add check to prevent defining conflicting properties

aws · Aug 5, 2024 · 6f1d7d1 · 6f1d7d1
1 parent 3909d7e
commit 6f1d7d1
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/packages/aws-cdk-lib/aws-rds/lib/cluster.ts b/packages/aws-cdk-lib/aws-rds/lib/cluster.ts
@@ -1099,6 +1099,20 @@ export class DatabaseCluster extends DatabaseClusterNew {
   constructor(scope: Construct, id: string, props: DatabaseClusterProps) {
     super(scope, id, props);
 
+    if (
+      props.manageMasterUserPassword &&
+      (
+        props.credentials?.excludeCharacters ||
+        props.credentials?.password ||
+        props.credentials?.replicaRegions ||
+        props.credentials?.secret ||
+        props.credentials?.secretName ||
+        props.credentials?.usernameAsString
+      )
+    ) {
+      throw new Error('Only the `username` and `encryptionKey` credentials properties may be used when `manageMasterUserPassword` is true');
+    }
+
     let cluster: CfnDBCluster;
     if (!props.manageMasterUserPassword) {
       const credentials = renderCredentials(this, props.engine, props.credentials);