feat(docdb): add option to set the name of the generated Secret (aws#…

…17574)

fixes: aws#17572
*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

packages/@aws-cdk/aws-docdb/README.md

@@ -22,6 +22,7 @@ const cluster = new DatabaseCluster(this, 'Database', {
     masterUser: {
         username: 'myuser' // NOTE: 'admin' is reserved by DocumentDB
         excludeCharacters: '\"@/:', // optional, defaults to the set "\"@/"
+        secretName: '/myapp/mydocdb/masteruser', // optional, if you prefer to specify the secret name
     },
     instanceType: ec2.InstanceType.of(ec2.InstanceClass.R5, ec2.InstanceSize.LARGE),
     vpcSubnets: {

packages/@aws-cdk/aws-docdb/lib/cluster.ts

@@ -353,6 +353,7 @@ export class DatabaseCluster extends DatabaseClusterBase {
         username: props.masterUser.username,
         encryptionKey: props.masterUser.kmsKey,
         excludeCharacters: props.masterUser.excludeCharacters,
+        secretName: props.masterUser.secretName,
       });
     }
 

packages/@aws-cdk/aws-docdb/lib/props.ts

@@ -60,6 +60,13 @@ export interface Login {
    * @default "\"@/"
    */
   readonly excludeCharacters?: string;
+
+  /**
+   * The physical name of the secret, that will be generated.
+   *
+   * @default Secretsmanager will generate a physical name for the secret
+   */
+  readonly secretName?: string;
 }
 
 /**

packages/@aws-cdk/aws-docdb/test/cluster.test.ts

@@ -316,6 +316,27 @@ describe('DatabaseCluster', () => {
     }));
   });
 
+  test('creates a secret with secretName set', () => {
+    // GIVEN
+    const stack = testStack();
+    const vpc = new ec2.Vpc(stack, 'VPC');
+
+    // WHEN
+    new DatabaseCluster(stack, 'Database', {
+      masterUser: {
+        username: 'admin',
+        secretName: '/myapp/mydocdb/masteruser',
+      },
+      instanceType: ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE2, ec2.InstanceSize.SMALL),
+      vpc,
+    });
+
+    // THEN
+    expectCDK(stack).to(haveResourceLike('AWS::SecretsManager::Secret', {
+      Name: '/myapp/mydocdb/masteruser',
+    }));
+  });
+
   test('create an encrypted cluster with custom KMS key', () => {
     // GIVEN
     const stack = testStack();