aws-cdk-lib 2.178.2__py3-none-any.whl → 2.179.0__py3-none-any.whl

aws_cdk/aws_rds/__init__.py

@@ -1602,6 +1602,34 @@ To see Amazon Aurora DB engines that support Performance Insights, see [Amazon A
 
 For more information about Performance Insights, see [Monitoring DB load with Performance Insights on Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html).
 
+## Database Insights
+
+The standard mode of Database Insights is enabled by default for Aurora databases.
+
+You can enhance the monitoring of your Aurora databases by enabling the advanced mode of Database Insights.
+
+To control Database Insights mode, use the `databaseInsightsMode` property:
+
+```python
+# vpc: ec2.Vpc
+
+rds.DatabaseCluster(self, "Database",
+    engine=rds.DatabaseClusterEngine.AURORA,
+    vpc=vpc,
+    # If you enable the advanced mode of Database Insights,
+    # Performance Insights is enabled and you must set the `performanceInsightRetention` to 465(15 months).
+    database_insights_mode=rds.DatabaseInsightsMode.ADVANCED,
+    performance_insight_retention=rds.PerformanceInsightRetention.MONTHS_15,
+    writer=rds.ClusterInstance.provisioned("Writer",
+        instance_type=ec2.InstanceType.of(ec2.InstanceClass.R7G, ec2.InstanceSize.LARGE)
+    )
+)
+```
+
+Note: Database Insights are only supported for Amazon Aurora MySQL and Amazon Aurora PostgreSQL clusters.
+
+> Visit [CloudWatch Database Insights](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Database-Insights.html) for more details.
+
 ## Enhanced Monitoring
 
 With [Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling), you can monitor the operating system of your DB instance in real time.
@@ -20802,6 +20830,7 @@ class DatabaseClusterEngine(
         "cluster_scalability_type": "clusterScalabilityType",
         "copy_tags_to_snapshot": "copyTagsToSnapshot",
         "credentials": "credentials",
+        "database_insights_mode": "databaseInsightsMode",
         "default_database_name": "defaultDatabaseName",
         "deletion_protection": "deletionProtection",
         "domain": "domain",
@@ -20860,6 +20889,7 @@ class DatabaseClusterFromSnapshotProps:
         cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
+        database_insights_mode: typing.Optional["DatabaseInsightsMode"] = None,
         default_database_name: typing.Optional[builtins.str] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
@@ -20915,6 +20945,7 @@ class DatabaseClusterFromSnapshotProps:
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: (deprecated) Credentials for the administrative user. Note - using this prop only works with ``Credentials.fromPassword()`` with the username of the snapshot, ``Credentials.fromUsername()`` with the username and password of the snapshot or ``Credentials.fromSecret()`` with a secret containing the username and password of the snapshot. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use ``snapshotCredentials`` for the correct behavior.
+        :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
@@ -20922,7 +20953,7 @@ class DatabaseClusterFromSnapshotProps:
         :param enable_cluster_level_enhanced_monitoring: Whether to enable enhanced monitoring at the cluster level. If set to true, ``monitoringInterval`` and ``monitoringRole`` are applied to not the instances, but the cluster. ``monitoringInterval`` is required to be set if ``enableClusterLevelEnhancedMonitoring`` is set to true. Default: - When the ``monitoringInterval`` is set, enhanced monitoring is enabled for each instance.
         :param enable_data_api: Whether to enable the Data API for the cluster. Default: - false
         :param enable_local_write_forwarding: Whether read replicas can forward write operations to the writer DB instance in the DB cluster. This setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4 or higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14). Default: false
-        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
+        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set, or ``databaseInsightsMode`` is set to ``DatabaseInsightsMode.ADVANCED``.
         :param iam_authentication: Whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. Default: false
         :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Default: - clusterIdentifier is used with the word "Instance" appended. If clusterIdentifier is not provided, the identifier is automatically generated.
         :param instance_props: (deprecated) Settings for the individual instances that are launched.
@@ -20934,7 +20965,7 @@ class DatabaseClusterFromSnapshotProps:
         :param parameter_group: Additional parameters to pass to the database engine. Default: - No parameter group.
         :param parameters: The parameters in the DBClusterParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBClusterParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
-        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. If you set ``databaseInsightsMode`` to ``DatabaseInsightsMode.ADVANCED``, you must set this property to ``PerformanceInsightRetention.MONTHS_15``. Default: - 7
         :param port: What port to listen on. Default: - The default for the engine is used.
         :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param readers: A list of instances to create as cluster reader instances. Default: - no readers are created. The cluster will have a single writer/reader
@@ -20989,6 +21020,7 @@ class DatabaseClusterFromSnapshotProps:
             check_type(argname="argument cluster_scalability_type", value=cluster_scalability_type, expected_type=type_hints["cluster_scalability_type"])
             check_type(argname="argument copy_tags_to_snapshot", value=copy_tags_to_snapshot, expected_type=type_hints["copy_tags_to_snapshot"])
             check_type(argname="argument credentials", value=credentials, expected_type=type_hints["credentials"])
+            check_type(argname="argument database_insights_mode", value=database_insights_mode, expected_type=type_hints["database_insights_mode"])
             check_type(argname="argument default_database_name", value=default_database_name, expected_type=type_hints["default_database_name"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
@@ -21054,6 +21086,8 @@ class DatabaseClusterFromSnapshotProps:
             self._values["copy_tags_to_snapshot"] = copy_tags_to_snapshot
         if credentials is not None:
             self._values["credentials"] = credentials
+        if database_insights_mode is not None:
+            self._values["database_insights_mode"] = database_insights_mode
         if default_database_name is not None:
             self._values["default_database_name"] = default_database_name
         if deletion_protection is not None:
@@ -21285,6 +21319,15 @@ class DatabaseClusterFromSnapshotProps:
         result = self._values.get("credentials")
         return typing.cast(typing.Optional[Credentials], result)
 
+    @builtins.property
+    def database_insights_mode(self) -> typing.Optional["DatabaseInsightsMode"]:
+        '''The database insights mode.
+
+        :default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
+        '''
+        result = self._values.get("database_insights_mode")
+        return typing.cast(typing.Optional["DatabaseInsightsMode"], result)
+
     @builtins.property
     def default_database_name(self) -> typing.Optional[builtins.str]:
         '''Name of a database which is automatically created inside the cluster.
@@ -21371,7 +21414,10 @@ class DatabaseClusterFromSnapshotProps:
     def enable_performance_insights(self) -> typing.Optional[builtins.bool]:
         '''Whether to enable Performance Insights for the DB cluster.
 
-        :default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
+        :default:
+
+        - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set,
+        or ``databaseInsightsMode`` is set to ``DatabaseInsightsMode.ADVANCED``.
         '''
         result = self._values.get("enable_performance_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -21503,7 +21549,9 @@ class DatabaseClusterFromSnapshotProps:
     ) -> typing.Optional["PerformanceInsightRetention"]:
         '''The amount of time, in days, to retain Performance Insights data.
 
-        :default: 7
+        If you set ``databaseInsightsMode`` to ``DatabaseInsightsMode.ADVANCED``, you must set this property to ``PerformanceInsightRetention.MONTHS_15``.
+
+        :default: - 7
         '''
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional["PerformanceInsightRetention"], result)
@@ -21762,6 +21810,7 @@ class DatabaseClusterFromSnapshotProps:
         "cluster_scalability_type": "clusterScalabilityType",
         "copy_tags_to_snapshot": "copyTagsToSnapshot",
         "credentials": "credentials",
+        "database_insights_mode": "databaseInsightsMode",
         "default_database_name": "defaultDatabaseName",
         "deletion_protection": "deletionProtection",
         "domain": "domain",
@@ -21818,6 +21867,7 @@ class DatabaseClusterProps:
         cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
+        database_insights_mode: typing.Optional["DatabaseInsightsMode"] = None,
         default_database_name: typing.Optional[builtins.str] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
@@ -21871,6 +21921,7 @@ class DatabaseClusterProps:
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: Credentials for the administrative user. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password
+        :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
@@ -21878,7 +21929,7 @@ class DatabaseClusterProps:
         :param enable_cluster_level_enhanced_monitoring: Whether to enable enhanced monitoring at the cluster level. If set to true, ``monitoringInterval`` and ``monitoringRole`` are applied to not the instances, but the cluster. ``monitoringInterval`` is required to be set if ``enableClusterLevelEnhancedMonitoring`` is set to true. Default: - When the ``monitoringInterval`` is set, enhanced monitoring is enabled for each instance.
         :param enable_data_api: Whether to enable the Data API for the cluster. Default: - false
         :param enable_local_write_forwarding: Whether read replicas can forward write operations to the writer DB instance in the DB cluster. This setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4 or higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14). Default: false
-        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
+        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set, or ``databaseInsightsMode`` is set to ``DatabaseInsightsMode.ADVANCED``.
         :param iam_authentication: Whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. Default: false
         :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Default: - clusterIdentifier is used with the word "Instance" appended. If clusterIdentifier is not provided, the identifier is automatically generated.
         :param instance_props: (deprecated) Settings for the individual instances that are launched.
@@ -21890,7 +21941,7 @@ class DatabaseClusterProps:
         :param parameter_group: Additional parameters to pass to the database engine. Default: - No parameter group.
         :param parameters: The parameters in the DBClusterParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBClusterParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
-        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. If you set ``databaseInsightsMode`` to ``DatabaseInsightsMode.ADVANCED``, you must set this property to ``PerformanceInsightRetention.MONTHS_15``. Default: - 7
         :param port: What port to listen on. Default: - The default for the engine is used.
         :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param readers: A list of instances to create as cluster reader instances. Default: - no readers are created. The cluster will have a single writer/reader
@@ -21918,17 +21969,17 @@ class DatabaseClusterProps:
             
             cluster = rds.DatabaseCluster(self, "Database",
                 engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
+                credentials=rds.Credentials.from_generated_secret("clusteradmin"),  # Optional - will default to 'admin' username and generated password
                 writer=rds.ClusterInstance.provisioned("writer",
-                    instance_type=ec2.InstanceType.of(ec2.InstanceClass.R6G, ec2.InstanceSize.XLARGE4)
+                    publicly_accessible=False
                 ),
-                serverless_v2_min_capacity=6.5,
-                serverless_v2_max_capacity=64,
                 readers=[
-                    # will be put in promotion tier 1 and will scale with the writer
-                    rds.ClusterInstance.serverless_v2("reader1", scale_with_writer=True),
-                    # will be put in promotion tier 2 and will not scale with the writer
+                    rds.ClusterInstance.provisioned("reader1", promotion_tier=1),
                     rds.ClusterInstance.serverless_v2("reader2")
                 ],
+                vpc_subnets=ec2.SubnetSelection(
+                    subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
+                ),
                 vpc=vpc
             )
         '''
@@ -21952,6 +22003,7 @@ class DatabaseClusterProps:
             check_type(argname="argument cluster_scalability_type", value=cluster_scalability_type, expected_type=type_hints["cluster_scalability_type"])
             check_type(argname="argument copy_tags_to_snapshot", value=copy_tags_to_snapshot, expected_type=type_hints["copy_tags_to_snapshot"])
             check_type(argname="argument credentials", value=credentials, expected_type=type_hints["credentials"])
+            check_type(argname="argument database_insights_mode", value=database_insights_mode, expected_type=type_hints["database_insights_mode"])
             check_type(argname="argument default_database_name", value=default_database_name, expected_type=type_hints["default_database_name"])
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument domain", value=domain, expected_type=type_hints["domain"])
@@ -22015,6 +22067,8 @@ class DatabaseClusterProps:
             self._values["copy_tags_to_snapshot"] = copy_tags_to_snapshot
         if credentials is not None:
             self._values["credentials"] = credentials
+        if database_insights_mode is not None:
+            self._values["database_insights_mode"] = database_insights_mode
         if default_database_name is not None:
             self._values["default_database_name"] = default_database_name
         if deletion_protection is not None:
@@ -22221,6 +22275,15 @@ class DatabaseClusterProps:
         result = self._values.get("credentials")
         return typing.cast(typing.Optional[Credentials], result)
 
+    @builtins.property
+    def database_insights_mode(self) -> typing.Optional["DatabaseInsightsMode"]:
+        '''The database insights mode.
+
+        :default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
+        '''
+        result = self._values.get("database_insights_mode")
+        return typing.cast(typing.Optional["DatabaseInsightsMode"], result)
+
     @builtins.property
     def default_database_name(self) -> typing.Optional[builtins.str]:
         '''Name of a database which is automatically created inside the cluster.
@@ -22307,7 +22370,10 @@ class DatabaseClusterProps:
     def enable_performance_insights(self) -> typing.Optional[builtins.bool]:
         '''Whether to enable Performance Insights for the DB cluster.
 
-        :default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
+        :default:
+
+        - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set,
+        or ``databaseInsightsMode`` is set to ``DatabaseInsightsMode.ADVANCED``.
         '''
         result = self._values.get("enable_performance_insights")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -22439,7 +22505,9 @@ class DatabaseClusterProps:
     ) -> typing.Optional["PerformanceInsightRetention"]:
         '''The amount of time, in days, to retain Performance Insights data.
 
-        :default: 7
+        If you set ``databaseInsightsMode`` to ``DatabaseInsightsMode.ADVANCED``, you must set this property to ``PerformanceInsightRetention.MONTHS_15``.
+
+        :default: - 7
         '''
         result = self._values.get("performance_insight_retention")
         return typing.cast(typing.Optional["PerformanceInsightRetention"], result)
@@ -22670,6 +22738,35 @@ class DatabaseClusterProps:
         )
 
 
+@jsii.enum(jsii_type="aws-cdk-lib.aws_rds.DatabaseInsightsMode")
+class DatabaseInsightsMode(enum.Enum):
+    '''The database insights mode of the Aurora DB cluster.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # vpc: ec2.Vpc
+        
+        rds.DatabaseCluster(self, "Database",
+            engine=rds.DatabaseClusterEngine.AURORA,
+            vpc=vpc,
+            # If you enable the advanced mode of Database Insights,
+            # Performance Insights is enabled and you must set the `performanceInsightRetention` to 465(15 months).
+            database_insights_mode=rds.DatabaseInsightsMode.ADVANCED,
+            performance_insight_retention=rds.PerformanceInsightRetention.MONTHS_15,
+            writer=rds.ClusterInstance.provisioned("Writer",
+                instance_type=ec2.InstanceType.of(ec2.InstanceClass.R7G, ec2.InstanceSize.LARGE)
+            )
+        )
+    '''
+
+    STANDARD = "STANDARD"
+    '''Standard mode.'''
+    ADVANCED = "ADVANCED"
+    '''Advanced mode.'''
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_rds.DatabaseInstanceAttributes",
     jsii_struct_bases=[],
@@ -33766,6 +33863,12 @@ class OracleEngineVersion(
         '''Version "19.0.0.0.ru-2024-10.rur-2024-10.r1".'''
         return typing.cast("OracleEngineVersion", jsii.sget(cls, "VER_19_0_0_0_2024_10_R1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_19_0_0_0_2025_01_R1")
+    def VER_19_0_0_0_2025_01_R1(cls) -> "OracleEngineVersion":
+        '''Version "19.0.0.0.ru-2025-01.rur-2025-01.r1".'''
+        return typing.cast("OracleEngineVersion", jsii.sget(cls, "VER_19_0_0_0_2025_01_R1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_21")
     def VER_21(cls) -> "OracleEngineVersion":
@@ -33850,6 +33953,12 @@ class OracleEngineVersion(
         '''Version "21.0.0.0.ru-2024-10.rur-2024-10.r1".'''
         return typing.cast("OracleEngineVersion", jsii.sget(cls, "VER_21_0_0_0_2024_10_R1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_21_0_0_0_2025_01_R1")
+    def VER_21_0_0_0_2025_01_R1(cls) -> "OracleEngineVersion":
+        '''Version "21.0.0.0.ru-2025-01.rur-2025-01.r1".'''
+        return typing.cast("OracleEngineVersion", jsii.sget(cls, "VER_21_0_0_0_2025_01_R1"))
+
     @builtins.property
     @jsii.member(jsii_name="oracleFullVersion")
     def oracle_full_version(self) -> builtins.str:
@@ -39652,6 +39761,12 @@ class SqlServerEngineVersion(
         '''Version "15.00.4410.1.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_15_00_4410_1_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_15_00_4415_2_V1")
+    def VER_15_00_4415_2_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "15.00.4415.2.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_15_00_4415_2_V1"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_16")
     def VER_16(cls) -> "SqlServerEngineVersion":
@@ -39724,6 +39839,12 @@ class SqlServerEngineVersion(
         '''Version "16.00.4165.4.v1".'''
         return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4165_4_V1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_16_00_4175_1_V1")
+    def VER_16_00_4175_1_V1(cls) -> "SqlServerEngineVersion":
+        '''Version "16.00.4175.1.v1".'''
+        return typing.cast("SqlServerEngineVersion", jsii.sget(cls, "VER_16_00_4175_1_V1"))
+
     @builtins.property
     @jsii.member(jsii_name="sqlServerFullVersion")
     def sql_server_full_version(self) -> builtins.str:
@@ -41456,6 +41577,7 @@ class DatabaseClusterFromSnapshot(
         cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
+        database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
         default_database_name: typing.Optional[builtins.str] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
@@ -41512,6 +41634,7 @@ class DatabaseClusterFromSnapshot(
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: (deprecated) Credentials for the administrative user. Note - using this prop only works with ``Credentials.fromPassword()`` with the username of the snapshot, ``Credentials.fromUsername()`` with the username and password of the snapshot or ``Credentials.fromSecret()`` with a secret containing the username and password of the snapshot. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password that **will not be applied** to the cluster, use ``snapshotCredentials`` for the correct behavior.
+        :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
@@ -41519,7 +41642,7 @@ class DatabaseClusterFromSnapshot(
         :param enable_cluster_level_enhanced_monitoring: Whether to enable enhanced monitoring at the cluster level. If set to true, ``monitoringInterval`` and ``monitoringRole`` are applied to not the instances, but the cluster. ``monitoringInterval`` is required to be set if ``enableClusterLevelEnhancedMonitoring`` is set to true. Default: - When the ``monitoringInterval`` is set, enhanced monitoring is enabled for each instance.
         :param enable_data_api: Whether to enable the Data API for the cluster. Default: - false
         :param enable_local_write_forwarding: Whether read replicas can forward write operations to the writer DB instance in the DB cluster. This setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4 or higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14). Default: false
-        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
+        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set, or ``databaseInsightsMode`` is set to ``DatabaseInsightsMode.ADVANCED``.
         :param iam_authentication: Whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. Default: false
         :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Default: - clusterIdentifier is used with the word "Instance" appended. If clusterIdentifier is not provided, the identifier is automatically generated.
         :param instance_props: (deprecated) Settings for the individual instances that are launched.
@@ -41531,7 +41654,7 @@ class DatabaseClusterFromSnapshot(
         :param parameter_group: Additional parameters to pass to the database engine. Default: - No parameter group.
         :param parameters: The parameters in the DBClusterParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBClusterParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
-        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. If you set ``databaseInsightsMode`` to ``DatabaseInsightsMode.ADVANCED``, you must set this property to ``PerformanceInsightRetention.MONTHS_15``. Default: - 7
         :param port: What port to listen on. Default: - The default for the engine is used.
         :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param readers: A list of instances to create as cluster reader instances. Default: - no readers are created. The cluster will have a single writer/reader
@@ -41570,6 +41693,7 @@ class DatabaseClusterFromSnapshot(
             cluster_scalability_type=cluster_scalability_type,
             copy_tags_to_snapshot=copy_tags_to_snapshot,
             credentials=credentials,
+            database_insights_mode=database_insights_mode,
             default_database_name=default_database_name,
             deletion_protection=deletion_protection,
             domain=domain,
@@ -41884,6 +42008,12 @@ class DatabaseClusterFromSnapshot(
         '''The VPC network to place the cluster in.'''
         return typing.cast(_IVpc_f30d5663, jsii.get(self, "vpc"))
 
+    @builtins.property
+    @jsii.member(jsii_name="databaseInsightsMode")
+    def database_insights_mode(self) -> typing.Optional[DatabaseInsightsMode]:
+        '''The database insights mode.'''
+        return typing.cast(typing.Optional[DatabaseInsightsMode], jsii.get(self, "databaseInsightsMode"))
+
     @builtins.property
     @jsii.member(jsii_name="engine")
     def engine(self) -> typing.Optional["IClusterEngine"]:
@@ -45518,17 +45648,17 @@ class DatabaseCluster(
         
         cluster = rds.DatabaseCluster(self, "Database",
             engine=rds.DatabaseClusterEngine.aurora_mysql(version=rds.AuroraMysqlEngineVersion.VER_3_01_0),
+            credentials=rds.Credentials.from_generated_secret("clusteradmin"),  # Optional - will default to 'admin' username and generated password
             writer=rds.ClusterInstance.provisioned("writer",
-                instance_type=ec2.InstanceType.of(ec2.InstanceClass.R6G, ec2.InstanceSize.XLARGE4)
+                publicly_accessible=False
             ),
-            serverless_v2_min_capacity=6.5,
-            serverless_v2_max_capacity=64,
             readers=[
-                # will be put in promotion tier 1 and will scale with the writer
-                rds.ClusterInstance.serverless_v2("reader1", scale_with_writer=True),
-                # will be put in promotion tier 2 and will not scale with the writer
+                rds.ClusterInstance.provisioned("reader1", promotion_tier=1),
                 rds.ClusterInstance.serverless_v2("reader2")
             ],
+            vpc_subnets=ec2.SubnetSelection(
+                subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
+            ),
             vpc=vpc
         )
     '''
@@ -45550,6 +45680,7 @@ class DatabaseCluster(
         cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
         copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
         credentials: typing.Optional[Credentials] = None,
+        database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
         default_database_name: typing.Optional[builtins.str] = None,
         deletion_protection: typing.Optional[builtins.bool] = None,
         domain: typing.Optional[builtins.str] = None,
@@ -45604,6 +45735,7 @@ class DatabaseCluster(
         :param cluster_scalability_type: Specifies the scalability mode of the Aurora DB cluster. Set LIMITLESS if you want to use a limitless database; otherwise, set it to STANDARD. Default: ClusterScalabilityType.STANDARD
         :param copy_tags_to_snapshot: Whether to copy tags to the snapshot when a snapshot is created. Default: - true
         :param credentials: Credentials for the administrative user. Default: - A username of 'admin' (or 'postgres' for PostgreSQL) and SecretsManager-generated password
+        :param database_insights_mode: The database insights mode. Default: - DatabaseInsightsMode.STANDARD when performance insights are enabled and Amazon Aurora engine is used, otherwise not set.
         :param default_database_name: Name of a database which is automatically created inside the cluster. Default: - Database is not created in cluster.
         :param deletion_protection: Indicates whether the DB cluster should have deletion protection enabled. Default: - true if ``removalPolicy`` is RETAIN, ``undefined`` otherwise, which will not enable deletion protection. To disable deletion protection after it has been enabled, you must explicitly set this value to ``false``.
         :param domain: Directory ID for associating the DB cluster with a specific Active Directory. Necessary for enabling Kerberos authentication. If specified, the DB cluster joins the given Active Directory, enabling Kerberos authentication. If not specified, the DB cluster will not be associated with any Active Directory, and Kerberos authentication will not be enabled. Default: - DB cluster is not associated with an Active Directory; Kerberos authentication is not enabled.
@@ -45611,7 +45743,7 @@ class DatabaseCluster(
         :param enable_cluster_level_enhanced_monitoring: Whether to enable enhanced monitoring at the cluster level. If set to true, ``monitoringInterval`` and ``monitoringRole`` are applied to not the instances, but the cluster. ``monitoringInterval`` is required to be set if ``enableClusterLevelEnhancedMonitoring`` is set to true. Default: - When the ``monitoringInterval`` is set, enhanced monitoring is enabled for each instance.
         :param enable_data_api: Whether to enable the Data API for the cluster. Default: - false
         :param enable_local_write_forwarding: Whether read replicas can forward write operations to the writer DB instance in the DB cluster. This setting can only be enabled for Aurora MySQL 3.04 or higher, and for Aurora PostgreSQL 16.4 or higher (for version 16), 15.8 or higher (for version 15), and 14.13 or higher (for version 14). Default: false
-        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set.
+        :param enable_performance_insights: Whether to enable Performance Insights for the DB cluster. Default: - false, unless ``performanceInsightRetention`` or ``performanceInsightEncryptionKey`` is set, or ``databaseInsightsMode`` is set to ``DatabaseInsightsMode.ADVANCED``.
         :param iam_authentication: Whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. Default: false
         :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Default: - clusterIdentifier is used with the word "Instance" appended. If clusterIdentifier is not provided, the identifier is automatically generated.
         :param instance_props: (deprecated) Settings for the individual instances that are launched.
@@ -45623,7 +45755,7 @@ class DatabaseCluster(
         :param parameter_group: Additional parameters to pass to the database engine. Default: - No parameter group.
         :param parameters: The parameters in the DBClusterParameterGroup to create automatically. You can only specify parameterGroup or parameters but not both. You need to use a versioned engine to auto-generate a DBClusterParameterGroup. Default: - None
         :param performance_insight_encryption_key: The AWS KMS key for encryption of Performance Insights data. Default: - default master key
-        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. Default: 7
+        :param performance_insight_retention: The amount of time, in days, to retain Performance Insights data. If you set ``databaseInsightsMode`` to ``DatabaseInsightsMode.ADVANCED``, you must set this property to ``PerformanceInsightRetention.MONTHS_15``. Default: - 7
         :param port: What port to listen on. Default: - The default for the engine is used.
         :param preferred_maintenance_window: A preferred maintenance window day/time range. Should be specified as a range ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). Example: 'Sun:23:45-Mon:00:15' Default: - 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
         :param readers: A list of instances to create as cluster reader instances. Default: - no readers are created. The cluster will have a single writer/reader
@@ -45660,6 +45792,7 @@ class DatabaseCluster(
             cluster_scalability_type=cluster_scalability_type,
             copy_tags_to_snapshot=copy_tags_to_snapshot,
             credentials=credentials,
+            database_insights_mode=database_insights_mode,
             default_database_name=default_database_name,
             deletion_protection=deletion_protection,
             domain=domain,
@@ -46028,6 +46161,12 @@ class DatabaseCluster(
         '''The VPC network to place the cluster in.'''
         return typing.cast(_IVpc_f30d5663, jsii.get(self, "vpc"))
 
+    @builtins.property
+    @jsii.member(jsii_name="databaseInsightsMode")
+    def database_insights_mode(self) -> typing.Optional[DatabaseInsightsMode]:
+        '''The database insights mode.'''
+        return typing.cast(typing.Optional[DatabaseInsightsMode], jsii.get(self, "databaseInsightsMode"))
+
     @builtins.property
     @jsii.member(jsii_name="engine")
     def engine(self) -> typing.Optional[IClusterEngine]:
@@ -46566,6 +46705,7 @@ __all__ = [
     "DatabaseClusterFromSnapshot",
     "DatabaseClusterFromSnapshotProps",
     "DatabaseClusterProps",
+    "DatabaseInsightsMode",
     "DatabaseInstance",
     "DatabaseInstanceAttributes",
     "DatabaseInstanceBase",
@@ -49337,6 +49477,7 @@ def _typecheckingstub__1e44b5aef872ca17869a17181382f06cd0166bdbe07e2c33701d3bf1e
     cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
+    database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
@@ -49394,6 +49535,7 @@ def _typecheckingstub__a32e21c90ab65d3cfdb3b7ef2a0d741ba1528ec8824cd1817d1e485b4
     cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
+    database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
@@ -50609,6 +50751,7 @@ def _typecheckingstub__d1a2e259091e12a41b0f5818df495769518e049ebcc89ed340ffc7ba4
     cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
+    database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,
@@ -51101,6 +51244,7 @@ def _typecheckingstub__c6184cbbefaa372690b9776dafecbf5857cf9bfbab91d1666aad22c56
     cluster_scalability_type: typing.Optional[ClusterScalabilityType] = None,
     copy_tags_to_snapshot: typing.Optional[builtins.bool] = None,
     credentials: typing.Optional[Credentials] = None,
+    database_insights_mode: typing.Optional[DatabaseInsightsMode] = None,
     default_database_name: typing.Optional[builtins.str] = None,
     deletion_protection: typing.Optional[builtins.bool] = None,
     domain: typing.Optional[builtins.str] = None,

aws_cdk/aws_s3/__init__.py

@@ -968,7 +968,7 @@ For more information, please refer to https://docs.aws.amazon.com/AmazonS3/lates
 
 > **NOTE:** AWS managed keys don't allow cross-account use, and therefore can't be used to perform cross-account replication.
 
-If you need to ovveride the bucket ownership to destination account pass the account value to the method to provide permissions to override bucket owner.
+If you need to override the bucket ownership to destination account pass the account value to the method to provide permissions to override bucket owner.
 `addReplicationPolicy(bucket.replicationRoleArn, true, '11111111111')`;
 
 However, if the destination bucket is a referenced bucket, CDK cannot set the bucket policy,
@@ -9198,7 +9198,7 @@ class CfnBucket(
             *,
             status: builtins.str,
             abort_incomplete_multipart_upload: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnBucket.AbortIncompleteMultipartUploadProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
-            expiration_date: typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]] = None,
+            expiration_date: typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]] = None,
             expiration_in_days: typing.Optional[jsii.Number] = None,
             expired_object_delete_marker: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             id: typing.Optional[builtins.str] = None,
@@ -9378,7 +9378,7 @@ class CfnBucket(
         @builtins.property
         def expiration_date(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]]:
+        ) -> typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]]:
             '''Indicates when objects are deleted from Amazon S3 and Amazon S3 Glacier.
 
             The date value must be in ISO 8601 format. The time is always midnight UTC. If you specify an expiration and transition time, you must use the same time unit for both properties (either in days or by date). The expiration time must also be later than the transition time.
@@ -9386,7 +9386,7 @@ class CfnBucket(
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-rule.html#cfn-s3-bucket-rule-expirationdate
             '''
             result = self._values.get("expiration_date")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]], result)
+            return typing.cast(typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]], result)
 
         @builtins.property
         def expiration_in_days(self) -> typing.Optional[jsii.Number]:
@@ -10351,7 +10351,7 @@ class CfnBucket(
             self,
             *,
             storage_class: builtins.str,
-            transition_date: typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]] = None,
+            transition_date: typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]] = None,
             transition_in_days: typing.Optional[jsii.Number] = None,
         ) -> None:
             '''Specifies when an object transitions to a specified storage class.
@@ -10405,7 +10405,7 @@ class CfnBucket(
         @builtins.property
         def transition_date(
             self,
-        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]]:
+        ) -> typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]]:
             '''Indicates when objects are transitioned to the specified storage class.
 
             The date value must be in ISO 8601 format. The time is always midnight UTC.
@@ -10413,7 +10413,7 @@ class CfnBucket(
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-transition.html#cfn-s3-bucket-transition-transitiondate
             '''
             result = self._values.get("transition_date")
-            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]], result)
+            return typing.cast(typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]], result)
 
         @builtins.property
         def transition_in_days(self) -> typing.Optional[jsii.Number]:
@@ -21896,7 +21896,7 @@ def _typecheckingstub__8e0ac4f7540cd419a3dec0eaac50412f82617bc7d551fc1e59c7f74fc
     *,
     status: builtins.str,
     abort_incomplete_multipart_upload: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnBucket.AbortIncompleteMultipartUploadProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
-    expiration_date: typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]] = None,
+    expiration_date: typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]] = None,
     expiration_in_days: typing.Optional[jsii.Number] = None,
     expired_object_delete_marker: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     id: typing.Optional[builtins.str] = None,
@@ -21995,7 +21995,7 @@ def _typecheckingstub__61064b6f15baa1adf9875a5a9c1452ffb113a830c366901a5c329f68e
 def _typecheckingstub__059ebb238cf9b04909ed5652db39411b1d94456b4d2b5be3691ee93d81136a68(
     *,
     storage_class: builtins.str,
-    transition_date: typing.Optional[typing.Union[_IResolvable_da3f097b, datetime.datetime]] = None,
+    transition_date: typing.Optional[typing.Union[datetime.datetime, _IResolvable_da3f097b]] = None,
     transition_in_days: typing.Optional[jsii.Number] = None,
 ) -> None:
     """Type checking stubs"""