aws-cdk-lib 2.195.0__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_docdb/__init__.py

@@ -29,6 +29,29 @@ By default, the master password will be generated and stored in AWS Secrets Mana
 
 Your cluster will be empty by default.
 
+## Serverless Clusters
+
+DocumentDB supports serverless clusters that automatically scale capacity based on your application's needs.
+To create a serverless cluster, specify the `serverlessV2ScalingConfiguration` instead of `instanceType`:
+
+```python
+# vpc: ec2.Vpc
+
+cluster = docdb.DatabaseCluster(self, "Database",
+    master_user=docdb.Login(
+        username="myuser"
+    ),
+    vpc=vpc,
+    serverless_v2_scaling_configuration=docdb.ServerlessV2ScalingConfiguration(
+        min_capacity=0.5,
+        max_capacity=2
+    ),
+    engine_version="5.0.0"
+)
+```
+
+**Note**: DocumentDB serverless requires engine version 5.0.0 or higher and is not compatible with all features. See the [AWS documentation](https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-serverless-limitations.html) for limitations.
+
 ## Connecting
 
 To control who can access the cluster, use the `.connections` attribute. DocumentDB databases have a default port, so
@@ -303,6 +326,8 @@ cluster = docdb.DatabaseCluster(self, "Database",
 ```
 
 **Note**: `StorageType.IOPT1` is supported starting with engine version 5.0.0.
+
+**Note**: For serverless clusters, storage type is managed automatically and cannot be specified.
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
@@ -370,6 +395,18 @@ from ..aws_secretsmanager import (
     SecretAttachmentTargetProps as _SecretAttachmentTargetProps_9ec7949d,
     SecretRotation as _SecretRotation_38c354d9,
 )
+from ..interfaces.aws_docdb import (
+    DBClusterParameterGroupReference as _DBClusterParameterGroupReference_c3ab43f9,
+    DBClusterReference as _DBClusterReference_9e146947,
+    DBInstanceReference as _DBInstanceReference_81dfbd4e,
+    DBSubnetGroupReference as _DBSubnetGroupReference_4e749f31,
+    EventSubscriptionReference as _EventSubscriptionReference_2048e5f0,
+    IDBClusterParameterGroupRef as _IDBClusterParameterGroupRef_ef5b94f0,
+    IDBClusterRef as _IDBClusterRef_53d579d4,
+    IDBInstanceRef as _IDBInstanceRef_41253090,
+    IDBSubnetGroupRef as _IDBSubnetGroupRef_606c3916,
+    IEventSubscriptionRef as _IEventSubscriptionRef_5849a8d4,
+)
 
 
 @jsii.data_type(
@@ -536,7 +573,7 @@ class CaCertificate(
         return typing.cast(_CaCertificate_e77d2630, jsii.sget(cls, "RDS_CA_RSA4096_G1"))
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDBClusterRef_53d579d4, _ITaggable_36806126)
 class CfnDBCluster(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -566,11 +603,13 @@ class CfnDBCluster(
             deletion_protection=False,
             enable_cloudwatch_logs_exports=["enableCloudwatchLogsExports"],
             engine_version="engineVersion",
+            global_cluster_identifier="globalClusterIdentifier",
             kms_key_id="kmsKeyId",
             manage_master_user_password=False,
             master_username="masterUsername",
             master_user_password="masterUserPassword",
             master_user_secret_kms_key_id="masterUserSecretKmsKeyId",
+            network_type="networkType",
             port=123,
             preferred_backup_window="preferredBackupWindow",
             preferred_maintenance_window="preferredMaintenanceWindow",
@@ -608,11 +647,13 @@ class CfnDBCluster(
         deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
         engine_version: typing.Optional[builtins.str] = None,
+        global_cluster_identifier: typing.Optional[builtins.str] = None,
         kms_key_id: typing.Optional[builtins.str] = None,
         manage_master_user_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         master_username: typing.Optional[builtins.str] = None,
         master_user_password: typing.Optional[builtins.str] = None,
         master_user_secret_kms_key_id: typing.Optional[builtins.str] = None,
+        network_type: typing.Optional[builtins.str] = None,
         port: typing.Optional[jsii.Number] = None,
         preferred_backup_window: typing.Optional[builtins.str] = None,
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
@@ -628,7 +669,8 @@ class CfnDBCluster(
         use_latest_restorable_time: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         vpc_security_group_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DocDB::DBCluster``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param availability_zones: A list of Amazon EC2 Availability Zones that instances in the cluster can be created in.
@@ -639,23 +681,25 @@ class CfnDBCluster(
         :param db_subnet_group_name: A subnet group to associate with this cluster. Constraints: Must match the name of an existing ``DBSubnetGroup`` . Must not be default. Example: ``mySubnetgroup``
         :param deletion_protection: Protects clusters from being accidentally deleted. If enabled, the cluster cannot be deleted unless it is modified and ``DeletionProtection`` is disabled.
         :param enable_cloudwatch_logs_exports: The list of log types that need to be enabled for exporting to Amazon CloudWatch Logs. You can enable audit logs or profiler logs. For more information, see `Auditing Amazon DocumentDB Events <https://docs.aws.amazon.com/documentdb/latest/developerguide/event-auditing.html>`_ and `Profiling Amazon DocumentDB Operations <https://docs.aws.amazon.com/documentdb/latest/developerguide/profiling.html>`_ .
-        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version. Changing the ``EngineVersion`` will start an in-place engine version upgrade. Note that in-place engine version upgrade will cause downtime in the cluster. See `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ before starting an in-place engine version upgrade.
+        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version. If you intend to trigger an in-place upgrade, please refer to `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ . Note that for an in-place engine version upgrade, you need to remove other cluster properties changes (e.g. SecurityGroupId) from the CFN template.
+        :param global_cluster_identifier: The cluster identifier of the new global cluster.
         :param kms_key_id: The AWS KMS key identifier for an encrypted cluster. The AWS KMS key identifier is the Amazon Resource Name (ARN) for the AWS KMS encryption key. If you are creating a cluster using the same AWS account that owns the AWS KMS encryption key that is used to encrypt the new cluster, you can use the AWS KMS key alias instead of the ARN for the AWS KMS encryption key. If an encryption key is not specified in ``KmsKeyId`` : - If the ``StorageEncrypted`` parameter is ``true`` , Amazon DocumentDB uses your default encryption key. AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Regions .
         :param manage_master_user_password: Specifies whether to manage the master user password with Amazon Web Services Secrets Manager. Constraint: You can't manage the master user password with Amazon Web Services Secrets Manager if ``MasterUserPassword`` is specified.
         :param master_username: The name of the master user for the cluster. Constraints: - Must be from 1 to 63 letters or numbers. - The first character must be a letter. - Cannot be a reserved word for the chosen database engine.
         :param master_user_password: The password for the master database user. This password can contain any printable ASCII character except forward slash (/), double quote ("), or the "at" symbol (@). Constraints: Must contain from 8 to 100 characters.
         :param master_user_secret_kms_key_id: The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in Amazon Web Services Secrets Manager. This setting is valid only if the master user password is managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the DB cluster. The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If you don't specify ``MasterUserSecretKmsKeyId`` , then the ``aws/secretsmanager`` KMS key is used to encrypt the secret. If the secret is in a different Amazon Web Services account, then you can't use the ``aws/secretsmanager`` KMS key to encrypt the secret, and you must use a customer managed KMS key. There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a different default KMS key for each Amazon Web Services Region.
+        :param network_type: The network type of the cluster. The network type is determined by the ``DBSubnetGroup`` specified for the cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols ( ``DUAL`` ). For more information, see `DocumentDB clusters in a VPC <https://docs.aws.amazon.com/documentdb/latest/developerguide/vpc-clusters.html>`_ in the Amazon DocumentDB Developer Guide. Valid Values: ``IPV4`` | ``DUAL``
         :param port: Specifies the port that the database engine is listening on.
         :param preferred_backup_window: The daily time range during which automated backups are created if automated backups are enabled using the ``BackupRetentionPeriod`` parameter. The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region . Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes.
         :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region , occurring on a random day of the week. Valid days: Mon, Tue, Wed, Thu, Fri, Sat, Sun Constraints: Minimum 30-minute window.
         :param restore_to_time: The date and time to restore the cluster to. Valid values: A time in Universal Coordinated Time (UTC) format. Constraints: - Must be before the latest restorable time for the instance. - Must be specified if the ``UseLatestRestorableTime`` parameter is not provided. - Cannot be specified if the ``UseLatestRestorableTime`` parameter is ``true`` . - Cannot be specified if the ``RestoreType`` parameter is ``copy-on-write`` . Example: ``2015-03-07T23:45:00Z``
         :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. Constraints: You can't specify ``copy-on-write`` if the engine version of the source DB cluster is earlier than 1.11. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster.
         :param rotate_master_user_password: Specifies whether to rotate the secret managed by Amazon Web Services Secrets Manager for the master user password. This setting is valid only if the master user password is managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the cluster. The secret value contains the updated password. Constraint: You must apply the change immediately when rotating the master user password.
-        :param serverless_v2_scaling_configuration: 
+        :param serverless_v2_scaling_configuration: Contains the scaling configuration of an Amazon DocumentDB Serverless cluster.
         :param snapshot_identifier: The identifier for the snapshot or cluster snapshot to restore from. You can use either the name or the Amazon Resource Name (ARN) to specify a cluster snapshot. However, you can use only the ARN to specify a snapshot. Constraints: - Must match the identifier of an existing snapshot.
         :param source_db_cluster_identifier: The identifier of the source cluster from which to restore. Constraints: - Must match the identifier of an existing ``DBCluster`` .
         :param storage_encrypted: Specifies whether the cluster is encrypted. If you specify ``SourceDBClusterIdentifier`` or ``SnapshotIdentifier`` and don’t specify ``StorageEncrypted`` , the encryption property is inherited from the source cluster or snapshot (unless ``KMSKeyId`` is specified, in which case the restored cluster will be encrypted with that KMS key). If the source is encrypted and ``StorageEncrypted`` is specified to be true, the restored cluster will be encrypted (if you want to use a different KMS key, specify the ``KMSKeyId`` property as well). If the source is unencrypted and ``StorageEncrypted`` is specified to be true, then the ``KMSKeyId`` property must be specified. If the source is encrypted, don’t specify ``StorageEncrypted`` to be false as opting out of encryption is not allowed.
-        :param storage_type: The storage type to associate with the DB cluster. For information on storage types for Amazon DocumentDB clusters, see Cluster storage configurations in the *Amazon DocumentDB Developer Guide* . Valid values for storage type - ``standard | iopt1`` Default value is ``standard`` .. epigraph:: When you create a DocumentDB DB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
+        :param storage_type: The storage type to associate with the DB cluster. For information on storage types for Amazon DocumentDB clusters, see Cluster storage configurations in the *Amazon DocumentDB Developer Guide* . Valid values for storage type - ``standard | iopt1`` Default value is ``standard`` .. epigraph:: When you create an Amazon DocumentDB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
         :param tags: The tags to be assigned to the cluster.
         :param use_latest_restorable_time: A value that is set to ``true`` to restore the cluster to the latest restorable backup time, and ``false`` otherwise. Default: ``false`` Constraints: Cannot be specified if the ``RestoreToTime`` parameter is provided.
         :param vpc_security_group_ids: A list of EC2 VPC security groups to associate with this cluster.
@@ -674,11 +718,13 @@ class CfnDBCluster(
             deletion_protection=deletion_protection,
             enable_cloudwatch_logs_exports=enable_cloudwatch_logs_exports,
             engine_version=engine_version,
+            global_cluster_identifier=global_cluster_identifier,
             kms_key_id=kms_key_id,
             manage_master_user_password=manage_master_user_password,
             master_username=master_username,
             master_user_password=master_user_password,
             master_user_secret_kms_key_id=master_user_secret_kms_key_id,
+            network_type=network_type,
             port=port,
             preferred_backup_window=preferred_backup_window,
             preferred_maintenance_window=preferred_maintenance_window,
@@ -782,6 +828,12 @@ class CfnDBCluster(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dbClusterRef")
+    def db_cluster_ref(self) -> _DBClusterReference_9e146947:
+        '''A reference to a DBCluster resource.'''
+        return typing.cast(_DBClusterReference_9e146947, jsii.get(self, "dbClusterRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -932,6 +984,19 @@ class CfnDBCluster(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "engineVersion", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="globalClusterIdentifier")
+    def global_cluster_identifier(self) -> typing.Optional[builtins.str]:
+        '''The cluster identifier of the new global cluster.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "globalClusterIdentifier"))
+
+    @global_cluster_identifier.setter
+    def global_cluster_identifier(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1df18874740f7d79670e3866720fac8967c1b52aced5a089132ee06a94fd72d2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "globalClusterIdentifier", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="kmsKeyId")
     def kms_key_id(self) -> typing.Optional[builtins.str]:
@@ -1005,6 +1070,19 @@ class CfnDBCluster(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "masterUserSecretKmsKeyId", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="networkType")
+    def network_type(self) -> typing.Optional[builtins.str]:
+        '''The network type of the cluster.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "networkType"))
+
+    @network_type.setter
+    def network_type(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__79c741f6d8f922d19130884d7c02ab03431fc05781cc91b8ec5ac23e2ecd06e2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "networkType", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="port")
     def port(self) -> typing.Optional[jsii.Number]:
@@ -1099,6 +1177,7 @@ class CfnDBCluster(
     def serverless_v2_scaling_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBCluster.ServerlessV2ScalingConfigurationProperty"]]:
+        '''Contains the scaling configuration of an Amazon DocumentDB Serverless cluster.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnDBCluster.ServerlessV2ScalingConfigurationProperty"]], jsii.get(self, "serverlessV2ScalingConfiguration"))
 
     @serverless_v2_scaling_configuration.setter
@@ -1230,9 +1309,10 @@ class CfnDBCluster(
             max_capacity: jsii.Number,
             min_capacity: jsii.Number,
         ) -> None:
-            '''
-            :param max_capacity: 
-            :param min_capacity: 
+            '''Sets the scaling configuration of an Amazon DocumentDB Serverless cluster.
+
+            :param max_capacity: The maximum number of Amazon DocumentDB capacity units (DCUs) for an instance in an Amazon DocumentDB Serverless cluster. You can specify DCU values in half-step increments, such as 32, 32.5, 33, and so on.
+            :param min_capacity: The minimum number of Amazon DocumentDB capacity units (DCUs) for an instance in an Amazon DocumentDB Serverless cluster. You can specify DCU values in half-step increments, such as 8, 8.5, 9, and so on.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-docdb-dbcluster-serverlessv2scalingconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -1259,7 +1339,10 @@ class CfnDBCluster(
 
         @builtins.property
         def max_capacity(self) -> jsii.Number:
-            '''
+            '''The maximum number of Amazon DocumentDB capacity units (DCUs) for an instance in an Amazon DocumentDB Serverless cluster.
+
+            You can specify DCU values in half-step increments, such as 32, 32.5, 33, and so on.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-docdb-dbcluster-serverlessv2scalingconfiguration.html#cfn-docdb-dbcluster-serverlessv2scalingconfiguration-maxcapacity
             '''
             result = self._values.get("max_capacity")
@@ -1268,7 +1351,10 @@ class CfnDBCluster(
 
         @builtins.property
         def min_capacity(self) -> jsii.Number:
-            '''
+            '''The minimum number of Amazon DocumentDB capacity units (DCUs) for an instance in an Amazon DocumentDB Serverless cluster.
+
+            You can specify DCU values in half-step increments, such as 8, 8.5, 9, and so on.
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-docdb-dbcluster-serverlessv2scalingconfiguration.html#cfn-docdb-dbcluster-serverlessv2scalingconfiguration-mincapacity
             '''
             result = self._values.get("min_capacity")
@@ -1287,7 +1373,7 @@ class CfnDBCluster(
             )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDBClusterParameterGroupRef_ef5b94f0, _ITaggable_36806126)
 class CfnDBClusterParameterGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1341,7 +1427,8 @@ class CfnDBClusterParameterGroup(
         name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DocDB::DBClusterParameterGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param description: The description for the cluster parameter group.
@@ -1407,6 +1494,14 @@ class CfnDBClusterParameterGroup(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dbClusterParameterGroupRef")
+    def db_cluster_parameter_group_ref(
+        self,
+    ) -> _DBClusterParameterGroupReference_c3ab43f9:
+        '''A reference to a DBClusterParameterGroup resource.'''
+        return typing.cast(_DBClusterParameterGroupReference_c3ab43f9, jsii.get(self, "dbClusterParameterGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1630,11 +1725,13 @@ class CfnDBClusterParameterGroupProps:
         "deletion_protection": "deletionProtection",
         "enable_cloudwatch_logs_exports": "enableCloudwatchLogsExports",
         "engine_version": "engineVersion",
+        "global_cluster_identifier": "globalClusterIdentifier",
         "kms_key_id": "kmsKeyId",
         "manage_master_user_password": "manageMasterUserPassword",
         "master_username": "masterUsername",
         "master_user_password": "masterUserPassword",
         "master_user_secret_kms_key_id": "masterUserSecretKmsKeyId",
+        "network_type": "networkType",
         "port": "port",
         "preferred_backup_window": "preferredBackupWindow",
         "preferred_maintenance_window": "preferredMaintenanceWindow",
@@ -1664,11 +1761,13 @@ class CfnDBClusterProps:
         deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
         engine_version: typing.Optional[builtins.str] = None,
+        global_cluster_identifier: typing.Optional[builtins.str] = None,
         kms_key_id: typing.Optional[builtins.str] = None,
         manage_master_user_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
         master_username: typing.Optional[builtins.str] = None,
         master_user_password: typing.Optional[builtins.str] = None,
         master_user_secret_kms_key_id: typing.Optional[builtins.str] = None,
+        network_type: typing.Optional[builtins.str] = None,
         port: typing.Optional[jsii.Number] = None,
         preferred_backup_window: typing.Optional[builtins.str] = None,
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
@@ -1694,23 +1793,25 @@ class CfnDBClusterProps:
         :param db_subnet_group_name: A subnet group to associate with this cluster. Constraints: Must match the name of an existing ``DBSubnetGroup`` . Must not be default. Example: ``mySubnetgroup``
         :param deletion_protection: Protects clusters from being accidentally deleted. If enabled, the cluster cannot be deleted unless it is modified and ``DeletionProtection`` is disabled.
         :param enable_cloudwatch_logs_exports: The list of log types that need to be enabled for exporting to Amazon CloudWatch Logs. You can enable audit logs or profiler logs. For more information, see `Auditing Amazon DocumentDB Events <https://docs.aws.amazon.com/documentdb/latest/developerguide/event-auditing.html>`_ and `Profiling Amazon DocumentDB Operations <https://docs.aws.amazon.com/documentdb/latest/developerguide/profiling.html>`_ .
-        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version. Changing the ``EngineVersion`` will start an in-place engine version upgrade. Note that in-place engine version upgrade will cause downtime in the cluster. See `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ before starting an in-place engine version upgrade.
+        :param engine_version: The version number of the database engine to use. The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version. If you intend to trigger an in-place upgrade, please refer to `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ . Note that for an in-place engine version upgrade, you need to remove other cluster properties changes (e.g. SecurityGroupId) from the CFN template.
+        :param global_cluster_identifier: The cluster identifier of the new global cluster.
         :param kms_key_id: The AWS KMS key identifier for an encrypted cluster. The AWS KMS key identifier is the Amazon Resource Name (ARN) for the AWS KMS encryption key. If you are creating a cluster using the same AWS account that owns the AWS KMS encryption key that is used to encrypt the new cluster, you can use the AWS KMS key alias instead of the ARN for the AWS KMS encryption key. If an encryption key is not specified in ``KmsKeyId`` : - If the ``StorageEncrypted`` parameter is ``true`` , Amazon DocumentDB uses your default encryption key. AWS KMS creates the default encryption key for your AWS account . Your AWS account has a different default encryption key for each AWS Regions .
         :param manage_master_user_password: Specifies whether to manage the master user password with Amazon Web Services Secrets Manager. Constraint: You can't manage the master user password with Amazon Web Services Secrets Manager if ``MasterUserPassword`` is specified.
         :param master_username: The name of the master user for the cluster. Constraints: - Must be from 1 to 63 letters or numbers. - The first character must be a letter. - Cannot be a reserved word for the chosen database engine.
         :param master_user_password: The password for the master database user. This password can contain any printable ASCII character except forward slash (/), double quote ("), or the "at" symbol (@). Constraints: Must contain from 8 to 100 characters.
         :param master_user_secret_kms_key_id: The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in Amazon Web Services Secrets Manager. This setting is valid only if the master user password is managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the DB cluster. The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If you don't specify ``MasterUserSecretKmsKeyId`` , then the ``aws/secretsmanager`` KMS key is used to encrypt the secret. If the secret is in a different Amazon Web Services account, then you can't use the ``aws/secretsmanager`` KMS key to encrypt the secret, and you must use a customer managed KMS key. There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a different default KMS key for each Amazon Web Services Region.
+        :param network_type: The network type of the cluster. The network type is determined by the ``DBSubnetGroup`` specified for the cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols ( ``DUAL`` ). For more information, see `DocumentDB clusters in a VPC <https://docs.aws.amazon.com/documentdb/latest/developerguide/vpc-clusters.html>`_ in the Amazon DocumentDB Developer Guide. Valid Values: ``IPV4`` | ``DUAL``
         :param port: Specifies the port that the database engine is listening on.
         :param preferred_backup_window: The daily time range during which automated backups are created if automated backups are enabled using the ``BackupRetentionPeriod`` parameter. The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region . Constraints: - Must be in the format ``hh24:mi-hh24:mi`` . - Must be in Universal Coordinated Time (UTC). - Must not conflict with the preferred maintenance window. - Must be at least 30 minutes.
         :param preferred_maintenance_window: The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC). Format: ``ddd:hh24:mi-ddd:hh24:mi`` The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region , occurring on a random day of the week. Valid days: Mon, Tue, Wed, Thu, Fri, Sat, Sun Constraints: Minimum 30-minute window.
         :param restore_to_time: The date and time to restore the cluster to. Valid values: A time in Universal Coordinated Time (UTC) format. Constraints: - Must be before the latest restorable time for the instance. - Must be specified if the ``UseLatestRestorableTime`` parameter is not provided. - Cannot be specified if the ``UseLatestRestorableTime`` parameter is ``true`` . - Cannot be specified if the ``RestoreType`` parameter is ``copy-on-write`` . Example: ``2015-03-07T23:45:00Z``
         :param restore_type: The type of restore to be performed. You can specify one of the following values:. - ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster. - ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster. Constraints: You can't specify ``copy-on-write`` if the engine version of the source DB cluster is earlier than 1.11. If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster.
         :param rotate_master_user_password: Specifies whether to rotate the secret managed by Amazon Web Services Secrets Manager for the master user password. This setting is valid only if the master user password is managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the cluster. The secret value contains the updated password. Constraint: You must apply the change immediately when rotating the master user password.
-        :param serverless_v2_scaling_configuration: 
+        :param serverless_v2_scaling_configuration: Contains the scaling configuration of an Amazon DocumentDB Serverless cluster.
         :param snapshot_identifier: The identifier for the snapshot or cluster snapshot to restore from. You can use either the name or the Amazon Resource Name (ARN) to specify a cluster snapshot. However, you can use only the ARN to specify a snapshot. Constraints: - Must match the identifier of an existing snapshot.
         :param source_db_cluster_identifier: The identifier of the source cluster from which to restore. Constraints: - Must match the identifier of an existing ``DBCluster`` .
         :param storage_encrypted: Specifies whether the cluster is encrypted. If you specify ``SourceDBClusterIdentifier`` or ``SnapshotIdentifier`` and don’t specify ``StorageEncrypted`` , the encryption property is inherited from the source cluster or snapshot (unless ``KMSKeyId`` is specified, in which case the restored cluster will be encrypted with that KMS key). If the source is encrypted and ``StorageEncrypted`` is specified to be true, the restored cluster will be encrypted (if you want to use a different KMS key, specify the ``KMSKeyId`` property as well). If the source is unencrypted and ``StorageEncrypted`` is specified to be true, then the ``KMSKeyId`` property must be specified. If the source is encrypted, don’t specify ``StorageEncrypted`` to be false as opting out of encryption is not allowed.
-        :param storage_type: The storage type to associate with the DB cluster. For information on storage types for Amazon DocumentDB clusters, see Cluster storage configurations in the *Amazon DocumentDB Developer Guide* . Valid values for storage type - ``standard | iopt1`` Default value is ``standard`` .. epigraph:: When you create a DocumentDB DB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
+        :param storage_type: The storage type to associate with the DB cluster. For information on storage types for Amazon DocumentDB clusters, see Cluster storage configurations in the *Amazon DocumentDB Developer Guide* . Valid values for storage type - ``standard | iopt1`` Default value is ``standard`` .. epigraph:: When you create an Amazon DocumentDB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
         :param tags: The tags to be assigned to the cluster.
         :param use_latest_restorable_time: A value that is set to ``true`` to restore the cluster to the latest restorable backup time, and ``false`` otherwise. Default: ``false`` Constraints: Cannot be specified if the ``RestoreToTime`` parameter is provided.
         :param vpc_security_group_ids: A list of EC2 VPC security groups to associate with this cluster.
@@ -1734,11 +1835,13 @@ class CfnDBClusterProps:
                 deletion_protection=False,
                 enable_cloudwatch_logs_exports=["enableCloudwatchLogsExports"],
                 engine_version="engineVersion",
+                global_cluster_identifier="globalClusterIdentifier",
                 kms_key_id="kmsKeyId",
                 manage_master_user_password=False,
                 master_username="masterUsername",
                 master_user_password="masterUserPassword",
                 master_user_secret_kms_key_id="masterUserSecretKmsKeyId",
+                network_type="networkType",
                 port=123,
                 preferred_backup_window="preferredBackupWindow",
                 preferred_maintenance_window="preferredMaintenanceWindow",
@@ -1772,11 +1875,13 @@ class CfnDBClusterProps:
             check_type(argname="argument deletion_protection", value=deletion_protection, expected_type=type_hints["deletion_protection"])
             check_type(argname="argument enable_cloudwatch_logs_exports", value=enable_cloudwatch_logs_exports, expected_type=type_hints["enable_cloudwatch_logs_exports"])
             check_type(argname="argument engine_version", value=engine_version, expected_type=type_hints["engine_version"])
+            check_type(argname="argument global_cluster_identifier", value=global_cluster_identifier, expected_type=type_hints["global_cluster_identifier"])
             check_type(argname="argument kms_key_id", value=kms_key_id, expected_type=type_hints["kms_key_id"])
             check_type(argname="argument manage_master_user_password", value=manage_master_user_password, expected_type=type_hints["manage_master_user_password"])
             check_type(argname="argument master_username", value=master_username, expected_type=type_hints["master_username"])
             check_type(argname="argument master_user_password", value=master_user_password, expected_type=type_hints["master_user_password"])
             check_type(argname="argument master_user_secret_kms_key_id", value=master_user_secret_kms_key_id, expected_type=type_hints["master_user_secret_kms_key_id"])
+            check_type(argname="argument network_type", value=network_type, expected_type=type_hints["network_type"])
             check_type(argname="argument port", value=port, expected_type=type_hints["port"])
             check_type(argname="argument preferred_backup_window", value=preferred_backup_window, expected_type=type_hints["preferred_backup_window"])
             check_type(argname="argument preferred_maintenance_window", value=preferred_maintenance_window, expected_type=type_hints["preferred_maintenance_window"])
@@ -1810,6 +1915,8 @@ class CfnDBClusterProps:
             self._values["enable_cloudwatch_logs_exports"] = enable_cloudwatch_logs_exports
         if engine_version is not None:
             self._values["engine_version"] = engine_version
+        if global_cluster_identifier is not None:
+            self._values["global_cluster_identifier"] = global_cluster_identifier
         if kms_key_id is not None:
             self._values["kms_key_id"] = kms_key_id
         if manage_master_user_password is not None:
@@ -1820,6 +1927,8 @@ class CfnDBClusterProps:
             self._values["master_user_password"] = master_user_password
         if master_user_secret_kms_key_id is not None:
             self._values["master_user_secret_kms_key_id"] = master_user_secret_kms_key_id
+        if network_type is not None:
+            self._values["network_type"] = network_type
         if port is not None:
             self._values["port"] = port
         if preferred_backup_window is not None:
@@ -1957,13 +2066,22 @@ class CfnDBClusterProps:
 
         The ``--engine-version`` will default to the latest major engine version. For production workloads, we recommend explicitly declaring this parameter with the intended major engine version.
 
-        Changing the ``EngineVersion`` will start an in-place engine version upgrade. Note that in-place engine version upgrade will cause downtime in the cluster. See `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ before starting an in-place engine version upgrade.
+        If you intend to trigger an in-place upgrade, please refer to `Amazon DocumentDB in-place major version upgrade <https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-mvu.html>`_ . Note that for an in-place engine version upgrade, you need to remove other cluster properties changes (e.g. SecurityGroupId) from the CFN template.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-engineversion
         '''
         result = self._values.get("engine_version")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def global_cluster_identifier(self) -> typing.Optional[builtins.str]:
+        '''The cluster identifier of the new global cluster.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-globalclusteridentifier
+        '''
+        result = self._values.get("global_cluster_identifier")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def kms_key_id(self) -> typing.Optional[builtins.str]:
         '''The AWS KMS key identifier for an encrypted cluster.
@@ -2039,6 +2157,21 @@ class CfnDBClusterProps:
         result = self._values.get("master_user_secret_kms_key_id")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def network_type(self) -> typing.Optional[builtins.str]:
+        '''The network type of the cluster.
+
+        The network type is determined by the ``DBSubnetGroup`` specified for the cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols ( ``DUAL`` ).
+
+        For more information, see `DocumentDB clusters in a VPC <https://docs.aws.amazon.com/documentdb/latest/developerguide/vpc-clusters.html>`_ in the Amazon DocumentDB Developer Guide.
+
+        Valid Values: ``IPV4`` | ``DUAL``
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-networktype
+        '''
+        result = self._values.get("network_type")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def port(self) -> typing.Optional[jsii.Number]:
         '''Specifies the port that the database engine is listening on.
@@ -2138,7 +2271,8 @@ class CfnDBClusterProps:
     def serverless_v2_scaling_configuration(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnDBCluster.ServerlessV2ScalingConfigurationProperty]]:
-        '''
+        '''Contains the scaling configuration of an Amazon DocumentDB Serverless cluster.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-serverlessv2scalingconfiguration
         '''
         result = self._values.get("serverless_v2_scaling_configuration")
@@ -2196,7 +2330,7 @@ class CfnDBClusterProps:
         Default value is ``standard``
         .. epigraph::
 
-           When you create a DocumentDB DB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
+           When you create an Amazon DocumentDB cluster with the storage type set to ``iopt1`` , the storage type is returned in the response. The storage type isn't returned when you set it to ``standard`` .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-storagetype
         '''
@@ -2248,7 +2382,7 @@ class CfnDBClusterProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDBInstanceRef_41253090, _ITaggable_36806126)
 class CfnDBInstance(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2303,7 +2437,8 @@ class CfnDBInstance(
         preferred_maintenance_window: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DocDB::DBInstance``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param db_cluster_identifier: The identifier of the cluster that the instance will belong to.
@@ -2399,6 +2534,12 @@ class CfnDBInstance(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dbInstanceRef")
+    def db_instance_ref(self) -> _DBInstanceReference_81dfbd4e:
+        '''A reference to a DBInstance resource.'''
+        return typing.cast(_DBInstanceReference_81dfbd4e, jsii.get(self, "dbInstanceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -2808,7 +2949,7 @@ class CfnDBInstanceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IDBSubnetGroupRef_606c3916, _ITaggable_36806126)
 class CfnDBSubnetGroup(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -2851,7 +2992,8 @@ class CfnDBSubnetGroup(
         db_subnet_group_name: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DocDB::DBSubnetGroup``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param db_subnet_group_description: The description for the subnet group.
@@ -2915,6 +3057,12 @@ class CfnDBSubnetGroup(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="dbSubnetGroupRef")
+    def db_subnet_group_ref(self) -> _DBSubnetGroupReference_4e749f31:
+        '''A reference to a DBSubnetGroup resource.'''
+        return typing.cast(_DBSubnetGroupReference_4e749f31, jsii.get(self, "dbSubnetGroupRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -3093,7 +3241,7 @@ class CfnDBSubnetGroupProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IEventSubscriptionRef_5849a8d4)
 class CfnEventSubscription(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -3141,7 +3289,8 @@ class CfnEventSubscription(
         source_type: typing.Optional[builtins.str] = None,
         subscription_name: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::DocDB::EventSubscription``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic created for event notification. Amazon SNS creates the ARN when you create a topic and subscribe to it.
@@ -3209,6 +3358,12 @@ class CfnEventSubscription(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="eventSubscriptionRef")
+    def event_subscription_ref(self) -> _EventSubscriptionReference_2048e5f0:
+        '''A reference to a EventSubscription resource.'''
+        return typing.cast(_EventSubscriptionReference_2048e5f0, jsii.get(self, "eventSubscriptionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="snsTopicArn")
     def sns_topic_arn(self) -> builtins.str:
@@ -3723,7 +3878,6 @@ class DatabaseClusterAttributes:
     jsii_type="aws-cdk-lib.aws_docdb.DatabaseClusterProps",
     jsii_struct_bases=[],
     name_mapping={
-        "instance_type": "instanceType",
         "master_user": "masterUser",
         "vpc": "vpc",
         "backup": "backup",
@@ -3740,6 +3894,7 @@ class DatabaseClusterAttributes:
         "instance_identifier_base": "instanceIdentifierBase",
         "instance_removal_policy": "instanceRemovalPolicy",
         "instances": "instances",
+        "instance_type": "instanceType",
         "kms_key": "kmsKey",
         "parameter_group": "parameterGroup",
         "port": "port",
@@ -3747,6 +3902,7 @@ class DatabaseClusterAttributes:
         "removal_policy": "removalPolicy",
         "security_group": "securityGroup",
         "security_group_removal_policy": "securityGroupRemovalPolicy",
+        "serverless_v2_scaling_configuration": "serverlessV2ScalingConfiguration",
         "storage_encrypted": "storageEncrypted",
         "storage_type": "storageType",
         "vpc_subnets": "vpcSubnets",
@@ -3756,7 +3912,6 @@ class DatabaseClusterProps:
     def __init__(
         self,
         *,
-        instance_type: _InstanceType_f64915b9,
         master_user: typing.Union["Login", typing.Dict[builtins.str, typing.Any]],
         vpc: _IVpc_f30d5663,
         backup: typing.Optional[typing.Union[BackupProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3773,6 +3928,7 @@ class DatabaseClusterProps:
         instance_identifier_base: typing.Optional[builtins.str] = None,
         instance_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         instances: typing.Optional[jsii.Number] = None,
+        instance_type: typing.Optional[_InstanceType_f64915b9] = None,
         kms_key: typing.Optional[_IKey_5f11635f] = None,
         parameter_group: typing.Optional["IClusterParameterGroup"] = None,
         port: typing.Optional[jsii.Number] = None,
@@ -3780,13 +3936,13 @@ class DatabaseClusterProps:
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         security_group_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        serverless_v2_scaling_configuration: typing.Optional[typing.Union["ServerlessV2ScalingConfiguration", typing.Dict[builtins.str, typing.Any]]] = None,
         storage_encrypted: typing.Optional[builtins.bool] = None,
         storage_type: typing.Optional["StorageType"] = None,
         vpc_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Properties for a new database cluster.
 
-        :param instance_type: What type of instance to start for the replicas.
         :param master_user: Username and password for the administrative user.
         :param vpc: What subnets to run the DocumentDB instances in. Must be at least 2 subnets in two different AZs.
         :param backup: Backup settings. Default: - Backup retention period for automated backups is 1 day. Backup preferred window is set to a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
@@ -3800,9 +3956,10 @@ class DatabaseClusterProps:
         :param engine_version: What version of the database to start. Default: - the latest major version
         :param export_audit_logs_to_cloud_watch: Whether the audit logs should be exported to CloudWatch. Note that you also have to configure the audit log export in the Cluster's Parameter Group. Default: false
         :param export_profiler_logs_to_cloud_watch: Whether the profiler logs should be exported to CloudWatch. Note that you also have to configure the profiler log export in the Cluster's Parameter Group. Default: false
-        :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Default: - ``dbClusterName`` is used with the word "Instance" appended. If ``dbClusterName`` is not provided, the identifier is automatically generated.
+        :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Only applicable for provisioned clusters. Default: - ``dbClusterName`` is used with the word "Instance" appended. If ``dbClusterName`` is not provided, the identifier is automatically generated.
         :param instance_removal_policy: The removal policy to apply to the cluster's instances. Cannot be set to ``SNAPSHOT``. Default: - ``RemovalPolicy.DESTROY`` when ``removalPolicy`` is set to ``SNAPSHOT``, ``removalPolicy`` otherwise.
         :param instances: Number of DocDB compute instances. Default: 1
+        :param instance_type: What type of instance to start for the replicas. Required for provisioned clusters, not applicable for serverless clusters. Default: None
         :param kms_key: The KMS key for storage encryption. Default: - default master key.
         :param parameter_group: The DB parameter group to associate with the instance. Default: no parameter group
         :param port: The port the DocumentDB cluster will listen on. Default: DatabaseCluster.DEFAULT_PORT
@@ -3810,6 +3967,7 @@ class DatabaseClusterProps:
         :param removal_policy: The removal policy to apply when the cluster and its instances are removed or replaced during a stack update, or when the stack is deleted. This removal policy also applies to the implicit security group created for the cluster if one is not supplied as a parameter. When set to ``SNAPSHOT``, the removal policy for the instances and the security group will default to ``DESTROY`` as those resources do not support the policy. Use the ``instanceRemovalPolicy`` and ``securityGroupRemovalPolicy`` to change the behavior. Default: - Retain cluster.
         :param security_group: Security group. Default: a new security group is created.
         :param security_group_removal_policy: The removal policy to apply to the cluster's security group. Cannot be set to ``SNAPSHOT``. Default: - ``RemovalPolicy.DESTROY`` when ``removalPolicy`` is set to ``SNAPSHOT``, ``removalPolicy`` otherwise.
+        :param serverless_v2_scaling_configuration: ServerlessV2 scaling configuration. When specified, the cluster will be created as a serverless cluster. Default: None
         :param storage_encrypted: Whether to enable storage encryption. Default: true
         :param storage_type: The storage type of the DocDB cluster. I/O-optimized storage is supported starting with engine version 5.0.0. Default: StorageType.STANDARD
         :param vpc_subnets: Where to place the instances within the VPC. Default: private subnets
@@ -3820,7 +3978,6 @@ class DatabaseClusterProps:
 
             # vpc: ec2.Vpc
             
-            
             cluster = docdb.DatabaseCluster(self, "Database",
                 master_user=docdb.Login(
                     username="myuser"
@@ -3830,18 +3987,19 @@ class DatabaseClusterProps:
                     subnet_type=ec2.SubnetType.PUBLIC
                 ),
                 vpc=vpc,
-                removal_policy=RemovalPolicy.SNAPSHOT
+                deletion_protection=True
             )
         '''
         if isinstance(master_user, dict):
             master_user = Login(**master_user)
         if isinstance(backup, dict):
             backup = BackupProps(**backup)
+        if isinstance(serverless_v2_scaling_configuration, dict):
+            serverless_v2_scaling_configuration = ServerlessV2ScalingConfiguration(**serverless_v2_scaling_configuration)
         if isinstance(vpc_subnets, dict):
             vpc_subnets = _SubnetSelection_e57d76df(**vpc_subnets)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__bb24ec128a97ca07df15f55d4e96dda851d4300951806a7a3d7f391cc4e83218)
-            check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument master_user", value=master_user, expected_type=type_hints["master_user"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
             check_type(argname="argument backup", value=backup, expected_type=type_hints["backup"])
@@ -3858,6 +4016,7 @@ class DatabaseClusterProps:
             check_type(argname="argument instance_identifier_base", value=instance_identifier_base, expected_type=type_hints["instance_identifier_base"])
             check_type(argname="argument instance_removal_policy", value=instance_removal_policy, expected_type=type_hints["instance_removal_policy"])
             check_type(argname="argument instances", value=instances, expected_type=type_hints["instances"])
+            check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument kms_key", value=kms_key, expected_type=type_hints["kms_key"])
             check_type(argname="argument parameter_group", value=parameter_group, expected_type=type_hints["parameter_group"])
             check_type(argname="argument port", value=port, expected_type=type_hints["port"])
@@ -3865,11 +4024,11 @@ class DatabaseClusterProps:
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
             check_type(argname="argument security_group", value=security_group, expected_type=type_hints["security_group"])
             check_type(argname="argument security_group_removal_policy", value=security_group_removal_policy, expected_type=type_hints["security_group_removal_policy"])
+            check_type(argname="argument serverless_v2_scaling_configuration", value=serverless_v2_scaling_configuration, expected_type=type_hints["serverless_v2_scaling_configuration"])
             check_type(argname="argument storage_encrypted", value=storage_encrypted, expected_type=type_hints["storage_encrypted"])
             check_type(argname="argument storage_type", value=storage_type, expected_type=type_hints["storage_type"])
             check_type(argname="argument vpc_subnets", value=vpc_subnets, expected_type=type_hints["vpc_subnets"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
-            "instance_type": instance_type,
             "master_user": master_user,
             "vpc": vpc,
         }
@@ -3901,6 +4060,8 @@ class DatabaseClusterProps:
             self._values["instance_removal_policy"] = instance_removal_policy
         if instances is not None:
             self._values["instances"] = instances
+        if instance_type is not None:
+            self._values["instance_type"] = instance_type
         if kms_key is not None:
             self._values["kms_key"] = kms_key
         if parameter_group is not None:
@@ -3915,6 +4076,8 @@ class DatabaseClusterProps:
             self._values["security_group"] = security_group
         if security_group_removal_policy is not None:
             self._values["security_group_removal_policy"] = security_group_removal_policy
+        if serverless_v2_scaling_configuration is not None:
+            self._values["serverless_v2_scaling_configuration"] = serverless_v2_scaling_configuration
         if storage_encrypted is not None:
             self._values["storage_encrypted"] = storage_encrypted
         if storage_type is not None:
@@ -3922,13 +4085,6 @@ class DatabaseClusterProps:
         if vpc_subnets is not None:
             self._values["vpc_subnets"] = vpc_subnets
 
-    @builtins.property
-    def instance_type(self) -> _InstanceType_f64915b9:
-        '''What type of instance to start for the replicas.'''
-        result = self._values.get("instance_type")
-        assert result is not None, "Required property 'instance_type' is missing"
-        return typing.cast(_InstanceType_f64915b9, result)
-
     @builtins.property
     def master_user(self) -> "Login":
         '''Username and password for the administrative user.'''
@@ -4077,6 +4233,7 @@ class DatabaseClusterProps:
         '''Base identifier for instances.
 
         Every replica is named by appending the replica number to this string, 1-based.
+        Only applicable for provisioned clusters.
 
         :default:
 
@@ -4108,6 +4265,17 @@ class DatabaseClusterProps:
         result = self._values.get("instances")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def instance_type(self) -> typing.Optional[_InstanceType_f64915b9]:
+        '''What type of instance to start for the replicas.
+
+        Required for provisioned clusters, not applicable for serverless clusters.
+
+        :default: None
+        '''
+        result = self._values.get("instance_type")
+        return typing.cast(typing.Optional[_InstanceType_f64915b9], result)
+
     @builtins.property
     def kms_key(self) -> typing.Optional[_IKey_5f11635f]:
         '''The KMS key for storage encryption.
@@ -4193,6 +4361,19 @@ class DatabaseClusterProps:
         result = self._values.get("security_group_removal_policy")
         return typing.cast(typing.Optional[_RemovalPolicy_9f93c814], result)
 
+    @builtins.property
+    def serverless_v2_scaling_configuration(
+        self,
+    ) -> typing.Optional["ServerlessV2ScalingConfiguration"]:
+        '''ServerlessV2 scaling configuration.
+
+        When specified, the cluster will be created as a serverless cluster.
+
+        :default: None
+        '''
+        result = self._values.get("serverless_v2_scaling_configuration")
+        return typing.cast(typing.Optional["ServerlessV2ScalingConfiguration"], result)
+
     @builtins.property
     def storage_encrypted(self) -> typing.Optional[builtins.bool]:
         '''Whether to enable storage encryption.
@@ -4578,6 +4759,12 @@ class DatabaseSecret(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
 
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_docdb.DatabaseSecretProps",
@@ -5018,7 +5205,6 @@ class Login:
 
             # vpc: ec2.Vpc
             
-            
             cluster = docdb.DatabaseCluster(self, "Database",
                 master_user=docdb.Login(
                     username="myuser"
@@ -5028,7 +5214,7 @@ class Login:
                     subnet_type=ec2.SubnetType.PUBLIC
                 ),
                 vpc=vpc,
-                removal_policy=RemovalPolicy.SNAPSHOT
+                deletion_protection=True
             )
         '''
         if __debug__:
@@ -5191,6 +5377,71 @@ class RotationMultiUserOptions:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_docdb.ServerlessV2ScalingConfiguration",
+    jsii_struct_bases=[],
+    name_mapping={"max_capacity": "maxCapacity", "min_capacity": "minCapacity"},
+)
+class ServerlessV2ScalingConfiguration:
+    def __init__(self, *, max_capacity: jsii.Number, min_capacity: jsii.Number) -> None:
+        '''ServerlessV2 scaling configuration for DocumentDB clusters.
+
+        :param max_capacity: The maximum number of DocumentDB capacity units (DCUs) for a DocumentDB instance in a DocumentDB Serverless cluster.
+        :param min_capacity: The minimum number of DocumentDB capacity units (DCUs) for a DocumentDB instance in a DocumentDB Serverless cluster.
+
+        :exampleMetadata: infused
+
+        Example::
+
+            # vpc: ec2.Vpc
+            
+            cluster = docdb.DatabaseCluster(self, "Database",
+                master_user=docdb.Login(
+                    username="myuser"
+                ),
+                vpc=vpc,
+                serverless_v2_scaling_configuration=docdb.ServerlessV2ScalingConfiguration(
+                    min_capacity=0.5,
+                    max_capacity=2
+                ),
+                engine_version="5.0.0"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__db0de72551b166907369891918b0eccf227b067c44151aff0f889642ecea6a78)
+            check_type(argname="argument max_capacity", value=max_capacity, expected_type=type_hints["max_capacity"])
+            check_type(argname="argument min_capacity", value=min_capacity, expected_type=type_hints["min_capacity"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "max_capacity": max_capacity,
+            "min_capacity": min_capacity,
+        }
+
+    @builtins.property
+    def max_capacity(self) -> jsii.Number:
+        '''The maximum number of DocumentDB capacity units (DCUs) for a DocumentDB instance in a DocumentDB Serverless cluster.'''
+        result = self._values.get("max_capacity")
+        assert result is not None, "Required property 'max_capacity' is missing"
+        return typing.cast(jsii.Number, result)
+
+    @builtins.property
+    def min_capacity(self) -> jsii.Number:
+        '''The minimum number of DocumentDB capacity units (DCUs) for a DocumentDB instance in a DocumentDB Serverless cluster.'''
+        result = self._values.get("min_capacity")
+        assert result is not None, "Required property 'min_capacity' is missing"
+        return typing.cast(jsii.Number, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "ServerlessV2ScalingConfiguration(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.enum(jsii_type="aws-cdk-lib.aws_docdb.StorageType")
 class StorageType(enum.Enum):
     '''The storage type of the DocDB cluster.
@@ -5299,6 +5550,12 @@ class ClusterParameterGroup(
             check_type(argname="argument parameter_group_name", value=parameter_group_name, expected_type=type_hints["parameter_group_name"])
         return typing.cast(IClusterParameterGroup, jsii.sinvoke(cls, "fromParameterGroupName", [scope, id, parameter_group_name]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="parameterGroupName")
     def parameter_group_name(self) -> builtins.str:
@@ -5321,7 +5578,6 @@ class DatabaseCluster(
 
         # vpc: ec2.Vpc
         
-        
         cluster = docdb.DatabaseCluster(self, "Database",
             master_user=docdb.Login(
                 username="myuser"
@@ -5331,7 +5587,7 @@ class DatabaseCluster(
                 subnet_type=ec2.SubnetType.PUBLIC
             ),
             vpc=vpc,
-            removal_policy=RemovalPolicy.SNAPSHOT
+            deletion_protection=True
         )
     '''
 
@@ -5340,7 +5596,6 @@ class DatabaseCluster(
         scope: _constructs_77d1e7e8.Construct,
         id: builtins.str,
         *,
-        instance_type: _InstanceType_f64915b9,
         master_user: typing.Union[Login, typing.Dict[builtins.str, typing.Any]],
         vpc: _IVpc_f30d5663,
         backup: typing.Optional[typing.Union[BackupProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5357,6 +5612,7 @@ class DatabaseCluster(
         instance_identifier_base: typing.Optional[builtins.str] = None,
         instance_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         instances: typing.Optional[jsii.Number] = None,
+        instance_type: typing.Optional[_InstanceType_f64915b9] = None,
         kms_key: typing.Optional[_IKey_5f11635f] = None,
         parameter_group: typing.Optional[IClusterParameterGroup] = None,
         port: typing.Optional[jsii.Number] = None,
@@ -5364,6 +5620,7 @@ class DatabaseCluster(
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
         security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
         security_group_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+        serverless_v2_scaling_configuration: typing.Optional[typing.Union[ServerlessV2ScalingConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
         storage_encrypted: typing.Optional[builtins.bool] = None,
         storage_type: typing.Optional[StorageType] = None,
         vpc_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5371,7 +5628,6 @@ class DatabaseCluster(
         '''
         :param scope: -
         :param id: -
-        :param instance_type: What type of instance to start for the replicas.
         :param master_user: Username and password for the administrative user.
         :param vpc: What subnets to run the DocumentDB instances in. Must be at least 2 subnets in two different AZs.
         :param backup: Backup settings. Default: - Backup retention period for automated backups is 1 day. Backup preferred window is set to a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week.
@@ -5385,9 +5641,10 @@ class DatabaseCluster(
         :param engine_version: What version of the database to start. Default: - the latest major version
         :param export_audit_logs_to_cloud_watch: Whether the audit logs should be exported to CloudWatch. Note that you also have to configure the audit log export in the Cluster's Parameter Group. Default: false
         :param export_profiler_logs_to_cloud_watch: Whether the profiler logs should be exported to CloudWatch. Note that you also have to configure the profiler log export in the Cluster's Parameter Group. Default: false
-        :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Default: - ``dbClusterName`` is used with the word "Instance" appended. If ``dbClusterName`` is not provided, the identifier is automatically generated.
+        :param instance_identifier_base: Base identifier for instances. Every replica is named by appending the replica number to this string, 1-based. Only applicable for provisioned clusters. Default: - ``dbClusterName`` is used with the word "Instance" appended. If ``dbClusterName`` is not provided, the identifier is automatically generated.
         :param instance_removal_policy: The removal policy to apply to the cluster's instances. Cannot be set to ``SNAPSHOT``. Default: - ``RemovalPolicy.DESTROY`` when ``removalPolicy`` is set to ``SNAPSHOT``, ``removalPolicy`` otherwise.
         :param instances: Number of DocDB compute instances. Default: 1
+        :param instance_type: What type of instance to start for the replicas. Required for provisioned clusters, not applicable for serverless clusters. Default: None
         :param kms_key: The KMS key for storage encryption. Default: - default master key.
         :param parameter_group: The DB parameter group to associate with the instance. Default: no parameter group
         :param port: The port the DocumentDB cluster will listen on. Default: DatabaseCluster.DEFAULT_PORT
@@ -5395,6 +5652,7 @@ class DatabaseCluster(
         :param removal_policy: The removal policy to apply when the cluster and its instances are removed or replaced during a stack update, or when the stack is deleted. This removal policy also applies to the implicit security group created for the cluster if one is not supplied as a parameter. When set to ``SNAPSHOT``, the removal policy for the instances and the security group will default to ``DESTROY`` as those resources do not support the policy. Use the ``instanceRemovalPolicy`` and ``securityGroupRemovalPolicy`` to change the behavior. Default: - Retain cluster.
         :param security_group: Security group. Default: a new security group is created.
         :param security_group_removal_policy: The removal policy to apply to the cluster's security group. Cannot be set to ``SNAPSHOT``. Default: - ``RemovalPolicy.DESTROY`` when ``removalPolicy`` is set to ``SNAPSHOT``, ``removalPolicy`` otherwise.
+        :param serverless_v2_scaling_configuration: ServerlessV2 scaling configuration. When specified, the cluster will be created as a serverless cluster. Default: None
         :param storage_encrypted: Whether to enable storage encryption. Default: true
         :param storage_type: The storage type of the DocDB cluster. I/O-optimized storage is supported starting with engine version 5.0.0. Default: StorageType.STANDARD
         :param vpc_subnets: Where to place the instances within the VPC. Default: private subnets
@@ -5404,7 +5662,6 @@ class DatabaseCluster(
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = DatabaseClusterProps(
-            instance_type=instance_type,
             master_user=master_user,
             vpc=vpc,
             backup=backup,
@@ -5421,6 +5678,7 @@ class DatabaseCluster(
             instance_identifier_base=instance_identifier_base,
             instance_removal_policy=instance_removal_policy,
             instances=instances,
+            instance_type=instance_type,
             kms_key=kms_key,
             parameter_group=parameter_group,
             port=port,
@@ -5428,6 +5686,7 @@ class DatabaseCluster(
             removal_policy=removal_policy,
             security_group=security_group,
             security_group_removal_policy=security_group_removal_policy,
+            serverless_v2_scaling_configuration=serverless_v2_scaling_configuration,
             storage_encrypted=storage_encrypted,
             storage_type=storage_type,
             vpc_subnets=vpc_subnets,
@@ -5543,6 +5802,12 @@ class DatabaseCluster(
         '''The default port Document DB listens on.'''
         return typing.cast(jsii.Number, jsii.sget(cls, "DEFAULT_PORT"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="clusterEndpoint")
     def cluster_endpoint(self) -> Endpoint:
@@ -5720,6 +5985,12 @@ class DatabaseInstance(
 
         return typing.cast(IDatabaseInstance, jsii.sinvoke(cls, "fromDatabaseInstanceAttributes", [scope, id, attrs]))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="PROPERTY_INJECTION_ID")
+    def PROPERTY_INJECTION_ID(cls) -> builtins.str:
+        '''Uniquely identifies this class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "PROPERTY_INJECTION_ID"))
+
     @builtins.property
     @jsii.member(jsii_name="cluster")
     def cluster(self) -> IDatabaseCluster:
@@ -5798,6 +6069,7 @@ __all__ = [
     "IDatabaseInstance",
     "Login",
     "RotationMultiUserOptions",
+    "ServerlessV2ScalingConfiguration",
     "StorageType",
 ]
 
@@ -5830,11 +6102,13 @@ def _typecheckingstub__7db61dc80f26049d79a38255d8a0b3abaf4b5019d7cbed64c937ec0f3
     deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
     engine_version: typing.Optional[builtins.str] = None,
+    global_cluster_identifier: typing.Optional[builtins.str] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     manage_master_user_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     master_username: typing.Optional[builtins.str] = None,
     master_user_password: typing.Optional[builtins.str] = None,
     master_user_secret_kms_key_id: typing.Optional[builtins.str] = None,
+    network_type: typing.Optional[builtins.str] = None,
     port: typing.Optional[jsii.Number] = None,
     preferred_backup_window: typing.Optional[builtins.str] = None,
     preferred_maintenance_window: typing.Optional[builtins.str] = None,
@@ -5919,6 +6193,12 @@ def _typecheckingstub__a6c3f347d46adbb72bedc7428b15c6469cfe26cf4f30488e8abd2f8f2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__1df18874740f7d79670e3866720fac8967c1b52aced5a089132ee06a94fd72d2(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__03e9375b32d036932973e964a270516d21d155bd0db4369d824ccb7e7f0bdc62(
     value: typing.Optional[builtins.str],
 ) -> None:
@@ -5949,6 +6229,12 @@ def _typecheckingstub__3a1df2c9ac1f613c512469d693487a300c74230885d5e260bf5ada301
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__79c741f6d8f922d19130884d7c02ab03431fc05781cc91b8ec5ac23e2ecd06e2(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__a09b878a6d8b852d7eb17f26dcd8f718779776e12f67987303b1e944b3a40516(
     value: typing.Optional[jsii.Number],
 ) -> None:
@@ -6118,11 +6404,13 @@ def _typecheckingstub__9e1a4213f95bc5df31b056bdc5858ecdc49954b349d7a647b8775edf5
     deletion_protection: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     enable_cloudwatch_logs_exports: typing.Optional[typing.Sequence[builtins.str]] = None,
     engine_version: typing.Optional[builtins.str] = None,
+    global_cluster_identifier: typing.Optional[builtins.str] = None,
     kms_key_id: typing.Optional[builtins.str] = None,
     manage_master_user_password: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     master_username: typing.Optional[builtins.str] = None,
     master_user_password: typing.Optional[builtins.str] = None,
     master_user_secret_kms_key_id: typing.Optional[builtins.str] = None,
+    network_type: typing.Optional[builtins.str] = None,
     port: typing.Optional[jsii.Number] = None,
     preferred_backup_window: typing.Optional[builtins.str] = None,
     preferred_maintenance_window: typing.Optional[builtins.str] = None,
@@ -6404,7 +6692,6 @@ def _typecheckingstub__d7aaa09fc3d83b3aef333d99a0eb22e9b6c412979a1f20e5f22628ebd
 
 def _typecheckingstub__bb24ec128a97ca07df15f55d4e96dda851d4300951806a7a3d7f391cc4e83218(
     *,
-    instance_type: _InstanceType_f64915b9,
     master_user: typing.Union[Login, typing.Dict[builtins.str, typing.Any]],
     vpc: _IVpc_f30d5663,
     backup: typing.Optional[typing.Union[BackupProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6421,6 +6708,7 @@ def _typecheckingstub__bb24ec128a97ca07df15f55d4e96dda851d4300951806a7a3d7f391cc
     instance_identifier_base: typing.Optional[builtins.str] = None,
     instance_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     instances: typing.Optional[jsii.Number] = None,
+    instance_type: typing.Optional[_InstanceType_f64915b9] = None,
     kms_key: typing.Optional[_IKey_5f11635f] = None,
     parameter_group: typing.Optional[IClusterParameterGroup] = None,
     port: typing.Optional[jsii.Number] = None,
@@ -6428,6 +6716,7 @@ def _typecheckingstub__bb24ec128a97ca07df15f55d4e96dda851d4300951806a7a3d7f391cc
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     security_group_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    serverless_v2_scaling_configuration: typing.Optional[typing.Union[ServerlessV2ScalingConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
     storage_encrypted: typing.Optional[builtins.bool] = None,
     storage_type: typing.Optional[StorageType] = None,
     vpc_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6509,6 +6798,14 @@ def _typecheckingstub__222dd3344c65bc26a3a94843e3f6ff30239e319d6a229dd3bdf41ceb3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__db0de72551b166907369891918b0eccf227b067c44151aff0f889642ecea6a78(
+    *,
+    max_capacity: jsii.Number,
+    min_capacity: jsii.Number,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f5db9713ff81354905234a3c3ad455aeb345d40d5b2e301511a38a2fed7b672b(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -6533,7 +6830,6 @@ def _typecheckingstub__3fef762ebf4d69195051e79f76d91c6d9e93e2a84a6c1e71f7b4a0b8c
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
     *,
-    instance_type: _InstanceType_f64915b9,
     master_user: typing.Union[Login, typing.Dict[builtins.str, typing.Any]],
     vpc: _IVpc_f30d5663,
     backup: typing.Optional[typing.Union[BackupProps, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6550,6 +6846,7 @@ def _typecheckingstub__3fef762ebf4d69195051e79f76d91c6d9e93e2a84a6c1e71f7b4a0b8c
     instance_identifier_base: typing.Optional[builtins.str] = None,
     instance_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     instances: typing.Optional[jsii.Number] = None,
+    instance_type: typing.Optional[_InstanceType_f64915b9] = None,
     kms_key: typing.Optional[_IKey_5f11635f] = None,
     parameter_group: typing.Optional[IClusterParameterGroup] = None,
     port: typing.Optional[jsii.Number] = None,
@@ -6557,6 +6854,7 @@ def _typecheckingstub__3fef762ebf4d69195051e79f76d91c6d9e93e2a84a6c1e71f7b4a0b8c
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
     security_group: typing.Optional[_ISecurityGroup_acf8a799] = None,
     security_group_removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
+    serverless_v2_scaling_configuration: typing.Optional[typing.Union[ServerlessV2ScalingConfiguration, typing.Dict[builtins.str, typing.Any]]] = None,
     storage_encrypted: typing.Optional[builtins.bool] = None,
     storage_type: typing.Optional[StorageType] = None,
     vpc_subnets: typing.Optional[typing.Union[_SubnetSelection_e57d76df, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6627,3 +6925,6 @@ def _typecheckingstub__5af197dfd9513994e6eb32cf7bee6ff17fef900a5adb40b20b62ef897
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IClusterParameterGroup, IDatabaseCluster, IDatabaseInstance]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])