aws-cdk-lib 2.173.3__py3-none-any.whl → 2.174.0__py3-none-any.whl

aws_cdk/aws_rds/__init__.py

@@ -4895,6 +4895,7 @@ class CfnDBCluster(
             backup_retention_period=123,
             cluster_scalability_type="clusterScalabilityType",
             copy_tags_to_snapshot=False,
+            database_insights_mode="databaseInsightsMode",
             database_name="databaseName",
             db_cluster_identifier="dbClusterIdentifier",
             db_cluster_instance_class="dbClusterInstanceClass",
@@ -4947,7 +4948,8 @@ class CfnDBCluster(
             ),
             serverless_v2_scaling_configuration=rds.CfnDBCluster.ServerlessV2ScalingConfigurationProperty(
                 max_capacity=123,
-                min_capacity=123
+                min_capacity=123,
+                seconds_until_auto_pause=123
             ),
             snapshot_identifier="snapshotIdentifier",
             source_db_cluster_identifier="sourceDbClusterIdentifier",
@@ -4976,6 +4978,7 @@ class CfnDBCluster(
         backup_retention_period: typing.Optional[jsii.Number] = None,
         cluster_scalability_type: typing.Optional[builtins.str] = None,
         copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        database_insights_mode: typing.Optional[builtins.str] = None,
         database_name: typing.Optional[builtins.str] = None,
         db_cluster_identifier: typing.Optional[builtins.str] = None,
         db_cluster_instance_class: typing.Optional[builtins.str] = None,
@@ -5031,12 +5034,13 @@ class CfnDBCluster(
         :param id: Construct identifier for this resource (unique in its scope).
         :param allocated_storage: The amount of storage in gibibytes (GiB) to allocate to each DB instance in the Multi-AZ DB cluster. Valid for Cluster Type: Multi-AZ DB clusters only This setting is required to create a Multi-AZ DB cluster.
         :param associated_roles: Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other Amazon Web Services on your behalf. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param auto_minor_version_upgrade: Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically. Valid for Cluster Type: Multi-AZ DB clusters only
+        :param auto_minor_version_upgrade: Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster
         :param availability_zones: A list of Availability Zones (AZs) where instances in the DB cluster can be created. For information on AWS Regions and Availability Zones, see `Choosing the Regions and Availability Zones <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html>`_ in the *Amazon Aurora User Guide* . Valid for: Aurora DB clusters only
         :param backtrack_window: The target backtrack window, in seconds. To disable backtracking, set this value to ``0`` . Valid for Cluster Type: Aurora MySQL DB clusters only Default: ``0`` Constraints: - If specified, this value must be set to a number from 0 to 259,200 (72 hours).
         :param backup_retention_period: The number of days for which automated backups are retained. Default: 1 Constraints: - Must be a value from 1 to 35 Valid for: Aurora DB clusters and Multi-AZ DB clusters Default: - 1
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. When set to ``limitless`` , the cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities. When set to ``standard`` (the default), the cluster uses normal DB instance creation.
         :param copy_tags_to_snapshot: A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them. Valid for: Aurora DB clusters and Multi-AZ DB clusters
+        :param database_insights_mode: The mode of Database Insights to enable for the DB cluster. If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465. Valid for Cluster Type: Aurora DB clusters only
         :param database_name: The name of your database. If you don't provide a name, then Amazon RDS won't create a database in this DB cluster. For naming constraints, see `Naming Constraints <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Limits.html#RDS_Limits.Constraints>`_ in the *Amazon Aurora User Guide* . Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_identifier: The DB cluster identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - First character must be a letter. - Can't end with a hyphen or contain two consecutive hyphens. Example: ``my-cluster1`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_instance_class: The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge`` . Not all DB instance classes are available in all AWS Regions , or for all database engines. For the full list of DB instance classes and availability for your engine, see `DB instance class <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html>`_ in the *Amazon RDS User Guide* . This setting is required to create a Multi-AZ DB cluster. Valid for Cluster Type: Multi-AZ DB clusters only
@@ -5062,13 +5066,13 @@ class CfnDBCluster(
         :param manage_master_user_password: Specifies whether to manage the master user password with AWS Secrets Manager. For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.* Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Constraints: - Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified.
         :param master_username: The name of the master user for the DB cluster. .. epigraph:: If you specify the ``SourceDBClusterIdentifier`` , ``SnapshotIdentifier`` , or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param master_user_password: The master password for the DB instance. .. epigraph:: If you specify the ``SourceDBClusterIdentifier`` , ``SnapshotIdentifier`` , or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param master_user_secret: The secret managed by RDS in AWS Secrets Manager for the master user password. For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
-        :param monitoring_interval: The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0`` . If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0`` . Valid for Cluster Type: Multi-AZ DB clusters only Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60`` Default: ``0``
-        :param monitoring_role_arn: The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess`` . For information on creating a monitoring role, see `Setting up and enabling Enhanced Monitoring <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling>`_ in the *Amazon RDS User Guide* . If ``MonitoringInterval`` is set to a value other than ``0`` , supply a ``MonitoringRoleArn`` value. Valid for Cluster Type: Multi-AZ DB clusters only
+        :param master_user_secret: The secret managed by RDS in AWS Secrets Manager for the master user password. .. epigraph:: When you restore a DB cluster from a snapshot, Amazon RDS generates a new secret instead of reusing the secret specified in the ``SecretArn`` property. This ensures that the restored DB cluster is securely managed with a dedicated secret. To maintain consistent integration with your application, you might need to update resource configurations to reference the newly created secret. For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
+        :param monitoring_interval: The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0`` . If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0`` . Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60`` Default: ``0``
+        :param monitoring_role_arn: The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess`` . For information on creating a monitoring role, see `Setting up and enabling Enhanced Monitoring <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling>`_ in the *Amazon RDS User Guide* . If ``MonitoringInterval`` is set to a value other than ``0`` , supply a ``MonitoringRoleArn`` value. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
         :param network_type: The network type of the DB cluster. Valid values: - ``IPV4`` - ``DUAL`` The network type is determined by the ``DBSubnetGroup`` specified for the DB cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols ( ``DUAL`` ). For more information, see `Working with a DB instance in a VPC <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html>`_ in the *Amazon Aurora User Guide.* Valid for: Aurora DB clusters only
-        :param performance_insights_enabled: Specifies whether to turn on Performance Insights for the DB cluster. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* . Valid for Cluster Type: Multi-AZ DB clusters only
-        :param performance_insights_kms_key_id: The AWS KMS key identifier for encryption of Performance Insights data. The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. If you don't specify a value for ``PerformanceInsightsKMSKeyId`` , then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account . Your AWS account has a different default KMS key for each AWS Region . Valid for Cluster Type: Multi-AZ DB clusters only
-        :param performance_insights_retention_period: The number of days to retain Performance Insights data. Valid for Cluster Type: Multi-AZ DB clusters only Valid Values: - ``7`` - *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31) - ``731`` Default: ``7`` days If you specify a retention period that isn't valid, such as ``94`` , Amazon RDS issues an error.
+        :param performance_insights_enabled: Specifies whether to turn on Performance Insights for the DB cluster. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* . Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
+        :param performance_insights_kms_key_id: The AWS KMS key identifier for encryption of Performance Insights data. The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. If you don't specify a value for ``PerformanceInsightsKMSKeyId`` , then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account . Your AWS account has a different default KMS key for each AWS Region . Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
+        :param performance_insights_retention_period: The number of days to retain Performance Insights data. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Valid Values: - ``7`` - *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31) - ``731`` Default: ``7`` days If you specify a retention period that isn't valid, such as ``94`` , Amazon RDS issues an error.
         :param port: The port number on which the DB instances in the DB cluster accept connections. Default: - When ``EngineMode`` is ``provisioned`` , ``3306`` (for both Aurora MySQL and Aurora PostgreSQL) - When ``EngineMode`` is ``serverless`` : - ``3306`` when ``Engine`` is ``aurora`` or ``aurora-mysql`` - ``5432`` when ``Engine`` is ``aurora-postgresql`` .. epigraph:: The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see `Port <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port>`_ for the AWS::RDS::DBInstance resource. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_backup_window: The daily time range during which automated backups are created. For more information, see `Backup Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow>`_ in the *Amazon Aurora User Guide.* Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see `Adjusting the Preferred DB Cluster Maintenance Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora>`_ in the *Amazon Aurora User Guide.* Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun. Constraints: Minimum 30-minute window. Valid for: Aurora DB clusters and Multi-AZ DB clusters
@@ -5100,6 +5104,7 @@ class CfnDBCluster(
             backup_retention_period=backup_retention_period,
             cluster_scalability_type=cluster_scalability_type,
             copy_tags_to_snapshot=copy_tags_to_snapshot,
+            database_insights_mode=database_insights_mode,
             database_name=database_name,
             db_cluster_identifier=db_cluster_identifier,
             db_cluster_instance_class=db_cluster_instance_class,
@@ -5416,6 +5421,19 @@ class CfnDBCluster(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "copyTagsToSnapshot", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="databaseInsightsMode")
+    def database_insights_mode(self) -> typing.Optional[builtins.str]:
+        '''The mode of Database Insights to enable for the DB cluster.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "databaseInsightsMode"))
+
+    @database_insights_mode.setter
+    def database_insights_mode(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__95529055a06b2a5642399d211890b3949094262771feb4c9ba4efe7d394d8efa)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "databaseInsightsMode", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="databaseName")
     def database_name(self) -> typing.Optional[builtins.str]:
@@ -6615,7 +6633,11 @@ class CfnDBCluster(
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_rds.CfnDBCluster.ServerlessV2ScalingConfigurationProperty",
         jsii_struct_bases=[],
-        name_mapping={"max_capacity": "maxCapacity", "min_capacity": "minCapacity"},
+        name_mapping={
+            "max_capacity": "maxCapacity",
+            "min_capacity": "minCapacity",
+            "seconds_until_auto_pause": "secondsUntilAutoPause",
+        },
     )
     class ServerlessV2ScalingConfigurationProperty:
         def __init__(
@@ -6623,6 +6645,7 @@ class CfnDBCluster(
             *,
             max_capacity: typing.Optional[jsii.Number] = None,
             min_capacity: typing.Optional[jsii.Number] = None,
+            seconds_until_auto_pause: typing.Optional[jsii.Number] = None,
         ) -> None:
             '''The ``ServerlessV2ScalingConfiguration`` property type specifies the scaling configuration of an Aurora Serverless V2 DB cluster.
 
@@ -6636,6 +6659,7 @@ class CfnDBCluster(
 
             :param max_capacity: The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on. The largest value that you can use is 128. The maximum capacity must be higher than 0.5 ACUs. For more information, see `Choosing the maximum Aurora Serverless v2 capacity setting for a cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.setting-capacity.html#aurora-serverless-v2.max_capacity_considerations>`_ in the *Amazon Aurora User Guide* . Aurora automatically sets certain parameters for Aurora Serverless V2 DB instances to values that depend on the maximum ACU value in the capacity range. When you update the maximum capacity value, the ``ParameterApplyStatus`` value for the DB instance changes to ``pending-reboot`` . You can update the parameter values by rebooting the DB instance after changing the capacity range.
             :param min_capacity: The minimum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 8, 8.5, 9, and so on. For Aurora versions that support the Aurora Serverless v2 auto-pause feature, the smallest value that you can use is 0. For versions that don't support Aurora Serverless v2 auto-pause, the smallest value that you can use is 0.5.
+            :param seconds_until_auto_pause: Specifies the number of seconds an Aurora Serverless v2 DB instance must be idle before Aurora attempts to automatically pause it. Specify a value between 300 seconds (five minutes) and 86,400 seconds (one day). The default is 300 seconds.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-serverlessv2scalingconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -6648,18 +6672,22 @@ class CfnDBCluster(
                 
                 serverless_v2_scaling_configuration_property = rds.CfnDBCluster.ServerlessV2ScalingConfigurationProperty(
                     max_capacity=123,
-                    min_capacity=123
+                    min_capacity=123,
+                    seconds_until_auto_pause=123
                 )
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__5a6717af18f7b2b042b74ca423a540eb39f5ae817292b338733c6a3cee2b4284)
                 check_type(argname="argument max_capacity", value=max_capacity, expected_type=type_hints["max_capacity"])
                 check_type(argname="argument min_capacity", value=min_capacity, expected_type=type_hints["min_capacity"])
+                check_type(argname="argument seconds_until_auto_pause", value=seconds_until_auto_pause, expected_type=type_hints["seconds_until_auto_pause"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if max_capacity is not None:
                 self._values["max_capacity"] = max_capacity
             if min_capacity is not None:
                 self._values["min_capacity"] = min_capacity
+            if seconds_until_auto_pause is not None:
+                self._values["seconds_until_auto_pause"] = seconds_until_auto_pause
 
         @builtins.property
         def max_capacity(self) -> typing.Optional[jsii.Number]:
@@ -6687,6 +6715,17 @@ class CfnDBCluster(
             result = self._values.get("min_capacity")
             return typing.cast(typing.Optional[jsii.Number], result)
 
+        @builtins.property
+        def seconds_until_auto_pause(self) -> typing.Optional[jsii.Number]:
+            '''Specifies the number of seconds an Aurora Serverless v2 DB instance must be idle before Aurora attempts to automatically pause it.
+
+            Specify a value between 300 seconds (five minutes) and 86,400 seconds (one day). The default is 300 seconds.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-serverlessv2scalingconfiguration.html#cfn-rds-dbcluster-serverlessv2scalingconfiguration-secondsuntilautopause
+            '''
+            result = self._values.get("seconds_until_auto_pause")
+            return typing.cast(typing.Optional[jsii.Number], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -7070,6 +7109,7 @@ class CfnDBClusterParameterGroupProps:
         "backup_retention_period": "backupRetentionPeriod",
         "cluster_scalability_type": "clusterScalabilityType",
         "copy_tags_to_snapshot": "copyTagsToSnapshot",
+        "database_insights_mode": "databaseInsightsMode",
         "database_name": "databaseName",
         "db_cluster_identifier": "dbClusterIdentifier",
         "db_cluster_instance_class": "dbClusterInstanceClass",
@@ -7133,6 +7173,7 @@ class CfnDBClusterProps:
         backup_retention_period: typing.Optional[jsii.Number] = None,
         cluster_scalability_type: typing.Optional[builtins.str] = None,
         copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        database_insights_mode: typing.Optional[builtins.str] = None,
         database_name: typing.Optional[builtins.str] = None,
         db_cluster_identifier: typing.Optional[builtins.str] = None,
         db_cluster_instance_class: typing.Optional[builtins.str] = None,
@@ -7187,12 +7228,13 @@ class CfnDBClusterProps:
 
         :param allocated_storage: The amount of storage in gibibytes (GiB) to allocate to each DB instance in the Multi-AZ DB cluster. Valid for Cluster Type: Multi-AZ DB clusters only This setting is required to create a Multi-AZ DB cluster.
         :param associated_roles: Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other Amazon Web Services on your behalf. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param auto_minor_version_upgrade: Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically. Valid for Cluster Type: Multi-AZ DB clusters only
+        :param auto_minor_version_upgrade: Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster
         :param availability_zones: A list of Availability Zones (AZs) where instances in the DB cluster can be created. For information on AWS Regions and Availability Zones, see `Choosing the Regions and Availability Zones <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html>`_ in the *Amazon Aurora User Guide* . Valid for: Aurora DB clusters only
         :param backtrack_window: The target backtrack window, in seconds. To disable backtracking, set this value to ``0`` . Valid for Cluster Type: Aurora MySQL DB clusters only Default: ``0`` Constraints: - If specified, this value must be set to a number from 0 to 259,200 (72 hours).
         :param backup_retention_period: The number of days for which automated backups are retained. Default: 1 Constraints: - Must be a value from 1 to 35 Valid for: Aurora DB clusters and Multi-AZ DB clusters Default: - 1
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. When set to ``limitless`` , the cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities. When set to ``standard`` (the default), the cluster uses normal DB instance creation.
         :param copy_tags_to_snapshot: A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them. Valid for: Aurora DB clusters and Multi-AZ DB clusters
+        :param database_insights_mode: The mode of Database Insights to enable for the DB cluster. If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465. Valid for Cluster Type: Aurora DB clusters only
         :param database_name: The name of your database. If you don't provide a name, then Amazon RDS won't create a database in this DB cluster. For naming constraints, see `Naming Constraints <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Limits.html#RDS_Limits.Constraints>`_ in the *Amazon Aurora User Guide* . Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_identifier: The DB cluster identifier. This parameter is stored as a lowercase string. Constraints: - Must contain from 1 to 63 letters, numbers, or hyphens. - First character must be a letter. - Can't end with a hyphen or contain two consecutive hyphens. Example: ``my-cluster1`` Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param db_cluster_instance_class: The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge`` . Not all DB instance classes are available in all AWS Regions , or for all database engines. For the full list of DB instance classes and availability for your engine, see `DB instance class <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html>`_ in the *Amazon RDS User Guide* . This setting is required to create a Multi-AZ DB cluster. Valid for Cluster Type: Multi-AZ DB clusters only
@@ -7218,13 +7260,13 @@ class CfnDBClusterProps:
         :param manage_master_user_password: Specifies whether to manage the master user password with AWS Secrets Manager. For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.* Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Constraints: - Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified.
         :param master_username: The name of the master user for the DB cluster. .. epigraph:: If you specify the ``SourceDBClusterIdentifier`` , ``SnapshotIdentifier`` , or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param master_user_password: The master password for the DB instance. .. epigraph:: If you specify the ``SourceDBClusterIdentifier`` , ``SnapshotIdentifier`` , or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively. Valid for: Aurora DB clusters and Multi-AZ DB clusters
-        :param master_user_secret: The secret managed by RDS in AWS Secrets Manager for the master user password. For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
-        :param monitoring_interval: The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0`` . If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0`` . Valid for Cluster Type: Multi-AZ DB clusters only Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60`` Default: ``0``
-        :param monitoring_role_arn: The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess`` . For information on creating a monitoring role, see `Setting up and enabling Enhanced Monitoring <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling>`_ in the *Amazon RDS User Guide* . If ``MonitoringInterval`` is set to a value other than ``0`` , supply a ``MonitoringRoleArn`` value. Valid for Cluster Type: Multi-AZ DB clusters only
+        :param master_user_secret: The secret managed by RDS in AWS Secrets Manager for the master user password. .. epigraph:: When you restore a DB cluster from a snapshot, Amazon RDS generates a new secret instead of reusing the secret specified in the ``SecretArn`` property. This ensures that the restored DB cluster is securely managed with a dedicated secret. To maintain consistent integration with your application, you might need to update resource configurations to reference the newly created secret. For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
+        :param monitoring_interval: The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0`` . If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0`` . Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60`` Default: ``0``
+        :param monitoring_role_arn: The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess`` . For information on creating a monitoring role, see `Setting up and enabling Enhanced Monitoring <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling>`_ in the *Amazon RDS User Guide* . If ``MonitoringInterval`` is set to a value other than ``0`` , supply a ``MonitoringRoleArn`` value. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
         :param network_type: The network type of the DB cluster. Valid values: - ``IPV4`` - ``DUAL`` The network type is determined by the ``DBSubnetGroup`` specified for the DB cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols ( ``DUAL`` ). For more information, see `Working with a DB instance in a VPC <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html>`_ in the *Amazon Aurora User Guide.* Valid for: Aurora DB clusters only
-        :param performance_insights_enabled: Specifies whether to turn on Performance Insights for the DB cluster. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* . Valid for Cluster Type: Multi-AZ DB clusters only
-        :param performance_insights_kms_key_id: The AWS KMS key identifier for encryption of Performance Insights data. The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. If you don't specify a value for ``PerformanceInsightsKMSKeyId`` , then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account . Your AWS account has a different default KMS key for each AWS Region . Valid for Cluster Type: Multi-AZ DB clusters only
-        :param performance_insights_retention_period: The number of days to retain Performance Insights data. Valid for Cluster Type: Multi-AZ DB clusters only Valid Values: - ``7`` - *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31) - ``731`` Default: ``7`` days If you specify a retention period that isn't valid, such as ``94`` , Amazon RDS issues an error.
+        :param performance_insights_enabled: Specifies whether to turn on Performance Insights for the DB cluster. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* . Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
+        :param performance_insights_kms_key_id: The AWS KMS key identifier for encryption of Performance Insights data. The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. If you don't specify a value for ``PerformanceInsightsKMSKeyId`` , then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account . Your AWS account has a different default KMS key for each AWS Region . Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
+        :param performance_insights_retention_period: The number of days to retain Performance Insights data. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Valid Values: - ``7`` - *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31) - ``731`` Default: ``7`` days If you specify a retention period that isn't valid, such as ``94`` , Amazon RDS issues an error.
         :param port: The port number on which the DB instances in the DB cluster accept connections. Default: - When ``EngineMode`` is ``provisioned`` , ``3306`` (for both Aurora MySQL and Aurora PostgreSQL) - When ``EngineMode`` is ``serverless`` : - ``3306`` when ``Engine`` is ``aurora`` or ``aurora-mysql`` - ``5432`` when ``Engine`` is ``aurora-postgresql`` .. epigraph:: The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see `Port <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port>`_ for the AWS::RDS::DBInstance resource. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_backup_window: The daily time range during which automated backups are created. For more information, see `Backup Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow>`_ in the *Amazon Aurora User Guide.* Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes. Valid for: Aurora DB clusters and Multi-AZ DB clusters
         :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see `Adjusting the Preferred DB Cluster Maintenance Window <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora>`_ in the *Amazon Aurora User Guide.* Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun. Constraints: Minimum 30-minute window. Valid for: Aurora DB clusters and Multi-AZ DB clusters
@@ -7266,6 +7308,7 @@ class CfnDBClusterProps:
                 backup_retention_period=123,
                 cluster_scalability_type="clusterScalabilityType",
                 copy_tags_to_snapshot=False,
+                database_insights_mode="databaseInsightsMode",
                 database_name="databaseName",
                 db_cluster_identifier="dbClusterIdentifier",
                 db_cluster_instance_class="dbClusterInstanceClass",
@@ -7318,7 +7361,8 @@ class CfnDBClusterProps:
                 ),
                 serverless_v2_scaling_configuration=rds.CfnDBCluster.ServerlessV2ScalingConfigurationProperty(
                     max_capacity=123,
-                    min_capacity=123
+                    min_capacity=123,
+                    seconds_until_auto_pause=123
                 ),
                 snapshot_identifier="snapshotIdentifier",
                 source_db_cluster_identifier="sourceDbClusterIdentifier",
@@ -7343,6 +7387,7 @@ class CfnDBClusterProps:
             check_type(argname="argument backup_retention_period", value=backup_retention_period, expected_type=type_hints["backup_retention_period"])
             check_type(argname="argument cluster_scalability_type", value=cluster_scalability_type, expected_type=type_hints["cluster_scalability_type"])
             check_type(argname="argument copy_tags_to_snapshot", value=copy_tags_to_snapshot, expected_type=type_hints["copy_tags_to_snapshot"])
+            check_type(argname="argument database_insights_mode", value=database_insights_mode, expected_type=type_hints["database_insights_mode"])
             check_type(argname="argument database_name", value=database_name, expected_type=type_hints["database_name"])
             check_type(argname="argument db_cluster_identifier", value=db_cluster_identifier, expected_type=type_hints["db_cluster_identifier"])
             check_type(argname="argument db_cluster_instance_class", value=db_cluster_instance_class, expected_type=type_hints["db_cluster_instance_class"])
@@ -7409,6 +7454,8 @@ class CfnDBClusterProps:
             self._values["cluster_scalability_type"] = cluster_scalability_type
         if copy_tags_to_snapshot is not None:
             self._values["copy_tags_to_snapshot"] = copy_tags_to_snapshot
+        if database_insights_mode is not None:
+            self._values["database_insights_mode"] = database_insights_mode
         if database_name is not None:
             self._values["database_name"] = database_name
         if db_cluster_identifier is not None:
@@ -7544,7 +7591,7 @@ class CfnDBClusterProps:
 
         By default, minor engine upgrades are applied automatically.
 
-        Valid for Cluster Type: Multi-AZ DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-autominorversionupgrade
         '''
@@ -7626,6 +7673,19 @@ class CfnDBClusterProps:
         result = self._values.get("copy_tags_to_snapshot")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+    @builtins.property
+    def database_insights_mode(self) -> typing.Optional[builtins.str]:
+        '''The mode of Database Insights to enable for the DB cluster.
+
+        If you set this value to ``advanced`` , you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465.
+
+        Valid for Cluster Type: Aurora DB clusters only
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-databaseinsightsmode
+        '''
+        result = self._values.get("database_insights_mode")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def database_name(self) -> typing.Optional[builtins.str]:
         '''The name of your database.
@@ -8089,6 +8149,10 @@ class CfnDBClusterProps:
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBCluster.MasterUserSecretProperty]]:
         '''The secret managed by RDS in AWS Secrets Manager for the master user password.
 
+        .. epigraph::
+
+           When you restore a DB cluster from a snapshot, Amazon RDS generates a new secret instead of reusing the secret specified in the ``SecretArn`` property. This ensures that the restored DB cluster is securely managed with a dedicated secret. To maintain consistent integration with your application, you might need to update resource configurations to reference the newly created secret.
+
         For more information, see `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html>`_ in the *Amazon RDS User Guide* and `Password management with AWS Secrets Manager <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html>`_ in the *Amazon Aurora User Guide.*
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-masterusersecret
@@ -8104,7 +8168,7 @@ class CfnDBClusterProps:
 
         If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0`` .
 
-        Valid for Cluster Type: Multi-AZ DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
 
         Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``
 
@@ -8123,7 +8187,7 @@ class CfnDBClusterProps:
 
         If ``MonitoringInterval`` is set to a value other than ``0`` , supply a ``MonitoringRoleArn`` value.
 
-        Valid for Cluster Type: Multi-AZ DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-monitoringrolearn
         '''
@@ -8158,7 +8222,7 @@ class CfnDBClusterProps:
 
         For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* .
 
-        Valid for Cluster Type: Multi-AZ DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-performanceinsightsenabled
         '''
@@ -8173,7 +8237,7 @@ class CfnDBClusterProps:
 
         If you don't specify a value for ``PerformanceInsightsKMSKeyId`` , then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account . Your AWS account has a different default KMS key for each AWS Region .
 
-        Valid for Cluster Type: Multi-AZ DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-performanceinsightskmskeyid
         '''
@@ -8184,7 +8248,7 @@ class CfnDBClusterProps:
     def performance_insights_retention_period(self) -> typing.Optional[jsii.Number]:
         '''The number of days to retain Performance Insights data.
 
-        Valid for Cluster Type: Multi-AZ DB clusters only
+        Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
 
         Valid Values:
 
@@ -8620,6 +8684,7 @@ class CfnDBInstance(
             db_security_groups=["dbSecurityGroups"],
             db_snapshot_identifier="dbSnapshotIdentifier",
             db_subnet_group_name="dbSubnetGroupName",
+            db_system_id="dbSystemId",
             dedicated_log_volume=False,
             delete_automated_backups=False,
             deletion_protection=False,
@@ -8719,6 +8784,7 @@ class CfnDBInstance(
         db_security_groups: typing.Optional[typing.Sequence[builtins.str]] = None,
         db_snapshot_identifier: typing.Optional[builtins.str] = None,
         db_subnet_group_name: typing.Optional[builtins.str] = None,
+        db_system_id: typing.Optional[builtins.str] = None,
         dedicated_log_volume: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         delete_automated_backups: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -8801,6 +8867,7 @@ class CfnDBInstance(
         :param db_security_groups: A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template. If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups. .. epigraph:: If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations: - ``AllocatedStorage`` - ``AutoMinorVersionUpgrade`` - ``AvailabilityZone`` - ``BackupRetentionPeriod`` - ``CharacterSetName`` - ``DBInstanceClass`` - ``DBName`` - ``DBParameterGroupName`` - ``DBSecurityGroups`` - ``DBSubnetGroupName`` - ``Engine`` - ``EngineVersion`` - ``Iops`` - ``LicenseModel`` - ``MasterUsername`` - ``MasterUserPassword`` - ``MultiAZ`` - ``OptionGroupName`` - ``PreferredBackupWindow`` - ``PreferredMaintenanceWindow`` All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType`` , ``StorageEncrypted`` , or ``KmsKeyId`` . If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.
         :param db_snapshot_identifier: The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot. By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack. Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties. For information about the properties that you can specify, see the ``RestoreDBInstanceFromDBSnapshot`` action in the *Amazon RDS API Reference* . After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted. If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties: - ``CharacterSetName`` - ``DBClusterIdentifier`` - ``DBName`` - ``KmsKeyId`` - ``MasterUsername`` - ``MasterUserPassword`` - ``PromotionTier`` - ``SourceDBInstanceIdentifier`` - ``SourceRegion`` - ``StorageEncrypted`` (for an unencrypted snapshot) - ``Timezone`` *Amazon Aurora* Not applicable. Snapshot restore is managed by the DB cluster.
         :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If there's no DB subnet group, then the DB instance isn't a VPC DB instance. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
+        :param db_system_id: The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
         :param dedicated_log_volume: Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
         :param delete_automated_backups: A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted. *Amazon Aurora* Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted.
         :param deletion_protection: Specifies whether the DB instance has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection isn't enabled. For more information, see `Deleting a DB Instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html>`_ . This setting doesn't apply to Amazon Aurora DB instances. You can enable or disable deletion protection for the DB cluster. For more information, see ``CreateDBCluster`` . DB instances in a DB cluster can be deleted even when deletion protection is enabled for the DB cluster.
@@ -8885,6 +8952,7 @@ class CfnDBInstance(
             db_security_groups=db_security_groups,
             db_snapshot_identifier=db_snapshot_identifier,
             db_subnet_group_name=db_subnet_group_name,
+            db_system_id=db_system_id,
             dedicated_log_volume=dedicated_log_volume,
             delete_automated_backups=delete_automated_backups,
             deletion_protection=deletion_protection,
@@ -8992,6 +9060,20 @@ class CfnDBInstance(
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrCertificateDetailsValidTill"))
 
+    @builtins.property
+    @jsii.member(jsii_name="attrDatabaseInsightsMode")
+    def attr_database_insights_mode(self) -> builtins.str:
+        '''The mode of Database Insights to enable for the DB instance.
+
+        This setting only applies to Amazon Aurora DB instances.
+        .. epigraph::
+
+           Currently, this value is inherited from the DB cluster and can't be changed.
+
+        :cloudformationAttribute: DatabaseInsightsMode
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrDatabaseInsightsMode"))
+
     @builtins.property
     @jsii.member(jsii_name="attrDbInstanceArn")
     def attr_db_instance_arn(self) -> builtins.str:
@@ -9419,6 +9501,19 @@ class CfnDBInstance(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "dbSubnetGroupName", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="dbSystemId")
+    def db_system_id(self) -> typing.Optional[builtins.str]:
+        '''The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "dbSystemId"))
+
+    @db_system_id.setter
+    def db_system_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c2bcedc9b98a22e01ebba3d247528b50c6ecfcdf1d1d6193070deed3f0a91242)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "dbSystemId", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="dedicatedLogVolume")
     def dedicated_log_volume(
@@ -10663,6 +10758,7 @@ class CfnDBInstance(
         "db_security_groups": "dbSecurityGroups",
         "db_snapshot_identifier": "dbSnapshotIdentifier",
         "db_subnet_group_name": "dbSubnetGroupName",
+        "db_system_id": "dbSystemId",
         "dedicated_log_volume": "dedicatedLogVolume",
         "delete_automated_backups": "deleteAutomatedBackups",
         "deletion_protection": "deletionProtection",
@@ -10747,6 +10843,7 @@ class CfnDBInstanceProps:
         db_security_groups: typing.Optional[typing.Sequence[builtins.str]] = None,
         db_snapshot_identifier: typing.Optional[builtins.str] = None,
         db_subnet_group_name: typing.Optional[builtins.str] = None,
+        db_system_id: typing.Optional[builtins.str] = None,
         dedicated_log_volume: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         delete_automated_backups: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -10828,6 +10925,7 @@ class CfnDBInstanceProps:
         :param db_security_groups: A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template. If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups. .. epigraph:: If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations: - ``AllocatedStorage`` - ``AutoMinorVersionUpgrade`` - ``AvailabilityZone`` - ``BackupRetentionPeriod`` - ``CharacterSetName`` - ``DBInstanceClass`` - ``DBName`` - ``DBParameterGroupName`` - ``DBSecurityGroups`` - ``DBSubnetGroupName`` - ``Engine`` - ``EngineVersion`` - ``Iops`` - ``LicenseModel`` - ``MasterUsername`` - ``MasterUserPassword`` - ``MultiAZ`` - ``OptionGroupName`` - ``PreferredBackupWindow`` - ``PreferredMaintenanceWindow`` All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType`` , ``StorageEncrypted`` , or ``KmsKeyId`` . If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.
         :param db_snapshot_identifier: The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot. By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack. Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties. For information about the properties that you can specify, see the ``RestoreDBInstanceFromDBSnapshot`` action in the *Amazon RDS API Reference* . After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted. If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties: - ``CharacterSetName`` - ``DBClusterIdentifier`` - ``DBName`` - ``KmsKeyId`` - ``MasterUsername`` - ``MasterUserPassword`` - ``PromotionTier`` - ``SourceDBInstanceIdentifier`` - ``SourceRegion`` - ``StorageEncrypted`` (for an unencrypted snapshot) - ``Timezone`` *Amazon Aurora* Not applicable. Snapshot restore is managed by the DB cluster.
         :param db_subnet_group_name: A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. If there's no DB subnet group, then the DB instance isn't a VPC DB instance. For more information about using Amazon RDS in a VPC, see `Amazon VPC and Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.
+        :param db_system_id: The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
         :param dedicated_log_volume: Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
         :param delete_automated_backups: A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted. *Amazon Aurora* Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted.
         :param deletion_protection: Specifies whether the DB instance has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection isn't enabled. For more information, see `Deleting a DB Instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html>`_ . This setting doesn't apply to Amazon Aurora DB instances. You can enable or disable deletion protection for the DB cluster. For more information, see ``CreateDBCluster`` . DB instances in a DB cluster can be deleted even when deletion protection is enabled for the DB cluster.
@@ -10923,6 +11021,7 @@ class CfnDBInstanceProps:
                 db_security_groups=["dbSecurityGroups"],
                 db_snapshot_identifier="dbSnapshotIdentifier",
                 db_subnet_group_name="dbSubnetGroupName",
+                db_system_id="dbSystemId",
                 dedicated_log_volume=False,
                 delete_automated_backups=False,
                 deletion_protection=False,
@@ -11018,6 +11117,7 @@ class CfnDBInstanceProps:
             check_type(argname="argument db_security_groups", value=db_security_groups, expected_type=type_hints["db_security_groups"])
             check_type(argname="argument db_snapshot_identifier", value=db_snapshot_identifier, expected_type=type_hints["db_snapshot_identifier"])
             check_type(argname="argument db_subnet_group_name", value=db_subnet_group_name, expected_type=type_hints["db_subnet_group_name"])
+            check_type(argname="argument db_system_id", value=db_system_id, expected_type=type_hints["db_system_id"])
             check_type(argname="argument dedicated_log_volume", value=dedicated_log_volume, expected_type=type_hints["dedicated_log_volume"])
             check_type(argname="argument delete_automated_backups", value=delete_automated_backups, expected_type=type_hints["delete_automated_backups"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
@@ -11120,6 +11220,8 @@ class CfnDBInstanceProps:
             self._values["db_snapshot_identifier"] = db_snapshot_identifier
         if db_subnet_group_name is not None:
             self._values["db_subnet_group_name"] = db_subnet_group_name
+        if db_system_id is not None:
+            self._values["db_system_id"] = db_system_id
         if dedicated_log_volume is not None:
             self._values["dedicated_log_volume"] = dedicated_log_volume
         if delete_automated_backups is not None:
@@ -11733,6 +11835,17 @@ class CfnDBInstanceProps:
         result = self._values.get("db_subnet_group_name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def db_system_id(self) -> typing.Optional[builtins.str]:
+        '''The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files.
+
+        In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB`` . The Oracle SID is also the name of your CDB.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#cfn-rds-dbinstance-dbsystemid
+        '''
+        result = self._values.get("db_system_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def dedicated_log_volume(
         self,
@@ -30488,6 +30601,12 @@ class MariaDbEngineVersion(
         '''Version "10.11" (only a major version, without a specific minor version).'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_11"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_11_10")
+    def VER_10_11_10(cls) -> "MariaDbEngineVersion":
+        '''Version "10.11.10".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_11_10"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_11_4")
     def VER_10_11_4(cls) -> "MariaDbEngineVersion":
@@ -31087,6 +31206,12 @@ class MariaDbEngineVersion(
         '''Version "10.5.26".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_5_26"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_5_27")
+    def VER_10_5_27(cls) -> "MariaDbEngineVersion":
+        '''Version "10.5.27".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_5_27"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_5_8")
     def VER_10_5_8(cls) -> "MariaDbEngineVersion":
@@ -31190,6 +31315,12 @@ class MariaDbEngineVersion(
         '''Version "10.6.19".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_6_19"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_10_6_20")
+    def VER_10_6_20(cls) -> "MariaDbEngineVersion":
+        '''Version "10.6.20".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_10_6_20"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_10_6_5")
     def VER_10_6_5(cls) -> "MariaDbEngineVersion":
@@ -31229,6 +31360,12 @@ class MariaDbEngineVersion(
         '''Version "11.4.3".'''
         return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_11_4_3"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_11_4_4")
+    def VER_11_4_4(cls) -> "MariaDbEngineVersion":
+        '''Version "11.4.4".'''
+        return typing.cast("MariaDbEngineVersion", jsii.sget(cls, "VER_11_4_4"))
+
     @builtins.property
     @jsii.member(jsii_name="mariaDbFullVersion")
     def maria_db_full_version(self) -> builtins.str:
@@ -34643,6 +34780,12 @@ class PostgresEngineVersion(
         '''Version "11.22-rds.20240808".'''
         return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_11_22_RDS_20240808"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_11_22_RDS_20241121")
+    def VER_11_22_RDS_20241121(cls) -> "PostgresEngineVersion":
+        '''Version "11.22-RDS.20241121".'''
+        return typing.cast("PostgresEngineVersion", jsii.sget(cls, "VER_11_22_RDS_20241121"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_11_4")
     def VER_11_4(cls) -> "PostgresEngineVersion":
@@ -46272,6 +46415,7 @@ def _typecheckingstub__1eb14b9dcc306eabcc2963c7b6ef9b87bf8d616bb5691dbc6656242be
     backup_retention_period: typing.Optional[jsii.Number] = None,
     cluster_scalability_type: typing.Optional[builtins.str] = None,
     copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    database_insights_mode: typing.Optional[builtins.str] = None,
     database_name: typing.Optional[builtins.str] = None,
     db_cluster_identifier: typing.Optional[builtins.str] = None,
     db_cluster_instance_class: typing.Optional[builtins.str] = None,
@@ -46385,6 +46529,12 @@ def _typecheckingstub__7aaebe942bef486fa4f2def6b116a47a3513d6909fa29d9fdd20eb31f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__95529055a06b2a5642399d211890b3949094262771feb4c9ba4efe7d394d8efa(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__133622b74470290a34fd20f1677f713d047e14ddfc8138b0693817c347f0904f(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -46726,6 +46876,7 @@ def _typecheckingstub__5a6717af18f7b2b042b74ca423a540eb39f5ae817292b338733c6a3ce
     *,
     max_capacity: typing.Optional[jsii.Number] = None,
     min_capacity: typing.Optional[jsii.Number] = None,
+    seconds_until_auto_pause: typing.Optional[jsii.Number] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -46806,6 +46957,7 @@ def _typecheckingstub__aaf089104646bb0ea95e48cd2107d642585c3eb3785a21112fc029b15
     backup_retention_period: typing.Optional[jsii.Number] = None,
     cluster_scalability_type: typing.Optional[builtins.str] = None,
     copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    database_insights_mode: typing.Optional[builtins.str] = None,
     database_name: typing.Optional[builtins.str] = None,
     db_cluster_identifier: typing.Optional[builtins.str] = None,
     db_cluster_instance_class: typing.Optional[builtins.str] = None,
@@ -46886,6 +47038,7 @@ def _typecheckingstub__255b0779ca741853674876540bf77279f6293bea05de2cd18724d2b92
     db_security_groups: typing.Optional[typing.Sequence[builtins.str]] = None,
     db_snapshot_identifier: typing.Optional[builtins.str] = None,
     db_subnet_group_name: typing.Optional[builtins.str] = None,
+    db_system_id: typing.Optional[builtins.str] = None,
     dedicated_log_volume: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     delete_automated_backups: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -47095,6 +47248,12 @@ def _typecheckingstub__ee9b5bb70dbab22ab4481a77c04dc86a6cae16b4c7d30ccb17a77b55d
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__c2bcedc9b98a22e01ebba3d247528b50c6ecfcdf1d1d6193070deed3f0a91242(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7cd09d7a96adc908e67e26f47cc2b3781666622d7377834d51fb7cb5e0371bcf(
     value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
 ) -> None:
@@ -47491,6 +47650,7 @@ def _typecheckingstub__3bddb1be0bd1f1699e3a084c5859d94d8879ff15011f2f2eaac29ec16
     db_security_groups: typing.Optional[typing.Sequence[builtins.str]] = None,
     db_snapshot_identifier: typing.Optional[builtins.str] = None,
     db_subnet_group_name: typing.Optional[builtins.str] = None,
+    db_system_id: typing.Optional[builtins.str] = None,
     dedicated_log_volume: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     delete_automated_backups: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,