feat(core-service): Expose deletionProtection property [CLK-270897] (#68

)

src/aurora.ts

@@ -59,6 +59,13 @@ export interface AuroraProps {
    * This also will target which database has default grants applied for users.
    */
   readonly databaseName: string;
+  /**
+   * Indicates whether the DB cluster should have deletion protection enabled.
+   *
+   * @default - true if `removalPolicy` is RETAIN, `undefined` otherwise, which will not enable deletion protection.
+   * To disable deletion protection after it has been enabled, you must explicitly set this value to `false`.
+   */
+  readonly deletionProtection?: boolean;
   /**
    * How many instances? DevOps strongly recommends at least 3 in prod environments and only 1 in dev environments.
    * @default - passthrough
@@ -324,6 +331,7 @@ export class Aurora extends Construct {
         encryptionKey,
         secretName: secretName.addPrefix(secretPrefix).pascal,
       },
+      deletionProtection: props.deletionProtection,
       engine: aws_rds.DatabaseClusterEngine.auroraPostgres({
         version,
       }),

test/aurora.test.ts

@@ -194,6 +194,12 @@ describe('Aurora', () => {
       template.resourceCountIs('Custom::AuroraActivityStream', 1);
       expect(aurora.activityStreamArn).not.toBeFalsy();
     });
+    it('deletionProtection', () => {
+      createAurora({ ...defaultAuroraProps, deletionProtection: false });
+      template.hasResourceProperties('AWS::RDS::DBCluster', {
+        DeletionProtection: false,
+      });
+    });
     it('instances', () => {
       createAurora({ ...defaultAuroraProps, instances: 12 });
       template.resourceCountIs('AWS::RDS::DBInstance', 12);