileCommand } from "@aws-sdk/client-iam";
@@ -25678,6 +25678,9 @@ function instanceAttributes(instance) {
 		Arn: instance?.DBInstanceArn
 	});
 }
+function isDbIdentifier(id) {
+	return id.length <= 63 && /^[A-Za-z](?:-?[A-Za-z0-9])*$/.test(id);
+}
 var DocDBProvider = class {
 	docdbClient;
 	createClient;
@@ -25758,6 +25761,7 @@ var DocDBProvider = class {
 			lowercase: true
 		});
 		let clusterCreated = false;
+		let createdResourceId;
 		try {
 			const response = await this.getCreateClient().send(new CreateDBClusterCommand$1({
 				DBClusterIdentifier: dbClusterIdentifier,
@@ -25778,6 +25782,7 @@ var DocDBProvider = class {
 				...tags.length > 0 && { Tags: tags }
 			}));
 			clusterCreated = true;
+			createdResourceId = response.DBCluster?.DbClusterResourceId;
 			if (!response.DBCluster) throw new Error("CreateDBCluster did not return DBCluster");
 			this.logger.debug(`Successfully created DocDB DBCluster ${logicalId}: ${dbClusterIdentifier}`);
 			if (process.env["CDKD_NO_WAIT"] !== "true") await this.waitForClusterAvailable(dbClusterIdentifier);
@@ -25787,7 +25792,7 @@ var DocDBProvider = class {
 			};
 		} catch (error) {
 			const thrown = error instanceof ProvisioningError ? error : new ProvisioningError(`Failed to create DocDB DBCluster ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, dbClusterIdentifier, error instanceof Error ? error : void 0);
-			if (clusterCreated) markCreatedBeforeFailure(thrown, logicalId, resourceType, dbClusterIdentifier);
+			if (clusterCreated) markCreatedBeforeFailure(thrown, logicalId, resourceType, dbClusterIdentifier, createdResourceId);
 			throw thrown;
 		}
 	}
@@ -25889,7 +25894,8 @@ var DocDBProvider = class {
 			if (isDocDBNotFoundError(error, "DBClusterNotFoundFault")) {
 				const clientRegion = await this.getClient().config.region();
 				assertRegionMatch(clientRegion, context?.expectedRegion, resourceType, logicalId, physicalId);
-				this.logger.debug(`DocDB DBCluster ${logicalId} does not exist, skipping deletion`);
+				if (context?.failedCreateOrphan === true) this.logger.info(safeMsg`  DocDB DB cluster ${physicalId} (${logicalId}), which a failed deploy created, is already gone; nothing to delete`);
+				else this.logger.debug(`DocDB DBCluster ${logicalId} does not exist, skipping deletion`);
 				return;
 			}
 			const cause = error instanceof Error ? error : void 0;
@@ -25904,6 +25910,7 @@ var DocDBProvider = class {
 			lowercase: true
 		});
 		let instanceCreated = false;
+		let createdResourceId;
 		try {
 			const response = await this.getCreateClient().send(new CreateDBInstanceCommand$1({
 				DBInstanceIdentifier: dbInstanceIdentifier,
@@ -25916,6 +25923,7 @@ var DocDBProvider = class {
 				...tags.length > 0 && { Tags: tags }
 			}));
 			instanceCreated = true;
+			createdResourceId = response.DBInstance?.DbiResourceId;
 			if (!response.DBInstance) throw new Error("CreateDBInstance did not return DBInstance");
 			this.logger.debug(`Successfully created DocDB DBInstance ${logicalId}: ${dbInstanceIdentifier}`);
 			if (process.env["CDKD_NO_WAIT"] !== "true") await this.waitForInstanceAvailable(dbInstanceIdentifier);
@@ -25925,7 +25933,7 @@ var DocDBProvider = class {
 			};
 		} catch (error) {
 			const thrown = error instanceof ProvisioningError ? error : new ProvisioningError(`Failed to create DocDB DBInstance ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, dbInstanceIdentifier, error instanceof Error ? error : void 0);
-			if (instanceCreated) markCreatedBeforeFailure(thrown, logicalId, resourceType, dbInstanceIdentifier);
+			if (instanceCreated) markCreatedBeforeFailure(thrown, logicalId, resourceType, dbInstanceIdentifier, createdResourceId);
 			throw thrown;
 		}
 	}
@@ -25963,7 +25971,8 @@ var DocDBProvider = class {
 			if (isDocDBNotFoundError(error, "DBInstanceNotFoundFault")) {
 				const clientRegion = await this.getClient().config.region();
 				assertRegionMatch(clientRegion, context?.expectedRegion, resourceType, logicalId, physicalId);
-				this.logger.debug(`DocDB DBInstance ${physicalId} does not exist, skipping deletion`);
+				if (context?.failedCreateOrphan === true) this.logger.info(safeMsg`  DocDB DB instance ${physicalId} (${logicalId}), which a failed deploy created, is already gone; nothing to delete`);
+				else this.logger.debug(`DocDB DBInstance ${physicalId} does not exist, skipping deletion`);
 				return;
 			}
 			const cause = error instanceof Error ? error : void 0;
@@ -25976,6 +25985,55 @@ var DocDBProvider = class {
 	async describeDBInstance(dbInstanceIdentifier) {
 		return (await this.getClient().send(new DescribeDBInstancesCommand$1({ DBInstanceIdentifier: dbInstanceIdentifier }))).DBInstances?.[0];
 	}
+	async isSameResource(journaledPhysicalId, record, resourceType, context) {
+		if (resourceType !== "AWS::DocDB::DBCluster" && resourceType !== "AWS::DocDB::DBInstance") return "unknown";
+		if (!isDbIdentifier(journaledPhysicalId) || !isDbIdentifier(record.physicalId)) return "unknown";
+		if (journaledPhysicalId.toLowerCase() === record.physicalId.toLowerCase()) return "same";
+		if (await this.getClient().config.region() !== context.expectedRegion) return "unknown";
+		const recordResourceId = await this.readDbResourceIdIfExists(resourceType, record.physicalId);
+		if (recordResourceId === void 0) return "unknown";
+		const journaledResourceId = await this.readDbResourceIdIfExists(resourceType, journaledPhysicalId);
+		if (journaledResourceId === void 0) return "different";
+		return journaledResourceId === recordResourceId ? "same" : "different";
+	}
+	async resourceIdentity(physicalId, resourceType, context) {
+		if (resourceType !== "AWS::DocDB::DBCluster" && resourceType !== "AWS::DocDB::DBInstance") return;
+		if (!isDbIdentifier(physicalId)) return void 0;
+		if (await this.getClient().config.region() !== context.expectedRegion) return void 0;
+		const live = await this.readDbResourceIdIfExists(resourceType, physicalId);
+		return live === void 0 ? RESOURCE_NOT_FOUND : live;
+	}
+	async readDbResourceIdIfExists(resourceType, identifier) {
+		const isCluster = resourceType === "AWS::DocDB::DBCluster";
+		let found;
+		try {
+			if (isCluster) {
+				const cluster = await this.describeDBCluster(identifier);
+				found = cluster && {
+					identifier: cluster.DBClusterIdentifier,
+					engine: cluster.Engine,
+					resourceId: cluster.DbClusterResourceId
+				};
+			} else {
+				const instance = await this.describeDBInstance(identifier);
+				found = instance && {
+					identifier: instance.DBInstanceIdentifier,
+					engine: instance.Engine,
+					resourceId: instance.DbiResourceId
+				};
+			}
+		} catch (error) {
+			const notFound = isCluster ? "DBClusterNotFoundFault" : "DBInstanceNotFoundFault";
+			if (error?.name === notFound) return void 0;
+			throw error;
+		}
+		if (found === void 0) return void 0;
+		const api = isCluster ? "DescribeDBClusters" : "DescribeDBInstances";
+		if (found.identifier?.toLowerCase() !== identifier.toLowerCase()) throw new Error(`${api} answered for another identifier`);
+		if (found.engine !== "docdb") throw new Error(`${api} answered with a resource of another engine`);
+		if (typeof found.resourceId !== "string" || found.resourceId === "") throw new Error(`${api} returned no resource id`);
+		return found.resourceId;
+	}
 	async waitForClusterAvailable(dbClusterIdentifier, maxWaitMs = 18e5) {
 		const startTime = Date.now();
 		let delay = 5e3;
@@ -44284,4 +44342,4 @@ var ACMCertificateProvider = class {
 
 //#endregion
 export { ACMCertificateProvider, ASGProvider, AgentCoreBrowserProvider, AgentCoreCodeInterpreterProvider, AgentCoreEvaluatorProvider, AgentCoreRuntimeProvider, ApiGatewayProvider, ApiGatewayV2Provider, AppSyncProvider, BudgetsBudgetProvider, CloudFrontDistributionProvider, CloudFrontOACProvider, CloudFrontOAIProvider, CloudTrailProvider, CloudWatchAlarmProvider, CloudWatchAnomalyDetectorProvider, CodeBuildProvider, CodeCommitRepositoryProvider, CognitoUserPoolProvider, DLMLifecyclePolicyProvider, DocDBProvider, DocDBSubnetGroupProvider, DynamoDBGlobalTableProvider, DynamoDBTableProvider, EC2Provider, ECRProvider, ECSProvider, EFSProvider, ELBv2Provider, EMRClusterProvider, EMRInstanceFleetConfigProvider, EMRInstanceGroupConfigProvider, ElastiCacheProvider, EventBridgeBusProvider, EventBridgeRuleProvider, FSxFileSystemProvider, FirehoseProvider, GlueConnectionProvider, GlueCrawlerProvider, GlueJobProvider, GlueProvider, GlueSecurityConfigurationProvider, GlueTriggerProvider, GlueWorkflowProvider, IAMAccessKeyProvider, IAMInstanceProfileProvider, IAMManagedPolicyProvider, IAMPolicyProvider, IAMRoleProvider, IAMUserGroupProvider, KMSProvider, KinesisStreamConsumerProvider, KinesisStreamProvider, LambdaEventInvokeConfigProvider, LambdaEventSourceMappingProvider, LambdaFunctionProvider, LambdaLayerVersionProvider, LambdaMicrovmImageProvider, LambdaPermissionProvider, LambdaUrlProvider, LogsLogGroupProvider, NeptuneProvider, NestedStackProvider, PipesPipeProvider, RDSDBProxyEndpointProvider, RDSDBProxyProvider, RDSDBProxyTargetGroupProvider, RDSProvider, Route53Provider, S3BucketPolicyProvider, S3BucketProvider, S3DirectoryBucketProvider, S3TablesProvider, S3VectorsProvider, SNSSubscriptionProvider, SNSTopicPolicyProvider, SNSTopicProvider, SQSQueuePolicyProvider, SQSQueueProvider, SSMParameterProvider, SchedulerScheduleProvider, SecretsManagerSecretProvider, ServiceDiscoveryProvider, StepFunctionsProvider, WAFv2WebACLProvider, WaitConditionHandleProvider };
-//# sourceMappingURL=provider-classes-Dz2gVtOZ.js.map
+//# sourceMappingURL=provider-classes-Bng0RFVo.js.map