aws-cdk-lib 2.189.1__py3-none-any.whl → 2.191.0__py3-none-any.whl

aws_cdk/aws_rds/__init__.py

@@ -1789,6 +1789,26 @@ rds.DatabaseCluster(self, "Cluster",
 )
 ```
 
+## Importing existing DatabaseInstance
+
+### Lookup DatabaseInstance by instanceIdentifier
+
+You can lookup an existing DatabaseInstance by its instanceIdentifier using `DatabaseInstance.fromLookup()`.  This method returns an `IDatabaseInstance`.
+
+Here's how `DatabaseInstance.fromLookup()` can be used:
+
+```python
+# my_user_role: iam.Role
+
+
+db_from_lookup = rds.DatabaseInstance.from_lookup(self, "dbFromLookup",
+    instance_identifier="instanceId"
+)
+
+# Grant a connection
+db_from_lookup.grant_connect(my_user_role, "my-user-id")
+```
+
 ## Limitless Database Cluster
 
 Amazon Aurora [PostgreSQL Limitless Database](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/limitless.html) provides automated horizontal scaling to process millions of write transactions per second and manages petabytes of data while maintaining the simplicity of operating inside a single database.
@@ -2901,6 +2921,12 @@ class AuroraMysqlEngineVersion(
         '''Version "5.7.mysql_aurora.2.12.3".'''
         return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_2_12_3"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_2_12_4")
+    def VER_2_12_4(cls) -> "AuroraMysqlEngineVersion":
+        '''Version "5.7.mysql_aurora.2.12.4".'''
+        return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_2_12_4"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_3_01_0")
     def VER_3_01_0(cls) -> "AuroraMysqlEngineVersion":
@@ -3099,6 +3125,12 @@ class AuroraMysqlEngineVersion(
         '''Version "8.0.mysql_aurora.3.08.1".'''
         return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_08_1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_3_08_2")
+    def VER_3_08_2(cls) -> "AuroraMysqlEngineVersion":
+        '''Version "8.0.mysql_aurora.3.08.2".'''
+        return typing.cast("AuroraMysqlEngineVersion", jsii.sget(cls, "VER_3_08_2"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_5_7_12")
     def VER_5_7_12(cls) -> "AuroraMysqlEngineVersion":
@@ -3822,6 +3854,12 @@ class AuroraPostgresEngineVersion(
         '''Version "13.18".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_13_18"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_13_20")
+    def VER_13_20(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "13.20".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_13_20"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_13_3")
     def VER_13_3(cls) -> "AuroraPostgresEngineVersion":
@@ -3920,6 +3958,12 @@ class AuroraPostgresEngineVersion(
         '''Version "14.15".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_14_15"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_14_17")
+    def VER_14_17(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "14.17".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_14_17"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_14_3")
     def VER_14_3(cls) -> "AuroraPostgresEngineVersion":
@@ -3968,6 +4012,12 @@ class AuroraPostgresEngineVersion(
         '''Version "15.10".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_15_10"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_15_12")
+    def VER_15_12(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "15.12".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_15_12"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_15_2")
     def VER_15_2(cls) -> "AuroraPostgresEngineVersion":
@@ -4075,6 +4125,12 @@ class AuroraPostgresEngineVersion(
         '''Version "16.6 limitless".'''
         return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_16_6_LIMITLESS"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="VER_16_8")
+    def VER_16_8(cls) -> "AuroraPostgresEngineVersion":
+        '''Version "16.8".'''
+        return typing.cast("AuroraPostgresEngineVersion", jsii.sget(cls, "VER_16_8"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="VER_17_1")
     def VER_17_1(cls) -> "AuroraPostgresEngineVersion":
@@ -8818,10 +8874,6 @@ class CfnDBInstance(
             availability_zone="availabilityZone",
             backup_retention_period=123,
             ca_certificate_identifier="caCertificateIdentifier",
-            certificate_details=rds.CfnDBInstance.CertificateDetailsProperty(
-                ca_identifier="caIdentifier",
-                valid_till="validTill"
-            ),
             certificate_rotation_restart=False,
             character_set_name="characterSetName",
             copy_tags_to_snapshot=False,
@@ -8848,11 +8900,6 @@ class CfnDBInstance(
             enable_cloudwatch_logs_exports=["enableCloudwatchLogsExports"],
             enable_iam_database_authentication=False,
             enable_performance_insights=False,
-            endpoint=rds.CfnDBInstance.EndpointProperty(
-                address="address",
-                hosted_zone_id="hostedZoneId",
-                port="port"
-            ),
             engine="engine",
             engine_lifecycle_support="engineLifecycleSupport",
             engine_version="engineVersion",
@@ -8923,7 +8970,6 @@ class CfnDBInstance(
         availability_zone: typing.Optional[builtins.str] = None,
         backup_retention_period: typing.Optional[jsii.Number] = None,
         ca_certificate_identifier: typing.Optional[builtins.str] = None,
-        certificate_details: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDBInstance.CertificateDetailsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         certificate_rotation_restart: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         character_set_name: typing.Optional[builtins.str] = None,
         copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -8950,7 +8996,6 @@ class CfnDBInstance(
         enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
         enable_iam_database_authentication: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_performance_insights: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        endpoint: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnDBInstance.EndpointProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         engine: typing.Optional[builtins.str] = None,
         engine_lifecycle_support: typing.Optional[builtins.str] = None,
         engine_version: typing.Optional[builtins.str] = None,
@@ -9008,7 +9053,6 @@ class CfnDBInstance(
         :param availability_zone: The Availability Zone (AZ) where the database will be created. For information on AWS Regions and Availability Zones, see `Regions and Availability Zones <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html>`_ . For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: A random, system-chosen Availability Zone in the endpoint's AWS Region . Constraints: - The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment. - The specified Availability Zone must be in the same AWS Region as the current endpoint. Example: ``us-east-1d``
         :param backup_retention_period: The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups. *Amazon Aurora* Not applicable. The retention period for automated backups is managed by the DB cluster. Default: 1 Constraints: - Must be a value from 0 to 35 - Can't be set to 0 if the DB instance is a source to read replicas
         :param ca_certificate_identifier: The identifier of the CA certificate for this DB instance. For more information, see `Using SSL/TLS to encrypt a connection to a DB instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon RDS User Guide* and `Using SSL/TLS to encrypt a connection to a DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon Aurora User Guide* .
-        :param certificate_details: The details of the DB instance’s server certificate. For more information, see `Using SSL/TLS to encrypt a connection to a DB instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon RDS User Guide* and `Using SSL/TLS to encrypt a connection to a DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon Aurora User Guide*.
         :param certificate_rotation_restart: Specifies whether the DB instance is restarted when you rotate your SSL/TLS certificate. By default, the DB instance is restarted when you rotate your SSL/TLS certificate. The certificate is not updated until the DB instance is restarted. .. epigraph:: Set this parameter only if you are *not* using SSL/TLS to connect to the DB instance. If you are using SSL/TLS to connect to the DB instance, follow the appropriate instructions for your DB engine to rotate your SSL/TLS certificate: - For more information about rotating your SSL/TLS certificate for RDS DB engines, see `Rotating Your SSL/TLS Certificate. <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html>`_ in the *Amazon RDS User Guide.* - For more information about rotating your SSL/TLS certificate for Aurora DB engines, see `Rotating Your SSL/TLS Certificate <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL-certificate-rotation.html>`_ in the *Amazon Aurora User Guide* . This setting doesn't apply to RDS Custom DB instances.
         :param character_set_name: For supported engines, indicates that the DB instance should be associated with the specified character set. *Amazon Aurora* Not applicable. The character set is managed by the DB cluster. For more information, see `AWS::RDS::DBCluster <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html>`_ .
         :param copy_tags_to_snapshot: Specifies whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied. This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting.
@@ -9035,7 +9079,6 @@ class CfnDBInstance(
         :param enable_cloudwatch_logs_exports: The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see `Publishing Database Logs to Amazon CloudWatch Logs <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch>`_ in the *Amazon Relational Database Service User Guide* . *Amazon Aurora* Not applicable. CloudWatch Logs exports are managed by the DB cluster. *Db2* Valid values: ``diag.log`` , ``notify.log`` *MariaDB* Valid values: ``audit`` , ``error`` , ``general`` , ``slowquery`` *Microsoft SQL Server* Valid values: ``agent`` , ``error`` *MySQL* Valid values: ``audit`` , ``error`` , ``general`` , ``slowquery`` *Oracle* Valid values: ``alert`` , ``audit`` , ``listener`` , ``trace`` , ``oemagent`` *PostgreSQL* Valid values: ``postgresql`` , ``upgrade``
         :param enable_iam_database_authentication: A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled. This property is supported for RDS for MariaDB, RDS for MySQL, and RDS for PostgreSQL. For more information, see `IAM Database Authentication for MariaDB, MySQL, and PostgreSQL <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html>`_ in the *Amazon RDS User Guide.* *Amazon Aurora* Not applicable. Mapping AWS IAM accounts to database accounts is managed by the DB cluster.
         :param enable_performance_insights: Specifies whether to enable Performance Insights for the DB instance. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to RDS Custom DB instances.
-        :param endpoint: This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions: - ``CreateDBInstance`` - ``DescribeDBInstances`` - ``DeleteDBInstance`` For the data structure that represents Amazon Aurora DB cluster endpoints, see ``DBClusterEndpoint``.
         :param engine: The name of the database engine to use for this DB instance. Not every database engine is available in every AWS Region. This property is required when creating a DB instance. .. epigraph:: You can convert an Oracle database from the non-CDB architecture to the container database (CDB) architecture by updating the ``Engine`` value in your templates from ``oracle-ee`` to ``oracle-ee-cdb`` or from ``oracle-se2`` to ``oracle-se2-cdb`` . Converting to the CDB architecture requires an interruption. Valid Values: - ``aurora-mysql`` (for Aurora MySQL DB instances) - ``aurora-postgresql`` (for Aurora PostgreSQL DB instances) - ``custom-oracle-ee`` (for RDS Custom for Oracle DB instances) - ``custom-oracle-ee-cdb`` (for RDS Custom for Oracle DB instances) - ``custom-sqlserver-ee`` (for RDS Custom for SQL Server DB instances) - ``custom-sqlserver-se`` (for RDS Custom for SQL Server DB instances) - ``custom-sqlserver-web`` (for RDS Custom for SQL Server DB instances) - ``db2-ae`` - ``db2-se`` - ``mariadb`` - ``mysql`` - ``oracle-ee`` - ``oracle-ee-cdb`` - ``oracle-se2`` - ``oracle-se2-cdb`` - ``postgres`` - ``sqlserver-ee`` - ``sqlserver-se`` - ``sqlserver-ex`` - ``sqlserver-web``
         :param engine_lifecycle_support: The life cycle type for this DB instance. .. epigraph:: By default, this value is set to ``open-source-rds-extended-support`` , which enrolls your DB instance into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled`` . In this case, creating the DB instance will fail if the DB major version is past its end of standard support date. This setting applies only to RDS for MySQL and RDS for PostgreSQL. For Amazon Aurora DB instances, the life cycle type is managed by the DB cluster. You can use this setting to enroll your DB instance into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB instance past the end of standard support for that engine version. For more information, see `Using Amazon RDS Extended Support <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html>`_ in the *Amazon RDS User Guide* . Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled`` Default: ``open-source-rds-extended-support``
         :param engine_version: The version number of the database engine to use. For a list of valid engine versions, use the ``DescribeDBEngineVersions`` action. The following are the database engines and links to information about the major and minor versions that are available with Amazon RDS. Not every database engine is available for every AWS Region. *Amazon Aurora* Not applicable. The version number of the database engine to be used by the DB instance is managed by the DB cluster. *Db2* See `Amazon RDS for Db2 <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Db2.html#Db2.Concepts.VersionMgmt>`_ in the *Amazon RDS User Guide.* *MariaDB* See `MariaDB on Amazon RDS Versions <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.VersionMgmt>`_ in the *Amazon RDS User Guide.* *Microsoft SQL Server* See `Microsoft SQL Server Versions on Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.VersionSupport>`_ in the *Amazon RDS User Guide.* *MySQL* See `MySQL on Amazon RDS Versions <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt>`_ in the *Amazon RDS User Guide.* *Oracle* See `Oracle Database Engine Release Notes <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.PatchComposition.html>`_ in the *Amazon RDS User Guide.* *PostgreSQL* See `Supported PostgreSQL Database Versions <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.DBVersions>`_ in the *Amazon RDS User Guide.*
@@ -9095,7 +9138,6 @@ class CfnDBInstance(
             availability_zone=availability_zone,
             backup_retention_period=backup_retention_period,
             ca_certificate_identifier=ca_certificate_identifier,
-            certificate_details=certificate_details,
             certificate_rotation_restart=certificate_rotation_restart,
             character_set_name=character_set_name,
             copy_tags_to_snapshot=copy_tags_to_snapshot,
@@ -9122,7 +9164,6 @@ class CfnDBInstance(
             enable_cloudwatch_logs_exports=enable_cloudwatch_logs_exports,
             enable_iam_database_authentication=enable_iam_database_authentication,
             enable_performance_insights=enable_performance_insights,
-            endpoint=endpoint,
             engine=engine,
             engine_lifecycle_support=engine_lifecycle_support,
             engine_version=engine_version,
@@ -9514,24 +9555,6 @@ class CfnDBInstance(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "caCertificateIdentifier", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="certificateDetails")
-    def certificate_details(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBInstance.CertificateDetailsProperty"]]:
-        '''The details of the DB instance’s server certificate.'''
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBInstance.CertificateDetailsProperty"]], jsii.get(self, "certificateDetails"))
-
-    @certificate_details.setter
-    def certificate_details(
-        self,
-        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBInstance.CertificateDetailsProperty"]],
-    ) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__8fa6bdf9b58edb0597b51a45bb01b0942f96853a6387af364c3ca19f8ebd5009)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "certificateDetails", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="certificateRotationRestart")
     def certificate_rotation_restart(
@@ -9916,24 +9939,6 @@ class CfnDBInstance(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "enablePerformanceInsights", value) # pyright: ignore[reportArgumentType]
 
-    @builtins.property
-    @jsii.member(jsii_name="endpoint")
-    def endpoint(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBInstance.EndpointProperty"]]:
-        '''This data type represents the information you need to connect to an Amazon RDS DB instance.'''
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBInstance.EndpointProperty"]], jsii.get(self, "endpoint"))
-
-    @endpoint.setter
-    def endpoint(
-        self,
-        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBInstance.EndpointProperty"]],
-    ) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__33fac2f64e551e516fef566fbc6d4ca2de02e0f84b5ef369d43a164e7683d854)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "endpoint", value) # pyright: ignore[reportArgumentType]
-
     @builtins.property
     @jsii.member(jsii_name="engine")
     def engine(self) -> typing.Optional[builtins.str]:
@@ -10959,7 +10964,6 @@ class CfnDBInstance(
         "availability_zone": "availabilityZone",
         "backup_retention_period": "backupRetentionPeriod",
         "ca_certificate_identifier": "caCertificateIdentifier",
-        "certificate_details": "certificateDetails",
         "certificate_rotation_restart": "certificateRotationRestart",
         "character_set_name": "characterSetName",
         "copy_tags_to_snapshot": "copyTagsToSnapshot",
@@ -10986,7 +10990,6 @@ class CfnDBInstance(
         "enable_cloudwatch_logs_exports": "enableCloudwatchLogsExports",
         "enable_iam_database_authentication": "enableIamDatabaseAuthentication",
         "enable_performance_insights": "enablePerformanceInsights",
-        "endpoint": "endpoint",
         "engine": "engine",
         "engine_lifecycle_support": "engineLifecycleSupport",
         "engine_version": "engineVersion",
@@ -11046,7 +11049,6 @@ class CfnDBInstanceProps:
         availability_zone: typing.Optional[builtins.str] = None,
         backup_retention_period: typing.Optional[jsii.Number] = None,
         ca_certificate_identifier: typing.Optional[builtins.str] = None,
-        certificate_details: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDBInstance.CertificateDetailsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         certificate_rotation_restart: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         character_set_name: typing.Optional[builtins.str] = None,
         copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -11073,7 +11075,6 @@ class CfnDBInstanceProps:
         enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
         enable_iam_database_authentication: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_performance_insights: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-        endpoint: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDBInstance.EndpointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         engine: typing.Optional[builtins.str] = None,
         engine_lifecycle_support: typing.Optional[builtins.str] = None,
         engine_version: typing.Optional[builtins.str] = None,
@@ -11130,7 +11131,6 @@ class CfnDBInstanceProps:
         :param availability_zone: The Availability Zone (AZ) where the database will be created. For information on AWS Regions and Availability Zones, see `Regions and Availability Zones <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html>`_ . For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one. Default: A random, system-chosen Availability Zone in the endpoint's AWS Region . Constraints: - The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment. - The specified Availability Zone must be in the same AWS Region as the current endpoint. Example: ``us-east-1d``
         :param backup_retention_period: The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups. *Amazon Aurora* Not applicable. The retention period for automated backups is managed by the DB cluster. Default: 1 Constraints: - Must be a value from 0 to 35 - Can't be set to 0 if the DB instance is a source to read replicas
         :param ca_certificate_identifier: The identifier of the CA certificate for this DB instance. For more information, see `Using SSL/TLS to encrypt a connection to a DB instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon RDS User Guide* and `Using SSL/TLS to encrypt a connection to a DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon Aurora User Guide* .
-        :param certificate_details: The details of the DB instance’s server certificate. For more information, see `Using SSL/TLS to encrypt a connection to a DB instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon RDS User Guide* and `Using SSL/TLS to encrypt a connection to a DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon Aurora User Guide*.
         :param certificate_rotation_restart: Specifies whether the DB instance is restarted when you rotate your SSL/TLS certificate. By default, the DB instance is restarted when you rotate your SSL/TLS certificate. The certificate is not updated until the DB instance is restarted. .. epigraph:: Set this parameter only if you are *not* using SSL/TLS to connect to the DB instance. If you are using SSL/TLS to connect to the DB instance, follow the appropriate instructions for your DB engine to rotate your SSL/TLS certificate: - For more information about rotating your SSL/TLS certificate for RDS DB engines, see `Rotating Your SSL/TLS Certificate. <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html>`_ in the *Amazon RDS User Guide.* - For more information about rotating your SSL/TLS certificate for Aurora DB engines, see `Rotating Your SSL/TLS Certificate <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL-certificate-rotation.html>`_ in the *Amazon Aurora User Guide* . This setting doesn't apply to RDS Custom DB instances.
         :param character_set_name: For supported engines, indicates that the DB instance should be associated with the specified character set. *Amazon Aurora* Not applicable. The character set is managed by the DB cluster. For more information, see `AWS::RDS::DBCluster <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html>`_ .
         :param copy_tags_to_snapshot: Specifies whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied. This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting.
@@ -11157,7 +11157,6 @@ class CfnDBInstanceProps:
         :param enable_cloudwatch_logs_exports: The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see `Publishing Database Logs to Amazon CloudWatch Logs <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch>`_ in the *Amazon Relational Database Service User Guide* . *Amazon Aurora* Not applicable. CloudWatch Logs exports are managed by the DB cluster. *Db2* Valid values: ``diag.log`` , ``notify.log`` *MariaDB* Valid values: ``audit`` , ``error`` , ``general`` , ``slowquery`` *Microsoft SQL Server* Valid values: ``agent`` , ``error`` *MySQL* Valid values: ``audit`` , ``error`` , ``general`` , ``slowquery`` *Oracle* Valid values: ``alert`` , ``audit`` , ``listener`` , ``trace`` , ``oemagent`` *PostgreSQL* Valid values: ``postgresql`` , ``upgrade``
         :param enable_iam_database_authentication: A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled. This property is supported for RDS for MariaDB, RDS for MySQL, and RDS for PostgreSQL. For more information, see `IAM Database Authentication for MariaDB, MySQL, and PostgreSQL <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html>`_ in the *Amazon RDS User Guide.* *Amazon Aurora* Not applicable. Mapping AWS IAM accounts to database accounts is managed by the DB cluster.
         :param enable_performance_insights: Specifies whether to enable Performance Insights for the DB instance. For more information, see `Using Amazon Performance Insights <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html>`_ in the *Amazon RDS User Guide* . This setting doesn't apply to RDS Custom DB instances.
-        :param endpoint: This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions: - ``CreateDBInstance`` - ``DescribeDBInstances`` - ``DeleteDBInstance`` For the data structure that represents Amazon Aurora DB cluster endpoints, see ``DBClusterEndpoint``.
         :param engine: The name of the database engine to use for this DB instance. Not every database engine is available in every AWS Region. This property is required when creating a DB instance. .. epigraph:: You can convert an Oracle database from the non-CDB architecture to the container database (CDB) architecture by updating the ``Engine`` value in your templates from ``oracle-ee`` to ``oracle-ee-cdb`` or from ``oracle-se2`` to ``oracle-se2-cdb`` . Converting to the CDB architecture requires an interruption. Valid Values: - ``aurora-mysql`` (for Aurora MySQL DB instances) - ``aurora-postgresql`` (for Aurora PostgreSQL DB instances) - ``custom-oracle-ee`` (for RDS Custom for Oracle DB instances) - ``custom-oracle-ee-cdb`` (for RDS Custom for Oracle DB instances) - ``custom-sqlserver-ee`` (for RDS Custom for SQL Server DB instances) - ``custom-sqlserver-se`` (for RDS Custom for SQL Server DB instances) - ``custom-sqlserver-web`` (for RDS Custom for SQL Server DB instances) - ``db2-ae`` - ``db2-se`` - ``mariadb`` - ``mysql`` - ``oracle-ee`` - ``oracle-ee-cdb`` - ``oracle-se2`` - ``oracle-se2-cdb`` - ``postgres`` - ``sqlserver-ee`` - ``sqlserver-se`` - ``sqlserver-ex`` - ``sqlserver-web``
         :param engine_lifecycle_support: The life cycle type for this DB instance. .. epigraph:: By default, this value is set to ``open-source-rds-extended-support`` , which enrolls your DB instance into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled`` . In this case, creating the DB instance will fail if the DB major version is past its end of standard support date. This setting applies only to RDS for MySQL and RDS for PostgreSQL. For Amazon Aurora DB instances, the life cycle type is managed by the DB cluster. You can use this setting to enroll your DB instance into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB instance past the end of standard support for that engine version. For more information, see `Using Amazon RDS Extended Support <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html>`_ in the *Amazon RDS User Guide* . Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled`` Default: ``open-source-rds-extended-support``
         :param engine_version: The version number of the database engine to use. For a list of valid engine versions, use the ``DescribeDBEngineVersions`` action. The following are the database engines and links to information about the major and minor versions that are available with Amazon RDS. Not every database engine is available for every AWS Region. *Amazon Aurora* Not applicable. The version number of the database engine to be used by the DB instance is managed by the DB cluster. *Db2* See `Amazon RDS for Db2 <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Db2.html#Db2.Concepts.VersionMgmt>`_ in the *Amazon RDS User Guide.* *MariaDB* See `MariaDB on Amazon RDS Versions <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.VersionMgmt>`_ in the *Amazon RDS User Guide.* *Microsoft SQL Server* See `Microsoft SQL Server Versions on Amazon RDS <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.VersionSupport>`_ in the *Amazon RDS User Guide.* *MySQL* See `MySQL on Amazon RDS Versions <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt>`_ in the *Amazon RDS User Guide.* *Oracle* See `Oracle Database Engine Release Notes <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.PatchComposition.html>`_ in the *Amazon RDS User Guide.* *PostgreSQL* See `Supported PostgreSQL Database Versions <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.DBVersions>`_ in the *Amazon RDS User Guide.*
@@ -11225,10 +11224,6 @@ class CfnDBInstanceProps:
                 availability_zone="availabilityZone",
                 backup_retention_period=123,
                 ca_certificate_identifier="caCertificateIdentifier",
-                certificate_details=rds.CfnDBInstance.CertificateDetailsProperty(
-                    ca_identifier="caIdentifier",
-                    valid_till="validTill"
-                ),
                 certificate_rotation_restart=False,
                 character_set_name="characterSetName",
                 copy_tags_to_snapshot=False,
@@ -11255,11 +11250,6 @@ class CfnDBInstanceProps:
                 enable_cloudwatch_logs_exports=["enableCloudwatchLogsExports"],
                 enable_iam_database_authentication=False,
                 enable_performance_insights=False,
-                endpoint=rds.CfnDBInstance.EndpointProperty(
-                    address="address",
-                    hosted_zone_id="hostedZoneId",
-                    port="port"
-                ),
                 engine="engine",
                 engine_lifecycle_support="engineLifecycleSupport",
                 engine_version="engineVersion",
@@ -11326,7 +11316,6 @@ class CfnDBInstanceProps:
             check_type(argname="argument availability_zone", value=availability_zone, expected_type=type_hints["availability_zone"])
             check_type(argname="argument backup_retention_period", value=backup_retention_period, expected_type=type_hints["backup_retention_period"])
             check_type(argname="argument ca_certificate_identifier", value=ca_certificate_identifier, expected_type=type_hints["ca_certificate_identifier"])
-            check_type(argname="argument certificate_details", value=certificate_details, expected_type=type_hints["certificate_details"])
             check_type(argname="argument certificate_rotation_restart", value=certificate_rotation_restart, expected_type=type_hints["certificate_rotation_restart"])
             check_type(argname="argument character_set_name", value=character_set_name, expected_type=type_hints["character_set_name"])
             check_type(argname="argument copy_tags_to_snapshot", value=copy_tags_to_snapshot, expected_type=type_hints["copy_tags_to_snapshot"])
@@ -11353,7 +11342,6 @@ class CfnDBInstanceProps:
             check_type(argname="argument enable_cloudwatch_logs_exports", value=enable_cloudwatch_logs_exports, expected_type=type_hints["enable_cloudwatch_logs_exports"])
             check_type(argname="argument enable_iam_database_authentication", value=enable_iam_database_authentication, expected_type=type_hints["enable_iam_database_authentication"])
             check_type(argname="argument enable_performance_insights", value=enable_performance_insights, expected_type=type_hints["enable_performance_insights"])
-            check_type(argname="argument endpoint", value=endpoint, expected_type=type_hints["endpoint"])
             check_type(argname="argument engine", value=engine, expected_type=type_hints["engine"])
             check_type(argname="argument engine_lifecycle_support", value=engine_lifecycle_support, expected_type=type_hints["engine_lifecycle_support"])
             check_type(argname="argument engine_version", value=engine_version, expected_type=type_hints["engine_version"])
@@ -11419,8 +11407,6 @@ class CfnDBInstanceProps:
             self._values["backup_retention_period"] = backup_retention_period
         if ca_certificate_identifier is not None:
             self._values["ca_certificate_identifier"] = ca_certificate_identifier
-        if certificate_details is not None:
-            self._values["certificate_details"] = certificate_details
         if certificate_rotation_restart is not None:
             self._values["certificate_rotation_restart"] = certificate_rotation_restart
         if character_set_name is not None:
@@ -11473,8 +11459,6 @@ class CfnDBInstanceProps:
             self._values["enable_iam_database_authentication"] = enable_iam_database_authentication
         if enable_performance_insights is not None:
             self._values["enable_performance_insights"] = enable_performance_insights
-        if endpoint is not None:
-            self._values["endpoint"] = endpoint
         if engine is not None:
             self._values["engine"] = engine
         if engine_lifecycle_support is not None:
@@ -11780,19 +11764,6 @@ class CfnDBInstanceProps:
         result = self._values.get("ca_certificate_identifier")
         return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    def certificate_details(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBInstance.CertificateDetailsProperty]]:
-        '''The details of the DB instance’s server certificate.
-
-        For more information, see `Using SSL/TLS to encrypt a connection to a DB instance <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon RDS User Guide* and `Using SSL/TLS to encrypt a connection to a DB cluster <https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html>`_ in the *Amazon Aurora User Guide*.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#cfn-rds-dbinstance-certificatedetails
-        '''
-        result = self._values.get("certificate_details")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBInstance.CertificateDetailsProperty]], result)
-
     @builtins.property
     def certificate_rotation_restart(
         self,
@@ -12309,25 +12280,6 @@ class CfnDBInstanceProps:
         result = self._values.get("enable_performance_insights")
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
-    @builtins.property
-    def endpoint(
-        self,
-    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBInstance.EndpointProperty]]:
-        '''This data type represents the information you need to connect to an Amazon RDS DB instance.
-
-        This data type is used as a response element in the following actions:
-
-        - ``CreateDBInstance``
-        - ``DescribeDBInstances``
-        - ``DeleteDBInstance``
-
-        For the data structure that represents Amazon Aurora DB cluster endpoints, see ``DBClusterEndpoint``.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#cfn-rds-dbinstance-endpoint
-        '''
-        result = self._values.get("endpoint")
-        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBInstance.EndpointProperty]], result)
-
     @builtins.property
     def engine(self) -> typing.Optional[builtins.str]:
         '''The name of the database engine to use for this DB instance.
@@ -23522,6 +23474,57 @@ class DatabaseInstanceEngine(
         return typing.cast("IInstanceEngine", jsii.sget(cls, "SQL_SERVER_WEB"))
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_rds.DatabaseInstanceLookupOptions",
+    jsii_struct_bases=[],
+    name_mapping={"instance_identifier": "instanceIdentifier"},
+)
+class DatabaseInstanceLookupOptions:
+    def __init__(self, *, instance_identifier: builtins.str) -> None:
+        '''Properties for looking up an existing DatabaseInstance.
+
+        :param instance_identifier: The instance identifier of the DatabaseInstance.
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # my_user_role: iam.Role
+            
+            
+            db_from_lookup = rds.DatabaseInstance.from_lookup(self, "dbFromLookup",
+                instance_identifier="instanceId"
+            )
+            
+            # Grant a connection
+            db_from_lookup.grant_connect(my_user_role, "my-user-id")
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a68848c3fd35e58159e035ad3a08edd50065e93bc47c43acc588d83b31cd89cc)
+            check_type(argname="argument instance_identifier", value=instance_identifier, expected_type=type_hints["instance_identifier"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "instance_identifier": instance_identifier,
+        }
+
+    @builtins.property
+    def instance_identifier(self) -> builtins.str:
+        '''The instance identifier of the DatabaseInstance.'''
+        result = self._values.get("instance_identifier")
+        assert result is not None, "Required property 'instance_identifier' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "DatabaseInstanceLookupOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_rds.DatabaseInstanceNewProps",
     jsii_struct_bases=[],
@@ -42890,6 +42893,31 @@ class DatabaseInstanceBase(
 
         return typing.cast(IDatabaseInstance, jsii.sinvoke(cls, "fromDatabaseInstanceAttributes", [scope, id, attrs]))
 
+    @jsii.member(jsii_name="fromLookup")
+    @builtins.classmethod
+    def from_lookup(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        instance_identifier: builtins.str,
+    ) -> IDatabaseInstance:
+        '''Lookup an existing DatabaseInstance using instanceIdentifier.
+
+        :param scope: -
+        :param id: -
+        :param instance_identifier: The instance identifier of the DatabaseInstance.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__48d8ddc93958bf98fee260c9c8ab8ac972c2df71e3a1baf7be3972315129a3f7)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        options = DatabaseInstanceLookupOptions(
+            instance_identifier=instance_identifier
+        )
+
+        return typing.cast(IDatabaseInstance, jsii.sinvoke(cls, "fromLookup", [scope, id, options]))
+
     @jsii.member(jsii_name="addProxy")
     def add_proxy(
         self,
@@ -47482,6 +47510,7 @@ __all__ = [
     "DatabaseInstanceEngine",
     "DatabaseInstanceFromSnapshot",
     "DatabaseInstanceFromSnapshotProps",
+    "DatabaseInstanceLookupOptions",
     "DatabaseInstanceNewProps",
     "DatabaseInstanceProps",
     "DatabaseInstanceReadReplica",
@@ -48379,7 +48408,6 @@ def _typecheckingstub__255b0779ca741853674876540bf77279f6293bea05de2cd18724d2b92
     availability_zone: typing.Optional[builtins.str] = None,
     backup_retention_period: typing.Optional[jsii.Number] = None,
     ca_certificate_identifier: typing.Optional[builtins.str] = None,
-    certificate_details: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDBInstance.CertificateDetailsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     certificate_rotation_restart: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     character_set_name: typing.Optional[builtins.str] = None,
     copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -48406,7 +48434,6 @@ def _typecheckingstub__255b0779ca741853674876540bf77279f6293bea05de2cd18724d2b92
     enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
     enable_iam_database_authentication: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_performance_insights: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-    endpoint: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDBInstance.EndpointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     engine: typing.Optional[builtins.str] = None,
     engine_lifecycle_support: typing.Optional[builtins.str] = None,
     engine_version: typing.Optional[builtins.str] = None,
@@ -48531,12 +48558,6 @@ def _typecheckingstub__62ccd61fdb1bb7842d321fcd1476ed686baf586bf907671076cafd6ba
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__8fa6bdf9b58edb0597b51a45bb01b0942f96853a6387af364c3ca19f8ebd5009(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBInstance.CertificateDetailsProperty]],
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__8300a7358b8f3721e212076b4d43c16dce7eaecbef2865d4c267632cacd1e540(
     value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
 ) -> None:
@@ -48693,12 +48714,6 @@ def _typecheckingstub__55acaa45776cf6b5432f2a97177653a9807b3c5b475626ccb7e031f2c
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__33fac2f64e551e516fef566fbc6d4ca2de02e0f84b5ef369d43a164e7683d854(
-    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBInstance.EndpointProperty]],
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__c1390f99110e4c5a9ba1f2e9dd4d5ccd134a1dd6c4610d4f96e29fca66cf7a9b(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -49005,7 +49020,6 @@ def _typecheckingstub__3bddb1be0bd1f1699e3a084c5859d94d8879ff15011f2f2eaac29ec16
     availability_zone: typing.Optional[builtins.str] = None,
     backup_retention_period: typing.Optional[jsii.Number] = None,
     ca_certificate_identifier: typing.Optional[builtins.str] = None,
-    certificate_details: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDBInstance.CertificateDetailsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     certificate_rotation_restart: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     character_set_name: typing.Optional[builtins.str] = None,
     copy_tags_to_snapshot: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
@@ -49032,7 +49046,6 @@ def _typecheckingstub__3bddb1be0bd1f1699e3a084c5859d94d8879ff15011f2f2eaac29ec16
     enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
     enable_iam_database_authentication: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_performance_insights: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
-    endpoint: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnDBInstance.EndpointProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     engine: typing.Optional[builtins.str] = None,
     engine_lifecycle_support: typing.Optional[builtins.str] = None,
     engine_version: typing.Optional[builtins.str] = None,
@@ -50376,6 +50389,13 @@ def _typecheckingstub__c46002009ab88821e56f6612b8b65e2f4599174816135533fa2342791
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a68848c3fd35e58159e035ad3a08edd50065e93bc47c43acc588d83b31cd89cc(
+    *,
+    instance_identifier: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d110b1cb0043ae6adf59fc0d1bcb136b4655ac973cfbff361a0a3e2fe97c39f8(
     *,
     vpc: _IVpc_f30d5663,
@@ -51645,6 +51665,15 @@ def _typecheckingstub__e84e286636afa00f9c760ec79c7dac8e6bb0eca8b8b9a221372c32480
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__48d8ddc93958bf98fee260c9c8ab8ac972c2df71e3a1baf7be3972315129a3f7(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    instance_identifier: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1a570d3e3410884069b8a67a8efdb043b454116fb50145140aeead995d1acf19(
     id: builtins.str,
     *,

aws_cdk/aws_redshiftserverless/__init__.py

@@ -1363,7 +1363,7 @@ class CfnWorkgroup(
         :param security_group_ids: A list of security group IDs to associate with the workgroup.
         :param snapshot_arn: The Amazon Resource Name (ARN) of the snapshot to restore from.
         :param snapshot_name: The snapshot name to restore from.
-        :param snapshot_owner_account: The owner AWS ; account of the snapshot.
+        :param snapshot_owner_account: The Amazon Web Services account that owns the snapshot.
         :param subnet_ids: A list of subnet IDs the workgroup is associated with.
         :param tags: The map of the key-value pairs used to tag the workgroup.
         :param track_name: An optional parameter for the name of the track for the workgroup. If you don't provide a track name, the workgroup is assigned to the current track.
@@ -1434,14 +1434,6 @@ class CfnWorkgroup(
         '''
         return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrWorkgroup"))
 
-    @builtins.property
-    @jsii.member(jsii_name="attrWorkgroupBaseCapacity")
-    def attr_workgroup_base_capacity(self) -> jsii.Number:
-        '''
-        :cloudformationAttribute: Workgroup.BaseCapacity
-        '''
-        return typing.cast(jsii.Number, jsii.get(self, "attrWorkgroupBaseCapacity"))
-
     @builtins.property
     @jsii.member(jsii_name="attrWorkgroupConfigParameters")
     def attr_workgroup_config_parameters(self) -> _IResolvable_da3f097b:
@@ -1791,7 +1783,7 @@ class CfnWorkgroup(
     @builtins.property
     @jsii.member(jsii_name="snapshotOwnerAccount")
     def snapshot_owner_account(self) -> typing.Optional[builtins.str]:
-        '''The owner AWS ;'''
+        '''The Amazon Web Services account that owns the snapshot.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "snapshotOwnerAccount"))
 
     @snapshot_owner_account.setter
@@ -2701,7 +2693,7 @@ class CfnWorkgroupProps:
         :param security_group_ids: A list of security group IDs to associate with the workgroup.
         :param snapshot_arn: The Amazon Resource Name (ARN) of the snapshot to restore from.
         :param snapshot_name: The snapshot name to restore from.
-        :param snapshot_owner_account: The owner AWS ; account of the snapshot.
+        :param snapshot_owner_account: The Amazon Web Services account that owns the snapshot.
         :param subnet_ids: A list of subnet IDs the workgroup is associated with.
         :param tags: The map of the key-value pairs used to tag the workgroup.
         :param track_name: An optional parameter for the name of the track for the workgroup. If you don't provide a track name, the workgroup is assigned to the current track.
@@ -2980,9 +2972,7 @@ class CfnWorkgroupProps:
 
     @builtins.property
     def snapshot_owner_account(self) -> typing.Optional[builtins.str]:
-        '''The owner AWS ;
-
-        account of the snapshot.
+        '''The Amazon Web Services account that owns the snapshot.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshiftserverless-workgroup.html#cfn-redshiftserverless-workgroup-snapshotowneraccount
         '''