feat(rds): make rds secret name configurable

[hedrall]

close #8984

As suggested by @njlynch in the first issue, I added the ability to set the secret name that RDS generates.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[gitpod-io]

[mergify]

Title does not follow the guidelines of Conventional Commits. Please adjust title before merge.

[skinny85]

Looks great @hedrall ! Despite being a small change, this is actually a really subtle PR. I've gone through it, and I think I understood everything finally (it definitely took me a while!).

I left some questions - can you confirm my understanding of the code is the same as yours?

Thanks,
Adam

[skinny85]

I have to say, I find this documentation super confusing 🤨.

This is an input property, right? So either you provide the name of the Secret, or it will be generated by CloudFormation.

What does this paragraph mean?

[hedrall]

I'm sorry. I did not consider this point very deeply, and used the comments for the properties of Secret itself.

https://github.com/hedrall/aws-cdk/blob/03fba9619d7f3ad4f5a27d8123ff826a0ed26bce/packages/%40aws-cdk/aws-secretsmanager/lib/secret.ts#L33-L39

I would like to look into this more, including how it relates to the Feature flag.

[njlynch]

It's better to steal the documentation from SecretProps, rather than from ISecret.

https://github.com/hedrall/aws-cdk/blob/03fba9619d7f3ad4f5a27d8123ff826a0ed26bce/packages/%40aws-cdk/aws-secretsmanager/lib/secret.ts#L123-L129

[hedrall]

Thank you.

A name for the secret. Note that deleting secrets from SecretsManager does not happen immediately, but after a 7 to * 30 days blackout period. During that period, it is not possible to create another secret that shares the same name.

However, I just noticed that this seems to be an old specification.
I tried destroying the deployed secret and renaming the deployed secret, but in both cases the secret was deleted immediately.
I think that cloud formation use a flag like as cli 'force-delete-without-recovery’.

So, I change comment simply.
( Should I also change the comment of SecretProps? )

[skinny85]

I'm 99% sure this line is not actually needed.

@hedrall do you agree?

[hedrall]

Maybe Yes. I thought it may need to initialize and expose as a field like ‘encryptionKey’ below, so I wrote this line.

https://github.com/hedrall/aws-cdk/blob/7e5ee80ea28e4e8d123a7862f887f0f727fc011b/packages/%40aws-cdk/aws-rds/lib/props.ts#L227-L235

I not sure of any use case that uses the secretName of the object of Credentials created by fromSecret, so I will delete it now.

[skinny85]

BTW, the build is failing because of

@aws-cdk/aws-rds: /codebuild/output/src361629757/src/github.com/aws/aws-cdk/packages/@aws-cdk/aws-rds/test/cluster.test.ts
@aws-cdk/aws-rds:   13:127  error  Missing trailing comma  comma-dangle
@aws-cdk/aws-rds: ✖ 1 problem (1 error, 0 warnings)

Pull request has been modified.

[hedrall]

Thank you for all your suggestions. I’d fixed.
We hope you can confirm this again.

[skinny85]

Looks great @hedrall, thanks so much for the contribution!

[mergify]

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
• Commit ID: ca2cc88
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).